last executing test programs: 1m20.146843573s ago: executing program 1 (id=1625): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x7fff) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x9, 0x1, 0xf) socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x6, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) ioctl$auto(r2, 0x6, r1) prctl$auto(0x1000000003b, 0x1, 0x4, 0x4, 0x7) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfc(0x0, 0xffffffffffffffff) r3 = openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/error_log\x00', 0xb01, 0x0) write$auto(r3, 0x0, 0x0) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0xffc, 0x20000000007, 0x939f, 0x0, 0xee01, 0x0, 0x6, 0x3, 0x80000000000005, 0xc0f, 0x1, 0x7fd, 0x92b8, 0x7, 0x800, 0x7}) r4 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c72da808bf8d5feacf8510"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c001) write$auto(r4, &(0x7f0000000000)='-\x00', 0x2fb) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0xc5c, 0xffffff7fffff0005, 0x8) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x200007, 0x8) mmap$auto(0xfffffffffffffffe, 0x200009, 0x200000000000002, 0x48ebf, 0xffffffffffffffff, 0x300000000000) connect$auto(0x3, 0x0, 0x58) 1m16.191900791s ago: executing program 1 (id=1635): r0 = memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x5) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = memfd_create$auto(0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r2 = socket(0xa, 0x3, 0x3a) statx$auto(r1, 0x0, 0x1000, 0xbdfc, 0x0) setsockopt$auto(r2, 0x29, 0x14, 0x0, 0x56b) setsockopt$auto(r2, 0x29, 0x15, 0x0, 0x52b) fallocate$auto(0x3, 0x0, 0xe, 0x8ec5) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000000), r0) read$auto_usbdev_file_operations_usb(r0, &(0x7f0000000080)=""/168, 0xa8) mmap$auto(0x0, 0xe983, 0x3, 0x6b1, 0xffffffffffffffff, 0x8000) read$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000002b80), 0xffffffffffffffff) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) 1m14.982968462s ago: executing program 1 (id=1637): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/zram0/algorithm_params\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000000)='\"\x81=\"\xad\xff\x8d\xf9;\x18\xa4\xb0\xb4\xd9\x82=\xe1PFv\xfb&L\xeb=j\a\xf1y\xb3\"\xc0\x88\xbf\xaa\xec\"\x1cN\n\xba\xfc\xf9eW$,\x8b\x8f\x1b>\x03yg\xc2\xd9$\xe1\x9eY\xcag\xfb\xda\xcc4\x9c\xd1\x92\xbdp\x99\xc2{w\x1bx\xbcv\xf5<\xf8\x98:\xa9=tz=,\xaf\xffOV|\xc1pRa|\xca\x00\x00k$nM\x0f\xdd\xfb\xa7~\xc4\xcb\xc7\x05\xf9\xdf\xf4\x1e\x1d\x97+\v\xab\x0e', 0x40000000010) 1m14.657591589s ago: executing program 1 (id=1638): r0 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x2, 0x73) sendto$auto(r2, 0x0, 0xfdef, 0xfe80, 0x0, 0x1c) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r1) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)={0x18, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x4000000, 0x61, 0x1800000000000010, r0, 0x40000007ffc) read$auto(0xffffffffffffffff, 0x0, 0xe8) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', 0x711040, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040c4}, 0x440c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x4, 0x7, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x10001, 0x7, 0x8001, 0x7ffffff8, 0x5, 0x7, 0x5, 0x200061, 0x103}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 1m13.947757141s ago: executing program 1 (id=1639): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r1, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x0, 0x301, 0x70bd2a, 0x25dfdbfe, {}, [@IOAM6_ATTR_NS_ID={0x6, 0x1, 0xfff9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20048000) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) bpf$auto(0x1, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x81, 0xffffffffffffffff, 0x2, 0x8}, 0x100000cf) r3 = socket(0x10, 0x2, 0x0) fcntl$auto_F_SET_RW_HINT(r1, 0x40c, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x40000) recvmmsg$auto(r3, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) 1m11.47472529s ago: executing program 1 (id=1645): unshare$auto(0x40000080) unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) getsockopt$auto_SO_BSDCOMPAT(r0, 0x3, 0xe, &(0x7f00000000c0)='*\\\x00', &(0x7f0000000180)=0x40) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000040)={0x0, 0x80000006}, 0x6, 0xffffffffffffffff, 0x8000000000000, 0x4) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(r0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) close_range$auto(0xffffffffffffffff, 0xa, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x3cfb40, 0x39642ae5d3121abb) sysfs$auto(0x2, 0x23, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20201, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x29, 0x5, 0x0) r2 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) open_by_handle_at$auto(r2, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) sendfile$auto(r1, r1, 0x0, 0x2) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r3, 0x1269, 0x0) ioctl$auto_MEMGETINFO(r3, 0x80204d01, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x40200, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) 56.187218518s ago: executing program 32 (id=1645): unshare$auto(0x40000080) unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) getsockopt$auto_SO_BSDCOMPAT(r0, 0x3, 0xe, &(0x7f00000000c0)='*\\\x00', &(0x7f0000000180)=0x40) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000040)={0x0, 0x80000006}, 0x6, 0xffffffffffffffff, 0x8000000000000, 0x4) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(r0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) close_range$auto(0xffffffffffffffff, 0xa, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x3cfb40, 0x39642ae5d3121abb) sysfs$auto(0x2, 0x23, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20201, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x29, 0x5, 0x0) r2 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) open_by_handle_at$auto(r2, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) sendfile$auto(r1, r1, 0x0, 0x2) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r3, 0x1269, 0x0) ioctl$auto_MEMGETINFO(r3, 0x80204d01, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x40200, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) 27.235236347s ago: executing program 3 (id=1742): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) socket(0x10, 0x3, 0x6) lsm_get_self_attr$auto(0x65, 0x0, &(0x7f0000002440)=0x203, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/dev/cdrom/info\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x200) 27.049508085s ago: executing program 3 (id=1744): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/zram0/algorithm_params\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000000)='\"\x81=\"\xad\xff\x8d\xf9;\x18\xa4\xb0\xb4\xd9\x82=\xe1PFv\xfb&L\xeb=j\a\xf1y\xb3\"\xc0\x88\xbf\xaa\xec\"\x1cN\n\xba\xfc\xf9eW$,\x8b\x8f\x1b>\x03yg\xc2\xd9$\xe1\x9eY\xcag\xfb\xda\xcc4\x9c\xd1\x92\xbdp\x99\xc2{w\x1bx\xbcv\xf5<\xf8\x98:\xa9=tz=,\xaf\xffOV|\xc1pRa|\xca\x00\x00k$nM\x0f\xdd\xfb\xa7~\xc4\xcb\xc7\x05\xf9\xdf\xf4\x1e\x1d\x97+\v\xab\x0e', 0x40000000010) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x80) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182b02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) close_range$auto(0x2, 0x8, 0x0) socket(0x2a, 0x2, 0x1) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) write$auto(0xca, 0x0, 0x7f) setns(0xffffffffffffffff, 0x4000000) setsockopt$auto(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000001c0)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8932, &(0x7f0000000200)={'netdevsim0\x00'}) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) 26.223618208s ago: executing program 3 (id=1747): mmap$auto(0x0, 0x202000e, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000080), 0x1e1500, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) capset$auto(0x0, &(0x7f0000000000)={0x5, 0x3, 0x5c}) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x400014, 0x0, 0x8001) sendmmsg$auto(r1, &(0x7f0000000400)={{&(0x7f0000000000), 0x205aa, &(0x7f0000000100)={0x0, 0x4b}, 0x1, 0x0, 0x5, 0x1060}, 0x5}, 0x2, 0x381) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x9c00, 0x0) setns(0xffffffffffffffff, 0x0) ioctl$auto_TIOCGSERIAL2(r2, 0x541e, &(0x7f00000000c0)) r3 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) r4 = syz_clone(0x20021000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r4, 0x1, 0x7ff) sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000fedbdf09790000000400440008005201", @ANYRES32=r4, @ANYBLOB="47001a00915bf6f1d7cdf5a3ef6f16ed76a62494645aadcc071b7c7bf9f895003ddc70f1575ffc89a29a67fc6520b4641307ddb832fa8b10454ff0aaf6ed5a098bd0da48fccb8f0004006c0004004a01"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) munlock$auto(0x10000000000ffff, 0xffffffdffffffffe) r5 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mtd0ro\x00', 0x20800, 0x0) ioctl$auto_MEMGETINFO(r5, 0x80204d01, &(0x7f0000000240)={0x5, 0xfffffffe, 0x7, 0x9, 0x9, 0x3}) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r1) mlockall$auto(0x7) mmap$auto(0x0, 0x400007, 0xde, 0x9b72, 0xffffffffffffffff, 0x0) ioctl$auto_IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, 0x0) 25.811227758s ago: executing program 3 (id=1748): r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(&(0x7f0000000000)="3b50ea6b7e3e528300dadce21e9b8ac6c95dce63d9019ff0401db82a5aa63540b6516f93e4cb399e9e7f69bebdb28d589344eaa6856fd56504c238f4a9d46c2b29bfb14602bdd9e71f1e639ef8f205c443811c04595b40d1ecb58d9736d5c219e55d5c790d42b2649f14025cf077707cfbb4183f0a9518f218a2f53baebd4d3b5b1ad9034957426449775c1145dbc34aad7864c82c2f", 0x10000, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@ethernet={0x1, @multicast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) sendmsg$auto_NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r1, @ANYBLOB="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"], 0xac}, 0x1, 0x0, 0x0, 0x24000805}, 0x20044045) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r2 = socket(0x2b, 0x1, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000002180)='/dev/snd/pcmC0D0p\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x11, 0x80003, 0x300) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000002940)='/dev/fb0\x00', 0x841, 0x0) select$auto(0x5, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x948b, 0x5, 0x15f4da07, 0x9, 0x1, 0x100, 0xfffffffffffffffe, 0x1000, 0xb, 0x6, 0x0, 0xa]}, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x0, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x4a901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r3, 0x8038550a, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) sysfs$auto(0x5, 0x45, 0x800004) fsopen$auto(0x0, 0x1) r4 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r4, 0xffffffffffdffe00, 0x0) ioctl$auto(0x3, 0x40046201, 0x38) 25.281266581s ago: executing program 3 (id=1749): mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x6) mmap$auto(0x0, 0x4020009, 0xdb, 0x2000000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0xc) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setpriority$auto_PRIO_PGRP(0x1, 0x0, 0x1) mmap$auto(0x0, 0x2000a, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x27, 0x0) mmap$auto(0x8, 0x2, 0xffff, 0x18, 0xffffffffffffffff, 0x7a) r0 = fsopen$auto(0x0, 0x1) ioctl$auto_RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000000)=0x7fff) bpf$auto_BPF_LINK_DETACH(0x22, &(0x7f0000001040)=@link_update={r0, @new_prog_fd=r0, 0xfffffffd, @old_map_fd=r0}, 0x8) openat$auto_tracing_total_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/buffer_total_size_kb\x00', 0x2000, 0x0) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) adjtimex$auto(0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0) 25.099155305s ago: executing program 3 (id=1750): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/irq/8/node\x00', 0x28000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nullb0/inflight\x00', 0x0, 0x0) mmap$auto(0x0, 0x40000000020009, 0xdf, 0xeb1, r1, 0x8000) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0xffffffffffffffff, r0, 0x7) sysfs$auto(0x2, 0x4d, 0x0) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) r2 = socket(0xa, 0x5, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x10000007ff, 0x2, 0x7ff, r2, 0x1) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x1e, 0x1, 0x0, 0x4, 0x3) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xb, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x2, 0x8, 0x100000000}}) io_uring_register$auto(0x2, 0x11, &(0x7f0000000180), 0x83) pread64$auto(r0, 0x0, 0x800003, 0x270) r3 = socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) getsockopt$auto_SO_DEBUG(r0, 0x0, 0x1, &(0x7f00000000c0)='#::\\:\x00', &(0x7f0000000100)=0xffffff1e) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC1\x00', 0x800, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000000640)={{@raw=0x9, 0x801, 0xa, 0x7, "26d718b7d3ee69350e4ede7079dcb0c24c8aa1e3c7ee2e00308b8a7d74b0a707f7045e6d035b196ca83379bb", @raw=0x4}, 0xfffffffc, 0x3, 0x2, @inferred, @integer={0xa, 0x0, 0x2528}, "18a801006a0900000000000000d4bd5359eeadc8357752b72fa176254d8797cdffd024b626f54ad9d763dcdc9120af8b7c848ceb55a700"}) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(r3, 0x0, 0x80000801, 0x8741, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D0c\x00', 0x40000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_UNLINK2(r5, 0x4161, 0x0) 10.403046932s ago: executing program 0 (id=1773): mmap$auto(0x0, 0x4020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) pidfd_open$auto(0x1, 0x0) r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0c\x00', 0x20000, 0x0) timer_create$auto(0x9, 0x0, 0x0) socket(0xa, 0x1, 0x100) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) mmap$auto(0x1000000000, 0x10000040000b, 0x1000000000000df, 0x4000009b73, r2, 0x8003) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1fb, 0x7, 0xfffffffffffffffb, 0xc40, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x2, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) unshare$auto(0x40000084) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) socket(0x2a, 0x2, 0x9) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000005c0), 0xc000, 0x0) ioctl$auto_VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000600)=r0) pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\b\x06\x11\x00\x00\x00\x00?W\xff\xff\xba\xae\xb8-\x14\xe4\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf6\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9\xc5\x93\x1dD\x811\xb9_\xdd*j\xfd\xeb\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;\x9e\x83\x120\x81\x11\x9a?g`sFh\x00\x00\xda,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xdex\xd8\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/228, 0x8fdef, 0x4000000000000007) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYRESHEX=r2, @ANYRES16=r1, @ANYBLOB="0800040003"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) r4 = socket(0x10, 0x2, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/net/fib_trie\x00', 0x0, 0x0) pread64$auto(r5, &(0x7f0000000540)='veth1\x00\xe0,\x17\xa0\xf7\x89Pl\x84K?\x01\x84\xa1i\xe00\x81p\xa0U \f\xdbP`:\xe2\'\xa7\xbf\xbd\x04\x18\xad\x90I^\x99M\xe0W\x14\x11\xf4\xeb\x90:\v\xc5\x13*\xfe\x90\xb1\xa9O\xa5?\xaa\x8fTi\xd6\x88Q\xda\xca', 0x20000000003f, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f200", @ANYBLOB='.'], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x94) readv$auto(r4, &(0x7f00000000c0)={&(0x7f0000000040)="3477adf1eaab3f4e4477fe59ea613e0485b4de6860cefca58c7b62f632975abdc0c7504dc5c855f8df45b3b379318cf5c786472a2b9e4f5b9de9ffffdc383d192f07305af6742c21867acb73492eef3d8b1b1944b7f38525", 0xe6ba}, 0x0) sendmmsg$auto(r4, &(0x7f0000000640)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 9.761429692s ago: executing program 33 (id=1750): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/irq/8/node\x00', 0x28000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nullb0/inflight\x00', 0x0, 0x0) mmap$auto(0x0, 0x40000000020009, 0xdf, 0xeb1, r1, 0x8000) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0xffffffffffffffff, r0, 0x7) sysfs$auto(0x2, 0x4d, 0x0) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) r2 = socket(0xa, 0x5, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x10000007ff, 0x2, 0x7ff, r2, 0x1) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x1e, 0x1, 0x0, 0x4, 0x3) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xb, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x2, 0x8, 0x100000000}}) io_uring_register$auto(0x2, 0x11, &(0x7f0000000180), 0x83) pread64$auto(r0, 0x0, 0x800003, 0x270) r3 = socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) getsockopt$auto_SO_DEBUG(r0, 0x0, 0x1, &(0x7f00000000c0)='#::\\:\x00', &(0x7f0000000100)=0xffffff1e) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC1\x00', 0x800, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000000640)={{@raw=0x9, 0x801, 0xa, 0x7, "26d718b7d3ee69350e4ede7079dcb0c24c8aa1e3c7ee2e00308b8a7d74b0a707f7045e6d035b196ca83379bb", @raw=0x4}, 0xfffffffc, 0x3, 0x2, @inferred, @integer={0xa, 0x0, 0x2528}, "18a801006a0900000000000000d4bd5359eeadc8357752b72fa176254d8797cdffd024b626f54ad9d763dcdc9120af8b7c848ceb55a700"}) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(r3, 0x0, 0x80000801, 0x8741, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D0c\x00', 0x40000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_UNLINK2(r5, 0x4161, 0x0) 8.582732423s ago: executing program 4 (id=1777): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg1\x00', 0x4c503, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x220b02, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0xa606, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x200, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x5, 0x0, 0x6, 0x8) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0) close_range$auto(0x2, 0x8, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1f, 0x80000, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r6}, 0x6a) sendto$auto(r5, 0x0, 0x6fffff9, 0xfffffff8, &(0x7f0000000440)=@can, 0x36) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000000)="998399c06d692d") r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x8001, 0x0) write$auto(r7, &(0x7f0000000100)='d>*\xd2x\xc7\xbf\xff\x9a\xc01(\x00iM\x9c\bAa\x9e\xe98\xee\x15\xd3\xc5v\x99\f|\xe3\xbf\xd9\xf4C\x14A\xe6k\x105\xee\xc5\xaa$\x16\t?g\xb8b\x12\v*\xf9@B\xd0\xd2\x99{\x8b^\xff@\x83\x02Tvt\xc1_\x98\x9f\x16\xd5Is', 0x100000a3da) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) mlockall$auto(0x40180000) 7.873126712s ago: executing program 4 (id=1778): r0 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) lseek$auto(r0, 0x0, 0x2) unshare$auto(0x40000080) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) unshare$auto(0x6) r2 = openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) read$auto_lowpan_control_fops_6lowpan(r2, &(0x7f0000000440)=""/4096, 0x1000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r3, 0x0, 0x7, 0x4cbd5d) r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x440000, 0x0) ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000400)={r4, &(0x7f0000000140)="d3696e6b7d303a70a95b4bb882f7da76d0db8233f750d984c354490276254e28388fdab11f0e1ca45a9ee187c725e3770ba9baed8d438db04beae22c252916d4475268fd08bf3d1daab9b18dae10fe4cab44e7ae2864b29cfc8018c1e2a53c2a714f317281588f3af4252ad48893c8658ce2aa63f9553ac20507d0cd40a0a13895f9d1501e971a46d08badecda6ef61ec9a0c52df60abe0d8dfa0c4783f0f2c9f8af7689558dcc1e2eeaccdbaece3a", 0x4, &(0x7f0000000200)="f0d9256b062922", 0x2f6, &(0x7f0000000340)="24a0a6aa541fd6d19ea5f060e269918714f65e2c9148e29e9e8174cfe17705ae2aa427aa89e3335a30c761f05217287507e84f01440e806e63bef8681ccdd5af42bcac20da2d83b9aaf2e2f815d6684567a0b63dbfc427", &(0x7f00000003c0)=0xaa}) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffd, 0x8, 0x948b, 0x9, 0x15f4da07, 0x6, 0xaf38, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x800, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x80000000, 0x9, 0xffffdfffffffff81, 0x4]}, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x8, 0xa, &(0x7f0000000080)='\\),*C%$\x00', 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0) read$auto_fragmentation_threshold_ops_(r0, 0x0, 0x0) 6.410021763s ago: executing program 4 (id=1779): mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-touch8\x00', 0x80f00, 0x0) unshare$auto(0x40000080) write$auto(0xca, 0x0, 0x7d) r1 = openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, 0x0, 0x143382, 0x0) preadv$auto(r1, &(0x7f0000000140)={0x0, 0x3}, 0x5, 0x1ff, 0x81) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x101100, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0xe40, 0x0) poll$auto(&(0x7f00000001c0)={0xffffffffffffffff, 0x9, 0xa}, 0x0, 0x3fe) read$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x50, 0x20000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) prctl$auto(0x23, 0x80000000000a, 0x80000001, 0x0, 0x0) openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/environ\x00', 0x92000, 0x0) ioctl$auto(r0, 0x5646, r0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000280)="0f0bc9769f916e1475e01dcc394e4d0eb47160544a8f706acd1f638c5eda2b85bfe914a8cc830d6ab21463c1ae9561182021a76df58e4ead6a777e0d31786b1df9b27fcf2db03bc846b7af6bc1ef8d58e471776ff9497da32a6658f9774e7514cc586fe393e6c2499f970cf9ec168a9536d7c706264a2acd487d79a99376e6cc973c3cda85d54a06e57bfdf19f2288420fe95b0e2c716f435981c45afa0c7e569431e7b93cdcf5b49b70c8347f489b8d95f6cf2558cac4da0f0e33b788ef7c22697b93e353a508a0d1ee720c53d40612e8d87a060982c61dabd740b89f7ca9d1c150f4d41036233b", 0x1}, 0x3, 0x0, 0x80000000, 0x5}}, 0x8bd4, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x10, 0x3e, 0x0, 0x9) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000003f40)=""/156, 0x9c) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, 0x0, 0x80) mmap$auto(0x0, 0x4020009, 0x6, 0xeb5, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x1, 0x106) getsockopt$auto(r2, 0x0, 0x33, 0xfffffffffffffffe, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) 5.596152391s ago: executing program 0 (id=1781): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x890d, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyw0\x00', 0x103e81, 0x0) ioctl$auto_TCSBRKP2(r0, 0x5425, 0x0) socketcall$auto(0xd3a2, &(0x7f0000000140)=0x4) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x9, 0x1f, 0x940, 0x1ffde, 0x3, 0x6, 0x8000004, 0x9, 0x5, 0x0, 0x4, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x7069, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x8, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x1, 0x6, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x100000020, 0x0, 0x8000000000000001, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000000]}, 0x4b9, 0x7d) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="0600", @ANYRES16=0x0, @ANYBLOB="010025bd"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='B'], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x4000, &(0x7f0000000100)={&(0x7f0000000080), 0x96bc}, 0x2, &(0x7f0000000380), 0x7, 0x4}, 0x9}, 0x7, 0x4008) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket(0xa, 0x1, 0x84) pwrite64$auto(0xc8, 0x0, 0xedef, 0x3) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000080)='/dev/\x0e?