last executing test programs: 3m27.635917638s ago: executing program 2 (id=172): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x400000000001, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mbind$auto(0x8000000000002004, 0x0, 0x7, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/net/lapb1/power/runtime_status\x00', 0x60000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) getpeername$auto(0x3, 0x0, 0x0) close_range$auto(0x2, 0xa, 0x0) r1 = socket(0x18, 0xa, 0x1) socket(0x2c, 0x2, 0x3) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x0, 0x4) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x1, 0x2, 0x3a) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x2404c800) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, r1, 0x8003) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop12\x00', 0x0, 0x0) fcntl$auto_F_SET_RW_HINT(r2, 0x40c, 0x0) 3m24.58339362s ago: executing program 2 (id=184): mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/system/machinecheck/machinecheck0/bank6\x00', 0x2101, 0x0) write$auto(r0, &(0x7f0000000240)='802.15.4 MAC\x00', 0x3) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x109500, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x8, 0x1000000000000006, 0x10, 0xfffffffffffffffa, 0x8000) r1 = socket(0x11, 0x80003, 0x300) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/013/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000100)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000040), 0xc694, 0x3, 0x80005, @stream_id=0x80000001, 0x2004b, 0xc, 0x0}) ioctl$auto_USBDEVFS_REAPURB32(r2, 0x4004550c, &(0x7f0000000000)=0x3ff) setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0xffffffffffffffff, 0xc1000001, 0x8}, 0x5) io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0xfe, 0x6fb3, 0x8a, 0x9, 0xffffffffffffffff, [0x100, 0x9, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0x4, 0xf08a2b3}, {0x0, 0xfc, 0x10001, 0x0, 0x2, 0xf89, 0x9, 0x839, 0x6}}) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x20008800) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x40008c0) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x65, 0x2) socket(0x1d, 0x2, 0x2) connect$auto(0x3, 0x0, 0x53) socket(0x10, 0x3, 0x6) socketpair$auto(0x1e, 0xb, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x38}, 0x6, 0x0, 0x4, 0x9}, 0x9}, 0x6, 0x1f00) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(0xffffffffffffffff, &(0x7f0000000000)='-\xdd', 0x9) 3m24.389204507s ago: executing program 2 (id=186): r0 = pidfd_open$auto(0x1, 0x800) waitid$auto_P_PIDFD(0x3, r0, 0x0, 0xc, 0x0) openat$auto_stat_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) (async) r1 = openat$auto_stat_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) socket(0x1, 0x2, 0x0) connect$auto(r1, 0xfffffffffffffffe, 0x0) (async) connect$auto(r1, 0xfffffffffffffffe, 0x0) lseek$auto(r1, 0x8a07, 0x1) 3m24.287155686s ago: executing program 2 (id=187): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) setfsuid$auto(0xee00) r0 = setfsuid$auto(0xee01) keyctl$auto(0x1f, 0x0, r0, 0x0, 0x4000000003ff) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd700002dcdf250300000004000800100001800c00108008000100", @ANYBLOB="c3a8c095e1ffc87f671ebbefee452228fb614910d81cbec338ac8a039a7abe980a2b74940964c26cad752e9503e0c1c3d5c97f38c5eda67a5acaabf1266b6686ae89c7cde990cea64101329dd840a1611398768fcb40e2b0725659ebbd09871a2507fbfa780b9e19e6706b9e5d70ecc928b53e3750f084218809cfbdf172f52a78f31a9378fa89aa"], 0x28}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) 3m24.097121119s ago: executing program 2 (id=188): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 3m23.71309938s ago: executing program 2 (id=191): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptydc\x00', 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x1) connect$auto(r1, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0x4001}, 0x55) write$auto(0x3, 0x0, 0x3f00) ioctl$auto(r0, 0xa410, 0xffffffffffffffff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/net/wpan1/queues/tx-0/byte_queue_limits/stall_thrs\x00', 0x10a902, 0x0) r3 = socket(0x10, 0x3, 0x15) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}}, 0x20008004) write$auto(r3, &(0x7f0000000000)='-\x00', 0x2fb) sendmsg$auto_NL80211_CMD_DEL_MPATH(r1, &(0x7f0000001000)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000700)={0x888, 0x0, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_IE_ASSOC_RESP={0x76e, 0x80, "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"}, @NL80211_ATTR_CNTDWN_OFFS_PRESP={0xf1, 0xbb, "87a74fe83350b8238299b8c74b64895e180fa48343a6dafbba66596e1645669039b0ed7e42757390dcc2bea6586097b4fa7877ed3d47db0c05c666433595fb76bc6bd61c892af46863a5273c26eda41743ca3e6c424df8bb7790adf6ba60d18e83b81205c431687d1edff3126227d81ffc6b280a201a2162bb7831d823ceb54b80ac3c1a4af947b9edbf188ffd7d1d42a4c11497b18dd6a5ce4219bb583cb6533c338907aa6bb364234a2b5439926b9dfcbb428abd552bd44f99e9e66d4a9ea9687d60a8fec82d8c7c14956d85fe649ff31daf7d4a15d9c8172f42ad38a86d31ed617625572c48b2349cc5fecc"}, @NL80211_ATTR_MLO_RECONF_REM_LINKS={0x6, 0x14f, 0x7}, @NL80211_ATTR_BANDS={0x8}]}, 0x888}, 0x1, 0x0, 0x0, 0x8015}, 0x10000080) sendfile$auto(r2, r2, 0x0, 0x3) mmap$auto(0x0, 0x10000, 0x2, 0x40eb2, r2, 0x308000000000) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyq2\x00', 0xac0, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_FILS_AAD(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="00082cbd7000fddbdf25920000004a003300587819982a8a6cc400144c16e01133c670575407c308f9b1f24caa2abb4eccd9614b8f23985a6ddb702b30e091818f461394256fbc0269ba8f3aefb620d706fef3292fc497b8000005003e0007000000"], 0x68}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop1\x00', 0x0, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r7, 0x4b64, 0x1) r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r9 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x20001, 0x0) getsockopt$auto_SO_GET_FILTER(r9, 0xffff208c, 0x1a, &(0x7f0000000480)='-(%&$\x00', &(0x7f00000004c0)=0xb38) add_key$auto_KEY_SPEC_USER_KEYRING(&(0x7f0000000500)='{\x00', &(0x7f0000000540)='\x00', &(0x7f0000000580)="342e4a0fb9a76ac02fec8c2063e81aa58c5258613c1231f2a7073cdef44634b3031d0518a3d18314dbde9600907593ad19d936f8ea75065869541d23490eb22f4252d07720cb8831b5dcfe4fdf0fff0408c6390938688fe4e2c337f3d741a712dc0a8b8b924b489370eea0799205c88cd6d11fb1e7134e3e9a6c737b0be8487cf8f900bd007ca638d641ca978dd5fee419d24764d1962e3036c548fac4d52e3598de2fb2356890fde6893b95e6c5e013a0469dfb80aa03be57d2e5b30dd3b6760108d0395c4118a202c0b8ed751a750d07a06b752be0a04f6432eae371d58050251f", 0x0, 0xfffffffffffffffc) ioctl$auto(r8, 0x4b67, 0x1) read$auto(0x3, 0x0, 0x7fffffff) ioctl$auto(0x3, 0x402c542b, 0x38) ioctl$auto_TIOCSTI2(r4, 0x5412, 0x0) 3m8.209815699s ago: executing program 32 (id=191): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptydc\x00', 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x1) connect$auto(r1, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0x4001}, 0x55) write$auto(0x3, 0x0, 0x3f00) ioctl$auto(r0, 0xa410, 0xffffffffffffffff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/net/wpan1/queues/tx-0/byte_queue_limits/stall_thrs\x00', 0x10a902, 0x0) r3 = socket(0x10, 0x3, 0x15) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}}, 0x20008004) write$auto(r3, &(0x7f0000000000)='-\x00', 0x2fb) sendmsg$auto_NL80211_CMD_DEL_MPATH(r1, &(0x7f0000001000)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000700)={0x888, 0x0, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_IE_ASSOC_RESP={0x76e, 0x80, "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"}, @NL80211_ATTR_CNTDWN_OFFS_PRESP={0xf1, 0xbb, "87a74fe83350b8238299b8c74b64895e180fa48343a6dafbba66596e1645669039b0ed7e42757390dcc2bea6586097b4fa7877ed3d47db0c05c666433595fb76bc6bd61c892af46863a5273c26eda41743ca3e6c424df8bb7790adf6ba60d18e83b81205c431687d1edff3126227d81ffc6b280a201a2162bb7831d823ceb54b80ac3c1a4af947b9edbf188ffd7d1d42a4c11497b18dd6a5ce4219bb583cb6533c338907aa6bb364234a2b5439926b9dfcbb428abd552bd44f99e9e66d4a9ea9687d60a8fec82d8c7c14956d85fe649ff31daf7d4a15d9c8172f42ad38a86d31ed617625572c48b2349cc5fecc"}, @NL80211_ATTR_MLO_RECONF_REM_LINKS={0x6, 0x14f, 0x7}, @NL80211_ATTR_BANDS={0x8}]}, 0x888}, 0x1, 0x0, 0x0, 0x8015}, 0x10000080) sendfile$auto(r2, r2, 0x0, 0x3) mmap$auto(0x0, 0x10000, 0x2, 0x40eb2, r2, 0x308000000000) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyq2\x00', 0xac0, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_FILS_AAD(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="00082cbd7000fddbdf25920000004a003300587819982a8a6cc400144c16e01133c670575407c308f9b1f24caa2abb4eccd9614b8f23985a6ddb702b30e091818f461394256fbc0269ba8f3aefb620d706fef3292fc497b8000005003e0007000000"], 0x68}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop1\x00', 0x0, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r7, 0x4b64, 0x1) r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r9 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x20001, 0x0) getsockopt$auto_SO_GET_FILTER(r9, 0xffff208c, 0x1a, &(0x7f0000000480)='-(%&$\x00', &(0x7f00000004c0)=0xb38) add_key$auto_KEY_SPEC_USER_KEYRING(&(0x7f0000000500)='{\x00', &(0x7f0000000540)='\x00', &(0x7f0000000580)="342e4a0fb9a76ac02fec8c2063e81aa58c5258613c1231f2a7073cdef44634b3031d0518a3d18314dbde9600907593ad19d936f8ea75065869541d23490eb22f4252d07720cb8831b5dcfe4fdf0fff0408c6390938688fe4e2c337f3d741a712dc0a8b8b924b489370eea0799205c88cd6d11fb1e7134e3e9a6c737b0be8487cf8f900bd007ca638d641ca978dd5fee419d24764d1962e3036c548fac4d52e3598de2fb2356890fde6893b95e6c5e013a0469dfb80aa03be57d2e5b30dd3b6760108d0395c4118a202c0b8ed751a750d07a06b752be0a04f6432eae371d58050251f", 0x0, 0xfffffffffffffffc) ioctl$auto(r8, 0x4b67, 0x1) read$auto(0x3, 0x0, 0x7fffffff) ioctl$auto(0x3, 0x402c542b, 0x38) ioctl$auto_TIOCSTI2(r4, 0x5412, 0x0) 6.209769289s ago: executing program 0 (id=912): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000000c0)={0x2, 0x0, 0x8000004, 0x81, &(0x7f0000000000)="c902bf7613062e", 0x100400, 0xeb8e, 0x0, @number_of_packets=0xfffffff7, 0x9, 0x800476, 0x0}) ioctl$auto_USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000040)=0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d8010000", @ANYRES16, @ANYBLOB="01002dbd7000fcdbdf25010000000c0002000500000000000000c5000700c1007cf7c27c120e3984130834a73f9221887ac28e443c4a1a7da8d2ddcf2890cce5822826764f3f410e53f43f300d2e04"], 0x1d8}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf2502e0"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x200, 0x1) fanotify_mark$auto(0x0, 0x55, 0x5, 0xffffffffffffffff, 0x0) 5.976852531s ago: executing program 0 (id=913): r0 = socket(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) r1 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), r0) sendmsg$auto_SMC_NETLINK_GET_FBACK_STATS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x40, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, "2728d7b2a348a9d19a40810b32894bf8bf61e271e7901a6f6acba6b32c9a7cc677af372dab11f6b374fcd8bd"}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x4) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/005/001\x00', 0x30003, 0x0) openat$auto_proc_timers_operations_base(0xffffffffffffff9c, &(0x7f0000000680), 0x107800, 0x0) ioctl$auto_USBDEVFS_GET_SPEED(r2, 0x551f, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vbi25\x00', 0x40000, 0x0) mmap$auto(0x1, 0x8, 0xb8, 0x14, r0, 0x3) socket(0x2c, 0x3, 0x0) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) (async) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), r0) (async) sendmsg$auto_SMC_NETLINK_GET_FBACK_STATS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x40, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, "2728d7b2a348a9d19a40810b32894bf8bf61e271e7901a6f6acba6b32c9a7cc677af372dab11f6b374fcd8bd"}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x4) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/005/001\x00', 0x30003, 0x0) (async) openat$auto_proc_timers_operations_base(0xffffffffffffff9c, &(0x7f0000000680), 0x107800, 0x0) (async) ioctl$auto_USBDEVFS_GET_SPEED(r2, 0x551f, 0x0) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vbi25\x00', 0x40000, 0x0) (async) mmap$auto(0x1, 0x8, 0xb8, 0x14, r0, 0x3) (async) 5.799289667s ago: executing program 0 (id=914): listen$auto(0x3, 0x81) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0xfffffffffffffffd, 0x20009, 0x7fffffff, 0x200000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x2, 0x4000000000df, 0x40000000000eb1, r0, 0x8000) r1 = socket(0x2, 0x2, 0x0) bind$auto(r1, &(0x7f0000000100)=@in={0x2, 0x4e24, @multicast1}, 0xea) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) r3 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r4 = socket(0x10, 0x2, 0xc) r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="ed03667ddcd6d026df250a00000a00000200252f00e2a85c41e75a02715b2d0000001000df"], 0x51}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010) mmap$auto(0x0, 0x400008, 0xfffffffffffffffe, 0x15, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x8]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) getsockopt$auto_SO_RCVMARK(r2, 0x0, 0x4b, 0x0, 0x0) sendto$auto(r3, &(0x7f0000000140)="c99b97a4a18833a72aff5c6edec12838e6c36aa3b8efa7e23eab4f993ce66256c3ee1fa1470cc34d0844ef66ea5db21196afca7b6062c22e25bd38ff3a8ffce75c51cd146c42cece3a3c2eb0447313f733c79892b36978f22e11d89e044a5b7bc7cdd5b31fdb70dc8e1742fcffaaf5320703e7538d2d3b504ec3a67c52bf6efbf9e534702706e6a69a3fede118ad99154fc7e5e32bfbee8042e6352c285efc95675ed362f8255371c3422c3232332f10f51ccf72cabaf2fe303f88bf7d5b99b4c4139c4450af0df371", 0x0, 0x1e71, &(0x7f0000000000)=@can, 0x2) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) mlockall$auto(0x7) symlink$auto(&(0x7f0000000000)='.\x00', 0x0) rename$auto(0x0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x7, 0x1, 0x5, 0xc98c20c, 0x3b, 0x93f, 0x1fee6, 0x0, 0x200006, 0x2, 0x202, 0x5, 0x8008, 0x4, 0xb0, 0x9, 0x101, 0x3, 0x8, 0x9, 0x10, 0xb65, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffdffd, 0x7ff, 0x0, 0xfffffffe, [0x1, 0x4, 0x3ff, 0xfffffffffffffffe, 0xfff, 0x2000000000000, 0x2d26, 0x9, 0x0, 0x0, 0x9, 0x4, 0x8f0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x80000000000000, 0x0, 0x800200000000000, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x4, 0x9, 0xfffffffffffffffc, 0xffffffffffffffff, 0x10, 0x69, 0x2000000000000000, 0x11, 0xc, 0x0, 0x8, 0x76, 0x0, 0x201, 0xfffffffffffffffb]}, 0x1fe, 0x82) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 5.381199847s ago: executing program 1 (id=917): close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$auto_TUNGETVNETLE2(r0, 0x800454dd, &(0x7f0000000140)=0xb1) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x11, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x200006, 0xf, 0x2df, 0x500, 0x81, 0x5256, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x7fffffffffffffff}}) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_enter$auto(0x3, 0x1, 0x82400001, 0xb, 0x0, 0xd) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r2, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r1) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_CREATE_VM(r2, 0xc080aebe, 0x100000000000000) 4.991082416s ago: executing program 1 (id=919): getresuid$auto(&(0x7f0000000000)=0x1200000, &(0x7f0000000040)=0xfffffffe, 0x0) openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) ioctl$auto(r0, 0x4b4d, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x111, 0x2, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r1, 0x4b47, 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2440, 0x0) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) mmap$auto(0x0, 0x6, 0x10000000000df, 0xeb2, 0x401, 0x8000) read$auto(r2, 0x0, 0x20) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) 4.770031306s ago: executing program 1 (id=921): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x216000, 0x0) socket(0x10, 0x2, 0xc) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x29, 0xa, 0xb) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) fgetxattr$auto(0xffffffffffffffff, 0x0, 0x0, 0x68) mprotect$auto(0x0, 0x8000000000000001, 0x8) mkdir$auto(0x0, 0x8001) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44845}, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x38, 0x1, 0x4, 0xd73, 0x7) madvise$auto(0x0, 0x2003f2, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="57e72cbd700003dcdf250700000008000300", @ANYRES32=r4], 0x1c}}, 0x10) 4.73471155s ago: executing program 0 (id=922): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) unshare$auto(0x40000080) r0 = bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0x3, 0xe3, 0x400000000a, 0x200000003}, 0x6f1) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) (async) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xf7s\x1cJ\x99\x8a>c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x40900, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) (async) ioctl$auto(0x3, 0x80000541b, 0x38) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84L\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xff\a\x00\x00\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) bpf$auto(0x0, &(0x7f0000000280)=@task_fd_query={0x19, 0x4, 0x4, 0x880b, 0x8, 0x65, r0, 0x6, 0x802}, 0x6f4) r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x101200, 0x0) ioctl$auto_BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000040)) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000040)=0x5) (async) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000040)=0x5) getrandom$auto(&(0x7f0000000080)=']%\xaa!\x00', 0x6, 0x80000001) (async) getrandom$auto(&(0x7f0000000080)=']%\xaa!\x00', 0x6, 0x80000001) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x101901, 0x0) ioctl$auto_NS_GET_TGID_FROM_PIDNS(0xffffffffffffffff, 0x8004b707, 0x0) (async) ioctl$auto_NS_GET_TGID_FROM_PIDNS(0xffffffffffffffff, 0x8004b707, 0x0) mmap$auto(0x0, 0x2020005, 0x3, 0x10000000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) recvmmsg$auto(0x3, 0x0, 0xfffe, 0x6, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x4, 0x18, 0xffc, 0x808000000008015, r3, 0x8000) (async) mmap$auto(0x4, 0x18, 0xffc, 0x808000000008015, r3, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000340)={{@raw=0x7f, 0x4a8, 0xc964, 0x9, "c5a56941031762a60a48a76e501131d637183bd69f13ca53a4ff11ab57798e50ec2ee79d7883eaea9feaba74", @raw=0x5449}, 0x0, @integer64=@value=[0x37f54052, 0x9, 0x3, 0x4, 0x3, 0x9, 0x7f, 0x7fffffff, 0x4, 0x3d, 0x1, 0x5, 0x7f, 0x0, 0x35ee, 0xee44, 0x9c, 0x1, 0xe18, 0x9, 0x4, 0x8, 0x9, 0x7, 0x8, 0x2, 0x8ba, 0x1, 0xff, 0x5, 0x2, 0x8, 0x0, 0x1, 0x4, 0x7, 0x9, 0x3ff, 0x6, 0x4, 0x4, 0x2, 0xb, 0x0, 0x1, 0xc, 0x3, 0x3, 0xffffffffffff0000, 0x9, 0x4, 0x3, 0x646f, 0x2, 0x0, 0xc, 0x401, 0x1, 0x3, 0xe, 0x505, 0x3, 0x1d5, 0x2a78], "0d40afff4d59e9f8cd952833c711be2a7b1ef69f90247cf08f809acd2dd2e9fd4d77abc1793fa2e5aa5b4af57c7340548e143934b3e56ed9b1f14d7344337c3b4cd813739def91ab49fe3bbe9ace247b26d69544e111a181e71d734958f3350aea4c84c45368898d6bac0f1a36d267bc10c6e3c3301e972bd2c0cffd3fdbcdb9"}) (async) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000340)={{@raw=0x7f, 0x4a8, 0xc964, 0x9, "c5a56941031762a60a48a76e501131d637183bd69f13ca53a4ff11ab57798e50ec2ee79d7883eaea9feaba74", @raw=0x5449}, 0x0, @integer64=@value=[0x37f54052, 0x9, 0x3, 0x4, 0x3, 0x9, 0x7f, 0x7fffffff, 0x4, 0x3d, 0x1, 0x5, 0x7f, 0x0, 0x35ee, 0xee44, 0x9c, 0x1, 0xe18, 0x9, 0x4, 0x8, 0x9, 0x7, 0x8, 0x2, 0x8ba, 0x1, 0xff, 0x5, 0x2, 0x8, 0x0, 0x1, 0x4, 0x7, 0x9, 0x3ff, 0x6, 0x4, 0x4, 0x2, 0xb, 0x0, 0x1, 0xc, 0x3, 0x3, 0xffffffffffff0000, 0x9, 0x4, 0x3, 0x646f, 0x2, 0x0, 0xc, 0x401, 0x1, 0x3, 0xe, 0x505, 0x3, 0x1d5, 0x2a78], "0d40afff4d59e9f8cd952833c711be2a7b1ef69f90247cf08f809acd2dd2e9fd4d77abc1793fa2e5aa5b4af57c7340548e143934b3e56ed9b1f14d7344337c3b4cd813739def91ab49fe3bbe9ace247b26d69544e111a181e71d734958f3350aea4c84c45368898d6bac0f1a36d267bc10c6e3c3301e972bd2c0cffd3fdbcdb9"}) madvise$auto(0x0, 0x20499d, 0x9) (async) madvise$auto(0x0, 0x20499d, 0x9) madvise$auto(0xffffffff, 0xe, 0xaa08) ptrace$auto_PTRACE_GET_SYSCALL_INFO(0x420e, 0x0, 0x90b8, 0x6) (async) ptrace$auto_PTRACE_GET_SYSCALL_INFO(0x420e, 0x0, 0x90b8, 0x6) 4.090232083s ago: executing program 3 (id=926): clock_gettime$auto(0x3, &(0x7f0000002100)={0x5599bbb4, 0x9b}) rseq$auto(&(0x7f0000000080)={0xe, 0x401, 0x0, 0x806, 0xffffffff, 0x2}, 0x8000, 0xfffffffd, 0x8000009) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) listmount$auto(&(0x7f0000000100)={0x20, @raw, 0xffffffffffffffff}, 0x0, 0xf423c, 0x0) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000580)={0x2, 0x2, 0xd12b, 0xfffffffc, 0x200a}) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/0000:00:04.0/enable\x00', 0xa001, 0x0) write$auto(r1, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC2\x00', 0x100, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/ip_unprivileged_port_start\x00', 0x80000, 0x0) socket(0x28, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x4d, 0x0) setsockopt$auto(0x3, 0x1, 0x3c, 0x0, 0x9) read$auto_proc_sys_file_operations_proc_sysctl(r2, 0x0, 0x0) pidfd_send_signal$auto_PIDFD_SIGNAL_THREAD(r2, 0x19f, &(0x7f0000000000)={@_si_pad}, 0x1) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0x4000) 3.715986368s ago: executing program 3 (id=928): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000200)='7\x00\\\xa0\x04|\x03\'\x00\xc9\n\xbf\xb9\x12\xfa\x00\x00\xcfk', 0xb7f) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r1, 0x0, 0x7, 0x4cbd5d) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_MODULE_EEPROM_I2C_ADDRESS={0x5, 0x6, 0x9}, @ETHTOOL_A_MODULE_EEPROM_BANK={0x5, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x4040000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) socket(0xa, 