last executing test programs: 5.290408621s ago: executing program 2 (id=613): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x3, @empty}, 0x54) ioctl$auto(0x4000000000000c8, 0x400454cc, 0x6f) socket(0xa, 0x2, 0x0) setsockopt$auto(0x3, 0x0, 0x28, 0xfffffffffffffffc, 0x70) write$auto(0x3, 0x0, 0x1) lseek$auto(r0, 0x200000000ff, 0x3) write$auto(0x3, 0x0, 0xfffffdef) setresuid$auto(0x0, 0x0, 0xee01) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = fanotify_init$auto(0x5, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) remap_file_pages$auto(0x1, 0x200000401000, 0x1, 0xb74, 0x66a) fanotify_mark$auto(r1, 0x205, 0xa, 0x4, 0x0) openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, 0x0, 0x24002, 0x0) socket(0x10, 0x2, 0x4) openat$auto_l2cap_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$auto_UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000180)={0xffffffffffffffff, 0x8, 0x2000000, 0x20000008000}) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 4.830227263s ago: executing program 2 (id=615): unshare$auto(0x40000080) setgroups$auto(0x9, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x8000000000000005, 0x7fff, 0x0, 0x0, 0x2) mbind$auto(0xf000, 0x8000000000000002, 0x100000000, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0xffffffffffffffff, 0x2020009, 0x401, 0xeb1, r0, 0x100000008000) shmctl$auto_IPC_INFO(0x5, 0x3, 0x0) keyctl$auto(0x1f, 0x1, 0x0, 0x3, 0x3ff) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x1, 0x84) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, 0x0, 0x7fffffffffffffff, 0xffffffffffffe6d6, 0x2) socket(0x15, 0x800, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/midiC2D2\x00', 0xc2240, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x8100, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r1, r1, 0x0, 0x2) 3.630208192s ago: executing program 2 (id=626): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) ioctl$auto_RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) getsockopt$auto_SO_RCVTIMEO_OLD(r0, 0xffffffff, 0x14, &(0x7f00000003c0)='\x00\x00+\xa2\xc7\x92\x00\x00\x00\x00\x00\x00\x03\x90\xf9\xe8\x11\x80\a :w\xac[\xbb\xac\xe3\xe0\xff8g:\x04\x00\x00\x00\x00\x00\x00\x00=r\x03\x95\x87\xbaM\xd80=\x81\x8ez\xab\xc3^\xb0\x03Ijj\xc4\xf9\xe6\x84P\x15q\xaa\xc8\x03\xba\x8c\xe3\xc3r\xb8\x1b\x98\xe8\xbc\x11.\xd9A\xb3P\xfa\x04\x95\xfc*\v\xb8\xc5\x16Z\xb7\x82\xbc\x96o\xd2G\xf8\x0f`\xa1\x1f\xc6\xd6\xc5\xdcM\x17\x11\xd2\x12\x988\xa3`\xad[UI\xf7\xc7\xcc\x13XH\xc1\x02\x84$\x97;\xebM`\x7f\xe4\x8dbe\xd8\x901\x8e\'\x10\xf6`^\xd28Xk\x03\x8d\b\xbd\xe2d\\\x11w(\xc7D!,6\x01\x00\x9f\x8bxg\xe2\xfc~\x006\x17\x9b9?,\xd8\n\x82r\x12\xa9\xfd@\x90&\xd3l\xa7[\x9bx\xf7\xb9[m\x9a\xee\"\x9e\x81|\xa4\x8f5\xea\t\x02Axu\xe9io`\x81\xb5\x89\x01\xa0\xa8~]\xd8]\x14}\x8c\xacRc\r\xb7.\x7f\xb3\x85\xff\xf5\xb0\x11/\x80{\xab)\x05\xb3HHU\xcb\x00', 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x7fffffff) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) bpf$auto_BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)=@prog_bind_map={0xffffffffffffffff, r1, 0x9}, 0x9) r2 = io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0x24008054}, 0x40) capget$auto(&(0x7f0000001100)={0x3, 0x0}, &(0x7f0000001140)={0x4, 0x3, 0x1ff}) sendmsg$auto_NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001980)={&(0x7f0000001180)={0x7e8, 0x0, 0x401, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0xc4, 0x7d, 0x0, 0x1, [@nested={0x14, 0x6, 0x0, 0x1, [@typed={0x8, 0x118, 0x0, 0x0, @ipv4=@private=0xa010101}, @typed={0x8, 0x123, 0x0, 0x0, @fd=r2}]}, @typed={0x8, 0x40, 0x0, 0x0, @pid=r3}, @typed={0x8, 0x2e, 0x0, 0x0, @ipv4=@remote}, @nested={0x8, 0xad, 0x0, 0x1, [@typed={0x4, 0x3}]}, @typed={0x4, 0x28}, @typed={0x8, 0x108, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="05c89382e4c3ffc20fdb29bc803cc565b759132d1936419c16803cb5b911007dd4f20012fbbcea3eabfb6c7221701673cec992da156f01b200f1610291069d8337275f27060e25ff79b444de797e7ff72b0ed5d0371fdbfd80fe215407a20755620477f113691930e902841789ea38f406dc00db", @typed={0x14, 0x11f, 0x0, 0x0, @ipv6=@remote}]}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0x5}, @NL80211_ATTR_PROBE_RESP={0x6fa, 0x91, "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"}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x7e8}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x400c1) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100000000) socket(0x2, 0x1, 0x106) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/net/bonding_masters\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000000c0)=""/4096, 0x1000) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, 0x0, 0xa901, 0x0) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, 0x0, 0xa040, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) shutdown$auto(0x200000003, 0x2) 3.495848029s ago: executing program 0 (id=627): mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) madvise$auto(0x725d, 0x8001, 0x1b) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x200, 0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) exit$auto(0x6) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x60040440}, 0x4) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000080), 0x100401, 0x0) write$auto_evm_xattr_ops_evm_secfs(r2, &(0x7f00000000c0)='.', 0x1) socket(0xf, 0x80000, 0xc) write$auto(0xca, &(0x7f0000000140)='\x04\x0e\x06\xd5\x89|d\v\x00\x00@\x00\x81\x00\x00\x00\xf6\xf5\x00\xdf\xff\x00', 0x401) mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x9, 0x4000000000df, 0x1d, 0x401, 0x8000) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) sysfs$auto(0x2, 0x3c, 0x0) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x3, 0x0, &(0x7f00000000c0), 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/net/snmp\x00', 0x319900, 0x0) write$auto(r4, &(0x7f0000000000)='j', 0x100) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(0xffffffffffffffff, 0x0, 0x40) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x2000c840) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x20) 2.50791171s ago: executing program 0 (id=632): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r0 = socket(0x11, 0x80003, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="012527bd7000fb0c0eec4c00000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x4) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(r0, 0x1, 0x21, 0x0, 0x9) r5 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/uprobe_events\x00', 0x2002, 0x0) write$auto_uprobe_events_ops_trace_uprobe(r5, &(0x7f0000000100)="2d8d", 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x3) pwrite64$auto(0xc8, 0x0, 0x4e, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) (async) socket(0x11, 0x80003, 0x300) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) (async) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="012527bd7000fb0c0eec4c00000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) (async) setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x4) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) setsockopt$auto(r0, 0x1, 0x21, 0x0, 0x9) (async) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/uprobe_events\x00', 0x2002, 0x0) (async) write$auto_uprobe_events_ops_trace_uprobe(r5, &(0x7f0000000100)="2d8d", 0x2) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x3) (async) pwrite64$auto(0xc8, 0x0, 0x4e, 0x3) (async) 2.209529772s ago: executing program 1 (id=635): mmap$auto(0x7, 0x0, 0xdf, 0xeb5, 0x401, 0x8000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) mmap$auto(0x4000008, 0x1, 0x4000000000dd, 0x15, r0, 0x8000) move_pages$auto(0x0, 0x4, 0x0, 0x0, 0x0, 0x400000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/platform/vivid.0/video4linux/radio13/power/control\x00', 0x412800, 0x0) writev$auto(r2, 0x0, 0x3) r3 = socket(0x2, 0x801, 0x0) listen$auto(r3, 0x200005) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_smbd_genl(0x0, r3) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(0xffffffffffffffff, 0x0, 0x30004850) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x8e00, 0x0) r4 = socket(0xa, 0x5, 0x0) getsockopt$auto(r4, 0x84, 0x7f, 0x0, &(0x7f0000000040)=0x1004) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0xc2781, 0x0) unshare$auto(0x40000080) fallocate$auto(0xffffffffffffffff, 0x0, 0x7, 0x4cbd5d) rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100)='./file1\x00') r5 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) getdents$auto(r5, 0x0, 0x62d2) 2.048302078s ago: executing program 3 (id=636): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x11, 0x3, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f0000000240), 0x64003, 0x0) read$auto_ptdump_curusr_fops_(r3, &(0x7f0000000300)=""/176, 0xb0) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_SUPPORTED_SELECTORS={0x5, 0x14e, "13"}]}, 0x1c}}, 0x80) sendmsg$auto_NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000128bd7000fddbdf252b00000034001b80050001000000000004000200040003000500010005000000040003000500010003000000040002000500010008000000"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x11, 0x80003, 0x300) r5 = io_uring_setup$auto(0x6, 0x0) r6 = ioctl$auto_dma_heap_fops_dma_heap(r5, 0x9, &(0x7f00000001c0)="c0c0f26e05e7095316e2c6aa4d37826a6200c2a9014380a47dcbcae3d1023c8bdf86fc23a00c08ec3df99c62488b31b9fb0fbad28848610da34b11f2079498ad65f0473e005df6f3466874a1a900db6485988d3cb5e0260c0a2e2e") mmap$auto(0x7512, 0x7, 0x8000, 0x10, r6, 0x0) setsockopt$auto(r4, 0x107, 0x14, 0x0, 0x4) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) sysfs$auto(0x2, 0x1f, 0x0) r7 = socket(0x2, 0x801, 0x106) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/buffer_subbuf_size_kb\x00', 0x2401, 0x0) write$auto(r8, &(0x7f0000000280)='9\x00d1L\xf0\x15\xba\xa17=(\x18\xdd\xff\xec\v\xb5^\xa1/[vv\x19\x00\x7f0\xa30\xc7\x9d\x1f]\xf8\xe04\xe7s\x9a\xd3H\xd3F\x819+\x90S\x10\xb2\b\xf8)\xe4IU\t\xb8\r\x9a\x8e\'Q\xfb\xb5I\x0f\x96;\xc7\\2V\x01g\xf8\xce\xbb\x9d\xa2c2\x00\x7f\xa1:\ax\xbc\x17\xde\x0e<\x00\x00\x00\x00\x00\x00\x00\x06\xc8\xf4\xdf\xcc\x9b\xd7D\xd7ARq', 0x40) getsockopt$auto(r7, 0x11c, 0x2, 0x0, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x7, 0x8}) sendmmsg$auto(r0, &(0x7f0000000400)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={0x0, 0x49}, 0x1, 0x0, 0x5, 0x3}, 0x5}, 0x2, 0x100) 1.94342615s ago: executing program 2 (id=637): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) r0 = bpf$auto_BPF_OBJ_GET(0x7, &(0x7f0000000140)=@raw_tracepoint={0x8c, 0xffffffffffffffff, 0x0, 0x3}, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)="9a6b40628cfab709090c01585cc2a9dccb015ba586a35b9f119b1d621f5ca29a7e5812084eb1e08071a3351b01a6955efaaa395a0341b74b8eac0a8b56ffa53147111ce18748cfb167559108fa4a0a5c0bd1a5d4603187dda038d36cf7cd3d47817c56e1f613ffb79743ce4385ac75b44deb47f87c7c60fdf0f259d7329038dc0269e46d7c3f7e1ba2ad02481b644c0ed3af80d0fab1315d240724f7bee405f7f4d4a774110e93de41") io_uring_setup$auto(0x7, 0x0) socket(0xa, 0x801, 0x84) open(0x0, 0x22240, 0x154) socketpair$auto(0x800019, 0xf, 0x1, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptys5\x00', 0x2000, 0x0) mprotect$auto(0x1ffffffff000, 0x100018, 0x4) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TIOCSTI2(r1, 0x5412, 0x0) 1.814128203s ago: executing program 3 (id=638): mmap$auto(0x0, 0x400006, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setrlimit$auto(0x0, &(0x7f0000000000)={0x10000000000006, 0x7}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x20, r1, 0x9, 0x70bd27, 0x25dfdbfb, {}, [@NET_SHAPER_A_IFINDEX={0x8, 0x8, r3}, @NET_SHAPER_A_HANDLE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) io_setup$auto(0x1, 0x0) r4 = io_uring_setup$auto(0x40000002c55, 0x0) r5 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), r2) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="000228bd700000dcdf25050000005c001180010000003edaa0ef1dca33f2a5bf02ce756beb71f66e15234cdba97ff131fc2b7358c919fcbaa5458fe5ce12aeb63f1393c69c73290b17d1c6a749918bb30ee912c3a781b00751554f5327506bda0e49ca6e9b2e83094eedd0ab18524f077327eca25ee730"], 0x1c}, 0x1, 0x0, 0x0, 0xc000084}, 0x40000) io_uring_register$auto_IORING_REGISTER_FILE_ALLOC_RANGE(r4, 0x19, &(0x7f0000000040), 0x4) 1.486771053s ago: executing program 0 (id=639): socket(0x15, 0x5, 0x0) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) prctl$auto_PR_TASK_PERF_EVENTS_DISABLE(0x1f, 0x5, 0x7000000000, 0x978f, 0x7) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) select$auto(0x804, 0x0, &(0x7f0000000100)={[0x9, 0x0, 0x0, 0x80000300, 0x1, 0x0, 0x2, 0x3, 0x81, 0x10000005e58296b, 0x1e, 0x9, 0x7ff, 0x200, 0x20000000008, 0x4000000000006]}, 0x0, 0x0) ioctl$auto_SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000100)="000004") io_uring_register$auto_IORING_REGISTER_RESIZE_RINGS(0xffffffffffffffff, 0x21, 0x0, 0x1a) r2 = socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) r3 = socket(0xa, 0x1, 0x84) ioctl$auto_FS_IOC_SETFLAGS(r3, 0x40086602, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$auto_UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000400)={{0xc, 0x23, 0xa6, 0x83}, "66ac010005000000000068d190eb0d4a4cada7272464294b9183349eef4c1f028fdcc8ecc66fdd02316f064ebd893007abb4c0bbc3b822f66eaf240963110d61771552c03de65800", 0x2}) ioctl$auto_UI_DEV_CREATE(r4, 0x5501, 0x0) io_uring_setup$auto(0x6, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00', @ANYBLOB="0f0026bd"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) getsockopt$auto(r3, 0x84, 0x1b, 0x0, 0x0) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000140), r2) 1.268254782s ago: executing program 3 (id=640): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/system/node/node1/distance\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001080)=""/98, 0x62) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000200), 0xe0e02, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async\x00', 0x183941, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x22c02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000280)='/proc/slabinfo\x00', 0x40000, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0xb, 0xd, 0x2007d48, 0x948b, 0x4, 0x0, 0x4b, 0x3, 0x0, 0x80000001, 0x7, 0x4, 0x5, 0x2, 0x1]}, 0x0) 1.183363425s ago: executing program 2 (id=641): mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) madvise$auto(0x725d, 0x8001, 0x1b) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x200, 0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) exit$auto(0x6) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x60040440}, 0x4) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000080), 0x100401, 0x0) write$auto_evm_xattr_ops_evm_secfs(r2, &(0x7f00000000c0)='.', 0x1) socket(0xf, 0x80000, 0xc) write$auto(0xca, &(0x7f0000000140)='\x04\x0e\x06\xd5\x89|d\v\x00\x00@\x00\x81\x00\x00\x00\xf6\xf5\x00\xdf\xff\x00', 0x401) mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x9, 0x4000000000df, 0x1d, 0x401, 0x8000) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) sysfs$auto(0x2, 0x3c, 0x0) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x3, 0x0, &(0x7f00000000c0), 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/net/snmp\x00', 0x319900, 0x0) write$auto(r4, &(0x7f0000000000)='j', 0x100) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(0xffffffffffffffff, 0x0, 0x40) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x2000c840) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r4], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x20) 1.111342643s ago: executing program 3 (id=642): r0 = ioctl$auto_TUNSETSNDBUF2(0xffffffffffffffff, 0x400454d4, &(0x7f0000000000)=0x10000) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/213, 0xd5) r1 = ioctl$auto_TUNSETPERSIST(r0, 0x400454cb, &(0x7f0000000140)=0x6) setsockopt$auto_SO_DOMAIN(r0, 0x0, 0x27, &(0x7f0000000180)='&\x00', 0x0) getsockopt$auto_SO_RCVTIMEO_OLD(r1, 0x7ff, 0x14, &(0x7f00000001c0)='&\x00', &(0x7f0000000200)=0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r0) sendmsg$auto_NL80211_CMD_GET_MPP(r2, &(0x7f0000000bc0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b80)={&(0x7f00000002c0)={0x8a0, r3, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_MLO_TTLM_DLINK={0x5d, 0x148, "600041c7e1effe882e9b599a3940c1550755ca30790fe5270ddaed015992ff5274355dfdd99ec7d8e250f9b74e7da479c536599c414e75a56bf5c1d71ae5c9aa7053bdd79be3e5c1db855319089ca2f72c36073de86add2d7f"}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0xd}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_MLO_LINKS={0x818, 0x138, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x7}]}, {0x84, 0x0, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x10, 0x13, "3294575dcdc7f705c66d0b65"}, @NL80211_ATTR_MLO_TTLM_DLINK={0x56, 0x148, "1752f25d0ac347c7e6fa99714992b26e0bbd7951db3d0f9b3a3fc55a4ff8d20fa7e430614900aea63d06003e14252f67ed2f73502a76692dcefe84e1e2965d7b83f3c44de0a24b10fc089d3c677145f0bb6b"}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x43}]}, {0x774, 0x0, 0x0, 