^\xd8[\xa1~\xf5\xdfaudio1\x00\x11I\x9f\xabA\a\x1c\xc4\x06\xde@z\xe0\xf9\xc3R\"\x06a\xa7\xe5\x03\x00\x00', 0x100000a3d9) ioctl$auto_SOUND_PCM_READ_RATE(r2, 0x80045002, &(0x7f0000000000)="2949347450b906748771d5a0f2883310456ad34af1dbeb9eb4f8d4c76d68cdfc33522d1d6333cbcc28ab9b8fb69e7068709decf72b584f42b34f6e6fa161455b7c35516dbde6ed2f6ee5b36aac9c05923cac64640392188e0d20327783b09a27ad179f025147ac1f91d6c365741efd8b6511e21864e5da") r4 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48101, 0x0) write$auto(r4, &(0x7f0000000040)='#[-#\x00', 0x4) close_range$auto(r4, r2, 0x0) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) landlock_create_ruleset$auto(&(0x7f0000000000)={0xff, 0x2, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r5, 0x0) open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) 5.233734402s ago: executing program 2 (id=1782): close_range$auto(0x0, 0xfffffffffffff001, 0x2) r0 = socket(0xa, 0x2, 0x0) socket(0xa, 0x3, 0x87) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000000c0), r0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x1e, 0x0, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000005b40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000005b00)={&(0x7f0000001900)={0x41dc, r1, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@HWSIM_ATTR_FLAGS={0x8, 0x4, 0x1}, @HWSIM_ATTR_RADIO_ID={0x8, 0xa, 0x5}, @HWSIM_ATTR_MULTI_RADIO={0x4}, @HWSIM_ATTR_RX_RATE={0x8, 0x5, 0x6}, @HWSIM_ATTR_RX_RATE={0x8, 0x5, 0x7a60}, @HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}, @HWSIM_ATTR_PMSR_RESULT={0x4198, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x2d00, 0x5, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x7b, 0x1, "74fcfde25d0b5c92c472441245887302837bc8f219cc413f8596c8470ce6615afaf019d8862116f815476c64c9fef46a4cda184a924fa7d1ebb33077b8c26f8d90f0cd3aa1568ffb0601072ba580bef5c5f3a81ba821faf7d747780bca92fac7500606f64bbb653589d3932b9e9b4bc1f4651c07fcec39"}]}, {0x22a0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x1004, 0x1, "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"}, @NL80211_PMSR_PEER_ATTR_RESP={0x3c, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x309c79fc}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0xf}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0xfffffffffffffffa}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x3}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x40000000}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x5a, 0x1, "8430eb5e3376dc4b737169705c17d8d566972693e52dd7610a26e90f025e6cf8cc41891ef7061c6b751fe0621e296a092905827304d97fcc77ccda4a48feb1897c274d7af78e83379d907a80050b13876b9930d97f29"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x1004, 0x1, "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"}, @NL80211_PMSR_PEER_ATTR_ADDR={0xc9, 0x1, "a4e7b9e49875dba0614a8c73e726de79ecd0181dcbef0707135316b488d09f41bc0eba495955c3647f64f8d4926e2ddc1a0ce6a8a220948cde5b97402742e7a1f96cb8a3d7689d26894f381cc06048a8a51ecbdb1213e20edfbefa7cc5043a81446a8c2f4e0f884397e1f132dbf71a1f19c624e5dee4aa7b551241f67b181373d7b6fe00acb43ef73a8ac3c41f5f13a24edaf504e62d953ae161f446d2ea002f2d13ba9e0c3f79e66354dde431cef68fef61574bf0bb00d58938c624f49ee231e7d7e373f5"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x28, 0x1, "d29036912f4b46f9525fdf6d76d911c5c9a3aed4915c1536343100b7a993469b4eac300e"}, @NL80211_PMSR_PEER_ATTR_ADDR={0xf4, 0x1, "f63ef5e57a3b0d90f07712b9898c653a3c9337af077dad1605aefcb290df85e59141d8e890ba6aab59f4087ba96a02c77b79201f142aa8b06584ac7f238d728ea0af6877c6ec2e25878722ef95ad422c78ece592c49195e5a1c22d74921701361eae22ae3c40300eab01d3ec7bedb6171720e2497a62a4cebb0d52e2702ec3553370e5876c7f080ed845af0284afe90d714c09cb23d5b27a7747ce718af9175198a207a958be3438f09935f22440551e960b57e154ef6ecc336a8f244939c2a9738877e0a92e8afc750b1d38b898aa38b425be1145195444530b2695d451031e1c6d4b086819f2020463215ca5c8b0a9"}, @NL80211_PMSR_PEER_ATTR_RESP={0x14, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x7}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x7fffffff}]}]}, {0x47c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xf6, 0x1, "416860bdc11faa7fb3c5277aff744bfbb361e59df2acb3103de75608351b756ff0e45fa22fab335c43fa73699a53d17d63200fbee05a180963c7eb3e930e7467af31909db6a5517b7b3c227763cef720fe0a54d6666c05436667142e77b07711bf0f6d3baf2757ec24eda30598b9a61e1f34355f2eeb756dfcc9619dba87181997f049804011763cb560bce92d510aa1fd2a646263fcf56219413b292dd180eebf2c57e2757f9580983e53bdff526900a5eb16dbd1b57307b5aff9b17887d132b61f58d1db0a82179425e35d9e778ee2307bd1533c946d58c7e2dc93d5feb75d13a7d6cb2d385215a7b1fb51aaafde3e2e49"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x8d, 0x1, "d04bc05ec270958f6ce64385ea523481ce5a029e1e502a10c8cba127e1b6be8db19a9d0aedf4b6e8ef2fe5097083e3453f892e505a95fbe3e6caf6256bd25908eda010a99dcb538826f767ab0d8d8b2628ac8edd668404b35c94abcbaa4696c88e34c5aedc9d0a8b58ae11d2837d71b33f19f7f3b35d41b9eaa7a027a55b804cf59f960e0760341f3f"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x54, 0x1, "f91a7cedee104927c8810eb636ae6599fe5fa4f6692c59c9f6878feff6f7489eb78f8ed4522b63ef2e116d689713832a965384b9417417698ae2ee6579809f70805a971f2774cebb42173e8bd8daeae2"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x4a, 0x1, "abe8dbecfb9ea706b60cb426386dd5ab26965a64bd0094006528eb4a99d53ba7c845ea96109e9ffb8f402018f594f9206be41d064d90720fe7c7409f07129b48560550cfd911"}, @NL80211_PMSR_PEER_ATTR_ADDR={0xb8, 0x1, "466fee0d0c102434f798fefc728746669c2ff601038963317e462ff1f57477b591c47500b352d778cffc891198cbf5c76e7eee4c7676461cbd516deb55c64a8db5aec5232899bded3d4b047e378eae9b96212d0f29cd329d4a49cfd3d9b7c34768083161d9de98404ffd29ba20e8b3c105bb80fc84b0d7f912ac6cdcffe1143a811c59372379c800dc665562fc8c041fa3bc4b02a275af3e7ea818be6b704f83f78952fa1a3588be184e9464f60c6d4abb35d9ae"}, @NL80211_PMSR_PEER_ATTR_ADDR={0xc2, 0x1, "cbea512697278280d7e4504de606505d02a4fb1925f561629ba62b155686bc9f751496e6c1299e57d58d11c9ead5adeb6f546e96f5d012a60d81f29e9b3d5f1f6c7c91fe5c668264b012d63835cba12d4d4fe97ed1ac90da44ecc56924cb0ac3c5374f882ff761edd9a6e042b8ace10a083ca77e45c275ef86e59643bebebc54e7db461a9a4fca0d9c3f76873f12bee43323a9e377e52ac09cb9da1189edd247bc87617cce38c9e77cc20a0cb3fc936fb5a12de2a4645712a6fdb562058f"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x4a, 0x1, "106050e3210500380d6ba5de57b373c86f490030f9f741afd17712aeead3d3b0cc1e179770a9445c5f56dea64e733fb765ef1a0591b32f3a75c607785674b5ef27ea38a94523"}, @NL80211_PMSR_PEER_ATTR_RESP={0x88, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x8}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x5}, @NL80211_PMSR_RESP_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0x54, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_MCS={0x5, 0x2, 0xe}, @HWSIM_RATE_INFO_ATTR_EHT_RU_ALLOC={0x5, 0xb, 0x4}, @HWSIM_RATE_INFO_ATTR_HE_RU_ALLOC={0x5, 0x8, 0xe}, @HWSIM_RATE_INFO_ATTR_NSS={0x5, 0x4, 0x80}, @HWSIM_RATE_INFO_ATTR_MCS={0x5}, @HWSIM_RATE_INFO_ATTR_EHT_GI={0x5, 0xa, 0xf}, @HWSIM_RATE_INFO_ATTR_HE_RU_ALLOC={0x5, 0x8, 0x10}, @HWSIM_RATE_INFO_ATTR_EHT_RU_ALLOC={0x5}, @HWSIM_RATE_INFO_ATTR_FLAGS={0x5, 0x1, 0xe}, @HWSIM_RATE_INFO_ATTR_N_BOUNDED_CH={0x5, 0x9, 0x7e}]}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0xb}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x7}]}]}]}]}, {0x40c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x102, 0x1, "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"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x75, 0x1, "c949d9ff1f289999069312eeca50444a0993b73d9f44584166c8c2031a203b4aff07295b670c26aeb2a99d0e4b9728730c52be1c8bd98d7b7ea61fbb5813aef1367290f1a280e5947f2e3219ec6f577f9d8e9f2fba144abb06b1a62a728d195550a709cf6755e09f491ccd975722bfcfe7"}, @NL80211_PMSR_PEER_ATTR_RESP={0xc0, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x5}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x1}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x81}, @NL80211_PMSR_RESP_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE={0xc, 0x11, 0x5}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_LCI={0xd, 0x13, '/dev/kvm\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc, 0xe, 0x5e}]}, @NL80211_PMSR_TYPE_FTM={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE={0xc, 0x11, 0x1ff}, @NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0x3c, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_FLAGS={0x5, 0x1, 0x3}, @HWSIM_RATE_INFO_ATTR_N_BOUNDED_CH={0x5, 0x9, 0x1}, @HWSIM_RATE_INFO_ATTR_EHT_GI={0x5, 0xa, 0x8}, @HWSIM_RATE_INFO_ATTR_EHT_RU_ALLOC={0x5, 0xb, 0x50}, @HWSIM_RATE_INFO_ATTR_HE_GI={0x5, 0x6, 0xff}, @HWSIM_RATE_INFO_ATTR_BW={0x5, 0x5, 0x10}, @HWSIM_RATE_INFO_ATTR_MCS={0x5, 0x2, 0x8}]}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0xe}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0xffff}]}]}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x9}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x10c, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_DATA={0xd4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0xd, 0x14, '/dev/kvm\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0x5}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_LCI={0x8, 0x13, '}$/$'}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0x1}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0xff}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0x2}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc, 0xe, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x8001}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0x9, 0x14, '\xaa\xaa\xaa\xaa\xaa'}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0xfa}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc, 0xe, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0x2}]}]}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x19}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x63b}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0xfe61}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x7b, 0x1, "b510ef676b77236b3a31e24e90455671830eb0c6b4c501b70f9a3cff701aed57592564045049909f474f38f7c8dfbc4a3065ead6c6f2633afbfe55390697ff518228c1b3ad2b3fd59d97a7f53e94575f1e328540a57b23bee67ef5466a5ac93d95a274470b8d6ccfb9a518508de4300d1a88b0ba615061"}, @NL80211_PMSR_PEER_ATTR_RESP={0x18, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x3}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x8}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x2c, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x9}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x2c}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0xffffffff}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x3}]}]}, {0x154, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x150, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0xa}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0x5, 0x14, '{'}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0x5}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x8}]}]}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x2}, @NL80211_PMSR_RESP_ATTR_DATA={0xd8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0x1c, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_HE_RU_ALLOC={0x5, 0x8, 0x87}, @HWSIM_RATE_INFO_ATTR_EHT_RU_ALLOC={0x5, 0xb, 0x7}, @HWSIM_RATE_INFO_ATTR_LEGACY={0x6}]}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0x800}, @NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0x1c, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_HE_GI={0x5, 0x6, 0x6}, @HWSIM_RATE_INFO_ATTR_HE_RU_ALLOC={0x5, 0x8, 0xf}, @HWSIM_RATE_INFO_ATTR_HE_GI={0x5, 0x6, 0x7}]}, @NL80211_PMSR_FTM_RESP_ATTR_LCI={0x4}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0xf}, @NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0x14, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_HE_RU_ALLOC={0x5, 0x8, 0x4}, @HWSIM_RATE_INFO_ATTR_N_BOUNDED_CH={0x5, 0x9, 0x2}]}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc, 0xe, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0xc5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0xfff}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0xd}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0x10001}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x2}]}]}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x8}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x3}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x80}, @NL80211_PMSR_RESP_ATTR_DATA={0x4}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x1494, 0x5, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x5b, 0x1, "72dbf87ea37b0eaa5125898286b21e64e13ef624ba2ae52c7a391c8d559b59675b4bb83f32eb1553b37495b5c0bda1bd1f8df2bcb954ce95959d1135490f07e576a4a8c0bd600a2f9c6c2bbd5366e4b04fc23a067f1a6d"}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x1c, 0x1, "b143a326d03c40717f9adb950c529ab694b99c6c3ca68c21"}]}, {0x12e0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x85, 0x1, "69dd25783e04a56719d896a72684b81aaaf83d8f62cd87f39a701db4ee62356d499ee38be103bf20c6c5521454b5d098335524918c7a0d02f83448c3cd0b7100a09adc153923c472a1802fd8154d3af84600dde09a0522f1081e6158dc59ce82e2b0e26308792254caaf9b19d5a67dfe2f1a2403c864b2d29cb7735c07a689f7f3"}, @NL80211_PMSR_PEER_ATTR_ADDR={0xaf, 0x1, "bb980606e0d86b19e58bb2118a99ab43172130cc3638843fcb4f01906c57d0b9154a8f46e5de7bf3358a33ae3826f3e14cfb8ecd8f41a633a622acaaa442fa2e1089575180724ef37849658166819fc85b16a44f187813cc03df74bdf9d6666e83285a6b9d7ab0ccaf339469781c87fe0e35fd33b42a7c84e6a3f4de65096c730a2661e98633ff7efd2cad0b09d6d085f95de29b8e113b2632e4ce37e2d10ce76e104e32eb35cc1c867793"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x1f, 0x1, "278260b726e6908a26aea271049c737144774258ab1cee0e809db6"}, @NL80211_PMSR_PEER_ATTR_RESP={0x180, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x4cc041cd}, @NL80211_PMSR_RESP_ATTR_DATA={0x160, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0xd}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0xf3eb}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x427}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0xd, 0x14, '/dev/kvm\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0xc4}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x1}, @NL80211_PMSR_FTM_RESP_ATTR_LCI={0x9, 0x13, '\xaa\xaa\xaa\xaa\xaa'}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_LCI={0xd, 0x13, '/dev/kvm\x00'}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0xf9}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0x8000}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x10}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_LCI={0x9, 0x13, '\xaa\xaa\xaa\xaa\xaa'}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0x54, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_MCS={0x5, 0x2, 0x6}, @HWSIM_RATE_INFO_ATTR_EHT_RU_ALLOC={0x5, 0xb, 0xb}, @HWSIM_RATE_INFO_ATTR_NSS={0x5, 0x4, 0x53}, @HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0xfb}, @HWSIM_RATE_INFO_ATTR_HE_GI={0x5, 0x6, 0xe}, @HWSIM_RATE_INFO_ATTR_HE_RU_ALLOC={0x5, 0x8, 0x8}, @HWSIM_RATE_INFO_ATTR_MCS={0x5, 0x2, 0x8}, @HWSIM_RATE_INFO_ATTR_HE_RU_ALLOC={0x5, 0x8, 0x3}, @HWSIM_RATE_INFO_ATTR_HE_RU_ALLOC={0x5, 0x8, 0x6b}, @HWSIM_RATE_INFO_ATTR_FLAGS={0x5, 0x1, 0x4}]}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5}, @NL80211_PMSR_FTM_RESP_ATTR_LCI={0x4}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0xf8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x5}]}]}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x6}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x1004, 0x1, "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"}]}, {0x130, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x2c, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x2}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x1}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x4}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xf3, 0x1, "eeb4b828bdb3a670181cb24d831833e6b70c0b05da2fb33659466fcc1d7e8a8bf04ac9b195d60a21338ac83036055bcbf094c8df51579dbb57623cdeefca279996f2d9d1d143ec0b955a7f1a7fba0fd871f97e7b0c045dc01b42f5a93da546d03db0da3da3bcea3e40d87f70a1c1034661e338d7962362c95ece52cc2ffda6895c5482dda6696f8df857aba7d8cd1d182aa289cdb09ce9724f32efd5c503bbd56d1213b8d1c0a4f947ae320ecadbfa14be5d84a9a6d5decefc76a81ba2b7a507bc7714041923b26d1ef4117d7ee0a6bce762a9c77ee73b493c5f3fb0ebcc13397f625602b76df1b3cf009af194cb31"}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, "d0d299e9cd10"}]}]}]}, @HWSIM_ATTR_RX_RATE={0x8, 0x5, 0x1}]}, 0x41dc}, 0x1, 0x0, 0x0, 0x4}, 0x4) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) connect$auto(0x3, &(0x7f00000018c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfa}, 0x55) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x420009, 0xe2, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x240202, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r0) ioctl$auto_KVM_CREATE_VM(r2, 0x4048aecb, 0x0) 4.803961241s ago: executing program 2 (id=1783): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/devices/virtual/tty/ttyq0/dev\x00', 0x6c0540, 0x0) (async) ioctl$auto_RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, &(0x7f0000000440)=0x77b) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x22902, 0x0) (async) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r1 = socketcall$auto(0x5, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r3 = socket(0xa, 0x2, 0x0) setsockopt$auto_SO_WIFI_STATUS(r3, 0x0, 0x29, &(0x7f00000001c0)='/sys/kernel/\xfb\xff\xff?g/block/\x96\x06\x00\x00\x00\x00\x00\x00\x1e\xda\x13:t\x003\xfb\xbcEH5\x9f\xa1\x85\xec\x8d?tK\x8c\x13\xb1i\x1a4\x8c&\x98\x9fau[\xb6Z\r+\"\xa4\x95e\xae|N\f\xae,\xad\xe1OPxj.g\x92U\xa4N\xd8D{\x95\x19E\x01\x9a\xd7\xc1\xbe\xaa\x94\xb4\xac\xbcQ\'n\x9b+)|CJ\xd0\xa8[\\\xa8k\x8f\xb6l\x14\x1ce\xa6 \x11%\xe37}\xa6n\xef\xea\x7f[\xc9\x1b\xa3\x154f\xeb2t\x86A\x9d\x93\xf2\xba\xd8\xac{F\xc2@(\x10', 0x3ff) (async) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) (async, rerun: 32) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000002c0)={{0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000180)="cb7978ababe605edf078e6f2726ae03e663c080c0d6c169eec931ca2ea579299bf44495b1fe078f2e9c5586aa59caa813549", 0x800000001}, 0xfffffffffffffff7, 0x0, 0x7f}, 0x800}, 0xc, 0x7) (async, rerun: 32) ioctl$auto(0x3, 0xae41, r1) (async) ioctl$auto_KVM_GET_MSRS(r0, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) 4.463001677s ago: executing program 2 (id=1784): r0 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x2, 0x0) unshare$auto(0x40000080) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer2\x00', 0x2800, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x8, 0x1, 0x0, 0x1, 0x7) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) setpriority$auto(0x2, 0x0, 0x80000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) socket(0x10, 0x1, 0xfffffffe) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd70090000004a2003000004000008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x4000011) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000080), 0x20802, 0x0) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="8b632abd7000fedbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, 0x0, 0x8006, 0x0) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFSD_CMD_POOL_MODE_SET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010025bd7000fceadf25080000000700010021250000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4800) msgctl$auto_MSG_STAT(0x8001, 0xb, &(0x7f0000001600)={{0x4, 0xee01, 0x0, 0x3, 0xb, 0x3, 0xcd8e}, &(0x7f0000000280)=0xf8, &(0x7f00000002c0), 0x8, 0x356, 0x3, 0x800000000000000, 0x81, 0x3, 0xffff, 0x1000, @raw=0x389}) write$auto_proc_uid_map_operations_base(r2, 0x0, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x2}, 0x58) pwrite64$auto(r0, &(0x7f0000000340)='\v\f_U\xe0w\xbf\xe3\xb8\x92\xac.X_|\xc8R\x99!\xd2\xfb\xfe\xa7\xe4&#sn\x91p\xe6\x1eRN8\x99C\x05s\x1cJ\x99\x1d[s\x15z\x87\xe1\xb6\xba#7*/\x13\x00:\x00!\rW6\x00\x00\x00\x00\xb4\x1avP\x00\xc5\xc7\xf1\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\x9c\xa2\xa7\xd1\xdd\x85\as*l\x9c\xa1\xf7\x8c\xa1\xfb\xb5\b\x00\x00\x00\x00\x00\x00\x00\xb4\xfb\x99\x00\xed\v\xfa\xaa[\f\xa2\xea40\r\xcd\x86\x9d\xac\xde\xec\x85\x93\x93\xd3G\x8c\x9b\x9d\a\xbf\x1f\x95n\x94\xbc[\xb5\xfa\xe0t\\\xbc\x11\x94\x0fF\xf9\xac\vv\xb5\xc3\xd9j\x05\boe\xa5\xc2l\x05\xbcTu\x18\xda\xf2#\x80\xd5\xb4\xf54\x04M\xc8G\x0e/\xae\xab\x9b\x14\x8f\xeb\x19\xc80Dq\x9f\f\x106\x1b\xa7\xe6jU\x00X\x8e\xe4\v\xbb\x91\a\x14\x8c\xc9z\'a\xdd\x89<\xf5\xeeC\xb4\xa7\x976\xfcO\x17\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd3\xe9\xc31\xd7\xa7T^\x9fs\xec_Nl/+\x9a\xbb\xb3[\xcb\xf8\x87\x18\xe6,\xad_\xfe~M\x80X\x1ak7g\xff\xc8', 0x52, 0x522c) 4.305030117s ago: executing program 0 (id=1785): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000080), 0x1e1500, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) capset$auto(0x0, &(0x7f0000000000)={0x5, 0x3, 0x5c}) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x400014, 0x0, 0x8001) sendmmsg$auto(r1, &(0x7f0000000400)={{&(0x7f0000000000), 0x205aa, &(0x7f0000000100)={0x0, 0x4b}, 0x1, 0x0, 0x5, 0x1060}, 0x5}, 0x2, 0x381) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x9c00, 0x0) setns(0xffffffffffffffff, 0x0) ioctl$auto_TIOCGSERIAL2(r2, 0x541e, &(0x7f00000000c0)) r3 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) r4 = syz_clone(0x20021000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r4, 0x1, 0x7ff) sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000fedbdf09790000000400440008005201", @ANYRES32=r4, @ANYBLOB="47001a00915bf6f1d7cdf5a3ef6f16ed76a62494645aadcc071b7c7bf9f895003ddc70f1575ffc89a29a67fc6520b4641307ddb832fa8b10454ff0aaf6ed5a098bd0da48fccb8f0004006c0004004a01"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) munlock$auto(0x10000000000ffff, 0xffffffdffffffffe) r5 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mtd0ro\x00', 0x20800, 0x0) ioctl$auto_MEMGETINFO(r5, 0x80204d01, &(0x7f0000000240)={0x5, 0xfffffffe, 0x7, 0x9, 0x9, 0x3}) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r1) mlockall$auto(0x7) mmap$auto(0x0, 0x400007, 0xde, 0x9b72, 0xffffffffffffffff, 0x0) ioctl$auto_IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, 0x0) 3.247373767s ago: executing program 0 (id=1786): fsconfig$auto_SHMEM_HUGE_DENY(0xffffffffffffffff, 0x0, &(0x7f0000000140)='\\!:\x00', 0x0, 0xffffffffffffffff) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) fcntl$auto_F_SET_RW_HINT(r0, 0x40c, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14fe02, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000000), 0x7112}, 0x8) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x40, &(0x7f00000001c0)={0x1200, 0x5, 0x10000, 0x9, 0x5b77b906, 0x0, 0xffffffffffffffff, [0xcfa, 0xe5d, 0x5], {0x8001, 0x38, 0x9, 0x4, 0x4, 0x3, 0x3ff, 0x3, 0xffff}, {0x20000000, 0x9, 0x7, 0x2, 0x2, 0xffff13a7, 0x0, 0x449e, 0x1}}) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0xf, 0x0, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x2, 0xc, 0x5a}) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x800}, 0x5, 0x0, 0x1, 0x2}, 0x46}, 0x4, 0x100) r3 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r3, 0xffffffffffdffe00, &(0x7f0000000140)) r4 = epoll_create$auto(0x8800001) pipe2$auto(0x0, 0x0) epoll_ctl$auto(r4, 0x1, r1, 0x0) 2.467753501s ago: executing program 2 (id=1787): r0 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) lseek$auto(r0, 0x0, 0x2) unshare$auto(0x40000080) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) unshare$auto(0x6) read$auto_lowpan_control_fops_6lowpan(0xffffffffffffffff, &(0x7f0000000440)=""/4096, 