last executing test programs: 5m22.197080742s ago: executing program 0 (id=1464): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/time\x00') setns(r1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x141002, 0x0) mmap$auto(0x19, 0x0, 0x7, 0xfffffffffffffffe, r0, 0x7867) fsconfig$auto(r0, 0x200001, &(0x7f0000000080)='\x98 \x84nf8\xe6Gd0\x84@t\x8d%\xd1\xb5\xcfb\xd1*\xdbY\xd6', &(0x7f0000000280), 0x0) lremovexattr$auto(&(0x7f0000000440)='}[,&*}\x00', &(0x7f0000000480)='/de~/bus/usb/001/001\x00') close_range$auto(0xffffffffffffffff, r1, 0x1b60) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) write$auto(0xca, &(0x7f0000000140)='\x04\x0e\x06\xd5\x89|d\v\x00\x00@\x00\x81\x00\x00\x00\xf6\xf5\x00\xdf\xff\x00', 0x10) mmap$auto(0x0, 0x402000d, 0xa, 0xeb1, 0x401, 0x8000) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="060000", @ANYRES16], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x8a0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram10/queue/max_sectors_kb\x00', 0xe3102, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio1\x00', 0x6102, 0x0) mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={0x8, 0x100009}, 0x283) ioctl$auto(0xffffffffffffffff, 0x5419, 0x38) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x4000, 0x0) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) 5m18.821840324s ago: executing program 0 (id=1468): mmap$auto(0x0, 0x10, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x1d7) socket(0xa, 0x3, 0x3b) setsockopt$auto(0x400000000000003, 0x29, 0x22, 0x0, 0xa4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x161203, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) tkill$auto(0x0, 0x7) swapoff$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x20b42, 0x0) io_uring_setup$auto(0xb, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050328bd1cf69387fe1c0a7b000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40008}, 0x0) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="22001a00fd9bdc3dfbad5eec5eed7b127072ca9c6f14ed686490394893c0e5366b19cb06203c53557b9e28e12f6ae82ae624ec2ac0b80bee78ba67da6ba7f7a212da73beee83465bb281589239c801a33774c4f218d2928be17bd7a6b97bc70c6f4ef4fd06854c7612", @ANYRES16=r2, @ANYBLOB="010028bd7000fedbdf2506000000080031000001000008003a000100000008001b000500000005002900010000000600220003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x10001) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdc, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) fchownat$auto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) socket(0x2a, 0x80000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x0, @remote}, 0x6a) 5m16.844160267s ago: executing program 0 (id=1469): r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010028bd7000fedbdf251cfffc0018000180140002006e657464657673696d3000"], 0x2c}}, 0x4000000) 5m15.340757949s ago: executing program 0 (id=1474): r0 = ioctl$auto_NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f00000000c0), r0) sendmsg$auto_OVS_FLOW_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r1, 0x600, 0x70bd29, 0x25dfdbfe, {}, [@OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x5}, @OVS_FLOW_ATTR_MASK={0x4}, @OVS_FLOW_ATTR_UFID={0x5, 0x9, 0xf8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8005}, 0x8000) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) r2 = open(0x0, 0x595082, 0x0) write$auto(r2, 0x0, 0xfffffdf1) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r4 = ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) ioctl$auto(0x3, 0x4040ae77, 0x38) close_range$auto(0x2, 0x8, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010b27bd7000fda5c5a620"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040080) msgctl$auto_IPC_INFO(0x40, 0x3, &(0x7f0000000540)={{0x81, 0xffffffffffffffff, 0xee00, 0x3, 0x9, 0x8, 0x48}, &(0x7f00000004c0)=0xe, &(0x7f0000000500)=0x8, 0xf5, 0x1ff, 0x6, 0x6, 0x7fffffff, 0xfc5, 0x1000}) shmctl$auto_SHM_INFO(0x2, 0xe, &(0x7f0000000600)={{0x800, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x4, 0x533, 0x6}, 0x40, 0x5, 0x6, 