last executing test programs: 3m55.517731095s ago: executing program 3 (id=125): openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$auto_OVS_VPORT_CMD_SET(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001440)={&(0x7f0000000080)=ANY=[@ANYBLOB="220a0000dee1d8", @ANYRES16=0x0, @ANYBLOB="080028bd70040500000004000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4048) (async, rerun: 64) socket(0x11, 0x3, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) (async, rerun: 32) syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000300), r0) close_range$auto(0x2, 0x8000, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x2, 0x8000, 0x0) r3 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r5, r4, 0x4, 0x401, r3, @relative_id=0x13, 0xe600}, 0xf) bpf$auto(0x1, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xf) (async) r6 = socket(0x10, 0x2, 0x4) (async) prctl$auto(0x2f, 0x4, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) r7 = socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf25030000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) (async) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r7, @ANYBLOB="18000000", @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x40000f0) write$auto(r6, &(0x7f0000000000)='-\x00', 0x2f) 3m54.854421256s ago: executing program 3 (id=129): r0 = ioctl$auto_XFS_IOC_OPEN_BY_HANDLE(0xffffffffffffffff, 0xc038586b, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000000)="5476384fcff7", 0x1, &(0x7f0000000040)="fb20fd7dda96ec0f55aa068dcf0f42ccf028c0c59db049a947a5bf32cc8e8964a19813ce9d90a1c40f04344bb11e5bd9dcc8a585e903e5975bf2e9b8104645026b53390a7dc60db81533d7934f55a865e986312b0653edc54a16eb03b23ab73979b7275d377ffa5ea2a11c55047536deae11d491eacf9c29925cdbeb04f7b3d642902842736a554725b7db039424a3c5d36e7866a1431f00d1c0543cf03b6b0faf4a5bcca1d369440c867d67d15d77630476b685c0ef421e4d22d525dfb1612a7a6b1a5e677545b07b3325c425983e3f65c524199a190c1f86d0b9b55656fec5dad04c0848f31768ac3573aaa34bd62a44a68a994ad4", 0x90, &(0x7f0000000140)="e5888a3307f5c9b2d1f96b402f44c71e81376d27a54d9ffdedd67832", &(0x7f0000000180)=0xce}) read$auto_ptdump_curusr_fops_(r0, &(0x7f0000000200)=""/253, 0xfd) r2 = ioctl$auto_SIOCGIFHWADDR2(r0, 0x8927, &(0x7f0000000300)="8b9dae81595df8270d700530a53f7860034c5d48411a8c231ca2bfcca839ce7175260049ab5c95e4b3c87ee733ec9741b3236918d8f7903e4829c9399e5b94be52f18751ef6c122831de8bcce2c7") getsockopt$auto_SO_SNDTIMEO_NEW(r1, 0x85eb, 0x43, &(0x7f0000000380)='\x00', &(0x7f00000003c0)=0xf) r3 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000400)='/sys/devices/virtual/bluetooth/hci7/power\x00', 0x10000, 0x0) ioctl$auto_BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000440)={@raw=0x4, 0x3, 0x4, @unused, @devid=0x7a93}) msgctl$auto_IPC_INFO(0x2, 0x3, &(0x7f00000014c0)={{0x2, 0xee01, 0xee00, 0x1, 0x1, 0x9, 0x3}, &(0x7f0000001440)=0x6, &(0x7f0000001480)=0x2, 0x6, 0x80000000, 0x6, 0x80000001, 0x80000001, 0x7b, 0x6, 0x5e, @inferred, @inferred=0xffffffffffffffff}) lstat$auto(&(0x7f0000001540)='./file0\x00', &(0x7f0000001580)={0x0, 0x5, 0x7fffffffffffffff, 0xfff, 0xffffffffffffffff, 0xee00, 0x0, 0x5, 0x1, 0xfffffffffffffffd, 0x7, 0x44b, 0x1ff800000000000, 0xffff, 0x7f, 0x2, 0x9}) keyctl$auto(0x0, r4, 0xffffffffffffffff, r5, 0x4800000000000000) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001640)='/proc/dynamic_debug/control\x00', 0x484042, 0x0) sendmmsg$auto(r6, &(0x7f0000002800)={{&(0x7f0000001680)="e8cf8e2d404c0db496188f0816b88496f1340eba7eb5e94fec7e5eefd5ea52ca1b15826c2536b436a076123e03d263dfef847428531f61a2ec71d6e54af79f5985037fa74ba8b6048205e4019a6e88c67f1b7bc22f221027c0cca7b4a204c6183a549224ec0c7dfebe44fec0299b26b9fbf1fb7c07ffa998900b5ae5ac4b2a03d2a3703b0297205918874d4fe57259fba9f5c8358d51de7f7ca09328fb2bf7a87d22a23fbe9650d3da0f7714660c26ea946c4e5dcff4f06d8545708a", 0x3, &(0x7f00000017c0)={&(0x7f0000001740)="051ad25f7254e46262e296dad1b91528aa1aac19fffb5cae86e22b4921bd0447db487816482e75b2c808925ad0bb190410d26b49f64f9fe8e2b1af7f8b0d631baef09a39adcc92ad571c83b6e5b2092d", 0x3}, 0x10, &(0x7f0000001800)="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", 0x7, 0x3}, 0x349}, 0xb0, 0x8001) prctl$auto_PR_GET_TIMING(0xd, 0x10, 0x5, 0x100, 0x7) getsockopt$auto_SO_RCVBUF(r6, 0x10001, 0x8, &(0x7f0000002840)='\x00', &(0x7f0000002880)=0x5) r7 = ioctl$auto_TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000028c0)=0x6) ioctl$auto_FS_IOC_UNRESVSP(r7, 0x40305829, 0x8) r8 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000002940), r7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002980)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000029c0)={'macvlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002a00)={'veth1_vlan\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002a40)={'dvmrp1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002a80)={'ipvlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002ac0)={'sit0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_CAP_GET2(r1, &(0x7f0000002bc0)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b00)={0x44, r8, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@NET_SHAPER_A_CAPS_IFINDEX={0x8, 0x1, r9}, @NET_SHAPER_A_CAPS_IFINDEX={0x8, 0x1, r10}, @NET_SHAPER_A_CAPS_IFINDEX={0x8, 0x1, r11}, @NET_SHAPER_A_CAPS_IFINDEX={0x8, 0x1, r12}, @NET_SHAPER_A_CAPS_IFINDEX={0x8, 0x1, r13}, @NET_SHAPER_A_CAPS_IFINDEX={0x8, 0x1, r14}]}, 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x53) getsockopt$auto_SO_PEERNAME(r1, 0xffff, 0x1c, &(0x7f0000002c00)='$**\x00', &(0x7f0000002c40)=0x9) sendmmsg$auto(r2, &(0x7f0000002d80)={{&(0x7f0000002c80)="89a0f3b50cf5462f955af15e486dc7f8945d706b3a8cbb", 0x3, &(0x7f0000002d00)={&(0x7f0000002cc0)="31e468075a5f461321d0a6c3fe38ea422f4c4993a4ed8a1fa38978e17218e917e4355a7e53ffc2dcf15b32ac98313da157a769643cd11e0cc1445d9cce9b", 0x100000001}, 0x9, &(0x7f0000002d40)="8ff931519f223d3a7d30fde5723d26c694527f877881e0ec8b9d60c9001e13d0a7ac42a35593e1bf8419934fabaa07a4f35d619df929a448a69b2a40d9debf", 0x9f, 0x4}, 0xffffffff}, 0x3, 0x8000) r15 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000002dc0)='/dev/vcsa1\x00', 0xa080, 0x0) recvmmsg$auto(r15, &(0x7f0000003040)={{&(0x7f0000002e00)="1db19d5ad89f3960141e49720588cace65d2c65180a3c87639b011fa4707ab56f8cd39917531a1468ddef0", 0xff, &(0x7f0000002f40)={&(0x7f0000002e40)="0cf0cdece1d939fbbd8ffbe548155d2f07443b3cb19d47f44049c2314f1723fd2e276833512e26ccb026fe752b68a997ddbb2db4d7a02bb5dfce0145b2aaafb1ab2c9a23dc8c2569fc11e8c2e7a01b4581d3a2018a4d990fa50f75c6e63723df3d481aaf04b811dba18b9265abb23014e1eb44a7099e2a65672c9f05a2916af66dedcf29d35b0de4ec8ebaa9b2c1fceb1a84db78ded5da4e08f8a1bf97f08abea9a367d3f8c4f74fdbe9dcc58fc63e7c3b648fbc8eba6c7772c54622846cb934f8a37a53e3671f54ae8484a591fd870040f6e399655134fb93ef6eb86f82f13e729f3dc4fc12be3e5377b03ae6dc8c97f4297272", 0x67f7}, 0x1ff, &(0x7f0000002f80)="41ed4382decb1c407dc864db23e93e39e276e534f0f2276be6b0381c2d2a4dc2013ab0912eb3f436e0253cfc5c565904134e0a6570a6653d0a895ea853a724cc60401f6aebc448744705a00ff399611b70e995d5369da37d1214ca93b87ae1336eb5a16a045688e7b6dde6de75325dde5002a4808f15b209342b1187fad55b8c3ff8a8b867ee", 0x6, 0x2}, 0x3}, 0x10, 0x1, &(0x7f0000003080)={0x1000, 0x259c}) clone3$auto(&(0x7f00000030c0)={0xfffffffffffffff8, 0x7fffffffffffffff, 0x7fffffff, 0x9, 0x3ff, 0x8, 0xfffffffffffffffe, 0x785, 0x9, 0x6}, 0x4) r16 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000003180), r0) sendmsg$auto_NL802154_CMD_GET_INTERFACE(r7, &(0x7f0000003380)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x50100}, 0xc, &(0x7f0000003340)={&(0x7f00000031c0)={0x17c, r16, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x80}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x6}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x7}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x7}, @NL802154_ATTR_SUPPORTED_CHANNEL={0x8, 0x16, 0x95}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x12f, 0x2b, 0x0, 0x1, [@nested={0xb6, 0x25, 0x0, 0x1, [@generic="ca7e05411ab2cb09ccb4aeadfcb8f4d876baaca127a6ae6f4328c307fca5e4c083087f9567873da16c5cb8f9fff149370ec445ace9ba40b48218e9a151357388c01cbfc48cdb16e5508778c0ac6e6ca37803040538567bf9b9d4c92318031de68fcddc4fdaf128c21480ad321911ac83d1e4f823888307095522cb6caba28fb9e325b95b521a524e8d2d0a07b28126474cecba4fdaac6056226e1e2e95b2e5825d002f0d84e5485527a9a21ddc438ed9f01a"]}, @generic="f0af413e5b55725a392b9a7963481f55f178e5b64b51e18c34ea6cde042c68256a6aee67c7024444200ca2495c71cd1735", @typed={0x8, 0x27, 0x0, 0x0, @ipv4=@broadcast}, @generic="1cb62db92cf5239d216c87c447b068649fae97da0f822271e4424ba411735c74d87b0d3dd75ec43a0221e82c47be63dd8ade77e63bb9f720abfd"]}]}, 0x17c}}, 0x20000000) 3m54.657020836s ago: executing program 3 (id=131): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x801, 0x84) r1 = getsockopt$auto(r0, 0x84, 0x73, 0x0, &(0x7f00000002c0)=0x90006) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) setresuid$auto(0x0, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r2, r2, 0x0, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x8, 0x80000, 0x2f) prctl$auto(0x3e, 0x80000001, 0x0, 0x1, 0x7) ioctl$auto_CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) close_range$auto(0x2, 0xa, 0x0) close_range$auto(0x2, 0xa, 0x0) read$auto(0x3, 0x0, 0xfdef) getrandom$auto(0x0, 0x6000000, 0x3) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@btf_id=0x81, 0x92f5, 0x4, r1}, 0xa) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000080), 0x1e1500, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) shmctl$auto_IPC_INFO(0x7, 0x3, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r3, 0x7a6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x4, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_taskstats(0x0, r4) 3m53.384079474s ago: executing program 3 (id=134): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7020f8dbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRES32=0x0, @ANYBLOB="0800090004d3c915b43e4c2ade65a1baf7e0b1730b9c1fcd417fa7d1f2e8e03ecb2920e7178cbcd5018faf8114f9d0e05028a8d561028e6a84f7076940232793ce225767be99a393abb112c495d983b3e89e"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x200400b0) mmap$auto(0x4, 0x10000000020009, 0xdf, 0xeb2, r0, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) socket(0xa, 0x1, 0x84) bind$auto(r1, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1}, 0x1}}, 0x47) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/sctp/assocs\x00', 0x101080, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000008000eb1, 0xffffffffffffffff, 0x8000) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/fs/orangefs/op_timeout_secs\x00', 0x20001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000000)="b2", 0x1) socketpair$auto(0x1e, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) epoll_ctl$auto(0xffffffffffffffff, 0x1, r3, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x40006) arch_prctl$auto_ARCH_MAP_VDSO_64(0x2003, 0x8) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2ac842, 0x0) mmap$auto(0x0, 0x2, 0x412, 0xeb1, r3, 0xbd) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) 3m52.01444445s ago: executing program 3 (id=140): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), r0) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0109080000000000002502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x6) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) read$auto_ep0_operations_inode(r4, &(0x7f0000000280)=""/96, 0x60) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer2\x00', 0x1, 0x0) bpf$auto(0x9, &(0x7f00000005c0)=@enable_stats={0xe82}, 0x40) write$auto_seq_oss_f_ops_seq_oss(r5, &(0x7f0000000040)="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", 0xfe04) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r6 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r6, 0x0, 0xfffffdf1) linkat$auto(r6, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) sysfs$auto(0x2, 0x23, 0x0) open(0x0, 0x22040, 0x75) utimes$auto(0x0, 0x0) openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/hwsim/ps\x00', 0x1102, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) clone$auto(0x20003b46, 0x7, 0x0, 0x0, 0x2) mprotect$auto(0x0, 0x8000000000000001, 0x8) 3m50.307191949s ago: executing program 3 (id=144): mmap$auto(0x0, 0x2020009, 0x6, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0) pwrite64$auto(r0, &(0x7f0000000180)=':\'*&\x04!\x8b\x89\xed\xf6\x8d\xf5\x88L\xb6\xfb\x1c\xe3\xfbqM*\xe681\xff\xcfp\x87\x89\xb3\x88g', 0x400, 0x27) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:01.3/numa_node\x00', 0x63102, 0x0) sendfile$auto(r1, r1, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) r2 = memfd_create$auto(0x0, 0x9) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r2) ioctl$auto_XFS_IOC_ALLOCSP64(r2, 0x40305824, &(0x7f00000000c0)={0x0, 0x7, 0x1, 0xa86, 0x6}) setfsuid$auto(0xee00) setfsuid$auto(0xee01) sendmsg$auto_NL80211_CMD_SET_PMKSA(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000", @ANYRES16=r4, @ANYBLOB="040028bd7000fedbdf25340000000600980005000000a900c8001ab21e964a89ca1c6db0ea103d04f8913503e0ac01b6a244cd8a81cd476e4b58d4183ef907b6a72cde3fcdca1b6aef3fb85dc775b340799b042eee25d273b2f6d27d6e63e24cba86182544f488542c5c1b7fbf25f20ac49570bb810f3e138d74e6bc86f518b9216cdaf0d7e6504f58a473faf417fd642bce4b1b1b5c1d53cff030bda107f4ea16ff2ead227bbdd1f815029999db00412a22958869fa6cce91b535b64155f26c010000000400dd001c001b8004000300050001000c000000040002000400020004000207000000010000bf97e338adee8bce4c39069074305b28ba87c930c88161523018df085d4474def1c335f70c06bb5636b093477ca4299333719aaeeb2dbc08b7f17bae2a2b506f3912356359a6329b81d7b08dbe50b86713bc03b0cadac748aacbf3a34d25cd5a89c37fdb4243fdd4d074a8467b868f73f4081a7778ec9cd56e5f817d7684bad54dcfc06143160b5565afd4e38036ed6491c2d17047860e0000"], 0xf0}, 0x1, 0x0, 0x0, 0x48004}, 0x0) read$auto(r3, 0x0, 0x0) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r5, &(0x7f0000000100)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) socket(0xa, 0x801, 0x84) r6 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) setresuid$auto(0xffffffffffffffff, 0x8, 0xffffffff) writev$auto(r6, &(0x7f0000000140)={0x0, 0x8}, 0x3) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x1) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc) sendto$auto(r2, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@xdp={0x2c, 0x8, 0x0, 0x37}, 0x1c) ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8) 3m34.441397153s ago: executing program 32 (id=144): mmap$auto(0x0, 0x2020009, 0x6, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0) pwrite64$auto(r0, &(0x7f0000000180)=':\'*&\x04!\x8b\x89\xed\xf6\x8d\xf5\x88L\xb6\xfb\x1c\xe3\xfbqM*\xe681\xff\xcfp\x87\x89\xb3\x88g', 0x400, 0x27) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:01.3/numa_node\x00', 0x63102, 0x0) sendfile$auto(r1, r1, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) r2 = memfd_create$auto(0x0, 0x9) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r2) ioctl$auto_XFS_IOC_ALLOCSP64(r2, 0x40305824, &(0x7f00000000c0)={0x0, 0x7, 0x1, 0xa86, 0x6}) setfsuid$auto(0xee00) setfsuid$auto(0xee01) sendmsg$auto_NL80211_CMD_SET_PMKSA(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000", @ANYRES16=r4, @ANYBLOB="040028bd7000fedbdf25340000000600980005000000a900c8001ab21e964a89ca1c6db0ea103d04f8913503e0ac01b6a244cd8a81cd476e4b58d4183ef907b6a72cde3fcdca1b6aef3fb85dc775b340799b042eee25d273b2f6d27d6e63e24cba86182544f488542c5c1b7fbf25f20ac49570bb810f3e138d74e6bc86f518b9216cdaf0d7e6504f58a473faf417fd642bce4b1b1b5c1d53cff030bda107f4ea16ff2ead227bbdd1f815029999db00412a22958869fa6cce91b535b64155f26c010000000400dd001c001b8004000300050001000c000000040002000400020004000207000000010000bf97e338adee8bce4c39069074305b28ba87c930c88161523018df085d4474def1c335f70c06bb5636b093477ca4299333719aaeeb2dbc08b7f17bae2a2b506f3912356359a6329b81d7b08dbe50b86713bc03b0cadac748aacbf3a34d25cd5a89c37fdb4243fdd4d074a8467b868f73f4081a7778ec9cd56e5f817d7684bad54dcfc06143160b5565afd4e38036ed6491c2d17047860e0000"], 0xf0}, 0x1, 0x0, 0x0, 0x48004}, 0x0) read$auto(r3, 0x0, 0x0) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r5, &(0x7f0000000100)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) socket(0xa, 0x801, 0x84) r6 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) setresuid$auto(0xffffffffffffffff, 0x8, 0xffffffff) writev$auto(r6, &(0x7f0000000140)={0x0, 0x8}, 0x3) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x1) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc) sendto$auto(r2, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@xdp={0x2c, 0x8, 0x0, 0x37}, 0x1c) ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8) 4.596718328s ago: executing program 4 (id=824): socket(0x2, 0x2, 0x88) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty28\x00', 0x201, 0x0) socket(0x2, 0x2, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptya6\x00', 0x40001, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r1, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0x1000, 0x8, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103}) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x29b010c0, 0x100000eb1, 0x40000000000a1, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2c, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_TUNNEL_INFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) 4.583967201s ago: executing program 1 (id=825): mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f00000001c0)={0x0, 0x7}, 0x3) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x48002, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x44860) syz_genetlink_get_family_id$auto_ovs_vport(0x0, 0xffffffffffffffff) bpf$auto(0x0, &(0x7f0000000100)=@batch={0x7, 0xa, 0x1, 0x10000, 0x10000000, 0xffffffffffffffff, 0x400, 0x1ff}, 0x96) openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) move_pages$auto(0x0, 0x800, 0x0, 0x0, &(0x7f00000002c0)=0xf5, 0x96) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x181881, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sg0\x00', 0x100, 0x0) unshare$auto(0x100) write$auto(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x9) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x88) close_range$auto(0x2, 0xa, 0x0) r2 = open(0x0, 0x22240, 0x154) fcntl$auto(r2, 0x400, 0x1) execve$auto(0x0, 0x0, 0x0) execve$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182b02, 0x0) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sg0\x00', 0x2500, 0x0) ioctl$auto_SCSI_IOCTL_STOP_UNIT(r3, 0x6, &(0x7f0000000200)="855df4471bba356da80b9f7129a1b74579ba9a7be0b778e6bfcd665783e10c8286e81839a69d178618df63a63c3faf1573468b4c06994db7afc8ad43247461f512660787e198f10e5ef121c6509f05") lseek$auto(0x3, 0x6, 0x1) 4.180385125s ago: executing program 1 (id=826): open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mtd/mtd0/bbt_blocks\x00', 0xb480, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000001c0)=""/243, 0x11d) open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x31) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x801, 0x100) bind$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x3, @multicast1}, 0x6a) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x141240, 0x0) ioctl$auto_VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x200000000) read$auto(r1, 0x0, 0x3ff) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/veth1_macvtap/rpl_seg_enabled\x00', 0x202, 0x0) open(&(0x7f0000000080)='.\x00', 0x518282, 0x78e22799f4a46e8e) 3.728738574s ago: executing program 0 (id=827): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) rseq$auto(0x0, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) mmap$auto(0x0, 0x10000, 0xde, 0x11, r0, 0x28000) madvise$auto(0x0, 0x2000040080000004, 0xe) r1 = io_uring_setup$auto(0x59, 0x0) mmap$auto(0x0, 0xb2, 0xde, 0x9b72, 0x2, 0x8000) open(&(0x7f00000000c0)='./file0\x00', 0x2a8040, 0x12) msync$auto(0x0, 0x8000, 0x6) socket(0x2b, 0x1, 0x0) ioctl$auto_SG_SET_COMMAND_Q2(r1, 0x2271, &(0x7f0000000100)="f189be3509030a6fb2edc5bae18f8bbbfa17c438b91d5ca4903c8a8ea65f0a6f8eeae9ca1a221118d16da189c0aa15431e37daad49a7305fb69f5112bef380309ff66f23606c7c45d9fc31cda2b00b042727bb508bfd376315af5ce7752c2c5507fc574549aad2389bbe5d2e1456a13f1adacf3ae6f568d422741314bb692ae2fd5aa26b37b5ddabc74d5d608952") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000240)={0x68, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_RADIO_NAME={0x2d, 0x11, '/P\x13jE\f\xf9r\xf5\xa3\xd2\x84y\xf9*\x9b\"\x1c\xa4l-\x19\xfd\xa4\xf4y\x02\xc2\x96\xfa\x84L\x12\xcd\x83\xf7\x12\xd3\xc4\x1e]'}, @HWSIM_ATTR_PMSR_SUPPORT={0x24, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_MAX_PEERS={0x8, 0x1, 0x387}, @NL80211_PMSR_ATTR_TYPE_CAPA={0x18, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}]}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) 3.728539006s ago: executing program 1 (id=828): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) mmap$auto(0x0, 0x10000, 0xde, 0x11, r0, 0x28000) getrlimit$auto(0x3, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptyyf\x00', 0x80b40, 0x0) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f00000000c0)="c0") 3.575829446s ago: executing program 4 (id=829): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) prctl$auto(0x1000000001c, 0x5, 0x100000000, 0x400000000009, 0x3fffffffff) setresuid$auto(0x8, 0x8, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/saved_tgids\x00', 0x0, 0x0) close_range$auto(0x0, 0x5, 0x0) inotify_init1$auto(0x3000000000000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x2c, 0x940, 0x7ff, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}, 0x1fe, 0x7) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) pipe$auto(0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/input/event0\x00', 0x0, 0x0) socket(0xa, 0x5, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4140aecd, &(0x7f0000000180)={0x7}) 3.524156574s ago: executing program 1 (id=830): mmap$auto(0x0, 0x7, 0x4000000000df, 0x40eb1, 0xffffffffffffffff, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x2, 0x6, 0x5, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x9, 0x20005, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(0x0, r1) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0xffff8000, 0x280009, 0xb, 0x8000000008011, r2, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x7) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000180)=ANY=[@ANYBLOB="0e000000", @ANYRES16=0x0, @ANYBLOB="010029bd7000fedbdf250d0000000c00060001000000000000000800010001000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200027bd7000fcdbdf250d2900000000000600090006000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4002}, 0x4000001) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x102, 0x0) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r4, 0x0, 0x81) statfs$auto(0x0, 0x0) pwritev2$auto(0xffffffffffffffff, 0x0, 0x1, 0xff, 0x3, 0xccb) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r5 