0x3, 0x3b) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) socket(0x2a, 0x2, 0x1) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x108002, 0x0) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, 0x0, 0x8a141, 0x0) socket(0x10, 0x2, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @rand_addr=0x64010101}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) write$auto(0x3, 0x0, 0x5b4) memfd_secret$auto(0x0) 2.794797033s ago: executing program 3 (id=929): getresuid$auto(&(0x7f0000000000)=0x1200000, &(0x7f0000000040)=0xfffffffe, 0x0) openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) ioctl$auto(r0, 0x4b4d, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x111, 0x2, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r1, 0x4b47, 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2440, 0x0) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) mmap$auto(0x0, 0x6, 0x10000000000df, 0xeb2, 0x401, 0x8000) read$auto(r2, 0x0, 0x20) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) 2.710186113s ago: executing program 3 (id=930): r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) ioctl$auto_BTRFS_IOC_DEVICES_READY(r1, 0x90009427, &(0x7f0000001080)={@inferred, "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"}) read$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb2, 0xfffffffffffffffa, 0x800) lseek$auto(0x3, 0xffffffffff800002, 0x10) write$auto_ftrace_subsystem_filter_fops_trace_events(r0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x240142, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) fallocate$auto(r2, 0x1, 0x820, 0xfffffffffffffffa) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000280)="6e2569ccaa24ff37d59668e1507e949207bee98940f7266bcfd4471c9b8a385a987872a5895d6564628eee9b01e1126300f0887b034c099a0f30c9f1b98043cbf3a9c2ea5f4359ba1cf3b8a9f34038c08b0d6d0f1e088c607df21925b4ebf38a5b5f7a671d8c6761af04e58bd9710e827b254b2192e185da3779b024ae6ebca1d412fe8382b8bc110900b7e50b0cc7cb2dea76dfc1ea468fd80e1e9581ff51bb821f5e4462f1c971cf0ec899027bb2d92d06d1b5a8882498c228a9ef5772fdc3be1aafa6b072c6941edac38ce3b65f1100b4f72f0d34af180612e82f3c0860bc55183877cab31740881c844f949439a5ac6bd7f224") mmap$auto(0xffffffffffff8001, 0x9, 0x3, 0x14, 0xffffffffffffffff, 0x386e) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/pcm0p/sub1/sw_params\x00', 0x400, 0x0) unshare$auto(0x5) futex$auto(0x0, 0x4, 0x8, &(0x7f0000000100)={0x3a, 0x2}, 0x0, 0x80000001) r3 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bpf$auto_BPF_MAP_CREATE(0x0, &(0x7f0000000400)=@raw_tracepoint={0x9d, r3, 0x0, 0x5}, 0x0) ioctl$auto_RTC_SET_TIME(r4, 0x4024700a, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0) connect$auto(0x3, 0x0, 0x54) sendmmsg$auto(0x3, 0x0, 0x9a5, 0x47ffff7a) syz_genetlink_get_family_id$auto_ovs_vport(0xfffffffffffffffe, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) close_range$auto(0x2, 0x8, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x8006, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x10bb41, 0x0) 2.397095954s ago: executing program 3 (id=931): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000) (async) write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0xe) io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x5, 0x88, 0x1, 0x80000000, 0x10000100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x10000052, 0x7, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) (async) r0 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x5, 0x88, 0x1, 0x80000000, 0x10000100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x10000052, 0x7, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4000) io_uring_register$auto(r0, 0x18, 0x0, 0x9) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x5) (async) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x5) ioctl$auto(r3, 0x4008af04, 0x0) timer_create$auto(0x0, 0x0, 0x0) (async) timer_create$auto(0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, 0x0, 0x0) getsockopt$auto_SO_RCVTIMEO_NEW(r4, 0x8, 0x42, 0x0, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_MM_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="4b146644c513257ec651d290dd32d6a9b20be3d9708df3b1a0bba3752c59f58903e55c4496db2c1b7ee67db0f7d6c7ea0b734402c67ede224b1d92cec01549"], 0x14}, 0x1, 0x0, 0x0, 0x44808}, 0x2004c894) unshare$auto(0x40000080) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$auto_transaction_log_fops_(r1, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') acct$auto(0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$auto(0xffffffffffffffff, 0x4004550c, 0xffffffffffffffff) mlock$auto(0xfbea, 0x7fffffffffffffff) sendmsg$auto_NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000a40)=ANY=[@ANYBLOB="78d74bd10836ec54eb900a6c0c12ef8fc3fc493c4fcd25ce27a0469b2326d9d871f7a422ef995c8f299077b1511ad127e13edbd3e67fef7d72a8f963a22d51d318025b0867485f58655351037851eab68b7e856ff3d11a412c1a6022d1c2289eec20f0359060d610314628c7c19a6de793521e5886365522086c8c786891c91e70c025eb3372a6c1f09095f55585688c0214f1e12bf738ddccece1ee4a233c4377e07cab3db5603a73d8fc3bdc3b4f3617003e0fac3dc6565f0836160ebd3b357ab2b6cf3c575b30f324c43437f034384acbc5a7d3335971ac26a43fdff934b9e0b54250fe78de965d53eb5ceb31c54e837643cc", @ANYRES16=r0, @ANYBLOB="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"], 0x578}, 0x1, 0x0, 0x0, 0x4}, 0x24000000) socket(0x2, 0x2, 0x0) (async) socket(0x2, 0x2, 0x0) 2.261745089s ago: executing program 1 (id=932): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) io_uring_register$auto(0x2, 0x11, 0x0, 0x2) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) r1 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400005, 0x100000005}}) ioctl$auto_EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x2, 0x2, 0x1, 0x2}) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/netfilter/nf_log/6\x00', 0xa0202, 0x0) sendfile$auto(r3, r3, 0x0, 0x2004) recvfrom$auto(r3, &(0x7f0000000140)="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", 0x2, 0xfffffffa, &(0x7f0000000000)=@llc={0x1a, 0x334, 0x5, 0x8, 0x80, 0x0, @random="21fc356fdb69"}, &(0x7f00000003c0)=0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) ioctl$auto_RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000240)=0x5) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_STATION(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x110000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x24, r5, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40080c0) pwrite64$auto(0xc8, 0x0, 0xfdf0, 0x39) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r6 = openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) io_submit$auto(0xb, 0x2, &(0x7f0000000500)=&(0x7f00000004c0)={0x5, 0x5, 0x2, 0x371, 0x0, r6, 0x401, 0x2, 0x6, 0x0, 0x2}) getsockopt$auto_SO_RCVMARK(r4, 0x0, 0x4b, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) 1.817275299s ago: executing program 0 (id=933): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x20000, 0x0) mount$auto(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xe4\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x4, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0x4000000000200204, 0x16) umount2$auto(&(0x7f0000000000)='.\x00', 0x4) getcwd$auto(0x0, 0xffffffffffffffff) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x104) 1.625017518s ago: executing program 4 (id=934): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0x36, 0x1009b72, 0x2, 0x8000) mprotect$auto(0x0, 0x8000000000000001, 0x8) mprotect$auto(0xf4, 0x806121, 0x6) 1.423436932s ago: executing program 0 (id=935): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010025bd700002dcdf250300000004000800100001800c00108008000100", @ANYBLOB="c3a8c095e1ffc87f671ebbefee452228fb614910d81cbec338ac8a039a7abe980a2b74940964c26cad752e9503e0c1c3d5c97f38c5eda67a5acaabf1266b6686ae89c7cde990cea64101329dd840a1611398768fcb40e2b0725659ebbd09871a2507fbfa780b9e19e6706b9e5d70ecc928b53e3750f084218809cfbdf172f52a78f31a9378fa89aa"], 0x28}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) rseq$auto(0x0, 0x8000, 0x0, 0x27) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) landlock_restrict_self$auto(0xffffffffffffffff, 0x4) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getrlimit$auto(0x3, 0x0) 1.219005051s ago: executing program 4 (id=936): r0 = socket(0x1d, 0x3, 0x1) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(r0, 0x65, 0x1, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) (async) unshare$auto(0x40000080) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D2\x00', 0x430000, 0x0) (async) r2 = prctl$auto(0x4, 0x83, 0x0, 0x2, 0x2) mount_setattr$auto(r2, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x7f, 0x0, @raw=0x3}, 0x1000) write$auto(r1, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xbdk\xc3\xbf\xd8\xfb\xf2\xb8\xf1\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x2) (async) socket(0x8, 0x1, 0x0) (async) listen$auto(0x3, 0x81) (async) mmap$auto(0xf, 0x8000000000000004, 0xfffffffffffff801, 0xeb1, 0xfffffffffffffffa, 0xfffffffffffffff9) keyctl$auto(0x9, 0x1, 0x6, 0x0, 0x6) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x9) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x24048004) madvise$auto(0x0, 0x200007, 0x19) (async) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/pagemap\x00', 0x531480, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) (async) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x0, 0x1000000005, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) r4 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/modules\x00', 0xa2edf0fd0d952856, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0xfffffffffffffffd, 0xb74, 0x66a) (async) madvise$auto(0xffffdffffffffffc, 0x20000032f14106, 0x3) (async) read$auto_proc_pid_maps_operations_internal(r4, &(0x7f00000024c0)=""/4093, 0xffd) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFSD_CMD_VERSION_SET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESOCT=r1, @ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x24000001}, 0x4000041) 1.06607301s ago: executing program 3 (id=937): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x52ace73e, 0x7) io_setup$auto(0xe, 0x0) msync$auto(0x200000, 0x2000000005, 0x6) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) unshare$auto(0x40000080) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x2000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0x2, 0x3, 0xa) getsockopt$auto(r1, 0x0, 0x30, 0x0, &(0x7f0000000040)=0xdbb) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/Eev/audio1\x00\xd6I\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0xb5) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x7ffc) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x8, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, r0) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x24048084) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vivid.0/cec29/power/autosuspend_delay_ms\x00', 0x129000, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48101, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0x3, 0x2) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/error_log\x00', 0x800, 0x0) read$auto(r2, 0x0, 0x1ff) 701.684629ms ago: executing program 4 (id=938): getresuid$auto(&(0x7f0000000000)=0x1200000, &(0x7f0000000040)=0xfffffffe, 0x0) openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) ioctl$auto(r0, 0x4b4d, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x111, 0x2, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r1, 0x4b47, 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2440, 0x0) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) mmap$auto(0x0, 0x6, 0x10000000000df, 0xeb2, 0x401, 0x8000) read$auto(r2, 0x0, 0x20) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) 686.038211ms ago: executing program 1 (id=939): mmap$auto(0xffffffffffffffff, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8803) io_uring_setup$auto(0xa, 0x0) (async) r0 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer1\x00', 0x1, 0x0) io_uring_register$auto_IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000040)="59dd47fa50b193579661ffbd0018a6b8b5981ff94502f52853ed92e86bb80158c873fb2c95546e1a2e4608a2e04046185b0364555467879eee3db4ac0767fd57d0aa5817a5a4ade33a55c69f853543fc8956ba63f4fab28802006f047339a2ef5715be2e2a", 0x91) 496.661876ms ago: executing program 4 (id=940): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) socket(0x2b, 0x1, 0x1) (async) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.3/usb4/4-0:1.0/bNumEndpoints\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) (async) munmap$auto(0x1, 0x9) (async) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000100), r1) r4 = getpid() (async) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000200)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) (async) fstat$auto(r2, &(0x7f0000000140)={0x7, 0x7, 0xc1, 0x9, 0xee00, 0xee01, 0x0, 0x6, 0x2, 0x8, 0x3, 0x0, 0x3, 0xa1, 0x9, 0x4, 0x100000001}) msgctl$auto_MSG_STAT(0x0, 0xb, &(0x7f0000001300)={{0x204, 0xee01, 0xffffffffffffffff, 0x2, 0x32521930, 0x9, 0x4}, &(0x7f0000000200)=0x5, &(0x7f00000012c0)=0x7, 0x1, 0x8, 0x6b, 0x2, 0xfffffffffffffff8, 0x969, 0x3, 0x8000, @inferred=0xffffffffffffffff, @raw=0x2}) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r0, &(0x7f0000001680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001640)={&(0x7f0000001380)={0x29c, r3, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@THERMAL_GENL_ATTR_CPU_CAPABILITY_ID={0x8, 0x15, 0x5}, @THERMAL_GENL_ATTR_CDEV_NAME={0x14, 0x12, 'ip6_vti0\x00'}, @THERMAL_GENL_ATTR_TZ_TRIP_ID={0x8, 0x5, 0x1}, @THERMAL_GENL_ATTR_THRESHOLD={0x242, 0x18, 0x0, 0x1, [@nested={0x11e, 0x21, 0x0, 0x1, [@nested={0x4, 0xdb}, @typed={0x8, 0x9c, 0x0, 0x0, @u32=0x8}, @generic="fde356565758ce7d5b2d3c9c84652d6db7d795cacb82fda345726d0c2e36a9d114f8f8b5a4cc41a109f720ec70faaa5c94308f71f36f7c20a5d005ea626f8cfa2e6e7cb75735298de54406c1b9964375dc840c98d2d88d4c4cd63c4d7973acc6dc9ee101d85be966c713793a837581e7dfca337994e377cdf103e37d960328b685450629e2016abeee2902424764e6aa89a19f6c8ad9f438d88b8793", @generic="74905ab773f82ef4ba104aca0b42e4c5fa3426cb27df56518dd384b2370adbc85f72d80f5c271d0737ecc17ff153479e3ca38450c5688c26192881", @generic="7072b9321653cd0eef44b78a6de395f5ce7728cf3b3d22dd965d896209062a8334165fee271de7fcb412d956f814eb21dc4354710bed29"]}, @typed={0x8, 0x14b, 0x0, 0x0, @pid=r4}, @typed={0x8, 0xc1, 0x0, 0x0, @pid=r5}, @nested={0x3e, 0xd0, 0x0, 0x1, [@typed={0x8, 0x122, 0x0, 0x0, @uid=r6}, @typed={0x14, 0xd3, 0x0, 0x0, @ipv6=@loopback}, @typed={0xc, 0x55, 0x0, 0x0, @u64=0x8}, @generic="037ef6c24cc186851e6d0f5dd51035f0355e", @generic]}, @typed={0xc, 0x5d, 0x0, 0x0, @u64=0x63f}, @typed={0x8, 0xa, 0x0, 0x0, @u32=0x2c88}, @nested={0x8, 0x151, 0x0, 0x1, [@nested={0x4, 0xbc}]}, @typed={0x8, 0x140, 0x0, 0x0, @uid=r7}, @generic="ce9242513a164b4ab5b318101aaef799ff4abcee3a58d6ca87e05d9a2e7c556f5b2d0580a505eb0c005b6a6888a0a571b4c4779dbb8ca3bb47c94ed9c5492632993e4b579fa439add68ac7ea11a582cd10021c7a3caffe1b7b3d32edb76181a70d282fab2b1e2a841341dc94c963e31f2ac1d09c92c4380dddee58aa3a4d87d5b6ea4458ca921a58ea0b3501b92be1dd5b6606f89658e076e9259d71aa931f95e81412434cf5537ddd14"]}, @THERMAL_GENL_ATTR_TZ_TRIP_TEMP={0x8, 0x7, 0x8}, @THERMAL_GENL_ATTR_TZ_TRIP_TEMP={0x8, 0x7, 0xfff}, @THERMAL_GENL_ATTR_TZ_CDEV_WEIGHT={0x8, 0xb, 0xa3}, @THERMAL_GENL_ATTR_CDEV_CUR_STATE={0x8, 0x10, 0x40}]}, 0x29c}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) r8 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x6, 0x50b301a, 0x2c, 0x2c, 0x0, 0x2}) (async) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) (async) r9 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event2\x00', 0x60240, 0x0) ioctl$auto_EVIOCSKEYCODE_V2(r9, 0x40284504, &(0x7f00000000c0)={0x4, 0x9, 0x8, 0x4, "7cb8e90fe76905a94f442bf88cdd8c74fd83d02fb20481e651870471aebf9750"}) (async) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) (async) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00ce00", @ANYBLOB="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", @ANYRES64=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0xc800) 442.449086ms ago: executing program 1 (id=941): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = io_uring_setup$auto(0x5, 0x0) close_range$auto(0x2, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6d) listen$auto(0x3, 0x81) r1 = socket(0x2b, 0x1, 0x0) sendmmsg$auto(r1, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x24, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x541e81, 0x0) poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x108) 153.826976ms ago: executing program 4 (id=942): r0 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim15\x00', 0x100080, 0x0) r1 = ioctl$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffffff, 0x2, &(0x7f0000000040)="84d8d998bc5c095e25aaf1349d44391ed01b60c6aa367dc381472c1650372883ae31dcbe9f866dc9646658eb76898378baf25e101a70c1d70d1a2d41ebc7db1046943f0257d114d350d90c74597d38483360d483fc260f69b6f39fb6f8413762b1a2f598a67bb6bb1e3610fa6efc63f37ed7a3fa1ad4ce4a917290a402c4722508d76c") ioctl$auto_XFS_IOC_ERROR_INJECTION(r0, 0x40085874, &(0x7f0000000100)={r1, 0x9}) setsockopt$auto_SO_ATTACH_REUSEPORT_EBPF(r1, 0x0, 0x34, &(0x7f0000000140)='/sys/devices/virtual/mac80211_hwsim/hwsim15\x00', 0x2) connect$auto(r1, &(0x7f0000000180)=@l2={0x1f, 0xf, @any, 0x5, 0x1}, 0x3) ioctl$auto_XFS_IOC_FSBULKSTAT_SINGLE(r2, 0xc0205866, &(0x7f0000000300)={&(0x7f00000001c0)=0x4, 0xfffffffc, &(0x7f0000000200)="4d381835ff86250921c2aecabfd24ed0c360f7dbbb9cb0ec77c0845cae8dbf63ef4a58f1bf0faeae643f8884cc263884c33a0b4cc8ba8ad2e06ec12627ee4d646f5ce2ac00397d227ba2f0f4b8565fc0f43705f03dc8408118a19158c005ecd981a84e6394c1eb2b28bdc74320cdeaf85c4ecfd022d61ee3461c70c24c9e0c3225046ed587bf88f6bda0ab83a0a8ac45872bc30f37fa0fa85a5f9bdb2a75cb8d6800257ca27ce5", &(0x7f00000002c0)=0x9}) shmctl$auto_IPC_INFO(0x6, 0x3, &(0x7f0000000440)={{0x6, 0xffffffffffffffff, 0xee01, 0x7fff, 0x0, 0x2, 0x9}, 0xffff, 0x8, 0x2, 0x7, @raw=0x3, @inferred, 0x1, 0x0, &(0x7f0000000380)="27228e3b54f6aa518398b230550d60213c91e9331e97b65e5a331f601e8ea75b0fe73fa8296b0e42ce60e386c1b0c41beb5dbfb9d4d3d488f9577ff308d40461b2064226b3681ea95274ff1f3603", &(0x7f0000000400)="2922aee171d7a3324b5ae3e13a"}) shmctl$auto_SHM_STAT_ANY(0xffffffff, 0xf, &(0x7f0000000680)={{0xb, 0x0, 0xffffffffffffffff, 0xa7, 0xfffffff9, 0x9, 0x4}, 0x6, 0x8d, 0x400, 0x2, @raw=0x14, @inferred=0x0, 0x9, 0x0, &(0x7f00000004c0)="44aec424346e4a37d554244808ff6704da3935c1e163425dce236d72f1b6a1d70f8d9973cab6fef8dd9a97350c665c442eac3fe5409b1475c7149d3bad40560e52ae90fdcc4a2dbd13dacd25ec00f8038a16b6e7b18669de577e65390b79d5d1c1b8614263ee292f78060cd8a4ad9b6821e10c23683626c227254839e4b4669f2d6c0276ae1b9ef7af4b40f57e81679f93a6d6c91be0eae38fa0129f7e02aa0f16ab69b5644a7727c2f5bbd887ee69f6a3c96bd01d", &(0x7f0000000580)="86135c1b609e54755569d8f95da910755cadaf2cf7e9c96a3531db7b1df9eda99e137c845657ea57823a018eae2df29f4edc147e1edccad95c3d2f5a0b649a94d1eac68428078359ac73b17216a0288ce594a308c2eac1562656ed5a0aab6031596fcf64cda2679a432e5004c32ae189be004a08fbdcdd3c524a906c94102b4e79c6147d0766411ab20d380f85e8325151562c5a3898cd46027aa5cd2bf72a130d88dea983598f05ae3c26e8b0741cb4d5538837b9283f93cac4b8cc5c2126bbc857b1af7eb611384d8d32535da56a6d965d9e5f63871a9a4e5979fef3ec33da17c18e902c4da5766712b23bc7"}) statx$auto(r1, &(0x7f0000000340)='./file0\x00', 0x9, 0x4, &(0x7f0000000700)={0xe0000000, 0xfffffffe, 0x6, 0xfffffffb, r3, r5, 0x2, 0x0, 0x1, 0x276f, 0x9, 0x0, {0x8000000000000000, 0x8}, {0x2, 0x401}, {0xfffffffffffffffc, 0x4}, {0x9, 0x7}, 0x101, 0x1, 0xd, 0xc25, 0x5, 0x8000, 0x5, 0xe3, 0xc, 0x1c000, 0x4, 0x10, [0x7, 0x200, 0xfffffffffffffffa, 0xd, 0x9, 0xfffffffffffff800, 0xffffffffffffffff, 0x7, 0x6]}) setsockopt$auto_SO_RCVMARK(r2, 0x7, 0x4b, &(0x7f0000000800)='/sys/devices/virtual/mac80211_hwsim/hwsim15\x00', 0x2) r7 = signalfd4$auto(r1, &(0x7f0000000840)={0x9}, 0x1, 0x3) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000880)='/sys/kernel/debug/extfrag/extfrag_index\x00', 0x140, 0x0) ioctl$auto_KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f00000008c0)={0x3, 0x0, [{0x101, 0x5, 0x0, 0x7fff, 0x7, 0x9, 0x9}, {0x9, 0xffffffff, 0x6, 0x7, 0x3f, 0xffffffff, 0x9}, {0x3ff, 0x2, 0x3ff, 0x4, 0x9, 0x200}, {0x0, 0x7000000, 0xffffffff, 0x6, 0x1, 0x81, 0xffffffff}]}) r8 = openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, &(0x7f0000000980), 0x400000, 0x0) ioctl$auto(r8, 0x7, r1) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000a00), r7) sendmsg$auto_NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r9, 0x210, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xb1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) msgctl$auto(0x7, 0x4, &(0x7f0000000bc0)={{0x4, r3, r4, 0x4fc49c74, 0x6, 0x5, 0x9}, &(0x7f0000000b40)=0x5e, &(0x7f0000000b80)=0x9, 0x8000000000000001, 0x2, 0x5, 0x1ff, 0x80000000, 0x6, 0x400, 0x0, @inferred=r6, @inferred=r6}) sendmsg$auto_NL80211_CMD_SET_CQM(r7, &(0x7f00000010c0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001080)={&(0x7f0000000c40)={0x408, r9, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY_DATA={0x17, 0x7, "2eed5c72198de442aabdc067ee8d9a1bd39a23"}, @NL80211_ATTR_SCAN_FREQ_KHZ={0x2d8, 0x124, 0x0, 0x1, [@generic="e2205c12cee893170812b241d4c27d7a0365b12894301ed4b801bae965a0899a4443848ae4086f061cd6d8e1e97fd42367572eaffef957241cbdac13b895e42096e8b9e1ecbf05f60fe5e71870ea627caa0f027f8c3539bd0c27fe112a8264e0c2585c549b392447568ace10142e8e", @generic="b3afa33231723dea0920707714a58c6a1bf7ce97b13815c7731096fbb5e9c52c3a4926d57ac76ecd17c9cd0149e0becb7d4c4fb6a078f184c4e79d662cdd53523cf5f90680dd58bc8117af5d7591e15dcbb0b057398927f34d95cfa113dc570f318ec584855672e877c0e4254fd4c79f71321eec5f3930684ab9a192efed69f3eab781b06398584c2631c26a97b9abdeb8cab50cc18cb1b4921223d9e4ff397c0eaa9a2e4ca9aff9e1cdf2797d8c3ce00dbb377d00fc2a902c0c9074488bfc65a845e1e3dc293078fe", @nested={0x64, 