0x4, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000001200)="688ebba528ba83d5e77cfd407f4297dfd1e14e1ca71b9df63c5b6914eb2dbd3ebeb78167dac5c985d924a8a6542ab2539e5d387e249758258950cdfa7a9004d92354d7bebb3e33c4f8bf426ad73b491a8c27cbe3024e845cefffd92f28edca65500316261796a04adf70ab0fd7ffb43a8210064ef932f7b2b044967e5b27aa7208f7a1095a93a4d9dd7c689d5eeb8a3f776e48eadcdb5a9589dc9bb744b6d3946b1bb5d908eaf6b8f338509b17e31e2eff8bf5693776d587e647b06c1ac4395d5dc80b2e34f3948b5d761e2b428c71db3fce123b8743817cb4c40d4c634e793e6ef5f756797a087cc599d9e17b081b37705a4991a4edf6ca6eac3fd7541b7664ce75e7716a8587c5b52d1d019e45df15aeff10855e2925c2c95af413149d61946bdc0e946361dc119209652d450cfccce31e96694f486a990b5789122e4debe3d4490fe83eab71282088a44ffadedc7bdbb000b0b38fbe4407feb10280555d295626c936eb4082e92e1bae4f002ac6655e3a31acb1b63a2c816bf87499d9a16514cc24891ec859030de8ca70b15b8514bf87c6766a658573b43bb489dd2b82a532f053246955469a8a187264278e1a32a002b6860ee5d2d2229bcefbba9448a8f5fecaf37882891791b4ff49d369ca1cd91b433e8454f11b8a455196071bd7c1bb87026cd78c31ce51658bc19fdd0117aea0478b4718d6179fb7e1b287e4bd546ac4c46167d83d13669992dd91368f993f8933610bf057dd222924ee9ef47720eae2a470ef3f625b50dfa9260912e46138bb4c543f505727c2095d7f0b3cd38c5ff0c66b00a39bc1fd698862e192b38620e472771aab3b445beb64d74df9fb44099656286a3764a6c1043e314418352e0ba44370528937be44972f997dbe69841ce0a10c727b3c14502a114c9f4b2c40c24c4b492077ede354dae34401b535a969964582b49e2a7e33f6a58cc527450fcdfdd45673eeb1359a64489b51f1f36a35b729ce1daf2fb142cdaba5fb6ecfcbb9fc4cc3256f34395b28335a707ddcd2137b259dd1282dcf97f2e2af81915a4e2f0371df473222baabed1ccf7772716c33647a4f753dd1c94ff053f996a512bcdf5f2dfcd73d5f235b1606aca1ca93ed614bb76755a07cb4544154667a10d0b6effc1d2bb371bb16205d2c0c74825152562f12c6cf48cc1cc19bead888267343e7a8826b59f76e096d3c40dd7d57f782fb0756ddfca170f07178ec021d2c0faa441a1bb45190fa2d00b51853cea6aca00b1a39a6d22f9ac9c7aac575a67a8b4ca3b349f155dd15476cda3c3f9a8b2e0089d1358af592a00e6bf829dd22dd31105a6947f91173e2327de4f826e222509b359634c097f5d7e05048b449c5185752a56764db8558dbb11c3a42447e9dd3e398de856b8b7f7341222698e4b5f6919b59daf28f03579ce20b4c7bc0db03368d3f8328da348dccacd31d51445e91a5126fe9ea88354710f4651dec0d8edf4e07baaa53a57e6154f0d75a60d9166be76d08a5893cbb47bb06f9a5d75b8252d18b3ef268f5b7e43f0c7cab1ecbe9769a00f39dba59dea55f6cd4a24e72bc467bdd07ab0aea43960ad4a3001ad1130df1370b2e6862ce547f931996678bf7944df98ce88a0bf4b3eb4a0da9db2165b307e45c586e79f62a575dd2252ad0b17907ea3d6a1f4995f09e12b0f43c1ed14e114ee5fc494f3530d6fbf9cfd076d71e223aa6b091b2307519a336bc163d3f17515c407907874aceb41c7880e132082e9c73324773d656c16c2cdc2e87e290aadd9630e427a6e37962c71b056a999aea9ffa319e5ca72d2ed5d0d8b1d841e72112038b14d99bc9e6c366111cb8a33652fcdbc999b7073865f952c210c3e77c5daa0703076d7914b29bb0190bb4d157f23dfbe82d435a64e91753f9dc5559ecdda0018fafd1b028da9feaf9987b963e5ae3cd646eed3097af6faf5c289be418cf035b3d35a7e127a3ba65ebaaadbb9ca7fa5282c396be024a08d3d46dfde19cc84b3cf6aa143d7cafca0ca839b650a4b7055e146e1e3ec1c34718f9bdfdb2f725bdee92c0d5784003fa0c4ff1d2ba76c9d00d563cd946f1a6214873e6d2eea3e6c86755c265e2422ba319584f0fe4e4ebb85c76791fd9b6e4987cc73df587ac937b40277c38c8b36b09d806196e226dbeab6767666f1c388387cdc045e38d77cbfafa6478976e1a106052b4d1d8ba6338bd4899c0d47191a1c713aec5657ebb8da5a1422e743d601317168d045541854f4043e58973f9f987f4bdd6b1ef69c7e98e97d5dabd46b101cb229f759c305c236be084b78a063ef48673084bdcd927e36c52b74ef72278a7a3d4cd483529c366d7be0591da26437c9492bf4b83c327831403f70bff5205be510279acc980346e548a2f5ea0cc22bcbc46b7c6049fc63eb7f9fbcfc7fde320301cba4730baf97203c59a9dab190f4bd79d0c69c2e5c76700dc3cbe9ea79a703a3bdeda72c983f0e0554fdfce59962e76b0c334717597ecd014b5e5f216040d426ba1f10ea701b37db9aa46c5ceb9527eb9cd433740707f0d9163b1b5a54d0e7f819d90bcbaab9a06a1abf52ac8e333b4960eca0f17d2b594fdc2a1481e3f45bd3f9490f76dac5801d7e8b604cafecd3ff34415e7e6eb62e671280c2f56735b4f10c2414b895467e3bf353181eb7587d1a4d478b684516f27f6f45e5253ed015a988fc0ef132c23be36ec6f562f8871fa65e59030b1866e6ddac5730aefd8de2cad9d741cdab6657efd313a66643c1c114bdece05b65dd56fe339000fc8a6c1a7b6df325c42f9a90c1b67e9005fad52d08d44552c488afccd40fa427ed2bdc9b1c247ba255f8cc2b982a0d27ca1f2a2440ea9dbbc0e91cf2dd6ff641d4a09613a1ee97984152c9d4ae582d323b4da4b263b289fa406ccbfa2107980be06d1b35ecdaa9ffdad09408c63cd3cf7a74b6e56f2676f7e5fa174015b6310d86cf4864d0de61eaff3038a120a77e27aff03d8c1857d8918a30028982853217fb83607a5460cb23754a497ca4ed7972967dafa290f55a5cfc3544f624837cda09cfbd5d98675ad331abc0eb8c1b7c8cfe3f4b415095df53eaaa0d1c4006460acb7429f88886a3bd1b501c7b25363396c0376cd9c035f8cdde4c344fc53d7ee811866073fb1c07bfe62d9c8b5f39ac4074dbc2d35af01bc0c842566fcc36a5e0b780651279ed67a7ff0ae61bad3d1d468c24e515b710ecb7e4ce2a1c5b18da024825f44a4bdbb725bf07de5595c35a0303f07c6a8f1e4ee194b53e49746b54ad007d50a68e083585a9d78cf843cad259ace52a9516a366d85c514091cc8226ce4911885a935cdd938015082c9513a316a6f9a6a371041589447dfd49ec7ef6af87f0d454362768c301a577ee1436e19ef380ab4c1738944f3a7d3b2282dff8d3c7675597bc69f11607a5d5af00d3d629683cfaf6be85084c505cf500c7a62ffe70f28b2f4a9995562eb03a1a9adb7682bab848293cc9d5121bd18e739da5f9290e05fc6dd5e45ab16324ca704328559daf69f37ac142a77ff50d201bfa951ec17f44e17c5c470f0cf39a7e49ce833c18e94ea01b70c2e072b065e1b3c8046dcc440a17bfff8e52ba634b2619ef6ecf304609e718f838cc028b9c5ecc8935d4468d600ae7c8824413013f45ffffe2fb5a97e59a598ac36afa0e49946107e7e2cf75797046c98255ccd1287ce8bbd9b9e0dd7345c9452118ae8cad07e58c8b5577c74d1d489208ac66dc1e52aba219a131ed3cb33806c011a92fdd9f98e5bc42d20c0ec68826c1387f1