0x1000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r2, 0x0, 0x7, 0x4cbd5d) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x440000, 0x0) ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000400)={r3, &(0x7f0000000140)="d3696e6b7d303a70a95b4bb882f7da76d0db8233f750d984c354490276254e28388fdab11f0e1ca45a9ee187c725e3770ba9baed8d438db04beae22c252916d4475268fd08bf3d1daab9b18dae10fe4cab44e7ae2864b29cfc8018c1e2a53c2a714f317281588f3af4252ad48893c8658ce2aa63f9553ac20507d0cd40a0a13895f9d1501e971a46d08badecda6ef61ec9a0c52df60abe0d8dfa0c4783f0f2c9f8af7689558dcc1e2eeaccdbaece3a", 0x4, &(0x7f0000000200)="f0d9256b062922", 0x2f6, &(0x7f0000000340)="24a0a6aa541fd6d19ea5f060e269918714f65e2c9148e29e9e8174cfe17705ae2aa427aa89e3335a30c761f05217287507e84f01440e806e63bef8681ccdd5af42bcac20da2d83b9aaf2e2f815d6684567a0b63dbfc427", &(0x7f00000003c0)=0xaa}) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffd, 0x8, 0x948b, 0x9, 0x15f4da07, 0x6, 0xaf38, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x800, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x80000000, 0x9, 0xffffdfffffffff81, 0x4]}, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x8, 0xa, &(0x7f0000000080)='\\),*C%$\x00', 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0) read$auto_fragmentation_threshold_ops_(r0, 0x0, 0x0) 2.45211452s ago: executing program 4 (id=1788): prctl$auto_PR_GET_UNALIGN(0x5, 0x29, 0x8000, 0x3, 0x7fff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) lseek$auto(0x3, 0x2, 0x4) mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000) mmap$auto(0x4, 0x2020009, 0x3, 0x15, 0xfffffffffffffffa, 0x8000) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x40400, 0x0) socket(0x10, 0x2, 0xc) openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/hci4/force_wakeup\x00', 0x97253d5c24a95d78, 0x0) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) clone$auto(0x20003b11, 0x8, 0x0, 0x0, 0x7) r2 = openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) pread64$auto(r2, &(0x7f00000001c0)='\x00', 0xca31, 0x4) write$auto(r1, 0x0, 0xe) 1.746419717s ago: executing program 0 (id=1789): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/zram0/algorithm_params\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000000)='\"\x81=\"\xad\xff\x8d\xf9;\x18\xa4\xb0\xb4\xd9\x82=\xe1PFv\xfb&L\xeb=j\a\xf1y\xb3\"\xc0\x88\xbf\xaa\xec\"\x1cN\n\xba\xfc\xf9eW$,\x8b\x8f\x1b>\x03yg\xc2\xd9$\xe1\x9eY\xcag\xfb\xda\xcc4\x9c\xd1\x92\xbdp\x99\xc2{w\x1bx\xbcv\xf5<\xf8\x98:\xa9=tz=,\xaf\xffOV|\xc1pRa|\xca\x00\x00k$nM\x0f\xdd\xfb\xa7~\xc4\xcb\xc7\x05\xf9\xdf\xf4\x1e\x1d\x97+\v\xab\x0e', 0x40000000010) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x80) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182b02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) close_range$auto(0x2, 0x8, 0x0) socket(0x2a, 0x2, 0x1) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) write$auto(0xca, 0x0, 0x7f) setsockopt$auto(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000001c0)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8932, &(0x7f0000000200)={'netdevsim0\x00'}) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) 1.523867759s ago: executing program 4 (id=1790): mmap$auto(0x1c00000000, 0x20009, 0x800000000000003, 0xeb1, 0x401, 0x8000) setitimer$auto(0x2, &(0x7f00000002c0)={{0x82, 0x400}, {0x2, 0x8}}, 0x0) setrlimit$auto(0x0, &(0x7f0000000040)={0x3346, 0x3}) timer_create$auto(0x3, 0x0, 0x0) timer_settime$auto(0x0, 0x8, &(0x7f00000000c0)={{0x8}, {0x0, 0x87}}, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/bus/pci/00/01.3\x00', 0x88a00, 0x0) syz_clone3(&(0x7f00000015c0)={0x2000000, &(0x7f0000000040), &(0x7f00000012c0), &(0x7f0000000100), {0x27}, &(0x7f0000001500)=""/173, 0xfffffffffffffddd, &(0x7f0000000200)=""/4096, 0x0}, 0x58) write$auto(r0, 0x0, 0x9) copy_file_range$auto(r0, 0xfffffffffffffffd, r0, &(0x7f0000000080)=0x7, 0x8, 0x7fff) mmap$auto(0x0, 0x4, 0x4000002000e3, 0x1c, 0x4, 0x300000000004) r1 = openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_score_adj\x00', 0xd0043, 0x0) mmap$auto(0x100000001, 0x202000b, 0x8, 0x8011, r1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0x61ad, 0x100003fc) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000001) prctl$auto_PR_GET_NO_NEW_PRIVS(0x27, 0x4, 0x6bd, 0xff, 0x4) mbind$auto(0x2000, 0x2091cf, 0x4, 0x0, 0x6, 0x2) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) mmap$auto(0x2, 0xf, 0x9f, 0x9b72, r2, 0x8000) prctl$auto_PR_GET_NO_NEW_PRIVS(0x27, 0x8000000000000001, 0x400, 0xffff, 0x0) r3 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = io_uring_setup$auto(0xa, 0x0) io_uring_register$auto_IORING_REGISTER_EVENTFD(r4, 0x4, 0x0, 0x7) fsopen$auto(&(0x7f0000000100)='/\'\xb6\x9e\x1fI\xc1proc/self/\xe0\xdfaps_r', 0x4) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x5, 0x2) write$auto(0x3, 0x0, 0x7fffffff) shutdown$auto(0x200000003, 0x2) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 761.237184ms ago: executing program 2 (id=1791): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) r0 = socket(0xa, 0x3, 0x20005) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0x2000fff}, 0x1, 0x0, 0x7, 0x0) setsockopt$auto(r0, 0x29, 0x48, 0x0, 0x808) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x3, 0x6) socketpair$auto(0xb, 0x9, 0x800, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x240202, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time\x00') socket(0x2, 0x3, 0xa) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x501, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x1, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x40000, 0x0) ioctl$auto(r1, 0x560a, r1) 579.874069ms ago: executing program 0 (id=1792): set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = socket(0x11, 0x5, 0x9000300) sendfile$auto(0x1, r0, 0x0, 0x8fb5) r1 = fcntl$auto(r0, 0x408, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/memory.force_empty\x00', 0xa001, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000003900)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000038c0)={&(0x7f0000003940)={0x6d8, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x8}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x6}, @NL80211_ATTR_PMKID={0x5d, 0x55, "35c5339d74c8ae0a0c0d5a2b31ae166115674549d3af9da051886a90ce8620dd5745829fb57f8961f8be1e5ab04049d8c42bf569a2827003fe080525db652571f6b147aa30031a540335586c905dcaf3e795cb2ebec9f07416"}, @NL80211_ATTR_STA_FLAGS2={0xd7, 0x43, "b33c07ef55bdc3078fe3b87ae57bb50fd7815e60f9f9e87dede18e637370c29d02c9e390e1046a27cabe1ea8f46ea63a04c4b62de70e601216e91683264a81ebba15332d9b3acf882c0e8b139994b2784bc0398d3e2ac9ccb2a9ea4078b4112c0879171fe03a44b3a24f1dec2534f8c96d0247ac6a954047c37b1c020fbcef12733c869c1d0b1df2cdb8129a7b418b5f995691bf0174fa4cbcb4e6718445e5c2883f1cb7e994fe1d1010e3b9701d893722660149aa50091ae0234235fb5d8e2a3918e8038db19af3f91055a21ff346c84c6057"}, @NL80211_ATTR_FRAME_MATCH={0x32, 0x5b, "87b88eb575ec2a68e054b3ba25983fed784a150adadbc988bc99db76533985f869a77454d123a175ccf626b1520f"}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x29, 0xbe, "c66d72baf535ca44681db7b5f31e7926cda449e256d9ad2e0cc69cdb22697024ead8c2f45e"}, @NL80211_ATTR_TX_RATES={0x513, 0x5a, 0x0, 0x1, [@generic="9277e89d0d98aaa6a3651abcf01886e1116b9593979cbfd3dc4a8302ea84c3c339792790517c71676141a9d5d8fab43510aad3e8df64198a79fa3213a854f713559c7bf0da287b145745069d7cf9703734a4587e59e39083b487d53b4ccad3cd1707b94080e0bbfa505bb9fbcd0e8148d54d7a", @nested={0x148, 0x64, 0x0, 0x1, [@generic="7abd8fae0ea11bdf933c08cbd0cee2d2bcbb70ac641abd5afdf8911f8971fa3535b4c798a8fde69a6102bf972e053c93c5e8e1a79b41c9f6bbf803f848dd8dc9d37f9ba962e96614de5d1508b90e59616693af8263ea4e90221b1bf491bd249a9ab86e83a14a376423029f65ce5ebd21ec0e5fafd6f1c18bdeae8598771e81dc88318a0d5b159e14c9e3b382f4cf", @nested={0x4, 0x3a}, @generic="25b4c9bb3fb7df0bace94ef33b9a620952810fd35026e4b1afe8b58487d2fbaf64efcc89dd9be8bff24bff82ad83276764e69b00bf482b8457923c8d8c820b44968bf4bb09b9", @typed={0x14, 0x108, 0x0, 0x0, @ipv6=@loopback}, @nested={0x4, 0x63}, @typed={0x8, 0x14b, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x4c, 0x133, 0x0, 0x0, @binary="d6fbe33e36c57ae2debf86b5933bd69d1f769e8eef2a36c66b401dca700e29983176fe5fc258d4e46c5b1b7faeea3ffba2f30fbb1005e507864768f69755164bd761fa8917b74574"}]}, @nested={0x4f, 0x105, 0x0, 0x1, [@nested={0x4, 0xfa}, @nested={0x4, 0x32}, @typed={0x14, 0x79, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0x115, 0x0, 0x0, @u32=0x8001}, @generic="8be641056e6d3effecd607f51d457b4d2146a5d7fae7f1b70da15f223819dc51fe1fea", @nested={0x4, 0x100}]}, @nested={0x1bc, 0x88, 0x0, 0x1, [@typed={0x8, 0xe4, 0x0, 0x0, @fd=r0}, @generic="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", @generic="f0d20b23ea99139456b4881e7c2a87c023984c73b23864d44fad98da443bf1b55580e1e235bed718f73f5b45c48cc1f30090ca78b0d7b3b411fc9a75c398cef4", @typed={0xc, 0x152, 0x0, 0x0, @u64=0x8}, @nested={0x3b, 0xc1, 0x0, 0x1, [@typed={0x8, 0x120, 0x0, 0x0, @fd=r1}, @generic="8884eb6122179ea0250fc3f81aabe405cc5781c16d1c0015a919e85cac590328e8247266b064debdb5fb5a1d741140"]}, @generic="07cdd181c6e58f2957cdf72006d039cce8d32585e27030d87871095083117fcc02b4d45ba44de5", @nested={0x4, 0xe3}]}, @generic="b306c437fd27526b974fd67ff9cba7493c0a4385fdbaafd70c51a65c6faeafd691f419df9ea0856f8fe24e6224fd00d4137ca689bdfbe087fa9bcfd1c10b6e810cf1f2d5950f4ae1bae2b9066b4683c6ec29e18fc22a3b2e9b43df1ca2a9923d81a1c9e9109c652c06de3c262e2f63d8ea604970dffcd9b8b8c07371ac1ef0976dba3fe74f1805e58953c9b2b367", @generic="7145fb4011733d09723b06bd70bae9498696f70bde3792521a6c1d06396adaf3520c6cbd61b439a5741e2eaa5ff016e7c9cc3c286f554476319b0b0e18feb70621dd374bd7c629faad65f65c823a498fefbd5d2bece0f558655495a5f67656540870be2ac286e87018d6dd4cdc08c89dfdf6aeb80647ad2e994c93ece86811862953f083ec098d89f316aa00eceffb8c0d5898012b5b47ad888773ea32688073a6fc90e092b4fb1442c0ac49771cd039a26f23409ef3163d1e56"]}]}, 0x6d8}, 0x1, 0x0, 0x0, 0x2040044}, 0x40000) r3 = getuid() bpf$auto_BPF_LINK_DETACH(0x22, &(0x7f00000003c0)=@task_fd_query={0x0, r0, 0x7, 0x6, 0x1ff, 0x7, r2, 0x5, 0x8}, 0x7) pidfd_send_signal$auto_PIDFD_SIGNAL_PROCESS_GROUP(0xffffffffffffffff, 0x9, &(0x7f0000000500)={@siginfo_0_0={0x1, 0x1000, 0x0, @_kill={r4, r3}}}, 0x4) ioprio_set$auto(0x9, r3, 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) 520.795196ms ago: executing program 4 (id=1793): r0 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x2, 0x0) unshare$auto(0x40000080) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer2\x00', 0x2800, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x8, 0x1, 0x0, 0x1, 0x7) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) setpriority$auto(0x2, 0x0, 0x80000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) socket(0x10, 0x1, 0xfffffffe) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd70090000004a2003000004000008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x4000011) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000080), 0x20802, 0x0) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="8b632abd7000fedbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, 0x0, 0x8006, 0x0) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFSD_CMD_POOL_MODE_SET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010025bd7000fceadf25080000000700010021250000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4800) msgctl$auto_MSG_STAT(0x8001, 0xb, &(0x7f0000001600)={{0x4, 0xee01, 0x0, 0x3, 0xb, 0x3, 0xcd8e}, &(0x7f0000000280)=0xf8, &(0x7f00000002c0), 0x8, 0x356, 0x3, 0x800000000000000, 0x81, 0x3, 0xffff, 0x1000, @raw=0x389}) write$auto_proc_uid_map_operations_base(r2, 0x0, 0x0) prctl$auto(0x4430, 0x1, 0x4, 0x400000005, 0x400000000007) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x2}, 0x58) pwrite64$auto(r0, &(0x7f0000000340)='\v\f_U\xe0w\xbf\xe3\xb8\x92\xac.X_|\xc8R\x99!\xd2\xfb\xfe\xa7\xe4&#sn\x91p\xe6\x1eRN8\x99C\x05s\x1cJ\x99\x1d[s\x15z\x87\xe1\xb6\xba#7*/\x13\x00:\x00!\rW6\x00\x00\x00\x00\xb4\x1avP\x00\xc5\xc7\xf1\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\x9c\xa2\xa7\xd1\xdd\x85\as*l\x9c\xa1\xf7\x8c\xa1\xfb\xb5\b\x00\x00\x00\x00\x00\x00\x00\xb4\xfb\x99\x00\xed\v\xfa\xaa[\f\xa2\xea40\r\xcd\x86\x9d\xac\xde\xec\x85\x93\x93\xd3G\x8c\x9b\x9d\a\xbf\x1f\x95n\x94\xbc[\xb5\xfa\xe0t\\\xbc\x11\x94\x0fF\xf9\xac\vv\xb5\xc3\xd9j\x05\boe\xa5\xc2l\x05\xbcTu\x18\xda\xf2#\x80\xd5\xb4\xf54\x04M\xc8G\x0e/\xae\xab\x9b\x14\x8f\xeb\x19\xc80Dq\x9f\f\x106\x1b\xa7\xe6jU\x00X\x8e\xe4\v\xbb\x91\a\x14\x8c\xc9z\'a\xdd\x89<\xf5\xeeC\xb4\xa7\x976\xfcO\x17\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd3\xe9\xc31\xd7\xa7T^\x9fs\xec_Nl/+\x9a\xbb\xb3[\xcb\xf8\x87\x18\xe6,\xad_\xfe~M\x80X\x1ak7g\xff\xc8', 0x52, 0x522c) 0s ago: executing program 2 (id=1794): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x7fff) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x9, 0x1, 0xf) socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x6, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) ioctl$auto_VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x5) ioctl$auto(0xffffffffffffffff, 0x6, r1) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x4, 0x7) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfc(0x0, 0xffffffffffffffff) r2 = openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/error_log\x00', 0xb01, 0x0) write$auto(r2, 0x0, 0x0) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0xffc, 0x20000000007, 0x939f, 0x0, 0xee01, 0x0, 0x6, 0x3, 0x80000000000005, 0xc0f, 0x1, 0x7fd, 0x92b8, 0x7, 0x800, 0x7}) r3 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c72da808bf8d5feacf8510"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c001) write$auto(r3, &(0x7f0000000000)='-\x00', 0x2fb) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0xc5c, 0xffffff7fffff0005, 0x8) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x200007, 0x8) mmap$auto(0xfffffffffffffffe, 0x200009, 0x200000000000002, 0x48ebf, 0xffffffffffffffff, 0x300000000000) connect$auto(0x3, 0x0, 0x58) kernel console output (not intermixed with test programs): resumed [ 301.334644][ T8607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.616'. [ 301.403897][ T8607] netlink: 326 bytes leftover after parsing attributes in process `syz.0.616'. [ 301.839718][ T8616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.619'. [ 301.861150][ T8616] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 301.875317][ T8615] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 301.962602][ T8615] sctp: [Deprecated]: syz.1.618 (pid 8615) Use of struct sctp_assoc_value in delayed_ack socket option. [ 301.962602][ T8615] Use struct sctp_sack_info instead [ 302.315195][ T8613] vivid-008: ================= START STATUS ================= [ 302.347907][ T8613] vivid-008: ================== END STATUS ================== [ 303.454219][ T8636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.627'. [ 303.479308][ T8636] netlink: 326 bytes leftover after parsing attributes in process `syz.1.627'. [ 303.703795][ T8641] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 303.851920][ T8645] netlink: 28 bytes leftover after parsing attributes in process `syz.1.628'. [ 304.971254][ T29] audit: type=1800 audit(1843104533.480:26): pid=8663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.632" name="dbroot" dev="configfs" ino=22681 res=0 errno=0 [ 306.460488][ T8677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.636'. [ 306.608950][ T8677] netlink: 326 bytes leftover after parsing attributes in process `syz.2.636'. [ 306.878534][ T8680] openvswitch: netlink: IP tunnel attribute has 24 unknown bytes. [ 307.655846][ T8692] cifs: Unknown parameter 'no+ 1§• Ö`ÑørêsFn)ÈøaõH†šÄ¿¡h`àØÝë9k¤A}€žŠ1\D@‹Ç.ÁäZÔCg^‚' [ 308.950762][ T8711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.645'. [ 308.978206][ T8711] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 308.988350][ T8713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.647'. [ 309.035680][ T8713] netlink: 326 bytes leftover after parsing attributes in process `syz.2.647'. [ 309.870842][ T8734] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 310.012755][ T8737] netlink: 28 bytes leftover after parsing attributes in process `syz.3.652'. [ 310.800225][ T8723] Process accounting resumed [ 310.962496][ T8747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.657'. [ 310.972318][ T8747] FAULT_INJECTION: forcing a failure. [ 310.972318][ T8747] name failslab, interval 1, probability 0, space 0, times 0 [ 310.990788][ T8747] CPU: 1 UID: 0 PID: 8747 Comm: syz.2.657 Tainted: G L syzkaller #0 PREEMPT(full) [ 310.990831][ T8747] Tainted: [L]=SOFTLOCKUP [ 310.990841][ T8747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 310.990857][ T8747] Call Trace: [ 310.990867][ T8747] [ 310.990878][ T8747] dump_stack_lvl+0x100/0x190 [ 310.990916][ T8747] should_fail_ex.cold+0x5/0xa [ 310.990955][ T8747] should_failslab+0xc2/0x120 [ 310.991002][ T8747] __kmalloc_cache_noprof+0x7a/0x6f0 [ 310.991044][ T8747] ? ovs_dp_cmd_new+0x1af/0xdf0 [ 310.991090][ T8747] ovs_dp_cmd_new+0x1af/0xdf0 [ 310.991132][ T8747] ? trace_kmalloc+0xe3/0x110 [ 310.991170][ T8747] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 310.991207][ T8747] ? __nla_parse+0x40/0x60 [ 310.991252][ T8747] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 310.991301][ T8747] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 310.991357][ T8747] genl_family_rcv_msg_doit+0x214/0x300 [ 310.991414][ T8747] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 310.991459][ T8747] ? genl_get_cmd+0x3e7/0x760 [ 310.991509][ T8747] ? bpf_lsm_capable+0x9/0x10 [ 310.991540][ T8747] ? security_capable+0x80/0x260 [ 310.991586][ T8747] ? ns_capable+0xd2/0xf0 [ 310.991625][ T8747] genl_rcv_msg+0x560/0x800 [ 310.991675][ T8747] ? __pfx_genl_rcv_msg+0x10/0x10 [ 310.991723][ T8747] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 310.991775][ T8747] netlink_rcv_skb+0x159/0x420 [ 310.991817][ T8747] ? __pfx_genl_rcv_msg+0x10/0x10 [ 310.991863][ T8747] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 310.991916][ T8747] ? netlink_deliver_tap+0x1ae/0xcc0 [ 310.991961][ T8747] genl_rcv+0x28/0x40 [ 310.992010][ T8747] netlink_unicast+0x585/0x850 [ 310.992058][ T8747] ? __pfx_netlink_unicast+0x10/0x10 [ 310.992112][ T8747] netlink_sendmsg+0x8b0/0xda0 [ 310.992161][ T8747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.992200][ T8747] ? __import_iovec+0x1d2/0x640 [ 310.992236][ T8747] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 310.992287][ T8747] ____sys_sendmsg+0x9e1/0xb70 [ 310.992326][ T8747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.992370][ T8747] ? __pfx_____sys_sendmsg+0x10/0x10 [ 310.992430][ T8747] ___sys_sendmsg+0x190/0x1e0 [ 310.992477][ T8747] ? __pfx____sys_sendmsg+0x10/0x10 [ 310.992569][ T8747] __sys_sendmsg+0x170/0x220 [ 310.992605][ T8747] ? __pfx___sys_sendmsg+0x10/0x10 [ 310.992656][ T8747] ? rcu_is_watching+0x12/0xc0 [ 310.992699][ T8747] do_syscall_64+0x10b/0xf80 [ 310.992741][ T8747] ? clear_bhb_loop+0x40/0x90 [ 310.992778][ T8747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.992808][ T8747] RIP: 0033:0x7fd66719ce59 [ 310.992832][ T8747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.992858][ T8747] RSP: 002b:00007fd667fd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.992886][ T8747] RAX: ffffffffffffffda RBX: 00007fd667415fa0 RCX: 00007fd66719ce59 [ 310.992904][ T8747] RDX: 0000000002000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 310.992921][ T8747] RBP: 00007fd667fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 310.992958][ T8747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.992973][ T8747] R13: 00007fd667416038 R14: 00007fd667415fa0 R15: 00007ffc046a4b98 [ 310.993019][ T8747] [ 312.455479][ T8774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.662'. [ 312.580977][ T8771] zswap: compressor not available [ 312.599895][ T8774] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 314.218560][ T8800] netlink: 12 bytes leftover after parsing attributes in process `syz.0.668'. [ 314.375195][ T8801] netlink: 326 bytes leftover after parsing attributes in process `syz.0.668'. [ 317.450286][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.456784][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.574952][ T8840] FAULT_INJECTION: forcing a failure. [ 317.574952][ T8840] name failslab, interval 1, probability 0, space 0, times 0 [ 317.629306][ T8840] CPU: 0 UID: 0 PID: 8840 Comm: syz.1.675 Tainted: G L syzkaller #0 PREEMPT(full) [ 317.629356][ T8840] Tainted: [L]=SOFTLOCKUP [ 317.629366][ T8840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 317.629382][ T8840] Call Trace: [ 317.629392][ T8840] [ 317.629404][ T8840] dump_stack_lvl+0x100/0x190 [ 317.629445][ T8840] should_fail_ex.cold+0x5/0xa [ 317.629485][ T8840] should_failslab+0xc2/0x120 [ 317.629522][ T8840] __kmalloc_cache_noprof+0x7a/0x6f0 [ 317.629568][ T8840] ? __do_sys_fanotify_init+0x608/0xe80 [ 317.629612][ T8840] __do_sys_fanotify_init+0x608/0xe80 [ 317.629651][ T8840] do_syscall_64+0x10b/0xf80 [ 317.629692][ T8840] ? clear_bhb_loop+0x40/0x90 [ 317.629730][ T8840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.629763][ T8840] RIP: 0033:0x7f5b26d9ce59 [ 317.629786][ T8840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.629816][ T8840] RSP: 002b:00007f5b27caf028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 317.629846][ T8840] RAX: ffffffffffffffda RBX: 00007f5b27016090 RCX: 00007f5b26d9ce59 [ 317.629865][ T8840] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 317.629883][ T8840] RBP: 00007f5b26e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 317.629901][ T8840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.629918][ T8840] R13: 00007f5b27016128 R14: 00007f5b27016090 R15: 00007ffe5e0fff58 [ 317.629966][ T8840] [ 317.981410][ T8842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.677'. [ 318.023918][ T8842] netlink: 326 bytes leftover after parsing attributes in process `syz.0.677'. [ 318.229515][ T8845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.678'. [ 318.269003][ T8845] i: entered promiscuous mode [ 319.023729][ T8869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.683'. [ 319.061588][ T8869] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 319.137619][ T8873] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 319.733146][ T8880] netlink: 12 bytes leftover after parsing attributes in process `syz.2.687'. [ 319.800351][ T8880] netlink: 326 bytes leftover after parsing attributes in process `syz.2.687'. [ 320.934524][ T8901] vivid-008: ================= START STATUS ================= [ 320.942900][ T8901] vivid-008: ================== END STATUS ================== [ 321.855194][ T8922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.696'. [ 321.869084][ T8922] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 321.962016][ T8925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.695'. [ 321.979449][ T8925] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 322.248020][ T8927] capability: warning: `syz.2.697' uses 32-bit capabilities (legacy support in use) [ 324.973759][ T8961] vivid-008: ================= START STATUS ================= [ 325.044536][ T8961] vivid-008: ================== END STATUS ================== [ 325.321677][ T8972] netlink: 12 bytes leftover after parsing attributes in process `syz.3.706'. [ 325.420977][ T8972] netlink: 326 bytes