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) close_range$auto(r3, r1, 0x8003) open(0x0, 0x22240, 0x155) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vbi19\x00', 0x8654092f478cae21, 0x0) r6 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x101b02, 0x0) ioctl$auto_SG_GET_PACK_ID(r6, 0x227c, 0x0) ioctl$auto(0x3, 0xc0205649, r5) 3.425366542s ago: executing program 4 (id=832): sendmsg$auto_ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, 0x0, 0x4000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r0 = socket(0x2b, 0x1, 0x0) ioctl$auto_BTRFS_IOC_ENCODED_WRITE_32(0xffffffffffffffff, 0x40789440, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="69b5b2dfdabb136c46000229"], 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x2, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) recvmmsg$auto(0x3, 0x0, 0xfffe, 0x6, 0x0) connect$auto(0x3, 0x0, 0x51) getegid() setfsgid$auto(0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) 3.417783325s ago: executing program 2 (id=833): rseq$auto(0x0, 0x8000, 0x0, 0x6) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0x3a21eba4) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r0, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x21, 0x80000007, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) getsockopt$auto(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) pread64$auto(r3, 0x0, 0x101, 0x103) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) 3.229042616s ago: executing program 0 (id=834): mmap$auto(0x0, 0x2020009, 0x10, 0x800000000000eb1, 0xfffffffffffffffa, 0x7ffd) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/pci/00/01.3\x00', 0x149041, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 3.07713364s ago: executing program 0 (id=835): unshare$auto(0x40000080) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, &(0x7f0000000000), 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/ubi/version\x00', 0x400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000080)=""/58, 0x3a) sysfs$auto(0x2, 0x1b, 0x0) fsopen$auto(0x0, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x103, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000180)='/d-:\xe7J\x00'/23, 0x1eb0800) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x1ff, 0x5, 0x2, 0x1, 0x948b, 0x7, 0x15f4da0e, 0x4, 0x3, 0x11000000, 0x300000000000000, 0x7, 0x200000006d3c, 0x5, 0x10, 0xfffffffffffffffc]}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x23, 0x2, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r2 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x60d) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x2000000006, 0x2) landlock_restrict_self$auto(r2, 0xb) 2.748936979s ago: executing program 2 (id=836): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x20000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x20082, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x8600, 0xe6) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r3 = socket(0x2c, 0x3, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2048000}, 0x40014) kexec_load$auto(0xffffffff, 0x2, &(0x7f0000000080)={@buf=0x0, 0x0, 0x8000, 0x403000}, 0x4) kexec_load$auto(0xff, 0xd, &(0x7f0000000140)={@buf=&(0x7f00000000c0)="a4fc60c3cde5180ed6dc21253ad62d0090fd882763a3b9ac9585b08c1a24d3eb9af01273e4fe29f02292cb5746481f349463edfdedc2cdf1f84d059f7f446cc6627ac7f6c67aa84f193eeeebf8aacdc67263a7a116e6baef0d082e6234c97f1140955cab635ee98d6de0e180f081d0229975e43a", 0xfffffffffffffff8, 0x8, 0xffffffffffffff01}, 0x2) getsockopt$auto(r3, 0x11b, 0x8, 0x0, 0x0) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) getdents64$auto(0xffffffffffffffff, 0x0, 0x7f) read$auto(r4, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xedKW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1\x1f\xf7uw\a\xd0\x83{_>/\xff', 0x100000001) r5 = waitid$auto_P_ALL(0x0, 0x2, 0x0, 0x5, 0x0) write$auto(r1, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r7) ioctl$auto_KVM_GET_MSRS(r6, 0x4068aea3, &(0x7f0000000240)={0xa3}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_STATS_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003a80)={0x2380, r9, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STATS_GROUPS={0xc, 0x3, 0x0, 0x1, [@typed={0x5, 0x2, 0x0, 0x0, @str='\x00'}]}, @ETHTOOL_A_STATS_GROUPS={0x235e, 0x3, 0x0, 0x1, [@nested={0x4, 0xae}, @typed={0x70, 0xa1, 0x0, 0x0, @binary="062ee85e9eae2cd5b5512a746e161df44052ac1c667beb7bdfd70e3bc2d6067b6e78c2cbf57266d3377a595937720f5cfc4086544d711c88c9270456680d96421f152426d218474833caa3c207c010896832625d59118deac54f64f276a2c7d925ced935785af66b11d72400"}, @typed={0x8, 0x13f, 0x0, 0x0, @uid}, @generic="47141e29a9504f582d20138fd50a412291034b2a39dd2d9d81552f7fdca2455435ecbeb839cf3be700d80e16daa56886495fb3907f00000000000060b79e9a7111ca", @generic, @nested={0x2299, 0xda, 0x0, 0x1, [@typed={0x8, 0xa0, 0x0, 0x0, @pid=r5}, @generic="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", @nested={0x4, 0xde}, @typed={0x8, 0x29, 0x0, 0x0, @fd=r2}, @generic="a58d62a12164e041a8d0d6dd22b669eb85618f48bb131d41a5d2577243bde35c85146ac2bffeef57127dcbd3169a3b9e3e1c99c6dd3a02fb3c6dd033b2ee347fdf3804603b7d8c9b9b5f2f13d610d8af4946c6457b378faa75ab9c19accc2b987e06180bf9d2f8650169c61c7609e43c6d2c6b4665c71430b5c692e53c656e3737742385ea004cd5c5b414bbf45c9e962ae5c22c06cfc3038edaedcea97914d5b5b381b42ad2d03a7b3248613d12cd0bc339d0a3be54f28daf819f5734c7226439b70f70dc6cbe8eb45eabfa575a2b37b16c6c5e2ba234e629311bcbd363f8639bde88cd12e5a7040e", @nested={0x10f8, 0xe, 0x0, 0x1, [@nested={0x4, 0x50, 0x0, 0x1, [@generic]}, @typed={0x14, 0x21, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x10da, 0x14a, 0x0, 0x1, [@generic="783ae06511161cff409965b1e10869964101438be7415cbcd16a1715daded6081eb3215715ea3fc5f81847f661affe537ff080581fa6486dc5255ee623dfb4c467c9272d4b1eb9a86faf8b199aa9176918971f83aecf16e1e50173aee4a24331dc6a702723d8a357c919f7f1ce243f0ede5a5cefc8e5befa7ab487560e7776c19341314e1f5f6bce1be295c8b2b84ad2eff6f66edb0e74477c7fcb4e80392bcc5b01293839c3d9d1a683520e870c348f7e7cdd88d4c3ac6d5d50ef2f5785e9e284a64e694ccfa6cc66af30371dec4c4b00afcf6ea574a31f1af0b9fe2b586f69a8a997b7cc77e3258b1e42591a806d36315752e5b59209eefc6cf559f3d326526e2ba00d302b73bda71d82a320730e3ae25228ae0e8b2bf2b4f41b19dcb4d8a311744aa4c8f90e677f0b3abad32ed064b89f52788bdc0ca4feaf28b7d3cd6e8d07de9c7ab079d1801f3191bc12c6139bed99e4f201af161c434e38582c7f501c78ef1afc48f5e0b2637ff47170a3abe4b1d64f5b35bf43188f8a780ee9745292a52f68351eb77d646de756ac0e41e1818f6471f0df8729c58e7f13f17935edb181b6cd31ab1159b2042f0d0db76a50a2392358059c5ded3534872b956e4bbc517b16eaf99fe598d491123e02c6d870593df4a2f76b306528d2e6a6d663af3770eafd462000906b0e80a6b1f43ba0a1f2c60eccc156fedf4aded2c8148baec17d438679275ea21022d9cb88fcb63abb6d71c4a15edc4e48dc2898bf3660c1fe126d374bd02595271593a826a190df5a1875adcab8a3b116013e92bff314daaa6224b9177f1342a20475d2b8fb925077e5185a1a6b50d7f6093f964b35084a1a8cd5cdfef6091eaf57b5a8ff19619615921dbc7b013da5b1b21c7a94ce5047acc997d22d644575843b30d681dabde7c7d183268787db67244289cccd798cc306494ab692bd0f982f99741998ad9a919e0549a0397b01c1f23fb478def2b0fa9c2c0caa4a7cdd40b4b64e2c78f9b9ad599aabd806b3df5de0128919684d7a3c99039a6e42c257d7ff810a67af598eae822666e06b222e74d7e78e4bf4312e666cfdf4f046058430d085cd31e04f21c03d3ffa210f4deb0a106d72c9fbe081a01d4013c02dee2d821aaf8b59cfdd23ac0cffc23da6f044c9b541054da752f9ff4802c20c64962f87d7a11f81ecda738210dcb9779fcc111d319e716a2cacceb9a2e511b8684b96c3949e27c13a6ca81684fcdefd7c0d813510644cd0c1dccd3a3a2706676043fa4c0c31bd563568fc21ac6468ea4bb941521983eb598e54a82c74cfb01fa13801ace743741b89e0409f5ef3e22fa9936c26b573e7ad72c52debad17f5639d8271e17456bea9ea4f965bde4e035c05803c21584441c73a616d0c3fffc9140d246a5dc14ef9dfc5778f5cbe29680b5f2249819c8d001e58288e7b6003dd331216338827dc179c59ac9b7e09a6204df5e3627265040cf8c74f9add11b955e51bae3283dea280b1cbc2b8f1f95a34b6b8981f93aaed96322f338c5a1cf7fc095da680afd735e8b742e2f29bf20f108ecdba950ed1b674e796788835ff5363339efd6f213f0a6afa67e2e68a2614aab3174499df9fbc37e6f89a2da629f23429cea2a3a84ba40c737252bb2852afd4d12004f5104e4bc47d4a4942a783d11d806a5ffbe3568f55a35521a41f128d29ca8af10ff8b627dac050912a5a2c33c1e125b2b21c7e6b1be7c6d35b427ecbd37065db28239390d153773a964224762030c04af6c05c891bc2a2f84935ddc225519be88b8f9f4b1bc759513b95a609dffac86ebb791a11a699ccf3b92d81a9a417af13d826c7dc54f58e09a638ab16506bcad3231728b43085f180fcf477bd915b98fa0c139667bbe9fe46fe52f594c9777810701e14b554458bbde20e8182d8682b8c1b57976581dce870495f99e7ff579352eb66939fe75537b738c574fa7572808a08808fb2d366dbe98304ca39d5d7a245c6b48e2b1507c31b463aa6ec2fda19126b59e951f1b4c66b51042b15bc39674f8cccb26dccb157bdcb53843d48bc4d7b7c2c82c8fa815023da47052346911621b4a397dde9142cf8a8af570a313defa7e8c280ca3cddc3940d956a843334b35f28345451e706bb745b43a78d616ce9019c0f4447e2aa164a24bd048ee2c7899d9573d31466a4a899f199898939888e359570ed01be195ef9df6744760d419a21f54c7d85853e4425658586ae7255eb06f47b5c6a7c6be65f8c3cf341d19e800357ce618f4780618ea2bd7c5ea02899c2910dab14d4ad6d193942125eb6ea7f5f144233ae01da8884ef5205b934f53bf6c4516aa097aea4d2944a7ecadf9021b30de62310639f2893db7d5effef8d70c1d871a1245d443b50756332a3f58c8199c2428fd1083496b80743143ca48af3fd5e5d8226556229dff2cba7e870e7babd9dbc37ecc2616437ad015cafd65ed5af005460cec4e2af5a9fd2a18b34ffdf934f33668d3eae2f7fbc60443e555338a870768019ce3150fe1cde14c40ecbcbe5e4f39f99eb37ccbb69364a2e586cb898954c9aadd4b736d3f41dcc4a6a5f3b405113db08e885ecba3b5d3317e7731dc24489dd4ed9fd79db6789fca7de32a0e1c75104782c1f6330946aff19926d870b92f71a7d57a1d29c2348c75b586997543bab1e52aea0a02746baecb67666fe5786db1e88a390e42fbc9a685625ffc85e0eed069b25892fa0c60c070f26788a2ec6a34edef962e527e6d1112876679de0e0ed27f66ae8021d5ff6e60a0b21199cf159a810aef0a5df18a02a139338dcdf63f2fc6a7c8c1a62a567c51c5af071c23e2d6e0b539d4be73b783a318678a39c648e7f75d688fdf59545bed0664d124bec39855841041a8183e7750077bda3c47523e34dca25ef1c51a11c5d815c46481266bb991b3b5ba6026f5a91bf6f8e6d3c2c2a84c201afdf824b28fe885a062302d2de17e6ab19fa4fa5e1664b9ad345f799dac5549571d41e0e175d13c8343df10b98e723426988ed99f8e1e11c0a1c7f650b8022003bc335acd100e3e69f2dc529acdd6b0d99808f8b31faf81087f4a40361a4c7e8b549b54248dbab1105bdda6b5782060ce9bcddba4dd8aea67be2fc2833965f5af087e5622fb250102a2eed8b02fba3d7023b5f71559df48a802ddf2408aaeb377494321d5a5f09cf2ea130ce929419205eaead2331a5ac7ca37fa9613dd2aa7b31266499772abef73a7c0e05b3dcba11d97359c7e8b35de7e7d48d7b0a8d8cd8bd21c59823198a6bbb0122f84a39b0f405e2e7f8898c443b1ae3044a537efb7f7208a75e1e31ef951e8ec19cfbee66715b4fb124d75cfe68ed5557695f1cc6162ad65a94e437b9844343bb77b2a8f7a5938eb333d32628dfae193191a5841feffed3be38c7514e99b49f691a13e03858d32fe102f73c5f1f26f140a131956358c7d5ddc2a2186d15d2cc7d82513aa140c31cd3b1e9270d4cf3cd0edfe383a1693c7e27dcd4e04635b20dda16a58b3832f714d0acbe871ce86465da0cdeb09c44ff49f64c28cb03f3e20609fdadac3acf67312e9b737f5fd12d3d8f366ab81e48c125bab433571d37aa6a23f83f36358fa318f776c1ed925cd81a6935fb1dc5bd2e386a3fd1f4d47684d92e368bb97e31b8d5c2efacb751674a1ff31f62c6c6ca57aa49ad15e47db6fd58117355a61b4767ad81e28fa5aa9331821d4112d1776467f0956ff43daa10b3d98fdcc1a120e097aebdd0955bf55c49b8679fc47dcee7c1e52fcf9054826f27c180ec2ac0bf7a96004219c987c0dc07f1cc939ed6e1e737567b09017f96654329c31eb818417d52177bbf28eeb3405bc9655847a6cf1315e22beb0efdef4289e4d8a7c607c60bf12a1720bdb5fc50523173e697c78b73f52cc0a1aca26ebb152a8f86ea49be35c48ed4274620dc8be786096ba27495ef191c7376761f90648f07a8e6b970c407059ee0088de2fe9819a792568e9f912617887b262812fdbc8ac5a66b319ff5c8f88ea9c0ddc67e55a463fe37e076f1f3c6eaf21c4fb58680087bed86b37be7247904ce7b52c1602035a6b94e4500224d6dcb47f80c4e9ce40f4088d11ecde250d7c1b77e23512591e541549a6a4e79dd015c47e1ea20c7b15e6cb1b1d97571d3c9a9deb85bd48f9d532c0bd36b264032833d5f614ab91cdf6ac98dc78204483d37e97a5265ffe883bb9a92233a7e2e6c53adac5ff7e273f684164017013f4b63a1c816ff1136dc9e5bba757e2be6f6c4deb062df720b4fb1f0bb4b87c6cf205ea3d72fb8dd0cc195ad56cbc01c4da2850aa151773fb336ae5765095ba643b5590ceccd5d9e836c83329ee68c6a5bda01852c7ab4e8d317b0a6f3bd38e2c7d1893ae73439ae45fb622264d2841ccde3f511eedad28ce0b9605bad61abe31a465824f485669cae87b4bd98b1583ed1c4a84a33b902d36ff80b8b589ef9857b90c665654209e59faa74ff797584efe38a118942018872f8c7aa6b1477e053e88031b2c34cf3983c8711d0528b13789f3fc87e1356f39cd88b8df5649f607a876da7e00420ef06f44c4e62870a9f98f968af2dcc586e900f109c5d4a7754c45b5fc51b117d41baec3fbdafebb60595cf260c49d197a65394a5045fdba7a03eeb608cc521ca2c6633e756a2bc4ee95ea8b758b41fe03038747104be717484d95dcbf49d85617966f2f39178bdbd51017657ca3b38d8dc5b8dc6f5680b45ad933166cc2b9c4d3869e4246ae21ad955006d3ac7b6fb89e1db1c01118cb1ebbcceda02a784e51621f2686ca1e765190320790a5f75986bfb862c1316bb667e6bc803d9ca472a3b46e4d10812b21daf2d9816a1a74ee08b6b1ce35b353aa5e4a723e4ac839f3302de4ef14d6b0d694b575745dc461ca5e09ca81fbd908cbed83e8f5fc3b8cd4c8fa9b5fdf9c034afb2e5619dd4db7328fc2d3da3d95c8eeb58286c7b4a4070e54a7cc0b6a1f6ddb2e4e2a33d38602262f26861829d9d29609d8f7a06a3f0b62789f37be331f8306aaf13c77f1de4ca258215e68312521f2f84d0eea6e5ee412e71463020f72d9e5194af0307ca1ea149e4585cd9e977a8b9d4be904cd9f9925237ea12372c21b0de89719489f6457d8d7cbf44b99614252da1a02521ccde9ee5b366ed9cb1ae675872080a70600d49d55d55d42916c306f0c0bf47d5d2164c42f6097ff2b046b4a2f2e9c6a3045ef7c2de241afc82ae06705691f4699fdb8f831a3ab018457e990c2a017407dabd727a058ebf0852a9196e142f729e9d003aa20c7c4a30d37b283e16171054080eec864e6319ad088418d2a83760f1633a40b532e2cce718d8d5046f480cf78cd382716ebd7488600c0a559238ca236feb246e568ba4e8936ef0b474162ebacf21040d1b26cc0670275dcfcb299a3426fee9ea14890a32d175da2acf1dca565512bb999d025641bd557816a6590a62cde5301f8a9f459c9699635fbf6a8eb75923ca2af98b7eb83c8bfd587fc85cf516bc6747bae2f22c0f38d074170048dc7980fd7f16ebda5fa0701fdcdc4b66d565fd93aa4fc348c8bb8f80c441c2359e9f0e4e251e519745e81851fa50851b2c6f2ffb44fa48093e6664c8e0c557fe2f3155d71865f557b129d22f85c9f8db77ae5ea3889bf8f62ba9390f327235a87cfe1299a69d92a95e478fe1a7a9df1bea1e503828cc323522c0bba2c700414e0199b11bcc204ec5281c527ebaab932cb87a2c06854fbcaec1f46d7656adea7da6698b91050affab6179202dc9f30475f2729c6d93b6d023c6", @generic="0fb42cc66f0f9a26e518512ce38e606133533c981497c6f705165db8f7379a075cf8499643c3ef482387ec21e23ac0f900ee397031a70f4b541e746eb0b16cf6ac6c46477ad9e0e1e95ca065057e2f68554505a62dcbbaaf6fc6470cd28c3fc2b48be05230f407477802ab9c313f63485582d20e0f983260860f3189c36799f7da6be40f1172edbd77033e019f538b926a80eb78cb0dcf3b8a7f53920860912ba18dd3693c85f83300de70210defb02ad0f2b90a7a934a558faf1d8559a4fb32d3916f8220481513174ce72eb7d0c62bf959f5abeedd"]}]}, @generic="80fae4ea0e9b6b7438c15f16f7a62d5397500dd82eee97a5736ca125b832690acdd02fbf9168c959bf63305cb1823567aec6d73b3c354b3ebdb28e4268ea16776dc756dc6324295b63e1a7425fc4af1cec986d1b1611d42724b5ed139680eb705a70fca902e39681057ff7a52c914a239ffc975191eaf76b608cc03a3c7449835d6522299e326766b847a9d13193410f0d5521d578ed7e18ebcf1c075c46e846"]}]}]}, 0x2380}, 0x1, 0x0, 0x0, 0x4000844}, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) 2.31355937s ago: executing program 1 (id=837): mmap$auto(0x0, 0x2000a, 0xcf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) fanotify_init$auto(0x200, 0x1) fanotify_mark$auto(0x0, 0x1, 0xa, 0xffffffffffffffff, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x5, 0x0, 0x56b) (async) mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) socket(0x10, 0x2, 0x0) r0 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)={0x14, r0, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x404c091}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async, rerun: 32) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async, rerun: 32) unshare$auto(0x40000080) (async, rerun: 64) io_uring_setup$auto(0x6, 0x0) (async, rerun: 64) setsockopt$auto(0x3, 0x6, 0x4, 0x0, 0xfb3) (async, rerun: 32) mmap$auto(0x20000000000, 0x8, 0x4000000000e2, 0x1ff, 0x401, 0x300000000100) (rerun: 32) close_range$auto(0x2, 0x8, 0x0) r1 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0xa, 0x300) (async) unshare$auto(0x40000080) (async) write$auto(0xca, 0x0, 0x7f) (async) ioctl$auto_SNDRV_PCM_IOCTL_RESET(r1, 0x4141, 0x0) 1.941797122s ago: executing program 0 (id=838): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x9, 0x3, 0x2}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) select$auto(0xd, 0x0, &(0x7f0000000400)={[0x8, 0x200000000005, 0x7, 0x7, 0x0, 0x80000004, 0xc, 0x6, 0x8fc, 0xb80, 0xe34c, 0x9, 0x3, 0xfffffffffffff954, 0xfffffffffffffff8, 0xfff]}, 0x0, &(0x7f0000000080)={0x800000000001ff, 0x401}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x0, 0xffffffffffffffff, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/radio27\x00', 0x60200, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x48800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x101000, 0x0) sendfile$auto(0x3, r1, 0x0, 0x2) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000140), 0xae02, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video64\x00', 0x280, 0x0) ioctl$auto(0x3, 0xc040563e, 0x38) 1.925996148s ago: executing program 4 (id=839): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x48080, 0x0) ioctl$auto_NVRAM_INIT(r0, 0x7040, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x2, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) cachestat$auto(r1, 0x0, 0x0, 0x5e43d222) landlock_restrict_self$auto(r1, 0x6) 1.696585848s ago: executing program 2 (id=840): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/bridge/bridge-nf-call-arptables\x00', 0x101242, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/mm/ksm/use_zero_pages\x00', 0x101082, 0x0) (async) socket(0x29, 0x2, 0x0) (async) setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0x8) (async) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) preadv2$auto(r2, &(0x7f0000000040)={0x0, 0x80000000}, 0x5, 0x3, 0xb, 0xcf) write$auto(r1, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) sendfile$auto(r0, r0, 0x0, 0x3) 1.370670965s ago: executing program 2 (id=841): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) prctl$auto(0x1000000001c, 0x5, 0x100000000, 0x400000000009, 0x3fffffffff) setresuid$auto(0x8, 0x8, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/saved_tgids\x00', 0x0, 0x0) close_range$auto(0x0, 0x5, 0x0) inotify_init1$auto(0x3000000000000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x2c, 0x940, 0x7ff, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}, 0x1fe, 0x7) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) pipe$auto(0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/input/event0\x00', 0x0, 0x0) socket(0xa, 0x5, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) ioctl$auto_KVM_GET_MSRS(r0, 0x4140aecd, &(0x7f0000000180)={0x7}) 1.300253559s ago: executing program 2 (id=842): sendmsg$auto_ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, 0x0, 0x4000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r0 = socket(0x2b, 0x1, 0x0) ioctl$auto_BTRFS_IOC_ENCODED_WRITE_32(0xffffffffffffffff, 0x40789440, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="69b5b2dfdabb136c46000229"], 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) recvmmsg$auto(0x3, 0x0, 0xfffe, 0x6, 0x0) connect$auto(0x3, 0x0, 0x51) getegid() setfsgid$auto(0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) 1.196745183s ago: executing program 1 (id=843): mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0xb) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0x3a21eba4) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r0, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x21, 0x80000007, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) getsockopt$auto(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) pread64$auto(r3, 0x0, 0x101, 0x103) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) 888.857325ms ago: executing program 0 (id=844): rseq$auto(0x0, 0x8000, 0x0, 0x6) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0x3a21eba4) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r0, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x21, 0x80000007, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) getsockopt$auto(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) pread64$auto(r3, 0x0, 0x101, 0x103) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) 799.293828ms ago: executing program 4 (id=845): prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x300c00, 0x0) ioctl$auto_TIOCGDEV2(r1, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socket(0x10, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r2 = syz_clone(0x200, &(0x7f0000000000), 0x0, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)="d223bd5eb44ac47e6e8675b3800550d85d73825e4c2c0615d0f7de57651a5502a2de") process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0x1001}, 0x40000000000001, &(0x7f0000000280)={&(0x7f0000000080), 0x9}, 0x6, 0x0) r3 = prctl$auto(0x3, 0x1, r2, 0x5, 0xfe) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) r4 = getpgid(0xffffffffffffffff) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f00000002c0)={{@inferred=0xffffffffffffffff, 0x4, 0x1, 0x0, "bfc956f7b829ea9bc64a831c54b927c5c84cdfcb6d840bf6034bbe162b339fcc0b9ad62f05f5e47256dc5c36", @raw=0x4}, 0x0, 0x5, 0xd77e, @inferred=r4, @integer={0x5, 0x2, 0x5}, "ff0931dc5a3fb879791acf380abcfd7f9f393a68114cc9d69244416e96525a166b971aae562cbc70472d48eb5f54d36edf407701d0d1c4e40409e86cafa60765"}) close_range$auto(0x2, r0, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="24051c27c100dedbdf250307cc0008000200", @ANYRES32=0x0, @ANYBLOB="060007000080000006000700050000000a00050000000000000000000a00010000000000000000000a0001000000000000000000060006000d00000006000600070000000a0001"], 0x6c}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044040}, 0x24008890) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) r5 = socket(0x2a, 0x1, 0x9) setsockopt$auto(r5, 0x6, 0x1b, 0x0, 0x3d) 168.316686ms ago: executing program 0 (id=846): r0 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000001c40), 0x0, 0x0) read$auto_ctl_device_fops_user(r0, &(0x7f0000001c80)=""/12, 0xc) unshare$auto(0x5) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='m'], 0x1ac}, 0x1, 0x0, 0x0, 0x4880}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0xfffffffffffffffc, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x4, 0x2003f2, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0xd, 0x0) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000804}, 0x40000) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) io_uring_register$auto_IORING_UNREGISTER_NAPI(0xffffffffffffffff, 0x1c, 0x0, 0x401) io_uring_setup$auto(0x3, 0x0) ioctl$auto(r3, 0x200ae60, 0x10000000000402) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f000001f300), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES32=r4], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_JOIN_MESH(r2, &(0x7f00000017c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001780)={&(0x7f0000000700)={0x1050, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x1}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_FILS_CACHE_ID={0x1004, 