fce76015f56af63588e4cc4ce3351e7102ef5fb5541d16ce8a0a1cbc52070078c88fe15b845dddfeeae7ea377132b2f863139cc9fcce362161b229c89f7fd4a6c554e235117289fa6bda88d53304146e6a81aeef3cff25f5d5cb79bd21c15d91bb5f8bc2767221d00ca9642122b9ae9b6f0a6ce50149df78d1337289214700bc2dcd116fa0b9b3e03b0e3d7f5e85c3106a79aeb575e56d0b6b68de2350fe8a2202827be0635764912503365d7d4431c55679f1236a5d3b2eb0cf80436e26b59f4f46531ae253e6ee46a8f3757a64a3a8b0b34c7f185dc0216d1cd91a4fc56c7b65af2ada8d68e597833a79c66d0ea311c1a57c706f6c6b1af4de331303c55bb70bcd5d353b805efb726a3dd3b8da994c0605042937624e884d0e8e011abc6e20c184b8b1f085888569f5412dfeaa9b47589d2ea94bee555c0b302a4daefd63cc50e1f5df3816bd6e2b16749d52e3727b7a777d0f359eafff70c5564e7545658fccc571bb2d9e96a9c58537610ea68662610c6b0524765930f9bf9d0dbb771c9a9e11b3199c6a748afc53c63f277368bdd51507ebcf334a933f01eb9cc4099bf55c127de03bcfbf64aba214f24dc8fedbf403412431506f59e03cc8facd6e146a6d3a16d9562beccf19b2868d727552bbfe6b82d460bf182790c2a8ec5ba60ad75a1151436c0c6220c0dfab5da60fed26415178bd38d1d1bc9832b602eaaf3fb70521a57b9f2516e9749976df49b366405151dddcb46878b59376d6d6f815a7abd3d590c1c4d66f26bdaaa3e112a5a538f13fdc81664802fc563d7e62b8c4185c2d825750435e0d28273eb1974ec98f60a5496f51a366367e5a9498e0b1d9d56f63da8d73792bd337e43c11398493b6677e2c7bc5d9436d20b4e2428a680f1f4ff24368ef6201744318e3f70e406d707fae3bdbb0e7d28bd63d261c66bffc1a2e12b74b185e582db56ec7d61fa0d87806770b02b9e061c59530246036b4aa59ba3a7fc5b89653207b02445eebb47c0a8474da1f172236a3bd028c3ca8d472327f890fda228d149f5335cd4106711fb6745109c7c728da18cd899e02fc5c3132f0a8bc32db149c63f6bfce8f34461b749530f6440fd8db54c6b8f5dde506ff52b586a46bc0309a56be5d86ec513a9bbd575f2055a91f84f7dd4296c4f2a67f200ae71b1a6aea4cdf8536d004ec715cd5d902a9f3c6bcaf7901065a52b45caa809b2e037fabd10162a9e8986751ba4a26dc746804c4d5c8b42146723e2cf6f2b477ec36dd6b4b61c9d616f60f4034045777ec20ecb3deb85e80744231a60ca339c161a31a13c6a541b7ecb1c46e4a327794a690c780b70d579d7ac5164c64056745cbe8c72f58760b8b1a68866fdd3a0dbbc7a685ea2eef831a3b9f521963d117a99528f3bc8197c1a010c9cc631c3d30079590fba956d8a7de54216a05100c151386cee90397e83ec3709e914fc45a0d27f3eae1642b83f5443388c95da25b85e1d047d09b3bc5aa6d793f82505a58bb51200878cc7f48c2e780067248f744731869b064c1b581a5b7bceef36b0294a5615c60d8523cbb0877b7ecd2ee9bb113dbfaa82493ebd299ed9b7d3a9c68c2ead1ed0bdf33134ab6f61fbe6e606662f6fab1042ac89b45ef71cbe95451d19c2aa5b7c9b844b44d5d20149459c8044d6184fa43703012ece185bf25d97f6f9c04df0ad1f4be7afd239c4b849275471fa1db6f330341ac8b453cda8cff9bdf1a6de57146aea073c596bf6d5cf2ef7efc8afffe2f96e8eca3339bfe33ae9286d451c5e470d8db8e0c6dfec62c2f8b5f366b42bfe0a85901838e16a62b400ade89138c1f8888ca645d7d6fe8d0d545fa1e1547a6b9a277b74cfff78991747ddaacdffabbf05ef3d1df82adfab5e757c28dd84461fa2b06e01e9bf7b4c20ce467aeb9c42230788d9bce4f2f56bfeb4f9d35854e1e8e3bedefa0b2c8454720190a0f4644d23fb7fd6e3f9951e27962409bbb77717659cc10cd", &(0x7f00000005c0)="147c0c0fa8fb24b955"}) sendmsg$auto_NL80211_CMD_STOP_AP(r4, &(0x7f0000000a00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="14030000", @ANYRES16=r6, @ANYBLOB="00062abd7000fddbdf25100000000003228008006e00020000000c00090000000000000000000c36a547a171cf4024fb019dd0c268d3ac1d608867e6326516d87b6a10a0848ab1f20a0c5d9a8f9c7c2a5b2b32c4b310dde3c4142c48e31621687ac2606cc074909f49cbf86d2c5f082ead06528a77c447a59c0f0f3c6f95a328c8c14fb6e6153e8a0001580adf06d7eda494949e20c160eea7ee91316eb441defd898bfb21de1ecb93f38822c04d1b1d2c8c428015f324f29b834c815cd026297dbaaf152c9280217d43b78c48226c8d4dc774ddd0e97b001e800800d5000500000008005c00", @ANYRES32=r7, @ANYBLOB="48f5af6ae5b193d7b27365dc6cda0c907eb581ac08f962cfdcdf7bffb91c17b9187ce08d01686bb9398e828061af01138206b095b808f697e83db7ec3ce51c877cac303ee63599701acc612851fcac5d3410158855614472c2f4b6d2d9c4ea8a3eec69d2b805f000ba01d880e4a09324591aeca4098f7dc56c6cf89440664154950d8239651790e2a7689c018db0a38e43220214254bde5f4eb9dff469b48474ae652b1e68a2a881bd909c8fc6067d02811ab77c44a7b657061997292da8d00a79c54a51c215ce5dff53962a154034257f7be8a52f737679fa058b20c2b74bbad4850e8d3d07e3e3169a7b8d7f36141b834127f6530609345d8fcf4d286b273d40a9c9b584fc195f771b56db792342a60068dba960411d5559255aea36c212e116919782cab8006a3ff472040046800400358004001e803080aab2b0bf87d9d0fbfe5382ff634c76018dabd9f5d37f114306f1c0167e21e03b9aa16b083d3365d22bae76d101d89bf9ea2e958a9ea48b378b88c98901a1b0da4a1382d0cf270c5a3785d932005e6a4c7fcfd4600bf2cfda5d382040cc961af379e5dc7f786a3ff48f95c8704a635e0c979ad134dde7db6aa895ab1e7c6589c6fe3ffe0e4a134209ceb798664f05e27cbe7b335520fd87fee8da77dcd94b4fdf4734599c05ed4dd5b0c7b4527ab39e70325193f09e5b0e22f247d9a568b40800520000", @ANYRES32=r8, @ANYBLOB="310790dcfad1f2a712c0d133a29093d393f11881cb24da26632dee0a2ddf8ceee8e00000"], 0x314}, 0x1, 0x0, 0x0, 0x40}, 0x90) linkat$auto(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mprotect$auto(0x0, 