0x7c, 0x0, 0x1, [@generic="6bdbddab471a2c16c5c9b5893794dcd210540875e7b13f89548412edeadbc517eeb4d4eae6197b6fc8aada1c01b82fc032b6c52fac8e629f5eaca6145deccd50b6e2339ee501c6d2e3ca645c55194fc5e11359b02c0bfce6184e5e76557afc89"]}, @nested={0x122, 0x3e, 0x0, 0x1, [@generic="3b3494a6dd26622d329a430a695aa59924d7da59b73d00be501237ed9c2ad32c7b4b28f14fa2bd66b3d36444c88c21dd2c3bff53582ec07e6b00878298badc3493b7d20d1926b548b866f48ef6bbf3b0028de6c59d8cbf011ba20d2a83c14cae1bdd868e27c3c29f4417be0c66b38b18acf7e039f70013f07a6ee2f0675bdedb810fbe818afe1e6995841023e1bb2c7974ce404f43be5d40920d11d4b24bb05bfbcd836af1c28878fead86a8ea119b067c6fe91967bbb6bc73bd0458eac3157f0ce3eca6b68fd44bba040a0ded5fa6e6c1", @nested={0x4, 0x12e}, @nested={0x4, 0x154}, @nested={0x4, 0xbc}, @generic="c99df65f62c25d61f6e2b03546e9929692d37a1500fb705b7b630b5f7bea30ac37765cc0f08dd41d0a49cc554a1744c15e713664b8c357b722a2c42c833eb8c2b2"]}, @typed={0x8, 0xd7, 0x0, 0x0, @uid=r10}, @typed={0xc, 0x140, 0x0, 0x0, @u64=0x5}]}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x1}, @NL80211_ATTR_EHT_CAPABILITY={0xfb, 0x136, "c78a8661e77afb80da43fdf6bc5101527fe7fadeb45c74a802eab11b14e9a9c566e1f208274ae374af483dbbfa9eea1bd479b00d4343bfdb187214aa233d154119dd3a9916ba6d97a13209d89982387db629c22544192e1c20acd07167a640ddefe5ceaf397bb61ba0c67dd2d190129cefc966a9aeb9cde06d15e842607eda0deaf40c40eef2f0ada386cdd5c491dc227d82ddf481967dcf195b7bed472d46b64f3fdc0c65a59cbda23c756f8c9d85a681e3ed2cf89d4cdb646b0d21b49bee62159f1d7026f0136835097c763b109d03255b6b0bc1b8544b7efe193143ee4b81f8e12319c30fef1373af11682d150310982738031719e1"}]}, 0x408}, 0x1, 0x0, 0x0, 0x80}, 0x4004) write$auto_lockdown_ops_lockdown(r1, &(0x7f0000001100)="aecb8b9ef8c340bcf214075ff88b3b055fb99ef12d8afd0211801c9d66c62ba2cd38c5c7499ee645a0aaa8c56a124d50ac3bbf58d649ea8ba2df2a7447d0d880706c668eeffd0e55d75e68c85ad1", 0x4e) sendmsg$auto_L2TP_CMD_TUNNEL_GET(r2, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001280)={&(0x7f00000011c0)={0xb4, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, 0xfffffffa}, @L2TP_ATTR_NONE={0x6f, 0x0, "fe7902933e7522cf0dc0788429168f0ca51579716de2dae499f26c97f855e45f7f4124f2cd556a39f49ce6f633f9a64f1e22c9caca9bf4a7dc9af1fa1e86aa9bcdf651736471b7250aabb500af9a7c68257f591f4ecd5ac3708a2a149ce0a5aa7940cd1648b65b4a3c3c36"}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xff}, @L2TP_ATTR_USING_IPSEC={0x5, 0x15, 0x7}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, 0x800}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40044}, 0x801) msgctl$auto_IPC_INFO(0x0, 0x3, &(0x7f0000001380)={{0x26, r3, r5, 0x8, 0x3, 0x8, 0x2}, &(0x7f0000001300)=0xc5, &(0x7f0000001340)=0x81, 0x5, 0x6, 0x401, 0x5, 0xe, 0x7, 0x3, 0x1000, @raw, @inferred=r11}) setsockopt$auto_SO_DETACH_REUSEPORT_BPF(r1, 0x0, 0x44, &(0x7f0000001400)='&^-\xbc/\'\x00', 0xa7) msgctl$auto_IPC_SET(0x2, 0x1, &(0x7f00000014c0)={{0x959f, r3, r4, 0xff, 0xfa0, 0x0, 0x1}, &(0x7f0000001440)=0x52, &(0x7f0000001480)=0x8, 0x9, 0x3ff, 0xc, 0x6, 0x7f, 0xf, 0x49ee, 0xe4e2, @raw=0x8}) bind$auto(r1, &(0x7f0000001540)=@sco={0x1f, @none}, 0x8) r12 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000015c0), r1) sendmsg$auto_NFC_CMD_DISABLE_SE(r2, &(0x7f00000016c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x48, r12, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x3}, @NFC_ATTR_FIRMWARE_NAME={0xc, 0x14, '}&({\'^%$'}, @NFC_ATTR_RF_MODE={0x5, 0xb, 0xef}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x3}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x7f}]}, 0x48}, 0x1, 0x0, 0x0, 0x90}, 0x0) fcntl$auto_F_GET_SEALS(r2, 0x40a, 0x7) ioctl$auto_PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000001700)=0x9) sendmsg$auto_NFSD_CMD_POOL_MODE_GET(r7, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4004000) 0s ago: executing program 4 (id=943): mmap$auto(0x0, 0x2000d, 0x4, 0xeb1, 0xffffffffffffffff, 0x6000000000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) (async) setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x7) (async) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async, rerun: 64) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x288202, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) syslog$auto(0x80003, &(0x7f0000000280)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x83.I\xc8\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~D\xfd\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU^N\xf2G\\}L\xbf\x90\xe1\x9fJgR\xa9di\x82\x97\xe5\xbcWp\xe5\xd0\xbf\x99\xe0\x94k\xcc\x05\t\x1f\x90\xf1\x19\xfe\xd2\xa2\xc3\xbeC\xd4\x9d(\x0fy\x90F\xb8\xe7\xb9p\xa0\xa8\xf8-X\xe5\x0f\x1fJL\x9f\xc5\xd0\xbe\x18\xa3\xdcl\xa4\x13\xeac\xd7\x87;)\xdc\x99f\b\xa44H\x93\xe3\x00\xbf\x9b\x00\x1e\xfc\xaa\xe6P\xd4\xc8v#\x83\xbb\xaf\xed\x82\xa9\x19\"1+\xe2\xa5\xcaL\xae,\xe8\xb8\x8c\x01\xc7\x9e\xebL<\x01\xc5\x18\xf3A{j\xb2@\xc8\x84\xf4u\xd9Y\xfa\'5\xe1\xabs\xc1\xf7\xda.-\"\x92\x91\xb1*\xd5\r?\xf9s:\xf6S\x80\x8b\xf6H\xf5\x06\xb5\x10U\xf0\xff\xadb\xd6\x1d\x1d\x80)T\x87X\xbf5\"`\xf7p\xbf\xbb\xac\xf6\x94\xbcZ\b\x01\xac[\\;\x0e\x04#d\xcd\x99\x89X\xdc\x7f\xf8\xa6\x95\x05,>\xcd~\xe1\xad\xff\v0l%\xf3;\xbf\x06\x00\x00\x00\x04T\x96\xa5\xf9\x94\\\xeb\xf2\xd5\n#\xb9\xd4sW\xd4\xc7J9\x0f~\xb7\xa3\x12\'|\x05\xc5\xf3\xb1)q\x7f\xd4\xe92\xc5Qu\x957\xa1\xc46\xec\x0f\xd4\xc6G\xd7\x1d\xe9|\xfd\x9b\x82u.|\x93nga-\xfb\'\xc7\xbc;\x7f\xfd\xbc\x04\xc8\xa3\xaf\xfa%\xf7\xea>\x13\x84Z\'\\Q\xefr\x0e\x9e)b\x91Ig\x1c\xf3\aj#\xc2\xee.\x02\xe5\xbf\xabX\xd7\xd1b\xab\x9d\xbd\xe0Q\x8b\x03\xc0\b\xc2\x8b\xfaiK9\'%\xba\xaf\x19*_\xadM\xce\xae\x10\xe1D\xbc\x06\xa2\xf0?\x0f\xf0j\xe2M\x01\xe9\x91\x8c\x95\xe3\xc4-\xf5\xca\x85\a\xa0\x8c\xf9\xf1\xc3\x0ftI+Y\x88#@\x1b>Y\x16\xae\\\xd8Qp\xf5&k\xbf[\xc3Z\x7fL|T\xe6\x7f\x87\x1f[c7\xe8\xd9\xa1o\xebHlp\xe3\xe5D\xdbsT>\xe5\xe4J\xe4\xf2\xbc\xe3N\xa5`\nE\xd0=g\xc6W\xc1\x8a\xb3&\xe8\x81!8_Q\x01\x9a\x1aD\x87\x04Zc\x19\xa0\xadN\xfa\x8f\xd4\xd3\x8e\x98l\xc8\t\x15\x04/\xe9\xc6wN\xa2g\x0es\xacNm\x04\xd4\xab\xcf\'.:\x8b\xc6.\xc1\x9c2-\xdd9\xb8\x94\x8b\x9a&\xc0\xebv\x05\xb0\xb9', 0x5) kernel console output (not intermixed with test programs): 624760][ T6732] R13: 00007f5532016038 R14: 00007f5532015fa0 R15: 00007ffe667e5ff8 [ 130.624797][ T6732] [ 131.928903][ T6756] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 132.295802][ T6764] FAULT_INJECTION: forcing a failure. [ 132.295802][ T6764] name failslab, interval 1, probability 0, space 0, times 0 [ 132.362950][ T6764] CPU: 0 UID: 0 PID: 6764 Comm: syz.1.178 Not tainted syzkaller #0 PREEMPT(full) [ 132.362993][ T6764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 132.363021][ T6764] Call Trace: [ 132.363032][ T6764] [ 132.363043][ T6764] dump_stack_lvl+0x100/0x190 [ 132.363094][ T6764] should_fail_ex.cold+0x5/0xa [ 132.363129][ T6764] should_failslab+0xc2/0x120 [ 132.363160][ T6764] __kmalloc_cache_noprof+0x7a/0x6f0 [ 132.363198][ T6764] ? copy_mount_options+0x55/0x190 [ 132.363244][ T6764] copy_mount_options+0x55/0x190 [ 132.363285][ T6764] __x64_sys_mount+0x1ab/0x310 [ 132.363322][ T6764] ? __pfx___x64_sys_mount+0x10/0x10 [ 132.363367][ T6764] do_syscall_64+0x106/0xf80 [ 132.363400][ T6764] ? clear_bhb_loop+0x40/0x90 [ 132.363438][ T6764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.363469][ T6764] RIP: 0033:0x7f5531d9c799 [ 132.363493][ T6764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.363520][ T6764] RSP: 002b:00007f5532b8a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 132.363549][ T6764] RAX: ffffffffffffffda RBX: 00007f5532015fa0 RCX: 00007f5531d9c799 [ 132.363567][ T6764] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 0000200000000180 [ 132.363585][ T6764] RBP: 00007f5531e32bd9 R08: 0000200000000280 R09: 0000000000000000 [ 132.363603][ T6764] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 132.363621][ T6764] R13: 00007f5532016038 R14: 00007f5532015fa0 R15: 00007ffe667e5ff8 [ 132.363662][ T6764] [ 132.781991][ T6768] netlink: 16 bytes leftover after parsing attributes in process `syz.0.179'. [ 133.035491][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.042951][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.924901][ T6790] futex_wake_op: syz.0.183 tries to shift op by -2048; fix this program [ 133.970710][ T6790] futex_wake_op: syz.0.183 tries to shift op by -2048; fix this program [ 133.989862][ T6793] 0x000000000001-0x000000020000 : "" [ 133.997994][ T6792] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 134.024121][ T6794] misc userio: No port type given on /dev/userio [ 134.051909][ T6793] ftl_cs: FTL header corrupt! [ 134.310835][ T6803] openvswitch: netlink: IPv4 tunnel dst address is zero [ 134.472219][ T6790] : Can't lookup blockdev [ 134.508624][ T6793] : Can't lookup blockdev [ 134.515858][ T6811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.188'. [ 135.045754][ T6822] netlink: 28 bytes leftover after parsing attributes in process `syz.2.191'. [ 135.094618][ T6822] netlink: 29 bytes leftover after parsing attributes in process `syz.2.191'. [ 137.097607][ T6844] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 137.394048][ T6851] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 137.990922][ T6868] netlink: 186 bytes leftover after parsing attributes in process `syz.3.201'. [ 138.555982][ T6861] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 138.849087][ T6879] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 143.224213][ T6951] Invalid ELF header magic: != ELF [ 143.262917][ T6951] vivid-007: ================= START STATUS ================= [ 143.271014][ T6951] vivid-007: Enable Output Cropping: true [ 143.294523][ T6951] vivid-007: Enable Output Composing: true [ 143.300436][ T6951] vivid-007: Enable Output Scaler: true [ 143.352864][ T6951] vivid-007: Tx RGB Quantization Range: Automatic [ 143.361990][ T6951] vivid-007: Transmit Mode: HDMI [ 143.368600][ T6951] vivid-007: Hotplug Present: 0x00000000 [ 143.383034][ T6951] vivid-007: RxSense Present: 0x00000000 [ 143.389535][ T6951] vivid-007: EDID Present: 0x00000000 [ 143.443248][ T6951] vivid-007: ================== END STATUS ================== [ 144.344327][ T6956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.220'. [ 149.199348][ T7009] zswap: compressor not available [ 149.781879][ T7010] zswap: compressor not available [ 150.416663][ T7031] netlink: 342 bytes leftover after parsing attributes in process `syz.3.237'. [ 150.678968][ T5822] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 150.689478][ T5822] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 150.697890][ T5822] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 150.706343][ T5822] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 150.714402][ T5822] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 150.730023][ T7042] netlink: 342 bytes leftover after parsing attributes in process `syz.3.237'. [ 151.574997][ T7056] netlink: 'syz.0.240': attribute type 11 has an invalid length. [ 151.583359][ T7056] netlink: 'syz.0.240': attribute type 11 has an invalid length. [ 151.594193][ T7058] netlink: 'syz.0.240': attribute type 11 has an invalid length. [ 151.601981][ T7058] netlink: 'syz.0.240': attribute type 11 has an invalid length. [ 152.023506][ T7066] netlink: 28 bytes leftover after parsing attributes in process `syz.0.241'. [ 152.033206][ T7066] ipvlan0: entered promiscuous mode [ 152.038458][ T7066] ipvlan0: entered allmulticast mode [ 152.074995][ T7066] veth0_vlan: entered allmulticast mode [ 152.218729][ T7038] chnl_net:caif_netlink_parms(): no params data found [ 152.606466][ T7038] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.622977][ T7038] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.640731][ T7038] bridge_slave_0: entered allmulticast mode [ 152.672290][ T7038] bridge_slave_0: entered promiscuous mode [ 152.716649][ T7038] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.752860][ T5829] Bluetooth: hci4: command tx timeout [ 152.767080][ T7038] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.799894][ T7074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.242'. [ 152.825185][ T7038] bridge_slave_1: entered allmulticast mode [ 152.875888][ T7038] bridge_slave_1: entered promiscuous mode [ 152.884906][ T7074] netlink: 5 bytes leftover after parsing attributes in process `syz.0.242'. [ 152.957455][ T7074] netlink: 16 bytes leftover after parsing attributes in process `syz.0.242'. [ 153.117886][ T7038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.136550][ T7082] zswap: compressor not available [ 153.170880][ T7038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.402002][ T7038] team0: Port device team_slave_0 added [ 153.417155][ T7038] team0: Port device team_slave_1 added [ 153.532905][ T7038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.557162][ T7038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.628277][ T7038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.663463][ T7038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.670573][ T7038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.740799][ T7038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.020674][ T7038] hsr_slave_0: entered promiscuous mode [ 154.049812][ T7038] hsr_slave_1: entered promiscuous mode [ 154.072302][ T7038] debugfs: 'hsr0' already exists in 'hsr' [ 154.111075][ T7038] Cannot create hsr debugfs directory [ 154.840717][ T5829] Bluetooth: hci4: command tx timeout [ 155.278084][ T7038] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 155.346672][ T7110] random: crng reseeded on system resumption [ 155.531604][ T517] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.601292][ T7038] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 155.641322][ T7038] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 155.807597][ T517] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.862078][ T7038] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 155.984966][ T517] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.114747][ T517] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.181349][ T7124] ubi0: attaching mtd1 [ 156.202403][ T7124] ubi0: scanning is finished [ 156.224573][ T7124] ubi0: empty MTD device detected [ 156.240125][ T7124] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 156.598966][ T7124] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd1, error -22 [ 156.711888][ T517] bridge_slave_1: left allmulticast mode [ 156.739948][ T517] bridge_slave_1: left promiscuous mode [ 156.757477][ T517] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.889578][ T517] bridge_slave_0: left allmulticast mode [ 156.913947][ T5829] Bluetooth: hci4: command tx timeout [ 156.915701][ T517] bridge_slave_0: left promiscuous mode [ 156.950756][ T517] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.274257][ T7141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.257'. [ 157.332497][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.257'. [ 157.846553][ T517] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.904227][ T517] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.940240][ T517] bond0 (unregistering): Released all slaves [ 158.054942][ T7038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.098899][ T7038] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.176175][ T1027] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.183534][ T1027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.264260][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.271462][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.847838][ T517] hsr_slave_0: left promiscuous mode [ 158.928494][ T517] hsr_slave_1: left promiscuous mode [ 158.995434][ T5829] Bluetooth: hci4: command tx timeout [ 159.013766][ T517] veth1_macvtap: left promiscuous mode [ 159.019592][ T517] veth0_macvtap: left promiscuous mode [ 159.051782][ T7177] FAULT_INJECTION: forcing a failure. [ 159.051782][ T7177] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.067254][ T517] veth1_vlan: left promiscuous mode [ 159.072557][ T517] veth0_vlan: left promiscuous mode [ 159.113087][ T7177] CPU: 0 UID: 0 PID: 7177 Comm: syz.3.263 Not tainted syzkaller #0 PREEMPT(full) [ 159.113126][ T7177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 159.113143][ T7177] Call Trace: [ 159.113153][ T7177] [ 159.113164][ T7177] dump_stack_lvl+0x100/0x190 [ 159.113214][ T7177] should_fail_ex.cold+0x5/0xa [ 159.113249][ T7177] strncpy_from_user+0x3b/0x2d0 [ 159.113310][ T7177] do_getname+0x78/0x390 [ 159.113350][ T7177] do_sys_openat2+0xc5/0x1e0 [ 159.113389][ T7177] ? __pfx_do_sys_openat2+0x10/0x10 [ 159.113429][ T7177] ? __might_fault+0xc5/0x140 [ 159.113479][ T7177] __x64_sys_openat+0x12d/0x210 [ 159.113517][ T7177] ? __pfx___x64_sys_openat+0x10/0x10 [ 159.113571][ T7177] do_syscall_64+0x106/0xf80 [ 159.113605][ T7177] ? clear_bhb_loop+0x40/0x90 [ 159.113642][ T7177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.113673][ T7177] RIP: 0033:0x7f5301b9c799 [ 159.113697][ T7177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.113724][ T7177] RSP: 002b:00007f5302a14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 159.113752][ T7177] RAX: ffffffffffffffda RBX: 00007f5301e15fa0 RCX: 00007f5301b9c799 [ 159.113770][ T7177] RDX: 0000000000022000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 159.113787][ T7177] RBP: 00007f5301c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 159.113803][ T7177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.113820][ T7177] R13: 00007f5301e16038 R14: 00007f5301e15fa0 R15: 00007ffdcfa65968 [ 159.113877][ T7177] [ 159.501679][ T7177] smpboot: CPU 1 is now offline [ 160.240533][ T517] team0 (unregistering): Port device team_slave_1 removed [ 160.334518][ T517] team0 (unregistering): Port device team_slave_0 removed [ 160.583230][ T7203] [U] [ 160.586180][ T7203] [U] [ 160.588871][ T7203] [U] [ 160.591553][ T7203] [U] [ 160.616269][ T7203] [U] [ 160.618988][ T7203] [U] [ 160.621675][ T7203] [U] [ 160.624373][ T7203] [U] [ 160.651301][ T7203] [U] [ 160.654027][ T7203] [U] [ 160.656719][ T7203] [U] [ 160.659401][ T7203] [U] [ 160.741891][ T7203] [U] [ 160.744620][ T7203] [U] [ 160.747303][ T7203] [U] [ 160.749989][ T7203] [U] [ 160.813353][ T7203] [U] [ 160.816168][ T7203] [U] [ 160.818899][ T7203] [U] [ 160.821662][ T7203] [U] [ 160.897948][ T7203] [U] [ 161.465227][ T7038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.113769][ T7243] bridge0: port 3(netdevsim1) entered blocking state [ 162.154784][ T7243] bridge0: port 3(netdevsim1) entered disabled state [ 162.161629][ T7243] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 162.251318][ T7243] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 162.333554][ T7243] bridge0: port 3(netdevsim1) entered blocking state [ 162.340501][ T7243] bridge0: port 3(netdevsim1) entered forwarding state [ 162.559735][ T7038] veth0_vlan: entered promiscuous mode [ 162.638173][ T7038] veth1_vlan: entered promiscuous mode [ 162.727185][ T7227] Invalid ELF header magic: != ELF [ 162.769524][ T7038] veth0_macvtap: entered promiscuous mode [ 162.836548][ T7038] veth1_macvtap: entered promiscuous mode [ 162.908024][ T7038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.990349][ T7038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.164299][ T7232] netlink: 'syz.0.271': attribute type 1 has an invalid length. [ 163.248208][ T3538] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.293279][ T3538] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.302017][ T3538] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.456026][ T3538] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.800938][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.859941][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.044021][ T517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.092786][ T517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.383253][ T7325] FAULT_INJECTION: forcing a failure. [ 166.383253][ T7325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.476454][ T7317] syz.1.281 (7317) used greatest stack depth: 19672 bytes left [ 166.493971][ T7325] CPU: 0 UID: 8 PID: 7325 Comm: syz.0.282 Not tainted syzkaller #0 PREEMPT(full) [ 166.493997][ T7325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 166.494008][ T7325] Call Trace: [ 166.494015][ T7325] [ 166.494029][ T7325] dump_stack_lvl+0x100/0x190 [ 166.494061][ T7325] should_fail_ex.cold+0x5/0xa [ 166.494082][ T7325] _copy_to_iter+0x1f3/0x1720 [ 166.494116][ T7325] ? __pfx__copy_to_iter+0x10/0x10 [ 166.494146][ T7325] ? pin_user_pages_remote+0xf5/0x140 [ 166.494168][ T7325] ? __up_read+0x2c5/0x700 [ 166.494197][ T7325] copy_page_to_iter+0x12a/0x1e0 [ 166.494228][ T7325] process_vm_rw_core.constprop.0+0x5a3/0x950 [ 166.494267][ T7325] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 166.494295][ T7325] ? lockdep_hardirqs_on+0x78/0x100 [ 166.494317][ T7325] ? import_ubuf+0x1b6/0x220 [ 166.494357][ T7325] ? iovec_from_user+0xda/0x140 [ 166.494376][ T7325] process_vm_rw+0x226/0x2d0 [ 166.494406][ T7325] ? __pfx_process_vm_rw+0x10/0x10 [ 166.494459][ T7325] ? xfd_validate_state+0x129/0x190 [ 166.494488][ T7325] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 166.494517][ T7325] ? do_syscall_64+0x95/0xf80 [ 166.494538][ T7325] ? lockdep_hardirqs_on+0x78/0x100 [ 166.494558][ T7325] do_syscall_64+0x106/0xf80 [ 166.494578][ T7325] ? clear_bhb_loop+0x40/0x90 [ 166.494600][ T7325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.494618][ T7325] RIP: 0033:0x7f5c5a59c799 [ 166.494634][ T7325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.494651][ T7325] RSP: 