0xfd, "54acea5b9bee582baa4b7ddd771b3a3cf2da97356b79cb30e5d729221694ee03cce411f0f0cc02bb45aa1b4351c2d21e0896d5b64162a8ff837d39ec331381f7495fbd08edc5f5b37181c10e0456a2cba440475dbf4843a977edb4fcf34ecc53e64c5c4c052333b231ed8d3b39b3975a73894daadc01fe2e133d1e7ba4699614125a04499916741c04f96571ab5aaef404d5477c6bf727ee6c556ff63499d254a2d05e31cfeed08db00af2af8901559aa150a00cee4003336ee203346f73a8c39934d247bb85e69ef225958c36377ea20fdcd7b1dd3e2d190492b2d1e6f53109de9429b2357e564151766d76e8ca8c074742cbdc55de1f03b3b4b8d68f186c78335cf1f4d3d9525019bd947a9c678408a10745de7149bfb1d0fd350ab287c4f5657dc406a8eabaffed56c4d2558242ce19287b916ad20b7bd6d413978eb55f7969e01320651cd4e15d8f62eb397cec8623fe6a4a491a7bdb0bc1093f828a5c36cae5b2cfb91f122681f6e174f7e9bd8adad7f3925f6cdab69216f547f80f6f3bb564f160821be3b19ed5536ea2b2765a7ff24f638791cc3b9b0a00af29f537569595008b454d88127b46ebf80edcaa5ec87ee16b24666c92e3f4262c2b957f264fde3d5ccc72815b6d8c701d802eb9891511af13c88dfdfff48889fe5c7f53f754e1b75ef695499387e4764a716701cac46722c4623d859c9e630478f9a0875b68c217effaa332af4216722a3162556c9eb261a2b1d6436faa630563b98558e3eb4bbb34734ebbe805ac91dcb734aea0c1aed86ccb8cd2c502fd586c08506b5a4775cf5c73230b7aeee87a9e2c1361597314acac29393bc7cf6477bc477df041330e5a0539a1452626889e805abcc64e11621b1d48854ff7feaa19f709e6ed8a6febc8e35e62281f60ae59460aca2e78d18a1a33c22b1b672ed7c1868124a9c0b93cfa3d287c443ebd5c180405cbc0dc97ddf2c0d489f700002f43df47da2f90ab25cbe78f57189e80703060e0c2f0f2b09c89195dcaa094998c0814861642cbe31a5a492a3caa01f95af934590a7357cd9c5d23551d83b6e9f7daabe443bca39b2399f2b232cb35a691138d7a4f3b29ab09ce052ffdd6a091454be19ed925efa071f91c27987535943ff03c9a382867bfc2fd9973a067c07ab87e78d1e93d8c35eb610eea21ce243c707441369457b29d1351253a9327be2ea7bf09b7998c94b564097f857b89558563de1424cc86914878edcb4ff95216245c9251071fb22ccbd668c40703843d4ec37d6f794bb507b2eb7c32b56addfff47445e8fc69449758e5aa8050960c78f691c3fb036dabccbe24874457a4584fffc69c9b8e61028bc149acacdfe6af78f7e1a43ac905650a689fb72b54690eabb475b829704ffda557a2fd0b35417b3e69ecfaaac6fd70c1be327ee2daf678450bf9092229906109edce27a371dd30fefdd4f0e8878ea285227c8fbe581fc5ae2accbe3e23f9758a08e8669a77b059442c0263cb0f57623a015085c1aa249769be1e3e4cbbed2f7c497721f42ebd34eea4f003efdfd2b302f457b0c34c70bd6d8740e86de1beefc075b4034cc86c4269d5a1d1f06b0c052b461607ba55c9eb34b88ac6979a7caf72dc04ad61190ae158c2b5384a85b5c073daa4423450d9c8873ba72f85bfe4a6fd7c8247ef56c1e4cbe76e1272fb5dc2b7ac0491d4b98c5ddbdc6e4e0b78f3afdedb1929c1e69dcb7fd89d47f75755b014eedd66f5312fdeae2210d8ad21b68fd4f53182158d7c886f5a0dbcc2f49ec7cf3071d6bf3650a8aa162b737bce6fbd2afeb86fa65f1f3535a124fe0eeeea6df8e7df8efb2c68dd312e40b337c3b71f4eabee631e1571bd461e5a2d9e0113ec26279102c4651845f2d03417e9e2522245555b99affe542690c3b75297572f45fd18a69b7612b1741de67f9be7339c764e258d4962f617a563fe9ace63bd1de79bca44b933499e0dd4af20826fc991fca69c3f332e53caff8074a9c660cfc2e46f34da9e210281cb5c11412d0933c342f55f3bb32d551efd04f7afe8661a16974310cea781827d801273a678c90b88f2781cb583174f43e1e23fba8372d8fe84f857c9e478ba39b3efdb6bee4f160a817cea56a16df8b66c2c71a07f52f8d6bd42bf7163387f6a7c7de39ff5b92c38361fb5dbf2275543c89f3cda2676e9793c7c4e86fdc74bb86f34fc3ec08d70f0762e42938c6de2dbe1d412d27b7c3c28c188ed6219b787241d71bbd7839deeffb944c8249c3705e157afdfcbdfdde75214e078d43e74a6769a328accd97c28b83932cb404a0c5443b071f2d6682375d62299cbb44ca282bcc5cf30bdd9f25d33a7ef8430de31e3a3e339d712eb92c62cccfdf62100de53eb34bd9eb3f6824eff3e2ee756ceccdf3670704d14300ddbe7c5364d0fffff9d138c8545e01dca240ad70cf7131a6fedc5e755b34497e4d611b3388f2370d9e03b779a6d06521def887061fd042afe839b9176a513b57405d67e5c202d8bf147c03ea7d4a0253e379ed33ac50661bafa643664ebf612f117eff0e22446afabb3b31ea40e8ae59f69985818957847e364163747d2443517e32105640ba988be9dc08a04e5eb7f9c32ccfdb6b97078a7341094777f789a783cb5cfe9b59fe3d387ae8b6edb5247ae4da47d1399e87b9e93dbac3c5689dbc76695b120125a3c76753274dfb1a60d2bda9524cd872fd361133f02e42a5e5cdb054a59cf8086f5444a2995b36eeefbcee5e97121598fd0ff33797cf774f14a4db193fd57d582cce17e535456efe9fb64aa5235ebc49772f51642768b201443dae70ba6a150b146640efa9a967536b46075d2b74f77c252c4a4dfbbec44336722dfd4f7a53b9b262c7f4ef7a3b7d21ce93747ccdd98d35ae01044c53556bc064055cee2e4096c88e4377a77aa0a64bf1e7909680c98a85effef95965e5e91fdbe9eed91afe17af1011c180612b2c0934c21659df0bbad17817509edfba4643d7872f00fbd281ca8f812b18d77177531c6b072d584c5a8c639164f4ec84801c830288a21cb9997afc656020fa87a16164cb8dcc4f4b39ec81e52560786b12c224a549c1d1130a1e75a8630b1bebbadfb4adbbe8e22f31dbefb25a1d9757f4ecce321f9caeaf598047675cdab07c44e6d7305eac6c8981f8f21242fc4462c570c713acdeb00a01039f4b2dc12a748fa06a00d8ffb2ad22fe32a07f23471a861c97b8c41d0ad7078a1a6afd89c5a9f3ab6b5221e02defc0a670562efbe45b7e8e0f8d0fc7e1aed97d3f7f39cca0b1574872b4b2cdbd9f823dc76a91fcf2befa248962f2c41f73008813e3a66300364b1aeec460e4f8eb40c79749cae8fab26683599229fc2be1d469e5e42b3b1c19ccaa27517462ad4c489d7a35c4915796d296748b6a155f9ca74537aed35f45c532ea032c980a3b643e07a14dd8e49e1ecaf2efa6ebe41d09d3c5c65dedc5aec7231c855175153d682a9481b6b1aa83136562638ffaaa843c1d7f145a9b10fb4c7c6fc1a879e0c64d37036975122090290a015d409b70ad823d4950454980e75ec3a83e7065e9a722f73724d34b4c03c05a4d50bea665e7bb0c8732d549da5a360a42fae64fe63293d4178d41f2cd0114bea8767491f76d761c8ece559b646ae2eb34c8a4b05e842b15f8de93a6a27ea1f584e6e36f1ce2c8a3f88eb7044b54562a302be69e67cb9ba83cc251df6537437cbd38ec13db48b29da38f9c39451477e43516ce0ef7d5a927727afa307e9087ea30af744f92a33414c6d0f1dd4f320dd2d47e0511eadeea12874420f839353ee50ec3e205a2f853134e1972de3a1fca280fb505f0baefc7db4bdd16ecbd8ff51b0aa3b46270e7bf32ba15bccf892bfa6671dd6abd52e6deb88110795f87958b690f725a4a869a5fb82378d9a61ca8419a7edceb1cdabbe76ebf2e75b5b1fc0a20f84d8832370cb1416cef87ee6727cea01efb0ca788952996fc398cf2e1325f22c8750a82fe959c241b8eea1cb33945fb85d8d520fe80ef6f0ea10141dfd72063a25875836068852eb543fc54c1270e425f95bfd311ba15b6d6990dda5b65da72b1f8fff3994ed325b297cfdba50f2aeed81f5acc31cb09690e09be982d9092f5e3b22695e0a6af2656f1a4c6d13fe7c05ce56241fd322571ec2172eedffe2c226c3760d9316def62367aea93f87f8049d3d324d6fe8e391aaa97e45bc8fc764d7191ef021cacb421c130085208d74c9f325c28170fbd205cacefea4e27100e80eb0d37700cef9e23f02ff3d8a55cc8756c2c0a5485fad857597141be443b73448a15b8cf29e49fbd350d1c3b64892f26b659c29d6faf2745d3239132617a9d21039ef5a72bc4b2a8ab46d49dfe2daebee460fefb493bcc9f9d90910abcec335758d66445ce80be28bf43ea92393eaac8a222ce5f2a936fcc43988f486881715ba30e3c25badcc69cf9bbe2e83491601d7da838e6363d12eaa2f48a8cdcc9bdc3555ca15229a7d79827639522f3007bd7ce9872851a0bbca804ea98574583257ca730547f34b5e61e00a335ce3336185c4e42c5d8a4dd061c34885a5fdb4bec3d82bfe7002fa11bec9a36d1397030d0ab544fa0e6d7c5c4369cbb7086e280b18d4eb69bbaca33d1f72d9ebd297024f2d30ef02f225ee702256821283d1dd431d7395e21bd4cd90e2670dc4f8bce0e537309900673bee1bfdb9a5bf9c9bb599429ca6abc33852ed1d16b8ff32a5e5be11f0e7e4c489e0a8d33b924a65c337986be214ebb7585a8e3f0186736bda30e76b22443e34f01b5ff7d573509ac9e335f93162a55056bebd4ccabdb76e67037218046afb5b4cae473b2d686aec41a83b43892882b377bc2513e698d114dc622b543ac2a7dafd31916d64938b564fa13742e20341bd2edaf3a71ebf14f597e53c57512671376294a7cccb70e7d91241da8da454e466f1777f2b8a3f463ff5ef62ac44ced8c28db391a29e648cefeca1326c46d7ae5818d86ec1b28418251b6da411e72a10898fcefb5ce18a08d9d279c475f1a7fc960804e59489052c520ac9e1e15ba6e35204b85e3b8be55380888444bd504e89223106303711b92adf2a107f8d685e281bbf0b57b8ec145de1a4a5ceccc1c35ee59383c3e7d63bcfd4ba90bfef2da3b9331706e004d616a257ae9264300c7dd030d239163247a63606e25bd5a05ece8c7c4a49321b7f04d0de8610d68252f3c56e1897d8d1f09ab24acf1c942a8a9817374633861eecf0a97ce2a097a1e1a10704c309141d62a23caeea394ec1640fe9346764d6b7e1a6b49b7daffaf68834e9cde52ffe76678a9f6b222943b16728e247c9c3a62a5ad3e8140b91cc97010fe3fa5d0a2d1318d7b7bc20f45eaf55cdfffff9d4a2ee105b0a8d7d4dc56e84ec7203d5ed2fdb6615e6eb0c33ff895a1e0486e3d865a9dc0faa2906c98cba0c5a17e64d167627dff8f8ea84958efa024b5df79e8d4a9a03c8c1980735285379d21ad4bffc2bca92d7e7f4e3f3d3febbc4b584d403a51a6ae9bea1b2feae328510be8e00a8e847119b0f5f3794c994c90de40c1eee37cfd70743d2bc7c9e72470991c5ce386748d37e3775c44421c66936b84f4ec06a14643b0075816887763e75507091d57287a55f5c83acca0bbae51fd5f71f2200e990b33c06921f3380240a5f40f225b1a07498151b9ef0c8ff618390357b2c6a2bded276e1145e6cccd9eadc5a03efd68dc32ce7c47637e5065aa8e9e12cee7891a6a32e065d573741b3978b2ed9ed7cc0ae2551a272baa51695f623d5977cb9"}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_ASSOC_MLD_EXT_CAPA_OPS={0x6, 0x151, 0x101}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3d}, @NL80211_ATTR_ADMITTED_TIME={0x6}, @NL80211_ATTR_EPCS={0x4}]}, 0x1050}, 0x1, 0x0, 0x0, 0x80}, 0x0) 70.902259ms ago: executing program 2 (id=847): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x8, 0x1, 0x4b) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x5, 0x2000000000002) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x3, 0x100) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) (async) socket(0x10, 0x2, 0x4) (async) close_range$auto(0x2, 0x8, 0x100000) (async) r1 = socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf25030000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) (async) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="18000000", @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x40000f0) (async) unshare$auto(0x40000080) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020029, 0x3, 0xeb2, r2, 0x8000) mlock$auto(0xfbea, 0x7fffffffffffffff) (async) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$auto_SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, 0x0) (async) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8000000000000000, 0x8000) (async) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000180)={0x1, 0x7, 0x6}) (async) r4 = open(&(0x7f0000000080)='./file0\x00', 0x22ac2, 0x5d745cb200ae4d7b) fchown$auto(r4, 0xe5a, 0x5) (async) utimes$auto(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)={0x8, 0x8001}) 0s ago: executing program 4 (id=848): pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00<\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t+\xe4\xc2\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0) r0 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) ioctl$auto_XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000880)={{0xffffffffffffffff, 0x0, 0xc5, 0x0, 0x6, &(0x7f00000004c0)="446b081769e3b176bd009e85f5084404010ae3abc8b0961c665b7e010123fbf142831055f70eb4636634db71af3b1aa74fb6c1c48c1342e9d4556c986a8dc44d6d99cb971bcb94fc4581d7a747a31a624d2b4e4c78c4a59fee8f75a8b0f0554f6d5fb7d0cc9b9c433d0281999ef53e6870305515193d1dc9e12464e48b31ddbd5ef20860e094b0f47f7576e3740a34915560041df7368da5e3a31a504b37f99b4d", 0x0}, 0xffffffff, 0x0}) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000000)="c80d1b5d399b3f", 0xfdef) read$auto_rng_chrdev_ops_core(r0, &(0x7f0000000040)=""/4096, 0x1000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000001040)='/dev/vbi16\x00', 0x2480, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) kernel console output (not intermixed with test programs): 0 [ 175.095328][ T7056] HfR: entered promiscuous mode [ 175.211985][ T7056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.209'. [ 175.262006][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.293267][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.336979][ T7056] HfR: left promiscuous mode [ 176.286397][ T7066] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 176.303056][ T7066] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 176.309272][ T7066] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 176.338451][ T7066] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 176.365941][ T7066] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 177.570119][ T7088] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 178.311900][ T5145] Bluetooth: hci0: command 0x0c1a tx timeout [ 178.386269][ T5145] Bluetooth: hci4: command 0x0c1a tx timeout [ 178.392346][ T5145] Bluetooth: hci2: command 0x0c1a tx timeout [ 178.393594][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 178.399534][ T5145] Bluetooth: hci1: command 0x0c1a tx timeout [ 179.060889][ T7102] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(668977.0.0), cmd(3) [ 183.192199][ T7155] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 183.231242][ T7155] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 183.263140][ T7155] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 183.297058][ T7155] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 183.368757][ T7155] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 183.508828][ T7163] HfR: entered promiscuous mode [ 183.551853][ T7164] netlink: 12 bytes leftover after parsing attributes in process `syz.0.224'. [ 183.633380][ T7164] HfR: left promiscuous mode [ 185.263103][ T5145] Bluetooth: hci1: command 0x0c1a tx timeout [ 185.269348][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 185.343080][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 185.349518][ T5145] Bluetooth: hci2: command 0x0c1a tx timeout [ 185.422973][ T5145] Bluetooth: hci4: command 0x0c1a tx timeout [ 186.108390][ T7192] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 187.908808][ T1164] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.765528][ T1164] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.366368][ T1164] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.931006][ T1164] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.043218][ T7232] netlink: zone id is out of range [ 190.057613][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.231'. [ 190.090692][ T7232] netlink: zone id is out of range [ 190.476146][ T7236] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 190.483915][ T7236] vhci_hcd vhci_hcd.2: invalid port number 111 [ 190.495397][ T7236] vhci_hcd vhci_hcd.2: invalid port number 111 [ 190.516796][ T7234] NFSD: Failed to start, no listeners configured. [ 190.768805][ T1164] bridge_slave_1: left allmulticast mode [ 190.780395][ T1164] bridge_slave_1: left promiscuous mode [ 190.813016][ T1164] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.949813][ T1164] bridge_slave_0: left allmulticast mode [ 190.977221][ T1164] bridge_slave_0: left promiscuous mode [ 191.011665][ T1164] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.436990][ T7249] FAULT_INJECTION: forcing a failure. [ 191.436990][ T7249] name failslab, interval 1, probability 0, space 0, times 0 [ 191.663124][ T7249] CPU: 0 UID: 0 PID: 7249 Comm: syz.0.238 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.663179][ T7249] Tainted: [L]=SOFTLOCKUP [ 191.663191][ T7249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 191.663222][ T7249] Call Trace: [ 191.663233][ T7249] [ 191.663250][ T7249] dump_stack_lvl+0x100/0x190 [ 191.663310][ T7249] should_fail_ex.cold+0x5/0xa [ 191.663352][ T7249] should_failslab+0xc2/0x120 [ 191.663392][ T7249] __kmalloc_cache_noprof+0x7a/0x6f0 [ 191.663441][ T7249] ? __kthread_create_on_node+0xce/0x3f0 [ 191.663482][ T7249] ? lockdep_init_map_type+0x5c/0x250 [ 191.663547][ T7249] ? __pfx_rescuer_thread+0x10/0x10 [ 191.663599][ T7249] __kthread_create_on_node+0xce/0x3f0 [ 191.663645][ T7249] ? __pfx___kthread_create_on_node+0x10/0x10 [ 191.663699][ T7249] ? __pfx_vsnprintf+0x10/0x10 [ 191.663740][ T7249] ? __pfx_rescuer_thread+0x10/0x10 [ 191.663794][ T7249] kthread_create_on_node+0xc7/0x100 [ 191.663837][ T7249] ? __pfx_kthread_create_on_node+0x10/0x10 [ 191.663879][ T7249] ? __pfx_scnprintf+0x10/0x10 [ 191.663934][ T7249] init_rescuer+0x321/0x550 [ 191.663981][ T7249] ? __pfx_init_rescuer+0x10/0x10 [ 191.664042][ T7249] ? wq_adjust_max_active+0x352/0x4a0 [ 191.664107][ T7249] __alloc_workqueue+0xc90/0x1880 [ 191.664148][ T7249] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 191.664200][ T7249] alloc_workqueue_noprof+0xd2/0x200 [ 191.664237][ T7249] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 191.664282][ T7249] ? __pfx___debug_object_init+0x10/0x10 [ 191.664322][ T7249] nci_register_device+0x511/0xb80 [ 191.664366][ T7249] ? __pfx_nci_register_device+0x10/0x10 [ 191.664412][ T7249] ? lockdep_init_map_type+0x5c/0x250 [ 191.664458][ T7249] virtual_ncidev_open+0x141/0x220 [ 191.664504][ T7249] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 191.664548][ T7249] misc_open+0x26d/0x450 [ 191.664585][ T7249] ? __pfx_misc_open+0x10/0x10 [ 191.664622][ T7249] chrdev_open+0x234/0x6a0 [ 191.664652][ T7249] ? __pfx_apparmor_file_open+0x10/0x10 [ 191.664684][ T7249] ? __pfx_chrdev_open+0x10/0x10 [ 191.664717][ T7249] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 191.664756][ T7249] do_dentry_open+0x6d8/0x1660 [ 191.664785][ T7249] ? __pfx_chrdev_open+0x10/0x10 [ 191.664825][ T7249] vfs_open+0x82/0x3f0 [ 191.664867][ T7249] path_openat+0x208c/0x31a0 [ 191.664909][ T7249] ? __pfx_path_openat+0x10/0x10 [ 191.664953][ T7249] do_file_open+0x20e/0x430 [ 191.664987][ T7249] ? __pfx_do_file_open+0x10/0x10 [ 191.665042][ T7249] ? alloc_fd+0x476/0x790 [ 191.665080][ T7249] ? do_getname+0x191/0x390 [ 191.665121][ T7249] do_sys_openat2+0x10d/0x1e0 [ 191.665161][ T7249] ? __pfx_do_sys_openat2+0x10/0x10 [ 191.665213][ T7249] __x64_sys_openat+0x12d/0x210 [ 191.665254][ T7249] ? __pfx___x64_sys_openat+0x10/0x10 [ 191.665308][ T7249] do_syscall_64+0x106/0xf80 [ 191.665344][ T7249] ? clear_bhb_loop+0x40/0x90 [ 191.665380][ T7249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.665410][ T7249] RIP: 0033:0x7f7c3d99c819 [ 191.665434][ T7249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.665461][ T7249] RSP: 002b:00007f7c3e8ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 191.665489][ T7249] RAX: ffffffffffffffda RBX: 00007f7c3dc15fa0 RCX: 00007f7c3d99c819 [ 191.665508][ T7249] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 191.665525][ T7249] RBP: 00007f7c3da32c91 R08: 0000000000000000 R09: 0000000000000000 [ 191.665543][ T7249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.665560][ T7249] R13: 00007f7c3dc16038 R14: 00007f7c3dc15fa0 R15: 00007fff7c33b208 [ 191.665596][ T7249] [ 191.665617][ T7249] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -ENOMEM [ 192.524561][ T7263] random: crng reseeded on system resumption [ 192.970678][ T1164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.014054][ T1164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.029800][ T1164] bond0 (unregistering): Released all slaves [ 194.190353][ T7287] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 194.468565][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.475349][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.678995][ T7301] FAULT_INJECTION: forcing a failure. [ 194.678995][ T7301] name failslab, interval 1, probability 0, space 0, times 0 [ 194.782941][ T7301] CPU: 0 UID: 0 PID: 7301 Comm: syz.0.247 Tainted: G L syzkaller #0 PREEMPT(full) [ 194.782992][ T7301] Tainted: [L]=SOFTLOCKUP [ 194.783004][ T7301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 194.783024][ T7301] Call Trace: [ 194.783034][ T7301] [ 194.783047][ T7301] dump_stack_lvl+0x100/0x190 [ 194.783104][ T7301] should_fail_ex.cold+0x5/0xa [ 194.783143][ T7301] ? udpv6_init_sock+0x24e/0x450 [ 194.783194][ T7301] should_failslab+0xc2/0x120 [ 194.783231][ T7301] __kmalloc_noprof+0xe0/0x850 [ 194.783285][ T7301] ? lockdep_init_map_type+0x5c/0x250 [ 194.783340][ T7301] udpv6_init_sock+0x24e/0x450 [ 194.783392][ T7301] ? __pfx_udplitev6_sk_init+0x10/0x10 [ 194.783428][ T7301] inet6_create+0xb21/0x12b0 [ 194.783466][ T7301] ? inet6_create+0x7f/0x12b0 [ 194.783517][ T7301] __sock_create+0x339/0x860 [ 194.783571][ T7301] __sys_socket+0x14d/0x260 [ 194.783618][ T7301] ? __pfx___sys_socket+0x10/0x10 [ 194.783678][ T7301] __x64_sys_socket+0x72/0xb0 [ 194.783724][ T7301] ? lockdep_hardirqs_on+0x78/0x100 [ 194.783761][ T7301] do_syscall_64+0x106/0xf80 [ 194.783797][ T7301] ? clear_bhb_loop+0x40/0x90 [ 194.783840][ T7301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.783876][ T7301] RIP: 0033:0x7f7c3d99c819 [ 194.783903][ T7301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.783935][ T7301] RSP: 002b:00007f7c3e8ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 194.783968][ T7301] RAX: ffffffffffffffda RBX: 00007f7c3dc15fa0 RCX: 00007f7c3d99c819 [ 194.783989][ T7301] RDX: 0000000000000088 RSI: 0000000000000002 RDI: 000000000000000a [ 194.784010][ T7301] RBP: 00007f7c3da32c91 R08: 0000000000000000 R09: 0000000000000000 [ 194.784030][ T7301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.784049][ T7301] R13: 00007f7c3dc16038 R14: 00007f7c3dc15fa0 R15: 00007fff7c33b208 [ 194.784093][ T7301] [ 195.392024][ T7315] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 195.817098][ T7320] openvswitch: netlink: IP tunnel dst address not specified [ 196.013073][ T1164] hsr_slave_0: left promiscuous mode [ 196.066217][ T1164] hsr_slave_1: left promiscuous mode [ 196.153275][ T1164] veth1_vlan: left promiscuous mode [ 196.158917][ T1164] veth0_vlan: left promiscuous mode [ 196.261885][ T7331] futex_wake_op: syz.0.250 tries to shift op by -2048; fix this program [ 196.270833][ T7331] futex_wake_op: syz.0.250 tries to shift op by -2048; fix this program [ 196.294649][ T7331] random: crng reseeded on system resumption [ 196.911627][ T1164] team0 (unregistering): Port device team_slave_1 removed [ 196.947358][ T1164] team0 (unregistering): Port device team_slave_0 removed [ 199.564443][ T7377] ubi0: attaching mtd0 [ 199.571809][ T7377] ubi0: scanning is finished [ 199.632947][ T7377] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 199.751650][ T7384] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 200.088308][ T7377] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 200.196436][ T7377] syz.0.257 uses obsolete (PF_INET,SOCK_PACKET) [ 200.626346][ T7399] ptrace attach of "./syz-executor exec"[5829] was attempted by "./syz-executor exec"[7399] [ 203.283211][ T7454] FAULT_INJECTION: forcing a failure. [ 203.283211][ T7454] name failslab, interval 1, probability 0, space 0, times 0 [ 203.297298][ T7454] CPU: 1 UID: 0 PID: 7454 Comm: syz.0.269 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.297352][ T7454] Tainted: [L]=SOFTLOCKUP [ 203.297376][ T7454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 203.297394][ T7454] Call Trace: [ 203.297405][ T7454] [ 203.297417][ T7454] dump_stack_lvl+0x100/0x190 [ 203.297476][ T7454] should_fail_ex.cold+0x5/0xa [ 203.297516][ T7454] should_failslab+0xc2/0x120 [ 203.297554][ T7454] __kmalloc_cache_noprof+0x7a/0x6f0 [ 203.297620][ T7454] ? trace_pid_list_alloc+0x2fe/0x480 [ 203.297686][ T7454] trace_pid_list_alloc+0x2fe/0x480 [ 203.297749][ T7454] trace_pid_write+0x110/0x460 [ 203.297815][ T7454] ? __pfx_trace_pid_write+0x10/0x10 [ 203.297900][ T7454] event_pid_write.isra.0+0x1e4/0x800 [ 203.297940][ T7454] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 203.297990][ T7454] vfs_write+0x2aa/0x1070 [ 203.298026][ T7454] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 203.298067][ T7454] ? __pfx_vfs_write+0x10/0x10 [ 203.298100][ T7454] ? __fget_files+0x215/0x3d0 [ 203.298146][ T7454] ? __fget_files+0x21f/0x3d0 [ 203.298193][ T7454] ksys_write+0x12a/0x250 [ 203.298227][ T7454] ? __pfx_ksys_write+0x10/0x10 [ 203.298275][ T7454] do_syscall_64+0x106/0xf80 [ 203.298311][ T7454] ? clear_bhb_loop+0x40/0x90 [ 203.298354][ T7454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.298390][ T7454] RIP: 0033:0x7f7c3d99c819 [ 203.298418][ T7454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.298450][ T7454] RSP: 002b:00007f7c3e88d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 203.298482][ T7454] RAX: ffffffffffffffda RBX: 00007f7c3dc16090 RCX: 00007f7c3d99c819 [ 203.298504][ T7454] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 203.298524][ T7454] RBP: 00007f7c3da32c91 R08: 0000000000000000 R09: 0000000000000000 [ 203.298543][ T7454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.298562][ T7454] R13: 00007f7c3dc16128 R14: 00007f7c3dc16090 R15: 00007fff7c33b208 [ 203.298606][ T7454] [ 204.240041][ T7466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.272'. [ 204.256047][ T7466] i: entered promiscuous mode [ 204.306409][ T7466] netlink: 16 bytes leftover after parsing attributes in process `syz.0.272'. [ 204.470164][ T7470] netlink: 25 bytes leftover after parsing attributes in process `syz.4.273'. [ 205.226356][ T7482] FAULT_INJECTION: forcing a failure. [ 205.226356][ T7482] name failslab, interval 1, probability 0, space 0, times 0 [ 205.271811][ T7482] CPU: 1 UID: 0 PID: 7482 Comm: syz.2.277 Tainted: G L syzkaller #0 PREEMPT(full) [ 205.271863][ T7482] Tainted: [L]=SOFTLOCKUP [ 205.271875][ T7482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 205.271895][ T7482] Call Trace: [ 205.271906][ T7482] [ 205.271919][ T7482] dump_stack_lvl+0x100/0x190 [ 205.271978][ T7482] should_fail_ex.cold+0x5/0xa [ 205.272019][ T7482] should_failslab+0xc2/0x120 [ 205.272057][ T7482] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 205.272114][ T7482] ? sock_alloc_inode+0x25/0x1c0 [ 205.272160][ T7482] ? __pfx_sock_alloc_inode+0x10/0x10 [ 205.272203][ T7482] sock_alloc_inode+0x25/0x1c0 [ 205.272243][ T7482] alloc_inode+0x68/0x250 [ 205.272292][ T7482] sock_alloc+0x44/0x280 [ 205.272325][ T7482] ? security_socket_create+0x7f/0x250 [ 205.272364][ T7482] __sock_create+0xc2/0x860 [ 205.272416][ T7482] __sys_socket+0x14d/0x260 [ 205.272464][ T7482] ? __pfx___sys_socket+0x10/0x10 [ 205.272521][ T7482] __x64_sys_socket+0x72/0xb0 [ 205.272568][ T7482] ? lockdep_hardirqs_on+0x78/0x100 [ 205.272609][ T7482] do_syscall_64+0x106/0xf80 [ 205.272640][ T7482] ? clear_bhb_loop+0x40/0x90 [ 205.272678][ T7482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.272715][ T7482] RIP: 0033:0x7fdf3cf9e087 [ 205.272743][ T7482] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.272775][ T7482] RSP: 002b:00007fdf3b1f4f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 205.272811][ T7482] RAX: ffffffffffffffda RBX: 00007fdf3d215fa0 RCX: 00007fdf3cf9e087 [ 205.272831][ T7482] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 205.272851][ T7482] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 205.272871][ T7482] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 205.272890][ T7482] R13: 00007fdf3d216038 R14: 00007fdf3d215fa0 R15: 00007ffdaf409618 [ 205.272932][ T7482] [ 205.701034][ T7482] socket: no more sockets [ 205.785941][ T7479] sp0: Synchronizing with TNC [ 206.051799][ T7491] HfR: entered promiscuous mode [ 206.093748][ T7491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.279'. [ 206.144190][ T7491] HfR: left promiscuous mode [ 206.923994][ T7501] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 206.930288][ T7501] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 206.957096][ T7501] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 206.983502][ T7501] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 207.938051][ T7523] FAULT_INJECTION: forcing a failure. [ 207.938051][ T7523] name failslab, interval 1, probability 0, space 0, times 0 [ 208.013271][ T7523] CPU: 1 UID: 0 PID: 7523 Comm: syz.0.286 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.013349][ T7523] Tainted: [L]=SOFTLOCKUP [ 208.013360][ T7523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 208.013379][ T7523] Call Trace: [ 208.013389][ T7523] [ 208.013402][ T7523] dump_stack_lvl+0x100/0x190 [ 208.013461][ T7523] should_fail_ex.cold+0x5/0xa [ 208.013499][ T7523] should_failslab+0xc2/0x120 [ 208.013540][ T7523] __kmalloc_cache_node_noprof+0x7d/0x770 [ 208.013581][ T7523] ? init_rescuer+0x19f/0x550 [ 208.013623][ T7523] init_rescuer+0x19f/0x550 [ 208.013658][ T7523] ? __pfx_init_rescuer+0x10/0x10 [ 208.013700][ T7523] ? wq_adjust_max_active+0x352/0x4a0 [ 208.013743][ T7523] __alloc_workqueue+0xc90/0x1880 [ 208.013779][ T7523] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 208.013824][ T7523] alloc_workqueue_noprof+0xd2/0x200 [ 208.013855][ T7523] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 208.013895][ T7523] ? __pfx___debug_object_init+0x10/0x10 [ 208.013930][ T7523] nci_register_device+0x21e/0xb80 [ 208.013968][ T7523] ? __pfx_nci_register_device+0x10/0x10 [ 208.014010][ T7523] ? lockdep_init_map_type+0x5c/0x250 [ 208.014050][ T7523] virtual_ncidev_open+0x141/0x220 [ 208.014090][ T7523] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 208.014129][ T7523] misc_open+0x26d/0x450 [ 208.014162][ T7523] ? __pfx_misc_open+0x10/0x10 [ 208.014194][ T7523] chrdev_open+0x234/0x6a0 [ 208.014251][ T7523] ? __pfx_apparmor_file_open+0x10/0x10 [ 208.014290][ T7523] ? __pfx_chrdev_open+0x10/0x10 [ 208.014345][ T7523] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 208.014381][ T7523] do_dentry_open+0x6d8/0x1660 [ 208.014407][ T7523] ? __pfx_chrdev_open+0x10/0x10 [ 208.014441][ T7523] vfs_open+0x82/0x3f0 [ 208.014478][ T7523] path_openat+0x208c/0x31a0 [ 208.014515][ T7523] ? __pfx_path_openat+0x10/0x10 [ 208.014554][ T7523] do_file_open+0x20e/0x430 [ 208.014583][ T7523] ? __pfx_do_file_open+0x10/0x10 [ 208.014632][ T7523] ? alloc_fd+0x476/0x790 [ 208.014660][ T7523] ? do_getname+0x191/0x390 [ 208.014696][ T7523] do_sys_openat2+0x10d/0x1e0 [ 208.014731][ T7523] ? __pfx_do_sys_openat2+0x10/0x10 [ 208.014776][ T7523] __x64_sys_openat+0x12d/0x210 [ 208.014813][ T7523] ? __pfx___x64_sys_openat+0x10/0x10 [ 208.014860][ T7523] do_syscall_64+0x106/0xf80 [ 208.014885][ T7523] ? clear_bhb_loop+0x40/0x90 [ 208.014927][ T7523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.014952][ T7523] RIP: 0033:0x7f7c3d99c819 [ 208.014971][ T7523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.014994][ T7523] RSP: 002b:00007f7c3e8ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 208.015016][ T7523] RAX: ffffffffffffffda RBX: 00007f7c3dc15fa0 RCX: 00007f7c3d99c819 [ 208.015031][ T7523] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 208.015046][ T7523] RBP: 00007f7c3da32c91 R08: 0000000000000000 R09: 0000000000000000 [ 208.015060][ T7523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.015074][ T7523] R13: 00007f7c3dc16038 R14: 00007f7c3dc15fa0 R15: 00007fff7c33b208 [ 208.015105][ T7523] [ 208.020944][ T7523] workqueue: Failed to allocate a rescuer for wq "nfc2_nci_cmd_wq" [ 208.949045][ T5145] Bluetooth: hci0: command 0x0c1a tx timeout [ 208.949062][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 209.022954][ T5145] Bluetooth: hci4: command 0x0c1a tx timeout [ 209.029135][ T5145] Bluetooth: hci2: command 0x0c1a tx timeout [ 210.664123][ T7554] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 211.144262][ T7560] HfR: entered promiscuous mode [ 211.178195][ T7560] netlink: 12 bytes leftover after parsing attributes in process `syz.1.292'. [ 211.221297][ T7560] HfR: left promiscuous mode [ 212.568656][ T7578] FAULT_INJECTION: forcing a failure. [ 212.568656][ T7578] name failslab, interval 1, probability 0, space 0, times 0 [ 212.600134][ T7578] CPU: 0 UID: 0 PID: 7578 Comm: syz.2.296 Tainted: G L syzkaller #0 PREEMPT(full) [ 212.600218][ T7578] Tainted: [L]=SOFTLOCKUP [ 212.600229][ T7578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 212.600248][ T7578] Call Trace: [ 212.600260][ T7578] [ 212.600273][ T7578] dump_stack_lvl+0x100/0x190 [ 212.600334][ T7578] should_fail_ex.cold+0x5/0xa [ 212.600375][ T7578] ? security_inode_init_security+0x113/0x370 [ 212.600432][ T7578] should_failslab+0xc2/0x120 [ 212.600472][ T7578] __kmalloc_noprof+0xe0/0x850 [ 212.600539][ T7578] security_inode_init_security+0x113/0x370 [ 212.600598][ T7578] ? __pfx_shmem_initxattrs+0x10/0x10 [ 212.600643][ T7578] ? __pfx_security_inode_init_security+0x10/0x10 [ 212.600704][ T7578] ? do_raw_spin_unlock+0x145/0x1e0 [ 212.600768][ T7578] shmem_mknod+0x2bf/0x470 [ 212.600822][ T7578] ? __pfx_shmem_mknod+0x10/0x10 [ 212.600868][ T7578] ? bpf_lsm_inode_create+0x9/0x10 [ 212.600927][ T7578] ? __pfx_shmem_create+0x10/0x10 [ 212.600976][ T7578] lookup_open.isra.0+0xc47/0x11b0 [ 212.601040][ T7578] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 212.601104][ T7578] ? __pfx___might_resched+0x10/0x10 [ 212.601173][ T7578] ? mnt_get_write_access+0x52/0x2f0 [ 212.601233][ T7578] ? __pfx_down_write+0x10/0x10 [ 212.601275][ T7578] ? mnt_get_write_access+0x1e9/0x2f0 [ 212.601332][ T7578] path_openat+0x2291/0x31a0 [ 212.601378][ T7578] ? entry_SYSCALL_64_after_hwframe+0x48/0x7f [ 212.601418][ T7578] ? __pfx_path_openat+0x10/0x10 [ 212.601469][ T7578] do_file_open+0x20e/0x430 [ 212.601509][ T7578] ? __pfx_do_file_open+0x10/0x10 [ 212.601578][ T7578] ? _raw_spin_unlock+0x28/0x50 [ 212.601631][ T7578] ? alloc_fd+0x476/0x790 [ 212.601678][ T7578] do_sys_openat2+0x10d/0x1e0 [ 212.601727][ T7578] ? __pfx_do_sys_openat2+0x10/0x10 [ 212.601776][ T7578] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 212.601843][ T7578] __x64_sys_open+0xfe/0x1d0 [ 212.601897][ T7578] ? __pfx___x64_sys_open+0x10/0x10 [ 212.601963][ T7578] do_syscall_64+0x106/0xf80 [ 212.602004][ T7578] ? clear_bhb_loop+0x40/0x90 [ 212.602046][ T7578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.602081][ T7578] RIP: 0033:0x7fdf3cf9c819 [ 212.602109][ T7578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.602141][ T7578] RSP: 002b:00007fdf3b1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 212.602186][ T7578] RAX: ffffffffffffffda RBX: 00007fdf3d215fa0 RCX: 00007fdf3cf9c819 [ 212.602208][ T7578] RDX: 0000000000000154 RSI: 0000000000022240 RDI: 0000000000000000 [ 212.602229][ T7578] RBP: 00007fdf3d032c91 R08: 0000000000000000 R09: 0000000000000000 [ 212.602249][ T7578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.602269][ T7578] R13: 00007fdf3d216038 R14: 00007fdf3d215fa0 R15: 00007ffdaf409618 [ 212.602314][ T7578] [ 214.394257][ T7610] netlink: 330 bytes leftover after parsing attributes in process `syz.4.300'. [ 214.939740][ T7629] HfR: entered promiscuous mode [ 215.206073][ T7634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.303'. [ 215.283017][ T7634] HfR: left promiscuous mode [ 215.776250][ T7651] futex_wake_op: syz.0.306 tries to shift op by -2048; fix this program [ 215.806620][ T7651] futex_wake_op: syz.0.306 tries to shift op by -2048; fix this program [ 215.856049][ T7651] 0x000000000001-0x000000020000 : "" [ 215.913406][ T7651] ftl_cs: FTL header corrupt! [ 216.958309][ T7654] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 217.059420][ T7670] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1986356271.1886610479.4294967040), cmd(3) [ 217.137436][ T7671] FAULT_INJECTION: forcing a failure. [ 217.137436][ T7671] name fail_futex, interval 1, probability 0, space 0, times 1 [ 217.203039][ T7671] CPU: 0 UID: 0 PID: 7671 Comm: syz.0.309 Tainted: G L syzkaller #0 PREEMPT(full) [ 217.203078][ T7671] Tainted: [L]=SOFTLOCKUP [ 217.203086][ T7671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 217.203099][ T7671] Call Trace: [ 217.203107][ T7671] [ 217.203115][ T7671] dump_stack_lvl+0x100/0x190 [ 217.203156][ T7671] should_fail_ex.cold+0x5/0xa [ 217.203184][ T7671] get_futex_key+0x1d2/0x1620 [ 217.203218][ T7671] ? __pfx_get_futex_key+0x10/0x10 [ 217.203251][ T7671] ? __sys_bpf+0x173/0x4b90 [ 217.203283][ T7671] futex_wake+0xea/0x530 [ 217.203329][ T7671] ? __pfx___sys_bpf+0x10/0x10 [ 217.203357][ T7671] ? __pfx_futex_wait+0x10/0x10 [ 217.203394][ T7671] ? __pfx_futex_wake+0x10/0x10 [ 217.203433][ T7671] ? ksys_write+0x190/0x250 [ 217.203462][ T7671] do_futex+0x32b/0x350 [ 217.203494][ T7671] ? __pfx_do_futex+0x10/0x10 [ 217.203533][ T7671] __x64_sys_futex+0x34f/0x4d0 [ 217.203568][ T7671] ? __pfx___x64_sys_futex+0x10/0x10 [ 217.203613][ T7671] do_syscall_64+0x106/0xf80 [ 217.203637][ T7671] ? clear_bhb_loop+0x40/0x90 [ 217.203665][ T7671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.203689][ T7671] RIP: 0033:0x7f7c3d99c819 [ 217.203707][ T7671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.203728][ T7671] RSP: 002b:00007f7c3e8ae0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 217.203750][ T7671] RAX: ffffffffffffffda RBX: 00007f7c3dc15fa8 RCX: 00007f7c3d99c819 [ 217.203764][ T7671] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7c3dc15fac [ 217.203778][ T7671] RBP: 00007f7c3dc15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 217.203792][ T7671] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 217.203806][ T7671] R13: 00007f7c3dc16038 R14: 00007fff7c33b120 R15: 00007fff7c33b208 [ 217.203841][ T7671] [ 217.856707][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.313'. [ 221.169862][ T7741] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 221.239909][ T7741] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 221.273325][ T7741] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 221.279530][ T7741] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 223.183005][ T5145] Bluetooth: hci0: command 0x0c1a tx timeout [ 223.199403][ T7779] FAULT_INJECTION: forcing a failure. [ 223.199403][ T7779] name fail_futex, interval 1, probability 0, space 0, times 0 [ 223.271503][ T5145] Bluetooth: hci1: command 0x0c1a tx timeout [ 223.277860][ T7779] CPU: 0 UID: 0 PID: 7779 Comm: syz.1.326 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.277931][ T7779] Tainted: [L]=SOFTLOCKUP [ 223.277944][ T7779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 223.277965][ T7779] Call Trace: [ 223.277977][ T7779] [ 223.278002][ T7779] dump_stack_lvl+0x100/0x190 [ 223.278066][ T7779] should_fail_ex.cold+0x5/0xa [ 223.278112][ T7779] get_futex_key+0x295/0x1620 [ 223.278169][ T7779] ? __pfx_get_futex_key+0x10/0x10 [ 223.278213][ T7779] ? lock_acquire+0x1cf/0x380 [ 223.278282][ T7779] futex_wake+0xea/0x530 [ 223.278358][ T7779] ? __pfx_futex_wake+0x10/0x10 [ 223.278420][ T7779] ? exit_mm_release+0x19/0x30 [ 223.278481][ T7779] do_futex+0x32b/0x350 [ 223.278534][ T7779] ? __pfx_do_futex+0x10/0x10 [ 223.278582][ T7779] ? __might_fault+0xc5/0x140 [ 223.278660][ T7779] mm_release+0x24a/0x2f0 [ 223.278704][ T7779] do_exit+0x704/0x2b60 [ 223.278761][ T7779] ? __pfx_do_exit+0x10/0x10 [ 223.278813][ T7779] ? do_raw_spin_lock+0x128/0x260 [ 223.278870][ T7779] ? find_held_lock+0x2b/0x80 [ 223.278906][ T7779] ? get_signal+0x7e0/0x21e0 [ 223.278951][ T7779] do_group_exit+0xd5/0x2a0 [ 223.279016][ T7779] get_signal+0x1ec7/0x21e0 [ 223.279074][ T7779] ? __pfx_get_signal+0x10/0x10 [ 223.279119][ T7779] ? do_futex+0x192/0x350 [ 223.279176][ T7779] arch_do_signal_or_restart+0x91/0x770 [ 223.279226][ T7779] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 223.279290][ T7779] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 223.279354][ T7779] ? __pfx___x64_sys_futex+0x10/0x10 [ 223.279419][ T7779] exit_to_user_mode_loop+0x86/0x4a0 [ 223.279479][ T7779] do_syscall_64+0x668/0xf80 [ 223.279520][ T7779] ? clear_bhb_loop+0x40/0x90 [ 223.279567][ T7779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.279607][ T7779] RIP: 0033:0x7f50e2b9c819 [ 223.279638][ T7779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.279675][ T7779] RSP: 002b:00007f50e0df60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 223.279710][ T7779] RAX: fffffffffffffe00 RBX: 00007f50e2e15fa8 RCX: 00007f50e2b9c819 [ 223.279735][ T7779] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f50e2e15fa8 [ 223.279758][ T7779] RBP: 00007f50e2e15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 223.279782][ T7779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.279805][ T7779] R13: 00007f50e2e16038 R14: 00007ffcd78eaa90 R15: 00007ffcd78eab78 [ 223.279854][ T7779] [ 223.803239][ T5145] Bluetooth: hci4: command 0x0c1a tx timeout [ 223.809836][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 224.617523][ T7801] FAULT_INJECTION: forcing a failure. [ 224.617523][ T7801] name failslab, interval 1, probability 0, space 0, times 0 [ 224.643096][ T7801] CPU: 0 UID: 0 PID: 7801 Comm: syz.0.329 Tainted: G L syzkaller #0 PREEMPT(full) [ 224.643161][ T7801] Tainted: [L]=SOFTLOCKUP [ 224.643173][ T7801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 224.643194][ T7801] Call Trace: [ 224.643205][ T7801] [ 224.643219][ T7801] dump_stack_lvl+0x100/0x190 [ 224.643279][ T7801] should_fail_ex.cold+0x5/0xa [ 224.643319][ T7801] should_failslab+0xc2/0x120 [ 224.643360][ T7801] __kmalloc_cache_noprof+0x7a/0x6f0 [ 224.643410][ T7801] ? trace_pid_list_alloc+0x2fe/0x480 [ 224.643476][ T7801] trace_pid_list_alloc+0x2fe/0x480 [ 224.643538][ T7801] trace_pid_write+0x110/0x460 [ 224.643597][ T7801] ? __pfx_trace_pid_write+0x10/0x10 [ 224.643682][ T7801] event_pid_write.isra.0+0x1e4/0x800 [ 224.643722][ T7801] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 224.643772][ T7801] vfs_write+0x2aa/0x1070 [ 224.643808][ T7801] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 224.643850][ T7801] ? __pfx_vfs_write+0x10/0x10 [ 224.643883][ T7801] ? __fget_files+0x215/0x3d0 [ 224.643928][ T7801] ? __fget_files+0x21f/0x3d0 [ 224.643976][ T7801] ksys_write+0x12a/0x250 [ 224.644011][ T7801] ? __pfx_ksys_write+0x10/0x10 [ 224.644056][ T7801] do_syscall_64+0x106/0xf80 [ 224.644092][ T7801] ? clear_bhb_loop+0x40/0x90 [ 224.644131][ T7801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.644174][ T7801] RIP: 0033:0x7f7c3d99c819 [ 224.644201][ T7801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.644236][ T7801] RSP: 002b:00007f7c3e88d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 224.644270][ T7801] RAX: ffffffffffffffda RBX: 00007f7c3dc16090 RCX: 00007f7c3d99c819 [ 224.644293][ T7801] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 224.644314][ T7801] RBP: 00007f7c3da32c91 R08: 0000000000000000 R09: 0000000000000000 [ 224.644336][ T7801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.644356][ T7801] R13: 00007f7c3dc16128 R14: 00007f7c3dc16090 R15: 00007fff7c33b208 [ 224.644403][ T7801] [ 225.132044][ T7810] futex_wake_op: syz.4.331 tries to shift op by -2048; fix this program [ 226.089221][ T7826] netlink: 28 bytes leftover after parsing attributes in process `syz.4.335'. [ 226.177699][ T7826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.206378][ T7826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.263903][ T7826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.328825][ T7826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.363603][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 227.515801][ T7824] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 227.548693][ T7824] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 227.595298][ T7824] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 227.631225][ T7824] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 228.703230][ T5145] Bluetooth: hci0: command 0x0c1a tx timeout [ 229.005129][ T7845] HfR: entered promiscuous mode [ 229.071278][ T7845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.340'. [ 229.128450][ T7845] HfR: left promiscuous mode [ 229.535041][ T7855] futex_wake_op: syz.0.343 tries to shift op by -2048; fix this program [ 229.582998][ T5145] Bluetooth: hci1: command 0x0c1a tx timeout [ 229.663826][ T5145] Bluetooth: hci4: command 0x0c1a tx timeout [ 229.669978][ T5145] Bluetooth: hci2: command 0x0c1a tx timeout [ 232.550195][ T7882] FAULT_INJECTION: forcing a failure. [ 232.550195][ T7882] name failslab, interval 1, probability 0, space 0, times 0 [ 232.832939][ T7882] CPU: 1 UID: 0 PID: 7882 Comm: syz.2.346 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.832994][ T7882] Tainted: [L]=SOFTLOCKUP [ 232.833006][ T7882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 232.833026][ T7882] Call Trace: [ 232.833036][ T7882] [ 232.833049][ T7882] dump_stack_lvl+0x100/0x190 [ 232.833103][ T7882] should_fail_ex.cold+0x5/0xa [ 232.833142][ T7882] should_failslab+0xc2/0x120 [ 232.833180][ T7882] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 232.833237][ T7882] ? security_file_alloc+0x34/0x2c0 [ 232.833282][ T7882] ? trace_kmem_cache_alloc+0xf3/0x120 [ 232.833327][ T7882] security_file_alloc+0x34/0x2c0 [ 232.833375][ T7882] init_file+0x95/0x480 [ 232.833418][ T7882] alloc_empty_file+0x73/0x1c0 [ 232.833463][ T7882] alloc_file_pseudo+0x13a/0x230 [ 232.833521][ T7882] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 232.833567][ T7882] ? tipc_sk_finish_conn+0x600/0x7a0 [ 232.833617][ T7882] sock_alloc_file+0x50/0x210 [ 232.833660][ T7882] __sys_socketpair+0x321/0x5b0 [ 232.833711][ T7882] ? __pfx___sys_socketpair+0x10/0x10 [ 232.833756][ T7882] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 232.833796][ T7882] ? xfd_validate_state+0x129/0x190 [ 232.833855][ T7882] __x64_sys_socketpair+0x96/0x100 [ 232.833904][ T7882] ? lockdep_hardirqs_on+0x78/0x100 [ 232.833941][ T7882] do_syscall_64+0x106/0xf80 [ 232.833977][ T7882] ? clear_bhb_loop+0x40/0x90 [ 232.834019][ T7882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.834053][ T7882] RIP: 0033:0x7fdf3cf9c819 [ 232.834080][ T7882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.834114][ T7882] RSP: 002b:00007fdf3b1d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 232.834148][ T7882] RAX: ffffffffffffffda RBX: 00007fdf3d216090 RCX: 00007fdf3cf9c819 [ 232.834170][ T7882] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 000000000000001e [ 232.834192][ T7882] RBP: 00007fdf3d032c91 R08: 0000000000000000 R09: 0000000000000000 [ 232.834220][ T7882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.834240][ T7882] R13: 00007fdf3d216128 R14: 00007fdf3d216090 R15: 00007ffdaf409618 [ 232.834284][ T7882] [ 234.705049][ T7907] HfR: entered promiscuous mode [ 234.755837][ T7907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.360'. [ 234.789450][ T7907] HfR: left promiscuous mode [ 237.388539][ T7942] FAULT_INJECTION: forcing a failure. [ 237.388539][ T7942] name failslab, interval 1, probability 0, space 0, times 0 [ 237.411682][ T7942] CPU: 0 UID: 0 PID: 7942 Comm: syz.0.359 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.411721][ T7942] Tainted: [L]=SOFTLOCKUP [ 237.411730][ T7942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 237.411745][ T7942] Call Trace: [ 237.411752][ T7942] [ 237.411761][ T7942] dump_stack_lvl+0x100/0x190 [ 237.411805][ T7942] should_fail_ex.cold+0x5/0xa [ 237.411836][ T7942] should_failslab+0xc2/0x120 [ 237.411900][ T7942] __kmalloc_cache_noprof+0x7a/0x6f0 [ 237.411943][ T7942] ? trace_pid_list_alloc+0x2fe/0x480 [ 237.411991][ T7942] trace_pid_list_alloc+0x2fe/0x480 [ 237.412036][ T7942] trace_pid_write+0x110/0x460 [ 237.412078][ T7942] ? __pfx_trace_pid_write+0x10/0x10 [ 237.412138][ T7942] event_pid_write.isra.0+0x1e4/0x800 [ 237.412166][ T7942] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 237.412202][ T7942] vfs_write+0x2aa/0x1070 [ 237.412227][ T7942] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 237.412271][ T7942] ? __pfx_vfs_write+0x10/0x10 [ 237.412294][ T7942] ? __fget_files+0x215/0x3d0 [ 237.412325][ T7942] ? __fget_files+0x21f/0x3d0 [ 237.412359][ T7942] ksys_write+0x12a/0x250 [ 237.412382][ T7942] ? __pfx_ksys_write+0x10/0x10 [ 237.412416][ T7942] do_syscall_64+0x106/0xf80 [ 237.412441][ T7942] ? clear_bhb_loop+0x40/0x90 [ 237.412472][ T7942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.412498][ T7942] RIP: 0033:0x7f7c3d99c819 [ 237.412518][ T7942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.412543][ T7942] RSP: 002b:00007f7c3e88d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 237.412566][ T7942] RAX: ffffffffffffffda RBX: 00007f7c3dc16090 RCX: 00007f7c3d99c819 [ 237.412582][ T7942] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 237.412597][ T7942] RBP: 00007f7c3da32c91 R08: 0000000000000000 R09: 0000000000000000 [ 237.412612][ T7942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.412627][ T7942] R13: 00007f7c3dc16128 R14: 00007f7c3dc16090 R15: 00007fff7c33b208 [ 237.412659][ T7942] [ 238.524834][ T30] audit: type=1400 audit(1776062746.941:6): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=7937 comm="syz.2.358" [ 240.123953][ T7968] FAULT_INJECTION: forcing a failure. [ 240.123953][ T7968] name fail_futex, interval 1, probability 0, space 0, times 0 [ 240.166304][ T7968] CPU: 1 UID: 0 PID: 7968 Comm: syz.0.366 Tainted: G L syzkaller #0 PREEMPT(full) [ 240.166362][ T7968] Tainted: [L]=SOFTLOCKUP [ 240.166376][ T7968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 240.166398][ T7968] Call Trace: [ 240.166409][ T7968] [ 240.166422][ T7968] dump_stack_lvl+0x100/0x190 [ 240.166483][ T7968] should_fail_ex.cold+0x5/0xa [ 240.166525][ T7968] get_futex_key+0x1d2/0x1620 [ 240.166576][ T7968] ? __pfx_get_futex_key+0x10/0x10 [ 240.166621][ T7968] ? hook_file_set_fowner+0x200/0x910 [ 240.166676][ T7968] ? landlock_put_ruleset_deferred+0x63/0x1d0 [ 240.166726][ T7968] futex_wait_setup+0x83/0x510 [ 240.166795][ T7968] __futex_wait+0x19f/0x300 [ 240.166868][ T7968] ? __pfx___futex_wait+0x10/0x10 [ 240.166934][ T7968] ? __pfx_futex_wake_mark+0x10/0x10 [ 240.166996][ T7968] ? futex_hash+0x2c5/0x380 [ 240.167051][ T7968] futex_wait+0xed/0x380 [ 240.167109][ T7968] ? __pfx_futex_wait+0x10/0x10 [ 240.167179][ T7968] ? fcntl_setlease+0x103/0x180 [ 240.167233][ T7968] do_futex+0x1ef/0x350 [ 240.167286][ T7968] ? __pfx_do_futex+0x10/0x10 [ 240.167343][ T7968] ? do_fcntl+0x811/0x1670 [ 240.167399][ T7968] __x64_sys_futex+0x34f/0x4d0 [ 240.167454][ T7968] ? __pfx___x64_sys_futex+0x10/0x10 [ 240.167505][ T7968] ? tomoyo_file_fcntl+0x6c/0xc0 [ 240.167553][ T7968] do_syscall_64+0x106/0xf80 [ 240.167591][ T7968] ? clear_bhb_loop+0x40/0x90 [ 240.167635][ T7968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.167671][ T7968] RIP: 0033:0x7f7c3d99c819 [ 240.167701][ T7968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.167736][ T7968] RSP: 002b:00007f7c3e8ae0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 240.167770][ T7968] RAX: ffffffffffffffda RBX: 00007f7c3dc15fa8 RCX: 00007f7c3d99c819 [ 240.167793][ T7968] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7c3dc15fa8 [ 240.167815][ T7968] RBP: 00007f7c3dc15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 240.167836][ T7968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.167857][ T7968] R13: 00007f7c3dc16038 R14: 00007fff7c33b120 R15: 00007fff7c33b208 [ 240.167911][ T7968] [ 241.330653][ T7990] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 241.520250][ T7993] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(138733074.2373976222.762820876), cmd(3) [ 242.547182][ T30] audit: type=1400 audit(1776062750.951:7): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=7997 comm="syz.4.372" [ 243.123500][ T8016] netlink: 20 bytes leftover after parsing attributes in process `syz.2.377'. [ 243.833977][ T8031] HfR: entered promiscuous mode [ 243.876690][ T8031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.380'. [ 243.908723][ T8031] HfR: left promiscuous mode [ 243.928589][ T8016] KVM: debugfs: duplicate directory 8016-3 [ 244.045291][ T8016] KVM: debugfs: duplicate directory 8016-4 [ 244.107843][ T8016] KVM: debugfs: duplicate directory 8016-5 [ 244.161983][ T8016] KVM: debugfs: duplicate directory 8016-6 [ 244.188794][ T8016] KVM: debugfs: duplicate directory 8016-7 [ 245.972189][ T8053] FAULT_INJECTION: forcing a failure. [ 245.972189][ T8053] name failslab, interval 1, probability 0, space 0, times 0 [ 246.033511][ T8053] CPU: 1 UID: 0 PID: 8053 Comm: syz.4.384 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.033571][ T8053] Tainted: [L]=SOFTLOCKUP [ 246.033584][ T8053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 246.033609][ T8053] Call Trace: [ 246.033620][ T8053] [ 246.033634][ T8053] dump_stack_lvl+0x100/0x190 [ 246.033699][ T8053] should_fail_ex.cold+0x5/0xa [ 246.033741][ T8053] should_failslab+0xc2/0x120 [ 246.033782][ T8053] __kmalloc_cache_noprof+0x7a/0x6f0 [ 246.033831][ T8053] ? ima_d_path+0xc9/0x260 [ 246.033872][ T8053] ? _raw_read_unlock+0x28/0x50 [ 246.033913][ T8053] ima_d_path+0xc9/0x260 [ 246.033957][ T8053] ? __pfx_ima_d_path+0x10/0x10 [ 246.034003][ T8053] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 246.034073][ T8053] process_measurement+0x1b25/0x2350 [ 246.034134][ T8053] ? __pfx_process_measurement+0x10/0x10 [ 246.034194][ T8053] ? tomoyo_find_next_domain+0x93c/0x2010 [ 246.034281][ T8053] ima_bprm_check+0x116/0x180 [ 246.034319][ T8053] ? tomoyo_bprm_check_security+0x167/0x1d0 [ 246.034355][ T8053] ? __pfx_ima_bprm_check+0x10/0x10 [ 246.034403][ T8053] security_bprm_check+0xd7/0x1e0 [ 246.034441][ T8053] bprm_execve+0x84b/0x1680 [ 246.034511][ T8053] ? __pfx_bprm_execve+0x10/0x10 [ 246.034566][ T8053] ? copy_string_kernel+0x359/0x500 [ 246.034631][ T8053] do_execveat_common.isra.0+0x4a5/0x580 [ 246.034699][ T8053] __x64_sys_execve+0x93/0xd0 [ 246.034760][ T8053] do_syscall_64+0x106/0xf80 [ 246.034797][ T8053] ? clear_bhb_loop+0x40/0x90 [ 246.034840][ T8053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.034876][ T8053] RIP: 0033:0x7f2fd5f9c819 [ 246.034910][ T8053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.034945][ T8053] RSP: 002b:00007f2fd6e7c028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 246.034986][ T8053] RAX: ffffffffffffffda RBX: 00007f2fd6215fa0 RCX: 00007f2fd5f9c819 [ 246.035015][ T8053] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 246.035057][ T8053] RBP: 00007f2fd6032c91 R08: 0000000000000000 R09: 0000000000000000 [ 246.035080][ T8053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.035101][ T8053] R13: 00007f2fd6216038 R14: 00007f2fd6215fa0 R15: 00007ffee53f76a8 [ 246.035157][ T8053] [ 247.189091][ T8070] input: jJǸ-¶š9ã%vø“ûJ86Ö‘ as /devices/virtual/input/input9 [ 247.364340][ T8081] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 247.999608][ T8088] netlink: 12 bytes leftover after parsing attributes in process `syz.4.392'. [ 248.136025][ T8087] HfR: entered promiscuous mode [ 248.217011][ T8088] HfR: left promiscuous mode [ 252.120891][ T51] Bluetooth: hci4: Unexpected cc 0x7c89 with no status [ 253.104188][ T5145] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 253.454451][ T8142] HfR: entered promiscuous mode [ 253.490622][ T8139] can: request_module (can-proto-0) failed. [ 253.504493][ T8142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.404'. [ 253.594941][ T8142] HfR: left promiscuous mode [ 255.254061][ T8174] netlink: 338 bytes leftover after parsing attributes in process `syz.1.412'. [ 255.892519][ T8171] FAULT_INJECTION: forcing a failure. [ 255.892519][ T8171] name failslab, interval 1, probability 0, space 0, times 0 [ 255.911255][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.928333][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.233211][ T8171] CPU: 0 UID: 0 PID: 8171 Comm: syz.4.410 Tainted: G L syzkaller #0 PREEMPT(full) [ 256.233263][ T8171] Tainted: [L]=SOFTLOCKUP [ 256.233272][ T8171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 256.233288][ T8171] Call Trace: [ 256.233296][ T8171] [ 256.233305][ T8171] dump_stack_lvl+0x100/0x190 [ 256.233348][ T8171] should_fail_ex.cold+0x5/0xa [ 256.233378][ T8171] should_failslab+0xc2/0x120 [ 256.233406][ T8171] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 256.233446][ T8171] ? __kernfs_new_node+0xd2/0x960 [ 256.233496][ T8171] __kernfs_new_node+0xd2/0x960 [ 256.233538][ T8171] ? __pfx___kernfs_new_node+0x10/0x10 [ 256.233584][ T8171] ? find_held_lock+0x2b/0x80 [ 256.233609][ T8171] ? kernfs_root+0xee/0x2a0 [ 256.233645][ T8171] ? kernfs_root+0xee/0x2a0 [ 256.233689][ T8171] kernfs_new_node+0x11b/0x1a0 [ 256.233767][ T8171] __kernfs_create_file+0x53/0x350 [ 256.233802][ T8171] sysfs_add_file_mode_ns+0x207/0x3c0 [ 256.233846][ T8171] internal_create_group+0x593/0xf40 [ 256.233898][ T8171] ? __pfx_internal_create_group+0x10/0x10 [ 256.233944][ T8171] ? kernfs_create_link+0x1bd/0x240 [ 256.233979][ T8171] internal_create_groups+0x9d/0x150 [ 256.234026][ T8171] device_add+0x71a/0x1950 [ 256.234063][ T8171] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 256.234090][ T8171] ? __pfx_device_add+0x10/0x10 [ 256.234124][ T8171] ? lockdep_init_map_type+0x5c/0x250 [ 256.234172][ T8171] ? __init_waitqueue_head+0xca/0x150 [ 256.234221][ T8171] netdev_register_kobject+0x1a9/0x3d0 [ 256.234256][ T8171] register_netdevice+0x12e0/0x2210 [ 256.234289][ T8171] ? __pfx_register_netdevice+0x10/0x10 [ 256.234325][ T8171] __ip_tunnel_create+0x52b/0x670 [ 256.234353][ T8171] ? __pfx___ip_tunnel_create+0x10/0x10 [ 256.234379][ T8171] ? net_generic+0xea/0x2a0 [ 256.234412][ T8171] ip_tunnel_init_net+0x230/0x780 [ 256.234444][ T8171] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 256.234480][ T8171] ? __kmalloc_noprof+0x320/0x850 [ 256.234529][ T8171] ? __pfx_ipgre_tap_init_net+0x10/0x10 [ 256.234570][ T8171] ops_init+0x1e2/0x5f0 [ 256.234599][ T8171] setup_net+0x118/0x3a0 [ 256.234626][ T8171] ? __pfx_setup_net+0x10/0x10 [ 256.234649][ T8171] ? lockdep_init_map_type+0x5c/0x250 [ 256.234685][ T8171] ? mutex_init_lockep+0x110/0x150 [ 256.234725][ T8171] copy_net_ns+0x46f/0x7c0 [ 256.234757][ T8171] create_new_namespaces+0x3ea/0xac0 [ 256.234792][ T8171] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 256.234823][ T8171] ksys_unshare+0x473/0xad0 [ 256.234858][ T8171] ? __pfx_ksys_unshare+0x10/0x10 [ 256.234902][ T8171] __x64_sys_unshare+0x31/0x40 [ 256.234935][ T8171] do_syscall_64+0x106/0xf80 [ 256.234961][ T8171] ? clear_bhb_loop+0x40/0x90 [ 256.234992][ T8171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.235017][ T8171] RIP: 0033:0x7f2fd5f9c819 [ 256.235038][ T8171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.235063][ T8171] RSP: 002b:00007f2fd6e7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 256.235086][ T8171] RAX: ffffffffffffffda RBX: 00007f2fd6215fa0 RCX: 00007f2fd5f9c819 [ 256.235103][ T8171] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 256.235119][ T8171] RBP: 00007f2fd6032c91 R08: 0000000000000000 R09: 0000000000000000 [ 256.235134][ T8171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.235149][ T8171] R13: 00007f2fd6216038 R14: 00007f2fd6215fa0 R15: 00007ffee53f76a8 [ 256.235181][ T8171] [ 257.233354][ T8183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.412'. [ 257.759746][ T8192] HfR: entered promiscuous mode [ 257.777676][ T8192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.416'. [ 257.786952][ T8192] HfR: left promiscuous mode [ 258.758805][ T8206] FAULT_INJECTION: forcing a failure. [ 258.758805][ T8206] name failslab, interval 1, probability 0, space 0, times 0 [ 258.775456][ T8206] CPU: 0 UID: 0 PID: 8206 Comm: syz.1.420 Tainted: G L syzkaller #0 PREEMPT(full) [ 258.775512][ T8206] Tainted: [L]=SOFTLOCKUP [ 258.775523][ T8206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 258.775544][ T8206] Call Trace: [ 258.775555][ T8206] [ 258.775567][ T8206] dump_stack_lvl+0x100/0x190 [ 258.775629][ T8206] should_fail_ex.cold+0x5/0xa [ 258.775671][ T8206] ? fib_default_rule_add+0x4f/0x420 [ 258.775706][ T8206] should_failslab+0xc2/0x120 [ 258.775745][ T8206] __kmalloc_noprof+0xe0/0x850 [ 258.775809][ T8206] fib_default_rule_add+0x4f/0x420 [ 258.775848][ T8206] fib4_rules_init+0x52/0x1c0 [ 258.775898][ T8206] fib_net_init+0x1dc/0x3f0 [ 258.775939][ T8206] ? is_module_address+0x69/0xf0 [ 258.775993][ T8206] ? __pfx_fib_net_init+0x10/0x10 [ 258.776040][ T8206] ? timer_init_key+0x150/0x340 [ 258.776088][ T8206] ? devinet_init_net+0x56c/0x8d0 [ 258.776133][ T8206] ? __pfx_fib_net_init+0x10/0x10 [ 258.776167][ T8206] ops_init+0x1e2/0x5f0 [ 258.776208][ T8206] setup_net+0x118/0x3a0 [ 258.776245][ T8206] ? __pfx_setup_net+0x10/0x10 [ 258.776279][ T8206] ? lockdep_init_map_type+0x5c/0x250 [ 258.776329][ T8206] ? mutex_init_lockep+0x110/0x150 [ 258.776386][ T8206] copy_net_ns+0x46f/0x7c0 [ 258.776431][ T8206] create_new_namespaces+0x3ea/0xac0 [ 258.776481][ T8206] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 258.776525][ T8206] ksys_unshare+0x473/0xad0 [ 258.776574][ T8206] ? __pfx_ksys_unshare+0x10/0x10 [ 258.776636][ T8206] __x64_sys_unshare+0x31/0x40 [ 258.776682][ T8206] do_syscall_64+0x106/0xf80 [ 258.776718][ T8206] ? clear_bhb_loop+0x40/0x90 [ 258.776761][ T8206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.776797][ T8206] RIP: 0033:0x7f50e2b9c819 [ 258.776824][ T8206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.776859][ T8206] RSP: 002b:00007f50e0df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 258.776892][ T8206] RAX: ffffffffffffffda RBX: 00007f50e2e15fa0 RCX: 00007f50e2b9c819 [ 258.776916][ T8206] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 258.776937][ T8206] RBP: 00007f50e2c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 258.776958][ T8206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.776978][ T8206] R13: 00007f50e2e16038 R14: 00007f50e2e15fa0 R15: 00007ffcd78eab78 [ 258.777032][ T8206] [ 260.431897][ T8220] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 260.438662][ T8220] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 260.458873][ T8220] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 260.468933][ T8220] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 261.164325][ T8248] FAULT_INJECTION: forcing a failure. [ 261.164325][ T8248] name failslab, interval 1, probability 0, space 0, times 0 [ 261.233249][ T8248] CPU: 1 UID: 0 PID: 8248 Comm: syz.1.430 Tainted: G L syzkaller #0 PREEMPT(full) [ 261.233303][ T8248] Tainted: [L]=SOFTLOCKUP [ 261.233315][ T8248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 261.233335][ T8248] Call Trace: [ 261.233345][ T8248] [ 261.233358][ T8248] dump_stack_lvl+0x100/0x190 [ 261.233415][ T8248] should_fail_ex.cold+0x5/0xa [ 261.233456][ T8248] ? tomoyo_realpath_from_path+0xb6/0x690 [ 261.233506][ T8248] should_failslab+0xc2/0x120 [ 261.233545][ T8248] __kmalloc_noprof+0xe0/0x850 [ 261.233607][ T8248] tomoyo_realpath_from_path+0xb6/0x690 [ 261.233668][ T8248] tomoyo_path_number_perm+0x23c/0x580 [ 261.233709][ T8248] ? tomoyo_path_number_perm+0x22e/0x580 [ 261.233770][ T8248] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 261.233866][ T8248] ? find_held_lock+0x2b/0x80 [ 261.233901][ T8248] ? __fget_files+0x215/0x3d0 [ 261.233932][ T8248] ? hook_file_ioctl_common+0x146/0x410 [ 261.233985][ T8248] ? __fget_files+0x21f/0x3d0 [ 261.234032][ T8248] security_file_ioctl+0xd3/0x230 [ 261.234077][ T8248] __x64_sys_ioctl+0xb7/0x210 [ 261.234131][ T8248] do_syscall_64+0x106/0xf80 [ 261.234171][ T8248] ? clear_bhb_loop+0x40/0x90 [ 261.234213][ T8248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.234246][ T8248] RIP: 0033:0x7f50e2b9c819 [ 261.234278][ T8248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.234311][ T8248] RSP: 002b:00007f50e0df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 261.234341][ T8248] RAX: ffffffffffffffda RBX: 00007f50e2e15fa0 RCX: 00007f50e2b9c819 [ 261.234363][ T8248] RDX: 0000200000000040 RSI: 0000000040044591 RDI: 0000000000000003 [ 261.234383][ T8248] RBP: 00007f50e0df6090 R08: 0000000000000000 R09: 0000000000000000 [ 261.234403][ T8248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.234423][ T8248] R13: 00007f50e2e16038 R14: 00007f50e2e15fa0 R15: 00007ffcd78eab78 [ 261.234467][ T8248] [ 261.234571][ T8248] ERROR: Out of memory at tomoyo_realpath_from_path. [ 261.742900][ T5145] Bluetooth: hci0: command 0x0c1a tx timeout [ 261.915586][ T8241] openvswitch: netlink: IP tunnel dst address not specified [ 262.470807][ T5145] Bluetooth: hci2: command 0x0c1a tx timeout [ 262.470823][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 262.542999][ T5145] Bluetooth: hci4: command 0x0c1a tx timeout [ 267.310930][ T8347] netlink: 12 bytes leftover after parsing attributes in process `syz.1.443'. [ 267.421247][ T8345] HfR: entered promiscuous mode [ 267.427634][ T8347] HfR: left promiscuous mode [ 270.483916][ T8376] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 270.545252][ T8376] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 270.551502][ T8376] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 270.641646][ T8376] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 271.058791][ T8393] FAULT_INJECTION: forcing a failure. [ 271.058791][ T8393] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 271.199314][ T8393] CPU: 0 UID: 0 PID: 8393 Comm: syz.2.453 Tainted: G L syzkaller #0 PREEMPT(full) [ 271.199364][ T8393] Tainted: [L]=SOFTLOCKUP [ 271.199374][ T8393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 271.199393][ T8393] Call Trace: [ 271.199403][ T8393] [ 271.199416][ T8393] dump_stack_lvl+0x100/0x190 [ 271.199474][ T8393] should_fail_ex.cold+0x5/0xa [ 271.199516][ T8393] _copy_to_user+0x32/0xd0 [ 271.199564][ T8393] simple_read_from_buffer+0xcb/0x170 [ 271.199622][ T8393] proc_fail_nth_read+0x1af/0x230 [ 271.199668][ T8393] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 271.199716][ T8393] ? rw_verify_area+0xce/0x6d0 [ 271.199767][ T8393] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 271.199812][ T8393] vfs_read+0x1e4/0xb30 [ 271.199850][ T8393] ? __pfx_vfs_read+0x10/0x10 [ 271.199883][ T8393] ? __fget_files+0x215/0x3d0 [ 271.199925][ T8393] ? __fget_files+0x21f/0x3d0 [ 271.199971][ T8393] ksys_read+0x12a/0x250 [ 271.200003][ T8393] ? __pfx_ksys_read+0x10/0x10 [ 271.200033][ T8393] ? evdev_ioctl+0x139/0x1a0 [ 271.200082][ T8393] do_syscall_64+0x106/0xf80 [ 271.200118][ T8393] ? clear_bhb_loop+0x40/0x90 [ 271.200159][ T8393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.200193][ T8393] RIP: 0033:0x7fdf3cf5d04e [ 271.200229][ T8393] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 271.200261][ T8393] RSP: 002b:00007fdf3b1f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 271.200292][ T8393] RAX: ffffffffffffffda RBX: 00007fdf3b1f66c0 RCX: 00007fdf3cf5d04e [ 271.200314][ T8393] RDX: 000000000000000f RSI: 00007fdf3b1f60a0 RDI: 0000000000000004 [ 271.200333][ T8393] RBP: 00007fdf3b1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 271.200354][ T8393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.200373][ T8393] R13: 00007fdf3d216038 R14: 00007fdf3d215fa0 R15: 00007ffdaf409618 [ 271.200416][ T8393] [ 272.550325][ T5145] Bluetooth: hci1: command 0x0c1a tx timeout [ 272.556678][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 272.623137][ T5145] Bluetooth: hci2: command 0x0c1a tx timeout [ 272.703311][ T5145] Bluetooth: hci4: command 0x0c1a tx timeout [ 273.512926][ T8424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.460'. [ 278.217654][ T8462] FAULT_INJECTION: forcing a failure. [ 278.217654][ T8462] name failslab, interval 1, probability 0, space 0, times 0 [ 278.312156][ T8462] CPU: 0 UID: 0 PID: 8462 Comm: syz.4.466 Tainted: G L syzkaller #0 PREEMPT(full) [ 278.312212][ T8462] Tainted: [L]=SOFTLOCKUP [ 278.312225][ T8462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 278.312246][ T8462] Call Trace: [ 278.312257][ T8462] [ 278.312297][ T8462] dump_stack_lvl+0x100/0x190 [ 278.312358][ T8462] should_fail_ex.cold+0x5/0xa [ 278.312410][ T8462] should_failslab+0xc2/0x120 [ 278.312451][ T8462] __kvmalloc_node_noprof+0xfa/0xa00 [ 278.312485][ T8462] ? fib4_semantics_init+0x2a/0x100 [ 278.312547][ T8462] fib4_semantics_init+0x2a/0x100 [ 278.312599][ T8462] fib_net_init+0x1fc/0x3f0 [ 278.312633][ T8462] ? is_module_address+0x69/0xf0 [ 278.312682][ T8462] ? __pfx_fib_net_init+0x10/0x10 [ 278.312719][ T8462] ? timer_init_key+0x150/0x340 [ 278.312771][ T8462] ? devinet_init_net+0x56c/0x8d0 [ 278.312814][ T8462] ? __pfx_fib_net_init+0x10/0x10 [ 278.312846][ T8462] ops_init+0x1e2/0x5f0 [ 278.312884][ T8462] setup_net+0x118/0x3a0 [ 278.312921][ T8462] ? __pfx_setup_net+0x10/0x10 [ 278.312954][ T8462] ? lockdep_init_map_type+0x5c/0x250 [ 278.313004][ T8462] ? mutex_init_lockep+0x110/0x150 [ 278.313061][ T8462] copy_net_ns+0x46f/0x7c0 [ 278.313105][ T8462] create_new_namespaces+0x3ea/0xac0 [ 278.313154][ T8462] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 278.313197][ T8462] ksys_unshare+0x473/0xad0 [ 278.313247][ T8462] ? __pfx_ksys_unshare+0x10/0x10 [ 278.313308][ T8462] __x64_sys_unshare+0x31/0x40 [ 278.313353][ T8462] do_syscall_64+0x106/0xf80 [ 278.313398][ T8462] ? clear_bhb_loop+0x40/0x90 [ 278.313442][ T8462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.313478][ T8462] RIP: 0033:0x7f2fd5f9c819 [ 278.313506][ T8462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.313539][ T8462] RSP: 002b:00007f2fd6e7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 278.313570][ T8462] RAX: ffffffffffffffda RBX: 00007f2fd6215fa0 RCX: 00007f2fd5f9c819 [ 278.313592][ T8462] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 278.313612][ T8462] RBP: 00007f2fd6032c91 R08: 0000000000000000 R09: 0000000000000000 [ 278.313632][ T8462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.313652][ T8462] R13: 00007f2fd6216038 R14: 00007f2fd6215fa0 R15: 00007ffee53f76a8 [ 278.313695][ T8462] [ 278.913748][ T8465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.467'. [ 