0x8000000000000001, 0x8) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r9) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x10}]}, 0x20}}, 0x0) shmctl$auto_SHM_STAT_ANY(0x270, 0xf, &(0x7f00000003c0)={{0xc778, 0x0, 0x0, 0x8, 0x1ff, 0x4, 0x800}, 0x1, 0xae7, 0x8, 0xfffffffffffffff0, @raw=0x2, @raw=0x5, 0x3, 0x0, &(0x7f0000000140)="1bb52d74bedc1088ee415bcf12b322e4be318da9bf90e09f84f9af7d2b7da48841abda78fecdf531a4f03c1f0bfdb6f73a7748e234a84e94ff51", &(0x7f00000002c0)="ed012229e86266e1fba572ecdc558221b1e413f5c0a7645200a3d2985f120d67955a1d0094dc312f5c1de5166fd70775e2a77c0f50a7062c9f7266e588652b7a65c6f8bf544b0568ff1a130a833a91d84ed609d4324d055bbdde5295c02743100fdb20aede2e884a65ce7bebae3a2113a931f9c20cd9ae0cbf02a45751f6c105d83883e3c342e00db333fc8eff0b7afee4f5b76be60976490c4157b34b1bb73b2657dfa590a8c5cec9378e012aa64bf6213968ccec199f7ed67ce987bc66f11e2ea65186cf25e2cec3149bd14749eaf4ded10150d6f387d0a48d9dee3856125ea6fbd26fe62623215bb2b9b576e6784f3332d8b98b"}) openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/netdevsim/netdevsim5/ports/0/pp_hold\x00', 0x400800, 0x0) sendmsg$auto_NL802154_CMD_SEND_BEACONS(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000004180)={0x998, r10, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0x6}, @NL802154_ATTR_SEC_KEY={0x5c1, 0x30, 0x0, 0x1, [@typed={0x8, 0x79, 0x0, 0x0, @u32=0x40000da}, @generic="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", @generic="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", @nested={0x171, 0x82, 0x0, 0x1, [@nested={0x4, 0x135}, @generic="716e423d4f64772f89d29bf0e78a7035d4d37ec56217da52abc1ff4fc92555275aa671128b56eaca0e71b71509a2010e45f9aa0046f256707d11e9de4ce93119f73d532b2eb1755689487f11914beb5eb9e1f1741989106150de4504afe12321d83ea39d51ac4fa4eedb856cfac7670503aa4bacdd5c7e1aff", @typed={0x8, 0xc6, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="691f88974139d2368c2901d9b1f6736c8f920a70ba1bb629bf1503fa0ad1c2b9cfeae3ed4a39917336aef2006f213255a408d5662132af7db438b3e68a1406ce30ab5ad0cba6ac8005c4630bfc64d2f384df433d32c0469eabfddd315f9e456aee2248dc40208c18d4be775186e1e6063165673421d5074326b2f378ff9d4f8cf2f9783a00b5b24f68b436164e1584f4978c41b64cacc3c7a9412e230d060ad21d86d9c94371f103efc0b01425b99fe677bd1b4a4e4df08a1faf42a9df3798d55961644f42e220174f98dd57c3d84b9da9311cd92cf66a0a10a9141310029bd7d1a22fcec0ddb067"]}, @typed={0x8, 0xd0, 0x0, 0x0, @u32=0x40}, @typed={0x8, 0x121, 0x0, 0x0, @fd=r0}, @generic="7c25740ca2d731a52f39f71e729804497e5f4effd026ca57e9d4c9c1a37c7e223870ae991fe49859636cf1872370f1198215ce09a6f90e74c687cb295d95408e7b1bc7fe95fcc80458f79f6dc5270dce49ae32751c48d96e616eaf05c77c61306454b992d35aef0a166be82f5b9ed5173e259d9d5e67c16684b5d5def10cd7afdb8e794abf46534ea7f92f87acd8fcc25c8ef939b8527bb437cc5911d8d357757b47ff60e7067f537db99f3784389a84698b35d8253455e089a66047249cbba2170c0da2fc90b7fc49a12c1e4b680023c3b2b8234ed97589265e7b393f486d49c004ae3ef8f7dd600c0616d7ae"]}, @NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0xfc}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x2}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x5}, @NL802154_ATTR_PEER={0x390, 0x28, 0x0, 0x1, [@nested={0x28f, 0xb1, 0x0, 0x1, [@typed={0xa9, 0x103, 0x0, 0x0, @binary="6a32d71ddeb157266f61b12d7cb238c3cab62ca631dbc56aa8af136e693d19098396eade8c46c77350331cacfb11a28c2571e33b6fdf02dc5baee07e885bba09effa1909265168988bf55649b8e66be3479281ef92dc341b25ea9b31c0d163e09ca517d734c276eacf32809d81c2e4c094f8269376ff912c90e2bc9af70eb4abf46100afb81b2c30921d60b20e1038837226cd27776dd5adc4358519253c12ddb6ca442918"}, @generic="606bf74abcfe38033728d1c549f75d187d792fc53f783bb53583e39f5432e764a3bd", @generic="9bdbdc7d66bca987c2cb4c2dde122c1008fafff1473d4498a47baa0e1be2b810c44a0bee13531739fa9f8174555154ec983aed95a33c3a20d0403fcd8fe87ae172d4f7699a69bbe41cacf16b79ca9dbfee3da63b05b6400e488dd43eeb69e205a47ad3978c1e4fa7ffde897d07f87c0133badb644cfebdeffc709874da7c1fa71ae29982207d775b817566229cb342d5f44f07fc75a65f27dfde85fb8b5c04f146f6b688ff606622791b90e00c081352fde69fcf51975f7ea54fdfa203ffbc9d42ad38a99925ffe4e6e6b5b6b3cd551893ec94bef7d40f61", @generic="e1bdc609d8c8861dffa82ec8d49707b7c4e6bd46d86a82c03cd4cf0c3424d49cf1c742edb68db3576b63f7a27c64bbd6a6fe8d9f65fa7f9a0d0b107b3967614f46dc5c3da9b5913caacbbf3b118ed61f9b4b3aedb6c6bc848336f588bf888e9ed28e4a3f550fc22250fb8537e092bc1d9550b19a5ff468959fcded6a5eb6b40b0379e15ff8dcefd1826d35135ef45efcab45604c8a82b4ca7b9eb9bec20de567eea9825e42f9f20f2669b5fed70306f3d206b3cbf5b1ee15e6887c3b55ad17358d66adc31ef5a22d3685c00b2da2cb8dbf1c9e0536", @nested={0x4, 0x8cf}, @nested={0x4, 0xb3}, @typed={0x8, 0x1, 0x0, 0x0, @u32=0x8}]}, @typed={0xd9, 0x49, 0x0, 