leftover after parsing attributes in process `syz.3.706'. [ 325.530854][ T8979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.707'. [ 325.566300][ T8979] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 326.200101][ T8983] zswap: compressor not available [ 326.998016][ T8983] zswap: compressor not available [ 327.213091][ T9007] nfs4: Unknown parameter 'ECÞHš];^‘ÌYµÙ‰ÜZL‘`š~^g ¨' [ 327.288603][ T9003] Process accounting paused [ 327.728641][ T9020] netlink: zone id is out of range [ 327.739106][ T9020] netlink: zone id is out of range [ 327.758960][ T9020] netlink: zone id is out of range [ 327.775108][ T9020] netlink: zone id is out of range [ 327.782100][ T9020] netlink: zone id is out of range [ 327.788186][ T9020] netlink: zone id is out of range [ 327.801062][ T9020] netlink: zone id is out of range [ 327.834449][ T9020] netlink: zone id is out of range [ 327.844409][ T9020] netlink: zone id is out of range [ 327.858964][ T9024] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 327.892007][ T9024] pci 0000:00:01.3: PCI INT A: no GSI [ 328.522020][ T9031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.719'. [ 330.403001][ T9059] Process accounting paused [ 330.458917][ T9063] bridge0: port 3(gretap0) entered blocking state [ 330.465757][ T9063] bridge0: port 3(gretap0) entered disabled state [ 330.509347][ T9063] gretap0: entered allmulticast mode [ 330.567961][ T9063] gretap0: entered promiscuous mode [ 331.467047][ T9066] vivid-008: ================= START STATUS ================= [ 331.483225][ T9066] vivid-008: ================== END STATUS ================== [ 331.750693][ T9068] Process accounting paused [ 333.086309][ T9103] phram: not enough arguments [ 334.057644][ T29] audit: type=1800 audit(1843104562.581:27): pid=9128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.743" name="dbroot" dev="configfs" ino=24964 res=0 errno=0 [ 336.223671][ T9160] (9160) used greatest stack depth: 19720 bytes left [ 336.694297][ T9170] zswap: compressor not available [ 336.937452][ T9179] zswap: compressor not available [ 338.639354][ T9215] zswap: compressor not available [ 340.041610][ T9244] FAULT_INJECTION: forcing a failure. [ 340.041610][ T9244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.056560][ T9244] CPU: 1 UID: 0 PID: 9244 Comm: syz.3.769 Tainted: G L syzkaller #0 PREEMPT(full) [ 340.056603][ T9244] Tainted: [L]=SOFTLOCKUP [ 340.056613][ T9244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 340.056627][ T9244] Call Trace: [ 340.056636][ T9244] [ 340.056646][ T9244] dump_stack_lvl+0x100/0x190 [ 340.056684][ T9244] should_fail_ex.cold+0x5/0xa [ 340.056721][ T9244] _copy_to_user+0x32/0xd0 [ 340.056754][ T9244] simple_read_from_buffer+0xcb/0x170 [ 340.056793][ T9244] proc_fail_nth_read+0x1af/0x230 [ 340.056840][ T9244] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 340.056889][ T9244] ? rw_verify_area+0xce/0x6d0 [ 340.056918][ T9244] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 340.056963][ T9244] vfs_read+0x1e4/0xb30 [ 340.057002][ T9244] ? __pfx_vfs_read+0x10/0x10 [ 340.057033][ T9244] ? __fget_files+0x215/0x3d0 [ 340.057077][ T9244] ? __fget_files+0x21f/0x3d0 [ 340.057132][ T9244] ksys_read+0x12a/0x250 [ 340.057165][ T9244] ? __pfx_ksys_read+0x10/0x10 [ 340.057201][ T9244] ? rcu_is_watching+0x12/0xc0 [ 340.057242][ T9244] do_syscall_64+0x10b/0xf80 [ 340.057285][ T9244] ? clear_bhb_loop+0x40/0x90 [ 340.057321][ T9244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.057350][ T9244] RIP: 0033:0x7f5b2695d68e [ 340.057374][ T9244] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 340.057399][ T9244] RSP: 002b:00007f5b27901fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 340.057427][ T9244] RAX: ffffffffffffffda RBX: 00007f5b279026c0 RCX: 00007f5b2695d68e [ 340.057445][ T9244] RDX: 000000000000000f RSI: 00007f5b279020a0 RDI: 0000000000000004 [ 340.057461][ T9244] RBP: 00007f5b27902090 R08: 0000000000000000 R09: 0000000000000000 [ 340.057477][ T9244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.057493][ T9244] R13: 00007f5b26c16038 R14: 00007f5b26c15fa0 R15: 00007ffc957e2af8 [ 340.057533][ T9244] [ 340.893711][ T9249] netlink: 206 bytes leftover after parsing attributes in process `syz.2.768'. [ 341.565249][ T9248] Process accounting paused [ 341.637430][ T9265] zswap: compressor not available [ 343.068089][ T9287] netlink: 12 bytes leftover after parsing attributes in process `syz.3.779'. [ 343.137960][ T9287] netlink: 326 bytes leftover after parsing attributes in process `syz.3.779'. [ 343.306964][ T9294] netlink: 12 bytes leftover after parsing attributes in process `syz.3.780'. [ 343.369349][ T9294] netlink: 326 bytes leftover after parsing attributes in process `syz.3.780'. [ 343.642640][ T9305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.784'. [ 343.654413][ T9305] net_ratelimit: 49 callbacks suppressed [ 343.654435][ T9305] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 344.227885][ T9326] bridge0: port 3(gretap0) entered blocking state [ 344.248757][ T9326] bridge0: port 3(gretap0) entered disabled state [ 344.276973][ T9326] gretap0: entered allmulticast mode [ 344.302857][ T9326] gretap0: entered promiscuous mode [ 344.619920][ T9332] netlink: 12 bytes leftover after parsing attributes in process `syz.1.789'. [ 344.681998][ T9332] netlink: 326 bytes leftover after parsing attributes in process `syz.1.789'. [ 344.830365][ T9337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.791'. [ 344.892964][ T9337] netlink: 326 bytes leftover after parsing attributes in process `syz.1.791'. [ 346.617629][ T9364] zswap: compressor not available [ 346.873737][ T9342] zswap: compressor not available [ 346.991899][ T9342] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 348.053304][ T9387] zswap: compressor not available [ 348.761546][ T9377] Process accounting resumed [ 348.870752][ T9401] bridge0: port 3(gretap0) entered blocking state [ 348.890096][ T9401] bridge0: port 3(gretap0) entered disabled state [ 348.905173][ T9401] gretap0: entered allmulticast mode [ 348.919734][ T9401] gretap0: entered promiscuous mode [ 350.969496][ T9446] zswap: compressor not available [ 352.752129][ T9465] netlink: 12 bytes leftover after parsing attributes in process `syz.0.823'. [ 352.814946][ T9466] netlink: 326 bytes leftover after parsing attributes in process `syz.0.823'. [ 353.428120][ T9433] Process accounting resumed [ 353.613836][ T9484] netlink: 12 bytes leftover after parsing attributes in process `syz.3.827'. [ 353.714756][ T9484] netlink: 326 bytes leftover after parsing attributes in process `syz.3.827'. [ 354.240507][ T9475] sg_read: process 785 (syz.1.824) changed security contexts after opening file descriptor, this is not allowed. [ 355.923601][ T9511] FAULT_INJECTION: forcing a failure. [ 355.923601][ T9511] name fail_futex, interval 1, probability 0, space 0, times 1 [ 355.974918][ T9511] CPU: 1 UID: 0 PID: 9511 Comm: syz.1.833 Tainted: G L syzkaller #0 PREEMPT(full) [ 355.974948][ T9511] Tainted: [L]=SOFTLOCKUP [ 355.974954][ T9511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 355.974964][ T9511] Call Trace: [ 355.974971][ T9511] [ 355.974978][ T9511] dump_stack_lvl+0x100/0x190 [ 355.975004][ T9511] should_fail_ex.cold+0x5/0xa [ 355.975031][ T9511] get_futex_key+0x1d2/0x1510 [ 355.975054][ T9511] ? __pfx_get_futex_key+0x10/0x10 [ 355.975080][ T9511] futex_wake+0xea/0x530 [ 355.975104][ T9511] ? do_raw_spin_lock+0x128/0x260 [ 355.975126][ T9511] ? __pfx_futex_wake+0x10/0x10 [ 355.975147][ T9511] ? do_timer_create+0xe73/0x1480 [ 355.975168][ T9511] ? rcu_is_watching+0x12/0xc0 [ 355.975190][ T9511] ? _raw_spin_unlock_irq+0x23/0x50 [ 355.975215][ T9511] ? lockdep_hardirqs_on+0x78/0x100 [ 355.975241][ T9511] ? _raw_spin_unlock_irq+0x2e/0x50 [ 355.975264][ T9511] ? do_timer_create+0x746/0x1480 [ 355.975287][ T9511] do_futex+0x32b/0x350 [ 355.975307][ T9511] ? __pfx_do_futex+0x10/0x10 [ 355.975333][ T9511] __x64_sys_futex+0x34f/0x4d0 [ 355.975354][ T9511] ? __pfx___x64_sys_timer_create+0x10/0x10 [ 355.975378][ T9511] ? __pfx___x64_sys_futex+0x10/0x10 [ 355.975402][ T9511] ? rcu_is_watching+0x12/0xc0 [ 355.975427][ T9511] do_syscall_64+0x10b/0xf80 [ 355.975452][ T9511] ? clear_bhb_loop+0x40/0x90 [ 355.975474][ T9511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.975493][ T9511] RIP: 0033:0x7f5b26d9ce59 [ 355.975508][ T9511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.975524][ T9511] RSP: 002b:00007f5b27cd00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 355.975542][ T9511] RAX: ffffffffffffffda RBX: 00007f5b27015fa8 RCX: 00007f5b26d9ce59 [ 355.975558][ T9511] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5b27015fac [ 355.975575][ T9511] RBP: 00007f5b27015fa0 R08: 0000000000000001 R09: 0000000000000000 [ 355.975592][ T9511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.975607][ T9511] R13: 00007f5b27016038 R14: 00007ffe5e0ffe70 R15: 00007ffe5e0fff58 [ 355.975633][ T9511] [ 356.416013][ T9514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.834'. [ 356.448531][ T9514] netlink: 326 bytes leftover after parsing attributes in process `syz.1.834'. [ 357.160181][ T9533] FAULT_INJECTION: forcing a failure. [ 357.160181][ T9533] name failslab, interval 1, probability 0, space 0, times 0 [ 357.199468][ T9533] CPU: 0 UID: 0 PID: 9533 Comm: syz.1.841 Tainted: G L syzkaller #0 PREEMPT(full) [ 357.199515][ T9533] Tainted: [L]=SOFTLOCKUP [ 357.199525][ T9533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 357.199547][ T9533] Call Trace: [ 357.199557][ T9533] [ 357.199569][ T9533] dump_stack_lvl+0x100/0x190 [ 357.199607][ T9533] should_fail_ex.cold+0x5/0xa [ 357.199646][ T9533] ? lsm_blob_alloc+0x68/0x90 [ 357.199685][ T9533] should_failslab+0xc2/0x120 [ 357.199721][ T9533] __kmalloc_noprof+0xe0/0x850 [ 357.199749][ T9533] ? trace_kmalloc+0xe3/0x110 [ 357.199788][ T9533] lsm_blob_alloc+0x68/0x90 [ 357.199837][ T9533] security_sk_alloc+0x2d/0x290 [ 357.199888][ T9533] sk_prot_alloc+0x12a/0x2a0 [ 357.199932][ T9533] sk_alloc+0x36/0xe80 [ 357.199964][ T9533] mctp_pf_create+0xe8/0x360 [ 357.200011][ T9533] __sock_create+0x339/0x860 [ 357.200061][ T9533] __sys_socket+0x14d/0x260 [ 357.200104][ T9533] ? __pfx___sys_socket+0x10/0x10 [ 357.200148][ T9533] ? ksys_write+0x1ac/0x250 [ 357.200192][ T9533] __x64_sys_socket+0x72/0xb0 [ 357.200230][ T9533] ? lockdep_hardirqs_on+0x78/0x100 [ 357.200270][ T9533] do_syscall_64+0x10b/0xf80 [ 357.200311][ T9533] ? clear_bhb_loop+0x40/0x90 [ 357.200347][ T9533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.200378][ T9533] RIP: 0033:0x7f5b26d9ce59 [ 357.200402][ T9533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.200430][ T9533] RSP: 002b:00007f5b27caf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 357.200458][ T9533] RAX: ffffffffffffffda RBX: 00007f5b27016090 RCX: 00007f5b26d9ce59 [ 357.200477][ T9533] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002d [ 357.200494][ T9533] RBP: 00007f5b26e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 357.200512][ T9533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 357.200529][ T9533] R13: 00007f5b27016128 R14: 00007f5b27016090 R15: 00007ffe5e0fff58 [ 357.200568][ T9533] [ 357.761952][ T29] audit: type=1800 audit(1843104586.303:28): pid=9540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.843" name="discovery_nqn" dev="configfs" ino=27916 res=0 errno=0 [ 357.911427][ T9546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.845'. [ 357.984324][ T9530] Process accounting resumed [ 358.029677][ T9547] netlink: 326 bytes leftover after parsing attributes in process `syz.3.845'. syzkaller syzkaller login: [ 359.253572][ T9565] zswap: compressor not available [ 359.467975][ T9580] vivid-008: ================= START STATUS ================= [ 359.529379][ T9580] vivid-008: ================== END STATUS ================== [ 361.056212][ T9599] netlink: 48 bytes leftover after parsing attributes in process `syz.2.856'. [ 361.096697][ T9602] netlink: 342 bytes leftover after parsing attributes in process `syz.0.857'. [ 361.970888][ T9606] Process accounting resumed [ 362.064979][ T9620] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 364.283799][ T9675] blktrace: Concurrent blktraces are not allowed on sg0 [ 365.367980][ T9693] FAULT_INJECTION: forcing a failure. [ 365.367980][ T9693] name failslab, interval 1, probability 0, space 0, times 0 [ 365.451115][ T9693] CPU: 1 UID: 0 PID: 9693 Comm: syz.1.880 Tainted: G L syzkaller #0 PREEMPT(full) [ 365.451158][ T9693] Tainted: [L]=SOFTLOCKUP [ 365.451166][ T9693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 365.451179][ T9693] Call Trace: [ 365.451190][ T9693] [ 365.451197][ T9693] dump_stack_lvl+0x100/0x190 [ 365.451223][ T9693] should_fail_ex.cold+0x5/0xa [ 365.451257][ T9693] should_failslab+0xc2/0x120 [ 365.451289][ T9693] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 365.451329][ T9693] ? __d_alloc+0x34/0xa40 [ 365.451359][ T9693] __d_alloc+0x34/0xa40 [ 365.451387][ T9693] d_alloc_pseudo+0x1c/0xc0 [ 365.451405][ T9693] alloc_file_pseudo+0xcf/0x230 [ 365.451436][ T9693] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 365.451471][ T9693] __shmem_file_setup+0x205/0x460 [ 365.451499][ T9693] ? __pfx___shmem_file_setup+0x10/0x10 [ 365.451528][ T9693] ? vm_area_alloc+0x1f/0x160 [ 365.451558][ T9693] shmem_zero_setup+0x96/0x1b0 [ 365.451582][ T9693] __mmap_region+0x24e9/0x2da0 [ 365.451615][ T9693] ? __pfx___mmap_region+0x10/0x10 [ 365.451657][ T9693] ? do_raw_spin_lock+0x128/0x260 [ 365.451683][ T9693] ? __lock_acquire+0x4a5/0x2630 [ 365.451702][ T9693] ? do_raw_spin_unlock+0x145/0x1e0 [ 365.451734][ T9693] ? find_held_lock+0x2b/0x80 [ 365.451766][ T9693] ? rcu_is_watching+0x12/0xc0 [ 365.451798][ T9693] ? mark_held_locks+0x40/0x70 [ 365.451817][ T9693] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 365.451909][ T9693] ? rcu_is_watching+0x12/0xc0 [ 365.451942][ T9693] mmap_region+0x35d/0x620 [ 365.451960][ T9693] ? rcu_is_watching+0x12/0xc0 [ 365.451982][ T9693] ? __pfx_mmap_region+0x10/0x10 [ 365.452005][ T9693] ? cap_mmap_addr+0x4b/0x120 [ 365.452033][ T9693] ? bpf_lsm_mmap_addr+0x9/0x30 [ 365.452052][ T9693] ? security_mmap_addr+0x71/0x1e0 [ 365.452073][ T9693] ? __get_unmapped_area+0x255/0x3e0 [ 365.452100][ T9693] do_mmap+0xc63/0x12f0 [ 365.452126][ T9693] ? __pfx_do_mmap+0x10/0x10 [ 365.452149][ T9693] ? __pfx_down_write_killable+0x10/0x10 [ 365.452173][ T9693] vm_mmap_pgoff+0x29e/0x470 [ 365.452201][ T9693] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 365.452226][ T9693] ? do_futex+0x192/0x350 [ 365.452247][ T9693] ? __pfx_do_futex+0x10/0x10 [ 365.452271][ T9693] ksys_mmap_pgoff+0xe4/0x610 [ 365.452294][ T9693] ? __x64_sys_futex+0x358/0x4d0 [ 365.452317][ T9693] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 365.452348][ T9693] ? xfd_validate_state+0x129/0x190 [ 365.452370][ T9693] ? ksys_write+0x1ac/0x250 [ 365.452395][ T9693] __x64_sys_mmap+0x125/0x190 [ 365.452418][ T9693] do_syscall_64+0x10b/0xf80 [ 365.452445][ T9693] ? clear_bhb_loop+0x40/0x90 [ 365.452468][ T9693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.452487][ T9693] RIP: 0033:0x7f5b26d9ce59 [ 365.452503][ T9693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.452520][ T9693] RSP: 002b:00007f5b27c6d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 365.452538][ T9693] RAX: ffffffffffffffda RBX: 00007f5b27016270 RCX: 00007f5b26d9ce59 [ 365.452550][ T9693] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 365.452560][ T9693] RBP: 00007f5b26e32d6f R08: fffffffffffffffa R09: 0000000000008000 [ 365.452571][ T9693] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 365.452581][ T9693] R13: 00007f5b27016308 R14: 00007f5b27016270 R15: 00007ffe5e0fff58 [ 365.452604][ T9693] [ 365.809034][ T9686] Process accounting resumed [ 368.340871][ T9750] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 369.586957][ T9791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.906'. [ 369.684765][ T9793] netlink: 326 bytes leftover after parsing attributes in process `syz.0.906'. [ 369.932596][ T9795] netlink: 346 bytes leftover after parsing attributes in process `syz.3.907'. [ 371.584036][ T9822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.916'. [ 371.601872][ T9822] netlink: 326 bytes leftover after parsing attributes in process `syz.1.916'. [ 371.898400][ T9828] nbd: couldn't find device at index 33904 [ 371.940938][ T9828] FAULT_INJECTION: forcing a failure. [ 371.940938][ T9828] name failslab, interval 1, probability 0, space 0, times 0 [ 371.966096][ T9828] CPU: 0 UID: 5 PID: 9828 Comm: syz.1.918 Tainted: G L syzkaller #0 PREEMPT(full) [ 371.966146][ T9828] Tainted: [L]=SOFTLOCKUP [ 371.966157][ T9828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 371.966174][ T9828] Call Trace: [ 371.966184][ T9828] [ 371.966195][ T9828] dump_stack_lvl+0x100/0x190 [ 371.966237][ T9828] should_fail_ex.cold+0x5/0xa [ 371.966274][ T9828] should_failslab+0xc2/0x120 [ 371.966308][ T9828] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 371.966341][ T9828] ? xfrm_sysctl_init+0x10a/0x2d0 [ 371.966379][ T9828] kmemdup_noprof+0x29/0x60 [ 371.966412][ T9828] xfrm_sysctl_init+0x10a/0x2d0 [ 371.966448][ T9828] xfrm_net_init+0x856/0xcf0 [ 371.966488][ T9828] ? __pfx_xfrm_net_init+0x10/0x10 [ 371.966517][ T9828] ops_init+0x1e2/0x5f0 [ 371.966558][ T9828] setup_net+0x118/0x3a0 [ 371.966595][ T9828] ? __pfx_setup_net+0x10/0x10 [ 371.966632][ T9828] ? mutex_init_lockdep+0xf1/0x120 [ 371.966672][ T9828] copy_net_ns+0x46f/0x7c0 [ 371.966716][ T9828] create_new_namespaces+0x3ea/0xac0 [ 371.966777][ T9828] unshare_nsproxy_namespaces+0xf2/0x220 [ 371.966826][ T9828] ksys_unshare+0x438/0xab0 [ 371.966876][ T9828] ? __pfx_ksys_unshare+0x10/0x10 [ 371.966920][ T9828] ? xfd_validate_state+0x129/0x190 [ 371.966950][ T9828] ? set_cred_ucounts+0x10f/0x200 [ 371.966997][ T9828] __x64_sys_unshare+0x31/0x40 [ 371.967040][ T9828] do_syscall_64+0x10b/0xf80 [ 371.967083][ T9828] ? clear_bhb_loop+0x40/0x90 [ 371.967121][ T9828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.967151][ T9828] RIP: 0033:0x7f5b26d9ce59 [ 371.967177][ T9828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.967204][ T9828] RSP: 002b:00007f5b27cd0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 371.967234][ T9828] RAX: ffffffffffffffda RBX: 00007f5b27015fa0 RCX: 00007f5b26d9ce59 [ 371.967253][ T9828] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 371.967270][ T9828] RBP: 00007f5b26e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 371.967287][ T9828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 371.967304][ T9828] R13: 00007f5b27016038 R14: 00007f5b27015fa0 R15: 00007ffe5e0fff58 [ 371.967346][ T9828] [ 371.970552][ T9813] Process accounting resumed [ 373.424792][ T9851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.925'. [ 373.434408][ T9853] netlink: 12 bytes leftover after parsing attributes in process `syz.0.926'. [ 373.455117][ T9853] netlink: 326 bytes leftover after parsing attributes in process `syz.0.926'. [ 373.535497][ T9851] netlink: 326 bytes leftover after parsing attributes in process `syz.2.925'. [ 375.246164][ T9895] netlink: 20 bytes leftover after parsing attributes in process `syz.0.933'. [ 375.771252][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 376.957884][ T9881] Process accounting resumed [ 378.650971][ T9972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.953'. [ 378.734339][ T9972] netlink: 326 bytes leftover after parsing attributes in process `syz.0.953'. [ 378.853302][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.862277][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.034208][ T9936] Process accounting resumed [ 380.670332][T10028] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 381.206926][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888033e8bc00: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 381.471139][T10047] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 381.478980][T10047] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 381.490620][T10046] netlink: 12 bytes leftover after parsing attributes in process `syz.3.967'. [ 381.600741][T10046] netlink: 326 bytes leftover after parsing attributes in process `syz.3.967'. [ 381.956400][ T29] audit: type=1800 audit(4294967298.280:29): pid=10061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.970" name="dbroot" dev="configfs" ino=30125 res=0 errno=0 [ 383.344599][T10095] binder: 10092:10095 ioctl c018620c 200000000300 returned -1 [ 383.829408][T10104] netlink: 'syz.0.982': attribute type 1 has an invalid length. [ 383.931173][T10104] nbd: socks must be embedded in a SOCK_ITEM attr [ 384.051230][T10104] block nbd1: shutting down sockets [ 384.190588][T10106] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 384.832808][T10107] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 385.031730][T10090] Process accounting paused [ 385.431097][T10124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.987'. [ 385.459227][T10124] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 388.321621][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802d7b2800: rx timeout, send abort [ 388.330595][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802d7b2800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 388.362147][T10165] FAULT_INJECTION: forcing a failure. [ 388.362147][T10165] name failslab, interval 1, probability 0, space 0, times 0 [ 388.381243][T10165] CPU: 1 UID: 0 PID: 10165 Comm: syz.0.997 Tainted: G L syzkaller #0 PREEMPT(full) [ 388.381287][T10165] Tainted: [L]=SOFTLOCKUP [ 388.381294][T10165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 388.381304][T10165] Call Trace: [ 388.381310][T10165] [ 388.381318][T10165] dump_stack_lvl+0x100/0x190 [ 388.381344][T10165] should_fail_ex.cold+0x5/0xa [ 388.381368][T10165] should_failslab+0xc2/0x120 [ 388.381391][T10165] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 388.381409][T10165] ? zswap_store+0xc6d/0x2e70 [ 388.381445][T10165] zswap_store+0xc6d/0x2e70 [ 388.381474][T10165] ? rmap_walk_anon+0x561/0x870 [ 388.381503][T10165] ? __pfx_zswap_store+0x10/0x10 [ 388.381530][T10165] ? find_held_lock+0x2b/0x80 [ 388.381554][T10165] ? folio_free_swap+0x60a/0x9f0 [ 388.381575][T10165] ? folio_free_swap+0x60a/0x9f0 [ 388.381600][T10165] ? folio_free_swap+0x3f/0x9f0 [ 388.381627][T10165] swap_writeout+0x47e/0x14f0 [ 388.381661][T10165] shrink_folio_list+0x51c5/0x60c0 [ 388.381704][T10165] ? __pfx_shrink_folio_list+0x10/0x10 [ 388.381736][T10165] ? clockevents_program_event+0x1ef/0x820 [ 388.381773][T10165] ? __pfx_clockevents_program_event+0x10/0x10 [ 388.381801][T10165] ? __hrtimer_rearm_deferred+0x24d/0x740 [ 388.381828][T10165] ? find_held_lock+0x2b/0x80 [ 388.381856][T10165] ? trace_sched_exit_tp+0x11c/0x160 [ 388.381901][T10165] ? __lock_acquire+0x4a5/0x2630 [ 388.381918][T10165] ? css_rstat_updated+0x1ce/0x5a0 [ 388.381956][T10165] ? __pfx_css_rstat_updated+0x10/0x10 [ 388.381989][T10165] reclaim_folio_list+0xdc/0x5e0 [ 388.382020][T10165] ? __pfx_reclaim_folio_list+0x10/0x10 [ 388.382047][T10165] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 388.382098][T10165] ? lru_gen_update_size+0x431/0xe20 [ 388.382146][T10165] ? lru_gen_del_folio+0x382/0x5f0 [ 388.382186][T10165] reclaim_pages+0x428/0x5e0 [ 388.382233][T10165] ? __pfx_reclaim_pages+0x10/0x10 [ 388.382273][T10165] ? find_held_lock+0x2b/0x80 [ 