0x1, [@NL80211_ATTR_SAR_SPEC={0x1e8, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xffff}]}]}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x589}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x84c}, @NL80211_SAR_ATTR_SPECS={0x144, 0x2, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xfffffff6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1ff}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8000}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xfffffff7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x40}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x30}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xed}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x200}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xf}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xe}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8001}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}]}]}, @NL80211_SAR_ATTR_SPECS={0x28, 0x2, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x401}]}]}, @NL80211_SAR_ATTR_SPECS={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1000}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xfffffff7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5}]}]}]}, @NL80211_ATTR_MAX_HW_TIMESTAMP_PEERS={0x6, 0x143, 0x401}, @NL80211_ATTR_IE={0x57d, 0x2a, "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"}]}]}, @NL80211_ATTR_MLO_LINK_ID={0x5, 0x139, 0xb9}]}, 0x8a0}, 0x1, 0x0, 0x0, 0x24004040}, 0x4000800) r4 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000c40), r2) sendmsg$auto_NET_SHAPER_CMD_SET(r2, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x50, r4, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NET_SHAPER_A_HANDLE={0x34, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x6}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x6}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x7fff}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x41efe962}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x5}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x101}]}, @NET_SHAPER_A_METRIC={0x8, 0x2, 0x5}]}, 0x50}}, 0x4004010) r5 = fsopen$auto(&(0x7f0000000d80)='net-shaper\x00', 0x0) ioctl$auto_SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, &(0x7f0000000dc0)="3f527fd3621a0c4211a676af85f7999fc64167b2288d8f899d08d3a6a89a4582d2d9f368a1446283e74784d1a16bab72fce55ebe2079853276ab5542c4f2c99c74fc837f7df49be431764e515fa5dc95ed8d6168f566d16c42d4b8c68f725613f65afa5d06d2fa45a1daa9b93b36b593c5e6a5de27d5281ad407b04c321fd89e84d93ab3a478da97b6c6a5944a86839a21f2c55c16e243aba909b701263d4edf1b9aa7b2bb7a050018911f8f91e81496b957636e65bae1587ed9bfb278c8911c0d17f4eec4b773c67e07b05353926076ff7cd0d20f40ce6594c7c98b578a7fa20079fa7ebfdc3ab8e4b3d40204a85948a8ab54dcc9") r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000f00), r0) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x34, r6, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x7fff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x659}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_VLANID={0x6, 0x28, 0xff}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x30044040) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001000)={'sit0\x00', 0x0}) preadv2$auto(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001040)="7d99e6e3bde6c897474585b4331dbe7540fbeb2cf95004400095da0ce7678c5105bf106285bd178cb7d98dd00de8ce70a2b3ffe6735508511d7655da3dff3aa3f791a95e8588329a4c825ee6fd9d67505383730e83b3f295fda423311be85a65426714f398c974ed508b4a21c1226d24801187aa89c6a82b6818cfc665e424cc29455d6606e21b43c8516feec27666162d901bb34739fc6c2f3242a7edfe0834a4fb106d5247f81f66986e60315669ed5de8781a54db1a635977b3cdfe75defb2ce4ad2e07c65389a642fb29bfbfa36b9db2b7bb8f3bc2", 0xde20}, 0x5, 0x1, 0x4c5d7131, 0x1000000) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE_EXT(r5, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_thermal(&(0x7f00000012c0), r1) r10 = waitid$auto_P_ALL(0x0, 0x859, &(0x7f0000001380)={@siginfo_0_0={0x8, 0x3f7c, 0x0, @_sigfault={&(0x7f0000001300)="27396445307912de883d85f38eab99fc5d85d6b1ee40da55f0220098c27000b0855f800425e8ff78360f047d15f06726d0cafd0d8b319f58b7b18bfb3d72dd966d096ba223324ef30da1ff4d79147f8e04aa95f5619c00526cd6005c5f693ec12b4c9beb", @_trapno=0x3}}}, 0x6, &(0x7f0000001400)={{0x401, 0x7}, {0x7, 0x3}, 0xfff, 0xffff, 0x4, 0x4, 0x2, 0xfffffffffffffffe, 0x8, 0x3, 0x4, 0x7, 0x7, 0x8, 0xb, 0x6}) r11 = fcntl$getown(r5, 0x9) r12 = ioctl$auto_NS_GET_TGID_IN_PIDNS(r0, 0x8004b709, &(0x7f00000014c0)=0x9) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_ADD(r8, &(0x7f0000001940)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001900)={&(0x7f0000001500)={0x3e0, r9, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@THERMAL_GENL_ATTR_THRESHOLD_DIRECTION={0x8, 0x1a, 0x80000000}, @THERMAL_GENL_ATTR_TZ_ID={0x8, 0x2, 0x8}, @THERMAL_GENL_ATTR_CDEV_NAME={0x14, 0x12, 'macvtap0\x00'}, @THERMAL_GENL_ATTR_CDEV_MAX_STATE={0x8, 0x11, 0x8001}, @THERMAL_GENL_ATTR_TZ_MODE={0x8, 0x9, 0x7fc2}, @THERMAL_GENL_ATTR_TZ_CDEV_WEIGHT={0x8, 0xb, 0x6}, @THERMAL_GENL_ATTR_CDEV={0x390, 0xe, 0x0, 0x1, [@typed={0x8, 0x2c, 0x0, 0x0, @pid=r10}, @nested={0x98, 0x60, 0x0, 0x1, [@generic="6252ce30ddbed1246546d514a9090493c4dcf90ada5e0f6993a956bf25952062d2ff87143f3c7bc1f20f5a967ca5a0a02801ec3338f59f6b6fcdff6a3ccb3e67f561e3c04bdbf46db73536999704912ad2c25c93214e0f88990723a2561973bc687d3f3cdb939a697c30e2efdc05cbf6e2baba3866ab4157cef66731", @nested={0x4, 0x85}, @nested={0x4, 0x133}, @nested={0x4, 0x3f}, @typed={0xc, 0x4, 0x0, 0x0, @u64=0x3}]}, @nested={0x18, 0x85, 0x0, 0x1, [@nested={0x4, 0x4}, @nested={0x4, 0x15b}, @typed={0x8, 0x12d, 0x0, 0x0, @pid=r11}, @typed={0x4, 0x30}]}, @nested={0x10, 0xc1, 0x0, 0x1, [@typed={0xb, 0x128, 0x0, 0x0, @str='batadv\x00'}]}, @nested={0xea, 0xc5, 0x0, 0x1, [@generic="cc45b7a1212f0bf6b21bf15c55de0418aa9d89769d1519bac7eb66aa1d27a28aaffb729b1711b0f5e537e961582f44d245b63b566ebd97094b9e37daea9af3f6d38c356cdafeacc863c254e76f7c0e1093940ac99f6876bccb59d69e1ed7966cbd4ac73b778241e72b82884de86f6a36ef710a18ac0bac784c63d9a55d7eff8879098f3e572edff4c7c27bbfb0b61d2951b78696c28a72a235effbbe4a25926a9567", @generic="4c8f957f8e054725edd02e0fec6e1aca936ee4b694a4955da11eeebd69a8db935a9f3d245ab5b50b5250e5a32b0dd58214d82bae5afcd719c0a84e23f04db4e76b3b73e0"]}, @generic, @nested={0x8f, 0x83, 0x0, 0x1, [@generic="e7a912ed804e05dd53de4f3d620e797b210f72e4e7289c18c74e7c1c7661dc44435ca4b57b65b79aa2267bfaa5c145f6bee30d70f6d3676dcd97005de6c59fef3c7d2535284eaca4c5a4ea1814572ee1be99", @generic="08361007f65fe95943450963f51070684248893475386c67e0f996973e9380bb57", @typed={0x8, 0xdd, 0x0, 0x0, @pid=r12}, @generic="cfd1cc8e72a16a715590fdf8de64b9f1"]}, @generic="a40354f44bec938f927cb398f6c58671828651162601b757422e4c5edbedfeade5a2f06ef843c0ca1ffb92eee6fce1a1954b51bbadf25ad547b2591c0202fe363562014c1de7202ffd5cc5cd925a06d28c5b8038b01020b027bd4b1c5bc4f00dcae798bd1fe93244fa6b6c1904d3efcf833bdefa48746efd130e729f7c4e447410835cf0bde317381d8a2217babf018b91bcacc1abc2ac95a17eb49ac59d2cd6eb4708b7ad8ea5a2b4b4968f770b40ca708ded4deeb128256adf0b5e3666b9d3148912dfd100d28b51272ecc5f40b466360a6a532b345546a3a29e12", @generic="e2647d12b39394ef5149bd7aed0640c12f01d191c8987a7df76750749125b4feeeb07a05ea9ac69746da75bdfe150ee67a7310c19ebc876416d079a8352044aef6dbb876c2203fadc304bb7ab037804b7cad6d1cf9fd379beeaa14c35469a6ac98bfbe9d094144b5e448e9e8"]}]}, 0x3e0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000410) r13 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000001980), 0x301100, 0x0) fsconfig$auto_FSCONFIG_SET_STRING(r13, 0x1, &(0x7f00000019c0)='batadv\x00', &(0x7f0000001a00)="bdcd9b5467051d5fa64c3d72cb8273906b4c90581ea08c31514fae5744747865e006826faf19573a4ce60b8bdde205c32e11b1877e25b2982906143c2d45", 0x1) mmap$auto(0x100000000, 0xefd0, 0x9, 0x17, 0xffffffffffffffff, 0x80) bpf$auto_BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a80)=@bpf_attr_3={0xc4, 0xc, 0x6, 0x4, 0xe, 0x3, 0x4, 0xb, 0x1, "d26459c2d911b343b4f161f35389e087", r7, 0xd5, r13, 0x74000000, 0x5, 0x9, 0x2, 0x48a, 0x80000001, 0x4, @attach_prog_fd=r1, 0x39, 0x4, 0xff, 0x2b78, 0x6, r2, r2}, 0xdb) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001a40), r15) r16 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000001b80), r15) sendmsg$auto_IEEE802154_LLSEC_LIST_DEV(r14, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x3c, r16, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEST_SHORT_ADDR={0x6, 0xe, 0xd}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3ff}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x40}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x91}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0xf8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x80) 1.050389946s ago: executing program 1 (id=643): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x3, @empty}, 0x54) ioctl$auto(0x4000000000000c8, 0x400454cc, 0x6f) socket(0xa, 0x2, 0x0) setsockopt$auto(0x3, 0x0, 0x28, 0xfffffffffffffffc, 0x70) write$auto(0x3, 0x0, 0x1) lseek$auto(r0, 0x200000000ff, 0x3) write$auto(0x3, 0x0, 0xfffffdef) setresuid$auto(0x0, 0x0, 0xee01) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, 0x0, 0x24002, 0x0) socket(0x10, 0x2, 0x4) openat$auto_l2cap_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$auto_UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000180)={0xffffffffffffffff, 0x8, 0x2000000, 0x20000008000}) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 839.733865ms ago: executing program 0 (id=644): mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0xffffffffffffffff, 0x300000000000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r0, 0xc0105502, r0) getsockopt$auto(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000000)=0x7ffe) 765.683362ms ago: executing program 3 (id=645): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/memory_tiering/memory_tier4/nodelist\x00', 0x22100, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x2, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) io_uring_setup$auto(0x1, 0x0) ioctl$auto(0xffffffffffffffff, 0x80045438, 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x140080e4) r1 = gettid() rt_tgsigqueueinfo$auto(0x0, r1, 0x21, &(0x7f0000000400)={@siginfo_0_0={0x3, 0x1c51, 0xfffffffe}}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) sendto$auto(0x3, 0x0, 0x79, 0x2, &(0x7f0000000440)=@tipc=@name={0x1e, 0x2, 0x3, {{0x1, 0x1}}}, 0x20) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000006c0)=""/249, 0x138) 560.488608ms ago: executing program 0 (id=646): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x80202, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x3, 0x1, 0x8c53, 0x0, 0x5, 0x0}) r1 = socket(0x23, 0x80805, 0x0) poll$auto(&(0x7f0000000000)={r1, 0x1, 0x8}, 0x2, 0x400) setsockopt$auto(r2, 0x113, 0x4, 0x0, 0x1) r3 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) ioctl$auto_SNAPSHOT_FREE(r3, 0x3305, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001280)='/sys/devices/virtual/net/nr2/power/autosuspend_delay_ms\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = socket(0xa, 0x2, 0x0) socket(0xa, 0x3, 0x3b) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_BLKFLSBUF(r5, 0x1261, 0x0) socket(0x1d, 0x2, 0x7) r6 = socket(0x2, 0x2, 0x1) bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_4={0x17, r6, 0x4, r6}, 0x10) bpf$auto(0x4, &(0x7f0000000140)=@raw_tracepoint={0x7, r7, 0x0, 0xe}, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto_SO_BUSY_POLL_BUDGET(0xffffffffffffffff, 0x2, 0x46, &(0x7f00000000c0)='.\x00', 0x5) r8 = pidfd_open$auto(0x1, 0x0) setns(r8, 0x60020000) getcwd$auto(0x0, 0xffffffffffffffff) mount_setattr$auto(0x5, 0x0, 0x0, &(0x7f0000000640)={0x1, 0x5}, 0x802) mbind$auto(0xfff, 0x10, 0x5d, &(0x7f0000000100)=0xb31, 0x40, 0x8c5) write$auto(0xffffffffffffffff, 0x0, 0x6) r9 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000001080)='/dev/sda\x00', 0x4001, 0x0) ioctl$auto_BLKTRACESTART(r9, 0x1274, 0x0) sendfile$auto(r4, r4, 0x0, 0x3) ioctl$auto_TIOCMGET(r4, 0x5415, &(0x7f0000000040)="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") syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001100), 0xffffffffffffffff) 558.398412ms ago: executing program 1 (id=647): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xa, 0x8000) (async) r0 = socket(0x10, 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), r1) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000c00}, 0x4000000) (async) r3 = socket(0x18, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) r5 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000080), r4) sendmsg$auto_NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x144, r5, 0x30, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_DEVICE_LIST={0x12d, 0x9, 0x0, 0x1, [@generic="898fc5b2123dbd7b313f5939ebe43c444cb59e6b37bd7c6f70794832e44c6aef2acbf88d8c031f7716f43f704054d4b66920dec031ac148176e81d472863da3dc54706879640bac4719a8e60eaeb0d34b8a48c745159bf882e02db91670785799863aadd9c66d69dad0fd7585fa1dd2d800534b3206981db3706365c3cc7415d9b3ec796b48ea2f1e543dded5cf6435dc75efdad2b675381479d08c0c93369a04f66f382794b542376d345162021776be037bc31da5e292f04415bba4b726ddf", @generic="61d0297b8e3503b099b577bd4859e8d842adcadcb8b20676b7411a0e1f860d5ff0c4d84bb5ba0a112cc50dbcbe9d3af686f380b705ef73a8c67c4227018c49b5669e4ff1c95cf88cd2c4c2a184066e0a37aa40a88886640b818c7b6987652ad6ac596d1f279519d06d"]}]}, 0x144}, 0x1, 0x0, 0x0, 0x40040}, 0x8c0) (async) socket(0xa, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xa, 0x801, 0x84) r7 = socket(0x18, 0x5, 0x1) (async) connect$auto(r6, &(0x7f00000002c0)=@isdn={0x22, 0x2, 0x2, 0x2, 0x9}, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x80047437, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) memfd_create$auto(&(0x7f0000000000)='^[#@-\x00', 0x3) (async) fcntl$auto(0xff80000000000000, 0x409, 0x13) mmap$auto(0x7ffffdfde000, 0x2020006, 0x9, 0x11, 0x8000000000000000, 0x8000) syz_genetlink_get_family_id$auto_nlbl_mgmt(0x0, r7) 430.301622ms ago: executing program 3 (id=648): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000600)="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") (async) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000600)="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") r1 = socket(0x10, 0x3, 0x6) sendmsg$auto_NL80211_CMD_TDLS_OPER(r1, 0x0, 0x91) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf2505000000e80003800800c200e000000204002a000400110008002e00", @ANYRES32=r1, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea4334fe15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c2c0005802800638024009e8008005a002f7d2100100086800c000d0006000000000000000800c98004001b00d2741ea2cded6e7d695b9452803bf0defd"], 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x2404c810) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_RTC_UIE_ON(0xffffffffffffffff, 0x7003, 0x4) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) (async) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) unshare$auto(0x8) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) (async) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) fsopen$auto(0x0, 0x1) (async) fsopen$auto(0x0, 0x1) prctl$auto(0x1000000003b, 0x1, 0xffffffffffffffff, 0xd73, 0xb) madvise$auto(0x0, 0x2003f2, 0x15) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000000), r5) (async) r6 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000000), r5) sendmsg$auto_OVS_DP_CMD_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028df0d88", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, r3) socket(0x1d, 0x3, 0x1) 314.821649ms ago: executing program 1 (id=649): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r0, r1, 0x4, 0xf, 0xffffffffffffffff, @relative_fd, 0xe600}, 0xf) r2 = semctl$auto_GETPID(0x7fff, 0x2, 0xb, 0x8) prctl$auto_SECCOMP_MODE_STRICT(0x80000000, 0x1, r2, 0x200800000000000, 0x0) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x4) 211.590638ms ago: executing program 1 (id=650): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/lru_gen/min_ttl_ms\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x209b72, 0x4e477f5a, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x2, 0x0) ioctl$auto(0x3, 0x8915, 0x93) sendfile$auto(r0, r0, 0x0, 0x2) 145.247203ms ago: executing program 0 (id=651): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$auto(0x9, 0x1, 0x9, 0x16, r0, 0xfbc) r1 = timerfd_create$auto_CLOCK_BOOTTIME(0x7, 0x81) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec12\x00', 0x505141, 0x0) ioctl$auto_CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000080)={0x2, 0x11c140ef, 0xfffffffc, 0xffffff7f, 0x5, 0x80, "bc669abe9a19bfd51623e4da92211f17", 0x6, 0xfc, 0x8, 0x4, 0xf7, 0x24, 0x3}) read$auto_tap_fops_tap(r1, &(0x7f00000000c0)=""/189, 0xbd) ioctl$auto_MEMGETBADBLOCK(r1, 0x40084d0b, &(0x7f0000000180)=0xfffffffffffffffc) ioctl$auto_SNDRV_PCM_IOCTL_FORWARD(r1, 0x40084149, &(0x7f00000001c0)=0x300000000000) r3 = ioctl$auto_TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000200)) write$auto(r2, &(0x7f0000000240)='/dev/virtual_nci\x00', 0x6) ioctl$auto_KVM_GET_MSR_FEATURE_INDEX_LIST(r3, 0xc004ae0a, &(0x7f0000000280)={0x0, [0xffffff1b, 0x1, 0x200, 0x6, 0x193a, 0x8, 0x7, 0x0, 0x9]}) r4 = syz_clone3(&(0x7f0000000500)={0x0, &(0x7f00000002c0)=0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340), {0x38}, &(0x7f0000000380)=""/7, 0x7, &(0x7f00000003c0)=""/208, &(0x7f00000004c0)=[0xffffffffffffffff, 0x0], 0x2, {r1}}, 0x58) ioctl$auto_BLKTRACESETUP32(r1, 0xc0401273, &(0x7f0000000580)={"107081168b27ad0d6fc68e7ff456e2d2e3a094469224754c84501855afa01947", 0x6, 0x1, 0xb, 0xb41, 0x7, 0x0}) rt_sigqueueinfo$auto_SIGCONT(r4, 0x12, &(0x7f00000006c0)={@siginfo_0_0={0xe78, 0xa3e, 0x10000, @_timer={r6, 0x3, @sival_ptr=&(0x7f0000000600)="a5b809e8d9acbfda187a6f2de5c74fc68920c376ef6d8ec791e207851fbcd1ab06b9e5f4f414556c5b1cffd74888cbf780db5a8a3d45c9c32af58af353aefb1fffcf60e0317123ad17130c1f6c29b123d4d1332a606b28c28abc30dcc90a6dcfbad72b19aded0f03edce4310054cafb194d63367c3e298cc4066fcd4377a6c51d8ac7df7aae8fd65d023513b858b4b314edd04e88b43f4511dbd929f891eee218ff604", 0x1}}}) shmat$auto(0xb, &(0x7f0000000740)='/dev/virtual_nci\x00', 0x8) r7 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000780), 0x40000, 0x0) ioctl$auto_USB_RAW_IOCTL_VBUS_DRAW(r7, 0x4004550a, &(0x7f00000007c0)=0x7) io_uring_register$auto_IORING_UNREGISTER_PERSONALITY(r2, 0xa, &(0x7f0000000800)="15fcecea44c5ff6d40129cbe277196a8dcb827a7f1a7ec", 0x3) write$auto(r5, &(0x7f0000000840)='/dev/cec12\x00', 0xe3f9) fsconfig$auto_HIDEPID_NO_ACCESS(r1, 0x80, &(0x7f0000000880)='()\\-\xdd.