0x0, @binary="3c84c59d46ef10177b2db4e843419573379e260544be1ec31db604ebed29f152e51ea39220cff61be5dcbb20beb8dd894af2349c2f1953f32cb85c339a376a66c1312d6c2ef21dd735bf2c8f70826e1df845f9b2a77ab0368b9296f6ecefc9f3ac54fb3f7f1da00c17025389b791c4f7a6339bd96ac7f760da21018935c81ffafd40c28cbd4a62a5d31e4de5ee04a5ed59b5523e2d9ea8eaa752bffbb2a983acc54b65f34788d6cb48db6ec0a68add118a0d8c361d28824dabce0b779506472d653dabf7bfe150da8fb9d645184912ca9fd912f43b"}, @nested={0x1c, 0xf6, 0x0, 0x1, [@nested={0x4, 0x14}, @typed={0x14, 0x139, 0x0, 0x0, @ipv6=@private1}]}, @nested={0x4}]}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x6}]}, 0x998}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001) 5m13.358444524s ago: executing program 0 (id=1478): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_tracing_buffers_fops_trace(0xffffffffffffffff, 0x7, &(0x7f0000000040)="023b8829afee0f9e18cde2ff58df8494cbbde0acb819dfe8") (async) r0 = socket(0x10, 0x2, 0x4) (async) socket(0x2, 0x3, 0x4) ioperm$auto(0x3, 0xe, 0x2000000000000149) (async) clock_getres$auto(0x8, 0x0) (async) close_range$auto(r0, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)) (async) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) read$auto(r1, 0x0, 0x20000000008) socket$nl_generic(0x10, 0x3, 0x10) (async) read$auto(0x3, 0x0, 0x7fffffff) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000540)=""/150, 0x96) (async) write$auto(r2, &(0x7f0000000380)=' U\x15\xa2t\xe0\x1b\xb0\xff\xe8\x91@\x88\n\x92\xf1rL\x9c\rg-\xcc]\x0e\x06\x03\a0k\x85&YS\xb0;\xfd\xd6\x0eH\xb3 \xc2`\xbc\xec\f\xd0\x97\x19\xa6Y\xb0\x15Z/\xe2\xc3\x8e\xc1\xa7v\xe3\xc3\xb0d\x86\x8f\x86\x14S\xdc\xe2G\xb5\x8dN%\x84\xa3\xb4\xb8!\xf9\x01=4T\xb2\xff\xb6\x9dx\x1e\x8dU\xbe*\xa5\xe4q\xd23\xdf\xcce\x17\xc1WX\x0e\xb5\x16\xe6>R\x1b\xf6', 0x6) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/mac80211_hwsim/parameters/radios\x00', 0x555c80, 0x0) (async) statmount$auto(0x0, 0x0, 0x6, 0x7fffffff) (async) socket(0x10, 0x2, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$auto(0x3, 0x8904, 0x400000000000004) (async) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x3d00, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) (async) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) (async) socket(0x11, 0x80003, 0x2fc) 5m12.130479943s ago: executing program 0 (id=1480): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4000000000000, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000180)=""/190, 0xbe) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/mem\x00', 0x20401, 0x0) write$auto_proc_mem_operations_base(r1, &(0x7f0000001680)="a7", 0x80000) syz_clone3(0x0, 0x0) madvise$auto(0x1ffff000, 0x7, 0x100000000) select$auto(0x9, &(0x7f0000000240)={[0xffffffff, 0x3, 0x400, 0x8, 0x2, 0x7, 0x8000000000000000, 0x443, 0xcdf, 0x93, 0x4, 0x221, 0x10e6, 0x6, 0xc2, 0xc3e]}, &(0x7f00000002c0)={[0x2, 0x4, 0x2, 0xfa, 0x8, 0x5, 0x7, 0x6, 0x5, 0x7, 0x7fff, 0x5, 0x7f, 0x7, 0xff, 0x3]}, &(0x7f0000000340)={[0xff, 0x5, 0x9, 0x2, 0x3ff, 0x8, 0x6, 0x100000000, 0x8, 0x80, 0x7f, 0x2400, 0x3, 0x3, 0x9, 0x5]}, &(0x7f0000000040)={0x9, 0x7}) sysfs$auto(0x2, 0x20, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) ioperm$auto(0x7, 0x6, 0x2) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) 4m56.855556734s ago: executing program 32 (id=1480): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4000000000000, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000180)=""/190, 0xbe) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/mem\x00', 0x20401, 0x0) write$auto_proc_mem_operations_base(r1, &(0x7f0000001680)="a7", 0x80000) syz_clone3(0x0, 0x0) madvise$auto(0x1ffff000, 0x7, 0x100000000) select$auto(0x9, &(0x7f0000000240)={[0xffffffff, 0x3, 0x400, 0x8, 0x2, 0x7, 0x8000000000000000, 0x443, 0xcdf, 0x93, 0x4, 0x221, 0x10e6, 0x6, 0xc2, 0xc3e]}, &(0x7f00000002c0)={[0x2, 0x4, 0x2, 0xfa, 0x8, 0x5, 0x7, 0x6, 0x5, 0x7, 0x7fff, 0x5, 0x7f, 0x7, 0xff, 0x3]}, &(0x7f0000000340)={[0xff, 0x5, 0x9, 0x2, 0x3ff, 0x8, 0x6, 0x100000000, 0x8, 0x80, 0x7f, 0x2400, 0x3, 0x3, 0x9, 0x5]}, &(0x7f0000000040)={0x9, 0x7}) sysfs$auto(0x2, 0x20, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) ioperm$auto(0x7, 0x6, 0x2) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) 1m49.126572844s ago: executing program 3 (id=1952): r0 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="10000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf250300000011000a007d40275e2d2b2d7d5d275c26000000000800050006000000"], 0x30}, 0x1, 0x0, 0x0, 0x404c805}, 0x4008804) r1 = socket(0x10, 0x3, 0x6) (async) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01"], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa507}, 0x800}, 0x7, 0x8) 1m47.055843919s ago: executing program 3 (id=1957): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) mlock$auto(0x81, 0xffff) lseek$auto(0x3, 0x8, 0x3) signalfd$auto(0xffffffffffffffff, &(0x7f0000001080)={0x3ff}, 