388.382310][T10165] ? madvise_cold_or_pageout_pte_range+0xb49/0x2620 [ 388.382357][T10165] madvise_cold_or_pageout_pte_range+0x155c/0x2620 [ 388.382415][T10165] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 388.382460][T10165] ? __lock_acquire+0x4a5/0x2630 [ 388.382486][T10165] ? css_rstat_updated+0x1ce/0x5a0 [ 388.382533][T10165] ? __pfx_css_rstat_updated+0x10/0x10 [ 388.382576][T10165] ? register_lock_class+0x40/0x560 [ 388.382607][T10165] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 388.382647][T10165] walk_pgd_range+0xc1a/0x1dd0 [ 388.382685][T10165] ? rcu_read_unlock+0x17/0x60 [ 388.382733][T10165] ? __pfx_walk_pgd_range+0x10/0x10 [ 388.382763][T10165] ? folios_put_refs+0x716/0xa90 [ 388.382795][T10165] __walk_page_range+0x163/0x820 [ 388.382825][T10165] ? find_held_lock+0x2b/0x80 [ 388.382874][T10165] walk_page_range_vma_unsafe+0x209/0x8f0 [ 388.382909][T10165] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 388.382955][T10165] ? find_held_lock+0x2b/0x80 [ 388.382990][T10165] ? mlock_drain_local+0x254/0x4e0 [ 388.383014][T10165] ? mlock_drain_local+0x254/0x4e0 [ 388.383046][T10165] walk_page_range_vma+0x63/0x90 [ 388.383078][T10165] madvise_pageout+0x259/0x540 [ 388.383113][T10165] ? __pfx_madvise_pageout+0x10/0x10 [ 388.383168][T10165] ? find_held_lock+0x2b/0x80 [ 388.383202][T10165] ? mt_find+0x687/0x8e0 [ 388.383231][T10165] madvise_vma_behavior+0x4f7/0x2200 [ 388.383270][T10165] ? mt_find+0x45e/0x8e0 [ 388.383293][T10165] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 388.383330][T10165] ? __pfx_mt_find+0x10/0x10 [ 388.383363][T10165] ? find_vma_prev+0xd8/0x150 [ 388.383394][T10165] ? _kstrtoull+0x13c/0x1f0 [ 388.383438][T10165] ? find_vma+0xbf/0x140 [ 388.383466][T10165] ? __pfx_find_vma+0x10/0x10 [ 388.383506][T10165] madvise_walk_vmas+0x2fe/0xa90 [ 388.383549][T10165] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 388.383597][T10165] madvise_do_behavior+0x1ea/0x510 [ 388.383637][T10165] ? __pfx_madvise_do_behavior+0x10/0x10 [ 388.383676][T10165] ? down_read+0x13b/0x450 [ 388.383724][T10165] do_madvise+0x195/0x240 [ 388.383762][T10165] ? __pfx_do_madvise+0x10/0x10 [ 388.383798][T10165] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 388.383841][T10165] ? kernel_write+0x6a3/0x6c0 [ 388.383902][T10165] ? ksys_write+0x1ac/0x250 [ 388.383935][T10165] ? __pfx_ksys_write+0x10/0x10 [ 388.383984][T10165] __x64_sys_madvise+0xa9/0x110 [ 388.384024][T10165] ? lockdep_hardirqs_on+0x78/0x100 [ 388.384067][T10165] do_syscall_64+0x10b/0xf80 [ 388.384106][T10165] ? clear_bhb_loop+0x40/0x90 [ 388.384139][T10165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.384165][T10165] RIP: 0033:0x7f07a399ce59 [ 388.384189][T10165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.384213][T10165] RSP: 002b:00007f07a4913028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 388.384240][T10165] RAX: ffffffffffffffda RBX: 00007f07a3c16090 RCX: 00007f07a399ce59 [ 388.384258][T10165] RDX: 0000000000000015 RSI: ff7fffffffff0001 RDI: 0000000000000000 [ 388.384273][T10165] RBP: 00007f07a4913090 R08: 0000000000000000 R09: 0000000000000000 [ 388.384289][T10165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 388.384304][T10165] R13: 00007f07a3c16128 R14: 00007f07a3c16090 R15: 00007ffdaeb6d638 [ 388.384344][T10165] [ 389.321652][T10171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.998'. [ 389.359153][T10171] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 391.163974][T10200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1006'. [ 391.250724][T10203] netlink: 326 bytes leftover after parsing attributes in process `syz.3.1006'. [ 391.463755][T10207] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 392.126529][T10226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1012'. [ 392.153086][T10226] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 394.074807][T10243] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 394.102574][T10243] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 394.306502][T10243] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 394.319478][T10243] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 394.367321][T10263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1021'. [ 394.399040][T10243] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 394.407398][T10243] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 394.458765][T10243] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 394.484710][T10243] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 394.524161][T10263] netlink: 326 bytes leftover after parsing attributes in process `syz.2.1021'. [ 395.561147][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 396.371169][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 396.441137][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 396.520887][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 396.542088][T10300] FAULT_INJECTION: forcing a failure. [ 396.542088][T10300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 396.556488][T10300] CPU: 1 UID: 0 PID: 10300 Comm: syz.0.1031 Tainted: G L syzkaller #0 PREEMPT(full) [ 396.556532][T10300] Tainted: [L]=SOFTLOCKUP [ 396.556542][T10300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 396.556557][T10300] Call Trace: [ 396.556567][T10300] [ 396.556577][T10300] dump_stack_lvl+0x100/0x190 [ 396.556615][T10300] should_fail_ex.cold+0x5/0xa [ 396.556654][T10300] _copy_from_iter+0x1f4/0x1690 [ 396.556696][T10300] ? __pfx__copy_from_iter+0x10/0x10 [ 396.556724][T10300] ? rcu_is_watching+0x12/0xc0 [ 396.556759][T10300] ? trace_kmalloc+0xe3/0x110 [ 396.556794][T10300] ? __kasan_kmalloc+0xaa/0xb0 [ 396.556824][T10300] ? __kmalloc_noprof+0x320/0x850 [ 396.556860][T10300] kernfs_fop_write_iter+0x186/0x5f0 [ 396.556908][T10300] vfs_write+0x6ac/0x1070 [ 396.556945][T10300] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 396.557000][T10300] ? __pfx_vfs_write+0x10/0x10 [ 396.557062][T10300] ksys_write+0x12a/0x250 [ 396.557095][T10300] ? __pfx_ksys_write+0x10/0x10 [ 396.557133][T10300] ? rcu_is_watching+0x12/0xc0 [ 396.557174][T10300] do_syscall_64+0x10b/0xf80 [ 396.557217][T10300] ? clear_bhb_loop+0x40/0x90 [ 396.557253][T10300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.557282][T10300] RIP: 0033:0x7f07a399ce59 [ 396.557306][T10300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.557332][T10300] RSP: 002b:00007f07a4934028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 396.557359][T10300] RAX: ffffffffffffffda RBX: 00007f07a3c15fa0 RCX: 00007f07a399ce59 [ 396.557377][T10300] RDX: 0000000000007fff RSI: 0000200000000400 RDI: 0000000000000003 [ 396.557399][T10300] RBP: 00007f07a4934090 R08: 0000000000000000 R09: 0000000000000000 [ 396.557416][T10300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.557432][T10300] R13: 00007f07a3c16038 R14: 00007f07a3c15fa0 R15: 00007ffdaeb6d638 [ 396.557472][T10300] [ 397.640139][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 397.653741][T10305] vivid-008: ================= START STATUS ================= [ 397.740351][T10305] vivid-008: ================== END STATUS ================== [ 398.303665][T10292] kexec: Could not allocate control_code_buffer [ 398.440261][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 398.529716][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 398.601141][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 398.796016][T10321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1035'. [ 398.924717][T10323] netlink: 326 bytes leftover after parsing attributes in process `syz.2.1035'. [ 399.692127][T10341] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 401.594659][T10359] vivid-008: ================= START STATUS ================= [ 401.604092][T10359] vivid-008: ================== END STATUS ================== [ 402.319504][T10296] Process accounting paused [ 402.850804][T10398] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5628] was attempted by ""[10398] [ 405.695034][T10442] netlink: 2380 bytes leftover after parsing attributes in process `syz.1.1066'. [ 405.721365][T10442] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 406.682768][T10457] vivid-008: ================= START STATUS ================= [ 406.716680][T10457] vivid-008: ================== END STATUS ================== [ 408.128961][T10448] Process accounting paused [ 408.542917][T10486] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1078'. [ 408.585941][T10486] netlink: 326 bytes leftover after parsing attributes in process `syz.2.1078'. [ 410.140469][T10519] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1086'. [ 410.314993][T10507] vhci_hcd vhci_hcd.0: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 410.383186][T10532] vivid-008: ================= START STATUS ================= [ 410.423735][T10532] vivid-008: ================== END STATUS ================== [ 410.467977][T10535] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1088'. [ 410.685471][T10538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1089'. [ 410.787324][T10539] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1089'. [ 411.037286][T10545] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1091'. [ 411.088019][T10545] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1091'. [ 411.276468][T10527] Process accounting paused [ 411.849328][T10554] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 413.141804][T10582] FAULT_INJECTION: forcing a failure. [ 413.141804][T10582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.162485][T10582] CPU: 1 UID: 0 PID: 10582 Comm: syz.3.1101 Tainted: G L syzkaller #0 PREEMPT(full) [ 413.162529][T10582] Tainted: [L]=SOFTLOCKUP [ 413.162538][T10582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 413.162554][T10582] Call Trace: [ 413.162563][T10582] [ 413.162573][T10582] dump_stack_lvl+0x100/0x190 [ 413.162612][T10582] should_fail_ex.cold+0x5/0xa [ 413.162659][T10582] _copy_to_iter+0x5a4/0x1720 [ 413.162700][T10582] ? __pfx__copy_to_iter+0x10/0x10 [ 413.162731][T10582] ? single_next+0xd/0x40 [ 413.162771][T10582] ? single_stop+0x9/0x10 [ 413.162811][T10582] ? traverse.part.0.constprop.0+0x2c5/0x650 [ 413.162858][T10582] seq_read_iter+0x691/0x1270 [ 413.162893][T10582] ? aa_file_perm+0x7f3/0x14d0 [ 413.162942][T10582] seq_read+0x33b/0x4c0 [ 413.162975][T10582] ? __pfx_seq_read+0x10/0x10 [ 413.163036][T10582] full_proxy_read+0x135/0x1a0 [ 413.163072][T10582] ? __pfx_full_proxy_read+0x10/0x10 [ 413.163111][T10582] vfs_read+0x1e4/0xb30 [ 413.163150][T10582] ? __pfx_vfs_read+0x10/0x10 [ 413.163179][T10582] ? find_held_lock+0x2b/0x80 [ 413.163216][T10582] ? __fget_files+0x215/0x3d0 [ 413.163249][T10582] ? __fget_files+0x215/0x3d0 [ 413.163290][T10582] ? __fget_files+0x21f/0x3d0 [ 413.163335][T10582] __x64_sys_pread64+0x1eb/0x250 [ 413.163372][T10582] ? __pfx___x64_sys_pread64+0x10/0x10 [ 413.163412][T10582] ? rcu_is_watching+0x12/0xc0 [ 413.163453][T10582] do_syscall_64+0x10b/0xf80 [ 413.163495][T10582] ? clear_bhb_loop+0x40/0x90 [ 413.163531][T10582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.163560][T10582] RIP: 0033:0x7f5b2699ce59 [ 413.163583][T10582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.163609][T10582] RSP: 002b:00007f5b27902028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 413.163644][T10582] RAX: ffffffffffffffda RBX: 00007f5b26c15fa0 RCX: 00007f5b2699ce59 [ 413.163663][T10582] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000008 [ 413.163679][T10582] RBP: 00007f5b27902090 R08: 0000000000000000 R09: 0000000000000000 [ 413.163695][T10582] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 413.163711][T10582] R13: 00007f5b26c16038 R14: 00007f5b26c15fa0 R15: 00007ffc957e2af8 [ 413.163750][T10582] [ 413.902863][T10599] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 414.650056][T10615] vivid-008: ================= START STATUS ================= [ 414.674224][T10615] vivid-008: ================== END STATUS ================== [ 415.157788][T10627] aoe: invalid device specification [ 415.157819][T10628] aoe: invalid device specification [ 415.201735][T10627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1110'. [ 416.839441][T10650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1113'. [ 416.985669][T10650] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1113'. [ 417.516962][T10646] Process accounting resumed [ 417.556965][T10663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1118'. [ 417.567929][T10663] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 418.007180][T10666] netlink: 186 bytes leftover after parsing attributes in process `syz.3.1119'. [ 418.618847][T10676] vivid-008: ================= START STATUS ================= [ 418.648424][T10676] vivid-008: ================== END STATUS ================== [ 418.861571][T10670] Process accounting resumed [ 419.510877][T10689] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1127'. [ 419.546958][T10691] binder: BINDER_SET_CONTEXT_MGR already set [ 419.603886][T10691] binder: 10690:10691 ioctl 40046207 0 returned -16 [ 419.614486][T10689] netlink: 326 bytes leftover after parsing attributes in process `syz.3.1127'. [ 419.959410][T10696] random: crng reseeded on system resumption [ 420.482568][T10705] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 423.617901][T10747] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 423.971470][T10745] vivid-008: ================= START STATUS ================= [ 424.053721][T10745] vivid-008: ================== END STATUS ================== [ 425.952964][T10775] Process accounting resumed [ 426.000719][T10790] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 427.223636][T10808] Setting dangerous option i915.mitigations - tainting kernel [ 427.432412][ T50] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 428.367311][T10813] random: crng reseeded on system resumption [ 429.464556][ T5630] Bluetooth: hci1: command 0x0406 tx timeout [ 431.527042][T10883] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1173'. [ 431.548370][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 433.225303][T10901] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 433.417438][ T1226] Process accounting resumed [ 434.501815][ T5630] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 435.874214][T10927] zswap: compressor not available [ 436.875260][T10882] Process accounting resumed [ 440.047372][T10973] zswap: compressor not available [ 440.262309][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.268779][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 449.136219][T11058] Process accounting paused [ 449.448998][T11088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1214'. [ 449.487374][T11088] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 449.832796][T10980] Process accounting paused [ 451.485199][T11110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1219'. [ 451.605037][T11113] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1219'. [ 451.909173][T11112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1220'. [ 452.435997][T11127] futex_wake_op: syz.1.1224 tries to shift op by -1; fix this program [ 452.632146][T11104] Process accounting resumed [ 452.634920][T11133] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 453.561859][T11148] futex_wake_op: syz.1.1229 tries to shift op by -1; fix this program [ 453.967661][T11155] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1231'. [ 454.210952][T11157] netlink: 326 bytes leftover after parsing attributes in process `syz.3.1231'. [ 455.765067][T11160] Process accounting resumed [ 455.898280][T11162] vivid-008: ================= START STATUS ================= [ 455.938548][T11162] vivid-008: ================== END STATUS ================== [ 456.376460][T11170] Process accounting paused [ 456.713381][T11186] blktrace: Concurrent blktraces are not allowed on sg0 [ 458.211134][T11211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1243'. [ 458.347082][T11211] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 459.106560][T11221] vivid-008: ================= START STATUS ================= [ 459.143405][T11221] vivid-008: ================== END STATUS ================== [ 459.210577][T11226] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 459.243370][ T5630] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 459.852046][T11237] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1250'. [ 459.938133][T11237] netlink: 326 bytes leftover after parsing attributes in process `syz.2.1250'. [ 460.566040][T11249] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 461.288376][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 461.578522][T11256] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 462.722834][ T50] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 462.735970][ T50] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 462.916263][T11284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1261'. [ 462.975532][ T5735] Process accounting resumed [ 463.062312][T11284] netlink: 326 bytes leftover after parsing attributes in process `syz.1.1261'. [ 463.377339][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 463.413108][T11239] Process accounting resumed [ 463.792916][T11285] Process accounting resumed [ 464.094694][T11303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1265'. [ 464.108257][T11303] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 464.343228][T11309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1266'. [ 464.412774][T11309] netlink: 326 bytes leftover after parsing attributes in process `syz.2.1266'. [ 465.169598][T11320] FAULT_INJECTION: forcing a failure. [ 465.169598][T11320] name failslab, interval 1, probability 0, space 0, times 0 [ 465.238897][T11320] CPU: 1 UID: 0 PID: 11320 Comm: syz.0.1268 Tainted: G U L syzkaller #0 PREEMPT(full) [ 465.238932][T11320] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 465.238939][T11320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 465.238948][T11320] Call Trace: [ 465.238955][T11320] [ 465.238962][T11320] dump_stack_lvl+0x100/0x190 [ 465.238986][T11320] should_fail_ex.cold+0x5/0xa [ 465.239009][T11320] should_failslab+0xc2/0x120 [ 465.239031][T11320] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 465.239061][T11320] ? __d_alloc+0x34/0xa40 [ 465.239089][T11320] __d_alloc+0x34/0xa40 [ 465.239116][T11320] d_alloc_pseudo+0x1c/0xc0 [ 465.239134][T11320] alloc_file_pseudo+0xcf/0x230 [ 465.239163][T11320] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 465.239189][T11320] ? alloc_fd+0x476/0x790 [ 465.239211][T11320] ? do_raw_spin_unlock+0x145/0x1e0 [ 465.239235][T11320] __anon_inode_getfile+0xe8/0x280 [ 465.239264][T11320] anon_inode_getfile_fmode+0x37/0xa0 [ 465.239293][T11320] __do_sys_fanotify_init+0xab8/0xe80 [ 465.239318][T11320] do_syscall_64+0x10b/0xf80 [ 465.239345][T11320] ? clear_bhb_loop+0x40/0x90 [ 465.239366][T11320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.239392][T11320] RIP: 0033:0x7f07a399ce59 [ 465.239408][T11320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.239426][T11320] RSP: 002b:00007f07a4934028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 465.239444][T11320] RAX: ffffffffffffffda RBX: 00007f07a3c15fa0 RCX: 00007f07a399ce59 [ 465.239455][T11320] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 465.239466][T11320] RBP: 00007f07a3a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 465.239476][T11320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.239487][T11320] R13: 00007f07a3c16038 R14: 00007f07a3c15fa0 R15: 00007ffdaeb6d638 [ 465.239508][T11320] [ 465.870012][T11327] blktrace: Concurrent blktraces are not allowed on sg0 [ 465.878535][T11328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1271'. [ 465.956531][T11328] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1271'. [ 466.766963][T11343] ovs_: entered promiscuous mode [ 467.013066][T11330] Process accounting resumed [ 467.265989][T11363] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 468.507492][T11352] Process accounting paused [ 468.831823][T11388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1282'. [ 468.908462][T11388] netlink: 326 bytes leftover after parsing attributes in process `syz.2.1282'. [ 469.276783][T11392] blktrace: Concurrent blktraces are not allowed on sg0 [ 469.729151][T11383] Process accounting resumed [ 470.158071][T11407] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 473.047655][T11416] Process accounting resumed [ 473.541941][T11433] vivid-008: ================= START STATUS ================= [ 473.568835][T11433] vivid-008: ================== END STATUS ================== [ 476.284528][T11473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1304'. [ 477.610645][T11479] vivid-008: ================= START STATUS ================= [ 477.630604][T11479] vivid-008: ================== END STATUS ================== [ 478.203502][T11469] Process accounting resumed [ 478.658047][ T29] audit: type=1800 audit(4294967305.494:30): pid=11502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1310" name="dbroot" dev="configfs" ino=40031 res=0 errno=0 [ 479.566635][T11490] Process accounting resumed [ 480.920892][T11535] vivid-008: ================= START STATUS ================= [ 481.014326][T11535] vivid-008: ================== END STATUS ================== [ 484.049511][T11574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1323'. [ 484.062142][T11574] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 484.562986][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c8cf400: rx timeout, send abort [ 484.571541][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c8cf400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 485.005410][T11579] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 485.652986][T11595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1330'. [ 485.750037][T11595] netlink: 326 bytes leftover after parsing attributes in process `syz.3.1330'. [ 485.982274][T11606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1335'. [ 486.037895][T11606] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1335'. [ 486.051275][ T29] audit: type=1800 audit(4294967312.897:31): pid=11609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1333" name="dbroot" dev="configfs" ino=40307 res=0 errno=0 [ 486.406767][T11620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1336'. [ 486.470325][T11620] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 486.553892][T11605] vivid-008: ================= START STATUS ================= [ 486.616650][T11605] vivid-008: ================== END STATUS ================== [ 487.559163][T11625] vivid-008: ================= START STATUS ================= [ 487.603538][T11625] vivid-008: ================== END STATUS ================== [ 487.900441][T11635] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 491.596043][T11701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1353'. [ 491.623586][T11701] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 492.710760][T11721] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 493.302155][T11737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1362'. [ 493.394641][T11737] netlink: 326 bytes leftover after parsing attributes in process `syz.3.1362'. [ 493.460348][T11733] vivid-008: ================= START STATUS ================= [ 493.515372][T11733] vivid-008: ================== END STATUS ================== [ 495.322575][T11782] NFSD: Failed