002b:00007f5c5b4ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 166.494668][ T7325] RAX: ffffffffffffffda RBX: 00007f5c5a815fa0 RCX: 00007f5c5a59c799 [ 166.494679][ T7325] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000140 [ 166.494690][ T7325] RBP: 00007f5c5a632bd9 R08: 0000000000000006 R09: 0000000000000000 [ 166.494699][ T7325] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 166.494710][ T7325] R13: 00007f5c5a816038 R14: 00007f5c5a815fa0 R15: 00007ffedd133ba8 [ 166.494732][ T7325] [ 168.388273][ T7359] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 169.556414][ T7379] warning: `syz.1.298' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 170.572447][ T7409] netlink: 28 bytes leftover after parsing attributes in process `syz.3.304'. [ 170.644856][ T7409] veth1_macvtap: left promiscuous mode [ 170.699633][ T7413] block nbd2: not configured, cannot reconfigure [ 171.423516][ T7421] FAULT_INJECTION: forcing a failure. [ 171.423516][ T7421] name failslab, interval 1, probability 0, space 0, times 0 [ 171.575050][ T7421] CPU: 0 UID: 0 PID: 7421 Comm: syz.3.306 Not tainted syzkaller #0 PREEMPT(full) [ 171.575077][ T7421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 171.575087][ T7421] Call Trace: [ 171.575094][ T7421] [ 171.575101][ T7421] dump_stack_lvl+0x100/0x190 [ 171.575133][ T7421] should_fail_ex.cold+0x5/0xa [ 171.575154][ T7421] ? copy_splice_read+0x1a3/0xb90 [ 171.575183][ T7421] should_failslab+0xc2/0x120 [ 171.575202][ T7421] __kmalloc_noprof+0xe0/0x850 [ 171.575232][ T7421] copy_splice_read+0x1a3/0xb90 [ 171.575260][ T7421] ? __pfx_pipe_to_null+0x10/0x10 [ 171.575287][ T7421] ? __pfx_copy_splice_read+0x10/0x10 [ 171.575318][ T7421] ? __pfx_splice_from_pipe+0x10/0x10 [ 171.575341][ T7421] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 171.575370][ T7421] ? __pfx_copy_splice_read+0x10/0x10 [ 171.575398][ T7421] do_splice_read+0x285/0x370 [ 171.575428][ T7421] splice_direct_to_actor+0x2a1/0xa30 [ 171.575458][ T7421] ? __pfx_direct_splice_actor+0x10/0x10 [ 171.575491][ T7421] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 171.575527][ T7421] do_splice_direct+0x174/0x240 [ 171.575545][ T7421] ? __pfx_do_splice_direct+0x10/0x10 [ 171.575575][ T7421] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 171.575603][ T7421] ? bpf_lsm_file_permission+0x9/0x10 [ 171.575631][ T7421] ? security_file_permission+0x76/0x210 [ 171.575650][ T7421] ? rw_verify_area+0xce/0x6d0 [ 171.575676][ T7421] do_sendfile+0xadc/0xe20 [ 171.575707][ T7421] ? __pfx_do_sendfile+0x10/0x10 [ 171.575732][ T7421] ? fput+0x79/0x100 [ 171.575754][ T7421] ? __x64_sys_futex+0x34f/0x4d0 [ 171.575776][ T7421] ? __x64_sys_futex+0x358/0x4d0 [ 171.575800][ T7421] __x64_sys_sendfile64+0x1d8/0x220 [ 171.575821][ T7421] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 171.575848][ T7421] do_syscall_64+0x106/0xf80 [ 171.575869][ T7421] ? clear_bhb_loop+0x40/0x90 [ 171.575890][ T7421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.575909][ T7421] RIP: 0033:0x7f5301b9c799 [ 171.575925][ T7421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.575941][ T7421] RSP: 002b:00007f5302a14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 171.575958][ T7421] RAX: ffffffffffffffda RBX: 00007f5301e15fa0 RCX: 00007f5301b9c799 [ 171.575970][ T7421] RDX: 0000000000000000 RSI: 000000000000000a RDI: 000000000000000a [ 171.575980][ T7421] RBP: 00007f5301c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 171.575990][ T7421] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 171.576000][ T7421] R13: 00007f5301e16038 R14: 00007f5301e15fa0 R15: 00007ffdcfa65968 [ 171.576023][ T7421] [ 172.422934][ T7425] zswap: compressor not available [ 172.443713][ T7443] netlink: 28 bytes leftover after parsing attributes in process `syz.3.311'. [ 173.672744][ T7463] FAULT_INJECTION: forcing a failure. [ 173.672744][ T7463] name failslab, interval 1, probability 0, space 0, times 0 [ 173.746088][ T7463] CPU: 0 UID: 0 PID: 7463 Comm: syz.3.316 Not tainted syzkaller #0 PREEMPT(full) [ 173.746115][ T7463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 173.746126][ T7463] Call Trace: [ 173.746132][ T7463] [ 173.746139][ T7463] dump_stack_lvl+0x100/0x190 [ 173.746172][ T7463] should_fail_ex.cold+0x5/0xa [ 173.746194][ T7463] should_failslab+0xc2/0x120 [ 173.746213][ T7463] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 173.746241][ T7463] ? __d_alloc+0x34/0xa80 [ 173.746265][ T7463] __d_alloc+0x34/0xa80 [ 173.746288][ T7463] d_alloc_pseudo+0x1c/0xc0 [ 173.746313][ T7463] alloc_file_pseudo+0xcf/0x230 [ 173.746338][ T7463] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 173.746367][ T7463] __shmem_file_setup+0x221/0x490 [ 173.746393][ T7463] ? __pfx___shmem_file_setup+0x10/0x10 [ 173.746422][ T7463] ? vm_area_alloc+0x1f/0x160 [ 173.746448][ T7463] shmem_zero_setup+0x96/0x1b0 [ 173.746478][ T7463] __mmap_region+0x2198/0x29e0 [ 173.746509][ T7463] ? __pfx___mmap_region+0x10/0x10 [ 173.746540][ T7463] ? set_next_entity+0x11e/0x9c0 [ 173.746570][ T7463] ? __lock_acquire+0x4a5/0x2630 [ 173.746593][ T7463] ? update_cfs_rq_load_avg+0x51/0x550 [ 173.746627][ T7463] ? find_held_lock+0x2b/0x80 [ 173.746643][ T7463] ? finish_task_switch.isra.0+0x200/0xb80 [ 173.746662][ T7463] ? finish_task_switch.isra.0+0x200/0xb80 [ 173.746690][ T7463] ? trace_sched_exit_tp+0x13a/0x180 [ 173.746711][ T7463] ? __schedule+0x1000/0x6120 [ 173.746760][ T7463] ? rcu_is_watching+0x12/0xc0 [ 173.746787][ T7463] ? cap_capable+0x107/0x460 [ 173.746815][ T7463] mmap_region+0x180/0x3e0 [ 173.746847][ T7463] do_mmap+0xc63/0x12f0 [ 173.746870][ T7463] ? __pfx_do_mmap+0x10/0x10 [ 173.746890][ T7463] ? __pfx_down_write_killable+0x10/0x10 [ 173.746919][ T7463] vm_mmap_pgoff+0x29e/0x470 [ 173.746944][ T7463] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 173.746965][ T7463] ? do_futex+0x192/0x350 [ 173.746989][ T7463] ? __pfx_do_futex+0x10/0x10 [ 173.747022][ T7463] ksys_mmap_pgoff+0xe1/0x650 [ 173.747041][ T7463] ? __x64_sys_futex+0x34f/0x4d0 [ 173.747063][ T7463] ? __x64_sys_futex+0x358/0x4d0 [ 173.747086][ T7463] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 173.747105][ T7463] ? xfd_validate_state+0x129/0x190 [ 173.747135][ T7463] __x64_sys_mmap+0x125/0x190 [ 173.747165][ T7463] do_syscall_64+0x106/0xf80 [ 173.747186][ T7463] ? clear_bhb_loop+0x40/0x90 [ 173.747208][ T7463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.747228][ T7463] RIP: 0033:0x7f5301b9c799 [ 173.747244][ T7463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.747261][ T7463] RSP: 002b:00007f5302a14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 173.747279][ T7463] RAX: ffffffffffffffda RBX: 00007f5301e15fa0 RCX: 00007f5301b9c799 [ 173.747290][ T7463] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 173.747301][ T7463] RBP: 00007f5301c32bd9 R08: fffffffffffffffa R09: 0000000000008000 [ 173.747311][ T7463] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 173.747322][ T7463] R13: 00007f5301e16038 R14: 00007f5301e15fa0 R15: 00007ffdcfa65968 [ 173.747344][ T7463] [ 177.269451][ T7519] zswap: compressor  not available [ 178.383998][ T7549] zswap: compressor not available [ 180.657621][ T7603] netlink: 'syz.3.336': attribute type 1 has an invalid length. [ 184.822454][ T5829] Bluetooth: hci4: unexpected event 0x32 length: 727 > 9 [ 184.852615][ T7707] netlink: 11784 bytes leftover after parsing attributes in process `syz.4.354'. [ 186.603232][ T7749] FAULT_INJECTION: forcing a failure. [ 186.603232][ T7749] name failslab, interval 1, probability 0, space 0, times 0 [ 186.904240][ T7749] CPU: 0 UID: 0 PID: 7749 Comm: syz.0.359 Not tainted syzkaller #0 PREEMPT(full) [ 186.904267][ T7749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 186.904278][ T7749] Call Trace: [ 186.904284][ T7749] [ 186.904291][ T7749] dump_stack_lvl+0x100/0x190 [ 186.904322][ T7749] should_fail_ex.cold+0x5/0xa [ 186.904343][ T7749] ? ima_write_template_field_data+0x59/0x1d0 [ 186.904363][ T7749] should_failslab+0xc2/0x120 [ 186.904382][ T7749] __kmalloc_noprof+0xe0/0x850 [ 186.904409][ T7749] ? do_syscall_64+0x106/0xf80 [ 186.904429][ T7749] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.904451][ T7749] ima_write_template_field_data+0x59/0x1d0 [ 186.904474][ T7749] ima_eventdigest_init_common+0x158/0x460 [ 186.904496][ T7749] ? __pfx_ima_eventdigest_init_common+0x10/0x10 [ 186.904538][ T7749] ? trace_kmalloc+0xb0/0x130 [ 186.904555][ T7749] ? __kasan_kmalloc+0xaa/0xb0 [ 186.904582][ T7749] ? __kmalloc_noprof+0x320/0x850 [ 186.904608][ T7749] ? take_dentry_name_snapshot+0x30b/0x7c0 [ 186.904637][ T7749] ima_alloc_init_template+0x399/0x6d0 [ 186.904669][ T7749] ima_store_measurement+0x1e3/0x5b0 [ 186.904704][ T7749] ? __pfx_ima_store_measurement+0x10/0x10 [ 186.904740][ T7749] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 186.904776][ T7749] process_measurement+0x19cc/0x2350 [ 186.904814][ T7749] ? stack_trace_save+0x8e/0xc0 [ 186.904835][ T7749] ? __pfx_process_measurement+0x10/0x10 [ 186.904861][ T7749] ? __lock_acquire+0x4a5/0x2630 [ 186.904883][ T7749] ? __kasan_slab_alloc+0x89/0x90 [ 186.904898][ T7749] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 186.904924][ T7749] ? init_file+0x95/0x480 [ 186.904942][ T7749] ? alloc_empty_file+0x73/0x1c0 [ 186.904961][ T7749] ? alloc_file_pseudo+0x13a/0x230 [ 186.904989][ T7749] ? ksys_mmap_pgoff+0x232/0x650 [ 186.905006][ T7749] ? __x64_sys_mmap+0x125/0x190 [ 186.905030][ T7749] ? do_syscall_64+0x106/0xf80 [ 186.905072][ T7749] ? __pfx_aa_file_perm+0x10/0x10 [ 186.905099][ T7749] ima_file_mmap+0x1c4/0x1f0 [ 186.905124][ T7749] ? __pfx_ima_file_mmap+0x10/0x10 [ 186.905154][ T7749] security_mmap_file+0x278/0x9b0 [ 186.905174][ T7749] vm_mmap_pgoff+0xec/0x470 [ 186.905197][ T7749] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 186.905214][ T7749] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 186.905238][ T7749] ? hugetlbfs_get_inode+0x36e/0x750 [ 186.905263][ T7749] ksys_mmap_pgoff+0x273/0x650 [ 186.905282][ T7749] ? __x64_sys_futex+0x358/0x4d0 [ 186.905306][ T7749] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 186.905324][ T7749] ? xfd_validate_state+0x129/0x190 [ 186.905353][ T7749] __x64_sys_mmap+0x125/0x190 [ 186.905381][ T7749] do_syscall_64+0x106/0xf80 [ 186.905401][ T7749] ? clear_bhb_loop+0x40/0x90 [ 186.905423][ T7749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.905441][ T7749] RIP: 0033:0x7f5c5a59c799 [ 186.905457][ T7749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.905474][ T7749] RSP: 002b:00007f5c5b46b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 186.905491][ T7749] RAX: ffffffffffffffda RBX: 00007f5c5a816270 RCX: 00007f5c5a59c799 [ 186.905503][ T7749] RDX: 0000000000009c0f RSI: 000000000000000c RDI: 0000000000000000 [ 186.905513][ T7749] RBP: 00007f5c5a632bd9 R08: ffffffffffffffff R09: 0000300000020000 [ 186.905523][ T7749] R10: 0000000000044eb2 R11: 0000000000000246 R12: 0000000000000000 [ 186.905534][ T7749] R13: 00007f5c5a816308 R14: 00007f5c5a816270 R15: 00007ffedd133ba8 [ 186.905557][ T7749] [ 187.742266][ T30] audit: type=1804 audit(2147493536.454:3): pid=7749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.0.359" name="anon_hugepage" dev="hugetlbfs" ino=19309 res=0 errno=0 [ 190.185618][ T7799] netlink: 16 bytes leftover after parsing attributes in process `syz.4.376'. [ 190.231199][ T7797] netlink: 16 bytes leftover after parsing attributes in process `syz.4.376'. [ 190.273374][ T7797] bridge_slave_1: left allmulticast mode [ 190.296972][ T7797] bridge_slave_1: left promiscuous mode [ 190.340483][ T7797] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.379066][ T7797] bridge_slave_0: left allmulticast mode [ 190.403985][ T7797] bridge_slave_0: left promiscuous mode [ 190.431732][ T7797] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.715827][ T7810] futex_wake_op: syz.4.379 tries to shift op by -2048; fix this program [ 190.757761][ T7810] futex_wake_op: syz.4.379 tries to shift op by -2048; fix this program [ 190.817307][ T7810] 0x000000000001-0x000000020000 : "" [ 190.886443][ T7810] ftl_cs: FTL header corrupt! [ 191.624339][ T7828] device-mapper: ioctl: Invalid ioctl structure: name , dev 3ff [ 191.793783][ T7841] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 191.993121][ T7845] FAULT_INJECTION: forcing a failure. [ 191.993121][ T7845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.061825][ T7845] CPU: 0 UID: 0 PID: 7845 Comm: syz.3.386 Not tainted syzkaller #0 PREEMPT(full) [ 192.061852][ T7845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 192.061863][ T7845] Call Trace: [ 192.061869][ T7845] [ 192.061876][ T7845] dump_stack_lvl+0x100/0x190 [ 192.061908][ T7845] should_fail_ex.cold+0x5/0xa [ 192.061930][ T7845] _copy_from_user+0x2e/0xd0 [ 192.061960][ T7845] sg_write+0x745/0xdb0 [ 192.061988][ T7845] ? __pfx_sg_write+0x10/0x10 [ 192.062039][ T7845] ? apparmor_file_permission+0x13f/0x1c0 [ 192.062069][ T7845] ? bpf_lsm_file_permission+0x9/0x10 [ 192.062098][ T7845] ? security_file_permission+0x76/0x210 [ 192.062117][ T7845] ? rw_verify_area+0xce/0x6d0 [ 192.062144][ T7845] ? __pfx_sg_write+0x10/0x10 [ 192.062167][ T7845] vfs_writev+0x5ea/0xe10 [ 192.062199][ T7845] ? __pfx_vfs_writev+0x10/0x10 [ 192.062227][ T7845] ? find_held_lock+0x2b/0x80 [ 192.062257][ T7845] ? __fget_files+0x21f/0x3d0 [ 192.062278][ T7845] ? do_writev+0x13e/0x340 [ 192.062304][ T7845] do_writev+0x13e/0x340 [ 192.062335][ T7845] ? __pfx_do_writev+0x10/0x10 [ 192.062369][ T7845] do_syscall_64+0x106/0xf80 [ 192.062390][ T7845] ? clear_bhb_loop+0x40/0x90 [ 192.062412][ T7845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.062431][ T7845] RIP: 0033:0x7f5301b9c799 [ 192.062446][ T7845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.062463][ T7845] RSP: 002b:00007f5302a14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 192.062480][ T7845] RAX: ffffffffffffffda RBX: 00007f5301e15fa0 RCX: 00007f5301b9c799 [ 192.062492][ T7845] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 192.062502][ T7845] RBP: 00007f5302a14090 R08: 0000000000000000 R09: 0000000000000000 [ 192.062512][ T7845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.062522][ T7845] R13: 00007f5301e16038 R14: 00007f5301e15fa0 R15: 00007ffdcfa65968 [ 192.062553][ T7845] [ 192.706876][ T7860] FAULT_INJECTION: forcing a failure. [ 192.706876][ T7860] name failslab, interval 1, probability 0, space 0, times 0 [ 192.784412][ T7860] CPU: 0 UID: 0 PID: 7860 Comm: syz.3.391 Not tainted syzkaller #0 PREEMPT(full) [ 192.784444][ T7860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 192.784455][ T7860] Call Trace: [ 192.784461][ T7860] [ 192.784468][ T7860] dump_stack_lvl+0x100/0x190 [ 192.784501][ T7860] should_fail_ex.cold+0x5/0xa [ 192.784522][ T7860] ? constrain_params_by_rules+0x175/0xcc0 [ 192.784542][ T7860] should_failslab+0xc2/0x120 [ 192.784561][ T7860] __kmalloc_noprof+0xe0/0x850 [ 192.784586][ T7860] ? kasan_quarantine_put+0x104/0x240 [ 192.784612][ T7860] ? lockdep_hardirqs_on+0x78/0x100 [ 192.784636][ T7860] constrain_params_by_rules+0x175/0xcc0 [ 192.784654][ T7860] ? rcu_is_watching+0x12/0xc0 [ 192.784685][ T7860] ? constrain_params_by_rules+0xa22/0xcc0 [ 192.784707][ T7860] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 192.784731][ T7860] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 192.784750][ T7860] ? kfree+0x1f6/0x6b0 [ 192.784770][ T7860] ? snd_pcm_hw_param_near.constprop.0+0x573/0x850 [ 192.784803][ T7860] ? snd_pcm_oss_change_params_locked+0x18d9/0x39f0 [ 192.784832][ T7860] ? snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 192.784865][ T7860] ? snd_interval_refine+0x2d0/0x580 [ 192.784894][ T7860] snd_pcm_hw_refine+0x7e7/0xad0 [ 192.784917][ T7860] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 192.784940][ T7860] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 192.784967][ T7860] snd_pcm_hw_param_first+0x2b0/0x680 [ 192.785001][ T7860] snd_pcm_hw_param_near.constprop.0+0x739/0x850 [ 192.785033][ T7860] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 192.785075][ T7860] ? calc_src_frames.isra.0+0x17c/0x1c0 [ 192.785093][ T7860] ? calc_dst_frames.constprop.0.isra.0+0xed/0x120 [ 192.785117][ T7860] snd_pcm_oss_change_params_locked+0x18d9/0x39f0 [ 192.785158][ T7860] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 192.785190][ T7860] ? __pfx___mutex_lock+0x10/0x10 [ 192.785226][ T7860] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 192.785256][ T7860] snd_pcm_oss_sync+0x265/0x840 [ 192.785289][ T7860] snd_pcm_oss_release+0x238/0x300 [ 192.785318][ T7860] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 192.785347][ T7860] __fput+0x3ff/0xb40 [ 192.785374][ T7860] task_work_run+0x150/0x240 [ 192.785400][ T7860] ? __pfx_task_work_run+0x10/0x10 [ 192.785432][ T7860] exit_to_user_mode_loop+0x100/0x4a0 [ 192.785457][ T7860] do_syscall_64+0x668/0xf80 [ 192.785477][ T7860] ? clear_bhb_loop+0x40/0x90 [ 192.785500][ T7860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.785519][ T7860] RIP: 0033:0x7f5301b9c799 [ 192.785535][ T7860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.785551][ T7860] RSP: 002b:00007f5302a14028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 192.785569][ T7860] RAX: 0000000000000000 RBX: 00007f5301e15fa0 RCX: 00007f5301b9c799 [ 192.785581][ T7860] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 192.785590][ T7860] RBP: 00007f5301c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 192.785600][ T7860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.785610][ T7860] R13: 00007f5301e16038 R14: 00007f5301e15fa0 R15: 00007ffdcfa65968 [ 192.785633][ T7860] [ 193.763861][ T7871] FAULT_INJECTION: forcing a failure. [ 193.763861][ T7871] name failslab, interval 1, probability 0, space 0, times 0 [ 193.783812][ T7871] CPU: 0 UID: 0 PID: 7871 Comm: syz.0.394 Not tainted syzkaller #0 PREEMPT(full) [ 193.783839][ T7871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 193.783850][ T7871] Call Trace: [ 193.783856][ T7871] [ 193.783863][ T7871] dump_stack_lvl+0x100/0x190 [ 193.783896][ T7871] should_fail_ex.cold+0x5/0xa [ 193.783917][ T7871] should_failslab+0xc2/0x120 [ 193.783937][ T7871] __kmalloc_cache_noprof+0x7a/0x6f0 [ 193.783960][ T7871] ? percpu_ref_init+0xec/0x3f0 [ 193.783987][ T7871] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 193.784011][ T7871] percpu_ref_init+0xec/0x3f0 [ 193.784036][ T7871] io_uring_setup.cold+0x23b/0x1d09 [ 193.784065][ T7871] ? __pfx_io_uring_setup+0x10/0x10 [ 193.784096][ T7871] ? do_futex+0x192/0x350 [ 193.784120][ T7871] ? __pfx_do_futex+0x10/0x10 [ 193.784153][ T7871] ? xfd_validate_state+0x129/0x190 [ 193.784185][ T7871] __x64_sys_io_uring_setup+0xc2/0x170 [ 193.784207][ T7871] do_syscall_64+0x106/0xf80 [ 193.784227][ T7871] ? clear_bhb_loop+0x40/0x90 [ 193.784250][ T7871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.784268][ T7871] RIP: 0033:0x7f5c5a59c799 [ 193.784284][ T7871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.784300][ T7871] RSP: 002b:00007f5c5b4ce028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 193.784317][ T7871] RAX: ffffffffffffffda RBX: 00007f5c5a815fa0 RCX: 00007f5c5a59c799 [ 193.784328][ T7871] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001d48 [ 193.784338][ T7871] RBP: 00007f5c5a632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 193.784348][ T7871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.784359][ T7871] R13: 00007f5c5a816038 R14: 00007f5c5a815fa0 R15: 00007ffedd133ba8 [ 193.784381][ T7871] [ 194.454105][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.465244][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.124753][ T7891] FAULT_INJECTION: forcing a failure. [ 195.124753][ T7891] name failslab, interval 1, probability 0, space 0, times 0 [ 195.176679][ T7891] CPU: 0 UID: 0 PID: 7891 Comm: syz.0.399 Not tainted syzkaller #0 PREEMPT(full) [ 195.176706][ T7891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 195.176717][ T7891] Call Trace: [ 195.176723][ T7891] [ 195.176730][ T7891] dump_stack_lvl+0x100/0x190 [ 195.176762][ T7891] should_fail_ex.cold+0x5/0xa [ 195.176784][ T7891] should_failslab+0xc2/0x120 [ 195.176803][ T7891] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 195.176830][ T7891] ? vm_area_alloc+0x1f/0x160 [ 195.176853][ T7891] ? vma_merge_new_range+0x38b/0xa30 [ 195.176883][ T7891] vm_area_alloc+0x1f/0x160 [ 195.176907][ T7891] __mmap_region+0x10cc/0x29e0 [ 195.176937][ T7891] ? __pfx___mmap_region+0x10/0x10 [ 195.176968][ T7891] ? set_next_entity+0x11e/0x9c0 [ 195.177004][ T7891] ? __lock_acquire+0x4a5/0x2630 [ 195.177027][ T7891] ? update_cfs_rq_load_avg+0x51/0x550 [ 195.177056][ T7891] ? find_held_lock+0x2b/0x80 [ 195.177072][ T7891] ? finish_task_switch.isra.0+0x200/0xb80 [ 195.177091][ T7891] ? finish_task_switch.isra.0+0x200/0xb80 [ 195.177118][ T7891] ? trace_sched_exit_tp+0x13a/0x180 [ 195.177140][ T7891] ? __schedule+0x1000/0x6120 [ 195.177187][ T7891] ? rcu_is_watching+0x12/0xc0 [ 195.177214][ T7891] ? cap_capable+0x107/0x460 [ 195.177242][ T7891] mmap_region+0x180/0x3e0 [ 195.177273][ T7891] do_mmap+0xc63/0x12f0 [ 195.177297][ T7891] ? __pfx_do_mmap+0x10/0x10 [ 195.177316][ T7891] ? __pfx_down_write_killable+0x10/0x10 [ 195.177346][ T7891] vm_mmap_pgoff+0x29e/0x470 [ 195.177370][ T7891] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 195.177392][ T7891] ? do_futex+0x192/0x350 [ 195.177415][ T7891] ? __pfx_do_futex+0x10/0x10 [ 195.177438][ T7891] ? __sys_bind+0x1c7/0x260 [ 195.177469][ T7891] ksys_mmap_pgoff+0xe1/0x650 [ 195.177488][ T7891] ? __x64_sys_futex+0x34f/0x4d0 [ 195.177510][ T7891] ? __x64_sys_futex+0x358/0x4d0 [ 195.177534][ T7891] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 