0x3) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/ext4/sda1/es_shrinker_info\x00', 0x8880, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000004d40), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_DEL_RXSC(r0, &(0x7f0000007500)={0x0, 0x0, &(0x7f00000074c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000c1d0735df271239b6b41649b7b0e6600", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf25020000000400028008000100", @ANYRES32=0x0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x80) r2 = prctl$auto_PR_SET_MM_START_BRK(0x4, 0x6, 0xffffffffffffffff, 0x0, 0x4) syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000001040), r2) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x50000, 0x0) ioctl$auto_KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000040)={0xf, 0x0, [{0x6c, 0x1, 0x0, 0x6, 0x0, 0x3, 0x1}, {0x1ff, 0x80000001, 0x86, 0x800, 0x2, 0x5fb, 0x5}, {0x8, 0x3, 0x42, 0x9, 0xfff, 0x0, 0x9}, {0x6, 0x45, 0x5, 0x7, 0x6, 0x4d, 0x4}]}) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/mountinfo\x00', 0x20200, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r4, &(0x7f0000000840)="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", 0x78e) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) mmap$auto(0x0, 0x1, 0xfd5, 0x12, 0xffffffffffffffff, 0x0) mmap$auto(0xfffffffffffffff9, 0x2000a, 0x100000000009f, 0xeb2, 0x401, 0x8000) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) 1m42.18027363s ago: executing program 3 (id=1959): syz_genetlink_get_family_id$auto_net_shaper(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x7) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fb\x00', 0x101000, 0x0) preadv$auto(r0, &(0x7f00000002c0)={0x0, 0x8010000}, 0x5, 0xfb, 0x8100000001) madvise$auto(0x110c230000, 0x1, 0x9) getrandom$auto(0x0, 0x3, 0x80000001) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0xfffffffe, 0x44f, 0xa, 0x10, 0x1007181, 0x0, 0x62, 0x7, 0x800, 0x0, 0x26, 0x4, 0x200003fffffe, 0xfffffffffffffff5, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x862, 0xf, 0x22002, 0x200, 0x0, 0x62f, 0x6, 0x0, 0x0, 0x0, 0xb626, [0xfffffffffffffffe, 0xffffffffffff04ef, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e, 0x0, 0xa7, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x40, 0x81, 0x8a0, 0xb, 0x81, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100002, 0x0, 0x3ff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4000000000000]}, 0x800000000000b, 0xbc) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffff7effffd0c, &(0x7f00000001c0)) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x18240, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) msync$auto(0x110c230000, 0x200001, 0x6) 1m35.056790627s ago: executing program 2 (id=1971): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0xc) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x6, 0x50b301a, 0x2c, 0x2c, 0x0, 0x2}) r3 = epoll_create$auto(0x3e) epoll_ctl$auto(r3, 0x1, 0x8000000000000000, 0x0) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), r0) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(0xffffffffffffffff, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000006900)={&(0x7f0000000080)={0xffffff9a, r4, 0x200, 0x70bd29, 0x25dfdbff, {}, [@HWSIM_ATTR_ADDR_TRANSMITTER={0x4}, @HWSIM_ATTR_COOKIE={0x0, 0x8, 0x20100000001}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000080}, 0x800) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r1, @ANYBLOB="01"], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) write$auto(r0, &(0x7f0000000000)='-\x00', 0xfdef) 1m34.375340367s ago: executing program 2 (id=1974): mmap$auto(0x0, 0x4020009, 0xdb, 0x2000000000eb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x88402, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) write$auto(0x3, 0x0, 0xffd6) recvfrom$auto(0x3, 0x0, 0x0, 0xfffff4b4, 0x0, 0xfffffffffffffffd) sendmsg$auto_IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="01002abd7000fbdbdf252c000000050037005e000000050033000d00000005001500f8000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x10) seccomp$auto(0x3, 0xffffff85, &(0x7f0000000300)="476f81f7c5fa129ca79ddb96301c3a5a1651bc1f702209bc685fc1b3389099682a50c84da515b845812c991949758632e04cb8134bf109b0044d56f3cc65129e81aae63a32274690695034271e5fe0f414575fdd9978e0d88bdb2e7a2f39b378c0") socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="24051c27c100dedbdf250307cc0008000200", @ANYRES32=0x0, @ANYBLOB="060007000080000006000700050000000a00050000000000000000000a00010000000000000000000a0001000000000000000000060006000d00000006000600070000000a0001"], 0x6c}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1m34.015494054s ago: executing program 2 (id=1976): openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, 