\x86\x00', &(0x7f00000008c0)="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", 0x1) r8 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000a00), r1) sendmsg$auto_NBD_CMD_STATUS(r1, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, r8, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xffffffffffff0001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) write$auto_media_devnode_fops_mc_devnode(r3, &(0x7f0000000b00)="fc339cc206a9da68d6ab2630c02e81b45fadf2edc8d2fcc11cfbe2b240eaf3a87901b1201f713fc8ac585204eccfb5c0921947571382ca2e8dd71dfddd2d949e1563f7e0417b6d847e1ef649ab76a79c1b454f6f3e22fdbf39465e616515d2cd25ccfdd11c79b981e46d51a1474f444ae2c8cf", 0x73) io_uring_setup$auto(0x62, &(0x7f0000000b80)={0x2, 0x10, 0x5, 0x14e, 0x5, 0x1, r3, [0x7, 0x1], {0x5, 0x766, 0xfffffff2, 0x1, 0x5, 0x195, 0x0, 0x5, 0x9d6}, {0xfffff001, 0x3, 0x40, 0x0, 0x6, 0x7, 0xc, 0x6ba, 0x5}}) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/self/cmdline\x00', 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NBD_CMD_RECONFIGURE(r3, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x20, r8, 0x100, 0x70bd28, 0x7, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}]}, 0x20}}, 0x80) statx$auto(r1, &(0x7f0000000d40)='./file0\x00', 0x3, 0x7, &(0x7f0000000d80)={0x8, 0x2, 0x76, 0x7, 0xee01, 0xee01, 0x7, 0x8, 0x1, 0x7, 0x2, 0xb, {0x5}, {0x101, 0x7a81}, {0x6, 0x3}, {0x7fff, 0x5}, 0x3, 0x0, 0x4, 0x67a8000, 0x4a3, 0x3, 0xffffffff, 0x7, 0x2, 0x0, 0xfff, 0x3, [0x1, 0x6, 0x5, 0x9, 0xffffffff, 0x1, 0x3, 0x200, 0x1]}) getpriority$auto(0xff, r9) socketpair$auto(0x1b2, 0x1, 0x0, &(0x7f0000000e80)=0x3) 30.241149ms ago: executing program 2 (id=652): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r1, 0x40b, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x2000c000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c400000", @ANYRES16=r4, @ANYBLOB="251729bd7000fedbdf250100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x41000}, 0x64810) sendmsg$auto_NL802154_CMD_ABORT_SCAN(r2, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x1e0, r4, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0xf}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x6}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x43}, @NL802154_ATTR_PEER={0x1a8, 0x28, 0x0, 0x1, [@nested={0x1a1, 0xd3, 0x0, 0x1, [@generic="4b8cac5f35d35a3e9de7a30018ba39a043c9b4b919d278bc3a4bd4be803d336620908711aa42d5561b8f1d0a934b4aae5b6a2f9e4f5ddf00cdc034", @typed={0xc, 0x59, 0x0, 0x0, @str='ethtool\x00'}, @nested={0x4, 0x40}, @generic="dbb9b223eef2533fa4c286408be514cbe52968c168d47d83824bb8b39fd33525ce5295ef4ba9b7ed2b731cbe3be747c2c7cb93c05abee8e15dd257bd20bc0b1bfdf4003084128be2f3e06af5d0c353f0bb181e936fe9133c949463e2c2d0da76c77ae955c66b6e1e89153c9fef82b99e0bad66a93968313f45b54cb61ddd67b0694b8d761db9882c8cb64d17396baca740898b6536545692033d90ea95c6feafcc5c73a3fa4c6965c0f6f88b732afa56c32499b5fcf58767e949b4144dbe007e74beb3651a07fc30c7773478835ca1f23370", @generic="65238bdf5ba04ace7e1f0273f8a61cd550872984e018b8484cc29b8fb91ad472c7758bd05992e8084e2a7d023308c8b9d53dfdbb3a2a6cbef3912678b8dca160931e3cfbadd66a65a9eb1b6794621dd02ee8436bebc23a77056eed8a285c9ebb9d65f4fb989d34f652e8e0d30e1101fdddb505fbe6ce66b808a678aaec54c608"]}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4000}, 0x20004854) 0s ago: executing program 1 (id=653): r0 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000080), 0x20480, 0x0) read$auto_mISDN_fops_timerdev(r0, 0x0, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/thread-self/net/afs/sysname\x00', 0x81, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000001c0)="3ca629a12f", 0x5) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/neigh/veth0_to_team/locktime\x00', 0x12800, 0x0) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0xa901, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.1/usb2/power/wakeup_active\x00', 0xa140, 0x0) finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004) ioctl$auto(r2, 0x551f, r2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x0, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) io_uring_setup$auto(0x8000, 0x0) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/misc/hw_random/rng_available\x00', 0x22000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/firmware/acpi/interrupts/ff_slp_btn\x00', 0x8522, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400006, 0xdf, 0x9b72, 0x2, 0x8000) r3 = io_uring_setup$auto(0x40000002c55, 0x0) io_uring_register$auto_IORING_REGISTER_FILE_ALLOC_RANGE(r3, 0x19, &(0x7f0000000000)="7b2fdbf2b602000036aea4bbff0000000000000007000000000000feffff7f00000000b8f944d600e9cb", 0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.37' (ED25519) to the list of known hosts. [ 71.635810][ T5818] cgroup: Unknown subsys name 'net' [ 71.767246][ T5818] cgroup: Unknown subsys name 'cpuset' [ 71.776253][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.204324][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.995664][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.005188][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.013517][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.023993][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.024387][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.033567][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.040233][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.046922][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.061781][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.064519][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.069095][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.077376][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.084890][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.093570][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.097545][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.104382][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.117976][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.128060][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.135728][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.143440][ T5149] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.599023][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 75.670600][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 75.727422][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 75.828499][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 75.850255][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.857493][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.864786][ T5832] bridge_slave_0: entered allmulticast mode [ 75.872084][ T5832] bridge_slave_0: entered promiscuous mode [ 75.904800][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.912011][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.919426][ T5832] bridge_slave_1: entered allmulticast mode [ 75.926628][ T5832] bridge_slave_1: entered promiscuous mode [ 75.986156][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.993359][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.000651][ T5829] bridge_slave_0: entered allmulticast mode [ 76.007914][ T5829] bridge_slave_0: entered promiscuous mode [ 76.038881][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.046184][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.053630][ T5831] bridge_slave_0: entered allmulticast mode [ 76.060779][ T5831] bridge_slave_0: entered promiscuous mode [ 76.067772][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.075031][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.082129][ T5829] bridge_slave_1: entered allmulticast mode [ 76.089223][ T5829] bridge_slave_1: entered promiscuous mode [ 76.099040][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.119455][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.126645][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.133744][ T5831] bridge_slave_1: entered allmulticast mode [ 76.141688][ T5831] bridge_slave_1: entered promiscuous mode [ 76.159118][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.228115][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.246070][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.253259][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.260623][ T5830] bridge_slave_0: entered allmulticast mode [ 76.267618][ T5830] bridge_slave_0: entered promiscuous mode [ 76.277835][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.289216][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.313540][ T5832] team0: Port device team_slave_0 added [ 76.319457][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.327527][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.334780][ T5830] bridge_slave_1: entered allmulticast mode [ 76.341691][ T5830] bridge_slave_1: entered promiscuous mode [ 76.350162][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.369758][ T5832] team0: Port device team_slave_1 added [ 76.393552][ T5829] team0: Port device team_slave_0 added [ 76.430962][ T5829] team0: Port device team_slave_1 added [ 76.449311][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.460418][ T5831] team0: Port device team_slave_0 added [ 76.475416][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.482380][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.508390][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.521833][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.545813][ T5831] team0: Port device team_slave_1 added [ 76.560961][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.568179][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.594149][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.629174][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.636233][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.662633][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.682058][ T5830] team0: Port device team_slave_0 added [ 76.698213][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.706644][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.732707][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.754756][ T5830] team0: Port device team_slave_1 added [ 76.760976][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.767950][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.794156][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.829955][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.837060][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.863213][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.922451][ T5829] hsr_slave_0: entered promiscuous mode [ 76.928874][ T5829] hsr_slave_1: entered promiscuous mode [ 76.936054][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.943069][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.969039][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.981463][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.988470][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.014377][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.032674][ T5832] hsr_slave_0: entered promiscuous mode [ 77.039385][ T5832] hsr_slave_1: entered promiscuous mode [ 77.045942][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 77.051713][ T5832] Cannot create hsr debugfs directory [ 77.142898][ T5831] hsr_slave_0: entered promiscuous mode [ 77.149387][ T5831] hsr_slave_1: entered promiscuous mode [ 77.155647][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 77.161370][ T5831] Cannot create hsr debugfs directory [ 77.185187][ T50] Bluetooth: hci2: command tx timeout [ 77.191180][ T5833] Bluetooth: hci1: command tx timeout [ 77.191210][ T5845] Bluetooth: hci0: command tx timeout [ 77.197677][ T5149] Bluetooth: hci3: command tx timeout [ 77.214792][ T5830] hsr_slave_0: entered promiscuous mode [ 77.221006][ T5830] hsr_slave_1: entered promiscuous mode [ 77.227461][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 77.233204][ T5830] Cannot create hsr debugfs directory [ 77.609538][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.620925][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.628939][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.639208][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.647188][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.657169][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.665176][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.676396][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.742995][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.756925][ T5832] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.765252][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.775442][ T5832] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.783191][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.792325][ T5832] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.801590][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.810596][ T5832] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.899321][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.909206][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.917948][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.927252][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.941580][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.951213][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.972192][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.981561][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.055830][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.066145][ T5830] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.082472][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.092655][ T5830] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.100810][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.110269][ T5830] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.125260][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.135107][ T5830] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.196414][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.208368][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.252286][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.274372][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.281780][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.295043][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.322384][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.329514][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.340097][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.347212][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.366842][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.373992][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.408731][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.470036][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.496937][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.504122][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.523407][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.542039][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.549170][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.583623][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.633511][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.640760][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.683843][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.691026][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.970577][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.019331][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.117626][ T5829] veth0_vlan: entered promiscuous mode [ 79.170372][ T5829] veth1_vlan: entered promiscuous mode [ 79.180878][ T5832] veth0_vlan: entered promiscuous mode [ 79.215057][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.234571][ T5832] veth1_vlan: entered promiscuous mode [ 79.264564][ T5149] Bluetooth: hci0: command tx timeout [ 79.264604][ T5845] Bluetooth: hci3: command tx timeout [ 79.270003][ T50] Bluetooth: hci2: command tx timeout [ 79.275614][ T5845] Bluetooth: hci1: command tx timeout [ 79.293288][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.307061][ T5829] veth0_macvtap: entered promiscuous mode [ 79.334459][ T5829] veth1_macvtap: entered promiscuous mode [ 79.349681][ T5832] veth0_macvtap: entered promiscuous mode [ 79.367467][ T5832] veth1_macvtap: entered promiscuous mode [ 79.399224][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.412657][ T5830] veth0_vlan: entered promiscuous mode [ 79.436858][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.447458][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.457731][ T5830] veth1_vlan: entered promiscuous mode [ 79.480283][ T136] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.489180][ T136] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.505382][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.517834][ T136] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.526732][ T136] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.543009][ T5831] veth0_vlan: entered promiscuous mode [ 79.554890][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.564341][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.580457][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.590041][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.610052][ T5831] veth1_vlan: entered promiscuous mode [ 79.705596][ T5830] veth0_macvtap: entered promiscuous mode [ 79.738234][ T5830] veth1_macvtap: entered promiscuous mode [ 79.750740][ T5831] veth0_macvtap: entered promiscuous mode [ 79.795955][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.805596][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.808748][ T5831] veth1_macvtap: entered promiscuous mode [ 79.831784][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.846986][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.885737][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.907580][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.916683][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.923538][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.936467][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.950857][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.961520][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.979874][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.991401][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.001689][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.030628][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 80.044837][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.078488][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.088203][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.158492][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.182873][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.231703][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.516141][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.524114][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.099621][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.131322][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.264784][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.287837][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.341674][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.356028][ T5845] Bluetooth: hci1: command tx timeout [ 81.361760][ T50] Bluetooth: hci2: command tx timeout [ 81.367266][ T5149] Bluetooth: hci0: command tx timeout [ 81.369502][ T5930] Zero length message leads to an empty skb [ 81.372740][ T5833] Bluetooth: hci3: command tx timeout [ 81.379074][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.059197][ T5963] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 83.150360][ T5963] File: /dev/nullb0 PID: 5963 Comm: syz.2.8 [ 83.424425][ T5833] Bluetooth: hci3: command tx timeout [ 83.430549][ T5149] Bluetooth: hci0: command tx timeout [ 83.436343][ T50] Bluetooth: hci2: command tx timeout [ 83.443931][ T5845] Bluetooth: hci1: command tx timeout [ 84.337696][ T5976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11'. [ 84.364506][ T5976] netlink: 'syz.0.11': attribute type 1 has an invalid length. [ 84.384191][ T5976] netlink: 5 bytes leftover after parsing attributes in process `syz.0.11'. [ 84.766658][ T5979] hub 1-0:1.0: USB hub found [ 84.784034][ T5979] hub 1-0:1.0: 1 port detected [ 85.039900][ T5990] block2mtd: Using custom MTD label '' for dev [ 85.059632][ T5990] block2mtd: error: cannot open device [ 85.127806][ T5990] FAULT_INJECTION: forcing a failure. [ 85.127806][ T5990] name failslab, interval 1, probability 0, space 0, times 1 [ 85.163700][ T5990] CPU: 0 UID: 0 PID: 5990 Comm: syz.3.14 Not tainted syzkaller #0 PREEMPT(full) [ 85.163738][ T5990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 85.163761][ T5990] Call Trace: [ 85.163771][ T5990] [ 85.163781][ T5990] dump_stack_lvl+0x100/0x190 [ 85.163833][ T5990] should_fail_ex.cold+0x5/0xa [ 85.163869][ T5990] should_failslab+0xc2/0x120 [ 85.163900][ T5990] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 85.163940][ T5990] ? security_file_alloc+0x34/0x2c0 [ 85.163979][ T5990] ? trace_kmem_cache_alloc+0xd5/0x100 [ 85.164016][ T5990] security_file_alloc+0x34/0x2c0 [ 85.164055][ T5990] init_file+0x95/0x480 [ 85.164088][ T5990] alloc_empty_file+0x79/0x1c0 [ 85.164124][ T5990] path_openat+0xe8/0x31a0 [ 85.164151][ T5990] ? kasan_save_stack+0x3f/0x50 [ 85.164191][ T5990] ? kasan_save_stack+0x30/0x50 [ 85.164228][ T5990] ? kasan_save_track+0x14/0x30 [ 85.164267][ T5990] ? __kasan_slab_alloc+0x89/0x90 [ 85.164292][ T5990] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 85.164330][ T5990] ? do_getname+0x35/0x390 [ 85.164362][ T5990] ? do_sys_openat2+0xc5/0x1e0 [ 85.164397][ T5990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.164430][ T5990] ? __pfx_path_openat+0x10/0x10 [ 85.164472][ T5990] do_file_open+0x20e/0x430 [ 85.164504][ T5990] ? __pfx_do_file_open+0x10/0x10 [ 85.164558][ T5990] ? alloc_fd+0x476/0x790 [ 85.164590][ T5990] ? do_getname+0x191/0x390 [ 85.164626][ T5990] do_sys_openat2+0x10d/0x1e0 [ 85.164668][ T5990] ? __pfx_do_sys_openat2+0x10/0x10 [ 85.164718][ T5990] __x64_sys_openat+0x12d/0x210 [ 85.164757][ T5990] ? __pfx___x64_sys_openat+0x10/0x10 [ 85.164793][ T5990] ? ksys_write+0x1ac/0x250 [ 85.164823][ T5990] ? rcu_is_watching+0x12/0xc0 [ 85.164860][ T5990] do_syscall_64+0x10b/0xf80 [ 85.164899][ T5990] ? clear_bhb_loop+0x40/0x90 [ 85.164932][ T5990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.164961][ T5990] RIP: 0033:0x7fca27b9c819 [ 85.164983][ T5990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.165017][ T5990] RSP: 002b:00007fca28b34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 85.165048][ T5990] RAX: ffffffffffffffda RBX: 00007fca27e15fa0 RCX: 00007fca27b9c819 [ 85.165067][ T5990] RDX: 0000000000008001 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 85.165085][ T5990] RBP: 00007fca27c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 85.165102][ T5990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.165118][ T5990] R13: 00007fca27e16038 R14: 00007fca27e15fa0 R15: 00007ffe45a14e98 [ 85.165155][ T5990] [ 86.756529][ T9] cfg80211: failed to load regulatory.db [ 87.508875][ T6019] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.350769][ T6035] random: crng reseeded on system resumption [ 88.645070][ T6037] hub 1-0:1.0: USB hub found [ 88.690256][ T6037] hub 1-0:1.0: 1 port detected [ 89.547630][ T6054] ovs_: entered promiscuous mode [ 89.825447][ T30] audit: type=1806 audit(1776621645.077:2): xattr="." res=0 [ 89.832941][ T5845] Bluetooth: hci1: unexpected event 0x0e length: 1022 > 260 [ 90.764459][ T6086] usb usb38: selecting invalid altsetting 65537 [ 91.545888][ T6098] can0: slcan on ttyS2. [ 91.725720][ T6102] can0 (unregistered): slcan off ttyS2. [ 92.224553][ T6114] netlink: 334 bytes leftover after parsing attributes in process `syz.1.37'. [ 92.276380][ T6110] mmap: syz.3.34 (6110) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 93.332658][ T6130] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 93.824782][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 93.826113][ T6142] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 93.832512][ T6100] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 94.371245][ T6100] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 94.425836][ T6100] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 94.469685][ T6100] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 94.488666][ T6100] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 94.532847][ T6100] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 94.571525][ T6100] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 94.591738][ T6100] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 94.618373][ T6100] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 94.635957][ T6100] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 94.642368][ T6100] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 94.661389][ T6100] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 94.975141][ T6164] netlink: 342 bytes leftover after parsing attributes in process `syz.3.43'. [ 95.904092][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 96.543929][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 96.624206][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 96.703965][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 96.853223][ T5845] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 97.447704][ T6213] random: crng reseeded on system resumption [ 97.722271][ T6215] random: crng reseeded on system resumption [ 97.775766][ T6218] syz.0.54 uses obsolete (PF_INET,SOCK_PACKET) [ 97.985267][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 98.355582][ T6227] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 98.406891][ T6227] netlink: 334 bytes leftover after parsing attributes in process `syz.3.56'. [ 98.624021][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 98.703897][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 98.787129][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 100.703990][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 100.783970][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 100.865140][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 101.536612][ T5845] Bluetooth: hci2: unexpected event 0x3e length: 508 > 260 [ 101.536654][ T5845] Bluetooth: hci2: unexpected subevent 0x02 length: 507 > 260 [ 101.551480][ T5845] Bluetooth: hci2: Dropping invalid advertising data [ 101.558597][ T5845] Bluetooth: hci2: unknown advertising packet type: 0xe9 [ 103.448789][ T6291] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 103.541243][ T6291] pci 0000:00:01.3: PCI INT A: no GSI [ 104.906381][ T6308] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 106.106718][ T6324] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 106.765074][ T5845] Bluetooth: hci3: unexpected event 0x0e length: 1022 > 260 [ 106.765119][ T5845] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 107.490130][ T6367] block2mtd: Using custom MTD label '' for dev [ 107.527410][ T6367] block2mtd: error: cannot open device [ 107.585468][ T6367] FAULT_INJECTION: forcing a failure. [ 107.585468][ T6367] name failslab, interval 1, probability 0, space 0, times 0 [ 107.624024][ T6367] CPU: 0 UID: 0 PID: 6367 Comm: syz.1.90 Not tainted syzkaller #0 PREEMPT(full) [ 107.624061][ T6367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 107.624075][ T6367] Call Trace: [ 107.624084][ T6367] [ 107.624094][ T6367] dump_stack_lvl+0x100/0x190 [ 107.624141][ T6367] should_fail_ex.cold+0x5/0xa [ 107.624170][ T6367] should_failslab+0xc2/0x120 [ 107.624203][ T6367] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 107.624238][ T6367] ? alloc_empty_file+0x5b/0x1c0 [ 107.624266][ T6367] ? __pfx_stack_trace_save+0x10/0x10 [ 107.624300][ T6367] alloc_empty_file+0x5b/0x1c0 [ 107.624330][ T6367] path_openat+0xe8/0x31a0 [ 107.624355][ T6367] ? kasan_save_stack+0x3f/0x50 [ 107.624391][ T6367] ? kasan_save_stack+0x30/0x50 [ 107.624425][ T6367] ? kasan_save_track+0x14/0x30 [ 107.624456][ T6367] ? __kasan_slab_alloc+0x89/0x90 [ 107.624474][ T6367] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 107.624504][ T6367] ? do_getname+0x35/0x390 [ 107.624529][ T6367] ? do_sys_openat2+0xc5/0x1e0 [ 107.624558][ T6367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.624590][ T6367] ? __pfx_path_openat+0x10/0x10 [ 107.624632][ T6367] do_file_open+0x20e/0x430 [ 107.624661][ T6367] ? __pfx_do_file_open+0x10/0x10 [ 107.624708][ T6367] ? alloc_fd+0x476/0x790 [ 107.624736][ T6367] ? do_getname+0x191/0x390 [ 107.624767][ T6367] do_sys_openat2+0x10d/0x1e0 [ 107.624795][ T6367] ? __pfx_do_sys_openat2+0x10/0x10 [ 107.624833][ T6367] __x64_sys_openat+0x12d/0x210 [ 107.624867][ T6367] ? __pfx___x64_sys_openat+0x10/0x10 [ 107.624897][ T6367] ? ksys_write+0x1ac/0x250 [ 107.624925][ T6367] ? rcu_is_watching+0x12/0xc0 [ 107.624959][ T6367] do_syscall_64+0x10b/0xf80 [ 107.625004][ T6367] ? clear_bhb_loop+0x40/0x90 [ 107.625037][ T6367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.625067][ T6367] RIP: 0033:0x7f458959c819 [ 107.625091][ T6367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.625121][ T6367] RSP: 002b:00007f458a4f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 107.625146][ T6367] RAX: ffffffffffffffda RBX: 00007f4589815fa0 RCX: 00007f458959c819 [ 107.625164][ T6367] RDX: 0000000000008001 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 107.625188][ T6367] RBP: 00007f4589632c91 R08: 0000000000000000 R09: 0000000000000000 [ 107.625205][ T6367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.625220][ T6367] R13: 00007f4589816038 R14: 00007f4589815fa0 R15: 00007ffeb62b7248 [ 107.625259][ T6367] [ 109.843685][ T6398] random: crng reseeded on system resumption [ 110.095485][ T6398] hub 1-0:1.0: USB hub found [ 110.112784][ T6398] hub 1-0:1.0: 1 port detected [ 110.847238][ T5845] Bluetooth: hci0: unexpected event 0x0e length: 1022 > 260 [ 110.847287][ T5845] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 111.910475][ T6427] block2mtd: Using custom MTD label '' for dev [ 111.932223][ T5845] Bluetooth: hci3: unexpected event 0x0e length: 1022 > 260 [ 111.932272][ T5845] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 111.972449][ T6429] FAULT_INJECTION: forcing a failure. [ 111.972449][ T6429] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 111.985834][ T6429] CPU: 1 UID: 0 PID: 6429 Comm: syz.0.100 Not tainted syzkaller #0 PREEMPT(full) [ 111.985856][ T6429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 111.985865][ T6429] Call Trace: [ 111.985870][ T6429] [ 111.985876][ T6429] dump_stack_lvl+0x100/0x190 [ 111.985914][ T6429] should_fail_ex.cold+0x5/0xa [ 111.985933][ T6429] strncpy_from_user+0x3b/0x2d0 [ 111.985954][ T6429] do_getname+0x78/0x390 [ 111.985975][ T6429] do_sys_openat2+0xc5/0x1e0 [ 111.985994][ T6429] ? __pfx_do_sys_openat2+0x10/0x10 [ 111.986019][ T6429] __x64_sys_openat+0x12d/0x210 [ 111.986044][ T6429] ? __pfx___x64_sys_openat+0x10/0x10 [ 111.986063][ T6429] ? ksys_write+0x1ac/0x250 [ 111.986080][ T6429] ? rcu_is_watching+0x12/0xc0 [ 111.986099][ T6429] do_syscall_64+0x10b/0xf80 [ 111.986120][ T6429] ? clear_bhb_loop+0x40/0x90 [ 111.986137][ T6429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.986152][ T6429] RIP: 0033:0x7ffaaeb9c819 [ 111.986168][ T6429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.986190][ T6429] RSP: 002b:00007ffaaf9a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 111.986214][ T6429] RAX: ffffffffffffffda RBX: 00007ffaaee16090 RCX: 00007ffaaeb9c819 [ 111.986224][ T6429] RDX: 0000000000008001 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 111.986233][ T6429] RBP: 00007ffaaec32c91 R08: 0000000000000000 R09: 0000000000000000 [ 111.986241][ T6429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.986249][ T6429] R13: 00007ffaaee16128 R14: 