195.177553][ T7891] ? xfd_validate_state+0x129/0x190 [ 195.177583][ T7891] __x64_sys_mmap+0x125/0x190 [ 195.177612][ T7891] do_syscall_64+0x106/0xf80 [ 195.177633][ T7891] ? clear_bhb_loop+0x40/0x90 [ 195.177655][ T7891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.177674][ T7891] RIP: 0033:0x7f5c5a59c799 [ 195.177689][ T7891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.177706][ T7891] RSP: 002b:00007f5c5b4ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 195.177724][ T7891] RAX: ffffffffffffffda RBX: 00007f5c5a815fa0 RCX: 00007f5c5a59c799 [ 195.177735][ T7891] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 195.177746][ T7891] RBP: 00007f5c5a632bd9 R08: 0000000000000002 R09: 0000000000008000 [ 195.177756][ T7891] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 195.177766][ T7891] R13: 00007f5c5a816038 R14: 00007f5c5a815fa0 R15: 00007ffedd133ba8 [ 195.177789][ T7891] [ 195.999131][ T7913] can: request_module (can-proto-4) failed. [ 196.240992][ T7927] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 196.847501][ T7937] vivid-011: ================= START STATUS ================= [ 196.893233][ T7937] vivid-011: ================== END STATUS ================== [ 196.953092][ T7894] FAULT_INJECTION: forcing a failure. [ 196.953092][ T7894] name failslab, interval 1, probability 0, space 0, times 0 [ 197.033224][ T7894] CPU: 0 UID: 0 PID: 7894 Comm: syz.3.400 Not tainted syzkaller #0 PREEMPT(full) [ 197.033250][ T7894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 197.033261][ T7894] Call Trace: [ 197.033267][ T7894] [ 197.033274][ T7894] dump_stack_lvl+0x100/0x190 [ 197.033306][ T7894] should_fail_ex.cold+0x5/0xa [ 197.033328][ T7894] should_failslab+0xc2/0x120 [ 197.033347][ T7894] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 197.033374][ T7894] ? security_file_alloc+0x34/0x2c0 [ 197.033393][ T7894] ? trace_kmem_cache_alloc+0xf3/0x120 [ 197.033415][ T7894] security_file_alloc+0x34/0x2c0 [ 197.033434][ T7894] init_file+0x95/0x480 [ 197.033456][ T7894] alloc_empty_file+0x73/0x1c0 [ 197.033479][ T7894] alloc_file_pseudo+0x13a/0x230 [ 197.033503][ T7894] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 197.033532][ T7894] __shmem_file_setup+0x221/0x490 [ 197.033558][ T7894] ? __pfx___shmem_file_setup+0x10/0x10 [ 197.033586][ T7894] ? vm_area_alloc+0x1f/0x160 [ 197.033613][ T7894] shmem_zero_setup+0x96/0x1b0 [ 197.033643][ T7894] __mmap_region+0x2198/0x29e0 [ 197.033671][ T7894] ? update_cfs_rq_load_avg+0x51/0x550 [ 197.033692][ T7894] ? __pfx___mmap_region+0x10/0x10 [ 197.033723][ T7894] ? set_next_entity+0x11e/0x9c0 [ 197.033753][ T7894] ? __lock_acquire+0x4a5/0x2630 [ 197.033784][ T7894] ? lock_acquire+0x1cf/0x380 [ 197.033806][ T7894] ? find_held_lock+0x2b/0x80 [ 197.033851][ T7894] ? trace_sched_exit_tp+0x13a/0x180 [ 197.033902][ T7894] ? rcu_is_watching+0x12/0xc0 [ 197.033931][ T7894] ? cap_capable+0x107/0x460 [ 197.033958][ T7894] mmap_region+0x180/0x3e0 [ 197.033989][ T7894] do_mmap+0xc63/0x12f0 [ 197.034013][ T7894] ? __pfx_do_mmap+0x10/0x10 [ 197.034033][ T7894] ? __pfx_down_write_killable+0x10/0x10 [ 197.034063][ T7894] vm_mmap_pgoff+0x29e/0x470 [ 197.034093][ T7894] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 197.034123][ T7894] ksys_mmap_pgoff+0xe1/0x650 [ 197.034143][ T7894] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 197.034167][ T7894] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 197.034186][ T7894] ? xfd_validate_state+0x129/0x190 [ 197.034216][ T7894] __x64_sys_mmap+0x125/0x190 [ 197.034246][ T7894] do_syscall_64+0x106/0xf80 [ 197.034271][ T7894] ? clear_bhb_loop+0x40/0x90 [ 197.034294][ T7894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.034312][ T7894] RIP: 0033:0x7f5301b9c799 [ 197.034328][ T7894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.034344][ T7894] RSP: 002b:00007f5302a14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 197.034362][ T7894] RAX: ffffffffffffffda RBX: 00007f5301e15fa0 RCX: 00007f5301b9c799 [ 197.034374][ T7894] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 197.034384][ T7894] RBP: 00007f5301c32bd9 R08: fffffffffffffffa R09: 0000000000008000 [ 197.034395][ T7894] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 197.034405][ T7894] R13: 00007f5301e16038 R14: 00007f5301e15fa0 R15: 00007ffdcfa65968 [ 197.034428][ T7894] [ 197.943537][ T7956] FAULT_INJECTION: forcing a failure. [ 197.943537][ T7956] name failslab, interval 1, probability 0, space 0, times 0 [ 197.967427][ T7956] CPU: 0 UID: 0 PID: 7956 Comm: syz.3.411 Not tainted syzkaller #0 PREEMPT(full) [ 197.967455][ T7956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 197.967466][ T7956] Call Trace: [ 197.967472][ T7956] [ 197.967480][ T7956] dump_stack_lvl+0x100/0x190 [ 197.967511][ T7956] should_fail_ex.cold+0x5/0xa [ 197.967533][ T7956] ? process_preds+0x4c2/0x1d90 [ 197.967558][ T7956] should_failslab+0xc2/0x120 [ 197.967578][ T7956] __kmalloc_noprof+0xe0/0x850 [ 197.967609][ T7956] process_preds+0x4c2/0x1d90 [ 197.967646][ T7956] ? create_filter_start.constprop.0+0x134/0x310 [ 197.967676][ T7956] create_filter+0x140/0x210 [ 197.967703][ T7956] ? __pfx_create_filter+0x10/0x10 [ 197.967731][ T7956] ? find_held_lock+0x2b/0x80 [ 197.967751][ T7956] apply_event_filter+0x220/0x500 [ 197.967780][ T7956] ? __pfx_apply_event_filter+0x10/0x10 [ 197.967814][ T7956] event_filter_write+0x16d/0x290 [ 197.967836][ T7956] vfs_write+0x2aa/0x1070 [ 197.967865][ T7956] ? __pfx_event_filter_write+0x10/0x10 [ 197.967888][ T7956] ? __pfx_vfs_write+0x10/0x10 [ 197.967914][ T7956] ? __fget_files+0x215/0x3d0 [ 197.967936][ T7956] ? __fget_files+0x21f/0x3d0 [ 197.967959][ T7956] ksys_write+0x12a/0x250 [ 197.967994][ T7956] ? __pfx_ksys_write+0x10/0x10 [ 197.968028][ T7956] do_syscall_64+0x106/0xf80 [ 197.968050][ T7956] ? clear_bhb_loop+0x40/0x90 [ 197.968072][ T7956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.968091][ T7956] RIP: 0033:0x7f5301b9c799 [ 197.968107][ T7956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.968124][ T7956] RSP: 002b:00007f5302a14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 197.968141][ T7956] RAX: ffffffffffffffda RBX: 00007f5301e15fa0 RCX: 00007f5301b9c799 [ 197.968153][ T7956] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 197.968163][ T7956] RBP: 00007f5301c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 197.968173][ T7956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.968188][ T7956] R13: 00007f5301e16038 R14: 00007f5301e15fa0 R15: 00007ffdcfa65968 [ 197.968212][ T7956] [ 199.186277][ T7974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.414'. [ 199.286383][ T7974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.414'. [ 199.974413][ T7996] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 200.241351][ T8004] FAULT_INJECTION: forcing a failure. [ 200.241351][ T8004] name failslab, interval 1, probability 0, space 0, times 0 [ 200.352481][ T8004] CPU: 0 UID: 0 PID: 8004 Comm: syz.4.418 Not tainted syzkaller #0 PREEMPT(full) [ 200.352510][ T8004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 200.352520][ T8004] Call Trace: [ 200.352526][ T8004] [ 200.352534][ T8004] dump_stack_lvl+0x100/0x190 [ 200.352565][ T8004] should_fail_ex.cold+0x5/0xa [ 200.352587][ T8004] should_failslab+0xc2/0x120 [ 200.352607][ T8004] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 200.352633][ T8004] ? __kernfs_new_node+0xd2/0x960 [ 200.352663][ T8004] __kernfs_new_node+0xd2/0x960 [ 200.352686][ T8004] ? kernfs_add_one+0x583/0x850 [ 200.352716][ T8004] ? __pfx___kernfs_new_node+0x10/0x10 [ 200.352746][ T8004] ? find_held_lock+0x2b/0x80 [ 200.352763][ T8004] ? kernfs_root+0xee/0x2a0 [ 200.352786][ T8004] ? kernfs_root+0xee/0x2a0 [ 200.352815][ T8004] kernfs_new_node+0x11b/0x1a0 [ 200.352847][ T8004] kernfs_create_dir_ns+0x4c/0x1a0 [ 200.352879][ T8004] internal_create_group+0x36f/0xf40 [ 200.352909][ T8004] ? __pfx_internal_create_group+0x10/0x10 [ 200.352934][ T8004] ? __pfx_internal_create_group+0x10/0x10 [ 200.352963][ T8004] ? __pfx_dev_add_physical_location+0x10/0x10 [ 200.352991][ T8004] ? bus_to_subsys+0x114/0x150 [ 200.353013][ T8004] dpm_sysfs_add+0x80/0x280 [ 200.353050][ T8004] device_add+0x9ef/0x1950 [ 200.353082][ T8004] ? __pfx_device_add+0x10/0x10 [ 200.353110][ T8004] ? lockdep_init_map_type+0x5c/0x250 [ 200.353135][ T8004] ? __init_waitqueue_head+0xca/0x150 [ 200.353167][ T8004] netdev_register_kobject+0x1a9/0x3d0 [ 200.353198][ T8004] register_netdevice+0x12e0/0x2210 [ 200.353224][ T8004] ? idr_alloc+0xdd/0x130 [ 200.353245][ T8004] ? __pfx_register_netdevice+0x10/0x10 [ 200.353266][ T8004] ? net_generic+0xea/0x2a0 [ 200.353290][ T8004] ppp_dev_configure+0x986/0xcb0 [ 200.353315][ T8004] ppp_ioctl+0x985/0x2800 [ 200.353337][ T8004] ? find_held_lock+0x2b/0x80 [ 200.353354][ T8004] ? __pfx_ppp_ioctl+0x10/0x10 [ 200.353381][ T8004] ? __fget_files+0x21f/0x3d0 [ 200.353401][ T8004] ? __pfx_ppp_ioctl+0x10/0x10 [ 200.353422][ T8004] __x64_sys_ioctl+0x18e/0x210 [ 200.353449][ T8004] do_syscall_64+0x106/0xf80 [ 200.353469][ T8004] ? clear_bhb_loop+0x40/0x90 [ 200.353492][ T8004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.353510][ T8004] RIP: 0033:0x7f80fcd9c799 [ 200.353526][ T8004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.353542][ T8004] RSP: 002b:00007f80fafac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 200.353559][ T8004] RAX: ffffffffffffffda RBX: 00007f80fd016180 RCX: 00007f80fcd9c799 [ 200.353571][ T8004] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 000000000000000e [ 200.353581][ T8004] RBP: 00007f80fce32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 200.353591][ T8004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.353601][ T8004] R13: 00007f80fd016218 R14: 00007f80fd016180 R15: 00007ffeea9dfdd8 [ 200.353623][ T8004] [ 201.518958][ T8023] netlink: 342 bytes leftover after parsing attributes in process `syz.0.424'. [ 201.901294][ T5829] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 202.178091][ T8046] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 203.661434][ T8064] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 204.337475][ T8083] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 204.556689][ T8090] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input6 [ 211.327541][ T8198] program syz.4.460 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.730724][ T8214] netlink: 12 bytes leftover after parsing attributes in process `syz.3.464'. [ 211.896431][ T5827] Bluetooth: hci3: command 0x0406 tx timeout [ 211.902504][ T5831] Bluetooth: hci0: command 0x0406 tx timeout [ 211.908887][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 213.139607][ T8240] syz.1.471 (8240): drop_caches: 0 [ 214.105619][ T8257] Invalid ELF header magic: != ELF [ 214.439354][ T8270] HfR: entered promiscuous mode [ 214.493921][ T8270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.478'. [ 214.533541][ T8270] HfR: left promiscuous mode [ 214.705226][ T8270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.478'. [ 214.788967][ T8270] netlink: 25 bytes leftover after parsing attributes in process `syz.3.478'. [ 215.541745][ T8296] NFSD: Failed to start, no listeners configured. [ 216.116967][ T8322] FAULT_INJECTION: forcing a failure. [ 216.116967][ T8322] name failslab, interval 1, probability 0, space 0, times 0 [ 216.216504][ T8322] CPU: 0 UID: 0 PID: 8322 Comm: syz.4.486 Not tainted syzkaller #0 PREEMPT(full) [ 216.216529][ T8322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 216.216540][ T8322] Call Trace: [ 216.216546][ T8322] [ 216.216553][ T8322] dump_stack_lvl+0x100/0x190 [ 216.216584][ T8322] should_fail_ex.cold+0x5/0xa [ 216.216606][ T8322] should_failslab+0xc2/0x120 [ 216.216625][ T8322] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 216.216652][ T8322] ? __d_alloc+0x34/0xa80 [ 216.216676][ T8322] __d_alloc+0x34/0xa80 [ 216.216698][ T8322] d_alloc_pseudo+0x1c/0xc0 [ 216.216723][ T8322] alloc_file_pseudo+0xcf/0x230 [ 216.216748][ T8322] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 216.216771][ T8322] ? alloc_fd+0x476/0x790 [ 216.216791][ T8322] sock_alloc_file+0x50/0x210 [ 216.216815][ T8322] __sys_socket+0x1c0/0x260 [ 216.216844][ T8322] ? __pfx___sys_socket+0x10/0x10 [ 216.216878][ T8322] __x64_sys_socket+0x72/0xb0 [ 216.216905][ T8322] ? lockdep_hardirqs_on+0x78/0x100 [ 216.216927][ T8322] do_syscall_64+0x106/0xf80 [ 216.216947][ T8322] ? clear_bhb_loop+0x40/0x90 [ 216.216970][ T8322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.216989][ T8322] RIP: 0033:0x7f80fcd9c799 [ 216.217004][ T8322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.217021][ T8322] RSP: 002b:00007f80fafee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 216.217039][ T8322] RAX: ffffffffffffffda RBX: 00007f80fd015fa0 RCX: 00007f80fcd9c799 [ 216.217055][ T8322] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002d [ 216.217065][ T8322] RBP: 00007f80fce32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 216.217075][ T8322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.217085][ T8322] R13: 00007f80fd016038 R14: 00007f80fd015fa0 R15: 00007ffeea9dfdd8 [ 216.217108][ T8322] [ 217.363485][ T8350] netlink: 350 bytes leftover after parsing attributes in process `syz.0.491'. [ 217.470512][ T8346] FAULT_INJECTION: forcing a failure. [ 217.470512][ T8346] name fail_futex, interval 1, probability 0, space 0, times 0 [ 217.621026][ T8346] CPU: 0 UID: 0 PID: 8346 Comm: syz.0.491 Not tainted syzkaller #0 PREEMPT(full) [ 217.621054][ T8346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 217.621064][ T8346] Call Trace: [ 217.621071][ T8346] [ 217.621078][ T8346] dump_stack_lvl+0x100/0x190 [ 217.621109][ T8346] should_fail_ex.cold+0x5/0xa [ 217.621127][ T8346] ? do_raw_spin_unlock+0x145/0x1e0 [ 217.621157][ T8346] get_futex_key+0x1d2/0x1620 [ 217.621181][ T8346] ? __pfx_get_futex_key+0x10/0x10 [ 217.621201][ T8346] ? fault_dirty_shared_page+0x190/0x690 [ 217.621231][ T8346] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 217.621259][ T8346] ? do_fault+0x6a4/0x1950 [ 217.621281][ T8346] futex_wake+0xea/0x530 [ 217.621307][ T8346] ? __handle_mm_fault+0x4ec/0x2b60 [ 217.621332][ T8346] ? __pfx_futex_wake+0x10/0x10 [ 217.621359][ T8346] ? __lock_acquire+0x4a5/0x2630 [ 217.621382][ T8346] ? __pfx___handle_mm_fault+0x10/0x10 [ 217.621406][ T8346] ? __pfx_css_rstat_updated+0x10/0x10 [ 217.621430][ T8346] do_futex+0x32b/0x350 [ 217.621454][ T8346] ? __pfx_do_futex+0x10/0x10 [ 217.621475][ T8346] ? find_held_lock+0x2b/0x80 [ 217.621491][ T8346] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 217.621521][ T8346] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 217.621555][ T8346] __x64_sys_futex+0x34f/0x4d0 [ 217.621581][ T8346] ? __pfx___x64_sys_futex+0x10/0x10 [ 217.621607][ T8346] ? do_user_addr_fault+0x8d6/0x12f0 [ 217.621641][ T8346] do_syscall_64+0x106/0xf80 [ 217.621662][ T8346] ? clear_bhb_loop+0x40/0x90 [ 217.621684][ T8346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.621703][ T8346] RIP: 0033:0x7f5c5a59c799 [ 217.621718][ T8346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.621736][ T8346] RSP: 002b:00007ffedd133d08 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 217.621753][ T8346] RAX: ffffffffffffffda RBX: 00000000000000f0 RCX: 00007f5c5a59c799 [ 217.621764][ T8346] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5c5a816098 [ 217.621775][ T8346] RBP: 00000000000010de R08: 0000000000000018 R09: 0000000000000000 [ 217.621785][ T8346] R10: 00007f5c5a815fa0 R11: 0000000000000246 R12: 0000000000000001 [ 217.621795][ T8346] R13: 00007f5c5a81609c R14: 00007f5c5a816098 R15: 00007f5c5a816090 [ 217.621817][ T8346] [ 218.127701][ T8360] netlink: 93 bytes leftover after parsing attributes in process `syz.0.491'. [ 218.285779][ T8359] netlink: 93 bytes leftover after parsing attributes in process `syz.0.491'. [ 219.363411][ T8387] FAULT_INJECTION: forcing a failure. [ 219.363411][ T8387] name failslab, interval 1, probability 0, space 0, times 0 [ 219.432671][ T8387] CPU: 0 UID: 0 PID: 8387 Comm: syz.1.498 Not tainted syzkaller #0 PREEMPT(full) [ 219.432698][ T8387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 219.432709][ T8387] Call Trace: [ 219.432715][ T8387] [ 219.432722][ T8387] dump_stack_lvl+0x100/0x190 [ 219.432755][ T8387] should_fail_ex.cold+0x5/0xa [ 219.432776][ T8387] should_failslab+0xc2/0x120 [ 219.432796][ T8387] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 219.432822][ T8387] ? ptlock_alloc+0x1f/0x70 [ 219.432849][ T8387] ? __pfx_filemap_map_pages+0x10/0x10 [ 219.432874][ T8387] ptlock_alloc+0x1f/0x70 [ 219.432897][ T8387] pte_alloc_one+0x84/0x3e0 [ 219.432918][ T8387] __do_fault+0x359/0x550 [ 219.432948][ T8387] ? __pfx_filemap_map_pages+0x10/0x10 [ 219.432980][ T8387] do_fault+0xaf9/0x1950 [ 219.433000][ T8387] ? __pmd_alloc+0x6aa/0x9c0 [ 219.433021][ T8387] __handle_mm_fault+0x180f/0x2b60 [ 219.433048][ T8387] ? mt_find+0x45e/0x8e0 [ 219.433073][ T8387] ? __pfx___handle_mm_fault+0x10/0x10 [ 219.433096][ T8387] ? __pfx_mt_find+0x10/0x10 [ 219.433136][ T8387] handle_mm_fault+0x36d/0xa20 [ 219.433164][ T8387] __get_user_pages+0xf9c/0x34d0 [ 219.433192][ T8387] ? __pfx___get_user_pages+0x10/0x10 [ 219.433218][ T8387] populate_vma_page_range+0x267/0x3f0 [ 219.433240][ T8387] ? __pfx_populate_vma_page_range+0x10/0x10 [ 219.433260][ T8387] ? __pfx_find_vma_intersection+0x10/0x10 [ 219.433280][ T8387] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 219.433309][ T8387] __mm_populate+0x107/0x3a0 [ 219.433331][ T8387] ? __pfx___mm_populate+0x10/0x10 [ 219.433353][ T8387] ? up_write+0x290/0x4f0 [ 219.433380][ T8387] do_mlock+0x3f0/0x7f0 [ 219.433408][ T8387] ? __pfx_do_mlock+0x10/0x10 [ 219.433431][ T8387] ? __x64_sys_futex+0x34f/0x4d0 [ 219.433453][ T8387] ? __x64_sys_futex+0x358/0x4d0 [ 219.433477][ T8387] ? xfd_validate_state+0x129/0x190 [ 219.433509][ T8387] __x64_sys_mlock+0x59/0x80 [ 219.433535][ T8387] do_syscall_64+0x106/0xf80 [ 219.433555][ T8387] ? clear_bhb_loop+0x40/0x90 [ 219.433577][ T8387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.433595][ T8387] RIP: 0033:0x7f5531d9c799 [ 219.433611][ T8387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.433627][ T8387] RSP: 002b:00007f552fff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 219.433644][ T8387] RAX: ffffffffffffffda RBX: 00007f5532016090 RCX: 00007f5531d9c799 [ 219.433656][ T8387] RDX: 0000000000000000 RSI: 0000000000080006 RDI: 0000000000000112 [ 219.433666][ T8387] RBP: 00007f5531e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 219.433681][ T8387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.433691][ T8387] R13: 00007f5532016128 R14: 00007f5532016090 R15: 00007ffe667e5ff8 [ 219.433714][ T8387] [ 220.664028][ T8408] netlink: 342 bytes leftover after parsing attributes in process `syz.1.502'. [ 222.192815][ T8433] sg_write: process 225 (syz.4.507) changed security contexts after opening file descriptor, this is not allowed. [ 222.518703][ T8437] netlink: 28 bytes leftover after parsing attributes in process `syz.0.508'. [ 222.653309][ T8444] FAULT_INJECTION: forcing a failure. [ 222.653309][ T8444] name fail_futex, interval 1, probability 0, space 0, times 0 [ 222.697926][ T8444] CPU: 0 UID: 0 PID: 8444 Comm: syz.4.511 Not tainted syzkaller #0 PREEMPT(full) [ 222.697954][ T8444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 222.697965][ T8444] Call Trace: [ 222.697971][ T8444] [ 222.697978][ T8444] dump_stack_lvl+0x100/0x190 [ 222.698019][ T8444] should_fail_ex.cold+0x5/0xa [ 222.698041][ T8444] get_futex_key+0x1d2/0x1620 [ 222.698065][ T8444] ? __pfx_get_futex_key+0x10/0x10 [ 222.698094][ T8444] futex_wait_setup+0x83/0x510 [ 222.698127][ T8444] __futex_wait+0x19f/0x300 [ 222.698157][ T8444] ? __pfx___futex_wait+0x10/0x10 [ 222.698188][ T8444] ? __pfx_futex_wake_mark+0x10/0x10 [ 222.698223][ T8444] ? __hrtimer_setup+0x178/0x280 [ 222.698250][ T8444] ? ktime_add_safe+0x60/0x70 [ 222.698275][ T8444] futex_wait+0xed/0x380 [ 222.698303][ T8444] ? __pfx_futex_wait+0x10/0x10 [ 222.698329][ T8444] ? __lock_acquire+0x4a5/0x2630 [ 222.698354][ T8444] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 222.698385][ T8444] do_futex+0x1ef/0x350 [ 222.698409][ T8444] ? __pfx_do_futex+0x10/0x10 [ 222.698431][ T8444] ? ktime_get+0x200/0x300 [ 222.698453][ T8444] ? lockdep_hardirqs_on+0x78/0x100 [ 222.698479][ T8444] ? read_tsc+0x9/0x20 [ 222.698502][ T8444] __x64_sys_futex+0x34f/0x4d0 [ 222.698529][ T8444] ? __pfx___x64_sys_futex+0x10/0x10 [ 222.698560][ T8444] do_syscall_64+0x106/0xf80 [ 222.698581][ T8444] ? clear_bhb_loop+0x40/0x90 [ 222.698603][ T8444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.698622][ T8444] RIP: 0033:0x7f80fcd9c799 [ 222.698638][ T8444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.698659][ T8444] RSP: 002b:00007ffeea9dff38 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 222.698677][ T8444] RAX: ffffffffffffffda RBX: 000000000003656d RCX: 00007f80fcd9c799 [ 222.698688][ T8444] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f80fd015fac [ 222.698699][ T8444] RBP: 0000000000000032 R08: 0000000000000000 R09: 0000000000000000 [ 222.698709][ T8444] R10: 00007ffeea9e0040 R11: 0000000000000246 R12: 00007ffeea9e0060 [ 222.698719][ T8444] R13: 00007f80fd015fac R14: 000000000003659f R15: 00007ffeea9e0040 [ 222.698741][ T8444] [ 224.896691][ T51] Bluetooth: hci3: unexpected event 0x1c length: 725 > 5 [ 225.832749][ T8504] blktrace: Concurrent blktraces are not allowed on loop2 [ 226.074295][ T8509] netlink: 330 bytes leftover after parsing attributes in process `syz.4.520'. [ 227.343256][ T8543] FAULT_INJECTION: forcing a failure. [ 227.343256][ T8543] name failslab, interval 1, probability 0, space 0, times 0 [ 227.477568][ T8543] CPU: 0 UID: 0 PID: 8543 Comm: syz.3.524 Not tainted syzkaller #0 PREEMPT(full) [ 227.477594][ T8543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 227.477605][ T8543] Call Trace: [ 227.477612][ T8543] [ 227.477619][ T8543] dump_stack_lvl+0x100/0x190 [ 227.477651][ T8543] should_fail_ex.cold+0x5/0xa [ 227.477671][ T8543] ? __vb2_queue_alloc+0x23e/0x1160 [ 227.477698][ T8543] should_failslab+0xc2/0x120 [ 227.477718][ T8543] __kmalloc_noprof+0xe0/0x850 [ 227.477745][ T8543] ? bitmap_find_next_zero_area_off+0xb4/0xd0 [ 227.477772][ T8543] __vb2_queue_alloc+0x23e/0x1160 [ 227.477809][ T8543] vb2_core_reqbufs+0x899/0xf30 [ 227.477840][ T8543] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 227.477879][ T8543] __vb2_init_fileio+0x32d/0x1000 [ 227.477904][ T8543] ? lockdep_hardirqs_on+0x78/0x100 [ 227.477928][ T8543] ? __pollwait+0x276/0x470 [ 227.477956][ T8543] vb2_core_poll+0x611/0x740 [ 227.477991][ T8543] vb2_poll+0x4b/0xe0 [ 227.478015][ T8543] vb2_fop_poll+0x10e/0x350 [ 227.478041][ T8543] ? __pfx_vb2_fop_poll+0x10/0x10 [ 227.478065][ T8543] v4l2_poll+0x15f/0x220 [ 227.478088][ T8543] ? __pfx_v4l2_poll+0x10/0x10 [ 227.478110][ T8543] do_sys_poll+0x6e5/0xeb0 [ 227.478144][ T8543] ? __pfx_do_sys_poll+0x10/0x10 [ 227.478191][ T8543] ? __futex_wait+0x256/0x300 [ 227.478222][ T8543] ? __pfx___pollwait+0x10/0x10 [ 227.478251][ T8543] ? __pfx_pollwake+0x10/0x10 [ 227.478309][ T8543] ? ktime_get_ts64+0x2d2/0x3f0 [ 227.478329][ T8543] ? read_tsc+0x9/0x20 [ 227.478348][ T8543] ? ktime_get_ts64+0x256/0x3f0 [ 227.478369][ T8543] ? poll_select_set_timeout+0xcc/0x160 [ 227.478395][ T8543] ? __x64_sys_futex+0x358/0x4d0 [ 227.478420][ T8543] __x64_sys_poll+0x1b3/0x420 [ 227.478448][ T8543] ? __pfx___x64_sys_poll+0x10/0x10 [ 227.478483][ T8543] do_syscall_64+0x106/0xf80 [ 227.478503][ T8543] ? clear_bhb_loop+0x40/0x90 [ 227.478525][ T8543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.478544][ T8543] RIP: 0033:0x7f5301b9c799 [ 227.478560][ T8543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.478576][ T8543] RSP: 002b:00007f53029f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 227.478598][ T8543] RAX: ffffffffffffffda RBX: 00007f5301e16090 RCX: 00007f5301b9c799 [ 227.478610][ T8543] RDX: 0000000000000008 RSI: 0000000000000003 RDI: 0000200000000480 [ 227.478620][ T8543] RBP: 00007f5301c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 227.478630][ T8543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.478640][ T8543] R13: 00007f5301e16128 R14: 00007f5301e16090 R15: 00007ffdcfa65968 [ 227.478663][ T8543] [ 229.263816][ T8582] netlink: 330 bytes leftover after parsing attributes in process `syz.1.532'. [ 229.287418][ T8589] netlink: 12 bytes leftover after parsing attributes in process `syz.4.533'. [ 229.354067][ T8589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.533'. [ 230.137168][ T8615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.537'. [ 232.207180][ T8654] zswap: compressor not available [ 235.311260][ T8748] FAULT_INJECTION: forcing a failure. [ 235.311260][ T8748] name failslab, interval 1, probability 0, space 0, times 0 [ 235.368280][ T8748] CPU: 0 UID: 0 PID: 8748 Comm: syz.4.555 Not tainted syzkaller #0 PREEMPT(full) [ 235.368306][ T8748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 235.368316][ T8748] Call Trace: [ 235.368323][ T8748] [ 235.368329][ T8748] dump_stack_lvl+0x100/0x190 [ 235.368373][ T8748] should_fail_ex.cold+0x5/0xa [ 235.368394][ T8748] ? tomoyo_realpath_from_path+0xb6/0x690 [ 235.368415][ T8748] should_failslab+0xc2/0x120 [ 235.368434][ T8748] __kmalloc_noprof+0xe0/0x850 [ 235.368467][ T8748] tomoyo_realpath_from_path+0xb6/0x690 [ 235.368493][ T8748] tomoyo_path_number_perm+0x23c/0x580 [ 235.368521][ T8748] ? tomoyo_path_number_perm+0x22e/0x580 [ 235.368551][ T8748] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 235.368607][ T8748] ? find_held_lock+0x2b/0x80 [ 235.368624][ T8748] ? __fget_files+0x215/0x3d0 [ 235.368639][ T8748] ? hook_file_ioctl_common+0x146/0x410 [ 235.368673][ T8748] ? __fget_files+0x21f/0x3d0 [ 235.368693][ T8748] security_file_ioctl+0xd3/0x230 [ 235.368724][ T8748] __x64_sys_ioctl+0xb7/0x210 [ 235.368751][ T8748] do_syscall_64+0x106/0xf80 [ 235.368772][ T8748] ? clear_bhb_loop+0x40/0x90 [ 235.368795][ T8748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.368814][ T8748] RIP: 0033:0x7f80fcd9c799 [ 235.368829][ T8748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.368846][ T8748] RSP: 002b:00007f80fafcd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 235.368864][ T8748] RAX: ffffffffffffffda RBX: 00007f80fd016090 RCX: 00007f80fcd9c799 [ 235.368876][ T8748] RDX: 0000000000000024 RSI: 00000000000089f1 RDI: 0000000000000004 [ 235.368886][ T8748] RBP: 00007f80fafcd090 R08: 0000000000000000 R09: 0000000000000000 [ 235.368896][ T8748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.368906][ T8748] R13: 00007f80fd016128 R14: 00007f80fd016090 R15: 00007ffeea9dfdd8 [ 235.368929][ T8748] [ 235.371238][ T8748] ERROR: Out of memory at tomoyo_realpath_from_path. [ 235.657817][ T30] audit: type=1800 audit(4294967356.775:4): pid=8726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.552" name="features" dev="configfs" ino=24170 res=0 errno=0 [ 236.543757][ T8770] futex_wake_op: syz.4.560 tries to shift op by -2048; fix this program [ 236.580300][ T8770] futex_wake_op: syz.4.560 tries to shift op by -2048; fix this program [ 236.633697][ T8770] 0x000000000001-0x000000020000 : "" [ 236.702981][ T8770] ftl_cs: FTL header corrupt! [ 238.220965][ T8799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.567'. [ 238.264721][ T8799] netlink: 25 bytes leftover after parsing attributes in process `syz.4.567'. [ 239.405760][ T8825] binder: 8816:8825 ioctl c0e85667 38 returned -22 [ 240.022183][ T8823] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 240.053978][ T8823] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 240.150586][ T8823] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 240.156579][ T8823] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 240.288293][ T8823] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 240.314714][ T8823] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 240.355902][ T8823] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 240.375688][ T8823] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 240.412326][ T8823] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 240.709230][ T8846] input: f¬ as /devices/virtual/input/input9 [ 241.353554][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 241.412353][ T8871] netlink: 346 bytes leftover after parsing attributes in process `syz.4.584'. [ 241.456928][ T8871] bond0: option packets_per_slave: invalid value ( Xµn‘pæ) [ 241.485565][ T8871] bond0: option packets_per_slave: allowed values 0 - 65535 [ 241.531838][ T8867] Invalid ELF header magic: != ELF [ 241.861948][ T8881] netlink: 122 bytes leftover after parsing attributes in process `syz.4.586'. [ 241.896347][ T8881] ima: policy update failed [ 241.907528][ T30] audit: type=1802 audit(4294967363.051:5): pid=8881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.586" res=0 errno=0 [ 242.136181][ T30] audit: type=1800 audit(4294967363.281:6): pid=8886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.587" name="dbroot" dev="configfs" ino=24922 res=0 errno=0 [ 242.230301][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 242.269205][ T8886] tipc: Started in network mode [ 242.275596][ T8886] tipc: Node identity ffffffff, cluster identity 4711 [ 242.290333][ T8886] tipc: Node number set to 4294967295 [ 242.310870][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 242.390237][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 243.172062][ T8908] netlink: 'syz.3.592': attribute type 23 has an invalid length. [ 243.431963][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 243.772469][ T8925] netlink: 28 bytes leftover after parsing attributes in process `syz.4.595'. [ 243.902529][ T8925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.156971][ T8925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.311161][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 244.392095][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 244.471370][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 246.420367][ T8969] bond0: option mode: unable to set because the bond device is up [ 246.555251][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 248.009164][ T8996] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 251.122582][ T9059] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 251.914988][ T51] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 254.912295][ T9129] QAT: Invalid ioctl 21531 [ 255.024712][ T9129] FAULT_INJECTION: forcing a failure. [ 255.024712][ T9129] name failslab, interval 1, probability 0, space 0, times 0 [ 255.098348][ T9129] CPU: 0 UID: 0 PID: 9129 Comm: syz.4.640 Not tainted syzkaller #0 PREEMPT(full) [ 255.098376][ T9129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 255.098386][ T9129] Call Trace: [ 255.098392][ T9129] [ 255.098400][ T9129] dump_stack_lvl+0x100/0x190 [ 255.098432][ T9129] should_fail_ex.cold+0x5/0xa [ 255.098454][ T9129] ? constrain_params_by_rules+0x175/0xcc0 [ 255.098473][ T9129] should_failslab+0xc2/0x120 [ 255.098493][ T9129] __kmalloc_noprof+0xe0/0x850 [ 255.098519][ T9129] ? lockdep_hardirqs_on+0x78/0x100 [ 255.098544][ T9129] constrain_params_by_rules+0x175/0xcc0 [ 255.098574][ T9129] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 255.098598][ T9129] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 255.098627][ T9129] ? snd_interval_refine+0x2d0/0x580 [ 255.098653][ T9129] snd_pcm_hw_refine+0x7e7/0xad0 [ 255.098676][ T9129] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 255.098699][ T9129] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 255.098722][ T9129] ? snd_pcm_hw_param_value+0x27b/0x5b0 [ 255.098751][ T9129] snd_pcm_hw_param_first+0x2b0/0x680 [ 255.098784][ T9129] snd_pcm_hw_params+0x496/0x1cb0 [ 255.098809][ T9129] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 255.098830][ T9129] ? snd_pcm_hw_param_near.constprop.0+0x578/0x850 [ 255.098862][ T9129] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 255.098895][ T9129] snd_pcm_kernel_ioctl+0x167/0x2e0 [ 255.098916][ T9129] snd_pcm_oss_change_params_locked+0x1973/0x39f0 [ 255.098956][ T9129] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 255.098987][ T9129] ? __pfx___mutex_lock+0x10/0x10 [ 255.099022][ T9129] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 255.099052][ T9129] snd_pcm_oss_sync+0x265/0x840 [ 255.099084][ T9129] snd_pcm_oss_release+0x238/0x300 [ 255.099112][ T9129] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 255.099140][ T9129] __fput+0x3ff/0xb40 [ 255.099166][ T9129] task_work_run+0x150/0x240 [ 255.099193][ T9129] ? __pfx_task_work_run+0x10/0x10 [ 255.099224][ T9129] exit_to_user_mode_loop+0x100/0x4a0 [ 255.099250][ T9129] do_syscall_64+0x668/0xf80 [ 255.099270][ T9129] ? clear_bhb_loop+0x40/0x90 [ 255.099301][ T9129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.099319][ T9129] RIP: 0033:0x7f80fcd9c799 [ 255.099336][ T9129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.099353][ T9129] RSP: 002b:00007f80fafee028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 255.099371][ T9129] RAX: 0000000000000000 RBX: 00007f80fd015fa0 RCX: 00007f80fcd9c799 [ 255.099382][ T9129] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 255.099392][ T9129] RBP: 00007f80fce32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 255.099402][ T9129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.099413][ T9129] R13: 00007f80fd016038 R14: 00007f80fd015fa0 R15: 00007ffeea9dfdd8 [ 255.099436][ T9129] [ 255.925434][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.932036][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.807576][ T9162] FAULT_INJECTION: forcing a failure. [ 256.807576][ T9162] name failslab, interval 1, probability 0, space 0, times 0 [ 256.849853][ T9162] CPU: 0 UID: 0 PID: 9162 Comm: syz.4.647 Not tainted syzkaller #0 PREEMPT(full) [ 256.849880][ T9162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 256.849891][ T9162] Call Trace: [ 256.849898][ T9162] [ 256.849905][ T9162] dump_stack_lvl+0x100/0x190 [ 256.849936][ T9162] should_fail_ex.cold+0x5/0xa [ 256.849957][ T9162] should_failslab+0xc2/0x120 [ 256.849977][ T9162] __kmalloc_cache_noprof+0x7a/0x6f0 [ 256.850000][ T9162] ? __vb2_init_fileio+0x18f/0x1000 [ 256.850034][ T9162] __vb2_init_fileio+0x18f/0x1000 [ 256.850069][ T9162] ? lockdep_hardirqs_on+0x78/0x100 [ 256.850091][ T9162] ? __pollwait+0x276/0x470 [ 256.850120][ T9162] vb2_core_poll+0x611/0x740 [ 256.850150][ T9162] vb2_poll+0x4b/0xe0 [ 256.850175][ T9162] vb2_fop_poll+0x10e/0x350 [ 256.850201][ T9162] ? __pfx_vb2_fop_poll+0x10/0x10 [ 256.850224][ T9162] v4l2_poll+0x15f/0x220 [ 256.850247][ T9162] ? __pfx_v4l2_poll+0x10/0x10 [ 256.850270][ T9162] do_sys_poll+0x6e5/0xeb0 [ 256.850305][ T9162] ? __pfx_do_sys_poll+0x10/0x10 [ 256.850350][ T9162] ? __futex_wait+0x256/0x300 [ 256.850379][ T9162] ? __pfx___pollwait+0x10/0x10 [ 256.850408][ T9162] ? __pfx_pollwake+0x10/0x10 [ 256.850467][ T9162] ? ktime_get_ts64+0x2d2/0x3f0 [ 256.850487][ T9162] ? read_tsc+0x9/0x20 [ 256.850506][ T9162] ? ktime_get_ts64+0x256/0x3f0 [ 256.850527][ T9162] ? poll_select_set_timeout+0xcc/0x160 [ 256.850553][ T9162] ? __x64_sys_futex+0x358/0x4d0 [ 256.850578][ T9162] __x64_sys_poll+0x1b3/0x420 [ 256.850607][ T9162] ? __pfx___x64_sys_poll+0x10/0x10 [ 256.850641][ T9162] do_syscall_64+0x106/0xf80 [ 256.850661][ T9162] ? clear_bhb_loop+0x40/0x90 [ 256.850683][ T9162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.850701][ T9162] RIP: 0033:0x7f80fcd9c799 [ 256.850716][ T9162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.850732][ T9162] RSP: 002b:00007f80fafee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 256.850750][ T9162] RAX: ffffffffffffffda RBX: 00007f80fd015fa0 RCX: 00007f80fcd9c799 [ 256.850761][ T9162] RDX: 0000000000000007 RSI: 0000000000000003 RDI: 0000200000000480 [ 256.850771][ T9162] RBP: 00007f80fce32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 256.850781][ T9162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.850791][ T9162] R13: 00007f80fd016038 R14: 00007f80fd015fa0 R15: 00007ffeea9dfdd8 [ 256.850813][ T9162] [ 257.550189][ T9169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.649'. [ 257.588410][ T9169] netlink: 'syz.0.649': attribute type 1 has an invalid length. [ 257.719040][ T9173] FAULT_INJECTION: forcing a failure. [ 257.719040][ T9173] name failslab, interval 1, probability 0, space 0, times 0 [ 257.843947][ T9173] CPU: 0 UID: 0 PID: 9173 Comm: syz.1.648 Not tainted syzkaller #0 PREEMPT(full) [ 257.843974][ T9173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 257.843985][ T9173] Call Trace: [ 257.843991][ T9173] [ 257.843998][ T9173] dump_stack_lvl+0x100/0x190 [ 257.844030][ T9173] should_fail_ex.cold+0x5/0xa [ 257.844061][ T9173] should_failslab+0xc2/0x120 [ 257.844080][ T9173] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 257.844107][ T9173] ? proc_alloc_inode+0x25/0x200 [ 257.844132][ T9173] ? d_alloc_parallel+0x864/0x14e0 [ 257.844160][ T9173] ? __pfx_proc_alloc_inode+0x10/0x10 [ 257.844187][ T9173] proc_alloc_inode+0x25/0x200 [ 257.844212][ T9173] alloc_inode+0x68/0x250 [ 257.844235][ T9173] new_inode+0x22/0x1c0 [ 257.844260][ T9173] proc_get_inode+0x1d/0x780 [ 257.844287][ T9173] proc_lookup_de+0x236/0x360 [ 257.844318][ T9173] proc_lookup+0xcf/0x110 [ 257.844347][ T9173] lookup_open.isra.0+0x631/0x11b0 [ 257.844377][ T9173] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 257.844417][ T9173] ? lookup_fast+0x2da/0x600 [ 257.844444][ T9173] path_openat+0xa98/0x31a0 [ 257.844469][ T9173] ? __pfx_path_openat+0x10/0x10 [ 257.844495][ T9173] do_file_open+0x20e/0x430 [ 257.844515][ T9173] ? __pfx_do_file_open+0x10/0x10 [ 257.844540][ T9173] ? __pfx_kfree_link+0x10/0x10 [ 257.844571][ T9173] ? alloc_fd+0x476/0x790 [ 257.844590][ T9173] ? do_getname+0x191/0x390 [ 257.844613][ T9173] do_sys_openat2+0x10d/0x1e0 [ 257.844636][ T9173] ? __pfx_do_sys_openat2+0x10/0x10 [ 257.844661][ T9173] ? __fget_files+0x21f/0x3d0 [ 257.844681][ T9173] __x64_sys_openat+0x12d/0x210 [ 257.844705][ T9173] ? __pfx___x64_sys_openat+0x10/0x10 [ 257.844737][ T9173] do_syscall_64+0x106/0xf80 [ 257.844757][ T9173] ? clear_bhb_loop+0x40/0x90 [ 257.844780][ T9173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.844798][ T9173] RIP: 0033:0x7f5531d9c799 [ 257.844813][ T9173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.844829][ T9173] RSP: 002b:00007f552fff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 257.844847][ T9173] RAX: ffffffffffffffda RBX: 00007f5532016090 RCX: 00007f5531d9c799 [ 257.844858][ T9173] RDX: 00000000000c0000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 257.844869][ T9173] RBP: 00007f5531e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 257.844880][ T9173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.844890][ T9173] R13: 00007f5532016128 R14: 00007f5532016090 R15: 00007ffe667e5ff8 [ 257.844913][ T9173] [ 259.895085][ T9192] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 259.911675][ T9194] netlink: 40 bytes leftover after parsing attributes in process `syz.3.657'. [ 260.520029][ T9205] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 260.705790][ T9203] ima: policy update failed [ 260.706151][ T30] audit: type=1802 audit(4294967381.842:7): pid=9203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.661" res=0 errno=0 [ 261.443950][ T9219] input: f¬ as /devices/virtual/input/input10 [ 263.761685][ T9264] FAULT_INJECTION: forcing a failure. [ 263.761685][ T9264] name fail_futex, interval 1, probability 0, space 0, times 0 [ 263.841924][ T9264] CPU: 0 UID: 0 PID: 9264 Comm: syz.1.675 Not tainted syzkaller #0 PREEMPT(full) [ 263.841960][ T9264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 263.841971][ T9264] Call Trace: [ 263.841977][ T9264] [ 263.841984][ T9264] dump_stack_lvl+0x100/0x190 [ 263.842016][ T9264] should_fail_ex.cold+0x5/0xa [ 263.842038][ T9264] get_futex_key+0x1d2/0x1620 [ 263.842063][ T9264] ? __pfx_get_futex_key+0x10/0x10 [ 263.842083][ T9264] ? futex_hash+0x2c5/0x380 [ 263.842105][ T9264] ? __lock_acquire+0x4a5/0x2630 [ 263.842131][ T9264] futex_wake+0xea/0x530 [ 263.842159][ T9264] ? __pfx_futex_wake+0x10/0x10 [ 263.842189][ T9264] ? __fget_files+0x215/0x3d0 [ 263.842211][ T9264] do_futex+0x32b/0x350 [ 263.842234][ T9264] ? __pfx_do_futex+0x10/0x10 [ 263.842257][ T9264] ? fdget+0x18b/0x210 [ 263.842272][ T9264] ? __sys_sendmsg+0x18f/0x220 [ 263.842295][ T9264] __x64_sys_futex+0x34f/0x4d0 [ 263.842321][ T9264] ? __pfx___x64_sys_futex+0x10/0x10 [ 263.842353][ T9264] do_syscall_64+0x106/0xf80 [ 263.842373][ T9264] ? clear_bhb_loop+0x40/0x90 [ 263.842395][ T9264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.842414][ T9264] RIP: 0033:0x7f5531d9c799 [ 263.842429][ T9264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.842446][ T9264] RSP: 002b:00007f5532b8a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 263.842463][ T9264] RAX: ffffffffffffffda RBX: 00007f5532015fa8 RCX: 00007f5531d9c799 [ 263.842475][ T9264] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5532015fac [ 263.842486][ T9264] RBP: 00007f5532015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 263.842496][ T9264] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 263.842506][ T9264] R13: 00007f5532016038 R14: 00007ffe667e5f10 R15: 00007ffe667e5ff8 [ 263.842528][ T9264] [ 264.357611][ T9267] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 264.393615][ T9268] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 264.441696][ T9276] netlink: 'syz.1.679': attribute type 10 has an invalid length. [ 264.549173][ T9276] netlink: 230 bytes leftover after parsing attributes in process `syz.1.679'. [ 265.061208][ T9276] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 266.088374][ T9313] netlink: 342 bytes leftover after parsing attributes in process `syz.1.685'. [ 266.238703][ T9315] netlink: 342 bytes leftover after parsing attributes in process `syz.1.685'. [ 266.407410][ T9323] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 267.938364][ T9364] rtc_cmos 00:00: Alarms can be up to one day in the future [ 268.059767][ T979] rtc_cmos 00:00: Alarms can be up to one day in the future [ 268.103379][ T979] rtc_cmos 00:00: Alarms can be up to one day in the future [ 268.142782][ T979] rtc_cmos 00:00: Alarms can be up to one day in the future [ 268.203743][ T979] rtc_cmos 00:00: Alarms can be up to one day in the future [ 268.252148][ T979] rtc rtc0: __rtc_set_alarm: err=-22 [ 268.950262][ T9385] netlink: 'syz.0.696': attribute type 16 has an invalid length. [ 269.004344][ T9385] netlink: 50 bytes leftover after parsing attributes in process `syz.0.696'. [ 269.081470][ T9385] netlink: 'syz.0.696': attribute type 16 has an invalid length. [ 269.114568][ T9385] netlink: 50 bytes leftover after parsing attributes in process `syz.0.696'. [ 269.338898][ T9393] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 271.857823][ T9434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.706'. [ 272.113490][ T9443] ceph: Failed to parse sending metrics switch value '' [ 272.491429][ T9432] FAULT_INJECTION: forcing a failure. [ 272.491429][ T9432] name failslab, interval 1, probability 0, space 0, times 0 [ 272.797519][ T9432] CPU: 0 UID: 0 PID: 9432 Comm: syz.3.707 Not tainted syzkaller #0 PREEMPT(full) [ 272.797546][ T9432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 272.797557][ T9432] Call Trace: [ 272.797563][ T9432] [ 272.797571][ T9432] dump_stack_lvl+0x100/0x190 [ 272.797604][ T9432] should_fail_ex.cold+0x5/0xa [ 272.797626][ T9432] should_failslab+0xc2/0x120 [ 272.797645][ T9432] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 272.797671][ T9432] ? __proc_create+0x2cb/0x8c0 [ 272.797703][ T9432] __proc_create+0x2cb/0x8c0 [ 272.797732][ T9432] ? __pfx___proc_create+0x10/0x10 [ 272.797764][ T9432] ? mark_held_locks+0x40/0x70 [ 272.797788][ T9432] _proc_mkdir+0xb9/0x210 [ 272.797817][ T9432] ? __pfx__proc_mkdir+0x10/0x10 [ 272.797843][ T9432] ? sctp_defaults_init+0x720/0xd90 [ 272.797871][ T9432] sctp_proc_init+0x59/0x270 [ 272.797892][ T9432] ? __pfx_sctp_defaults_init+0x10/0x10 [ 272.797912][ T9432] sctp_defaults_init+0x758/0xd90 [ 272.797933][ T9432] ? __pfx_sctp_defaults_init+0x10/0x10 [ 272.797954][ T9432] ops_init+0x1e2/0x5f0 [ 272.797980][ T9432] setup_net+0x118/0x3a0 [ 272.798011][ T9432] ? __pfx_setup_net+0x10/0x10 [ 272.798031][ T9432] ? lockdep_init_map_type+0x5c/0x250 [ 272.798055][ T9432] ? mutex_init_lockep+0x110/0x150 [ 272.798083][ T9432] copy_net_ns+0x46f/0x7c0 [ 272.798110][ T9432] create_new_namespaces+0x3ea/0xac0 [ 272.798134][ T9432] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 272.798156][ T9432] ksys_unshare+0x473/0xad0 [ 272.798180][ T9432] ? __pfx_ksys_unshare+0x10/0x10 [ 272.798211][ T9432] __x64_sys_unshare+0x31/0x40 [ 272.798238][ T9432] do_syscall_64+0x106/0xf80 [ 272.798259][ T9432] ? clear_bhb_loop+0x40/0x90 [ 272.798281][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.798299][ T9432] RIP: 0033:0x7f5301b9c799 [ 272.798315][ T9432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.798336][ T9432] RSP: 002b:00007f5302a14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 272.798359][ T9432] RAX: ffffffffffffffda RBX: 00007f5301e15fa0 RCX: 00007f5301b9c799 [ 272.798372][ T9432] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 272.798387][ T9432] RBP: 00007f5301c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 272.798399][ T9432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.798410][ T9432] R13: 00007f5301e16038 R14: 00007f5301e15fa0 R15: 00007ffdcfa65968 [ 272.798440][ T9432] [ 275.011489][ T9490] FAULT_INJECTION: forcing a failure. [ 275.011489][ T9490] name failslab, interval 1, probability 0, space 0, times 0 [ 275.131614][ T9490] CPU: 0 UID: 0 PID: 9490 Comm: syz.3.714 Not tainted syzkaller #0 PREEMPT(full) [ 275.131641][ T9490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 275.131653][ T9490] Call Trace: [ 275.131660][ T9490] [ 275.131667][ T9490] dump_stack_lvl+0x100/0x190 [ 275.131698][ T9490] should_fail_ex.cold+0x5/0xa [ 275.131720][ T9490] ? lsm_blob_alloc+0x68/0x90 [ 275.131742][ T9490] should_failslab+0xc2/0x120 [ 275.131760][ T9490] __kmalloc_noprof+0xe0/0x850 [ 275.131786][ T9490] ? trace_kmem_cache_alloc+0xf3/0x120 [ 275.131810][ T9490] lsm_blob_alloc+0x68/0x90 [ 275.131833][ T9490] security_sk_alloc+0x2d/0x290 [ 275.131859][ T9490] sk_prot_alloc+0x1d1/0x2a0 [ 275.131888][ T9490] sk_alloc+0x36/0xe80 [ 275.131907][ T9490] unix_create1+0xa6/0x700 [ 275.131934][ T9490] unix_create+0x145/0x270 [ 275.131958][ T9490] __sock_create+0x339/0x860 [ 275.131989][ T9490] __sys_socketpair+0x261/0x5b0 [ 275.132019][ T9490] ? __pfx___sys_socketpair+0x10/0x10 [ 275.132048][ T9490] ? xfd_validate_state+0x129/0x190 [ 275.132080][ T9490] __x64_sys_socketpair+0x96/0x100 [ 275.132109][ T9490] ? lockdep_hardirqs_on+0x78/0x100 [ 275.132131][ T9490] do_syscall_64+0x106/0xf80 [ 275.132151][ T9490] ? clear_bhb_loop+0x40/0x90 [ 275.132173][ T9490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.132192][ T9490] RIP: 0033:0x7f5301b9c799 [ 275.132208][ T9490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.132225][ T9490] RSP: 002b:00007f53029f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 275.132243][ T9490] RAX: ffffffffffffffda RBX: 00007f5301e16090 RCX: 00007f5301b9c799 [ 275.132256][ T9490] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 275.132266][ T9490] RBP: 00007f5301c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 275.132277][ T9490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.132288][ T9490] R13: 00007f5301e16128 R14: 00007f5301e16090 R15: 00007ffdcfa65968 [ 275.132318][ T9490] [ 275.770800][ T9496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.716'. [ 275.811305][ T9496] netlink: 25 bytes leftover after parsing attributes in process `syz.1.716'. [ 276.291903][ T9510] kafs: addr_prefs: Invalid Command [ 276.382363][ T9513] FAULT_INJECTION: forcing a failure. [ 276.382363][ T9513] name failslab, interval 1, probability 0, space 0, times 0 [ 276.494836][ T9513] CPU: 0 UID: 0 PID: 9513 Comm: syz.0.718 Not tainted syzkaller #0 PREEMPT(full) [ 276.494864][ T9513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 276.494875][ T9513] Call Trace: [ 276.494881][ T9513] [ 276.494888][ T9513] dump_stack_lvl+0x100/0x190 [ 276.494959][ T9513] should_fail_ex.cold+0x5/0xa [ 276.494982][ T9513] should_failslab+0xc2/0x120 [ 276.495001][ T9513] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 276.495029][ T9513] ? mas_alloc_nodes+0x280/0x390 [ 276.495051][ T9513] mas_alloc_nodes+0x280/0x390 [ 276.495073][ T9513] mas_preallocate+0x39c/0xf10 [ 276.495095][ T9513] ? __memcg_slab_post_alloc_hook+0x420/0x9a0 [ 276.495120][ T9513] ? __pfx_mas_preallocate+0x10/0x10 [ 276.495149][ T9513] ? anon_vma_name+0x5a/0x250 [ 276.495174][ T9513] __split_vma+0x33d/0xd90 [ 276.495201][ T9513] ? __pfx___split_vma+0x10/0x10 [ 276.495231][ T9513] ? __pfx_mas_prev+0x10/0x10 [ 276.495259][ T9513] vms_gather_munmap_vmas+0x39f/0x1500 [ 276.495286][ T9513] ? validate_mm+0x261/0x4e0 [ 276.495307][ T9513] ? validate_mm+0x261/0x4e0 [ 276.495332][ T9513] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 276.495359][ T9513] ? validate_mm+0x392/0x4e0 [ 276.495385][ T9513] ? __pfx_validate_mm+0x10/0x10 [ 276.495414][ T9513] do_vmi_align_munmap+0x287/0x5f0 [ 276.495442][ T9513] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 276.495498][ T9513] do_vmi_munmap+0x1f8/0x3e0 [ 276.495526][ T9513] __vm_munmap+0x196/0x390 [ 276.495554][ T9513] ? __pfx___vm_munmap+0x10/0x10 [ 276.495589][ T9513] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 276.495616][ T9513] __x64_sys_munmap+0x59/0x80 [ 276.495637][ T9513] do_syscall_64+0x106/0xf80 [ 276.495657][ T9513] ? clear_bhb_loop+0x40/0x90 [ 276.495679][ T9513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.495698][ T9513] RIP: 0033:0x7f5c5a59c5c7 [ 276.495714][ T9513] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.495730][ T9513] RSP: 002b:00007f5c5b4ccd18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 276.495748][ T9513] RAX: ffffffffffffffda RBX: 00007f5c54000000 RCX: 00007f5c5a59c5c7 [ 276.495760][ T9513] RDX: 0000000000000000 RSI: 0000000003a00000 RDI: 00007f5c50600000 [ 276.495770][ T9513] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 276.495781][ T9513] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 276.495792][ T9513] R13: 0000000000001000 R14: 00007f5c58000000 R15: 0000000003a00000 [ 276.495815][ T9513] [ 279.949219][ T9553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.723'. [ 280.099715][ T9560] netlink: 354 bytes leftover after parsing attributes in process `syz.3.723'. [ 280.453643][ T9575] random: crng reseeded on system resumption [ 281.584609][ T9583] netlink: 16 bytes leftover after parsing attributes in process `syz.1.730'. [ 281.809800][ T9583] netlink: 16 bytes leftover after parsing attributes in process `syz.1.730'. [ 282.467595][ T9610] vhci_hcd vhci_hcd.2: SetHubDepth req not supported for USB 2.0 roothub [ 282.966768][ T9622] netlink: 334 bytes leftover after parsing attributes in process `syz.1.738'. [ 283.329525][ T9623] capability: warning: `syz.3.737' uses 32-bit capabilities (legacy support in use) [ 283.460971][ T9627] FAULT_INJECTION: forcing a failure. [ 283.460971][ T9627] name fail_futex, interval 1, probability 0, space 0, times 0 [ 283.522033][ T9627] CPU: 0 UID: 0 PID: 9627 Comm: syz.0.739 Not tainted syzkaller #0 PREEMPT(full) [ 283.522061][ T9627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 283.522071][ T9627] Call Trace: [ 283.522078][ T9627] [ 283.522085][ T9627] dump_stack_lvl+0x100/0x190 [ 283.522119][ T9627] should_fail_ex.cold+0x5/0xa [ 283.522141][ T9627] get_futex_key+0x1d2/0x1620 [ 283.522167][ T9627] ? __pfx_get_futex_key+0x10/0x10 [ 283.522191][ T9627] ? __pfx___might_resched+0x10/0x10 [ 283.522227][ T9627] ? trace_kmem_cache_alloc+0xf3/0x120 [ 283.522251][ T9627] futex_wake+0xea/0x530 [ 283.522277][ T9627] ? __lock_acquire+0x4a5/0x2630 [ 283.522302][ T9627] ? __pfx_futex_wake+0x10/0x10 [ 283.522326][ T9627] ? percpu_counter_add_batch+0xb9/0x230 [ 283.522355][ T9627] ? errseq_sample+0x51/0x70 [ 283.522391][ T9627] do_futex+0x32b/0x350 [ 283.522413][ T9627] ? __pfx_do_futex+0x10/0x10 [ 283.522437][ T9627] ? fd_install+0x24f/0x580 [ 283.522467][ T9627] __x64_sys_futex+0x34f/0x4d0 [ 283.522492][ T9627] ? __do_sys_landlock_create_ruleset+0x2b2/0x4b0 [ 283.522520][ T9627] ? __pfx___x64_sys_futex+0x10/0x10 [ 283.522551][ T9627] do_syscall_64+0x106/0xf80 [ 283.522572][ T9627] ? clear_bhb_loop+0x40/0x90 [ 283.522594][ T9627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.522613][ T9627] RIP: 0033:0x7f5c5a59c799 [ 283.522629][ T9627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.522646][ T9627] RSP: 002b:00007f5c5b4ce0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 283.522663][ T9627] RAX: ffffffffffffffda RBX: 00007f5c5a815fa8 RCX: 00007f5c5a59c799 [ 283.522675][ T9627] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5c5a815fac [ 283.522686][ T9627] RBP: 00007f5c5a815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 283.522696][ T9627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.522706][ T9627] R13: 00007f5c5a816038 R14: 00007ffedd133ac0 R15: 00007ffedd133ba8 [ 283.522728][ T9627] [ 284.779879][ T9646] FAULT_INJECTION: forcing a failure. [ 284.779879][ T9646] name failslab, interval 1, probability 0, space 0, times 0 [ 284.841718][ T9646] CPU: 0 UID: 0 PID: 9646 Comm: syz.0.744 Not tainted syzkaller #0 PREEMPT(full) [ 284.841747][ T9646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 284.841757][ T9646] Call Trace: [ 284.841763][ T9646] [ 284.841771][ T9646] dump_stack_lvl+0x100/0x190 [ 284.841802][ T9646] should_fail_ex.cold+0x5/0xa [ 284.841823][ T9646] ? lsm_blob_alloc+0x68/0x90 [ 284.841844][ T9646] should_failslab+0xc2/0x120 [ 284.841863][ T9646] __kmalloc_noprof+0xe0/0x850 [ 284.841888][ T9646] ? audit_alloc+0xa2/0x7b0 [ 284.841911][ T9646] lsm_blob_alloc+0x68/0x90 [ 284.841934][ T9646] security_task_alloc+0x2a/0x260 [ 284.841954][ T9646] copy_process+0x2531/0x7a10 [ 284.841983][ T9646] ? futex_unqueue+0x133/0x2c0 [ 284.842015][ T9646] ? __pfx_copy_process+0x10/0x10 [ 284.842041][ T9646] ? _copy_from_user+0x59/0xd0 [ 284.842072][ T9646] kernel_clone+0xfc/0x9a0 [ 284.842095][ T9646] ? __pfx_kernel_clone+0x10/0x10 [ 284.842121][ T9646] ? __pfx_futex_wait+0x10/0x10 [ 284.842154][ T9646] __do_sys_clone3+0x214/0x290 [ 284.842175][ T9646] ? __pfx___do_sys_clone3+0x10/0x10 [ 284.842233][ T9646] do_syscall_64+0x106/0xf80 [ 284.842254][ T9646] ? clear_bhb_loop+0x40/0x90 [ 284.842277][ T9646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.842296][ T9646] RIP: 0033:0x7f5c5a59c799 [ 284.842312][ T9646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.842330][ T9646] RSP: 002b:00007f5c5b4cdef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 284.842347][ T9646] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f5c5a59c799 [ 284.842359][ T9646] RDX: 00007f5c5b4cdf10 RSI: 0000000000000058 RDI: 00007f5c5b4cdf10 [ 284.842370][ T9646] RBP: 00007f5c5a632bd9 R08: 0000000000000000 R09: 0000000000000058 [ 284.842381][ T9646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.842392][ T9646] R13: 00007f5c5a816038 R14: 00007f5c5a815fa0 R15: 00007ffedd133ba8 [ 284.842415][ T9646] [ 285.793677][ T9668] netlink: 342 bytes leftover after parsing attributes in process `syz.4.748'. [ 291.954288][ T9761] Invalid ELF header magic: != ELF [ 294.915179][ T9799] kvm: kvm [9796]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc1) = 0x2 [ 295.582780][ T9818] netlink: 330 bytes leftover after parsing attributes in process `syz.4.774'. [ 296.915408][ T9849] vhci_hcd vhci_hcd.2: SetHubDepth req not supported for USB 2.0 roothub [ 297.239562][ T9856] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 297.749764][ T9854] futex_wake_op: syz.1.780 tries to shift op by -2048; fix this program [ 298.370124][ T9884] random: crng reseeded on system resumption [ 298.748789][ T9886] hub 1-0:1.0: USB hub found [ 298.872534][ T9886] hub 1-0:1.0: 1 port detected [ 299.025609][ T9891] program syz.0.785 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 299.694177][ T9894] FAULT_INJECTION: forcing a failure. [ 299.694177][ T9894] name failslab, interval 1, probability 0, space 0, times 0 [ 299.744866][ T9894] CPU: 0 UID: 0 PID: 9894 Comm: syz.4.786 Not tainted syzkaller #0 PREEMPT(full) [ 299.744893][ T9894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 299.744904][ T9894] Call Trace: [ 299.744911][ T9894] [ 299.744919][ T9894] dump_stack_lvl+0x100/0x190 [ 299.744951][ T9894] should_fail_ex.cold+0x5/0xa [ 299.744973][ T9894] ? ops_init+0x77/0x5f0 [ 299.745000][ T9894] should_failslab+0xc2/0x120 [ 299.745019][ T9894] __kmalloc_noprof+0xe0/0x850 [ 299.745046][ T9894] ? __raw_spin_lock_init+0x3a/0x110 [ 299.745076][ T9894] ops_init+0x77/0x5f0 [ 299.745101][ T9894] setup_net+0x118/0x3a0 [ 299.745124][ T9894] ? __pfx_setup_net+0x10/0x10 [ 299.745144][ T9894] ? lockdep_init_map_type+0x5c/0x250 [ 299.745168][ T9894] ? mutex_init_lockep+0x110/0x150 [ 299.745195][ T9894] copy_net_ns+0x46f/0x7c0 [ 299.745222][ T9894] create_new_namespaces+0x3ea/0xac0 [ 299.745246][ T9894] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 299.745267][ T9894] ksys_unshare+0x473/0xad0 [ 299.745292][ T9894] ? __pfx_ksys_unshare+0x10/0x10 [ 299.745324][ T9894] __x64_sys_unshare+0x31/0x40 [ 299.745346][ T9894] do_syscall_64+0x106/0xf80 [ 299.745367][ T9894] ? clear_bhb_loop+0x40/0x90 [ 299.745389][ T9894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.745408][ T9894] RIP: 0033:0x7f80fcd9c799 [ 299.745424][ T9894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.745441][ T9894] RSP: 002b:00007f80fafee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 299.745459][ T9894] RAX: ffffffffffffffda RBX: 00007f80fd015fa0 RCX: 00007f80fcd9c799 [ 299.745471][ T9894] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 299.745481][ T9894] RBP: 00007f80fce32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 299.745492][ T9894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.745503][ T9894] R13: 00007f80fd016038 R14: 00007f80fd015fa0 R15: 00007ffeea9dfdd8 [ 299.745525][ T9894] [ 301.180130][ T9918] binder: 9917:9918 ioctl c018620c 0 returned -1 [ 303.073381][ T9942] FAULT_INJECTION: forcing a failure. [ 303.073381][ T9942] name failslab, interval 1, probability 0, space 0, times 0 [ 303.141546][ T9942] CPU: 0 UID: 0 PID: 9942 Comm: syz.4.796 Not tainted syzkaller #0 PREEMPT(full) [ 303.141574][ T9942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 303.141585][ T9942] Call Trace: [ 303.141591][ T9942] [ 303.141599][ T9942] dump_stack_lvl+0x100/0x190 [ 303.141631][ T9942] should_fail_ex.cold+0x5/0xa [ 303.141654][ T9942] should_failslab+0xc2/0x120 [ 303.141674][ T9942] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 303.141702][ T9942] ? __d_alloc+0x34/0xa80 [ 303.141721][ T9942] ? lockdep_init_map_type+0x5c/0x250 [ 303.141748][ T9942] __d_alloc+0x34/0xa80 [ 303.141770][ T9942] d_alloc_pseudo+0x1c/0xc0 [ 303.141794][ T9942] alloc_file_pseudo+0xcf/0x230 [ 303.141818][ T9942] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 303.141841][ T9942] ? alloc_fd+0x476/0x790 [ 303.141861][ T9942] sock_alloc_file+0x50/0x210 [ 303.141887][ T9942] __sys_socket+0x1c0/0x260 [ 303.141914][ T9942] ? __pfx___sys_socket+0x10/0x10 [ 303.141956][ T9942] __x64_sys_socket+0x72/0xb0 [ 303.141983][ T9942] ? lockdep_hardirqs_on+0x78/0x100 [ 303.142006][ T9942] do_syscall_64+0x106/0xf80 [ 303.142027][ T9942] ? clear_bhb_loop+0x40/0x90 [ 303.142050][ T9942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.142069][ T9942] RIP: 0033:0x7f80fcd9c799 [ 303.142085][ T9942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.142102][ T9942] RSP: 002b:00007f80fafee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 303.142120][ T9942] RAX: ffffffffffffffda RBX: 00007f80fd015fa0 RCX: 00007f80fcd9c799 [ 303.142132][ T9942] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 303.142142][ T9942] RBP: 00007f80fce32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 303.142153][ T9942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.142163][ T9942] R13: 00007f80fd016038 R14: 00007f80fd015fa0 R15: 00007ffeea9dfdd8 [ 303.142186][ T9942] [ 304.402846][ T9964] bond0: invalid ARP target specified [ 304.462825][ T9964] netlink: 28 bytes leftover after parsing attributes in process `syz.0.802'. [ 304.501664][ T9964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.544517][ T9964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.607221][ T9964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.644391][ T9964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.682554][ T9938] netlink: 'syz.3.794': attribute type 2 has an invalid length. [ 305.690272][ T9938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.794'. [ 307.517071][T10019] netlink: 28 bytes leftover after parsing attributes in process `syz.1.812'. [ 307.686845][T10020] FAULT_INJECTION: forcing a failure. [ 307.686845][T10020] name fail_futex, interval 1, probability 0, space 0, times 0 [ 307.862984][T10020] CPU: 0 UID: 0 PID: 10020 Comm: syz.1.812 Not tainted syzkaller #0 PREEMPT(full) [ 307.863017][T10020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 307.863033][T10020] Call Trace: [ 307.863041][T10020] [ 307.863050][T10020] dump_stack_lvl+0x100/0x190 [ 307.863092][T10020] should_fail_ex.cold+0x5/0xa [ 307.863114][T10020] get_futex_key+0x1d2/0x1620 [ 307.863140][T10020] ? __pfx_get_futex_key+0x10/0x10 [ 307.863169][T10020] futex_wake+0xea/0x530 [ 307.863197][T10020] ? __pfx_futex_wake+0x10/0x10 [ 307.863226][T10020] ? lockdep_hardirqs_on+0x78/0x100 [ 307.863262][T10020] do_futex+0x32b/0x350 [ 307.863286][T10020] ? __pfx_do_futex+0x10/0x10 [ 307.863314][T10020] __x64_sys_futex+0x34f/0x4d0 [ 307.863341][T10020] ? __pfx___x64_sys_futex+0x10/0x10 [ 307.863372][T10020] do_syscall_64+0x106/0xf80 [ 307.863393][T10020] ? clear_bhb_loop+0x40/0x90 [ 307.863415][T10020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.863435][T10020] RIP: 0033:0x7f5531d9c799 [ 307.863450][T10020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.863468][T10020] RSP: 002b:00007f552ffd50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 307.863486][T10020] RAX: ffffffffffffffda RBX: 00007f5532016188 RCX: 00007f5531d9c799 [ 307.863497][T10020] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f553201618c [ 307.863507][T10020] RBP: 00007f5532016180 R08: 0000000000000000 R09: 0000000000000000 [ 307.863518][T10020] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 307.863528][T10020] R13: 00007f5532016218 R14: 00007ffe667e5f10 R15: 00007ffe667e5ff8 [ 307.863550][T10020] [ 309.947016][T10019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.979195][T10019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.116737][T10019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.178264][T10019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.025155][T10069] FAULT_INJECTION: forcing a failure. [ 312.025155][T10069] name failslab, interval 1, probability 0, space 0, times 0 [ 312.084787][T10069] CPU: 0 UID: 0 PID: 10069 Comm: syz.3.819 Not tainted syzkaller #0 PREEMPT(full) [ 312.084815][T10069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 312.084826][T10069] Call Trace: [ 312.084833][T10069] [ 312.084840][T10069] dump_stack_lvl+0x100/0x190 [ 312.084871][T10069] should_fail_ex.cold+0x5/0xa [ 312.084894][T10069] should_failslab+0xc2/0x120 [ 312.084914][T10069] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 312.084946][T10069] ? do_getname_kernel+0x5d/0x250 [ 312.084974][T10069] do_getname_kernel+0x5d/0x250 [ 312.084996][T10069] vfs_path_lookup+0x7a/0xe0 [ 312.085024][T10069] ? __pfx_vfs_path_lookup+0x10/0x10 [ 312.085053][T10069] ? bpf_lsm_capable+0x9/0x10 [ 312.085072][T10069] ? security_capable+0x80/0x260 [ 312.085099][T10069] mntns_install+0x384/0x600 [ 312.085124][T10069] ? do_raw_spin_lock+0x128/0x260 [ 312.085150][T10069] ? __pfx_mntns_install+0x10/0x10 [ 312.085171][T10069] ? find_held_lock+0x2b/0x80 [ 312.085188][T10069] ? __do_sys_setns+0x151c/0x1f30 [ 312.085218][T10069] __do_sys_setns+0x15d7/0x1f30 [ 312.085239][T10069] ? __pfx___do_sys_setns+0x10/0x10 [ 312.085266][T10069] do_syscall_64+0x106/0xf80 [ 312.085287][T10069] ? clear_bhb_loop+0x40/0x90 [ 312.085310][T10069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.085328][T10069] RIP: 0033:0x7f5301b9c799 [ 312.085344][T10069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.085362][T10069] RSP: 002b:00007f5302a14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 312.085379][T10069] RAX: ffffffffffffffda RBX: 00007f5301e15fa0 RCX: 00007f5301b9c799 [ 312.085391][T10069] RDX: 0000000000000000 RSI: 0000000060020000 RDI: 0000000000000005 [ 312.085402][T10069] RBP: 00007f5301c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 312.085413][T10069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.085423][T10069] R13: 