0x0, 0x80a040, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) (async) r1 = socket(0xa, 0x3, 0x3b) sendmsg$auto_NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, 0x0, 0x20008000) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f00000000c0), 0x3c3501, 0x0) (async) write$auto(r0, &(0x7f0000000080)='7\x00\\\xa0\x04\x10f\x86\x00\xf9:@ k', 0x81) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0xa, 0x1) (async, rerun: 32) socket(0xa, 0x1, 0x84) (rerun: 32) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) (async) unshare$auto(0x40000080) (async) clock_nanosleep$auto(0x6, 0x6, &(0x7f0000000840)={0x2, 0xc025}, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) landlock_create_ruleset$auto(&(0x7f0000000000)={0x81, 0x8000000000001, 0xa}, 0xb, 0x0) landlock_restrict_self$auto(r2, 0x8) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) (async, rerun: 32) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/tty18\x00', 0x20000, 0x0) (rerun: 32) ioctl$auto_TCFLSH2(r4, 0x80045439, 0x0) (async) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) (async) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0x5405, 0x0) 1m28.435732003s ago: executing program 3 (id=1980): mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) get_robust_list$auto(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(0x0, 0x261c2, 0x84) close_range$auto(0x2, 0x8000, 0x0) r2 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'dummy0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x4, 0x1ff, r2, @relative_fd=r1, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r1, 0x0, 0x3}, 0xc) r5 = socket(0xa, 0x3, 0x3b) sendmsg$auto_NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYBLOB="0002"], 0x18}, 0x1, 0x0, 0x0, 0x20008080}, 0x20008000) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x6, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1m22.855788849s ago: executing program 3 (id=1986): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0xa, 0x9) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x141041, 0x0) write$auto(0x3, 0x0, 0x8) write$auto(0xffffffffffffffff, 0x0, 0xa) shmctl$auto_SHM_STAT_ANY(0x1, 0xf, &(0x7f0000000380)={{0x9, 0x0, 0x0, 0x6fd, 0x6, 0x2, 0x6f4b}, 0x7, 0x6, 0x55, 0xffffffffffffffff, @raw=0x70, @raw=0x9, 0x4, 0x0, 0x0, 0x0}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0xe187) write$auto(r1, 0x0, 0xc8) keyctl$auto(0x23, 0x1, 0x6, 0x3, 0x9) r3 = clone$auto(0x21, 0x80000007, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) wait4$auto(r3, 0x0, 0x80000000, &(0x7f0000000140)={{0x10000, 0x100080}, {0x1, 0x9}, 0x8000000000000000, 0x2, 0x9, 0x10, 0x2, 0x1, 0x5, 0x6, 0x3, 0x800000000000008, 0x4, 0x7, 0x6, 0xb4b9}) clone$auto(0x20003b48, 0x2, 0x0, 0x0, 0x5) unshare$auto(0x400) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x10, 0x10001, 0x6, 0x15, r2, 0x8) 1m20.955853842s ago: executing program 2 (id=1990): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MM_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_MM_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) r2 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$auto_RNDGETENTCNT2(r2, 0x80045200, &(0x7f00000000c0)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@HWSIM_ATTR_REG_CUSTOM_REG={0x8}]}, 0x1c}, 0x1, 0x300000000000000, 0x0, 0x4081}, 0x8000) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r0) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000025c0)={0x2150, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_DISABLE_HE={0x4}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xf4}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x3}, @NL80211_ATTR_HE_CAPABILITY={0x27, 0x10d, "4b53c7161dce21c81a5be5817c50675de4b7733b5bcc5ea4ae2c84f3572004adc3173e"}, @NL80211_ATTR_TX_RATES={0x20f5, 0x5a, 0x0, 0x1, [@generic="c87ddbdf60", @typed={0x8, 0x68, 0x0, 0x0, @ipv4=@private=0xa010102}, @nested={0x2089, 0xe0, 0x0, 0x1, [@generic="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", @generic="70a03e507eb9ef06d8546bb655d3ee257f9a267977f3d8911db562fda8abd4f96c5205cef9f573665122c24e9ad9361785b660aa71862fa868c7eff270c0879163e075b2d0ac1f7e5d22b3c1e8e1e6d770e0355ab1", @typed={0xc, 0x7a, 0x0, 0x0, @u64=0x3}, @nested={0x4, 0xba}, @generic="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", @typed={0x1d, 0xec, 0x0, 0x0, @str='/proc/sys/kernel/cad_pid\x00'}]}, @nested={0x28, 0x13b, 0x0, 0x1, [@typed={0x22, 0x79, 0x0, 0x0, @binary="d0bfc1564c0a69d651cd72defd7217f8b339d2925a75bac9200c88c04752"}]}, @typed={0xc, 0xb0, 0x0, 0x0, @u64=0x6}, @nested={0x24, 0x154, 0x0, 0x1, [@nested={0x4, 0xfb}, @nested={0xc, 0xe6, 0x0, 0x1, [@typed={0x6, 0x3f, 0x0, 0x0, @str='{\x00'}]}, @nested={0x4, 0xc0}, @nested={0x4, 0xe6}, @typed={0x7, 0x93, 0x0, 0x0, @str='.