00007ffaaee16090 R15: 00007ffd36731618 [ 111.986268][ T6429] [ 112.364858][ T6427] block2mtd: error: cannot open device [ 114.516985][ T6462] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 115.554134][ T5845] Bluetooth: hci3: unexpected event 0x0e length: 1022 > 260 [ 115.554180][ T5845] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 117.369007][ T5845] Bluetooth: hci2: unexpected event 0x0e length: 1022 > 260 [ 117.369050][ T5845] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 117.493959][ T6513] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 119.728808][ T5845] Bluetooth: hci1: unexpected event 0x3e length: 508 > 260 [ 119.728845][ T5845] Bluetooth: hci1: unexpected subevent 0x02 length: 507 > 260 [ 119.744154][ T5845] Bluetooth: hci1: Dropping invalid advertising data [ 119.751850][ T5845] Bluetooth: hci1: unknown advertising packet type: 0xe9 [ 121.699901][ T5845] Bluetooth: hci2: unexpected event 0x0e length: 1022 > 260 [ 121.707061][ T5845] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 123.432127][ T6614] netlink: 334 bytes leftover after parsing attributes in process `syz.0.143'. [ 124.481951][ T5845] Bluetooth: hci2: unexpected event 0x0e length: 1022 > 260 [ 124.481995][ T5845] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 125.863638][ T6638] random: crng reseeded on system resumption [ 126.907241][ T6664] netlink: 334 bytes leftover after parsing attributes in process `syz.1.156'. [ 127.341295][ T5845] Bluetooth: hci3: unexpected event 0x0e length: 1022 > 260 [ 127.341340][ T5845] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 129.380076][ T5845] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 129.926326][ T6710] random: crng reseeded on system resumption [ 130.343650][ T5845] Bluetooth: hci3: unexpected event 0x0e length: 1022 > 260 [ 130.343696][ T5845] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 131.560490][ T6744] netlink: 342 bytes leftover after parsing attributes in process `syz.2.177'. [ 132.824695][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.826839][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 132.832763][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.853973][ T6783] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 133.948285][ T50] Bluetooth: hci1: unexpected event 0x0e length: 1022 > 260 [ 133.948336][ T50] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 134.253078][ T6788] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 135.025694][ T6806] netlink: 342 bytes leftover after parsing attributes in process `syz.0.187'. [ 136.666943][ T50] Bluetooth: hci1: unexpected event 0x0e length: 1022 > 260 [ 136.666973][ T50] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 136.720484][ T6839] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 137.114232][ T6842] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 138.815869][ T6873] netlink: 334 bytes leftover after parsing attributes in process `syz.2.204'. [ 139.093622][ T6881] can0: slcan on ttyS2. [ 139.176183][ T6881] can0 (unregistered): slcan off ttyS2. [ 139.984911][ T6855] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 139.992183][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 140.460499][ T50] Bluetooth: hci3: unexpected event 0x0e length: 1022 > 260 [ 140.460544][ T50] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 140.690571][ T6855] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 140.696678][ T6855] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 140.704582][ T6855] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 140.711590][ T6855] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 140.719376][ T6855] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 140.725643][ T6855] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 142.073836][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 142.771979][ T6958] can0: slcan on ttyS2. [ 142.784549][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 142.791877][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 143.288840][ T6959] can0 (unregistered): slcan off ttyS2. [ 144.143858][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 144.209198][ T50] Bluetooth: hci2: unexpected event 0x0e length: 1022 > 260 [ 144.209242][ T50] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 144.411347][ T6987] capability: warning: `syz.1.221' uses 32-bit capabilities (legacy support in use) [ 144.866219][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 146.362121][ T7031] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1986356271.1684960047.1835233327), cmd(12) [ 147.248790][ T50] Bluetooth: hci1: unexpected event 0x0e length: 1022 > 260 [ 147.248836][ T50] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 148.268048][ T7083] block nbd0: NBD_DISCONNECT [ 149.639416][ T7124] FAULT_INJECTION: forcing a failure. [ 149.639416][ T7124] name failslab, interval 1, probability 0, space 0, times 0 [ 149.682289][ T7124] CPU: 1 UID: 0 PID: 7124 Comm: syz.0.252 Not tainted syzkaller #0 PREEMPT(full) [ 149.682319][ T7124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 149.682333][ T7124] Call Trace: [ 149.682341][ T7124] [ 149.682350][ T7124] dump_stack_lvl+0x100/0x190 [ 149.682396][ T7124] should_fail_ex.cold+0x5/0xa [ 149.682429][ T7124] ? tomoyo_realpath_from_path+0xb6/0x690 [ 149.682465][ T7124] should_failslab+0xc2/0x120 [ 149.682493][ T7124] __kmalloc_noprof+0xe0/0x850 [ 149.682527][ T7124] ? kfree+0x1dd/0x6c0 [ 149.682564][ T7124] tomoyo_realpath_from_path+0xb6/0x690 [ 149.682610][ T7124] tomoyo_path_number_perm+0x23c/0x580 [ 149.682641][ T7124] ? tomoyo_path_number_perm+0x22e/0x580 [ 149.682675][ T7124] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 149.682745][ T7124] ? find_held_lock+0x2b/0x80 [ 149.682775][ T7124] ? __fget_files+0x215/0x3d0 [ 149.682798][ T7124] ? hook_file_ioctl_common+0x149/0x410 [ 149.682830][ T7124] ? __fget_files+0x215/0x3d0 [ 149.682861][ T7124] ? __fget_files+0x21f/0x3d0 [ 149.682892][ T7124] security_file_ioctl+0xd3/0x230 [ 149.682926][ T7124] __x64_sys_ioctl+0xb7/0x210 [ 149.682966][ T7124] do_syscall_64+0x10b/0xf80 [ 149.683001][ T7124] ? clear_bhb_loop+0x40/0x90 [ 149.683039][ T7124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.683066][ T7124] RIP: 0033:0x7ffaaeb9c819 [ 149.683088][ T7124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.683112][ T7124] RSP: 002b:00007ffaaf9a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 149.683136][ T7124] RAX: ffffffffffffffda RBX: 00007ffaaee16090 RCX: 00007ffaaeb9c819 [ 149.683154][ T7124] RDX: 0000200000000280 RSI: 0000000080044dff RDI: 0000000000000012 [ 149.683170][ T7124] RBP: 00007ffaaf9a3090 R08: 0000000000000000 R09: 0000000000000000 [ 149.683186][ T7124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.683200][ T7124] R13: 00007ffaaee16128 R14: 00007ffaaee16090 R15: 00007ffd36731618 [ 149.683237][ T7124] [ 149.683247][ T7124] ERROR: Out of memory at tomoyo_realpath_from_path. [ 149.772532][ T7127] syz.2.254(7127): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 149.952800][ T50] Bluetooth: hci2: unexpected event 0x0e length: 1022 > 260 [ 149.952848][ T50] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 151.611897][ T7173] FAULT_INJECTION: forcing a failure. [ 151.611897][ T7173] name failslab, interval 1, probability 0, space 0, times 0 [ 151.630098][ T7174] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 3697530745 out of range (51000000..2150000000) [ 151.654644][ T7173] CPU: 0 UID: 0 PID: 7173 Comm: syz.3.266 Not tainted syzkaller #0 PREEMPT(full) [ 151.654678][ T7173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 151.654692][ T7173] Call Trace: [ 151.654700][ T7173] [ 151.654709][ T7173] dump_stack_lvl+0x100/0x190 [ 151.654756][ T7173] should_fail_ex.cold+0x5/0xa [ 151.654787][ T7173] ? tomoyo_encode2+0xfb/0x3c0 [ 151.654820][ T7173] should_failslab+0xc2/0x120 [ 151.654846][ T7173] __kmalloc_noprof+0xe0/0x850 [ 151.654879][ T7173] ? d_absolute_path+0x136/0x1b0 [ 151.654917][ T7173] tomoyo_encode2+0xfb/0x3c0 [ 151.654955][ T7173] tomoyo_encode+0x29/0x50 [ 151.654988][ T7173] tomoyo_realpath_from_path+0x18c/0x690 [ 151.655032][ T7173] tomoyo_path_number_perm+0x23c/0x580 [ 151.655069][ T7173] ? tomoyo_path_number_perm+0x22e/0x580 [ 151.655104][ T7173] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 151.655173][ T7173] ? find_held_lock+0x2b/0x80 [ 151.655203][ T7173] ? __fget_files+0x215/0x3d0 [ 151.655225][ T7173] ? hook_file_ioctl_common+0x149/0x410 [ 151.655254][ T7173] ? __fget_files+0x215/0x3d0 [ 151.655285][ T7173] ? __fget_files+0x21f/0x3d0 [ 151.655315][ T7173] security_file_ioctl+0xd3/0x230 [ 151.655349][ T7173] __x64_sys_ioctl+0xb7/0x210 [ 151.655386][ T7173] do_syscall_64+0x10b/0xf80 [ 151.655420][ T7173] ? clear_bhb_loop+0x40/0x90 [ 151.655449][ T7173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.655472][ T7173] RIP: 0033:0x7fca27b9c819 [ 151.655493][ T7173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.655519][ T7173] RSP: 002b:00007fca28b13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 151.655542][ T7173] RAX: ffffffffffffffda RBX: 00007fca27e16090 RCX: 00007fca27b9c819 [ 151.655556][ T7173] RDX: 0000200000000280 RSI: 0000000080044dff RDI: 0000000000000012 [ 151.655570][ T7173] RBP: 00007fca28b13090 R08: 0000000000000000 R09: 0000000000000000 [ 151.655584][ T7173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.655597][ T7173] R13: 00007fca27e16128 R14: 00007fca27e16090 R15: 00007ffe45a14e98 [ 151.655628][ T7173] [ 151.655661][ T7173] ERROR: Out of memory at tomoyo_realpath_from_path. [ 152.571956][ T7186] bridge0: port 3(vlan0) entered blocking state [ 152.581502][ T7186] bridge0: port 3(vlan0) entered disabled state [ 152.594079][ T7186] vlan0: entered allmulticast mode [ 152.606442][ T7186] veth0_vlan: entered allmulticast mode [ 152.626115][ T7186] vlan0: entered promiscuous mode [ 152.638830][ T7186] bridge0: port 3(vlan0) entered blocking state [ 152.645800][ T7186] bridge0: port 3(vlan0) entered forwarding state [ 153.509337][ T7210] FAULT_INJECTION: forcing a failure. [ 153.509337][ T7210] name failslab, interval 1, probability 0, space 0, times 0 [ 153.547464][ T7210] CPU: 1 UID: 0 PID: 7210 Comm: syz.1.276 Not tainted syzkaller #0 PREEMPT(full) [ 153.547498][ T7210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 153.547513][ T7210] Call Trace: [ 153.547521][ T7210] [ 153.547534][ T7210] dump_stack_lvl+0x100/0x190 [ 153.547580][ T7210] should_fail_ex.cold+0x5/0xa [ 153.547620][ T7210] should_failslab+0xc2/0x120 [ 153.547653][ T7210] __kmalloc_cache_noprof+0x7a/0x6f0 [ 153.547685][ T7210] ? snd_mixer_oss_get_volume1_sw.isra.0+0x10a/0x4b0 [ 153.547727][ T7210] snd_mixer_oss_get_volume1_sw.isra.0+0x10a/0x4b0 [ 153.547765][ T7210] snd_mixer_oss_get_recsrc1_sw+0x104/0x1d0 [ 153.547799][ T7210] ? __pfx_snd_mixer_oss_get_recsrc1_sw+0x10/0x10 [ 153.547844][ T7210] snd_mixer_oss_ioctl1+0x17af/0x1cf0 [ 153.547875][ T7210] ? kasan_quarantine_put+0x104/0x240 [ 153.547912][ T7210] ? __pfx_snd_mixer_oss_get_recsrc1_sw+0x10/0x10 [ 153.547945][ T7210] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 153.547973][ T7210] ? tomoyo_path_number_perm+0x28f/0x580 [ 153.548004][ T7210] ? tomoyo_path_number_perm+0x28f/0x580 [ 153.548042][ T7210] ? tomoyo_path_number_perm+0x188/0x580 [ 153.548076][ T7210] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 153.548125][ T7210] snd_mixer_oss_ioctl_card+0x102/0x170 [ 153.548156][ T7210] ? __pfx_snd_mixer_oss_ioctl_card+0x10/0x10 [ 153.548197][ T7210] snd_pcm_oss_ioctl+0x34d/0x3700 [ 153.548231][ T7210] ? find_held_lock+0x2b/0x80 [ 153.548260][ T7210] ? __fget_files+0x215/0x3d0 [ 153.548283][ T7210] ? hook_file_ioctl_common+0x149/0x410 [ 153.548316][ T7210] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 153.548355][ T7210] ? __fget_files+0x21f/0x3d0 [ 153.548384][ T7210] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 153.548421][ T7210] __x64_sys_ioctl+0x18e/0x210 [ 153.548458][ T7210] do_syscall_64+0x10b/0xf80 [ 153.548493][ T7210] ? clear_bhb_loop+0x40/0x90 [ 153.548524][ T7210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.548550][ T7210] RIP: 0033:0x7f458959c819 [ 153.548571][ T7210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.548594][ T7210] RSP: 002b:00007f458a4f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 153.548624][ T7210] RAX: ffffffffffffffda RBX: 00007f4589815fa0 RCX: 00007f458959c819 [ 153.548640][ T7210] RDX: 0000200000000280 RSI: 0000000080044dff RDI: 0000000000000012 [ 153.548655][ T7210] RBP: 00007f458a4f8090 R08: 0000000000000000 R09: 0000000000000000 [ 153.548669][ T7210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.548683][ T7210] R13: 00007f4589816038 R14: 00007f4589815fa0 R15: 00007ffeb62b7248 [ 153.548719][ T7210] [ 155.354167][ T7256] usb usb13: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 155.558956][ T7266] FAULT_INJECTION: forcing a failure. [ 155.558956][ T7266] name failslab, interval 1, probability 0, space 0, times 0 [ 155.586304][ T7266] CPU: 1 UID: 0 PID: 7266 Comm: syz.0.289 Not tainted syzkaller #0 PREEMPT(full) [ 155.586337][ T7266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 155.586351][ T7266] Call Trace: [ 155.586360][ T7266] [ 155.586369][ T7266] dump_stack_lvl+0x100/0x190 [ 155.586414][ T7266] should_fail_ex.cold+0x5/0xa [ 155.586454][ T7266] should_failslab+0xc2/0x120 [ 155.586482][ T7266] __kmalloc_cache_noprof+0x7a/0x6f0 [ 155.586514][ T7266] ? snd_mixer_oss_get_volume1_sw.isra.0+0x142/0x4b0 [ 155.586559][ T7266] snd_mixer_oss_get_volume1_sw.isra.0+0x142/0x4b0 [ 155.586597][ T7266] snd_mixer_oss_get_recsrc1_sw+0x104/0x1d0 [ 155.586631][ T7266] ? __pfx_snd_mixer_oss_get_recsrc1_sw+0x10/0x10 [ 155.586676][ T7266] snd_mixer_oss_ioctl1+0x17af/0x1cf0 [ 155.586705][ T7266] ? kasan_quarantine_put+0x104/0x240 [ 155.586740][ T7266] ? __pfx_snd_mixer_oss_get_recsrc1_sw+0x10/0x10 [ 155.586769][ T7266] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 155.586793][ T7266] ? tomoyo_path_number_perm+0x28f/0x580 [ 155.586823][ T7266] ? tomoyo_path_number_perm+0x28f/0x580 [ 155.586859][ T7266] ? tomoyo_path_number_perm+0x188/0x580 [ 155.586891][ T7266] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 155.586933][ T7266] snd_mixer_oss_ioctl_card+0x102/0x170 [ 155.586959][ T7266] ? __pfx_snd_mixer_oss_ioctl_card+0x10/0x10 [ 155.586995][ T7266] snd_pcm_oss_ioctl+0x34d/0x3700 [ 155.587025][ T7266] ? find_held_lock+0x2b/0x80 [ 155.587050][ T7266] ? __fget_files+0x215/0x3d0 [ 155.587070][ T7266] ? hook_file_ioctl_common+0x149/0x410 [ 155.587097][ T7266] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 155.587129][ T7266] ? __fget_files+0x21f/0x3d0 [ 155.587154][ T7266] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 155.587187][ T7266] __x64_sys_ioctl+0x18e/0x210 [ 155.587220][ T7266] do_syscall_64+0x10b/0xf80 [ 155.587252][ T7266] ? clear_bhb_loop+0x40/0x90 [ 155.587281][ T7266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.587307][ T7266] RIP: 0033:0x7ffaaeb9c819 [ 155.587328][ T7266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.587350][ T7266] RSP: 002b:00007ffaaf9a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 155.587373][ T7266] RAX: ffffffffffffffda RBX: 00007ffaaee16090 RCX: 00007ffaaeb9c819 [ 155.587389][ T7266] RDX: 0000200000000280 RSI: 0000000080044dff RDI: 0000000000000012 [ 155.587404][ T7266] RBP: 00007ffaaf9a3090 R08: 0000000000000000 R09: 0000000000000000 [ 155.587417][ T7266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.587430][ T7266] R13: 00007ffaaee16128 R14: 00007ffaaee16090 R15: 00007ffd36731618 [ 155.587472][ T7266] [ 157.160595][ T7303] FAULT_INJECTION: forcing a failure. [ 157.160595][ T7303] name failslab, interval 1, probability 0, space 0, times 0 [ 157.202331][ T7303] CPU: 0 UID: 0 PID: 7303 Comm: syz.0.299 Not tainted syzkaller #0 PREEMPT(full) [ 157.202366][ T7303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 157.202380][ T7303] Call Trace: [ 157.202388][ T7303] [ 157.202398][ T7303] dump_stack_lvl+0x100/0x190 [ 157.202443][ T7303] should_fail_ex.cold+0x5/0xa [ 157.202473][ T7303] should_failslab+0xc2/0x120 [ 157.202499][ T7303] __kmalloc_cache_noprof+0x7a/0x6f0 [ 157.202529][ T7303] ? snd_mixer_oss_get_volume1_sw.isra.0+0x10a/0x4b0 [ 157.202570][ T7303] snd_mixer_oss_get_volume1_sw.isra.0+0x10a/0x4b0 [ 157.202607][ T7303] snd_mixer_oss_get_recsrc1_sw+0x104/0x1d0 [ 157.202638][ T7303] ? __pfx_snd_mixer_oss_get_recsrc1_sw+0x10/0x10 [ 157.202680][ T7303] snd_mixer_oss_ioctl1+0x17af/0x1cf0 [ 157.202709][ T7303] ? kasan_quarantine_put+0x104/0x240 [ 157.202744][ T7303] ? __pfx_snd_mixer_oss_get_recsrc1_sw+0x10/0x10 [ 157.202777][ T7303] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 157.202803][ T7303] ? tomoyo_path_number_perm+0x28f/0x580 [ 157.202833][ T7303] ? tomoyo_path_number_perm+0x28f/0x580 [ 157.202870][ T7303] ? tomoyo_path_number_perm+0x188/0x580 [ 157.202903][ T7303] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 157.202951][ T7303] snd_mixer_oss_ioctl_card+0x102/0x170 [ 157.202980][ T7303] ? __pfx_snd_mixer_oss_ioctl_card+0x10/0x10 [ 157.203021][ T7303] snd_pcm_oss_ioctl+0x34d/0x3700 [ 157.203055][ T7303] ? find_held_lock+0x2b/0x80 [ 157.203084][ T7303] ? __fget_files+0x215/0x3d0 [ 157.203105][ T7303] ? hook_file_ioctl_common+0x149/0x410 [ 157.203136][ T7303] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 157.203174][ T7303] ? __fget_files+0x21f/0x3d0 [ 157.203203][ T7303] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 157.203240][ T7303] __x64_sys_ioctl+0x18e/0x210 [ 157.203285][ T7303] do_syscall_64+0x10b/0xf80 [ 157.203320][ T7303] ? clear_bhb_loop+0x40/0x90 [ 157.203350][ T7303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.203375][ T7303] RIP: 0033:0x7ffaaeb9c819 [ 157.203396][ T7303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.203418][ T7303] RSP: 002b:00007ffaaf9a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 157.203441][ T7303] RAX: ffffffffffffffda RBX: 00007ffaaee16090 RCX: 00007ffaaeb9c819 [ 157.203457][ T7303] RDX: 0000200000000280 RSI: 0000000080044dff RDI: 0000000000000012 [ 157.203473][ T7303] RBP: 00007ffaaf9a3090 R08: 0000000000000000 R09: 0000000000000000 [ 157.203485][ T7303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.203499][ T7303] R13: 00007ffaaee16128 R14: 00007ffaaee16090 R15: 00007ffd36731618 [ 157.203532][ T7303] [ 157.701328][ T7308] FAULT_INJECTION: forcing a failure. [ 157.701328][ T7308] name failslab, interval 1, probability 0, space 0, times 0 [ 157.753875][ T7308] CPU: 0 UID: 0 PID: 7308 Comm: syz.1.300 Not tainted syzkaller #0 PREEMPT(full) [ 157.753913][ T7308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 157.753929][ T7308] Call Trace: [ 157.753939][ T7308] [ 157.753949][ T7308] dump_stack_lvl+0x100/0x190 [ 157.754002][ T7308] should_fail_ex.cold+0x5/0xa [ 157.754037][ T7308] ? tomoyo_encode2+0xfb/0x3c0 [ 157.754075][ T7308] should_failslab+0xc2/0x120 [ 157.754104][ T7308] __kmalloc_noprof+0xe0/0x850 [ 157.754143][ T7308] ? d_absolute_path+0x136/0x1b0 [ 157.754186][ T7308] tomoyo_encode2+0xfb/0x3c0 [ 157.754239][ T7308] tomoyo_encode+0x29/0x50 [ 157.754278][ T7308] tomoyo_realpath_from_path+0x18c/0x690 [ 157.754328][ T7308] tomoyo_path_number_perm+0x23c/0x580 [ 157.754362][ T7308] ? tomoyo_path_number_perm+0x22e/0x580 [ 157.754399][ T7308] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 157.754432][ T7308] ? futex_wake+0x1ad/0x530 [ 157.754497][ T7308] ? find_held_lock+0x2b/0x80 [ 157.754530][ T7308] ? __fget_files+0x215/0x3d0 [ 157.754555][ T7308] ? hook_file_ioctl_common+0x149/0x410 [ 157.754588][ T7308] ? __fget_files+0x215/0x3d0 [ 157.754621][ T7308] ? __fget_files+0x21f/0x3d0 [ 157.754654][ T7308] security_file_ioctl+0xd3/0x230 [ 157.754688][ T7308] __x64_sys_ioctl+0xb7/0x210 [ 157.754730][ T7308] do_syscall_64+0x10b/0xf80 [ 157.754769][ T7308] ? clear_bhb_loop+0x40/0x90 [ 157.754803][ T7308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.754832][ T7308] RIP: 0033:0x7f458959c819 [ 157.754856][ T7308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.754881][ T7308] RSP: 002b:00007f458a4f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 157.754907][ T7308] RAX: ffffffffffffffda RBX: 00007f4589815fa0 RCX: 00007f458959c819 [ 157.754926][ T7308] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000008 [ 157.754943][ T7308] RBP: 00007f4589632c91 R08: 0000000000000000 R09: 0000000000000000 [ 157.754959][ T7308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.754976][ T7308] R13: 00007f4589816038 R14: 00007f4589815fa0 R15: 00007ffeb62b7248 [ 157.755012][ T7308] [ 157.755036][ T7308] ERROR: Out of memory at tomoyo_realpath_from_path. [ 159.247753][ T30] audit: type=1800 audit(1776629514.501:3): pid=7338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.307" name="discovery_nqn" dev="configfs" ino=15089 res=0 errno=0 [ 160.007379][ T7348] FAULT_INJECTION: forcing a failure. [ 160.007379][ T7348] name failslab, interval 1, probability 0, space 0, times 0 [ 160.033824][ T7348] CPU: 1 UID: 0 PID: 7348 Comm: syz.2.309 Not tainted syzkaller #0 PREEMPT(full) [ 160.033856][ T7348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 160.033870][ T7348] Call Trace: [ 160.033878][ T7348] [ 160.033887][ T7348] dump_stack_lvl+0x100/0x190 [ 160.033936][ T7348] should_fail_ex.cold+0x5/0xa [ 160.033969][ T7348] should_failslab+0xc2/0x120 [ 160.033994][ T7348] __kmalloc_cache_noprof+0x7a/0x6f0 [ 160.034025][ T7348] ? snd_mixer_oss_get_volume1_sw.isra.0+0x10a/0x4b0 [ 160.034067][ T7348] snd_mixer_oss_get_volume1_sw.isra.0+0x10a/0x4b0 [ 160.034105][ T7348] snd_mixer_oss_get_recsrc1_sw+0x104/0x1d0 [ 160.034138][ T7348] ? __pfx_snd_mixer_oss_get_recsrc1_sw+0x10/0x10 [ 160.034184][ T7348] snd_mixer_oss_ioctl1+0x17af/0x1cf0 [ 160.034214][ T7348] ? kasan_quarantine_put+0x104/0x240 [ 160.034259][ T7348] ? __pfx_snd_mixer_oss_get_recsrc1_sw+0x10/0x10 [ 160.034292][ T7348] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 160.034320][ T7348] ? tomoyo_path_number_perm+0x28f/0x580 [ 160.034353][ T7348] ? tomoyo_path_number_perm+0x28f/0x580 [ 160.034391][ T7348] ? tomoyo_path_number_perm+0x188/0x580 [ 160.034425][ T7348] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 160.034476][ T7348] snd_mixer_oss_ioctl_card+0x102/0x170 [ 160.034507][ T7348] ? __pfx_snd_mixer_oss_ioctl_card+0x10/0x10 [ 160.034548][ T7348] snd_pcm_oss_ioctl+0x34d/0x3700 [ 160.034583][ T7348] ? find_held_lock+0x2b/0x80 [ 160.034612][ T7348] ? __fget_files+0x215/0x3d0 [ 160.034635][ T7348] ? hook_file_ioctl_common+0x149/0x410 [ 160.034668][ T7348] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 160.034707][ T7348] ? __fget_files+0x21f/0x3d0 [ 160.034737][ T7348] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 160.034774][ T7348] __x64_sys_ioctl+0x18e/0x210 [ 160.034813][ T7348] do_syscall_64+0x10b/0xf80 [ 160.034847][ T7348] ? clear_bhb_loop+0x40/0x90 [ 160.034878][ T7348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.034904][ T7348] RIP: 0033:0x7f6c8e39c819 [ 160.034925][ T7348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.034948][ T7348] RSP: 002b:00007f6c8f2a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 160.034972][ T7348] RAX: ffffffffffffffda RBX: 00007f6c8e615fa0 RCX: 00007f6c8e39c819 [ 160.034989][ T7348] RDX: 0000200000000280 RSI: 0000000080044dff RDI: 0000000000000011 [ 160.035004][ T7348] RBP: 00007f6c8f2a5090 R08: 0000000000000000 R09: 0000000000000000 [ 160.035019][ T7348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.035033][ T7348] R13: 00007f6c8e616038 R14: 00007f6c8e615fa0 R15: 00007ffdeb2b0468 [ 160.035070][ T7348] [ 161.073526][ T50] Bluetooth: hci1: unexpected event 0x0e length: 1022 > 260 [ 161.073586][ T50] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 162.298244][ T7407] FAULT_INJECTION: forcing a failure. [ 162.298244][ T7407] name failslab, interval 1, probability 0, space 0, times 0 [ 162.312588][ T7407] CPU: 0 UID: 0 PID: 7407 Comm: syz.0.320 Not tainted syzkaller #0 PREEMPT(full) [ 162.312621][ T7407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 162.312635][ T7407] Call Trace: [ 162.312643][ T7407] [ 162.312652][ T7407] dump_stack_lvl+0x100/0x190 [ 162.312701][ T7407] should_fail_ex.cold+0x5/0xa [ 162.312734][ T7407] should_failslab+0xc2/0x120 [ 162.312767][ T7407] __kmalloc_cache_noprof+0x7a/0x6f0 [ 162.312799][ T7407] ? snd_mixer_oss_get_volume1_sw.isra.0+0x10a/0x4b0 [ 162.312841][ T7407] snd_mixer_oss_get_volume1_sw.isra.0+0x10a/0x4b0 [ 162.312879][ T7407] snd_mixer_oss_get_recsrc1_sw+0x104/0x1d0 [ 162.312912][ T7407] ? __pfx_snd_mixer_oss_get_recsrc1_sw+0x10/0x10 [ 162.312959][ T7407] snd_mixer_oss_ioctl1+0x17af/0x1cf0 [ 162.312989][ T7407] ? kasan_quarantine_put+0x104/0x240 [ 162.313026][ T7407] ? __pfx_snd_mixer_oss_get_recsrc1_sw+0x10/0x10 [ 162.313059][ T7407] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 162.313087][ T7407] ? tomoyo_path_number_perm+0x28f/0x580 [ 162.313118][ T7407] ? tomoyo_path_number_perm+0x28f/0x580 [ 162.313156][ T7407] ? tomoyo_path_number_perm+0x188/0x580 [ 162.313190][ T7407] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 162.313240][ T7407] snd_mixer_oss_ioctl_card+0x102/0x170 [ 162.313270][ T7407] ? __pfx_snd_mixer_oss_ioctl_card+0x10/0x10 [ 162.313312][ T7407] snd_pcm_oss_ioctl+0x34d/0x3700 [ 162.313346][ T7407] ? find_held_lock+0x2b/0x80 [ 162.313376][ T7407] ? __fget_files+0x215/0x3d0 [ 162.313398][ T7407] ? hook_file_ioctl_common+0x149/0x410 [ 162.313432][ T7407] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 162.313470][ T7407] ? __fget_files+0x21f/0x3d0 [ 162.313499][ T7407] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 162.313535][ T7407] __x64_sys_ioctl+0x18e/0x210 [ 162.313573][ T7407] do_syscall_64+0x10b/0xf80 [ 162.313607][ T7407] ? clear_bhb_loop+0x40/0x90 [ 162.313637][ T7407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.313663][ T7407] RIP: 0033:0x7ffaaeb9c819 [ 162.313684][ T7407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.313707][ T7407] RSP: 002b:00007ffaaf9c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 162.313730][ T7407] RAX: ffffffffffffffda RBX: 00007ffaaee15fa0 RCX: 00007ffaaeb9c819 [ 162.313751][ T7407] RDX: 0000200000000280 RSI: 0000000080044dff RDI: 0000000000000011 [ 162.313765][ T7407] RBP: 00007ffaaf9c4090 R08: 0000000000000000 R09: 0000000000000000 [ 162.313779][ T7407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.313792][ T7407] R13: 00007ffaaee16038 R14: 00007ffaaee15fa0 R15: 00007ffd36731618 [ 162.313827][ T7407] [ 163.906413][ T7434] netlink: 330 bytes leftover after parsing attributes in process `syz.1.324'. [ 163.926359][ T7435] netlink: 330 bytes leftover after parsing attributes in process `syz.1.324'. [ 164.103256][ T50] Bluetooth: hci0: unexpected event 0x0e length: 1022 > 260 [ 164.103298][ T50] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 164.602001][ T7465] FAULT_INJECTION: forcing a failure. [ 164.602001][ T7465] name failslab, interval 1, probability 0, space 0, times 0 [ 164.644861][ T7465] CPU: 1 UID: 0 PID: 7465 Comm: syz.1.332 Not tainted syzkaller #0 PREEMPT(full) [ 164.644895][ T7465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 164.644909][ T7465] Call Trace: [ 164.644917][ T7465] [ 164.644926][ T7465] dump_stack_lvl+0x100/0x190 [ 164.644971][ T7465] should_fail_ex.cold+0x5/0xa [ 164.645004][ T7465] should_failslab+0xc2/0x120 [ 164.645031][ T7465] __kmalloc_cache_noprof+0x7a/0x6f0 [ 164.645064][ T7465] ? snd_mixer_oss_get_volume1_sw.isra.0+0x142/0x4b0 [ 164.645104][ T7465] snd_mixer_oss_get_volume1_sw.isra.0+0x142/0x4b0 [ 164.645141][ T7465] snd_mixer_oss_get_recsrc1_sw+0x104/0x1d0 [ 164.645171][ T7465] ? __pfx_snd_mixer_oss_get_recsrc1_sw+0x10/0x10 [ 164.645214][ T7465] snd_mixer_oss_ioctl1+0x17af/0x1cf0 [ 164.645244][ T7465] ? kasan_quarantine_put+0x104/0x240 [ 164.645282][ T7465] ? __pfx_snd_mixer_oss_get_recsrc1_sw+0x10/0x10 [ 164.645315][ T7465] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 164.645343][ T7465] ? tomoyo_path_number_perm+0x28f/0x580 [ 164.645379][ T7465] ? tomoyo_path_number_perm+0x28f/0x580 [ 164.645417][ T7465] ? tomoyo_path_number_perm+0x188/0x580 [ 164.645451][ T7465] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 164.645501][ T7465] snd_mixer_oss_ioctl_card+0x102/0x170 [ 164.645540][ T7465] ? __pfx_snd_mixer_oss_ioctl_card+0x10/0x10 [ 164.645580][ T7465] snd_pcm_oss_ioctl+0x34d/0x3700 [ 164.645614][ T7465] ? find_held_lock+0x2b/0x80 [ 164.645643][ T7465] ? __fget_files+0x215/0x3d0 [ 164.645665][ T7465] ? hook_file_ioctl_common+0x149/0x410 [ 164.645698][ T7465] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 164.645736][ T7465] ? __fget_files+0x21f/0x3d0 [ 164.645764][ T7465] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 164.645799][ T7465] __x64_sys_ioctl+0x18e/0x210 [ 164.645836][ T7465] do_syscall_64+0x10b/0xf80 [ 164.645871][ T7465] ? clear_bhb_loop+0x40/0x90 [ 164.645901][ T7465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.645927][ T7465] RIP: 0033:0x7f458959c819 [ 164.645948][ T7465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.645971][ T7465] RSP: 002b:00007f458a4f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 164.645995][ T7465] RAX: ffffffffffffffda RBX: 00007f4589815fa0 RCX: 00007f458959c819 [ 164.646011][ T7465] RDX: 0000200000000280 RSI: 0000000080044dff RDI: 0000000000000011 [ 164.646026][ T7465] RBP: 00007f458a4f8090 R08: 0000000000000000 R09: 0000000000000000 [ 164.646039][ T7465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.646051][ T7465] R13: 00007f4589816038 R14: 00007f4589815fa0 R15: 00007ffeb62b7248 [ 164.646082][ T7465] [ 166.244588][ T50] Bluetooth: hci1: unexpected event 0x0e length: 1022 > 260 [ 166.244639][ T50] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 166.387538][ T7507] FAULT_INJECTION: forcing a failure. [ 166.387538][ T7507] name failslab, interval 1, probability 0, space 0, times 0 [ 166.481835][ T7507] CPU: 0 UID: 0 PID: 7507 Comm: syz.0.344 Not tainted syzkaller #0 PREEMPT(full) [ 166.481867][ T7507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 166.481881][ T7507] Call Trace: [ 166.481889][ T7507] [ 166.481897][ T7507] dump_stack_lvl+0x100/0x190 [ 166.481925][ T7507] should_fail_ex.cold+0x5/0xa [ 166.481944][ T7507] should_failslab+0xc2/0x120 [ 166.481959][ T7507] __kmalloc_cache_noprof+0x7a/0x6f0 [ 166.481977][ T7507] ? snd_mixer_oss_get_volume1_sw.isra.0+0x10a/0x4b0 [ 166.482000][ T7507] snd_mixer_oss_get_volume1_sw.isra.0+0x10a/0x4b0 [ 166.482021][ T7507] snd_mixer_oss_get_recsrc1_sw+0x104/0x1d0 [ 166.482039][ T7507] ? __pfx_snd_mixer_oss_get_recsrc1_sw+0x10/0x10 [ 166.482064][ T7507] snd_mixer_oss_ioctl1+0x17af/0x1cf0 [ 166.482080][ T7507] ? kasan_quarantine_put+0x104/0x240 [ 166.482101][ T7507] ? __pfx_snd_mixer_oss_get_recsrc1_sw+0x10/0x10 [ 166.482119][ T7507] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 166.482134][ T7507] ? tomoyo_path_number_perm+0x28f/0x580 [ 166.482152][ T7507] ? tomoyo_path_number_perm+0x28f/0x580 [ 166.482173][ T7507] ? tomoyo_path_number_perm+0x188/0x580 [ 166.482191][ T7507] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 166.482221][ T7507] snd_mixer_oss_ioctl_card+0x102/0x170 [ 166.482237][ T7507] ? __pfx_snd_mixer_oss_ioctl_card+0x10/0x10 [ 166.482260][ T7507] snd_pcm_oss_ioctl+0x34d/0x3700 [ 166.482279][ T7507] ? find_held_lock+0x2b/0x80 [ 166.482296][ T7507] ? __fget_files+0x215/0x3d0 [ 166.482309][ T7507] ? hook_file_ioctl_common+0x149/0x410 [ 166.482329][ T7507] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 166.482351][ T7507] ? __fget_files+0x21f/0x3d0 [ 166.482369][ T7507] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 166.482389][ T7507] __x64_sys_ioctl+0x18e/0x210 [ 166.482411][ T7507] do_syscall_64+0x10b/0xf80 [ 166.482431][ T7507] ? clear_bhb_loop+0x40/0x90 [ 166.482461][ T7507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.482485][ T7507] RIP: 0033:0x7ffaaeb9c819 [ 166.482505][ T7507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.482518][ T7507] RSP: 002b:00007ffaaf9a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 166.482532][ T7507] RAX: ffffffffffffffda RBX: 00007ffaaee16090 RCX: 00007ffaaeb9c819 [ 166.482541][ T7507] RDX: 0000200000000280 RSI: 0000000080044dff RDI: 0000000000000012 [ 166.482549][ T7507] RBP: 00007ffaaf9a3090 R08: 0000000000000000 R09: 0000000000000000 [ 166.482557][ T7507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.482565][ T7507] R13: 00007ffaaee16128 R14: 00007ffaaee16090 R15: 00007ffd36731618 [ 166.482589][ T7507] [ 167.080736][ T7513] can: request_module (can-proto-4) failed. [ 167.614250][ T7530] FAULT_INJECTION: forcing a failure. [ 167.614250][ T7530] name failslab, interval 1, probability 0, space 0, times 0 [ 167.633466][ T7530] CPU: 0 UID: 0 PID: 7530 Comm: syz.1.352 Not tainted syzkaller #0 PREEMPT(full) [ 167.633496][ T7530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 167.633512][ T7530] Call Trace: [ 167.633519][ T7530] [ 167.633528][ T7530] dump_stack_lvl+0x100/0x190 [ 167.633572][ T7530] should_fail_ex.cold+0x5/0xa [ 167.633603][ T7530] should_failslab+0xc2/0x120 [ 167.633628][ T7530] __kvmalloc_node_noprof+0xfa/0xa00 [ 167.633661][ T7530] ? seq_read_iter+0x819/0x1270 [ 167.633704][ T7530] seq_read_iter+0x819/0x1270 [ 167.633737][ T7530] ? lock_acquire+0x1b1/0x370 [ 167.633785][ T7530] kernfs_fop_read_iter+0x46c/0x610 [ 167.633814][ T7530] ? rw_verify_area+0xce/0x6d0 [ 167.633847][ T7530] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 167.633881][ T7530] vfs_read+0x825/0xb30 [ 167.633908][ T7530] ? __pfx_vfs_read+0x10/0x10 [ 167.633954][ T7530] ksys_read+0x12a/0x250 [ 167.633976][ T7530] ? __pfx_ksys_read+0x10/0x10 [ 167.634003][ T7530] ? rcu_is_watching+0x12/0xc0 [ 167.634035][ T7530] do_syscall_64+0x10b/0xf80 [ 167.634070][ T7530] ? clear_bhb_loop+0x40/0x90 [ 167.634101][ T7530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.634127][ T7530] RIP: 0033:0x7f458959c819 [ 167.634147][ T7530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.634171][ T7530] RSP: 002b:00007f458a4f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 167.634194][ T7530] RAX: ffffffffffffffda RBX: 00007f4589815fa0 RCX: 00007f458959c819 [ 167.634211][ T7530] RDX: 0000000000000138 RSI: 00002000000006c0 RDI: 0000000000000003 [ 167.634233][ T7530] RBP: 00007f458a4f8090 R08: 0000000000000000 R09: 0000000000000000 [ 167.634248][ T7530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.634262][ T7530] R13: 00007f4589816038 R14: 00007f4589815fa0 R15: 00007ffeb62b7248 [ 167.634298][ T7530] [ 168.069841][ T50] Bluetooth: hci2: unexpected event 0x0e length: 1022 > 260 [ 168.069883][ T50] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 168.725728][ T7558] tipc: Started in network mode [ 168.731783][ T7558] tipc: Node identity ffffffff, cluster identity 4711 [ 168.739023][ T7558] tipc: Node number set to 4294967295 [ 168.803017][ T7562] FAULT_INJECTION: forcing a failure. [ 168.803017][ T7562] name failslab, interval 1, probability 0, space 0, times 0 [ 168.845966][ T7562] CPU: 0 UID: 0 PID: 7562 Comm: syz.2.359 Not tainted syzkaller #0 PREEMPT(full) [ 168.845998][ T7562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 168.846012][ T7562] Call Trace: [ 168.846020][ T7562] [ 168.846029][ T7562] dump_stack_lvl+0x100/0x190 [ 168.846073][ T7562] should_fail_ex.cold+0x5/0xa [ 168.846106][ T7562] should_failslab+0xc2/0x120 [ 168.846132][ T7562] __kmalloc_cache_noprof+0x7a/0x6f0 [ 168.846163][ T7562] ? snd_mixer_oss_get_volume1_sw.isra.0+0x142/0x4b0 [ 168.846204][ T7562] snd_mixer_oss_get_volume1_sw.isra.0+0x142/0x4b0 [ 168.846241][ T7562] snd_mixer_oss_get_recsrc1_sw+0x104/0x1d0 [ 168.846274][ T7562] ? __pfx_snd_mixer_oss_get_recsrc1_sw+0x10/0x10 [ 168.846320][ T7562] snd_mixer_oss_ioctl1+0x17af/0x1cf0 [ 168.846348][ T7562] ? kasan_quarantine_put+0x104/0x240 [ 168.846390][ T7562] ? __pfx_snd_mixer_oss_get_recsrc1_sw+0x10/0x10 [ 168.846423][ T7562] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 168.846450][ T7562] ? tomoyo_path_number_perm+0x28f/0x580 [ 168.846479][ T7562] ? tomoyo_path_number_perm+0x28f/0x580 [ 168.846517][ T7562] ? tomoyo_path_number_perm+0x188/0x580 [ 168.846554][ T7562] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 168.846603][ T7562] snd_mixer_oss_ioctl_card+0x102/0x170 [ 168.846634][ T7562] ? __pfx_snd_mixer_oss_ioctl_card+0x10/0x10 [ 168.846676][ T7562] snd_pcm_oss_ioctl+0x34d/0x3700 [ 168.846709][ T7562] ? find_held_lock+0x2b/0x80 [ 168.846738][ T7562] ? __fget_files+0x215/0x3d0 [ 168.846760][ T7562] ? hook_file_ioctl_common+0x149/0x410 [ 168.846792][ T7562] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 168.846824][ T7562] ? __fget_files+0x21f/0x3d0 [ 168.846846][ T7562] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 168.846873][ T7562] __x64_sys_ioctl+0x18e/0x210 [ 168.846901][ T7562] do_syscall_64+0x10b/0xf80 [ 168.846926][ T7562] ? clear_bhb_loop+0x40/0x90 [ 168.846949][ T7562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.846967][ T7562] RIP: 0033:0x7f6c8e39c819 [ 168.846984][ T7562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.847001][ T7562] RSP: 002b:00007f6c8f284028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 168.847020][ T7562] RAX: ffffffffffffffda RBX: 00007f6c8e616090 RCX: 00007f6c8e39c819 [ 168.847033][ T7562] RDX: 0000200000000280 RSI: 0000000080044dff RDI: 0000000000000012 [ 168.847044][ T7562] RBP: 00007f6c8f284090 R08: 0000000000000000 R09: 0000000000000000 [ 168.847055][ T7562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 168.847066][ T7562] R13: 00007f6c8e616128 R14: 00007f6c8e616090 R15: 00007ffdeb2b0468 [ 168.847094][ T7562] [ 169.542685][ T7577] FAULT_INJECTION: forcing a failure. [ 169.542685][ T7577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.593172][ T7577] CPU: 1 UID: 0 PID: 7577 Comm: syz.1.365 Not tainted syzkaller #0 PREEMPT(full) [ 169.593206][ T7577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 169.593220][ T7577] Call Trace: [ 169.593229][ T7577] [ 169.593238][ T7577] dump_stack_lvl+0x100/0x190 [ 169.593283][ T7577] should_fail_ex.cold+0x5/0xa [ 169.593315][ T7577] _copy_to_iter+0x1f3/0x1720 [ 169.593348][ T7577] ? sysfs_file_kobj+0xe4/0x290 [ 169.593382][ T7577] ? __pfx__copy_to_iter+0x10/0x10 [ 169.593412][ T7577] ? kernfs_seq_stop+0xcd/0x120 [ 169.593447][ T7577] ? kernfs_put_active+0x93/0xe0 [ 169.593477][ T7577] seq_read_iter+0xdab/0x1270 [ 169.593530][ T7577] kernfs_fop_read_iter+0x46c/0x610 [ 169.593561][ T7577] ? rw_verify_area+0xce/0x6d0 [ 169.593595][ T7577] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 169.593628][ T7577] vfs_read+0x825/0xb30 [ 169.593659][ T7577] ? __pfx_vfs_read+0x10/0x10 [ 169.593706][ T7577] ksys_read+0x12a/0x250 [ 169.593729][ T7577] ? __pfx_ksys_read+0x10/0x10 [ 169.593755][ T7577] ? rcu_is_watching+0x12/0xc0 [ 169.593786][ T7577] do_syscall_64+0x10b/0xf80 [ 169.593818][ T7577] ? clear_bhb_loop+0x40/0x90 [ 169.593849][ T7577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.593874][ T7577] RIP: 0033:0x7f458959c819 [ 169.593892][ T7577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.593905][ T7577] RSP: 002b:00007f458a4f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 169.593918][ T7577] RAX: ffffffffffffffda RBX: 00007f4589815fa0 RCX: 00007f458959c819 [ 169.593928][ T7577] RDX: 0000000000000138 RSI: 00002000000006c0 RDI: 0000000000000003 [ 169.593936][ T7577] RBP: 00007f458a4f8090 R08: 0000000000000000 R09: 0000000000000000 [ 169.593944][ T7577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.593951][ T7577] R13: 00007f4589816038 R14: 00007f4589815fa0 R15: 00007ffeb62b7248 [ 169.593970][ T7577] [ 170.091424][ T7579] can: request_module (can-proto-0) failed. [ 170.377995][ T7586] zswap: compressor 000 not available [ 170.606050][ T7602] FAULT_INJECTION: forcing a failure. [ 170.606050][ T7602] name failslab, interval 1, probability 0, space 0, times 0 [ 170.619629][ T7602] CPU: 1 UID: 0 PID: 7602 Comm: syz.0.371 Not tainted syzkaller #0 PREEMPT(full) [ 170.619660][ T7602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 170.619675][ T7602] Call Trace: [ 170.619682][ T7602] [ 170.619691][ T7602] dump_stack_lvl+0x100/0x190 [ 170.619736][ T7602] should_fail_ex.cold+0x5/0xa [ 170.619769][ T7602] should_failslab+0xc2/0x120 [ 170.619801][ T7602] __kmalloc_cache_noprof+0x7a/0x6f0 [ 170.619832][ T7602] ? snd_mixer_oss_get_volume1_sw.isra.0+0x10a/0x4b0 [ 170.619873][ T7602] snd_mixer_oss_get_volume1_sw.isra.0+0x10a/0x4b0 [ 170.619926][ T7602] snd_mixer_oss_get_recsrc1_sw+0x104/0x1d0 [ 170.619959][ T7602] ? __pfx_snd_mixer_oss_get_recsrc1_sw+0x10/0x10 [ 170.620003][ T7602] snd_mixer_oss_ioctl1+0x17af/0x1cf0 [ 170.620033][ T7602] ? kasan_quarantine_put+0x104/0x240 [ 170.620072][ T7602] ? __pfx_snd_mixer_oss_get_recsrc1_sw+0x10/0x10 [ 170.620105][ T7602] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 170.620133][ T7602] ? tomoyo_path_number_perm+0x28f/0x580 [ 170.620163][ T7602] ? tomoyo_path_number_perm+0x28f/0x580 [ 170.620207][ T7602] ? tomoyo_path_number_perm+0x188/0x580 [ 170.620241][ T7602] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 170.620291][ T7602] snd_mixer_oss_ioctl_card+0x102/0x170 [ 170.620322][ T7602] ? __pfx_snd_mixer_oss_ioctl_card+0x10/0x10 [ 170.620364][ T7602] snd_pcm_oss_ioctl+0x34d/0x3700 [ 170.620399][ T7602] ? find_held_lock+0x2b/0x80 [ 170.620428][ T7602] ? __fget_files+0x215/0x3d0 [ 170.620450][ T7602] ? hook_file_ioctl_common+0x149/0x410 [ 170.620482][ T7602] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 170.620518][ T7602] ? __fget_files+0x21f/0x3d0 [ 170.620548][ T7602] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 170.620586][ T7602] __x64_sys_ioctl+0x18e/0x210 [ 170.620625][ T7602] do_syscall_64+0x10b/0xf80 [ 170.620660][ T7602] ? clear_bhb_loop+0x40/0x90 [ 170.620690][ T7602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.620717][ T7602] RIP: 0033:0x7ffaaeb9c819 [ 170.620738][ T7602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.620762][ T7602] RSP: 002b:00007ffaaf9c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.620786][ T7602] RAX: ffffffffffffffda RBX: 00007ffaaee15fa0 RCX: 00007ffaaeb9c819 [ 170.620803][ T7602] RDX: 0000200000000280 RSI: 0000000080044dff RDI: 0000000000000011 [ 170.620819][ T7602] RBP: 00007ffaaf9c4090 R08: 0000000000000000 R09: 0000000000000000 [ 170.620834][ T7602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 170.620848][ T7602] R13: 00007ffaaee16038 R14: 00007ffaaee15fa0 R15: 00007ffd36731618 [ 170.620885][ T7602] [ 170.651574][ T50] Bluetooth: hci1: unexpected event 0x0e length: 1022 > 260 [ 170.886319][ T50] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 171.412546][ T7619] FAULT_INJECTION: forcing a failure. [ 171.412546][ T7619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.448442][ T7619] CPU: 0 UID: 0 PID: 7619 Comm: syz.1.376 Not tainted syzkaller #0 PREEMPT(full) [ 171.448474][ T7619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 171.448486][ T7619] Call Trace: [ 171.448494][ T7619] [ 171.448503][ T7619] dump_stack_lvl+0x100/0x190 [ 171.448545][ T7619] should_fail_ex.cold+0x5/0xa [ 171.448575][ T7619] _copy_to_user+0x32/0xd0 [ 171.448604][ T7619] simple_read_from_buffer+0xcb/0x170 [ 171.448641][ T7619] proc_fail_nth_read+0x1af/0x230 [ 171.448672][ T7619] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 171.448704][ T7619] ? rw_verify_area+0xce/0x6d0 [ 171.448734][ T7619] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 171.448764][ T7619] vfs_read+0x1e4/0xb30 [ 171.448789][ T7619] ? __pfx_vfs_read+0x10/0x10 [ 171.448809][ T7619] ? __fget_files+0x215/0x3d0 [ 171.448837][ T7619] ? __fget_files+0x21f/0x3d0 [ 171.448868][ T7619] ksys_read+0x12a/0x250 [ 171.448889][ T7619] ? __pfx_ksys_read+0x10/0x10 [ 171.448912][ T7619] ? rcu_is_watching+0x12/0xc0 [ 171.448940][ T7619] do_syscall_64+0x10b/0xf80 [ 171.448971][ T7619] ? clear_bhb_loop+0x40/0x90 [ 171.448999][ T7619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.449021][ T7619] RIP: 0033:0x7f458955d04e [ 171.449040][ T7619] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 171.449060][ T7619] RSP: 002b:00007f458a4f7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 171.449082][ T7619] RAX: ffffffffffffffda RBX: 00007f458a4f86c0 RCX: 00007f458955d04e [ 171.449107][ T7619] RDX: 000000000000000f RSI: 00007f458a4f80a0 RDI: 0000000000000004 [ 171.449122][ T7619] RBP: 00007f458a4f8090 R08: 0000000000000000 R09: 0000000000000000 [ 171.449136][ T7619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.449150][ T7619] R13: 00007f4589816038 R14: 00007f4589815fa0 R15: 00007ffeb62b7248 [ 171.449185][ T7619] [ 171.451195][ T7625] FAULT_INJECTION: forcing a failure. [ 171.451195][ T7625] name failslab, interval 1, probability 0, space 0, times 0 [ 171.663904][ T7625] CPU: 0 UID: 0 PID: 7625 Comm: syz.2.377 Not tainted syzkaller #0 PREEMPT(full) [ 171.663943][ T7625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 171.663959][ T7625] Call Trace: [ 171.663968][ T7625] [ 171.663978][ T7625] dump_stack_lvl+0x100/0x190 [ 171.664030][ T7625] should_fail_ex.cold+0x5/0xa [ 171.664074][ T7625] should_failslab+0xc2/0x120 [ 171.664104][ T7625] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 171.664144][ T7625] ? vm_area_alloc+0x1f/0x160 [ 171.664187][ T7625] vm_area_alloc+0x1f/0x160 [ 171.664224][ T7625] __mmap_region+0x104d/0x2dc0 [ 171.664270][ T7625] ? __pfx___mmap_region+0x10/0x10 [ 171.664314][ T7625] ? post_alloc_hook+0x140/0x170 [ 171.664375][ T7625] ? mas_prev_slot+0x760/0x1d20 [ 171.664421][ T7625] ? __pfx_mas_prev+0x10/0x10 [ 171.664468][ T7625] ? __pfx_unmapped_area_topdown+0x10/0x10 [ 171.664574][ T7625] mmap_region+0x35d/0x620 [ 171.664617][ T7625] ? __pfx_mmap_region+0x10/0x10 [ 171.664657][ T7625] ? thp_get_unmapped_area_vmflags+0x27f/0x2d0 [ 171.664697][ T7625] ? cap_mmap_addr+0x4b/0x120 [ 171.664725][ T7625] ? bpf_lsm_mmap_addr+0x9/0x30 [ 171.664748][ T7625] ? security_mmap_addr+0x71/0x1e0 [ 171.664782][ T7625] ? __get_unmapped_area+0x255/0x3e0 [ 171.664816][ T7625] do_mmap+0xc63/0x12f0 [ 171.664853][ T7625] ? __pfx_do_mmap+0x10/0x10 [ 171.664880][ T7625] ? __pfx_down_write_killable+0x10/0x10 [ 171.664915][ T7625] vm_mmap_pgoff+0x29e/0x470 [ 171.664952][ T7625] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 171.664991][ T7625] ? find_held_lock+0x2b/0x80 [ 171.665023][ T7625] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 171.665077][ T7625] ksys_mmap_pgoff+0xe4/0x610 [ 171.665110][ T7625] ? find_held_lock+0x2b/0x80 [ 171.665144][ T7625] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 171.665172][ T7625] ? exc_page_fault+0x6f/0xd0 [ 171.665220][ T7625] __x64_sys_mmap+0x125/0x190 [ 171.665254][ T7625] do_syscall_64+0x10b/0xf80 [ 171.665292][ T7625] ? clear_bhb_loop+0x40/0x90 [ 171.665323][ T7625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.665351][ T7625] RIP: 0033:0x7f6c8e39c582 [ 171.665373][ T7625] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 171.665399][ T7625] RSP: 002b:00007f6c8f282d08 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 171.665426][ T7625] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6c8e39c582 [ 171.665446][ T7625] RDX: 0000000000000000 RSI: 0000000008000000 RDI: 0000000000000000 [ 171.665463][ T7625] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 171.665484][ T7625] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000004000000 [ 171.665500][ T7625] R13: 0000000000001000 R14: 0000000000000022 R15: 00007f6c8e44fd33 [ 171.665538][ T7625] [ 172.312134][ T7637] FAULT_INJECTION: forcing a failure. [ 172.312134][ T7637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.346634][ T7637] CPU: 1 UID: 0 PID: 7637 Comm: syz.2.382 Not tainted syzkaller #0 PREEMPT(full) [ 172.346665][ T7637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 172.346679][ T7637] Call Trace: [ 172.346687][ T7637] [ 172.346697][ T7637] dump_stack_lvl+0x100/0x190 [ 172.346743][ T7637] should_fail_ex.cold+0x5/0xa [ 172.346804][ T7637] _copy_to_user+0x32/0xd0 [ 172.346838][ T7637] simple_read_from_buffer+0xcb/0x170 [ 172.346882][ T7637] proc_fail_nth_read+0x1af/0x230 [ 172.346915][ T7637] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 172.346950][ T7637] ? rw_verify_area+0xce/0x6d0 [ 172.346983][ T7637] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 172.347015][ T7637] vfs_read+0x1e4/0xb30 [ 172.347043][ T7637] ? __pfx_vfs_read+0x10/0x10 [ 172.347064][ T7637] ? __fget_files+0x215/0x3d0 [ 172.347095][ T7637] ? __fget_files+0x21f/0x3d0 [ 172.347130][ T7637] ksys_read+0x12a/0x250 [ 172.347153][ T7637] ? __pfx_ksys_read+0x10/0x10 [ 172.347179][ T7637] ? rcu_is_watching+0x12/0xc0 [ 172.347209][ T7637] do_syscall_64+0x10b/0xf80 [ 172.347243][ T7637] ? clear_bhb_loop+0x40/0x90 [ 172.347274][ T7637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.347299][ T7637] RIP: 0033:0x7f6c8e35d04e [ 172.347319][ T7637] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 172.347342][ T7637] RSP: 002b:00007f6c8f2a4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 172.347365][ T7637] RAX: ffffffffffffffda RBX: 00007f6c8f2a56c0 RCX: 00007f6c8e35d04e [ 172.347380][ T7637] RDX: 000000000000000f RSI: 00007f6c8f2a50a0 RDI: 0000000000000004 [ 172.347393][ T7637] RBP: 00007f6c8f2a5090 R08: 0000000000000000 R09: 0000000000000000 [ 172.347407][ T7637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.347419][ T7637] R13: 00007f6c8e616038 R14: 00007f6c8e615fa0 R15: 00007ffdeb2b0468 [ 172.347450][ T7637] [ 173.298620][ T50] Bluetooth: hci3: unexpected event 0x0e length: 1022 > 260 [ 173.298668][ T50] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 173.506337][ T7661] netlink: 17 bytes leftover after parsing attributes in process `syz.2.386'. [ 174.029670][ T7670] zswap: compressor û not available [ 174.131424][ T7682] netlink: 20 bytes leftover after parsing attributes in process `syz.0.392'. [ 174.281509][ T7688] block2mtd: illegal erase size [ 175.270859][ T50] Bluetooth: hci3: unexpected event 0x0e length: 1022 > 260 [ 175.270904][ T50] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 175.506304][ T7716] zswap: compressor not available [ 177.273163][ T7755] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 177.672267][ T7778] random: crng reseeded on system resumption [ 177.741062][ T50] Bluetooth: hci2: unexpected event 0x0e length: 1022 > 260 [ 177.741105][ T50] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 179.710345][ T7837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.426'. [ 179.729827][ T50] Bluetooth: hci0: unexpected event 0x0e length: 1022 > 260 [ 179.729866][ T50] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 179.777553][ T7841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.426'. [ 