00007f5301e16038 R14: 00007f5301e15fa0 R15: 00007ffdcfa65968 [ 312.085447][T10069] [ 312.601867][T10072] can: request_module (can-proto-0) failed. [ 313.406532][T10086] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.128.4294967291), cmd(3) [ 313.469475][T10089] netlink: 354 bytes leftover after parsing attributes in process `syz.3.823'. [ 313.687561][T10093] netlink: 20 bytes leftover after parsing attributes in process `syz.3.824'. [ 314.314803][T10108] netlink: 'syz.4.828': attribute type 16 has an invalid length. [ 314.423477][T10112] syz.3.830 (10112): attempted to duplicate a private mapping with mremap. This is not supported. [ 314.435630][T10108] netlink: 50 bytes leftover after parsing attributes in process `syz.4.828'. [ 314.546076][T10115] device-mapper: ioctl: Invalid ioctl structure: name , dev 3ff [ 314.702505][T10120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.832'. [ 314.808986][T10115] FAULT_INJECTION: forcing a failure. [ 314.808986][T10115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.941001][T10115] CPU: 0 UID: 0 PID: 10115 Comm: syz.1.831 Not tainted syzkaller #0 PREEMPT(full) [ 314.941028][T10115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 314.941039][T10115] Call Trace: [ 314.941046][T10115] [ 314.941053][T10115] dump_stack_lvl+0x100/0x190 [ 314.941086][T10115] should_fail_ex.cold+0x5/0xa [ 314.941116][T10115] _copy_from_iter+0x1f4/0x1690 [ 314.941140][T10115] ? __pfx__copy_from_iter+0x10/0x10 [ 314.941175][T10115] ? __pfx___might_resched+0x10/0x10 [ 314.941214][T10115] file_tty_write.isra.0+0x45b/0x890 [ 314.941245][T10115] redirected_tty_write+0xd4/0x120 [ 314.941269][T10115] vfs_write+0x6ac/0x1070 [ 314.941299][T10115] ? __pfx_redirected_tty_write+0x10/0x10 [ 314.941324][T10115] ? __pfx_vfs_write+0x10/0x10 [ 314.941351][T10115] ? find_held_lock+0x2b/0x80 [ 314.941384][T10115] ksys_write+0x12a/0x250 [ 314.941412][T10115] ? __pfx_ksys_write+0x10/0x10 [ 314.941448][T10115] do_syscall_64+0x106/0xf80 [ 314.941469][T10115] ? clear_bhb_loop+0x40/0x90 [ 314.941492][T10115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.941512][T10115] RIP: 0033:0x7f5531d9c799 [ 314.941527][T10115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.941545][T10115] RSP: 002b:00007f5532b8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 314.941563][T10115] RAX: ffffffffffffffda RBX: 00007f5532015fa0 RCX: 00007f5531d9c799 [ 314.941575][T10115] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000007 [ 314.941586][T10115] RBP: 00007f5531e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 314.941597][T10115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.941607][T10115] R13: 00007f5532016038 R14: 00007f5532015fa0 R15: 00007ffe667e5ff8 [ 314.941631][T10115] [ 315.335264][T10128] bond0: invalid ARP target specified [ 315.357381][T10128] netlink: 28 bytes leftover after parsing attributes in process `syz.0.834'. [ 315.902300][T10132] netlink: 330 bytes leftover after parsing attributes in process `syz.0.836'. [ 316.104087][T10147] random: crng reseeded on system resumption [ 316.890180][T10165] vivid-007: ================= START STATUS ================= [ 316.958715][T10165] vivid-007: Generate PTS: true [ 316.988819][T10165] vivid-007: Generate SCR: true [ 317.007322][T10165] tpg source WxH: 320x240 (Y'CbCr) [ 317.040520][T10165] tpg field: 1 [ 317.043964][T10165] tpg crop: (0,0)/320x240 [ 317.068894][T10165] tpg compose: (0,0)/320x240 [ 317.073547][T10165] tpg colorspace: 8 [ 317.114258][T10165] tpg transfer function: 0/0 [ 317.131622][T10165] tpg Y'CbCr encoding: 0/0 [ 317.155017][T10165] tpg quantization: 0/0 [ 317.172697][T10165] tpg RGB range: 0/2 [ 317.176651][T10165] vivid-007: ================== END STATUS ================== [ 317.391427][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.397789][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.761964][T10192] ACPI: Can not change Invalid GPE/Fixed Event status [ 318.127681][T10202] vhci_hcd vhci_hcd.2: invalid port number 135 [ 318.155635][T10202] vhci_hcd vhci_hcd.2: invalid port number 135 [ 318.193516][T10198] zswap: compressor not available [ 320.706631][T10255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.864'. [ 320.926431][T10267] program syz.0.867 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 322.474523][T10300] bond0: invalid ARP target specified [ 322.526025][T10300] netlink: 28 bytes leftover after parsing attributes in process `syz.1.875'. [ 322.598359][T10303] FAULT_INJECTION: forcing a failure. [ 322.598359][T10303] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 322.660229][T10303] CPU: 0 UID: 0 PID: 10303 Comm: syz.1.875 Not tainted syzkaller #0 PREEMPT(full) [ 322.660258][T10303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 322.660269][T10303] Call Trace: [ 322.660275][T10303] [ 322.660283][T10303] dump_stack_lvl+0x100/0x190 [ 322.660315][T10303] should_fail_ex.cold+0x5/0xa [ 322.660333][T10303] ? prepare_alloc_pages+0x16d/0x5f0 [ 322.660358][T10303] should_fail_alloc_page+0xeb/0x140 [ 322.660378][T10303] prepare_alloc_pages+0x1f0/0x5f0 [ 322.660403][T10303] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 322.660436][T10303] ? __lock_acquire+0x4a5/0x2630 [ 322.660466][T10303] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 322.660496][T10303] ? do_raw_spin_lock+0x128/0x260 [ 322.660524][T10303] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 322.660550][T10303] ? find_held_lock+0x2b/0x80 [ 322.660573][T10303] ? __lock_acquire+0x4a5/0x2630 [ 322.660595][T10303] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 322.660626][T10303] ? policy_nodemask+0xed/0x4f0 [ 322.660647][T10303] alloc_pages_mpol+0x1fb/0x550 [ 322.660666][T10303] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 322.660685][T10303] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 322.660713][T10303] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 322.660745][T10303] folio_alloc_mpol_noprof+0x36/0x340 [ 322.660768][T10303] shmem_alloc_folio+0x135/0x160 [ 322.660791][T10303] shmem_alloc_and_add_folio+0x371/0xd40 [ 322.660823][T10303] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 322.660851][T10303] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 322.660884][T10303] shmem_get_folio_gfp+0x6ab/0x1900 [ 322.660915][T10303] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 322.660950][T10303] ? __page_table_check_ptes_set+0x1b5/0x4e0 [ 322.660981][T10303] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 322.661012][T10303] shmem_fault+0x1f9/0xa20 [ 322.661039][T10303] ? __lock_acquire+0x4a5/0x2630 [ 322.661060][T10303] ? __pfx_shmem_fault+0x10/0x10 [ 322.661098][T10303] ? __pfx_filemap_map_pages+0x10/0x10 [ 322.661124][T10303] __do_fault+0x10d/0x550 [ 322.661154][T10303] ? __pfx_filemap_map_pages+0x10/0x10 [ 322.661180][T10303] do_fault+0xaf9/0x1950 [ 322.661203][T10303] __handle_mm_fault+0x180f/0x2b60 [ 322.661231][T10303] ? mt_find+0x45e/0x8e0 [ 322.661254][T10303] ? __pfx___handle_mm_fault+0x10/0x10 [ 322.661277][T10303] ? __pfx_mt_find+0x10/0x10 [ 322.661311][T10303] ? find_vma+0xbf/0x140 [ 322.661328][T10303] ? __pfx_find_vma+0x10/0x10 [ 322.661347][T10303] handle_mm_fault+0x36d/0xa20 [ 322.661375][T10303] do_user_addr_fault+0x74c/0x12f0 [ 322.661412][T10303] exc_page_fault+0x6f/0xd0 [ 322.661434][T10303] asm_exc_page_fault+0x26/0x30 [ 322.661452][T10303] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 322.661480][T10303] Code: 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 cf 93 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 322.661497][T10303] RSP: 0018:ffffc900037c7d30 EFLAGS: 00050206 [ 322.661512][T10303] RAX: 0000000000000001 RBX: 0000000000001fe4 RCX: 0000000000000b84 [ 322.661523][T10303] RDX: 0000000000000001 RSI: 0000000000009000 RDI: ffffc9000497207c [ 322.661534][T10303] RBP: 0000000000007ba0 R08: 0000000000000001 R09: fffff5200092e57f [ 322.661544][T10303] R10: ffffc90004972bff R11: 0000000000000000 R12: 0000000000000000 [ 322.661555][T10303] R13: ffffc9000496b060 R14: 0000000000007ba0 R15: ffffc9000496b060 [ 322.661578][T10303] _copy_from_user+0x98/0xd0 [ 322.661608][T10303] bpf_prog_create_from_user+0x109/0x2f0 [ 322.661633][T10303] ? __pfx_seccomp_check_filter+0x10/0x10 [ 322.661658][T10303] do_seccomp+0x7f7/0x2740 [ 322.661687][T10303] ? __pfx_do_seccomp+0x10/0x10 [ 322.661709][T10303] ? __x64_sys_openat+0x12d/0x210 [ 322.661733][T10303] ? xfd_validate_state+0x129/0x190 [ 322.661768][T10303] do_syscall_64+0x106/0xf80 [ 322.661788][T10303] ? clear_bhb_loop+0x40/0x90 [ 322.661810][T10303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.661829][T10303] RIP: 0033:0x7f5531d9c799 [ 322.661844][T10303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.661860][T10303] RSP: 002b:00007f552fff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 322.661876][T10303] RAX: ffffffffffffffda RBX: 00007f5532016090 RCX: 00007f5531d9c799 [ 322.661888][T10303] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000000000000001 [ 322.661898][T10303] RBP: 00007f5531e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 322.661909][T10303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.661919][T10303] R13: 00007f5532016128 R14: 00007f5532016090 R15: 00007ffe667e5ff8 [ 322.661948][T10303] [ 324.479770][ T51] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 324.487496][ T51] Bluetooth: hci4: Invalid handle: 0x3a4a > 0x0eff [ 324.758330][T10335] netlink: 'syz.0.884': attribute type 4 has an invalid length. [ 324.898962][T10335] netlink: 'syz.0.884': attribute type 1 has an invalid length. [ 326.252369][T10329] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 326.273562][T10329] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 326.286254][T10329] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 326.314891][T10329] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 326.596222][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 328.010179][T10402] FAULT_INJECTION: forcing a failure. [ 328.010179][T10402] name fail_futex, interval 1, probability 0, space 0, times 0 [ 328.140297][T10402] CPU: 0 UID: 0 PID: 10402 Comm: syz.0.896 Not tainted syzkaller #0 PREEMPT(full) [ 328.140324][T10402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 328.140334][T10402] Call Trace: [ 328.140341][T10402] [ 328.140348][T10402] dump_stack_lvl+0x100/0x190 [ 328.140380][T10402] should_fail_ex.cold+0x5/0xa [ 328.140402][T10402] get_futex_key+0x1d2/0x1620 [ 328.140427][T10402] ? __pfx_get_futex_key+0x10/0x10 [ 328.140448][T10402] ? find_held_lock+0x2b/0x80 [ 328.140465][T10402] ? futex_wake+0x456/0x530 [ 328.140496][T10402] futex_wake+0xea/0x530 [ 328.140524][T10402] ? __pfx_futex_wake+0x10/0x10 [ 328.140548][T10402] ? __do_sys_fsconfig+0x564/0xcb0 [ 328.140576][T10402] ? __mutex_unlock_slowpath+0x15c/0x790 [ 328.140604][T10402] do_futex+0x32b/0x350 [ 328.140627][T10402] ? __pfx_do_futex+0x10/0x10 [ 328.140650][T10402] ? cap_task_prctl+0x104/0xa50 [ 328.140677][T10402] ? __pfx_sched_core_share_pid+0x10/0x10 [ 328.140699][T10402] __x64_sys_futex+0x34f/0x4d0 [ 328.140726][T10402] ? __pfx___x64_sys_futex+0x10/0x10 [ 328.140750][T10402] ? __pfx___do_sys_prctl+0x10/0x10 [ 328.140783][T10402] do_syscall_64+0x106/0xf80 [ 328.140803][T10402] ? clear_bhb_loop+0x40/0x90 [ 328.140826][T10402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.140846][T10402] RIP: 0033:0x7f5c5a59c799 [ 328.140862][T10402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.140880][T10402] RSP: 002b:00007f5c5b48c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 328.140898][T10402] RAX: ffffffffffffffda RBX: 00007f5c5a816188 RCX: 00007f5c5a59c799 [ 328.140910][T10402] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5c5a81618c [ 328.140920][T10402] RBP: 00007f5c5a816180 R08: 0000000000000000 R09: 0000000000000000 [ 328.140931][T10402] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 328.140941][T10402] R13: 00007f5c5a816218 R14: 00007ffedd133ac0 R15: 00007ffedd133ba8 [ 328.140964][T10402] [ 328.622475][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 328.628723][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 328.635179][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 328.642649][T10403] Invalid ELF header magic: != ELF [ 329.980717][T10433] Invalid ELF header magic: != ELF [ 331.075920][T10447] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 331.898574][T10432] random: crng reseeded on system resumption [ 332.385481][T10478] vhci_hcd vhci_hcd.1: invalid port number 19 [ 332.410639][T10478] vhci_hcd vhci_hcd.1: default hub control req: c902 v76bf i0013 l46 [ 332.525438][T10481] misc userio: Invalid payload size [ 332.917523][T10492] netlink: 16 bytes leftover after parsing attributes in process `syz.0.914'. [ 334.492246][T10530] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 334.753602][T10530] File: /dev/ram5 PID: 10530 Comm: syz.0.922 [ 334.856778][T10550] FAULT_INJECTION: forcing a failure. [ 334.856778][T10550] name failslab, interval 1, probability 0, space 0, times 0 [ 334.926533][T10550] CPU: 0 UID: 0 PID: 10550 Comm: syz.3.928 Not tainted syzkaller #0 PREEMPT(full) [ 334.926562][T10550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 334.926572][T10550] Call Trace: [ 334.926579][T10550] [ 334.926587][T10550] dump_stack_lvl+0x100/0x190 [ 334.926619][T10550] should_fail_ex.cold+0x5/0xa [ 334.926647][T10550] should_failslab+0xc2/0x120 [ 334.926667][T10550] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 334.926694][T10550] ? __d_alloc+0x34/0xa80 [ 334.926713][T10550] ? __pfx_stack_trace_save+0x10/0x10 [ 334.926736][T10550] __d_alloc+0x34/0xa80 [ 334.926758][T10550] d_alloc_parallel+0x111/0x14e0 [ 334.926792][T10550] ? find_held_lock+0x2b/0x80 [ 334.926808][T10550] ? __d_lookup+0x25c/0x4a0 [ 334.926833][T10550] ? __pfx_d_alloc_parallel+0x10/0x10 [ 334.926861][T10550] ? __d_lookup+0x266/0x4a0 [ 334.926892][T10550] lookup_open.isra.0+0x57c/0x11b0 [ 334.926923][T10550] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 334.926953][T10550] ? __pfx___might_resched+0x10/0x10 [ 334.926979][T10550] ? mnt_get_write_access+0x52/0x2f0 [ 334.927014][T10550] ? __pfx_down_write+0x10/0x10 [ 334.927037][T10550] ? mnt_get_write_access+0x1e9/0x2f0 [ 334.927066][T10550] path_openat+0x2291/0x31a0 [ 334.927089][T10550] ? entry_SYSCALL_64_after_hwframe+0x48/0x7f [ 334.927111][T10550] ? __pfx_path_openat+0x10/0x10 [ 334.927139][T10550] do_file_open+0x20e/0x430 [ 334.927160][T10550] ? __pfx_do_file_open+0x10/0x10 [ 334.927196][T10550] ? _raw_spin_unlock+0x28/0x50 [ 334.927214][T10550] ? alloc_fd+0x476/0x790 [ 334.927239][T10550] do_sys_openat2+0x10d/0x1e0 [ 334.927264][T10550] ? __pfx_do_sys_openat2+0x10/0x10 [ 334.927296][T10550] __x64_sys_open+0xfe/0x1d0 [ 334.927320][T10550] ? __pfx___x64_sys_open+0x10/0x10 [ 334.927352][T10550] do_syscall_64+0x106/0xf80 [ 334.927372][T10550] ? clear_bhb_loop+0x40/0x90 [ 334.927395][T10550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.927414][T10550] RIP: 0033:0x7f5301b9c799 [ 334.927430][T10550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.927447][T10550] RSP: 002b:00007f5302a14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 334.927465][T10550] RAX: ffffffffffffffda RBX: 00007f5301e15fa0 RCX: 00007f5301b9c799 [ 334.927477][T10550] RDX: e1d2b27bdc14aabc RSI: 0000000000004242 RDI: 0000200000000000 [ 334.927488][T10550] RBP: 00007f5301c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 334.927498][T10550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.927508][T10550] R13: 00007f5301e16038 R14: 00007f5301e15fa0 R15: 00007ffdcfa65968 [ 334.927532][T10550] [ 336.518520][ T5924] Process accounting resumed [ 337.858728][T10600] openvswitch: netlink: IPv4 tunnel dst address is zero [ 338.435289][T10604] ima: policy update failed [ 338.454659][ T30] audit: type=1802 audit(4294968482.553:8): pid=10604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.937" res=0 errno=0 [ 338.504291][T10617] [ 338.506647][T10617] ====================================================== [ 338.513656][T10617] WARNING: possible circular locking dependency detected [ 338.520671][T10617] syzkaller #0 Not tainted [ 338.525090][T10617] ------------------------------------------------------ [ 338.532117][T10617] syz.1.941/10617 is trying to acquire lock: [ 338.538173][T10617] ffff88807a9a2fe8 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x4ca/0xcb0 [ 338.549670][T10617] [ 338.549670][T10617] but task is already holding lock: [ 338.557110][T10617] ffff88807a9a40e0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 338.566086][T10617] [ 338.566086][T10617] which lock already depends on the new lock. [ 338.566086][T10617] [ 338.576652][T10617] [ 338.576652][T10617] the existing dependency chain (in reverse order) is: [ 338.585667][T10617] [ 338.585667][T10617] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 338.593416][T10617] lock_sock_nested+0x41/0xf0 [ 338.598622][T10617] smc_listen_out+0x1f5/0x4b0 [ 338.603834][T10617] smc_listen_work+0x4c2/0x50e0 [ 338.609201][T10617] process_one_work+0x9d7/0x1920 [ 338.614665][T10617] worker_thread+0x5da/0xe40 [ 338.619780][T10617] kthread+0x370/0x450 [ 338.624370][T10617] ret_from_fork+0x754/0xd80 [ 338.629483][T10617] ret_from_fork_asm+0x1a/0x30 [ 338.634764][T10617] [ 338.634764][T10617] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 338.644919][T10617] __lock_acquire+0x14b8/0x2630 [ 338.650296][T10617] lock_acquire+0x1cf/0x380 [ 338.655329][T10617] __flush_work+0x4de/0xcb0 [ 338.660354][T10617] cancel_work_sync+0xd1/0xf0 [ 338.665545][T10617] smc_clcsock_release+0x5f/0xe0 [ 338.671011][T10617] __smc_release+0x5c2/0x880 [ 338.676306][T10617] smc_close_non_accepted+0xda/0x200 [ 338.682221][T10617] smc_close_active+0x4ff/0x1070 [ 338.687691][T10617] __smc_release+0x634/0x880 [ 338.692897][T10617] smc_release+0x1fc/0x620 [ 338.697838][T10617] __sock_release+0xb3/0x260 [ 338.702963][T10617] sock_close+0x1c/0x30 [ 338.707664][T10617] __fput+0x3ff/0xb40 [ 338.712167][T10617] task_work_run+0x150/0x240 [ 338.717280][T10617] exit_to_user_mode_loop+0x100/0x4a0 [ 338.723190][T10617] do_syscall_64+0x668/0xf80 [ 338.728317][T10617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.734726][T10617] [ 338.734726][T10617] other info that might help us debug this: [ 338.734726][T10617] [ 338.744943][T10617] Possible unsafe locking scenario: [ 338.744943][T10617] [ 338.752382][T10617] CPU0 CPU1 [ 338.757742][T10617] ---- ---- [ 338.763101][T10617] lock(sk_lock-AF_SMC/1); [ 338.767610][T10617] lock((work_completion)(&new_smc->smc_listen_work)); [ 338.777173][T10617] lock(sk_lock-AF_SMC/1); [ 338.784197][T10617] lock((work_completion)(&new_smc->smc_listen_work)); [ 338.791129][T10617] [ 338.791129][T10617] *** DEADLOCK *** [ 338.791129][T10617] [ 338.799288][T10617] 3 locks held by syz.1.941/10617: [ 338.804390][T10617] #0: ffff888012a9c148 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 338.814932][T10617] #1: ffff88807a9a40e0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 338.824356][T10617] #2: ffffffff8e7e9220 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xfd/0xcb0 [ 338.833510][T10617] [ 338.833510][T10617] stack backtrace: [ 338.839392][T10617] CPU: 0 UID: 0 PID: 10617 Comm: syz.1.941 Not tainted syzkaller #0 PREEMPT(full) [ 338.839414][T10617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 338.839426][T10617] Call Trace: [ 338.839433][T10617] [ 338.839440][T10617] dump_stack_lvl+0x100/0x190 [ 338.839466][T10617] print_circular_bug.cold+0x178/0x1c7 [ 338.839496][T10617] check_noncircular+0x146/0x160 [ 338.839519][T10617] __lock_acquire+0x14b8/0x2630 [ 338.839544][T10617] lock_acquire+0x1cf/0x380 [ 338.839565][T10617] ? __flush_work+0x4ca/0xcb0 [ 338.839591][T10617] ? mark_held_locks+0x40/0x70 [ 338.839612][T10617] ? __flush_work+0x4ca/0xcb0 [ 338.839638][T10617] __flush_work+0x4de/0xcb0 [ 338.839662][T10617] ? __flush_work+0x4ca/0xcb0 [ 338.839689][T10617] ? __pfx___flush_work+0x10/0x10 [ 338.839716][T10617] ? __pfx_wq_barrier_func+0x10/0x10 [ 338.839738][T10617] ? __pfx___might_resched+0x10/0x10 [ 338.839766][T10617] cancel_work_sync+0xd1/0xf0 [ 338.839783][T10617] smc_clcsock_release+0x5f/0xe0 [ 338.839801][T10617] __smc_release+0x5c2/0x880 [ 338.839829][T10617] ? __pfx_sock_def_readable+0x10/0x10 [ 338.839847][T10617] smc_close_non_accepted+0xda/0x200 [ 338.839865][T10617] smc_close_active+0x4ff/0x1070 [ 338.839884][T10617] __smc_release+0x634/0x880 [ 338.839912][T10617] smc_release+0x1fc/0x620 [ 338.839939][T10617] __sock_release+0xb3/0x260 [ 338.839961][T10617] ? __pfx_sock_close+0x10/0x10 [ 338.839982][T10617] sock_close+0x1c/0x30 [ 338.840008][T10617] __fput+0x3ff/0xb40 [ 338.840029][T10617] task_work_run+0x150/0x240 [ 338.840054][T10617] ? __pfx_task_work_run+0x10/0x10 [ 338.840081][T10617] exit_to_user_mode_loop+0x100/0x4a0 [ 338.840105][T10617] do_syscall_64+0x668/0xf80 [ 338.840126][T10617] ? clear_bhb_loop+0x40/0x90 [ 338.840146][T10617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.840164][T10617] RIP: 0033:0x7f5531d9c799 [ 338.840179][T10617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.840197][T10617] RSP: 002b:00007ffe667e6158 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 338.840214][T10617] RAX: 0000000000000000 RBX: 00007f5532017da0 RCX: 00007f5531d9c799 [ 338.840225][T10617] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 338.840236][T10617] RBP: 00007f5532017da0 R08: 00007f5532016038 R09: 0000000000000000 [ 338.840247][T10617] R10: 00000000003eb378 R11: 0000000000000246 R12: 0000000000052b66 [ 338.840257][T10617] R13: 00007f5532015fac R14: 000000000005291c R15: 00007ffe667e6260 [ 338.840273][T10617]