279.427564][ T8468] FAULT_INJECTION: forcing a failure. [ 279.427564][ T8468] name failslab, interval 1, probability 0, space 0, times 0 [ 279.585508][ T8468] CPU: 1 UID: 0 PID: 8468 Comm: syz.1.468 Tainted: G L syzkaller #0 PREEMPT(full) [ 279.585568][ T8468] Tainted: [L]=SOFTLOCKUP [ 279.585581][ T8468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 279.585602][ T8468] Call Trace: [ 279.585613][ T8468] [ 279.585627][ T8468] dump_stack_lvl+0x100/0x190 [ 279.585695][ T8468] should_fail_ex.cold+0x5/0xa [ 279.585738][ T8468] ? security_inode_init_security+0x113/0x370 [ 279.585796][ T8468] should_failslab+0xc2/0x120 [ 279.585837][ T8468] __kmalloc_noprof+0xe0/0x850 [ 279.585904][ T8468] security_inode_init_security+0x113/0x370 [ 279.585964][ T8468] ? __pfx_shmem_initxattrs+0x10/0x10 [ 279.586009][ T8468] ? __pfx_security_inode_init_security+0x10/0x10 [ 279.586071][ T8468] ? do_raw_spin_unlock+0x145/0x1e0 [ 279.586135][ T8468] shmem_mknod+0x2bf/0x470 [ 279.586188][ T8468] ? __pfx_shmem_mknod+0x10/0x10 [ 279.586234][ T8468] ? bpf_lsm_inode_create+0x9/0x10 [ 279.586294][ T8468] ? __pfx_shmem_create+0x10/0x10 [ 279.586344][ T8468] lookup_open.isra.0+0xc47/0x11b0 [ 279.586409][ T8468] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 279.586473][ T8468] ? __pfx___might_resched+0x10/0x10 [ 279.586535][ T8468] ? mnt_get_write_access+0x52/0x2f0 [ 279.586595][ T8468] ? __pfx_down_write+0x10/0x10 [ 279.586638][ T8468] ? mnt_get_write_access+0x1e9/0x2f0 [ 279.586696][ T8468] path_openat+0x2291/0x31a0 [ 279.586750][ T8468] ? __pfx_path_openat+0x10/0x10 [ 279.586806][ T8468] do_file_open+0x20e/0x430 [ 279.586850][ T8468] ? __pfx_do_file_open+0x10/0x10 [ 279.586920][ T8468] ? _raw_spin_unlock+0x28/0x50 [ 279.586976][ T8468] ? alloc_fd+0x476/0x790 [ 279.587025][ T8468] do_sys_openat2+0x10d/0x1e0 [ 279.587075][ T8468] ? __pfx_do_sys_openat2+0x10/0x10 [ 279.587142][ T8468] __x64_sys_open+0xfe/0x1d0 [ 279.587191][ T8468] ? __pfx___x64_sys_open+0x10/0x10 [ 279.587258][ T8468] do_syscall_64+0x106/0xf80 [ 279.587295][ T8468] ? clear_bhb_loop+0x40/0x90 [ 279.587340][ T8468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.587376][ T8468] RIP: 0033:0x7f50e2b9c819 [ 279.587406][ T8468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.587441][ T8468] RSP: 002b:00007f50e0df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 279.587474][ T8468] RAX: ffffffffffffffda RBX: 00007f50e2e15fa0 RCX: 00007f50e2b9c819 [ 279.587504][ T8468] RDX: 0000000000000154 RSI: 0000000000022240 RDI: 0000000000000000 [ 279.587526][ T8468] RBP: 00007f50e2c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 279.587547][ T8468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.587567][ T8468] R13: 00007f50e2e16038 R14: 00007f50e2e15fa0 R15: 00007ffcd78eab78 [ 279.587630][ T8468] [ 281.163633][ T8478] random: crng reseeded on system resumption [ 283.166800][ T8516] FAULT_INJECTION: forcing a failure. [ 283.166800][ T8516] name failslab, interval 1, probability 0, space 0, times 0 [ 283.185143][ T8515] FAULT_INJECTION: forcing a failure. [ 283.185143][ T8515] name failslab, interval 1, probability 0, space 0, times 0 [ 283.234668][ T8516] CPU: 1 UID: 0 PID: 8516 Comm: syz.2.476 Tainted: G L syzkaller #0 PREEMPT(full) [ 283.234718][ T8516] Tainted: [L]=SOFTLOCKUP [ 283.234726][ T8516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 283.234742][ T8516] Call Trace: [ 283.234750][ T8516] [ 283.234759][ T8516] dump_stack_lvl+0x100/0x190 [ 283.234803][ T8516] should_fail_ex.cold+0x5/0xa [ 283.234833][ T8516] should_failslab+0xc2/0x120 [ 283.234861][ T8516] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 283.234915][ T8516] ? security_file_alloc+0x34/0x2c0 [ 283.234950][ T8516] ? trace_kmem_cache_alloc+0xf3/0x120 [ 283.234984][ T8516] security_file_alloc+0x34/0x2c0 [ 283.235018][ T8516] init_file+0x95/0x480 [ 283.235049][ T8516] alloc_empty_file+0x73/0x1c0 [ 283.235083][ T8516] alloc_file_pseudo+0x13a/0x230 [ 283.235118][ T8516] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 283.235152][ T8516] ? tipc_sk_finish_conn+0x600/0x7a0 [ 283.235195][ T8516] sock_alloc_file+0x50/0x210 [ 283.235241][ T8516] __sys_socketpair+0x321/0x5b0 [ 283.235277][ T8516] ? __pfx___sys_socketpair+0x10/0x10 [ 283.235312][ T8516] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 283.235341][ T8516] ? __pfx___x64_sys_futex+0x10/0x10 [ 283.235376][ T8516] ? rcu_is_watching+0x12/0xc0 [ 283.235422][ T8516] __x64_sys_socketpair+0x96/0x100 [ 283.235456][ T8516] ? lockdep_hardirqs_on+0x78/0x100 [ 283.235483][ T8516] do_syscall_64+0x106/0xf80 [ 283.235509][ T8516] ? clear_bhb_loop+0x40/0x90 [ 283.235539][ T8516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.235565][ T8516] RIP: 0033:0x7fdf3cf9c819 [ 283.235586][ T8516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.235610][ T8516] RSP: 002b:00007fdf3b1d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 283.235634][ T8516] RAX: ffffffffffffffda RBX: 00007fdf3d216090 RCX: 00007fdf3cf9c819 [ 283.235651][ T8516] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 000000000000001e [ 283.235666][ T8516] RBP: 00007fdf3d032c91 R08: 0000000000000000 R09: 0000000000000000 [ 283.235682][ T8516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.235721][ T8516] R13: 00007fdf3d216128 R14: 00007fdf3d216090 R15: 00007ffdaf409618 [ 283.235763][ T8516] [ 283.669679][ T8515] CPU: 0 UID: 0 PID: 8515 Comm: syz.4.477 Tainted: G L syzkaller #0 PREEMPT(full) [ 283.669736][ T8515] Tainted: [L]=SOFTLOCKUP [ 283.669749][ T8515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 283.669770][ T8515] Call Trace: [ 283.669782][ T8515] [ 283.669794][ T8515] dump_stack_lvl+0x100/0x190 [ 283.669859][ T8515] should_fail_ex.cold+0x5/0xa [ 283.669900][ T8515] ? fib_default_rule_add+0x4f/0x420 [ 283.670034][ T8515] should_failslab+0xc2/0x120 [ 283.670088][ T8515] __kmalloc_noprof+0xe0/0x850 [ 283.670167][ T8515] fib_default_rule_add+0x4f/0x420 [ 283.670214][ T8515] fib4_rules_init+0x7c/0x1c0 [ 283.670270][ T8515] fib_net_init+0x1dc/0x3f0 [ 283.670308][ T8515] ? is_module_address+0x69/0xf0 [ 283.670361][ T8515] ? __pfx_fib_net_init+0x10/0x10 [ 283.670401][ T8515] ? timer_init_key+0x150/0x340 [ 283.670455][ T8515] ? devinet_init_net+0x56c/0x8d0 [ 283.670508][ T8515] ? __pfx_fib_net_init+0x10/0x10 [ 283.670546][ T8515] ops_init+0x1e2/0x5f0 [ 283.670591][ T8515] setup_net+0x118/0x3a0 [ 283.670632][ T8515] ? __pfx_setup_net+0x10/0x10 [ 283.670669][ T8515] ? lockdep_init_map_type+0x5c/0x250 [ 283.670724][ T8515] ? mutex_init_lockep+0x110/0x150 [ 283.670785][ T8515] copy_net_ns+0x46f/0x7c0 [ 283.670834][ T8515] create_new_namespaces+0x3ea/0xac0 [ 283.670885][ T8515] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 283.670932][ T8515] ksys_unshare+0x473/0xad0 [ 283.670985][ T8515] ? __pfx_ksys_unshare+0x10/0x10 [ 283.671063][ T8515] __x64_sys_unshare+0x31/0x40 [ 283.671112][ T8515] do_syscall_64+0x106/0xf80 [ 283.671158][ T8515] ? clear_bhb_loop+0x40/0x90 [ 283.671202][ T8515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.671240][ T8515] RIP: 0033:0x7f2fd5f9c819 [ 283.671272][ T8515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.671307][ T8515] RSP: 002b:00007f2fd6e7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 283.671342][ T8515] RAX: ffffffffffffffda RBX: 00007f2fd6215fa0 RCX: 00007f2fd5f9c819 [ 283.671366][ T8515] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 283.671386][ T8515] RBP: 00007f2fd6032c91 R08: 0000000000000000 R09: 0000000000000000 [ 283.671407][ T8515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.671428][ T8515] R13: 00007f2fd6216038 R14: 00007f2fd6215fa0 R15: 00007ffee53f76a8 [ 283.671475][ T8515] [ 283.963567][ T8522] FAULT_INJECTION: forcing a failure. [ 283.963567][ T8522] name fail_futex, interval 1, probability 0, space 0, times 0 [ 283.981125][ T8522] CPU: 0 UID: 0 PID: 8522 Comm: syz.1.479 Tainted: G L syzkaller #0 PREEMPT(full) [ 283.981182][ T8522] Tainted: [L]=SOFTLOCKUP [ 283.981195][ T8522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 283.981217][ T8522] Call Trace: [ 283.981228][ T8522] [ 283.981241][ T8522] dump_stack_lvl+0x100/0x190 [ 283.981318][ T8522] should_fail_ex.cold+0x5/0xa [ 283.981362][ T8522] get_futex_key+0x1d2/0x1620 [ 283.981414][ T8522] ? __pfx_get_futex_key+0x10/0x10 [ 283.981462][ T8522] ? trace_pid_list_is_set+0x22c/0x390 [ 283.981527][ T8522] futex_wait_setup+0x83/0x510 [ 283.981594][ T8522] __futex_wait+0x19f/0x300 [ 283.981655][ T8522] ? __pfx___futex_wait+0x10/0x10 [ 283.981709][ T8522] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 283.981770][ T8522] ? lockdep_hardirqs_on+0x78/0x100 [ 283.981812][ T8522] ? __pfx_futex_wake_mark+0x10/0x10 [ 283.981877][ T8522] ? find_held_lock+0x2b/0x80 [ 283.981912][ T8522] ? futex_wake+0x456/0x530 [ 283.981977][ T8522] futex_wait+0xed/0x380 [ 283.982033][ T8522] ? __pfx_futex_wait+0x10/0x10 [ 283.982110][ T8522] ? ksys_shmctl.constprop.0+0x19b/0x390 [ 283.982170][ T8522] do_futex+0x1ef/0x350 [ 283.982218][ T8522] ? __pfx_do_futex+0x10/0x10 [ 283.982267][ T8522] ? do_sigaltstack.constprop.0+0x4c0/0x670 [ 283.982327][ T8522] __x64_sys_futex+0x34f/0x4d0 [ 283.982382][ T8522] ? __pfx___x64_sys_futex+0x10/0x10 [ 283.982447][ T8522] do_syscall_64+0x106/0xf80 [ 283.982499][ T8522] ? clear_bhb_loop+0x40/0x90 [ 283.982548][ T8522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.982585][ T8522] RIP: 0033:0x7f50e2b9c819 [ 283.982614][ T8522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.982649][ T8522] RSP: 002b:00007f50e0df60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 283.982681][ T8522] RAX: ffffffffffffffda RBX: 00007f50e2e15fa8 RCX: 00007f50e2b9c819 [ 283.982705][ T8522] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f50e2e15fa8 [ 283.982727][ T8522] RBP: 00007f50e2e15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 283.982748][ T8522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.982773][ T8522] R13: 00007f50e2e16038 R14: 00007ffcd78eaa90 R15: 00007ffcd78eab78 [ 283.982813][ T8522] [ 284.345975][ T8514] [U] ( [ 285.288629][ T8543] HfR: entered promiscuous mode [ 285.322301][ T8543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.485'. [ 285.366568][ T8543] HfR: left promiscuous mode [ 285.626588][ T8550] HfR: entered promiscuous mode [ 285.657480][ T8551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.486'. [ 285.693074][ T8551] HfR: left promiscuous mode [ 286.558745][ T8578] misc userio: Invalid payload size [ 287.307672][ T8587] FAULT_INJECTION: forcing a failure. [ 287.307672][ T8587] name failslab, interval 1, probability 0, space 0, times 0 [ 287.434257][ T8587] CPU: 1 UID: 0 PID: 8587 Comm: syz.2.494 Tainted: G L syzkaller #0 PREEMPT(full) [ 287.434322][ T8587] Tainted: [L]=SOFTLOCKUP [ 287.434336][ T8587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 287.434360][ T8587] Call Trace: [ 287.434373][ T8587] [ 287.434387][ T8587] dump_stack_lvl+0x100/0x190 [ 287.434449][ T8587] should_fail_ex.cold+0x5/0xa [ 287.434518][ T8587] should_failslab+0xc2/0x120 [ 287.434564][ T8587] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 287.434605][ T8587] ? __devinet_sysctl_register+0xbc/0x360 [ 287.434662][ T8587] kmemdup_noprof+0x29/0x60 [ 287.434702][ T8587] __devinet_sysctl_register+0xbc/0x360 [ 287.434771][ T8587] ? trace_kmalloc+0x101/0x130 [ 287.434824][ T8587] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 287.434882][ T8587] ? __asan_memcpy+0x3c/0x60 [ 287.434978][ T8587] devinet_init_net+0x334/0x8d0 [ 287.435033][ T8587] ? __pfx_devinet_init_net+0x10/0x10 [ 287.435101][ T8587] ops_init+0x1e2/0x5f0 [ 287.435144][ T8587] setup_net+0x118/0x3a0 [ 287.435184][ T8587] ? __pfx_setup_net+0x10/0x10 [ 287.435221][ T8587] ? lockdep_init_map_type+0x5c/0x250 [ 287.435277][ T8587] ? mutex_init_lockep+0x110/0x150 [ 287.435342][ T8587] copy_net_ns+0x46f/0x7c0 [ 287.435392][ T8587] create_new_namespaces+0x3ea/0xac0 [ 287.435449][ T8587] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 287.435499][ T8587] ksys_unshare+0x473/0xad0 [ 287.435554][ T8587] ? __pfx_ksys_unshare+0x10/0x10 [ 287.435617][ T8587] __x64_sys_unshare+0x31/0x40 [ 287.435809][ T8587] do_syscall_64+0x106/0xf80 [ 287.435860][ T8587] ? clear_bhb_loop+0x40/0x90 [ 287.435908][ T8587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.435950][ T8587] RIP: 0033:0x7fdf3cf9c819 [ 287.435983][ T8587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.436022][ T8587] RSP: 002b:00007fdf3b1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 287.436060][ T8587] RAX: ffffffffffffffda RBX: 00007fdf3d215fa0 RCX: 00007fdf3cf9c819 [ 287.436086][ T8587] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 287.436109][ T8587] RBP: 00007fdf3d032c91 R08: 0000000000000000 R09: 0000000000000000 [ 287.436133][ T8587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.436156][ T8587] R13: 00007fdf3d216038 R14: 00007fdf3d215fa0 R15: 00007ffdaf409618 [ 287.436206][ T8587] [ 288.815400][ T8606] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 288.821973][ T8606] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 288.853119][ T8606] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 288.859518][ T8606] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 288.926230][ T8614] FAULT_INJECTION: forcing a failure. [ 288.926230][ T8614] name failslab, interval 1, probability 0, space 0, times 0 [ 288.981113][ T8614] CPU: 0 UID: 0 PID: 8614 Comm: syz.1.502 Tainted: G L syzkaller #0 PREEMPT(full) [ 288.981167][ T8614] Tainted: [L]=SOFTLOCKUP [ 288.981179][ T8614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 288.981199][ T8614] Call Trace: [ 288.981211][ T8614] [ 288.981223][ T8614] dump_stack_lvl+0x100/0x190 [ 288.981284][ T8614] should_fail_ex.cold+0x5/0xa [ 288.981324][ T8614] should_failslab+0xc2/0x120 [ 288.981362][ T8614] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 288.981413][ T8614] ? __d_alloc+0x34/0xa80 [ 288.981452][ T8614] __d_alloc+0x34/0xa80 [ 288.981490][ T8614] d_alloc_parallel+0x111/0x14e0 [ 288.981536][ T8614] ? __lock_acquire+0x4a5/0x2630 [ 288.981591][ T8614] ? look_up_lock_class+0x55/0x120 [ 288.981627][ T8614] ? register_lock_class+0x40/0x560 [ 288.981669][ T8614] ? __pfx_d_alloc_parallel+0x10/0x10 [ 288.981729][ T8614] ? lockdep_init_map_type+0x5c/0x250 [ 288.981771][ T8614] ? lockdep_init_map_type+0x5c/0x250 [ 288.981815][ T8614] __lookup_slow+0x193/0x460 [ 288.981855][ T8614] ? __pfx___lookup_slow+0x10/0x10 [ 288.981912][ T8614] ? __d_lookup+0x266/0x4a0 [ 288.981964][ T8614] lookup_slow+0x50/0x70 [ 288.982009][ T8614] link_path_walk+0x1377/0x1cc0 [ 288.982075][ T8614] path_openat+0x1be/0x31a0 [ 288.982106][ T8614] ? kasan_save_stack+0x3f/0x50 [ 288.982135][ T8614] ? kasan_save_stack+0x30/0x50 [ 288.982160][ T8614] ? kasan_save_track+0x14/0x30 [ 288.982187][ T8614] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 288.982248][ T8614] ? __pfx_path_openat+0x10/0x10 [ 288.982294][ T8614] do_file_open+0x20e/0x430 [ 288.982332][ T8614] ? __pfx_do_file_open+0x10/0x10 [ 288.982398][ T8614] ? alloc_fd+0x476/0x790 [ 288.982438][ T8614] ? do_getname+0x191/0x390 [ 288.982492][ T8614] do_sys_openat2+0x10d/0x1e0 [ 288.982542][ T8614] ? __pfx_do_sys_openat2+0x10/0x10 [ 288.982604][ T8614] __x64_sys_openat+0x12d/0x210 [ 288.982653][ T8614] ? __pfx___x64_sys_openat+0x10/0x10 [ 288.982728][ T8614] do_syscall_64+0x106/0xf80 [ 288.982770][ T8614] ? clear_bhb_loop+0x40/0x90 [ 288.982811][ T8614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.982845][ T8614] RIP: 0033:0x7f50e2b9c819 [ 288.982872][ T8614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.982905][ T8614] RSP: 002b:00007f50e0df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 288.982938][ T8614] RAX: ffffffffffffffda RBX: 00007f50e2e15fa0 RCX: 00007f50e2b9c819 [ 288.982959][ T8614] RDX: 0000000000000800 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 288.982981][ T8614] RBP: 00007f50e2c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 288.983001][ T8614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.983022][ T8614] R13: 00007f50e2e16038 R14: 00007f50e2e15fa0 R15: 00007ffcd78eab78 [ 288.983066][ T8614] [ 289.705734][ T8614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.502'. [ 289.748557][ T8614] netlink: set zone limit has 8 unknown bytes [ 290.863040][ T5145] Bluetooth: hci4: command 0x0c1a tx timeout [ 290.870409][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 290.870415][ T5145] Bluetooth: hci1: command 0x0c1a tx timeout [ 290.870515][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 291.082651][ T8641] bond0: no command found in slaves file - use +ifname or -ifname [ 291.717121][ T8657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.513'. [ 291.805165][ T8656] HfR: entered promiscuous mode [ 291.892348][ T8657] HfR: left promiscuous mode [ 291.943945][ T8660] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 291.956344][ T8660] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 291.973519][ T8660] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 292.013635][ T8660] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 293.983018][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 293.990749][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 293.990762][ T5145] Bluetooth: hci0: command 0x0c1a tx timeout [ 294.063365][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 295.924451][ T8713] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 295.939713][ T8713] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 296.052279][ T8713] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 296.073303][ T8713] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 296.630612][ T8723] FAULT_INJECTION: forcing a failure. [ 296.630612][ T8723] name failslab, interval 1, probability 0, space 0, times 0 [ 296.700583][ T8723] CPU: 0 UID: 0 PID: 8723 Comm: syz.2.529 Tainted: G L syzkaller #0 PREEMPT(full) [ 296.700638][ T8723] Tainted: [L]=SOFTLOCKUP [ 296.700650][ T8723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 296.700670][ T8723] Call Trace: [ 296.700682][ T8723] [ 296.700695][ T8723] dump_stack_lvl+0x100/0x190 [ 296.700767][ T8723] should_fail_ex.cold+0x5/0xa [ 296.700814][ T8723] should_failslab+0xc2/0x120 [ 296.700853][ T8723] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 296.700906][ T8723] ? security_file_alloc+0x34/0x2c0 [ 296.700956][ T8723] ? trace_kmem_cache_alloc+0xf3/0x120 [ 296.701002][ T8723] security_file_alloc+0x34/0x2c0 [ 296.701053][ T8723] init_file+0x95/0x480 [ 296.701096][ T8723] alloc_empty_file+0x73/0x1c0 [ 296.701144][ T8723] alloc_file_pseudo+0x13a/0x230 [ 296.701194][ T8723] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 296.701243][ T8723] ? tipc_sk_finish_conn+0x600/0x7a0 [ 296.701295][ T8723] sock_alloc_file+0x50/0x210 [ 296.701335][ T8723] __sys_socketpair+0x321/0x5b0 [ 296.701387][ T8723] ? __pfx___sys_socketpair+0x10/0x10 [ 296.701436][ T8723] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 296.701478][ T8723] ? xfd_validate_state+0x129/0x190 [ 296.701542][ T8723] __x64_sys_socketpair+0x96/0x100 [ 296.701592][ T8723] ? lockdep_hardirqs_on+0x78/0x100 [ 296.701630][ T8723] do_syscall_64+0x106/0xf80 [ 296.701666][ T8723] ? clear_bhb_loop+0x40/0x90 [ 296.701710][ T8723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.701861][ T8723] RIP: 0033:0x7fdf3cf9c819 [ 296.701889][ T8723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.701924][ T8723] RSP: 002b:00007fdf3b1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 296.701957][ T8723] RAX: ffffffffffffffda RBX: 00007fdf3d215fa0 RCX: 00007fdf3cf9c819 [ 296.701979][ T8723] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 000000000000001e [ 296.702002][ T8723] RBP: 00007fdf3d032c91 R08: 0000000000000000 R09: 0000000000000000 [ 296.702024][ T8723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.702046][ T8723] R13: 00007fdf3d216038 R14: 00007fdf3d215fa0 R15: 00007ffdaf409618 [ 296.702093][ T8723] [ 297.982924][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 297.989653][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 298.063196][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 298.143028][ T5828] Bluetooth: hci4: command 0x0c1a tx timeout [ 301.302374][ T8770] FAULT_INJECTION: forcing a failure. [ 301.302374][ T8770] name failslab, interval 1, probability 0, space 0, times 0 [ 301.316589][ T8770] CPU: 0 UID: 0 PID: 8770 Comm: syz.4.541 Tainted: G L syzkaller #0 PREEMPT(full) [ 301.316645][ T8770] Tainted: [L]=SOFTLOCKUP [ 301.316658][ T8770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 301.316679][ T8770] Call Trace: [ 301.316691][ T8770] [ 301.316703][ T8770] dump_stack_lvl+0x100/0x190 [ 301.316769][ T8770] should_fail_ex.cold+0x5/0xa [ 301.316812][ T8770] should_failslab+0xc2/0x120 [ 301.316851][ T8770] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 301.316908][ T8770] ? alloc_empty_file+0x55/0x1c0 [ 301.316962][ T8770] alloc_empty_file+0x55/0x1c0 [ 301.317009][ T8770] alloc_file_pseudo+0x13a/0x230 [ 301.317058][ T8770] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 301.317106][ T8770] ? tipc_sk_finish_conn+0x600/0x7a0 [ 301.317157][ T8770] sock_alloc_file+0x50/0x210 [ 301.317198][ T8770] __sys_socketpair+0x353/0x5b0 [ 301.317250][ T8770] ? __pfx___sys_socketpair+0x10/0x10 [ 301.317296][ T8770] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 301.317336][ T8770] ? xfd_validate_state+0x129/0x190 [ 301.317408][ T8770] __x64_sys_socketpair+0x96/0x100 [ 301.317462][ T8770] ? lockdep_hardirqs_on+0x78/0x100 [ 301.317500][ T8770] do_syscall_64+0x106/0xf80 [ 301.317536][ T8770] ? clear_bhb_loop+0x40/0x90 [ 301.317580][ T8770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.317615][ T8770] RIP: 0033:0x7f2fd5f9c819 [ 301.317645][ T8770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.317678][ T8770] RSP: 002b:00007f2fd6e5b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 301.317712][ T8770] RAX: ffffffffffffffda RBX: 00007f2fd6216090 RCX: 00007f2fd5f9c819 [ 301.317734][ T8770] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 000000000000001e [ 301.317756][ T8770] RBP: 00007f2fd6032c91 R08: 0000000000000000 R09: 0000000000000000 [ 301.317777][ T8770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.317797][ T8770] R13: 00007f2fd6216128 R14: 00007f2fd6216090 R15: 00007ffee53f76a8 [ 301.317842][ T8770] [ 302.091903][ T8785] FAULT_INJECTION: forcing a failure. [ 302.091903][ T8785] name failslab, interval 1, probability 0, space 0, times 0 [ 302.124259][ T8785] CPU: 1 UID: 0 PID: 8785 Comm: syz.0.546 Tainted: G L syzkaller #0 PREEMPT(full) [ 302.124323][ T8785] Tainted: [L]=SOFTLOCKUP [ 302.124336][ T8785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 302.124374][ T8785] Call Trace: [ 302.124399][ T8785] [ 302.124426][ T8785] dump_stack_lvl+0x100/0x190 [ 302.124545][ T8785] should_fail_ex.cold+0x5/0xa [ 302.124626][ T8785] should_failslab+0xc2/0x120 [ 302.124680][ T8785] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 302.124716][ T8785] ? __devinet_sysctl_register+0xbc/0x360 [ 302.124795][ T8785] kmemdup_noprof+0x29/0x60 [ 302.124874][ T8785] __devinet_sysctl_register+0xbc/0x360 [ 302.124958][ T8785] ? trace_kmalloc+0x101/0x130 [ 302.125037][ T8785] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 302.125128][ T8785] ? __asan_memcpy+0x3c/0x60 [ 302.125238][ T8785] devinet_init_net+0x334/0x8d0 [ 302.125342][ T8785] ? __pfx_devinet_init_net+0x10/0x10 [ 302.125396][ T8785] ops_init+0x1e2/0x5f0 [ 302.125437][ T8785] setup_net+0x118/0x3a0 [ 302.125473][ T8785] ? __pfx_setup_net+0x10/0x10 [ 302.125509][ T8785] ? lockdep_init_map_type+0x5c/0x250 [ 302.125853][ T8785] ? mutex_init_lockep+0x110/0x150 [ 302.125912][ T8785] copy_net_ns+0x46f/0x7c0 [ 302.125957][ T8785] create_new_namespaces+0x3ea/0xac0 [ 302.126006][ T8785] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 302.126050][ T8785] ksys_unshare+0x473/0xad0 [ 302.126105][ T8785] ? __pfx_ksys_unshare+0x10/0x10 [ 302.126169][ T8785] __x64_sys_unshare+0x31/0x40 [ 302.126215][ T8785] do_syscall_64+0x106/0xf80 [ 302.126252][ T8785] ? clear_bhb_loop+0x40/0x90 [ 302.126304][ T8785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.126341][ T8785] RIP: 0033:0x7f7c3d99c819 [ 302.126371][ T8785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.126405][ T8785] RSP: 002b:00007f7c3e8ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 302.126439][ T8785] RAX: ffffffffffffffda RBX: 00007f7c3dc15fa0 RCX: 00007f7c3d99c819 [ 302.126461][ T8785] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 302.126481][ T8785] RBP: 00007f7c3da32c91 R08: 0000000000000000 R09: 0000000000000000 [ 302.126500][ T8785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.126520][ T8785] R13: 00007f7c3dc16038 R14: 00007f7c3dc15fa0 R15: 00007fff7c33b208 [ 302.126563][ T8785] [ 303.278588][ T8802] HfR: entered promiscuous mode [ 303.324150][ T8802] netlink: 12 bytes leftover after parsing attributes in process `syz.4.549'. [ 303.345412][ T8802] HfR: left promiscuous mode [ 304.474862][ T8820] HfR: entered promiscuous mode [ 304.510870][ T8820] netlink: 12 bytes leftover after parsing attributes in process `syz.2.551'. [ 304.539891][ T8820] HfR: left promiscuous mode [ 305.198945][ T8841] FAULT_INJECTION: forcing a failure. [ 305.198945][ T8841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.274377][ T8841] CPU: 1 UID: 0 PID: 8841 Comm: syz.0.556 Tainted: G L syzkaller #0 PREEMPT(full) [ 305.274430][ T8841] Tainted: [L]=SOFTLOCKUP [ 305.274441][ T8841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 305.274461][ T8841] Call Trace: [ 305.274472][ T8841] [ 305.274484][ T8841] dump_stack_lvl+0x100/0x190 [ 305.274548][ T8841] should_fail_ex.cold+0x5/0xa [ 305.274590][ T8841] _copy_from_user+0x2e/0xd0 [ 305.274637][ T8841] kstrtouint_from_user+0xd6/0x1d0 [ 305.274695][ T8841] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 305.274749][ T8841] ? __lock_acquire+0x4a5/0x2630 [ 305.274802][ T8841] ? lock_acquire+0x1cf/0x380 [ 305.274858][ T8841] proc_fail_nth_write+0x83/0x220 [ 305.274905][ T8841] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 305.274964][ T8841] vfs_write+0x2aa/0x1070 [ 305.275001][ T8841] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 305.275060][ T8841] ? __pfx_vfs_write+0x10/0x10 [ 305.275094][ T8841] ? __fget_files+0x215/0x3d0 [ 305.275145][ T8841] ? __fget_files+0x21f/0x3d0 [ 305.275191][ T8841] ksys_write+0x12a/0x250 [ 305.275226][ T8841] ? __pfx_ksys_write+0x10/0x10 [ 305.275272][ T8841] do_syscall_64+0x106/0xf80 [ 305.275309][ T8841] ? clear_bhb_loop+0x40/0x90 [ 305.275352][ T8841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.275387][ T8841] RIP: 0033:0x7f7c3d95d04e [ 305.275415][ T8841] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 305.275449][ T8841] RSP: 002b:00007f7c3e88cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 305.275480][ T8841] RAX: ffffffffffffffda RBX: 00007f7c3e88d6c0 RCX: 00007f7c3d95d04e [ 305.275502][ T8841] RDX: 0000000000000001 RSI: 00007f7c3e88d0a0 RDI: 0000000000000004 [ 305.275523][ T8841] RBP: 00007f7c3e88d090 R08: 0000000000000000 R09: 0000000000000000 [ 305.275543][ T8841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.275564][ T8841] R13: 00007f7c3dc16128 R14: 00007f7c3dc16090 R15: 00007fff7c33b208 [ 305.275610][ T8841] [ 305.534960][ T8835] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 305.542239][ T8835] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 305.549196][ T8835] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 305.556253][ T8835] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 305.995028][ T8854] FAULT_INJECTION: forcing a failure. [ 305.995028][ T8854] name failslab, interval 1, probability 0, space 0, times 0 [ 306.052959][ T8854] CPU: 0 UID: 0 PID: 8854 Comm: syz.4.559 Tainted: G L syzkaller #0 PREEMPT(full) [ 306.053029][ T8854] Tainted: [L]=SOFTLOCKUP [ 306.053042][ T8854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 306.053063][ T8854] Call Trace: [ 306.053074][ T8854] [ 306.053088][ T8854] dump_stack_lvl+0x100/0x190 [ 306.053152][ T8854] should_fail_ex.cold+0x5/0xa [ 306.053196][ T8854] should_failslab+0xc2/0x120 [ 306.053237][ T8854] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 306.053298][ T8854] ? __alloc_skb+0x140/0x710 [ 306.053364][ T8854] __alloc_skb+0x140/0x710 [ 306.053419][ T8854] ? __alloc_skb+0x5b7/0x710 [ 306.053479][ T8854] ? __pfx___alloc_skb+0x10/0x10 [ 306.053540][ T8854] ? __pfx___register_sysctl_table+0x10/0x10 [ 306.053578][ T8854] ? is_module_address+0x69/0xf0 [ 306.053632][ T8854] inet_netconf_notify_devconf+0x9d/0x170 [ 306.053682][ T8854] __devinet_sysctl_register+0x227/0x360 [ 306.053728][ T8854] ? trace_kmalloc+0x101/0x130 [ 306.053769][ T8854] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 306.053822][ T8854] ? __asan_memcpy+0x3c/0x60 [ 306.053881][ T8854] devinet_init_net+0x303/0x8d0 [ 306.053937][ T8854] ? __pfx_devinet_init_net+0x10/0x10 [ 306.053988][ T8854] ops_init+0x1e2/0x5f0 [ 306.054028][ T8854] setup_net+0x118/0x3a0 [ 306.054063][ T8854] ? __pfx_setup_net+0x10/0x10 [ 306.054096][ T8854] ? lockdep_init_map_type+0x5c/0x250 [ 306.054145][ T8854] ? mutex_init_lockep+0x110/0x150 [ 306.054200][ T8854] copy_net_ns+0x46f/0x7c0 [ 306.054244][ T8854] create_new_namespaces+0x3ea/0xac0 [ 306.054292][ T8854] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 306.054336][ T8854] ksys_unshare+0x473/0xad0 [ 306.054385][ T8854] ? __pfx_ksys_unshare+0x10/0x10 [ 306.054447][ T8854] __x64_sys_unshare+0x31/0x40 [ 306.054494][ T8854] do_syscall_64+0x106/0xf80 [ 306.054531][ T8854] ? clear_bhb_loop+0x40/0x90 [ 306.054575][ T8854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.054610][ T8854] RIP: 0033:0x7f2fd5f9c819 [ 306.054639][ T8854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.054674][ T8854] RSP: 002b:00007f2fd6e7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 306.054708][ T8854] RAX: ffffffffffffffda RBX: 00007f2fd6215fa0 RCX: 00007f2fd5f9c819 [ 306.054731][ T8854] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 306.054752][ T8854] RBP: 00007f2fd6032c91 R08: 0000000000000000 R09: 0000000000000000 [ 306.054781][ T8854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 306.054801][ T8854] R13: 00007f2fd6216038 R14: 00007f2fd6215fa0 R15: 00007ffee53f76a8 [ 306.054848][ T8854] [ 307.458924][ T8881] FAULT_INJECTION: forcing a failure. [ 307.458924][ T8881] name failslab, interval 1, probability 0, space 0, times 0 [ 307.473840][ T8881] CPU: 1 UID: 0 PID: 8881 Comm: syz.0.566 Tainted: G L syzkaller #0 PREEMPT(full) [ 307.473909][ T8881] Tainted: [L]=SOFTLOCKUP [ 307.473922][ T8881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 307.473942][ T8881] Call Trace: [ 307.473956][ T8881] [ 307.473968][ T8881] dump_stack_lvl+0x100/0x190 [ 307.474029][ T8881] should_fail_ex.cold+0x5/0xa [ 307.474072][ T8881] should_failslab+0xc2/0x120 [ 307.474111][ T8881] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 307.474167][ T8881] ? security_inode_alloc+0x3b/0x2c0 [ 307.474209][ T8881] ? lockdep_init_map_type+0x5c/0x250 [ 307.474265][ T8881] security_inode_alloc+0x3b/0x2c0 [ 307.474330][ T8881] inode_init_always_gfp+0xced/0x1040 [ 307.474377][ T8881] alloc_inode+0x8e/0x250 [ 307.474426][ T8881] sock_alloc+0x44/0x280 [ 307.474462][ T8881] ? security_socket_create+0x7f/0x250 [ 307.474502][ T8881] __sock_create+0xc2/0x860 [ 307.474555][ T8881] __sys_socketpair+0x1e4/0x5b0 [ 307.474607][ T8881] ? __pfx___sys_socketpair+0x10/0x10 [ 307.474653][ T8881] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 307.474693][ T8881] ? xfd_validate_state+0x129/0x190 [ 307.474757][ T8881] __x64_sys_socketpair+0x96/0x100 [ 307.474806][ T8881] ? lockdep_hardirqs_on+0x78/0x100 [ 307.474844][ T8881] do_syscall_64+0x106/0xf80 [ 307.474889][ T8881] ? clear_bhb_loop+0x40/0x90 [ 307.474933][ T8881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.474975][ T8881] RIP: 0033:0x7f7c3d99c819 [ 307.475002][ T8881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.475036][ T8881] RSP: 002b:00007f7c3e88d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 307.475068][ T8881] RAX: ffffffffffffffda RBX: 00007f7c3dc16090 RCX: 00007f7c3d99c819 [ 307.475091][ T8881] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 000000000000001e [ 307.475110][ T8881] RBP: 00007f7c3da32c91 R08: 0000000000000000 R09: 0000000000000000 [ 307.475130][ T8881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.475150][ T8881] R13: 00007f7c3dc16128 R14: 00007f7c3dc16090 R15: 00007fff7c33b208 [ 307.475195][ T8881] [ 307.475249][ T8881] socket: no more sockets [ 307.583935][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 307.594769][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 307.602329][ T5145] Bluetooth: hci1: command 0x0c1a tx timeout [ 307.604665][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 309.531758][ T8922] ubi0: attaching mtd0 [ 309.556208][ T8922] ubi0: scanning is finished [ 309.562023][ T8922] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 309.892554][ T8922] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 310.088320][ T8930] FAULT_INJECTION: forcing a failure. [ 310.088320][ T8930] name failslab, interval 1, probability 0, space 0, times 0 [ 310.145858][ T8930] CPU: 1 UID: 0 PID: 8930 Comm: syz.2.579 Tainted: G L syzkaller #0 PREEMPT(full) [ 310.145913][ T8930] Tainted: [L]=SOFTLOCKUP [ 310.145925][ T8930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 310.145946][ T8930] Call Trace: [ 310.145957][ T8930] [ 310.145969][ T8930] dump_stack_lvl+0x100/0x190 [ 310.146027][ T8930] should_fail_ex.cold+0x5/0xa [ 310.146068][ T8930] should_failslab+0xc2/0x120 [ 310.146108][ T8930] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 310.146167][ T8930] ? do_getname+0x35/0x390 [ 310.146222][ T8930] do_getname+0x35/0x390 [ 310.146273][ T8930] do_sys_openat2+0xc5/0x1e0 [ 310.146321][ T8930] ? __pfx_do_sys_openat2+0x10/0x10 [ 310.146370][ T8930] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 310.146439][ T8930] __x64_sys_open+0xfe/0x1d0 [ 310.146485][ T8930] ? __pfx___x64_sys_open+0x10/0x10 [ 310.146550][ T8930] do_syscall_64+0x106/0xf80 [ 310.146587][ T8930] ? clear_bhb_loop+0x40/0x90 [ 310.146660][ T8930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.146696][ T8930] RIP: 0033:0x7fdf3cf9c819 [ 310.146724][ T8930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.146759][ T8930] RSP: 002b:00007fdf3b1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 310.146790][ T8930] RAX: ffffffffffffffda RBX: 00007fdf3d215fa0 RCX: 00007fdf3cf9c819 [ 310.146812][ T8930] RDX: 0000000000000154 RSI: 0000000000022240 RDI: 0000000000000000 [ 310.146831][ T8930] RBP: 00007fdf3d032c91 R08: 0000000000000000 R09: 0000000000000000 [ 310.146852][ T8930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.146878][ T8930] R13: 00007fdf3d216038 R14: 00007fdf3d215fa0 R15: 00007ffdaf409618 [ 310.146924][ T8930] [ 312.611910][ T8961] blktrace: Concurrent blktraces are not allowed on loop2 [ 314.464567][ T8988] netlink: 'syz.2.593': attribute type 2 has an invalid length. [ 314.504790][ T8989] random: crng reseeded on system resumption [ 314.640867][ T8989] hub 1-0:1.0: USB hub found [ 314.673939][ T8989] hub 1-0:1.0: 1 port detected [ 316.134322][ T9023] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 316.146664][ T9023] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 316.183750][ T9023] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 316.197745][ T9023] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 316.875107][ T9033] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 317.096301][ T9043] FAULT_INJECTION: forcing a failure. [ 317.096301][ T9043] name failslab, interval 1, probability 0, space 0, times 0 [ 317.310065][ T9043] CPU: 0 UID: 0 PID: 9043 Comm: syz.1.605 Tainted: G L syzkaller #0 PREEMPT(full) [ 317.310122][ T9043] Tainted: [L]=SOFTLOCKUP [ 317.310134][ T9043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 317.310154][ T9043] Call Trace: [ 317.310164][ T9043] [ 317.310177][ T9043] dump_stack_lvl+0x100/0x190 [ 317.310237][ T9043] should_fail_ex.cold+0x5/0xa [ 317.310276][ T9043] ? fib_default_rule_add+0x4f/0x420 [ 317.310311][ T9043] should_failslab+0xc2/0x120 [ 317.310351][ T9043] __kmalloc_noprof+0xe0/0x850 [ 317.310415][ T9043] fib_default_rule_add+0x4f/0x420 [ 317.310456][ T9043] fib4_rules_init+0x52/0x1c0 [ 317.310504][ T9043] fib_net_init+0x1dc/0x3f0 [ 317.310536][ T9043] ? is_module_address+0x69/0xf0 [ 317.310583][ T9043] ? __pfx_fib_net_init+0x10/0x10 [ 317.310620][ T9043] ? timer_init_key+0x150/0x340 [ 317.310667][ T9043] ? devinet_init_net+0x56c/0x8d0 [ 317.310710][ T9043] ? __pfx_fib_net_init+0x10/0x10 [ 317.310743][ T9043] ops_init+0x1e2/0x5f0 [ 317.310782][ T9043] setup_net+0x118/0x3a0 [ 317.310817][ T9043] ? __pfx_setup_net+0x10/0x10 [ 317.310850][ T9043] ? lockdep_init_map_type+0x5c/0x250 [ 317.310899][ T9043] ? mutex_init_lockep+0x110/0x150 [ 317.310957][ T9043] copy_net_ns+0x46f/0x7c0 [ 317.311016][ T9043] create_new_namespaces+0x3ea/0xac0 [ 317.311066][ T9043] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 317.311109][ T9043] ksys_unshare+0x473/0xad0 [ 317.311158][ T9043] ? __pfx_ksys_unshare+0x10/0x10 [ 317.311221][ T9043] __x64_sys_unshare+0x31/0x40 [ 317.311266][ T9043] do_syscall_64+0x106/0xf80 [ 317.311303][ T9043] ? clear_bhb_loop+0x40/0x90 [ 317.311346][ T9043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.311379][ T9043] RIP: 0033:0x7f50e2b9c819 [ 317.311407][ T9043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.311442][ T9043] RSP: 002b:00007f50e0df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 317.311476][ T9043] RAX: ffffffffffffffda RBX: 00007f50e2e15fa0 RCX: 00007f50e2b9c819 [ 317.311498][ T9043] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 317.311518][ T9043] RBP: 00007f50e2c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 317.311538][ T9043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.311558][ T9043] R13: 00007f50e2e16038 R14: 00007f50e2e15fa0 R15: 00007ffcd78eab78 [ 317.311601][ T9043] [ 317.663512][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.670620][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.145693][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 318.222988][ T5833] Bluetooth: hci4: command 0x0c1a tx timeout [ 318.223030][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 318.223045][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 318.376645][ T9050] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.644718][ T9050] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.852342][ T9050] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.115179][ T9050] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.804813][ T9103] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 320.836700][ T9103] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 320.879011][ T9103] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 320.903311][ T9103] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 321.017041][ T9097] can: request_module (can-proto-3) failed. [ 321.792122][ T9115] FAULT_INJECTION: forcing a failure. [ 321.792122][ T9115] name failslab, interval 1, probability 0, space 0, times 0 [ 321.811336][ T9115] CPU: 0 UID: 0 PID: 9115 Comm: syz.4.624 Tainted: G L syzkaller #0 PREEMPT(full) [ 321.811389][ T9115] Tainted: [L]=SOFTLOCKUP [ 321.811402][ T9115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 321.811422][ T9115] Call Trace: [ 321.811433][ T9115] [ 321.811445][ T9115] dump_stack_lvl+0x100/0x190 [ 321.811506][ T9115] should_fail_ex.cold+0x5/0xa [ 321.811548][ T9115] should_failslab+0xc2/0x120 [ 321.811599][ T9115] __kmalloc_cache_noprof+0x7a/0x6f0 [ 321.811649][ T9115] ? trace_pid_list_alloc+0x2fe/0x480 [ 321.811715][ T9115] trace_pid_list_alloc+0x2fe/0x480 [ 321.811775][ T9115] trace_pid_write+0x110/0x460 [ 321.811846][ T9115] ? __pfx_trace_pid_write+0x10/0x10 [ 321.811930][ T9115] event_pid_write.isra.0+0x1e4/0x800 [ 321.811970][ T9115] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 321.812019][ T9115] vfs_write+0x2aa/0x1070 [ 321.812056][ T9115] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 321.812097][ T9115] ? __pfx_vfs_write+0x10/0x10 [ 321.812131][ T9115] ? __fget_files+0x215/0x3d0 [ 321.812175][ T9115] ? __fget_files+0x21f/0x3d0 [ 321.812221][ T9115] ksys_write+0x12a/0x250 [ 321.812255][ T9115] ? __pfx_ksys_write+0x10/0x10 [ 321.812302][ T9115] do_syscall_64+0x106/0xf80 [ 321.812337][ T9115] ? clear_bhb_loop+0x40/0x90 [ 321.812380][ T9115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.812416][ T9115] RIP: 0033:0x7f2fd5f9c819 [ 321.812444][ T9115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.812489][ T9115] RSP: 002b:00007f2fd6e5b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 321.812521][ T9115] RAX: ffffffffffffffda RBX: 00007f2fd6216090 RCX: 00007f2fd5f9c819 [ 321.812543][ T9115] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 321.812563][ T9115] RBP: 00007f2fd6032c91 R08: 0000000000000000 R09: 0000000000000000 [ 321.812583][ T9115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.812603][ T9115] R13: 00007f2fd6216128 R14: 00007f2fd6216090 R15: 00007ffee53f76a8 [ 321.812649][ T9115] [ 322.437346][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 322.863618][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 322.863644][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 322.952551][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 322.958955][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 324.943102][ T9159] sd 0:0:1:0: PR command failed: 1026 [ 324.948706][ T9159] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 324.957700][ T9159] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 324.983569][ T9161] random: crng reseeded on system resumption [ 325.797352][ T9189] usbcore.quirks: string doesn't fit in 127 chars. [ 326.134957][ T9201] program syz.2.646 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 326.205363][ T9201] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 326.661424][ T9210] vivid-007: ================= START STATUS ================= [ 326.669551][ T9210] vivid-007: Generate PTS: true [ 326.679257][ T9210] vivid-007: Generate SCR: true [ 326.685081][ T9210] tpg source WxH: 320x240 (Y'CbCr) [ 326.690288][ T9210] tpg field: 1 [ 326.694206][ T9210] tpg crop: (0,0)/320x240 [ 326.698683][ T9210] tpg compose: (0,0)/320x240 [ 326.703905][ T9210] tpg colorspace: 8 [ 326.707765][ T9210] tpg transfer function: 0/0 [ 326.712513][ T9210] tpg Y'CbCr encoding: 0/0 [ 326.768386][ T9210] tpg quantization: 0/0 [ 326.772635][ T9210] tpg RGB range: 0/2 [ 326.793718][ T9210] vivid-007: ================== END STATUS ================== [ 327.401360][ T9223] misc userio: Invalid payload size [ 332.742203][ T9339] FAULT_INJECTION: forcing a failure. [ 332.742203][ T9339] name failslab, interval 1, probability 0, space 0, times 0 [ 332.883085][ T9339] CPU: 0 UID: 0 PID: 9339 Comm: syz.2.677 Tainted: G L syzkaller #0 PREEMPT(full) [ 332.883138][ T9339] Tainted: [L]=SOFTLOCKUP [ 332.883149][ T9339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 332.883170][ T9339] Call Trace: [ 332.883181][ T9339] [ 332.883193][ T9339] dump_stack_lvl+0x100/0x190 [ 332.883253][ T9339] should_fail_ex.cold+0x5/0xa [ 332.883283][ T9339] ? fib_default_rule_add+0x4f/0x420 [ 332.883308][ T9339] should_failslab+0xc2/0x120 [ 332.883337][ T9339] __kmalloc_noprof+0xe0/0x850 [ 332.883383][ T9339] fib_default_rule_add+0x4f/0x420 [ 332.883411][ T9339] fib4_rules_init+0x52/0x1c0 [ 332.883447][ T9339] fib_net_init+0x1dc/0x3f0 [ 332.883472][ T9339] ? is_module_address+0x69/0xf0 [ 332.883506][ T9339] ? __pfx_fib_net_init+0x10/0x10 [ 332.883532][ T9339] ? timer_init_key+0x150/0x340 [ 332.883564][ T9339] ? devinet_init_net+0x56c/0x8d0 [ 332.883596][ T9339] ? __pfx_fib_net_init+0x10/0x10 [ 332.883620][ T9339] ops_init+0x1e2/0x5f0 [ 332.883648][ T9339] setup_net+0x118/0x3a0 [ 332.883681][ T9339] ? __pfx_setup_net+0x10/0x10 [ 332.883706][ T9339] ? lockdep_init_map_type+0x5c/0x250 [ 332.883742][ T9339] ? mutex_init_lockep+0x110/0x150 [ 332.883782][ T9339] copy_net_ns+0x46f/0x7c0 [ 332.883813][ T9339] create_new_namespaces+0x3ea/0xac0 [ 332.883848][ T9339] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 332.883878][ T9339] ksys_unshare+0x473/0xad0 [ 332.883913][ T9339] ? __pfx_ksys_unshare+0x10/0x10 [ 332.883963][ T9339] __x64_sys_unshare+0x31/0x40 [ 332.883996][ T9339] do_syscall_64+0x106/0xf80 [ 332.884022][ T9339] ? clear_bhb_loop+0x40/0x90 [ 332.884064][ T9339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.884089][ T9339] RIP: 0033:0x7fdf3cf9c819 [ 332.884108][ T9339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.884132][ T9339] RSP: 002b:00007fdf3b1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 332.884155][ T9339] RAX: ffffffffffffffda RBX: 00007fdf3d215fa0 RCX: 00007fdf3cf9c819 [ 332.884171][ T9339] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 332.884185][ T9339] RBP: 00007fdf3d032c91 R08: 0000000000000000 R09: 0000000000000000 [ 332.884200][ T9339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.884214][ T9339] R13: 00007fdf3d216038 R14: 00007fdf3d215fa0 R15: 00007ffdaf409618 [ 332.884244][ T9339] [ 334.216999][ T9362] FAULT_INJECTION: forcing a failure. [ 334.216999][ T9362] name fail_futex, interval 1, probability 0, space 0, times 0 [ 334.237634][ T9362] CPU: 1 UID: 0 PID: 9362 Comm: syz.1.682 Tainted: G L syzkaller #0 PREEMPT(full) [ 334.237688][ T9362] Tainted: [L]=SOFTLOCKUP [ 334.237700][ T9362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 334.237720][ T9362] Call Trace: [ 334.237730][ T9362] [ 334.237741][ T9362] dump_stack_lvl+0x100/0x190 [ 334.237799][ T9362] should_fail_ex.cold+0x5/0xa [ 334.237838][ T9362] get_futex_key+0x1d2/0x1620 [ 334.237886][ T9362] ? __pfx_get_futex_key+0x10/0x10 [ 334.237925][ T9362] ? futex_hash+0x2c5/0x380 [ 334.237978][ T9362] futex_wake+0xea/0x530 [ 334.238028][ T9362] ? __pfx_futex_wait+0x10/0x10 [ 334.238078][ T9362] ? __pfx_futex_wake+0x10/0x10 [ 334.238133][ T9362] ? __do_sys_clone3+0xd9/0x290 [ 334.238177][ T9362] ? __pfx___do_sys_clone3+0x10/0x10 [ 334.238216][ T9362] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 334.238265][ T9362] do_futex+0x32b/0x350 [ 334.238309][ T9362] ? __pfx_do_futex+0x10/0x10 [ 334.238362][ T9362] __x64_sys_futex+0x34f/0x4d0 [ 334.238411][ T9362] ? __pfx___x64_sys_futex+0x10/0x10 [ 334.238470][ T9362] do_syscall_64+0x106/0xf80 [ 334.238504][ T9362] ? clear_bhb_loop+0x40/0x90 [ 334.238545][ T9362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.238578][ T9362] RIP: 0033:0x7f50e2b9c819 [ 334.238615][ T9362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.238648][ T9362] RSP: 002b:00007f50e0df60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 334.238680][ T9362] RAX: ffffffffffffffda RBX: 00007f50e2e15fa8 RCX: 00007f50e2b9c819 [ 334.238702][ T9362] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f50e2e15fac [ 334.238722][ T9362] RBP: 00007f50e2e15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 334.238742][ T9362] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 334.238763][ T9362] R13: 00007f50e2e16038 R14: 00007ffcd78eaa90 R15: 00007ffcd78eab78 [ 334.238805][ T9362] [ 334.726069][ T9373] FAULT_INJECTION: forcing a failure. [ 334.726069][ T9373] name failslab, interval 1, probability 0, space 0, times 0 [ 334.793329][ T9373] CPU: 1 UID: 0 PID: 9373 Comm: syz.2.684 Tainted: G L syzkaller #0 PREEMPT(full) [ 334.793383][ T9373] Tainted: [L]=SOFTLOCKUP [ 334.793395][ T9373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 334.793415][ T9373] Call Trace: [ 334.793426][ T9373] [ 334.793438][ T9373] dump_stack_lvl+0x100/0x190 [ 334.793497][ T9373] should_fail_ex.cold+0x5/0xa [ 334.793540][ T9373] should_failslab+0xc2/0x120 [ 334.793578][ T9373] __kmalloc_cache_noprof+0x7a/0x6f0 [ 334.793639][ T9373] ? trace_pid_list_alloc+0x232/0x480 [ 334.793704][ T9373] trace_pid_list_alloc+0x232/0x480 [ 334.793771][ T9373] trace_pid_write+0x110/0x460 [ 334.793832][ T9373] ? __pfx_trace_pid_write+0x10/0x10 [ 334.793916][ T9373] event_pid_write.isra.0+0x1e4/0x800 [ 334.793954][ T9373] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 334.794001][ T9373] vfs_write+0x2aa/0x1070 [ 334.794037][ T9373] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 334.794077][ T9373] ? __pfx_vfs_write+0x10/0x10 [ 334.794110][ T9373] ? __fget_files+0x215/0x3d0 [ 334.794156][ T9373] ? __fget_files+0x21f/0x3d0 [ 334.794204][ T9373] ksys_write+0x12a/0x250 [ 334.794238][ T9373] ? __pfx_ksys_write+0x10/0x10 [ 334.794287][ T9373] do_syscall_64+0x106/0xf80 [ 334.794323][ T9373] ? clear_bhb_loop+0x40/0x90 [ 334.794367][ T9373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.794403][ T9373] RIP: 0033:0x7fdf3cf9c819 [ 334.794432][ T9373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.794466][ T9373] RSP: 002b:00007fdf3b1d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 334.794498][ T9373] RAX: ffffffffffffffda RBX: 00007fdf3d216090 RCX: 00007fdf3cf9c819 [ 334.794521][ T9373] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 334.794543][ T9373] RBP: 00007fdf3d032c91 R08: 0000000000000000 R09: 0000000000000000 [ 334.794564][ T9373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.794585][ T9373] R13: 00007fdf3d216128 R14: 00007fdf3d216090 R15: 00007ffdaf409618 [ 334.794628][ T9373] [ 336.799964][ T9430] binder: 9429:9430 ioctl c0046209 9 returned -22 [ 337.222966][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 338.866908][ T9455] random: crng reseeded on system resumption [ 340.866200][ T9473] HfR: entered promiscuous mode [ 340.889030][ T9473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.705'. [ 340.908157][ T9473] HfR: left promiscuous mode [ 342.253977][ T9500] netlink: 28 bytes leftover after parsing attributes in process `syz.0.709'. [ 344.171141][ T9531] HfR: entered promiscuous mode [ 344.268081][ T9531] netlink: 12 bytes leftover after parsing attributes in process `syz.4.717'. [ 344.419625][ T9531] HfR: left promiscuous mode [ 345.028750][ T9546] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81b121fa (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 345.044601][ T9546] Call Trace: [ 345.047916][ T9546] [ 345.050894][ T9546] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 345.057669][ T9546] ? __pfx_call_function_single_prep_ipi+0x10/0x10 [ 345.064223][ T9546] mce_cpu_restart+0xd5/0x1f0 [ 345.068972][ T9546] ? __pfx_mce_cpu_restart+0x10/0x10 [ 345.074327][ T9546] smp_call_function_many_cond+0x11fc/0x1500 [ 345.080342][ T9546] ? __pfx_mce_cpu_restart+0x10/0x10 [ 345.085695][ T9546] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 345.091575][ T9546] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 345.097967][ T9546] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 345.104012][ T9546] ? __timer_delete_sync+0x151/0x1c0 [ 345.109326][ T9546] ? __pfx_mce_cpu_restart+0x10/0x10 [ 345.114692][ T9546] on_each_cpu_cond_mask+0x40/0x90 [ 345.119834][ T9546] set_bank+0x240/0x3a0 [ 345.124026][ T9546] ? __pfx_set_bank+0x10/0x10 [ 345.128754][ T9546] ? find_held_lock+0x2b/0x80 [ 345.133459][ T9546] ? sysfs_file_kobj+0xe4/0x290 [ 345.138450][ T9546] ? sysfs_file_kobj+0xe4/0x290 [ 345.143332][ T9546] ? __pfx_set_bank+0x10/0x10 [ 345.148062][ T9546] dev_attr_store+0x58/0x80 [ 345.152594][ T9546] ? __pfx_dev_attr_store+0x10/0x10 [ 345.157818][ T9546] sysfs_kf_write+0xf2/0x150 [ 345.162443][ T9546] kernfs_fop_write_iter+0x3e0/0x5f0 [ 345.167748][ T9546] ? __pfx_sysfs_kf_write+0x10/0x10 [ 345.172990][ T9546] vfs_write+0x6ac/0x1070 [ 345.177371][ T9546] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 345.183205][ T9546] ? __pfx_vfs_write+0x10/0x10 [ 345.188036][ T9546] ksys_write+0x12a/0x250 [ 345.192409][ T9546] ? __pfx_ksys_write+0x10/0x10 [ 345.197310][ T9546] do_syscall_64+0x106/0xf80 [ 345.201943][ T9546] ? clear_bhb_loop+0x40/0x90 [ 345.206648][ T9546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.212562][ T9546] RIP: 0033:0x7fdf3cf9c819 [ 345.216998][ T9546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.236631][ T9546] RSP: 002b:00007fdf3b1d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 345.245069][ T9546] RAX: ffffffffffffffda RBX: 00007fdf3d216090 RCX: 00007fdf3cf9c819 [ 345.253073][ T9546] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000006 [ 345.261062][ T9546] RBP: 00007fdf3d032c91 R08: 0000000000000000 R09: 0000000000000000 [ 345.269057][ T9546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.277055][ T9546] R13: 00007fdf3d216128 R14: 00007fdf3d216090 R15: 00007ffdaf409618 [ 345.285068][ T9546] [ 345.955641][ T9552] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 345.984873][ T9552] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 348.543417][ T9593] FAULT_INJECTION: forcing a failure. [ 348.543417][ T9593] name failslab, interval 1, probability 0, space 0, times 0 [ 348.672864][ T9593] CPU: 1 UID: 0 PID: 9593 Comm: syz.1.731 Tainted: G L syzkaller #0 PREEMPT(full) [ 348.672915][ T9593] Tainted: [L]=SOFTLOCKUP [ 348.672926][ T9593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 348.672944][ T9593] Call Trace: [ 348.672954][ T9593] [ 348.672965][ T9593] dump_stack_lvl+0x100/0x190 [ 348.673023][ T9593] should_fail_ex.cold+0x5/0xa [ 348.673061][ T9593] should_failslab+0xc2/0x120 [ 348.673098][ T9593] __kmalloc_cache_noprof+0x7a/0x6f0 [ 348.673144][ T9593] ? tty_open+0x139/0xfa0 [ 348.673182][ T9593] ? __pfx_tty_open+0x10/0x10 [ 348.673216][ T9593] tty_open+0x139/0xfa0 [ 348.673256][ T9593] ? __pfx_tty_open+0x10/0x10 [ 348.673287][ T9593] ? chrdev_open+0x10b/0x6a0 [ 348.673330][ T9593] ? chrdev_open+0x10b/0x6a0 [ 348.673372][ T9593] ? __pfx_tty_open+0x10/0x10 [ 348.673405][ T9593] chrdev_open+0x234/0x6a0 [ 348.673437][ T9593] ? __pfx_apparmor_file_open+0x10/0x10 [ 348.673476][ T9593] ? __pfx_chrdev_open+0x10/0x10 [ 348.673515][ T9593] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 348.673561][ T9593] do_dentry_open+0x6d8/0x1660 [ 348.673597][ T9593] ? __pfx_chrdev_open+0x10/0x10 [ 348.673643][ T9593] vfs_open+0x82/0x3f0 [ 348.673692][ T9593] path_openat+0x208c/0x31a0 [ 348.673743][ T9593] ? __pfx_path_openat+0x10/0x10 [ 348.673796][ T9593] do_file_open+0x20e/0x430 [ 348.673836][ T9593] ? __pfx_do_file_open+0x10/0x10 [ 348.673903][ T9593] ? alloc_fd+0x476/0x790 [ 348.673942][ T9593] ? do_getname+0x191/0x390 [ 348.673990][ T9593] do_sys_openat2+0x10d/0x1e0 [ 348.674037][ T9593] ? __pfx_do_sys_openat2+0x10/0x10 [ 348.674087][ T9593] ? rcu_is_watching+0x12/0xc0 [ 348.674152][ T9593] __x64_sys_openat+0x12d/0x210 [ 348.674202][ T9593] ? __pfx___x64_sys_openat+0x10/0x10 [ 348.674265][ T9593] do_syscall_64+0x106/0xf80 [ 348.674301][ T9593] ? clear_bhb_loop+0x40/0x90 [ 348.674349][ T9593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.674384][ T9593] RIP: 0033:0x7f50e2b9c819 [ 348.674410][ T9593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.674443][ T9593] RSP: 002b:00007f50e0dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 348.674474][ T9593] RAX: ffffffffffffffda RBX: 00007f50e2e16090 RCX: 00007f50e2b9c819 [ 348.674495][ T9593] RDX: 0000000000000800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 348.674515][ T9593] RBP: 00007f50e2c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 348.674535][ T9593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 348.674554][ T9593] R13: 00007f50e2e16128 R14: 00007f50e2e16090 R15: 00007ffcd78eab78 [ 348.674595][ T9593] [ 349.102842][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 355.893526][ T9675] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 355.900806][ T9675] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 355.923073][ T9675] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 355.929253][ T9675] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 356.617443][ T9693] FAULT_INJECTION: forcing a failure. [ 356.617443][ T9693] name failslab, interval 1, probability 0, space 0, times 0 [ 356.676873][ T9693] CPU: 0 UID: 0 PID: 9693 Comm: syz.0.752 Tainted: G L syzkaller #0 PREEMPT(full) [ 356.676933][ T9693] Tainted: [L]=SOFTLOCKUP [ 356.676945][ T9693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 356.676966][ T9693] Call Trace: [ 356.676976][ T9693] [ 356.676989][ T9693] dump_stack_lvl+0x100/0x190 [ 356.677051][ T9693] should_fail_ex.cold+0x5/0xa [ 356.677093][ T9693] should_failslab+0xc2/0x120 [ 356.677133][ T9693] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 356.677189][ T9693] ? __proc_create+0x2cb/0x8c0 [ 356.677233][ T9693] __proc_create+0x2cb/0x8c0 [ 356.677270][ T9693] ? __pfx___proc_create+0x10/0x10 [ 356.677302][ T9693] ? do_raw_spin_lock+0x128/0x260 [ 356.677374][ T9693] proc_create_reg+0x75/0x170 [ 356.677416][ T9693] proc_create_net_data+0x8e/0x1c0 [ 356.677454][ T9693] ? __pfx_proc_create_net_data+0x10/0x10 [ 356.677494][ T9693] ? __pfx___netlink_kernel_create+0x10/0x10 [ 356.677542][ T9693] fib_proc_init+0x5e/0x1d0 [ 356.677577][ T9693] fib_net_init+0x2af/0x3f0 [ 356.677612][ T9693] ? is_module_address+0x69/0xf0 [ 356.677660][ T9693] ? __pfx_fib_net_init+0x10/0x10 [ 356.677696][ T9693] ? timer_init_key+0x150/0x340 [ 356.677735][ T9693] ? __pfx_nl_fib_input+0x10/0x10 [ 356.677775][ T9693] ? devinet_init_net+0x56c/0x8d0 [ 356.677820][ T9693] ? __pfx_fib_net_init+0x10/0x10 [ 356.677855][ T9693] ops_init+0x1e2/0x5f0 [ 356.677902][ T9693] setup_net+0x118/0x3a0 [ 356.677937][ T9693] ? __pfx_setup_net+0x10/0x10 [ 356.677971][ T9693] ? lockdep_init_map_type+0x5c/0x250 [ 356.678019][ T9693] ? mutex_init_lockep+0x110/0x150 [ 356.678076][ T9693] copy_net_ns+0x46f/0x7c0 [ 356.678120][ T9693] create_new_namespaces+0x3ea/0xac0 [ 356.678166][ T9693] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 356.678210][ T9693] ksys_unshare+0x473/0xad0 [ 356.678254][ T9693] ? __pfx_ksys_unshare+0x10/0x10 [ 356.678311][ T9693] __x64_sys_unshare+0x31/0x40 [ 356.678347][ T9693] do_syscall_64+0x106/0xf80 [ 356.678377][ T9693] ? clear_bhb_loop+0x40/0x90 [ 356.678411][ T9693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.678441][ T9693] RIP: 0033:0x7f7c3d99c819 [ 356.678463][ T9693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.678492][ T9693] RSP: 002b:00007f7c3e8ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 356.678518][ T9693] RAX: ffffffffffffffda RBX: 00007f7c3dc15fa0 RCX: 00007f7c3d99c819 [ 356.678538][ T9693] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 356.678555][ T9693] RBP: 00007f7c3da32c91 R08: 0000000000000000 R09: 0000000000000000 [ 356.678572][ T9693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.678588][ T9693] R13: 00007f7c3dc16038 R14: 00007f7c3dc15fa0 R15: 00007fff7c33b208 [ 356.678624][ T9693] [ 357.983359][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 357.989776][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 357.989794][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 357.989877][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 358.435109][ T9700] netlink: 28 bytes leftover after parsing attributes in process `syz.4.753'. [ 358.616158][ T9700] macsec0: entered promiscuous mode [ 358.653166][ T9700] macsec0: entered allmulticast mode [ 358.662978][ T9700] veth1_macvtap: entered allmulticast mode [ 360.383625][ T9777] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 360.471396][ T9769] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 360.523620][ T9769] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 360.586447][ T9769] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 360.648841][ T9769] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 362.542891][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 362.549034][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 362.622880][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 362.703231][ T5833] Bluetooth: hci4: command 0x0c1a tx timeout [ 363.790164][ T9824] kexec: Could not allocate control_code_buffer [ 372.501103][T10006] nvme_fcloop: unknown parameter or missing value 'Ù' [ 373.745684][T10040] debugfs: '!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' already exists in 'ieee80211' [ 374.038187][T10051] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 374.047296][T10051] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 374.107331][T10051] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 374.131481][T10051] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 376.064037][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 376.064048][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 376.143020][ T5833] Bluetooth: hci4: command 0x0c1a tx timeout [ 376.144555][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 376.956517][T10099] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 376.967070][T10099] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 376.983348][T10099] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 376.993257][T10099] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 377.357569][T10125] ================================================================== [ 377.357589][T10125] BUG: KASAN: vmalloc-out-of-bounds in sys_fillrect+0x174a/0x1910 [ 377.357636][T10125] Write of size 8 at addr ffffc90004249000 by task syz.4.848/10125 [ 377.357657][T10125] [ 377.357670][T10125] CPU: 1 UID: 0 PID: 10125 Comm: syz.4.848 Tainted: G L syzkaller #0 PREEMPT(full) [ 377.357705][T10125] Tainted: [L]=SOFTLOCKUP [ 377.357714][T10125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 377.357729][T10125] Call Trace: [ 377.357738][T10125] [ 377.357748][T10125] dump_stack_lvl+0x100/0x190 [ 377.357787][T10125] print_report+0x156/0x4c9 [ 377.357822][T10125] ? _raw_spin_lock_irqsave+0x52/0x60 [ 377.357872][T10125] ? sys_fillrect+0x174a/0x1910 [ 377.357910][T10125] kasan_report+0xdf/0x1e0 [ 377.357938][T10125] ? sys_fillrect+0x174a/0x1910 [ 377.357980][T10125] sys_fillrect+0x174a/0x1910 [ 377.358025][T10125] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 377.358056][T10125] bit_clear+0x17d/0x220 [ 377.358088][T10125] ? __pfx_bit_clear+0x10/0x10 [ 377.358123][T10125] ? fb_get_color_depth+0x120/0x250 [ 377.358153][T10125] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 377.358186][T10125] __fbcon_clear+0x633/0x760 [ 377.358215][T10125] ? __pfx_bit_clear+0x10/0x10 [ 377.358249][T10125] fbcon_scroll+0x48b/0x650 [ 377.358279][T10125] con_scroll+0x464/0x690 [ 377.358320][T10125] do_con_write+0x6883/0x8540 [ 377.358352][T10125] ? __pfx_do_con_write+0x10/0x10 [ 377.358374][T10125] ? __pfx_bit_cursor+0x10/0x10 [ 377.358406][T10125] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 377.358439][T10125] ? con_write+0x93/0xb0 [ 377.358461][T10125] con_write+0x23/0xb0 [ 377.358482][T10125] n_tty_write+0x44f/0x12d0 [ 377.358518][T10125] ? __pfx_n_tty_write+0x10/0x10 [ 377.358546][T10125] ? trace_kmalloc+0x101/0x130 [ 377.358574][T10125] ? __pfx_woken_wake_function+0x10/0x10 [ 377.358615][T10125] ? rcu_is_watching+0x12/0xc0 [ 377.358655][T10125] ? file_tty_write.isra.0+0x694/0x890 [ 377.358695][T10125] ? kfree+0x2ec/0x6b0 [ 377.358728][T10125] ? __pfx_n_tty_write+0x10/0x10 [ 377.358758][T10125] file_tty_write.isra.0+0x4d2/0x890 [ 377.358802][T10125] redirected_tty_write+0xd4/0x120 [ 377.358844][T10125] vfs_write+0x6ac/0x1070 [ 377.358874][T10125] ? __pfx_redirected_tty_write+0x10/0x10 [ 377.358918][T10125] ? __pfx_vfs_write+0x10/0x10 [ 377.358940][T10125] ? find_held_lock+0x2b/0x80 [ 377.358974][T10125] ksys_write+0x12a/0x250 [ 377.358997][T10125] ? __pfx_ksys_write+0x10/0x10 [ 377.359026][T10125] do_syscall_64+0x106/0xf80 [ 377.359051][T10125] ? clear_bhb_loop+0x40/0x90 [ 377.359080][T10125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.359106][T10125] RIP: 0033:0x7f2fd5f9c819 [ 377.359124][T10125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.359150][T10125] RSP: 002b:00007f2fd6e7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 377.359173][T10125] RAX: ffffffffffffffda RBX: 00007f2fd6215fa0 RCX: 00007f2fd5f9c819 [ 377.359191][T10125] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000004 [ 377.359207][T10125] RBP: 00007f2fd6032c91 R08: 0000000000000000 R09: 0000000000000000 [ 377.359222][T10125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.359237][T10125] R13: 00007f2fd6216038 R14: 00007f2fd6215fa0 R15: 00007ffee53f76a8 [ 377.359263][T10125] [ 377.359271][T10125] [ 377.359278][T10125] The buggy address belongs to a vmalloc virtual mapping [ 377.359296][T10125] Memory state around the buggy address: [ 377.359309][T10125] ffffc90004248f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 377.359333][T10125] ffffc90004248f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 377.359351][T10125] >ffffc90004249000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 377.359365][T10125] ^ [ 377.359378][T10125] ffffc90004249080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 377.359395][T10125] ffffc90004249100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 377.359410][T10125] ================================================================== [ 377.359543][T10125] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 377.359571][T10125] CPU: 1 UID: 0 PID: 10125 Comm: syz.4.848 Tainted: G L syzkaller #0 PREEMPT(full) [ 377.359624][T10125] Tainted: [L]=SOFTLOCKUP [ 377.359633][T10125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 377.359648][T10125] Call Trace: [ 377.359656][T10125] [ 377.359666][T10125] dump_stack_lvl+0x100/0x190 [ 377.359704][T10125] vpanic+0x552/0x970 [ 377.359728][T10125] ? __pfx_vpanic+0x10/0x10 [ 377.359756][T10125] ? sys_fillrect+0x174a/0x1910 [ 377.359795][T10125] panic+0xd1/0xe0 [ 377.359817][T10125] ? __pfx_panic+0x10/0x10 [ 377.359841][T10125] ? sys_fillrect+0x174a/0x1910 [ 377.359887][T10125] ? preempt_schedule_common+0x42/0xc0 [ 377.359917][T10125] check_panic_on_warn.cold+0x19/0x34 [ 377.359948][T10125] end_report.part.0+0x3a/0x90 [ 377.359984][T10125] kasan_report.cold+0xe/0x18 [ 377.360020][T10125] ? sys_fillrect+0x174a/0x1910 [ 377.360063][T10125] sys_fillrect+0x174a/0x1910 [ 377.360107][T10125] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 377.360141][T10125] bit_clear+0x17d/0x220 [ 377.360173][T10125] ? __pfx_bit_clear+0x10/0x10 [ 377.360206][T10125] ? fb_get_color_depth+0x120/0x250 [ 377.360236][T10125] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 377.360265][T10125] __fbcon_clear+0x633/0x760 [ 377.360295][T10125] ? __pfx_bit_clear+0x10/0x10 [ 377.360329][T10125] fbcon_scroll+0x48b/0x650 [ 377.360359][T10125] con_scroll+0x464/0x690 [ 377.360400][T10125] do_con_write+0x6883/0x8540 [ 377.360432][T10125] ? __pfx_do_con_write+0x10/0x10 [ 377.360455][T10125] ? __pfx_bit_cursor+0x10/0x10 [ 377.360487][T10125] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 377.360520][T10125] ? con_write+0x93/0xb0 [ 377.360543][T10125] con_write+0x23/0xb0 [ 377.360568][T10125] n_tty_write+0x44f/0x12d0 [ 377.360604][T10125] ? __pfx_n_tty_write+0x10/0x10 [ 377.360633][T10125] ? trace_kmalloc+0x101/0x130 [ 377.360660][T10125] ? __pfx_woken_wake_function+0x10/0x10 [ 377.360702][T10125] ? rcu_is_watching+0x12/0xc0 [ 377.360741][T10125] ? file_tty_write.isra.0+0x694/0x890 [ 377.360782][T10125] ? kfree+0x2ec/0x6b0 [ 377.360815][T10125] ? __pfx_n_tty_write+0x10/0x10 [ 377.360845][T10125] file_tty_write.isra.0+0x4d2/0x890 [ 377.360895][T10125] redirected_tty_write+0xd4/0x120 [ 377.360937][T10125] vfs_write+0x6ac/0x1070 [ 377.360961][T10125] ? __pfx_redirected_tty_write+0x10/0x10 [ 377.361004][T10125] ? __pfx_vfs_write+0x10/0x10 [ 377.361027][T10125] ? find_held_lock+0x2b/0x80 [ 377.361061][T10125] ksys_write+0x12a/0x250 [ 377.361084][T10125] ? __pfx_ksys_write+0x10/0x10 [ 377.361113][T10125] do_syscall_64+0x106/0xf80 [ 377.361140][T10125] ? clear_bhb_loop+0x40/0x90 [ 377.361169][T10125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.361194][T10125] RIP: 0033:0x7f2fd5f9c819 [ 377.361213][T10125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.361238][T10125] RSP: 002b:00007f2fd6e7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 377.361262][T10125] RAX: ffffffffffffffda RBX: 00007f2fd6215fa0 RCX: 00007f2fd5f9c819 [ 377.361279][T10125] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000004 [ 377.361296][T10125] RBP: 00007f2fd6032c91 R08: 0000000000000000 R09: 0000000000000000 [ 377.361312][T10125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.361327][T10125] R13: 00007f2fd6216038 R14: 00007f2fd6215fa0 R15: 00007ffee53f76a8 [ 377.361353][T10125] [ 377.361971][T10125] Kernel Offset: disabled