to start, no listeners configured. [ 495.480616][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 496.979128][T11816] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1374'. [ 498.755549][T11835] Process accounting resumed [ 498.952064][T11842] can: request_module (can-proto-0) failed. [ 499.808754][T11870] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1386'. [ 499.868826][T11873] ubi0: attaching mtd0 [ 499.884392][T11870] veth0_macvtap: left promiscuous mode [ 499.920451][T11873] ubi0: scanning is finished [ 499.930330][T11870] macvtap0: entered promiscuous mode [ 499.943314][T11873] ubi0 warning: ubi_read_volume_table: volume table copy #1 is corrupted [ 499.963764][T11870] macvtap0: entered allmulticast mode [ 499.985362][T11873] ubi0: volume table was restored [ 500.259667][T11873] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 500.285323][T11873] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 500.306195][T11873] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 500.326619][T11873] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 500.348141][T11873] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 500.369101][T11873] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 500.395736][T11873] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 953347426 [ 500.425063][T11873] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 500.457619][T11880] ubi0: background thread "ubi_bgt0d" started, PID 11880 [ 500.580245][T11873] Process accounting paused [ 500.797878][T11887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1390'. [ 501.041873][T11892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1391'. [ 501.177760][T11892] netlink: 326 bytes leftover after parsing attributes in process `syz.1.1391'. [ 501.639389][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.646104][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.817994][T11907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1395'. [ 501.846286][T11907] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 501.860434][T11909] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 503.124370][T11929] vivid-008: ================= START STATUS ================= [ 503.148447][T11929] vivid-008: ================== END STATUS ================== [ 505.824222][T11955] FAULT_INJECTION: forcing a failure. [ 505.824222][T11955] name failslab, interval 1, probability 0, space 0, times 0 [ 505.977661][T11955] CPU: 1 UID: 0 PID: 11955 Comm: syz.3.1406 Tainted: G U L syzkaller #0 PREEMPT(full) [ 505.977712][T11955] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 505.977723][T11955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 505.977738][T11955] Call Trace: [ 505.977748][T11955] [ 505.977759][T11955] dump_stack_lvl+0x100/0x190 [ 505.977799][T11955] should_fail_ex.cold+0x5/0xa [ 505.977838][T11955] ? __netif_set_xps_queue+0x8a3/0x2340 [ 505.977872][T11955] should_failslab+0xc2/0x120 [ 505.977908][T11955] __kmalloc_noprof+0xe0/0x850 [ 505.977948][T11955] __netif_set_xps_queue+0x8a3/0x2340 [ 505.978008][T11955] netif_set_xps_queue+0x2a/0x40 [ 505.978043][T11955] xps_cpus_store+0x279/0x320 [ 505.978078][T11955] ? __pfx_xps_cpus_store+0x10/0x10 [ 505.978111][T11955] ? find_held_lock+0x2b/0x80 [ 505.978149][T11955] ? sysfs_file_kobj+0xe4/0x290 [ 505.978181][T11955] ? __pfx_xps_cpus_store+0x10/0x10 [ 505.978211][T11955] netdev_queue_attr_store+0x61/0x90 [ 505.978261][T11955] ? __pfx_netdev_queue_attr_store+0x10/0x10 [ 505.978304][T11955] sysfs_kf_write+0xf2/0x150 [ 505.978337][T11955] kernfs_fop_write_iter+0x3e0/0x5f0 [ 505.978378][T11955] ? __pfx_sysfs_kf_write+0x10/0x10 [ 505.978412][T11955] vfs_write+0x6ac/0x1070 [ 505.978449][T11955] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 505.978496][T11955] ? __pfx_vfs_write+0x10/0x10 [ 505.978562][T11955] ksys_write+0x12a/0x250 [ 505.978603][T11955] ? __pfx_ksys_write+0x10/0x10 [ 505.978643][T11955] ? rcu_is_watching+0x12/0xc0 [ 505.978687][T11955] do_syscall_64+0x10b/0xf80 [ 505.978729][T11955] ? clear_bhb_loop+0x40/0x90 [ 505.978767][T11955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.978797][T11955] RIP: 0033:0x7f5b2699ce59 [ 505.978822][T11955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.978849][T11955] RSP: 002b:00007f5b27902028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 505.978877][T11955] RAX: ffffffffffffffda RBX: 00007f5b26c15fa0 RCX: 00007f5b2699ce59 [ 505.978895][T11955] RDX: 0000000000007fff RSI: 0000200000000400 RDI: 0000000000000003 [ 505.978913][T11955] RBP: 00007f5b27902090 R08: 0000000000000000 R09: 0000000000000000 [ 505.978929][T11955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.978945][T11955] R13: 00007f5b26c16038 R14: 00007f5b26c15fa0 R15: 00007ffc957e2af8 [ 505.978988][T11955] [ 507.180709][T11971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1411'. [ 507.290162][T11971] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1411'. [ 508.461066][T11934] Process accounting paused [ 508.678825][T11997] netlink: Unknown conntrack attr (type=257, max=9) [ 509.726338][T11977] Process accounting paused [ 511.101424][T12035] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 513.405972][T12067] FAULT_INJECTION: forcing a failure. [ 513.405972][T12067] name failslab, interval 1, probability 0, space 0, times 0 [ 513.454542][T12067] CPU: 1 UID: 0 PID: 12067 Comm: syz.2.1435 Tainted: G U L syzkaller #0 PREEMPT(full) [ 513.454576][T12067] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 513.454583][T12067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 513.454593][T12067] Call Trace: [ 513.454600][T12067] [ 513.454607][T12067] dump_stack_lvl+0x100/0x190 [ 513.454632][T12067] should_fail_ex.cold+0x5/0xa [ 513.454656][T12067] should_failslab+0xc2/0x120 [ 513.454683][T12067] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 513.454713][T12067] ? __d_alloc+0x34/0xa40 [ 513.454737][T12067] ? lockdep_init_map_type+0x5c/0x250 [ 513.454760][T12067] __d_alloc+0x34/0xa40 [ 513.454787][T12067] d_alloc_pseudo+0x1c/0xc0 [ 513.454805][T12067] alloc_file_pseudo+0xcf/0x230 [ 513.454835][T12067] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 513.454862][T12067] ? alloc_fd+0x476/0x790 [ 513.454888][T12067] sock_alloc_file+0x50/0x210 [ 513.454911][T12067] __sys_socket+0x1c0/0x260 [ 513.454938][T12067] ? __pfx___sys_socket+0x10/0x10 [ 513.454965][T12067] ? ksys_write+0x1ac/0x250 [ 513.454991][T12067] __x64_sys_socket+0x72/0xb0 [ 513.455017][T12067] ? lockdep_hardirqs_on+0x78/0x100 [ 513.455045][T12067] do_syscall_64+0x10b/0xf80 [ 513.455070][T12067] ? clear_bhb_loop+0x40/0x90 [ 513.455092][T12067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.455111][T12067] RIP: 0033:0x7fd66719ce59 [ 513.455126][T12067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.455144][T12067] RSP: 002b:00007fd667fd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 513.455161][T12067] RAX: ffffffffffffffda RBX: 00007fd667415fa0 RCX: 00007fd66719ce59 [ 513.455173][T12067] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000010 [ 513.455184][T12067] RBP: 00007fd667232d6f R08: 0000000000000000 R09: 0000000000000000 [ 513.455194][T12067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.455205][T12067] R13: 00007fd667416038 R14: 00007fd667415fa0 R15: 00007ffc046a4b98 [ 513.455235][T12067] [ 514.497955][ T5630] Bluetooth: hci3: unknown advertising packet type: 0xea [ 519.511116][T12137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1446'. [ 519.867975][T12146] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 520.070019][T12146] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1450'. [ 520.179364][T12155] vhci_hcd vhci_hcd.0: default hub control req: 0000 v0000 i0000 l0 [ 520.643277][T12158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1451'. [ 520.667340][T12158] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 527.232534][T12218] vivid-008: ================= START STATUS ================= [ 527.294865][T12218] vivid-008: ================== END STATUS ================== [ 530.357178][T12248] Process accounting paused [ 530.562659][T12272] Process accounting resumed [ 530.748658][T12279] FAULT_INJECTION: forcing a failure. [ 530.748658][T12279] name failslab, interval 1, probability 0, space 0, times 0 [ 530.861652][T12279] CPU: 1 UID: 0 PID: 12279 Comm: syz.2.1478 Tainted: G U L syzkaller #0 PREEMPT(full) [ 530.861706][T12279] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 530.861718][T12279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 530.861736][T12279] Call Trace: [ 530.861746][T12279] [ 530.861759][T12279] dump_stack_lvl+0x100/0x190 [ 530.861801][T12279] should_fail_ex.cold+0x5/0xa [ 530.861839][T12279] ? create_ruleset+0x21/0x140 [ 530.861866][T12279] should_failslab+0xc2/0x120 [ 530.861904][T12279] __kmalloc_noprof+0xe0/0x850 [ 530.861941][T12279] create_ruleset+0x21/0x140 [ 530.861971][T12279] landlock_merge_ruleset+0xbb/0x830 [ 530.862003][T12279] ? prepare_creds+0x5ee/0x950 [ 530.862042][T12279] __do_sys_landlock_restrict_self+0x2af/0x9e0 [ 530.862093][T12279] ? rcu_is_watching+0x12/0xc0 [ 530.862145][T12279] do_syscall_64+0x10b/0xf80 [ 530.862190][T12279] ? clear_bhb_loop+0x40/0x90 [ 530.862227][T12279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.862260][T12279] RIP: 0033:0x7fd66719ce59 [ 530.862286][T12279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.862315][T12279] RSP: 002b:00007fd667fb4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 530.862345][T12279] RAX: ffffffffffffffda RBX: 00007fd667416090 RCX: 00007fd66719ce59 [ 530.862365][T12279] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000000003 [ 530.862382][T12279] RBP: 00007fd667232d6f R08: 0000000000000000 R09: 0000000000000000 [ 530.862400][T12279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 530.862417][T12279] R13: 00007fd667416128 R14: 00007fd667416090 R15: 00007ffc046a4b98 [ 530.862455][T12279] [ 531.465261][T12279] netlink: 202 bytes leftover after parsing attributes in process `syz.2.1478'. [ 532.750557][T12302] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 533.323308][T12319] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 534.136792][T12335] netlink: 82 bytes leftover after parsing attributes in process `syz.1.1489'. [ 536.040499][T12360] program syz.0.1494 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 536.837839][T12355] binder: 12354:12355 ioctl 40086602 e20 returned -22 [ 538.478913][T12376] Process accounting resumed [ 538.546242][T12186] Process accounting resumed [ 538.706275][T12384] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 539.024265][T12366] vivid-008: ================= START STATUS ================= [ 539.071868][T12366] vivid-008: ================== END STATUS ================== [ 539.737322][T12392] Process accounting resumed [ 541.907028][T12403] ima: policy update failed [ 541.933552][ T29] audit: type=1802 audit(1843104550.600:32): pid=12403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1503" res=0 errno=0 [ 542.009848][T12426] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 542.084964][T12421] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 542.488982][T12437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1513'. [ 542.533935][T12437] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 543.332456][T12449] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 543.382401][T12451] FAULT_INJECTION: forcing a failure. [ 543.382401][T12451] name failslab, interval 1, probability 0, space 0, times 0 [ 543.523962][T12451] CPU: 1 UID: 0 PID: 12451 Comm: syz.2.1517 Tainted: G U L syzkaller #0 PREEMPT(full) [ 543.524020][T12451] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 543.524033][T12451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 543.524051][T12451] Call Trace: [ 543.524062][T12451] [ 543.524074][T12451] dump_stack_lvl+0x100/0x190 [ 543.524114][T12451] should_fail_ex.cold+0x5/0xa [ 543.524163][T12451] should_failslab+0xc2/0x120 [ 543.524201][T12451] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 543.524252][T12451] ? __d_alloc+0x34/0xa40 [ 543.524295][T12451] ? lockdep_init_map_type+0x5c/0x250 [ 543.524336][T12451] __d_alloc+0x34/0xa40 [ 543.524378][T12451] d_alloc_pseudo+0x1c/0xc0 [ 543.524404][T12451] alloc_file_pseudo+0xcf/0x230 [ 543.524435][T12451] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 543.524463][T12451] ? alloc_fd+0x476/0x790 [ 543.524488][T12451] sock_alloc_file+0x50/0x210 [ 543.524512][T12451] __sys_socket+0x1c0/0x260 [ 543.524540][T12451] ? __pfx___sys_socket+0x10/0x10 [ 543.524566][T12451] ? ksys_write+0x1ac/0x250 [ 543.524593][T12451] __x64_sys_socket+0x72/0xb0 [ 543.524619][T12451] ? lockdep_hardirqs_on+0x78/0x100 [ 543.524647][T12451] do_syscall_64+0x10b/0xf80 [ 543.524672][T12451] ? clear_bhb_loop+0x40/0x90 [ 543.524694][T12451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.524712][T12451] RIP: 0033:0x7fd66719ce59 [ 543.524728][T12451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.524746][T12451] RSP: 002b:00007fd667fd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 543.524765][T12451] RAX: ffffffffffffffda RBX: 00007fd667415fa0 RCX: 00007fd66719ce59 [ 543.524777][T12451] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000010 [ 543.524789][T12451] RBP: 00007fd667232d6f R08: 0000000000000000 R09: 0000000000000000 [ 543.524805][T12451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 543.524821][T12451] R13: 00007fd667416038 R14: 00007fd667415fa0 R15: 00007ffc046a4b98 [ 543.524857][T12451] [ 545.592516][T12463] vivid-008: ================= START STATUS ================= [ 545.665934][T12463] vivid-008: ================== END STATUS ================== [ 547.168655][T12491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1524'. [ 547.208759][T12491] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 548.792258][T12510] FAULT_INJECTION: forcing a failure. [ 548.792258][T12510] name failslab, interval 1, probability 0, space 0, times 0 [ 548.829663][T12510] CPU: 0 UID: 0 PID: 12510 Comm: syz.0.1530 Tainted: G U L syzkaller #0 PREEMPT(full) [ 548.829719][T12510] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 548.829732][T12510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 548.829750][T12510] Call Trace: [ 548.829761][T12510] [ 548.829773][T12510] dump_stack_lvl+0x100/0x190 [ 548.829813][T12510] should_fail_ex.cold+0x5/0xa [ 548.829854][T12510] should_failslab+0xc2/0x120 [ 548.829893][T12510] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 548.829941][T12510] ? alloc_empty_file+0x5b/0x1c0 [ 548.829993][T12510] alloc_empty_file+0x5b/0x1c0 [ 548.830041][T12510] alloc_file_pseudo+0x13a/0x230 [ 548.830093][T12510] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 548.830137][T12510] ? alloc_fd+0x476/0x790 [ 548.830180][T12510] sock_alloc_file+0x50/0x210 [ 548.830220][T12510] __sys_socket+0x1c0/0x260 [ 548.830265][T12510] ? __pfx___sys_socket+0x10/0x10 [ 548.830308][T12510] ? ksys_write+0x1ac/0x250 [ 548.830364][T12510] __x64_sys_socket+0x72/0xb0 [ 548.830406][T12510] ? lockdep_hardirqs_on+0x78/0x100 [ 548.830454][T12510] do_syscall_64+0x10b/0xf80 [ 548.830500][T12510] ? clear_bhb_loop+0x40/0x90 [ 548.830537][T12510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.830568][T12510] RIP: 0033:0x7f07a399ce59 [ 548.830595][T12510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 548.830624][T12510] RSP: 002b:00007f07a4934028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 548.830653][T12510] RAX: ffffffffffffffda RBX: 00007f07a3c15fa0 RCX: 00007f07a399ce59 [ 548.830674][T12510] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000010 [ 548.830692][T12510] RBP: 00007f07a3a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 548.830710][T12510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 548.830727][T12510] R13: 00007f07a3c16038 R14: 00007f07a3c15fa0 R15: 00007ffdaeb6d638 [ 548.830768][T12510] [ 552.213858][T12561] FAULT_INJECTION: forcing a failure. [ 552.213858][T12561] name failslab, interval 1, probability 0, space 0, times 0 [ 552.232709][T12561] CPU: 0 UID: 0 PID: 12561 Comm: syz.0.1543 Tainted: G U L syzkaller #0 PREEMPT(full) [ 552.232764][T12561] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 552.232777][T12561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 552.232795][T12561] Call Trace: [ 552.232806][T12561] [ 552.232817][T12561] dump_stack_lvl+0x100/0x190 [ 552.232861][T12561] should_fail_ex.cold+0x5/0xa [ 552.232900][T12561] should_failslab+0xc2/0x120 [ 552.232937][T12561] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 552.232988][T12561] ? __d_alloc+0x34/0xa40 [ 552.233029][T12561] ? lockdep_init_map_type+0x5c/0x250 [ 552.233077][T12561] __d_alloc+0x34/0xa40 [ 552.233121][T12561] d_alloc_pseudo+0x1c/0xc0 [ 552.233151][T12561] alloc_file_pseudo+0xcf/0x230 [ 552.233194][T12561] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 552.233234][T12561] ? alloc_fd+0x476/0x790 [ 552.233275][T12561] sock_alloc_file+0x50/0x210 [ 552.233317][T12561] __sys_socket+0x1c0/0x260 [ 552.233360][T12561] ? __pfx___sys_socket+0x10/0x10 [ 552.233402][T12561] ? ksys_write+0x1ac/0x250 [ 552.233490][T12561] __x64_sys_socket+0x72/0xb0 [ 552.233532][T12561] ? lockdep_hardirqs_on+0x78/0x100 [ 552.233576][T12561] do_syscall_64+0x10b/0xf80 [ 552.233617][T12561] ? clear_bhb_loop+0x40/0x90 [ 552.233653][T12561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.233684][T12561] RIP: 0033:0x7f07a399ce59 [ 552.233708][T12561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.233735][T12561] RSP: 002b:00007f07a4934028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 552.233765][T12561] RAX: ffffffffffffffda RBX: 00007f07a3c15fa0 RCX: 00007f07a399ce59 [ 552.233784][T12561] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000010 [ 552.233800][T12561] RBP: 00007f07a3a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 552.233817][T12561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 552.233835][T12561] R13: 00007f07a3c16038 R14: 00007f07a3c15fa0 R15: 00007ffdaeb6d638 [ 552.233874][T12561] [ 553.301682][T12571] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 555.728693][ T29] audit: type=1800 audit(1843104564.465:33): pid=12602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1553" name="dbroot" dev="configfs" ino=46959 res=0 errno=0 [ 560.175995][T12656] zswap: compressor not available [ 560.741836][T12658] zswap: compressor not available [ 561.379754][T12674] Process accounting resumed [ 562.769281][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.775731][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.905273][T12676] vivid-008: ================= START STATUS ================= [ 562.913728][T12676] vivid-008: ================== END STATUS ================== [ 566.495468][T12758] zswap: compressor not available [ 569.394272][T12796] Process accounting paused [ 569.644875][T12789] Process accounting paused [ 570.292423][T12800] Process accounting paused [ 571.238632][ T5630] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 572.749205][T12864] : Can't lookup blockdev [ 577.800752][T12908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1615'. [ 578.097907][T12908] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 579.934429][T12924] FAULT_INJECTION: forcing a failure. [ 579.934429][T12924] name failslab, interval 1, probability 0, space 0, times 0 [ 580.118426][T12924] CPU: 0 UID: 0 PID: 12924 Comm: syz.1.1619 Tainted: G U L syzkaller #0 PREEMPT(full) [ 580.118484][T12924] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 580.118496][T12924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 580.118514][T12924] Call Trace: [ 580.118525][T12924] [ 580.118538][T12924] dump_stack_lvl+0x100/0x190 [ 580.118580][T12924] should_fail_ex.cold+0x5/0xa [ 580.118620][T12924] should_failslab+0xc2/0x120 [ 580.118658][T12924] __kmalloc_cache_noprof+0x7a/0x6f0 [ 580.118704][T12924] ? cec_open+0xdb/0x690 [ 580.118749][T12924] ? __lock_acquire+0x4a5/0x2630 [ 580.118785][T12924] cec_open+0xdb/0x690 [ 580.118833][T12924] ? __pfx_cec_open+0x10/0x10 [ 580.118884][T12924] ? kobject_get_unless_zero+0x156/0x200 [ 580.118917][T12924] ? find_held_lock+0x2b/0x80 [ 580.118957][T12924] ? chrdev_open+0x10b/0x6a0 [ 580.118996][T12924] ? chrdev_open+0x10b/0x6a0 [ 580.119041][T12924] ? __pfx_cec_open+0x10/0x10 [ 580.119086][T12924] chrdev_open+0x234/0x6a0 [ 580.119125][T12924] ? __pfx_apparmor_file_open+0x10/0x10 [ 580.119176][T12924] ? __pfx_chrdev_open+0x10/0x10 [ 580.119217][T12924] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 580.119268][T12924] do_dentry_open+0x6d8/0x1660 [ 580.119314][T12924] ? __pfx_chrdev_open+0x10/0x10 [ 580.119364][T12924] vfs_open+0x82/0x3f0 [ 580.119416][T12924] path_openat+0x208c/0x31a0 [ 580.119470][T12924] ? __pfx_path_openat+0x10/0x10 [ 580.119526][T12924] do_file_open+0x20e/0x430 [ 580.119569][T12924] ? __pfx_do_file_open+0x10/0x10 [ 580.119639][T12924] ? alloc_fd+0x476/0x790 [ 580.119681][T12924] ? do_getname+0x191/0x390 [ 580.119731][T12924] do_sys_openat2+0x10d/0x1e0 [ 580.119781][T12924] ? __pfx_do_sys_openat2+0x10/0x10 [ 580.119832][T12924] ? do_raw_spin_lock+0x128/0x260 [ 580.119884][T12924] __x64_sys_openat+0x12d/0x210 [ 580.119934][T12924] ? __pfx___x64_sys_openat+0x10/0x10 [ 580.119990][T12924] ? rcu_is_watching+0x12/0xc0 [ 580.120035][T12924] do_syscall_64+0x10b/0xf80 [ 580.120080][T12924] ? clear_bhb_loop+0x40/0x90 [ 580.120118][T12924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.120150][T12924] RIP: 0033:0x7f5b26d9ce59 [ 580.120177][T12924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 580.120207][T12924] RSP: 002b:00007f5b27c6d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 580.120239][T12924] RAX: ffffffffffffffda RBX: 00007f5b27016270 RCX: 00007f5b26d9ce59 [ 580.120259][T12924] RDX: 0000000000101901 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 580.120279][T12924] RBP: 00007f5b26e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 580.120298][T12924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 580.120325][T12924] R13: 00007f5b27016308 R14: 00007f5b27016270 R15: 00007ffe5e0fff58 [ 580.120367][T12924] [ 583.377139][T12951] ubi: mtd0 is already attached to ubi0 [ 583.466524][T12955] ubi0: detaching mtd0 [ 583.521818][T12955] ubi0: mtd0 is detached [ 584.809195][T12975] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 585.901607][T12984] FAULT_INJECTION: forcing a failure. [ 585.901607][T12984] name failslab, interval 1, probability 0, space 0, times 0 [ 586.077113][T12984] CPU: 1 UID: 0 PID: 12984 Comm: syz.2.1632 Tainted: G U L syzkaller #0 PREEMPT(full) [ 586.077170][T12984] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 586.077182][T12984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 586.077197][T12984] Call Trace: [ 586.077206][T12984] [ 586.077219][T12984] dump_stack_lvl+0x100/0x190 [ 586.077261][T12984] should_fail_ex.cold+0x5/0xa [ 586.077298][T12984] should_failslab+0xc2/0x120 [ 586.077334][T12984] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 586.077380][T12984] ? __d_alloc+0x34/0xa40 [ 586.077415][T12984] ? lockdep_init_map_type+0x5c/0x250 [ 586.077440][T12984] __d_alloc+0x34/0xa40 [ 586.077467][T12984] d_alloc_pseudo+0x1c/0xc0 [ 586.077486][T12984] alloc_file_pseudo+0xcf/0x230 [ 586.077515][T12984] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 586.077543][T12984] ? alloc_fd+0x476/0x790 [ 586.077569][T12984] sock_alloc_file+0x50/0x210 [ 