179.925588][ T7837] syz.1.426 (7837) used greatest stack depth: 18784 bytes left [ 181.751150][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.441'. [ 181.834281][ T7912] lo: entered allmulticast mode [ 182.000864][ T7909] lo: left allmulticast mode [ 182.124588][ T50] Bluetooth: hci0: unexpected event 0x0e length: 1022 > 260 [ 182.124635][ T50] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 183.346380][ T7950] smpboot: CPU 1 is now offline [ 183.881334][ T50] Bluetooth: hci3: unexpected event 0x1d length: 6 > 5 [ 184.357840][ T50] Bluetooth: hci2: unexpected event 0x0e length: 1022 > 260 [ 184.365513][ T50] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 185.011354][ T7992] can: request_module (can-proto-0) failed. [ 186.258902][ T8014] bridge0: port 4(netdevsim2) entered blocking state [ 186.292698][ T8014] bridge0: port 4(netdevsim2) entered disabled state [ 186.347319][ T8014] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 186.403695][ T8014] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 186.438557][ T8014] bridge0: port 4(netdevsim2) entered blocking state [ 186.445358][ T8014] bridge0: port 4(netdevsim2) entered forwarding state [ 187.049090][ T50] Bluetooth: hci3: unexpected event 0x0e length: 1022 > 260 [ 187.049119][ T50] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 189.752649][ T8051] kexec: Could not allocate control_code_buffer [ 190.238058][ T50] Bluetooth: hci0: unexpected event 0x0e length: 1022 > 260 [ 190.238087][ T50] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 191.274305][ T8111] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 191.290111][ T8111] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 191.309338][ T8111] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 191.333926][ T8111] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 192.010573][ T50] Bluetooth: hci3: unexpected event 0x0e length: 1022 > 260 [ 192.010604][ T50] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 192.544503][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 193.343983][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 193.350043][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 193.905928][ T8202] futex_wake_op: syz.3.510 tries to shift op by -2048; fix this program [ 194.232799][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.239179][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.537575][ T50] Bluetooth: hci3: unexpected event 0x0e length: 1022 > 260 [ 194.537607][ T50] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 194.892477][ T8225] process 'syz.3.515' launched '/dev/fd/4' with NULL argv: empty string added [ 197.762585][ T8272] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 201.215909][ T50] Bluetooth: hci2: unexpected event 0x0e length: 1022 > 260 [ 201.215940][ T50] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 201.268871][ T8286] Invalid ELF header magic: != ELF [ 203.118665][ T8324] FAULT_INJECTION: forcing a failure. [ 203.118665][ T8324] name failslab, interval 1, probability 0, space 0, times 0 [ 203.260573][ T8324] CPU: 0 UID: 0 PID: 8324 Comm: syz.0.537 Not tainted syzkaller #0 PREEMPT(full) [ 203.260596][ T8324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 203.260605][ T8324] Call Trace: [ 203.260610][ T8324] [ 203.260616][ T8324] dump_stack_lvl+0x100/0x190 [ 203.260646][ T8324] should_fail_ex.cold+0x5/0xa [ 203.260667][ T8324] should_failslab+0xc2/0x120 [ 203.260683][ T8324] __kmalloc_cache_noprof+0x7a/0x6f0 [ 203.260708][ T8324] ? resv_map_alloc+0x46/0x400 [ 203.260735][ T8324] resv_map_alloc+0x46/0x400 [ 203.260758][ T8324] hugetlbfs_get_inode+0x385/0x700 [ 203.260775][ T8324] ? do_futex+0x192/0x350 [ 203.260792][ T8324] hugetlb_file_setup+0x15b/0x5b0 [ 203.260812][ T8324] ksys_mmap_pgoff+0x242/0x610 [ 203.260830][ T8324] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 203.260846][ T8324] ? xfd_validate_state+0x129/0x190 [ 203.260860][ T8324] ? ksys_write+0x1ac/0x250 [ 203.260876][ T8324] __x64_sys_mmap+0x125/0x190 [ 203.260893][ T8324] do_syscall_64+0x10b/0xf80 [ 203.260913][ T8324] ? clear_bhb_loop+0x40/0x90 [ 203.260931][ T8324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.260945][ T8324] RIP: 0033:0x7ffaaeb9c819 [ 203.260959][ T8324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.260973][ T8324] RSP: 002b:00007ffaaf9c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 203.260988][ T8324] RAX: ffffffffffffffda RBX: 00007ffaaee15fa0 RCX: 00007ffaaeb9c819 [ 203.260997][ T8324] RDX: ffffffffffffffff RSI: 0000000000000002 RDI: 0000000000000000 [ 203.261006][ T8324] RBP: 00007ffaaec32c91 R08: 0000000000000602 R09: 0000300000000000 [ 203.261014][ T8324] R10: 0000000000044eb1 R11: 0000000000000246 R12: 0000000000000000 [ 203.261023][ T8324] R13: 00007ffaaee16038 R14: 00007ffaaee15fa0 R15: 00007ffd36731618 [ 203.261041][ T8324] [ 204.028254][ T50] Bluetooth: hci3: unexpected event 0x0e length: 1022 > 260 [ 204.028286][ T50] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 204.639565][ T8348] usb usb38: selecting invalid altsetting 65537 [ 208.020930][ T50] Bluetooth: hci3: unexpected event 0x0e length: 1022 > 260 [ 208.020959][ T50] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 209.540211][ T8420] ovs_: entered promiscuous mode [ 209.835720][ T50] Bluetooth: hci0: unexpected event 0x0e length: 1022 > 260 [ 209.835750][ T50] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 210.989868][ T50] Bluetooth: hci0: unexpected event 0x0e length: 1022 > 260 [ 210.989900][ T50] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 212.642858][ T8469] netlink: 314 bytes leftover after parsing attributes in process `syz.3.570'. [ 213.765187][ T50] Bluetooth: hci2: unexpected event 0x0e length: 1022 > 260 [ 213.765219][ T50] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 214.072380][ T50] Bluetooth: hci3: unexpected event 0x0e length: 1022 > 260 [ 214.072412][ T50] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 215.670820][ T8503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.579'. [ 215.717267][ T8503] netlink: 5 bytes leftover after parsing attributes in process `syz.3.579'. [ 218.186782][ T50] Bluetooth: hci1: unexpected event 0x0e length: 1022 > 260 [ 218.186813][ T50] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 220.245010][ T8571] netlink: 52 bytes leftover after parsing attributes in process `syz.2.593'. [ 221.328202][ T50] Bluetooth: hci1: unexpected event 0x0e length: 1022 > 260 [ 221.328230][ T50] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 221.699655][ T8601] HfR: entered promiscuous mode [ 221.746123][ T8601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.601'. [ 221.822596][ T8601] HfR: left promiscuous mode [ 221.989343][ T8603] sg_write: data in/out 262108/13 bytes for SCSI command 0xed-- guessing data in; [ 221.989343][ T8603] program syz.1.602 not setting count and/or reply_len properly [ 222.228630][ T8613] futex_wake_op: syz.2.603 tries to shift op by -2048; fix this program [ 222.726534][ T8621] hub 1-0:1.0: USB hub found [ 222.760372][ T8621] hub 1-0:1.0: 1 port detected [ 224.661066][ T50] Bluetooth: hci3: unexpected event 0x0e length: 1022 > 260 [ 224.661097][ T50] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 225.886584][ T8678] hub 1-0:1.0: USB hub found [ 225.939057][ T8678] hub 1-0:1.0: 1 port detected [ 226.245385][ T30] audit: type=1800 audit(1776629581.491:4): pid=8708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.624" name="lu_gp_id" dev="configfs" ino=22297 res=0 errno=0 [ 226.796529][ T50] Bluetooth: hci0: unexpected event 0x0e length: 1022 > 260 [ 226.796560][ T50] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 227.914081][ T30] audit: type=1800 audit(1776629583.171:5): pid=8756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.635" name="#898" dev="tmpfs" ino=898 res=0 errno=0 [ 228.338209][ T8765] sp0: Synchronizing with TNC [ 228.741361][ T8772] input: f¬ as /devices/virtual/input/input13 [ 229.441386][ T50] Bluetooth: hci1: unexpected event 0x0e length: 1022 > 260 [ 229.441416][ T50] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 229.573170][ T8796] random: crng reseeded on system resumption [ 229.642880][ T8796] Restarting kernel threads ... [ 229.710498][ T8796] Done restarting kernel threads. [ 229.995222][ T5829] ------------[ cut here ]------------ [ 230.000726][ T5829] ODEBUG: free active (active state 0) object: ffff88807cf8d438 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0 [ 230.013475][ T5829] WARNING: lib/debugobjects.c:629 at debug_print_object+0x18e/0x2a0, CPU#0: syz-executor/5829 [ 230.023775][ T5829] Modules linked in: [ 230.027671][ T5829] CPU: 0 UID: 0 PID: 5829 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 230.038131][ T5829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 230.048981][ T5829] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 230.055099][ T5829] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d e2 ef e7 0b 41 56 48 8b 14 dd c0 13 1c 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 8c 80 dd 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 230.075842][ T5829] RSP: 0018:ffffc90003f27958 EFLAGS: 00010246 [ 230.082195][ T5829] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 230.090197][ T5829] RDX: ffffffff8c1c1300 RSI: ffffffff8c1c0f20 RDI: ffffffff90e68c10 [ 230.098191][ T5829] RBP: 0000000000000001 R08: ffff88807cf8d438 R09: ffffffff8bb2b680 [ 230.106316][ T5829] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1c0f20 [ 230.114357][ T5829] R13: ffffffff8bb2b6c0 R14: ffffffff8a9c3620 R15: ffffc90003f27a58 [ 230.122313][ T5829] FS: 0000000000000000(0000) GS:ffff8881242f6000(0000) knlGS:0000000000000000 [ 230.131252][ T5829] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 230.138748][ T5829] CR2: 00007f88df9f43e8 CR3: 00000000758ce000 CR4: 00000000003526f0 [ 230.147352][ T5829] Call Trace: [ 230.150617][ T5829] [ 230.153531][ T5829] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 230.159031][ T5829] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 230.164857][ T5829] debug_check_no_obj_freed+0x4da/0x630 [ 230.170393][ T5829] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 230.176465][ T5829] ? __page_table_check_zero+0x333/0x410 [ 230.182085][ T5829] ? __page_table_check_zero+0x338/0x410 [ 230.187728][ T5829] __free_frozen_pages+0x3f5/0x1040 [ 230.192916][ T5829] hci_release_dev+0x4ef/0x630 [ 230.197691][ T5829] ? __pfx_hci_release_dev+0x10/0x10 [ 230.202966][ T5829] ? device_release+0x97/0x270 [ 230.207733][ T5829] ? rcu_is_watching+0x12/0xc0 [ 230.212543][ T5829] ? device_release+0x97/0x270 [ 230.217329][ T5829] bt_host_release+0x6a/0xb0 [ 230.221925][ T5829] ? __pfx_bt_host_release+0x10/0x10 [ 230.227234][ T5829] device_release+0xd2/0x270 [ 230.231809][ T5829] kobject_put+0x1f7/0x640 [ 230.236232][ T5829] put_device+0x1f/0x30 [ 230.241269][ T5829] vhci_release+0x185/0x230 [ 230.246385][ T5829] ? __pfx_vhci_release+0x10/0x10 [ 230.251397][ T5829] __fput+0x3ff/0xb50 [ 230.255398][ T5829] task_work_run+0x150/0x240 [ 230.259972][ T5829] ? __pfx_task_work_run+0x10/0x10 [ 230.265127][ T5829] do_exit+0x8d2/0x2a60 [ 230.269292][ T5829] ? do_raw_spin_lock+0x128/0x260 [ 230.274329][ T5829] ? __pfx_do_exit+0x10/0x10 [ 230.278908][ T5829] ? do_group_exit+0x1bd/0x2a0 [ 230.283660][ T5829] ? rcu_is_watching+0x12/0xc0 [ 230.288431][ T5829] do_group_exit+0xd5/0x2a0 [ 230.292923][ T5829] __x64_sys_exit_group+0x3e/0x50 [ 230.297979][ T5829] x64_sys_call+0x102c/0x1530 [ 230.302667][ T5829] do_syscall_64+0x10b/0xf80 [ 230.307311][ T5829] ? clear_bhb_loop+0x40/0x90 [ 230.311973][ T5829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.317874][ T5829] RIP: 0033:0x7ffaaeb9c819 [ 230.322289][ T5829] Code: Unable to access opcode bytes at 0x7ffaaeb9c7ef. [ 230.329312][ T5829] RSP: 002b:00007ffd36731858 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 230.337743][ T5829] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ffaaeb9c819 [ 230.346612][ T5829] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 230.355251][ T5829] RBP: 00007ffaaec33bc9 R08: 0000000000000000 R09: 00000000000927c0 [ 230.363209][ T5829] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001e [ 230.371193][ T5829] R13: 00000000000927c0 R14: 000000000003817a R15: 00007ffd36731a10 [ 230.379226][ T5829] [ 230.382241][ T5829] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 230.389505][ T5829] CPU: 0 UID: 0 PID: 5829 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 230.398949][ T5829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 230.408994][ T5829] Call Trace: [ 230.412265][ T5829] [ 230.415179][ T5829] dump_stack_lvl+0x100/0x190 [ 230.419854][ T5829] vpanic+0x552/0x970 [ 230.423821][ T5829] ? __pfx_vpanic+0x10/0x10 [ 230.428312][ T5829] panic+0xd1/0xe0 [ 230.432016][ T5829] ? __pfx_panic+0x10/0x10 [ 230.436420][ T5829] ? check_panic_on_warn+0x1f/0x90 [ 230.441522][ T5829] check_panic_on_warn.cold+0x19/0x34 [ 230.446874][ T5829] ? debug_print_object+0x18e/0x2a0 [ 230.452050][ T5829] __warn.cold+0x191/0x328 [ 230.456451][ T5829] __report_bug+0x296/0x3d0 [ 230.460941][ T5829] ? debug_print_object+0x18e/0x2a0 [ 230.466123][ T5829] ? __pfx___report_bug+0x10/0x10 [ 230.471136][ T5829] ? __lock_acquire+0x4a5/0x2630 [ 230.476065][ T5829] report_bug_entry+0xe1/0x290 [ 230.480815][ T5829] ? debug_print_object+0x19b/0x2a0 [ 230.485999][ T5829] handle_bug+0x1cd/0x2a0 [ 230.490312][ T5829] exc_invalid_op+0x17/0x50 [ 230.494798][ T5829] asm_exc_invalid_op+0x1a/0x20 [ 230.499628][ T5829] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 230.505416][ T5829] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d e2 ef e7 0b 41 56 48 8b 14 dd c0 13 1c 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 8c 80 dd 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 230.525010][ T5829] RSP: 0018:ffffc90003f27958 EFLAGS: 00010246 [ 230.531074][ T5829] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 230.539042][ T5829] RDX: ffffffff8c1c1300 RSI: ffffffff8c1c0f20 RDI: ffffffff90e68c10 [ 230.547002][ T5829] RBP: 0000000000000001 R08: ffff88807cf8d438 R09: ffffffff8bb2b680 [ 230.554955][ T5829] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1c0f20 [ 230.562911][ T5829] R13: ffffffff8bb2b6c0 R14: ffffffff8a9c3620 R15: ffffc90003f27a58 [ 230.570878][ T5829] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 230.576364][ T5829] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 230.581817][ T5829] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 230.587619][ T5829] debug_check_no_obj_freed+0x4da/0x630 [ 230.593174][ T5829] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 230.599228][ T5829] ? __page_table_check_zero+0x333/0x410 [ 230.604851][ T5829] ? __page_table_check_zero+0x338/0x410 [ 230.610468][ T5829] __free_frozen_pages+0x3f5/0x1040 [ 230.615654][ T5829] hci_release_dev+0x4ef/0x630 [ 230.620405][ T5829] ? __pfx_hci_release_dev+0x10/0x10 [ 230.625676][ T5829] ? device_release+0x97/0x270 [ 230.630419][ T5829] ? rcu_is_watching+0x12/0xc0 [ 230.635164][ T5829] ? device_release+0x97/0x270 [ 230.639925][ T5829] bt_host_release+0x6a/0xb0 [ 230.644514][ T5829] ? __pfx_bt_host_release+0x10/0x10 [ 230.649793][ T5829] device_release+0xd2/0x270 [ 230.654376][ T5829] kobject_put+0x1f7/0x640 [ 230.658795][ T5829] put_device+0x1f/0x30 [ 230.662934][ T5829] vhci_release+0x185/0x230 [ 230.667437][ T5829] ? __pfx_vhci_release+0x10/0x10 [ 230.672455][ T5829] __fput+0x3ff/0xb50 [ 230.676446][ T5829] task_work_run+0x150/0x240 [ 230.681035][ T5829] ? __pfx_task_work_run+0x10/0x10 [ 230.686242][ T5829] do_exit+0x8d2/0x2a60 [ 230.690398][ T5829] ? do_raw_spin_lock+0x128/0x260 [ 230.695405][ T5829] ? __pfx_do_exit+0x10/0x10 [ 230.699985][ T5829] ? do_group_exit+0x1bd/0x2a0 [ 230.704739][ T5829] ? rcu_is_watching+0x12/0xc0 [ 230.709491][ T5829] do_group_exit+0xd5/0x2a0 [ 230.713985][ T5829] __x64_sys_exit_group+0x3e/0x50 [ 230.719000][ T5829] x64_sys_call+0x102c/0x1530 [ 230.723664][ T5829] do_syscall_64+0x10b/0xf80 [ 230.728248][ T5829] ? clear_bhb_loop+0x40/0x90 [ 230.732911][ T5829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.738789][ T5829] RIP: 0033:0x7ffaaeb9c819 [ 230.743188][ T5829] Code: Unable to access opcode bytes at 0x7ffaaeb9c7ef. [ 230.750183][ T5829] RSP: 002b:00007ffd36731858 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 230.758578][ T5829] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ffaaeb9c819 [ 230.766616][ T5829] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 230.774565][ T5829] RBP: 00007ffaaec33bc9 R08: 0000000000000000 R09: 00000000000927c0 [ 230.782512][ T5829] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001e [ 230.790462][ T5829] R13: 00000000000927c0 R14: 000000000003817a R15: 00007ffd36731a10 [ 230.798420][ T5829] [ 230.801480][ T5829] Kernel Offset: disabled [ 230.805792][ T5829] Rebooting in 86400 seconds..