586.077592][T12984] __sys_socket+0x1c0/0x260 [ 586.077620][T12984] ? __pfx___sys_socket+0x10/0x10 [ 586.077646][T12984] ? ksys_write+0x1ac/0x250 [ 586.077672][T12984] __x64_sys_socket+0x72/0xb0 [ 586.077699][T12984] ? lockdep_hardirqs_on+0x78/0x100 [ 586.077727][T12984] do_syscall_64+0x10b/0xf80 [ 586.077752][T12984] ? clear_bhb_loop+0x40/0x90 [ 586.077774][T12984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.077793][T12984] RIP: 0033:0x7fd66719ce59 [ 586.077809][T12984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.077827][T12984] RSP: 002b:00007fd667fd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 586.077846][T12984] RAX: ffffffffffffffda RBX: 00007fd667415fa0 RCX: 00007fd66719ce59 [ 586.077858][T12984] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000010 [ 586.077869][T12984] RBP: 00007fd667232d6f R08: 0000000000000000 R09: 0000000000000000 [ 586.077880][T12984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 586.077891][T12984] R13: 00007fd667416038 R14: 00007fd667415fa0 R15: 00007ffc046a4b98 [ 586.077914][T12984] [ 586.987654][T12992] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 589.056081][T13008] vivid-008: ================= START STATUS ================= [ 589.162987][T13008] vivid-008: ================== END STATUS ================== [ 589.703028][T13017] zswap: compressor not available [ 591.574808][T13032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1641'. [ 591.604835][T13032] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 593.057277][ T5709] Process accounting paused [ 593.364291][T13049] futex_wake_op: syz.1.1645 tries to shift op by -2048; fix this program [ 593.467384][T13055] Process accounting resumed [ 593.563916][T13070] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 593.831730][T13073] vivid-008: ================= START STATUS ================= [ 593.844238][T13073] vivid-008: ================== END STATUS ================== [ 593.969740][T13049] futex_wake_op: syz.1.1645 tries to shift op by -2048; fix this program [ 596.633252][T13084] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 599.762357][T13092] ima: policy update failed [ 599.777294][ T29] audit: type=1802 audit(1843104608.712:34): pid=13092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1654" res=0 errno=0 [ 599.796452][T12780] syz.2.1590 (12780) used greatest stack depth: 17640 bytes left [ 599.871926][T13095] Process accounting resumed [ 602.971048][T13124] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 603.434685][T13130] FAULT_INJECTION: forcing a failure. [ 603.434685][T13130] name failslab, interval 1, probability 0, space 0, times 0 [ 603.447914][T13130] CPU: 0 UID: 0 PID: 13130 Comm: syz.3.1662 Tainted: G U L syzkaller #0 PREEMPT(full) [ 603.447966][T13130] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 603.447985][T13130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 603.448001][T13130] Call Trace: [ 603.448011][T13130] [ 603.448022][T13130] dump_stack_lvl+0x100/0x190 [ 603.448059][T13130] should_fail_ex.cold+0x5/0xa [ 603.448098][T13130] should_failslab+0xc2/0x120 [ 603.448144][T13130] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 603.448195][T13130] ? __d_alloc+0x34/0xa40 [ 603.448243][T13130] ? lockdep_init_map_type+0x5c/0x250 [ 603.448288][T13130] __d_alloc+0x34/0xa40 [ 603.448332][T13130] d_alloc_pseudo+0x1c/0xc0 [ 603.448363][T13130] alloc_file_pseudo+0xcf/0x230 [ 603.448412][T13130] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 603.448458][T13130] ? alloc_fd+0x476/0x790 [ 603.448504][T13130] sock_alloc_file+0x50/0x210 [ 603.448544][T13130] __sys_socket+0x1c0/0x260 [ 603.448591][T13130] ? __pfx___sys_socket+0x10/0x10 [ 603.448634][T13130] ? ksys_write+0x1ac/0x250 [ 603.448679][T13130] __x64_sys_socket+0x72/0xb0 [ 603.448718][T13130] ? lockdep_hardirqs_on+0x78/0x100 [ 603.448761][T13130] do_syscall_64+0x10b/0xf80 [ 603.448803][T13130] ? clear_bhb_loop+0x40/0x90 [ 603.448841][T13130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.448871][T13130] RIP: 0033:0x7f5b2699ce59 [ 603.448896][T13130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 603.448925][T13130] RSP: 002b:00007f5b27902028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 603.448956][T13130] RAX: ffffffffffffffda RBX: 00007f5b26c15fa0 RCX: 00007f5b2699ce59 [ 603.448977][T13130] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000010 [ 603.448994][T13130] RBP: 00007f5b26a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 603.449013][T13130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 603.449030][T13130] R13: 00007f5b26c16038 R14: 00007f5b26c15fa0 R15: 00007ffc957e2af8 [ 603.449070][T13130] [ 603.677740][T13067] Process accounting resumed [ 607.091567][ T5638] Process accounting resumed [ 607.311676][T13156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1667'. [ 607.339017][T13156] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 607.402209][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 607.415040][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 607.430184][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 607.443098][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 607.451892][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 608.588541][T13146] Process accounting resumed [ 609.181519][T13194] vivid-008: ================= START STATUS ================= [ 609.200878][T13194] vivid-008: ================== END STATUS ================== [ 609.507288][ T5630] Bluetooth: hci4: command tx timeout [ 609.960268][T13157] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.969149][T13157] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.977320][T13157] bridge_slave_0: entered allmulticast mode [ 609.986894][T13157] bridge_slave_0: entered promiscuous mode [ 609.998664][T13157] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.006315][T13157] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.013625][T13157] bridge_slave_1: entered allmulticast mode [ 610.024047][T13157] bridge_slave_1: entered promiscuous mode [ 610.080350][T13195] Process accounting resumed [ 610.151694][T13157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 610.207440][T13157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 610.259895][T13214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1676'. [ 610.283474][T13214] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 610.460649][T13157] team0: Port device team_slave_0 added [ 610.535976][T13157] team0: Port device team_slave_1 added [ 611.155682][T13225] FAULT_INJECTION: forcing a failure. [ 611.155682][T13225] name failslab, interval 1, probability 0, space 0, times 0 [ 611.169000][T13225] CPU: 1 UID: 0 PID: 13225 Comm: syz.0.1679 Tainted: G U L syzkaller #0 PREEMPT(full) [ 611.169052][T13225] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 611.169065][T13225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 611.169082][T13225] Call Trace: [ 611.169093][T13225] [ 611.169105][T13225] dump_stack_lvl+0x100/0x190 [ 611.169146][T13225] should_fail_ex.cold+0x5/0xa [ 611.169192][T13225] should_failslab+0xc2/0x120 [ 611.169230][T13225] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 611.169274][T13225] ? alloc_empty_file+0x5b/0x1c0 [ 611.169324][T13225] alloc_empty_file+0x5b/0x1c0 [ 611.169365][T13225] alloc_file_pseudo+0x13a/0x230 [ 611.169412][T13225] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 611.169458][T13225] ? alloc_fd+0x476/0x790 [ 611.169503][T13225] sock_alloc_file+0x50/0x210 [ 611.169541][T13225] __sys_socket+0x1c0/0x260 [ 611.169589][T13225] ? __pfx___sys_socket+0x10/0x10 [ 611.169633][T13225] ? ksys_write+0x1ac/0x250 [ 611.169678][T13225] __x64_sys_socket+0x72/0xb0 [ 611.169721][T13225] ? lockdep_hardirqs_on+0x78/0x100 [ 611.169766][T13225] do_syscall_64+0x10b/0xf80 [ 611.169809][T13225] ? clear_bhb_loop+0x40/0x90 [ 611.169856][T13225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.169886][T13225] RIP: 0033:0x7f07a399ce59 [ 611.169914][T13225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 611.169941][T13225] RSP: 002b:00007f07a4934028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 611.169970][T13225] RAX: ffffffffffffffda RBX: 00007f07a3c15fa0 RCX: 00007f07a399ce59 [ 611.169989][T13225] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000010 [ 611.170005][T13225] RBP: 00007f07a3a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 611.170022][T13225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 611.170040][T13225] R13: 00007f07a3c16038 R14: 00007f07a3c15fa0 R15: 00007ffdaeb6d638 [ 611.170080][T13225] [ 611.578145][ T5630] Bluetooth: hci4: command tx timeout [ 611.653582][T13157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.669050][T13157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 611.698546][T13157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 611.717145][T13157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 611.747966][T13157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 611.782209][T13157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.150625][T13157] hsr_slave_0: entered promiscuous mode [ 612.174778][T13157] hsr_slave_1: entered promiscuous mode [ 612.198322][T13157] debugfs: 'hsr0' already exists in 'hsr' [ 612.214544][T13157] Cannot create hsr debugfs directory [ 612.790082][T13238] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 613.647801][ T5630] Bluetooth: hci4: command tx timeout [ 613.952601][T13157] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 614.060983][T13157] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 614.097844][T13157] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 614.155985][T13157] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 614.176314][T13157] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 614.322971][T13157] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 614.355700][T13157] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 614.398922][T13157] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 614.670533][T13157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.721403][T13157] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.759300][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.766617][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.809960][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.817301][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 615.488046][T13279] FAULT_INJECTION: forcing a failure. [ 615.488046][T13279] name failslab, interval 1, probability 0, space 0, times 0 [ 615.536647][T13279] CPU: 1 UID: 0 PID: 13279 Comm: syz.0.1690 Tainted: G U L syzkaller #0 PREEMPT(full) [ 615.536696][T13279] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 615.536707][T13279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 615.536723][T13279] Call Trace: [ 615.536733][T13279] [ 615.536744][T13279] dump_stack_lvl+0x100/0x190 [ 615.536783][T13279] should_fail_ex.cold+0x5/0xa [ 615.536818][T13279] should_failslab+0xc2/0x120 [ 615.536853][T13279] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 615.536898][T13279] ? security_file_alloc+0x34/0x2c0 [ 615.536930][T13279] ? trace_kmem_cache_alloc+0xd5/0x100 [ 615.536972][T13279] security_file_alloc+0x34/0x2c0 [ 615.537007][T13279] init_file+0x95/0x480 [ 615.537049][T13279] alloc_empty_file+0x79/0x1c0 [ 615.537101][T13279] path_openat+0xe8/0x31a0 [ 615.537133][T13279] ? kasan_save_stack+0x3f/0x50 [ 615.537160][T13279] ? kasan_save_stack+0x30/0x50 [ 615.537187][T13279] ? kasan_save_track+0x14/0x30 [ 615.537220][T13279] ? __kasan_slab_alloc+0x89/0x90 [ 615.537249][T13279] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 615.537293][T13279] ? do_getname+0x35/0x390 [ 615.537333][T13279] ? do_sys_openat2+0xc5/0x1e0 [ 615.537377][T13279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.537413][T13279] ? __pfx_path_openat+0x10/0x10 [ 615.537465][T13279] do_file_open+0x20e/0x430 [ 615.537506][T13279] ? __pfx_do_file_open+0x10/0x10 [ 615.537571][T13279] ? alloc_fd+0x476/0x790 [ 615.537611][T13279] ? do_getname+0x191/0x390 [ 615.537657][T13279] do_sys_openat2+0x10d/0x1e0 [ 615.537701][T13279] ? __pfx_do_sys_openat2+0x10/0x10 [ 615.537760][T13279] __x64_sys_openat+0x12d/0x210 [ 615.537806][T13279] ? __pfx___x64_sys_openat+0x10/0x10 [ 615.537847][T13279] ? ksys_write+0x1ac/0x250 [ 615.537887][T13279] ? rcu_is_watching+0x12/0xc0 [ 615.537928][T13279] do_syscall_64+0x10b/0xf80 [ 615.537968][T13279] ? clear_bhb_loop+0x40/0x90 [ 615.538001][T13279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.538027][T13279] RIP: 0033:0x7f07a399ce59 [ 615.538049][T13279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 615.538082][T13279] RSP: 002b:00007f07a4913028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 615.538107][T13279] RAX: ffffffffffffffda RBX: 00007f07a3c16090 RCX: 00007f07a399ce59 [ 615.538125][T13279] RDX: 0000000000000100 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 615.538142][T13279] RBP: 00007f07a3a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 615.538158][T13279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 615.538173][T13279] R13: 00007f07a3c16128 R14: 00007f07a3c16090 R15: 00007ffdaeb6d638 [ 615.538209][T13279] [ 615.871880][ T5630] Bluetooth: hci4: command tx timeout [ 616.579048][T13157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 617.304635][ T62] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.910808][ T62] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.363524][ T62] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.774138][ T62] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.122390][T13319] Process accounting resumed [ 619.309543][T13329] blktrace: Concurrent blktraces are not allowed on sg0 [ 619.366600][T13157] veth0_vlan: entered promiscuous mode [ 619.906046][T13157] veth1_vlan: entered promiscuous mode [ 620.219281][T13157] veth0_macvtap: entered promiscuous mode [ 620.233526][T13157] veth1_macvtap: entered promiscuous mode [ 620.307620][T13157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 620.364618][T13157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 620.437412][ T143] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.610098][ T62] gretap0: left allmulticast mode [ 620.630444][ T62] gretap0: left promiscuous mode [ 620.646547][ T62] bridge0: port 3(gretap0) entered disabled state [ 620.733846][ T62] bridge_slave_1: left allmulticast mode [ 620.769295][ T62] bridge_slave_1: left promiscuous mode [ 620.792716][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.850990][ T62] bridge_slave_0: left allmulticast mode [ 620.869219][ T62] bridge_slave_0: left promiscuous mode [ 620.887987][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.844911][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 621.901708][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 621.925038][ T62] bond0 (unregistering): Released all slaves [ 621.961299][ T143] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.084273][ T5291] 8021q: adding VLAN 0 to HW filter on device eth1 [ 622.138010][ T143] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.159986][ T143] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.212532][ T62] i: left promiscuous mode [ 622.896254][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.987806][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.165299][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.198398][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.568885][T13372] ima: policy update failed [ 623.632037][ T29] audit: type=1802 audit(1843104632.684:35): pid=13372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1708" res=0 errno=0 [ 623.768669][T13376] Process accounting paused [ 623.930048][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.949008][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.346842][T13387] zswap: compressor not available [ 624.826454][ T5291] 8021q: adding VLAN 0 to HW filter on device eth2 [ 625.136124][T13353] Process accounting resumed [ 625.428396][T13410] blktrace: Concurrent blktraces are not allowed on sg0 [ 625.667868][ T62] hsr_slave_0: left promiscuous mode [ 625.688909][ T62] hsr_slave_1: left promiscuous mode [ 625.715308][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 625.744867][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 625.773636][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 625.801897][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 625.944665][ T62] veth1_macvtap: left promiscuous mode [ 625.961640][ T62] veth0_macvtap: left promiscuous mode [ 625.974573][ T62] veth1_vlan: left promiscuous mode [ 625.994499][ T62] veth0_vlan: left promiscuous mode [ 626.901187][ T62] team0 (unregistering): Port device team_slave_1 removed [ 626.976690][ T62] team0 (unregistering): Port device team_slave_0 removed [ 627.485415][ T5291] 8021q: adding VLAN 0 to HW filter on device eth3 [ 627.839309][T13440] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 629.018788][T13442] ima: policy update failed [ 629.029010][ T29] audit: type=1802 audit(1843104638.109:36): pid=13442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1718" res=0 errno=0 [ 629.230180][T13466] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 629.788531][ T5291] 8021q: adding VLAN 0 to HW filter on device eth4 [ 632.651800][T13513] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 633.548659][T13514] ima: policy update failed [ 633.580952][ T29] audit: type=1802 audit(1843104642.661:37): pid=13514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1729" res=0 errno=0 [ 633.960929][T13494] Process accounting resumed [ 634.090422][T13537] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 634.115299][T13526] Process accounting resumed [ 636.257005][ T5630] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 636.304750][T13572] FAULT_INJECTION: forcing a failure. [ 636.304750][T13572] name failslab, interval 1, probability 0, space 0, times 0 [ 636.342910][T13572] CPU: 0 UID: 0 PID: 13572 Comm: syz.0.1743 Tainted: G U L syzkaller #0 PREEMPT(full) [ 636.342964][T13572] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 636.342976][T13572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 636.342995][T13572] Call Trace: [ 636.343006][T13572] [ 636.343018][T13572] dump_stack_lvl+0x100/0x190 [ 636.343069][T13572] should_fail_ex.cold+0x5/0xa [ 636.343111][T13572] should_failslab+0xc2/0x120 [ 636.343160][T13572] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 636.343219][T13572] ? __d_alloc+0x34/0xa40 [ 636.343260][T13572] ? lockdep_init_map_type+0x5c/0x250 [ 636.343301][T13572] __d_alloc+0x34/0xa40 [ 636.343349][T13572] d_alloc_pseudo+0x1c/0xc0 [ 636.343379][T13572] alloc_file_pseudo+0xcf/0x230 [ 636.343428][T13572] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 636.343478][T13572] ? alloc_fd+0x476/0x790 [ 636.343524][T13572] sock_alloc_file+0x50/0x210 [ 636.343566][T13572] __sys_socket+0x1c0/0x260 [ 636.343613][T13572] ? __pfx___sys_socket+0x10/0x10 [ 636.343658][T13572] ? ksys_write+0x1ac/0x250 [ 636.343701][T13572] __x64_sys_socket+0x72/0xb0 [ 636.343744][T13572] ? lockdep_hardirqs_on+0x78/0x100 [ 636.343788][T13572] do_syscall_64+0x10b/0xf80 [ 636.343831][T13572] ? clear_bhb_loop+0x40/0x90 [ 636.343864][T13572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.343894][T13572] RIP: 0033:0x7f07a399ce59 [ 636.343920][T13572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 636.343949][T13572] RSP: 002b:00007f07a4934028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 636.343978][T13572] RAX: ffffffffffffffda RBX: 00007f07a3c15fa0 RCX: 00007f07a399ce59 [ 636.343997][T13572] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000010 [ 636.344014][T13572] RBP: 00007f07a3a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 636.344031][T13572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 636.344048][T13572] R13: 00007f07a3c16038 R14: 00007f07a3c15fa0 R15: 00007ffdaeb6d638 [ 636.344099][T13572] [ 636.851790][T13580] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 637.488759][T13594] Invalid ELF header magic: != ELF [ 638.360803][T13605] random: crng reseeded on system resumption [ 638.786114][T13609] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 640.342201][T13623] FAULT_INJECTION: forcing a failure. [ 640.342201][T13623] name failslab, interval 1, probability 0, space 0, times 0 [ 640.422492][T13623] CPU: 0 UID: 0 PID: 13623 Comm: syz.4.1753 Tainted: G U L syzkaller #0 PREEMPT(full) [ 640.422548][T13623] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 640.422559][T13623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 640.422577][T13623] Call Trace: [ 640.422587][T13623] [ 640.422599][T13623] dump_stack_lvl+0x100/0x190 [ 640.422640][T13623] should_fail_ex.cold+0x5/0xa [ 640.422681][T13623] should_failslab+0xc2/0x120 [ 640.422717][T13623] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 640.422764][T13623] ? __d_alloc+0x34/0xa40 [ 640.422804][T13623] ? lockdep_init_map_type+0x5c/0x250 [ 640.422843][T13623] __d_alloc+0x34/0xa40 [ 640.422891][T13623] d_alloc_pseudo+0x1c/0xc0 [ 640.422921][T13623] alloc_file_pseudo+0xcf/0x230 [ 640.422969][T13623] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 640.423016][T13623] ? alloc_fd+0x476/0x790 [ 640.423070][T13623] sock_alloc_file+0x50/0x210 [ 640.423103][T13623] __sys_socket+0x1c0/0x260 [ 640.423131][T13623] ? __pfx___sys_socket+0x10/0x10 [ 640.423158][T13623] ? ksys_write+0x1ac/0x250 [ 640.423184][T13623] __x64_sys_socket+0x72/0xb0 [ 640.423210][T13623] ? lockdep_hardirqs_on+0x78/0x100 [ 640.423237][T13623] do_syscall_64+0x10b/0xf80 [ 640.423265][T13623] ? clear_bhb_loop+0x40/0x90 [ 640.423301][T13623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.423328][T13623] RIP: 0033:0x7f03d339ce59 [ 640.423344][T13623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 640.423361][T13623] RSP: 002b:00007f03d427a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 640.423380][T13623] RAX: ffffffffffffffda RBX: 00007f03d3615fa0 RCX: 00007f03d339ce59 [ 640.423392][T13623] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000010 [ 640.423403][T13623] RBP: 00007f03d3432d6f R08: 0000000000000000 R09: 0000000000000000 [ 640.423413][T13623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 640.423424][T13623] R13: 00007f03d3616038 R14: 00007f03d3615fa0 R15: 00007fff1dfe42e8 [ 640.423446][T13623] [ 640.884294][T13625] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 641.977312][T13618] Process accounting paused [ 642.816426][T13658] FAULT_INJECTION: forcing a failure. [ 642.816426][T13658] name failslab, interval 1, probability 0, space 0, times 0 [ 642.860407][T13658] CPU: 0 UID: 0 PID: 13658 Comm: syz.0.1756 Tainted: G U L syzkaller #0 PREEMPT(full) [ 642.860448][T13658] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 642.860455][T13658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 642.860466][T13658] Call Trace: [ 642.860473][T13658] [ 642.860480][T13658] dump_stack_lvl+0x100/0x190 [ 642.860505][T13658] should_fail_ex.cold+0x5/0xa [ 642.860528][T13658] should_failslab+0xc2/0x120 [ 642.860552][T13658] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 642.860581][T13658] ? alloc_empty_file+0x5b/0x1c0 [ 642.860612][T13658] alloc_empty_file+0x5b/0x1c0 [ 642.860639][T13658] alloc_file_pseudo+0x13a/0x230 [ 642.860668][T13658] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 642.860696][T13658] ? alloc_fd+0x476/0x790 [ 642.860731][T13658] sock_alloc_file+0x50/0x210 [ 642.860755][T13658] __sys_socket+0x1c0/0x260 [ 642.860783][T13658] ? __pfx___sys_socket+0x10/0x10 [ 642.860810][T13658] ? ksys_write+0x1ac/0x250 [ 642.860837][T13658] __x64_sys_socket+0x72/0xb0 [ 642.860863][T13658] ? lockdep_hardirqs_on+0x78/0x100 [ 642.860896][T13658] do_syscall_64+0x10b/0xf80 [ 642.860923][T13658] ? clear_bhb_loop+0x40/0x90 [ 642.860945][T13658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.860964][T13658] RIP: 0033:0x7f07a399ce59 [ 642.860983][T13658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 642.861000][T13658] RSP: 002b:00007f07a4934028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 642.861024][T13658] RAX: ffffffffffffffda RBX: 00007f07a3c15fa0 RCX: 00007f07a399ce59 [ 642.861043][T13658] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000010 [ 642.861059][T13658] RBP: 00007f07a3a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 642.861072][T13658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 642.861082][T13658] R13: 00007f07a3c16038 R14: 00007f07a3c15fa0 R15: 00007ffdaeb6d638 [ 642.861105][T13658] [ 643.287146][T13663] FAULT_INJECTION: forcing a failure. [ 643.287146][T13663] name failslab, interval 1, probability 0, space 0, times 0 [ 643.409085][T13663] CPU: 1 UID: 0 PID: 13663 Comm: syz.2.1757 Tainted: G U L syzkaller #0 PREEMPT(full) [ 643.409121][T13663] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 643.409128][T13663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 643.409138][T13663] Call Trace: [ 643.409145][T13663] [ 643.409152][T13663] dump_stack_lvl+0x100/0x190 [ 643.409178][T13663] should_fail_ex.cold+0x5/0xa [ 643.409201][T13663] should_failslab+0xc2/0x120 [ 643.409223][T13663] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 643.409254][T13663] ? __d_alloc+0x34/0xa40 [ 643.409279][T13663] ? lockdep_init_map_type+0x5c/0x250 [ 643.409301][T13663] __d_alloc+0x34/0xa40 [ 643.409327][T13663] d_alloc_pseudo+0x1c/0xc0 [ 643.409345][T13663] alloc_file_pseudo+0xcf/0x230 [ 643.409374][T13663] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 643.409402][T13663] ? alloc_fd+0x476/0x790 [ 643.409427][T13663] sock_alloc_file+0x50/0x210 [ 643.409450][T13663] __sys_socket+0x1c0/0x260 [ 643.409478][T13663] ? __pfx___sys_socket+0x10/0x10 [ 643.409504][T13663] ? ksys_write+0x1ac/0x250 [ 643.409530][T13663] __x64_sys_socket+0x72/0xb0 [ 643.409556][T13663] ? lockdep_hardirqs_on+0x78/0x100 [ 643.409584][T13663] do_syscall_64+0x10b/0xf80 [ 643.409610][T13663] ? clear_bhb_loop+0x40/0x90 [ 643.409632][T13663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.409651][T13663] RIP: 0033:0x7fd66719ce59 [ 643.409666][T13663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.409684][T13663] RSP: 002b:00007fd667fd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 643.409702][T13663] RAX: ffffffffffffffda RBX: 00007fd667415fa0 RCX: 00007fd66719ce59 [ 643.409713][T13663] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000010 [ 643.409724][T13663] RBP: 00007fd667232d6f R08: 0000000000000000 R09: 0000000000000000 [ 643.409742][T13663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 643.409752][T13663] R13: 00007fd667416038 R14: 00007fd667415fa0 R15: 00007ffc046a4b98 [ 643.409774][T13663] [ 644.257319][T13677] FAULT_INJECTION: forcing a failure. [ 644.257319][T13677] name failslab, interval 1, probability 0, space 0, times 0 [ 644.321084][T13677] CPU: 0 UID: 0 PID: 13677 Comm: syz.4.1760 Tainted: G U L syzkaller #0 PREEMPT(full) [ 644.321136][T13677] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 644.321147][T13677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 644.321163][T13677] Call Trace: [ 644.321173][T13677] [ 644.321185][T13677] dump_stack_lvl+0x100/0x190 [ 644.321226][T13677] should_fail_ex.cold+0x5/0xa [ 644.321265][T13677] should_failslab+0xc2/0x120 [ 644.321302][T13677] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 644.321350][T13677] ? alloc_empty_file+0x5b/0x1c0 [ 644.321403][T13677] alloc_empty_file+0x5b/0x1c0 [ 644.321451][T13677] alloc_file_pseudo+0x13a/0x230 [ 644.321497][T13677] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 644.321542][T13677] ? alloc_fd+0x476/0x790 [ 644.321586][T13677] sock_alloc_file+0x50/0x210 [ 644.321625][T13677] __sys_socket+0x1c0/0x260 [ 644.321670][T13677] ? __pfx___sys_socket+0x10/0x10 [ 644.321709][T13677] ? ksys_write+0x1ac/0x250 [ 644.321754][T13677] __x64_sys_socket+0x72/0xb0 [ 644.321809][T13677] ? lockdep_hardirqs_on+0x78/0x100 [ 644.321853][T13677] do_syscall_64+0x10b/0xf80 [ 644.321893][T13677] ? clear_bhb_loop+0x40/0x90 [ 644.321930][T13677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.321961][T13677] RIP: 0033:0x7f03d339ce59 [ 644.321986][T13677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 644.322014][T13677] RSP: 002b:00007f03d427a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 644.322043][T13677] RAX: ffffffffffffffda RBX: 00007f03d3615fa0 RCX: 00007f03d339ce59 [ 644.322063][T13677] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000010 [ 644.322080][T13677] RBP: 00007f03d3432d6f R08: 0000000000000000 R09: 0000000000000000 [ 644.322099][T13677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 644.322116][T13677] R13: 00007f03d3616038 R14: 00007f03d3615fa0 R15: 00007fff1dfe42e8 [ 644.322157][T13677] [ 645.037374][T13674] ima: policy update failed [ 645.067881][ T29] audit: type=1802 audit(1843104654.225:38): pid=13674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1759" res=0 errno=0 [ 646.385926][T13697] Process accounting resumed [ 647.378328][T13716] FAULT_INJECTION: forcing a failure. [ 647.378328][T13716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 647.436375][T13716] CPU: 1 UID: 0 PID: 13716 Comm: syz.2.1764 Tainted: G U L syzkaller #0 PREEMPT(full) [ 647.436424][T13716] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 647.436434][T13716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 647.436451][T13716] Call Trace: [ 647.436460][T13716] [ 647.436471][T13716] dump_stack_lvl+0x100/0x190 [ 647.436509][T13716] should_fail_ex.cold+0x5/0xa [ 647.436547][T13716] core_sys_select+0x938/0xbb0 [ 647.436590][T13716] ? __pfx_core_sys_select+0x10/0x10 [ 647.436623][T13716] ? get_pid_task+0xfc/0x250 [ 647.436672][T13716] ? get_pid_task+0x106/0x250 [ 647.436749][T13716] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 647.436792][T13716] ? kernel_write+0x6a3/0x6c0 [ 647.436824][T13716] ? __fget_files+0x215/0x3d0 [ 647.436857][T13716] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 647.436908][T13716] kern_select+0x20c/0x270 [ 647.436945][T13716] ? __pfx_kern_select+0x10/0x10 [ 647.436983][T13716] ? __pfx_ksys_write+0x10/0x10 [ 647.437021][T13716] __x64_sys_select+0xbd/0x160 [ 647.437053][T13716] ? do_syscall_64+0x90/0xf80 [ 647.437094][T13716] ? lockdep_hardirqs_on+0x78/0x100 [ 647.437136][T13716] do_syscall_64+0x10b/0xf80 [ 647.437177][T13716] ? clear_bhb_loop+0x40/0x90 [ 647.437213][T13716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.437243][T13716] RIP: 0033:0x7fd66719ce59 [ 647.437267][T13716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.437293][T13716] RSP: 002b:00007fd667f72028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 647.437322][T13716] RAX: ffffffffffffffda RBX: 00007fd667416270 RCX: 00007fd66719ce59 [ 647.437342][T13716] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000009 [ 647.437359][T13716] RBP: 00007fd667f72090 R08: 0000000000000000 R09: 0000000000000000 [ 647.437376][T13716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.437393][T13716] R13: 00007fd667416308 R14: 00007fd667416270 R15: 00007ffc046a4b98 [ 647.437433][T13716] [ 647.717766][T13728] FAULT_INJECTION: forcing a failure. [ 647.717766][T13728] name failslab, interval 1, probability 0, space 0, times 0 [ 647.906759][T13728] CPU: 1 UID: 0 PID: 13728 Comm: syz.2.1767 Tainted: G U L syzkaller #0 PREEMPT(full) [ 647.906820][T13728] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 647.906831][T13728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 647.906848][T13728] Call Trace: [ 647.906856][T13728] [ 647.906866][T13728] dump_stack_lvl+0x100/0x190 [ 647.906903][T13728] should_fail_ex.cold+0x5/0xa [ 647.906941][T13728] should_failslab+0xc2/0x120 [ 647.906973][T13728] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 647.907018][T13728] ? alloc_empty_file+0x5b/0x1c0 [ 647.907066][T13728] alloc_empty_file+0x5b/0x1c0 [ 647.907108][T13728] alloc_file_pseudo+0x13a/0x230 [ 647.907151][T13728] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 647.907194][T13728] ? alloc_fd+0x476/0x790 [ 647.907234][T13728] sock_alloc_file+0x50/0x210 [ 647.907271][T13728] __sys_socket+0x1c0/0x260 [ 647.907311][T13728] ? __pfx___sys_socket+0x10/0x10 [ 647.907357][T13728] ? ksys_write+0x1ac/0x250 [ 647.907401][T13728] __x64_sys_socket+0x72/0xb0 [ 647.907441][T13728] ? lockdep_hardirqs_on+0x78/0x100 [ 647.907482][T13728] do_syscall_64+0x10b/0xf80 [ 647.907521][T13728] ? clear_bhb_loop+0x40/0x90 [ 647.907555][T13728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.907583][T13728] RIP: 0033:0x7fd66719ce59 [ 647.907610][T13728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.907635][T13728] RSP: 002b:00007fd667fd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 647.907664][T13728] RAX: ffffffffffffffda RBX: 00007fd667415fa0 RCX: 00007fd66719ce59 [ 647.907683][T13728] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000010 [ 647.907699][T13728] RBP: 00007fd667232d6f R08: 0000000000000000 R09: 0000000000000000 [ 647.907717][T13728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 647.907734][T13728] R13: 00007fd667416038 R14: 00007fd667415fa0 R15: 00007ffc046a4b98 [ 647.907773][T13728] [ 650.103826][T13737] vivid-008: ================= START STATUS ================= [ 650.127235][T13737] vivid-008: ================== END STATUS ================== [ 652.517797][T13767] ima: policy update failed [ 652.582183][ T29] audit: type=1802 audit(1843104661.770:39): pid=13767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1770" res=0 errno=0 [ 652.992190][T13777] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 654.285660][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 654.298745][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 654.311377][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 654.326670][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 654.334346][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 656.406959][ T5630] Bluetooth: hci3: command tx timeout [ 657.399257][T13790] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.427265][T13790] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.462192][T13790] bridge_slave_0: entered allmulticast mode [ 657.491358][T13822] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1780'. [ 657.508313][T13790] bridge_slave_0: entered promiscuous mode [ 657.596071][T13790] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.630278][T13790] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.651539][T13790] bridge_slave_1: entered allmulticast mode [ 657.671750][T13835] vivid-008: ================= START STATUS ================= [ 657.690925][T13835] vivid-008: ================== END STATUS ================== [ 657.699485][T13790] bridge_slave_1: entered promiscuous mode [ 658.100518][T13790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 658.117783][T13790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.286154][T13790] team0: Port device team_slave_0 added [ 658.344642][T13790] team0: Port device team_slave_1 added [ 658.484260][T13790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 658.492020][ T5630] Bluetooth: hci3: command tx timeout [ 658.532636][T13790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 658.626422][T13790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 658.643535][T13790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 658.650865][T13790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 658.678150][T13790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 659.142173][T13790] hsr_slave_0: entered promiscuous mode [ 659.191909][T13790] hsr_slave_1: entered promiscuous mode [ 659.239680][T13790] debugfs: 'hsr0' already exists in 'hsr' [ 659.297537][T13790] Cannot create hsr debugfs directory [ 660.547538][ T5630] Bluetooth: hci3: command tx timeout [ 661.604114][T13790] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 661.653549][T13790] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 661.685452][T13790] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 661.732562][ T5630] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 661.759457][T13790] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 661.881500][T13790] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 661.949511][T13790] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 662.078130][T13790] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 662.113679][T13790] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 662.504727][T13790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.604560][T13790] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.627634][ T5630] Bluetooth: hci3: command tx timeout [ 662.689985][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.697284][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 662.765996][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.773165][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 664.800117][T13605] Process accounting paused [ 666.357370][T13605] ------------[ cut here ]------------ [ 666.365156][T13605] ODEBUG: free active (active state 0) object: ffff88807f289438 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0 [ 666.378645][T13605] WARNING: lib/debugobjects.c:629 at debug_print_object+0x18e/0x2a0, CPU#1: syz.3.1750/13605 [ 666.389456][T13605] Modules linked in: [ 666.393452][T13605] CPU: 1 UID: 0 PID: 13605 Comm: syz.3.1750 Tainted: G U L syzkaller #0 PREEMPT(full) [ 666.404595][T13605] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 666.409989][T13605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 666.421789][T13605] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 666.427622][T13605] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 12 af e2 0b 41 56 48 8b 14 dd c0 49 1c 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 2c 2b d8 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 666.447697][T13605] RSP: 0018:ffffc900025876f8 EFLAGS: 00010246 [ 666.453972][T13605] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 666.462281][T13605] RDX: ffffffff8c1c4900 RSI: ffffffff8c1c4520 RDI: ffffffff90e2a1a0 [ 666.472465][T13605] RBP: 0000000000000001 R08: ffff88807f289438 R09: ffffffff8bb2c700 [ 666.480635][T13605] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1c4520 [ 666.488879][T13605] R13: ffffffff8bb2c740 R14: ffffffff8a92d280 R15: ffffc900025877f8 [ 666.496878][T13605] FS: 0000000000000000(0000) GS:ffff888124477000(0000) knlGS:0000000000000000 [ 666.505878][T13605] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 666.513077][T13605] CR2: 0000001b34a06ff8 CR3: 000000007990e000 CR4: 00000000003526f0 [ 666.521418][T13605] Call Trace: [ 666.524743][T13605] [ 666.527675][T13605] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 666.533214][T13605] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 666.539168][T13605] debug_check_no_obj_freed+0x4da/0x630 [ 666.544835][T13605] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 666.551088][T13605] ? __page_table_check_zero+0x333/0x410 [ 666.556797][T13605] ? __page_table_check_zero+0x333/0x410 [ 666.562556][T13605] ? __page_table_check_zero+0x338/0x410 [ 666.568295][T13605] __free_frozen_pages+0x3f5/0x1040 [ 666.573844][T13605] hci_release_dev+0x4ef/0x630 [ 666.578891][T13605] ? __pfx_hci_release_dev+0x10/0x10 [ 666.584205][T13605] ? device_release+0x97/0x270 [ 666.589089][T13605] ? rcu_is_watching+0x12/0xc0 [ 666.593877][T13605] ? device_release+0x97/0x270 [ 666.598695][T13605] bt_host_release+0x6a/0xb0 [ 666.603330][T13605] ? __pfx_bt_host_release+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 666.608746][T13605] device_release+0xd2/0x270 [ 666.613380][T13605] kobject_put+0x1f7/0x640 [ 666.618081][T13605] put_device+0x1f/0x30 [ 666.622497][T13605] vhci_release+0x185/0x230 [ 666.627011][T13605] ? __pfx_vhci_release+0x10/0x10 [ 666.632179][T13605] __fput+0x3ff/0xb50 [ 666.636222][T13605] task_work_run+0x150/0x240 [ 666.640959][T13605] ? __pfx_task_work_run+0x10/0x10 [ 666.646105][T13605] ? free_uts_ns+0x16e/0x330 [ 666.650912][T13605] do_exit+0x951/0x2af0 [ 666.655115][T13605] ? __pfx___might_resched+0x10/0x10 [ 666.660485][T13605] ? __pfx_do_exit+0x10/0x10 [ 666.665122][T13605] ? do_raw_spin_lock+0x128/0x260 [ 666.670261][T13605] ? find_held_lock+0x2b/0x80 [ 666.675146][T13605] ? get_signal+0x7e5/0x2210 [ 666.679925][T13605] do_group_exit+0xd5/0x2a0 [ 666.684436][T13605] get_signal+0x20ff/0x2210 [ 666.688991][T13605] ? __pfx_get_signal+0x10/0x10 [ 666.693861][T13605] ? kernel_move_pages+0xcfd/0x13f0 [ 666.699103][T13605] ? do_futex+0x192/0x350 [ 666.703457][T13605] arch_do_signal_or_restart+0x91/0x7a0 [ 666.709044][T13605] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 666.715217][T13605] ? rcu_is_watching+0x12/0xc0 [ 666.720259][T13605] exit_to_user_mode_loop+0x8b/0x4f0 [ 666.725551][T13605] ? rcu_is_watching+0x12/0xc0 [ 666.730570][T13605] do_syscall_64+0x6f2/0xf80 [ 666.735177][T13605] ? clear_bhb_loop+0x40/0x90 [ 666.739897][T13605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.745794][T13605] RIP: 0033:0x7f5b2699ce59 [ 666.750235][T13605] Code: Unable to access opcode bytes at 0x7f5b2699ce2f. [ 666.757268][T13605] RSP: 002b:00007f5b27902028 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 666.765814][T13605] RAX: fffffffffffffff2 RBX: 00007f5b26c15fa0 RCX: 00007f5b2699ce59 [ 666.773858][T13605] RDX: 0000000000000000 RSI: 0002000000000003 RDI: 0000000000000001 [ 666.782011][T13605] RBP: 00007f5b26a32d6f R08: 0000000000000000 R09: 8000400000000000 [ 666.790116][T13605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 666.798137][T13605] R13: 00007f5b26c16038 R14: 00007f5b26c15fa0 R15: 00007ffc957e2af8 [ 666.806120][T13605] [ 666.809193][T13605] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 666.816496][T13605] CPU: 1 UID: 0 PID: 13605 Comm: syz.3.1750 Tainted: G U L syzkaller #0 PREEMPT(full) [ 666.827446][T13605] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 666.832644][T13605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 666.843313][T13605] Call Trace: [ 666.846590][T13605] [ 666.849545][T13605] dump_stack_lvl+0x100/0x190 [ 666.854242][T13605] vpanic+0x552/0x970 [ 666.858227][T13605] ? __pfx_vpanic+0x10/0x10 [ 666.862737][T13605] panic+0xd1/0xe0 [ 666.866454][T13605] ? __pfx_panic+0x10/0x10 [ 666.870888][T13605] ? check_panic_on_warn+0x1f/0x90 [ 666.876020][T13605] check_panic_on_warn.cold+0x19/0x34 [ 666.881415][T13605] ? debug_print_object+0x18e/0x2a0 [ 666.886727][T13605] __warn.cold+0x191/0x328 [ 666.891153][T13605] __report_bug+0x296/0x3d0 [ 666.895702][T13605] ? debug_print_object+0x18e/0x2a0 [ 666.900916][T13605] ? __pfx___report_bug+0x10/0x10 [ 666.905954][T13605] ? unwind_next_frame+0x3c8/0x2090 [ 666.911170][T13605] report_bug_entry+0xe1/0x290 [ 666.915954][T13605] ? debug_print_object+0x19b/0x2a0 [ 666.921163][T13605] handle_bug+0x1cd/0x2a0 [ 666.925501][T13605] exc_invalid_op+0x17/0x50 [ 666.930014][T13605] asm_exc_invalid_op+0x1a/0x20 [ 666.934884][T13605] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 666.940742][T13605] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 12 af e2 0b 41 56 48 8b 14 dd c0 49 1c 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 2c 2b d8 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 666.960451][T13605] RSP: 0018:ffffc900025876f8 EFLAGS: 00010246 [ 666.966528][T13605] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 666.974500][T13605] RDX: ffffffff8c1c4900 RSI: ffffffff8c1c4520 RDI: ffffffff90e2a1a0 [ 666.982482][T13605] RBP: 0000000000000001 R08: ffff88807f289438 R09: ffffffff8bb2c700 [ 666.990541][T13605] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1c4520 [ 666.998523][T13605] R13: ffffffff8bb2c740 R14: ffffffff8a92d280 R15: ffffc900025877f8 [ 667.006550][T13605] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 667.012113][T13605] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 667.017583][T13605] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 667.023427][T13605] debug_check_no_obj_freed+0x4da/0x630 [ 667.028994][T13605] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 667.035070][T13605] ? __page_table_check_zero+0x333/0x410 [ 667.040791][T13605] ? __page_table_check_zero+0x333/0x410 [ 667.046443][T13605] ? __page_table_check_zero+0x338/0x410 [ 667.052082][T13605] __free_frozen_pages+0x3f5/0x1040 [ 667.057297][T13605] hci_release_dev+0x4ef/0x630 [ 667.062067][T13605] ? __pfx_hci_release_dev+0x10/0x10 [ 667.067355][T13605] ? device_release+0x97/0x270 [ 667.072129][T13605] ? rcu_is_watching+0x12/0xc0 [ 667.076900][T13605] ? device_release+0x97/0x270 [ 667.081676][T13605] bt_host_release+0x6a/0xb0 [ 667.086287][T13605] ? __pfx_bt_host_release+0x10/0x10 [ 667.091588][T13605] device_release+0xd2/0x270 [ 667.096205][T13605] kobject_put+0x1f7/0x640 [ 667.100625][T13605] put_device+0x1f/0x30 [ 667.104803][T13605] vhci_release+0x185/0x230 [ 667.109312][T13605] ? __pfx_vhci_release+0x10/0x10 [ 667.114343][T13605] __fput+0x3ff/0xb50 [ 667.118338][T13605] task_work_run+0x150/0x240 [ 667.122930][T13605] ? __pfx_task_work_run+0x10/0x10 [ 667.128038][T13605] ? free_uts_ns+0x16e/0x330 [ 667.132642][T13605] do_exit+0x951/0x2af0 [ 667.136826][T13605] ? __pfx___might_resched+0x10/0x10 [ 667.142217][T13605] ? __pfx_do_exit+0x10/0x10 [ 667.146828][T13605] ? do_raw_spin_lock+0x128/0x260 [ 667.151854][T13605] ? find_held_lock+0x2b/0x80 [ 667.156541][T13605] ? get_signal+0x7e5/0x2210 [ 667.161142][T13605] do_group_exit+0xd5/0x2a0 [ 667.165667][T13605] get_signal+0x20ff/0x2210 [ 667.170269][T13605] ? __pfx_get_signal+0x10/0x10 [ 667.175131][T13605] ? kernel_move_pages+0xcfd/0x13f0 [ 667.180341][T13605] ? do_futex+0x192/0x350 [ 667.184679][T13605] arch_do_signal_or_restart+0x91/0x7a0 [ 667.190256][T13605] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 667.196431][T13605] ? rcu_is_watching+0x12/0xc0 [ 667.201321][T13605] exit_to_user_mode_loop+0x8b/0x4f0 [ 667.206624][T13605] ? rcu_is_watching+0x12/0xc0 [ 667.211423][T13605] do_syscall_64+0x6f2/0xf80 [ 667.216024][T13605] ? clear_bhb_loop+0x40/0x90 [ 667.220724][T13605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.226640][T13605] RIP: 0033:0x7f5b2699ce59 [ 667.231074][T13605] Code: Unable to access opcode bytes at 0x7f5b2699ce2f. [ 667.238096][T13605] RSP: 002b:00007f5b27902028 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 667.246516][T13605] RAX: fffffffffffffff2 RBX: 00007f5b26c15fa0 RCX: 00007f5b2699ce59 [ 667.254492][T13605] RDX: 0000000000000000 RSI: 0002000000000003 RDI: 0000000000000001 [ 667.262461][T13605] RBP: 00007f5b26a32d6f R08: 0000000000000000 R09: 8000400000000000 [ 667.270465][T13605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 667.278436][T13605] R13: 00007f5b26c16038 R14: 00007f5b26c15fa0 R15: 00007ffc957e2af8 [ 667.286446][T13605] [ 667.290099][T13605] Kernel Offset: disabled [ 667.294432][T13605] Rebooting in 86400 seconds..