+\x00'}]}]}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}]}, 0x2150}, 0x1, 0x0, 0x0, 0x40}, 0x4000010) capset$auto(0x0, &(0x7f0000000000)={0x2, 0x10000002, 0x6}) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/cad_pid\x00', 0x8001, 0x0) 1m20.31440585s ago: executing program 2 (id=1991): bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0xe, 0x4, 0x4, 0x10001, 0x8, 0xc, 0xffffffffffffffff, 0x9, 0x7ff}, 0xee) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_generic(0xffffffffffffff9c, 0x0, 0x301483, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x5, 0xfffffffd) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fcntl$auto_F_NOTIFY(0xffffffffffffffff, 0x402, 0x9000) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) mremap$auto(0xfffff000, 0x10000004, 0x8000000000000004, 0x0, 0x1001ff000) fsopen$auto(0x0, 0x1) prctl$auto(0x37, 0x1, 0x4, 0xd73, 0x200000000007) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="130026bd7000dddbcfc23e16000008000300", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x8880}, 0x20040894) sendmsg$auto_NL80211_CMD_GET_WOWLAN(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0x12ec, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x11b1, 0x2c, 0x0, 0x1, [@nested={0xc6, 0x80, 0x0, 0x1, [@nested={0x4, 0x11d}, @generic="a4337035fa0dc78069e2384633309582a79ce576b869d058fedbfced3a0d7aab37c4f905765d469e907af666e54021f63acda5704309ff8e52e585db665f6dea2ffb924eefbc12539c3367341c7599ed52fafd7ea26c3399e3b30db18a17eff1bec0088831b3bf0c8105c9539eaf3dc5fd2a8dae30262a2d51a6cb25713350d791ed53517709b6d65260f5a24d03af2fcb708f06fac5e833cf1081feebde68a0d9d4c211395c0212f4a44a083ec6c367f14626f09712bb4f105f3cdafea9"]}, @generic="a7763dd2e3300abcfd8b7b4767ad1f883a7e717dfe35b7335eaae906d57545867238331164353652a0d19fe30bab33d49980d6afe5c75146d3a5ed9c111d1107bc569e0d2bb1c7e8dfc0ecf69228f3b38402e629414f94d8e52fa9986e0e4d894ed13093d66bedd92c840bbc227a2e38c5d3cb8606", @nested={0x100c, 0x91, 0x0, 0x1, [@generic="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", @nested={0x4, 0xe7}, @nested={0x4, 0x101}]}, @generic="e07cc127199d152bbd22632b517a32b498314936e0ab77a514efd15aa4735f0bed66037bcb085a29b2f6b74f449ee27cbd86c88a53d9914315fc832803a367590debd0c3e01ab24fa6467bc46481a9f048706dba94c57b80c515589cbcb92c1e0547ede1"]}, @NL80211_ATTR_SSID={0x8, 0x34, "f01f55f7"}, @NL80211_ATTR_WIPHY_NAME={0x16, 0x2, '/dev/snd/midiC2D0\x00'}, @NL80211_ATTR_FILS_ERP_REALM={0x62, 0xfa, "85dc2df05a384dd43ab73ff3cc05e5282da78975ab37888b0d2ee22b5ea34448e0bff106d62e8eb0a378a11f0f1d7ac311a794135bcb45741ddfdfed192b3a20d75138b4a6d09bc108ae4a31f34496ad1506c493822e4b3bb207043fbcfe"}, @NL80211_ATTR_VENDOR_DATA={0x80, 0xc5, "d39d958989767f78a7fc18188ba1146c8cc7d49a42f38082aca5765e8c16c561511dc3c98209a1d0119e2e742c6cdb8ee95acc449a4168fe01b1cd81325006d58d95bdaf17bdf29a1e91bcfd92bee0039fcb80ed708f2a9b9778e4a61bffd1b42c52e91a0348dacf688a25e50f4115b220e9bab9cfeaeb5fd61fc95a"}, @NL80211_ATTR_STA_FLAGS2={0xe, 0x43, "c65b435d26dd841dcc70"}, @NL80211_ATTR_HE_BSS_COLOR={0xc, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x10}]}, @NL80211_ATTR_WIPHY_SELF_MANAGED_REG={0x4}]}, 0x12ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) mmap$auto(0x2, 0xffffffbffffffffd, 0x4000000000df, 0x1c, r1, 0x300000000000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r5, r5, 0x0, 0x3) unshare$auto(0x2000000000000003) 1m17.617886394s ago: executing program 3 (id=1993): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x32b83, 0x0) mmap$auto(0xfffffffffffffffc, 0x9, 0x10001, 0x9000000eb1, 0xfffffffffffffffa, 0x8) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/cpu/cpu0/hotplug/state\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0x100000001, 0x9) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000280)='/\xff\xf2\x00\xc8\xe4\x85;\xe9\xd8\xff\x01S', 0x80000000) write$auto(r1, 0x0, 0x2) fdatasync$auto(0xffffffffffffffff) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r2, 0x127f, 0x0) r3 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x40, 0x0) getsockopt$auto_SO_PEEK_OFF(r3, 0x8, 0x2a, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', &(0x7f00000001c0)=0x6) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0xc3400, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3dc) getcwd$auto(&(0x7f0000000540)='/sys/devices/\xde\xe7/xot\xfa\xec\x8f\xa4/}tate\x00X\xa0\xf7\xc7\x87\x92\xc9.2\x97R\xf4\xe6s\x00\xcf\x93\x1d\xe0K\xec\xacc$o\xf0\xa8\x93\x93\xe67U\xfb\xe1se\xfewZ\x03\x00\xaf\xc8$\x15\xc7\xd4\xcb\x92\x01\xecsP\x9aSM\xff\xf8\f\xcd3_oZ\x80\xdb\a\xbbY\xb7\xe9`\x1cV\xcdZ\xca\x89\x99#f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3dc) getcwd$auto(&(0x7f0000000540)='/sys/devices/\xde\xe7/xot\xfa\xec\x8f\xa4/}tate\x00X\xa0\xf7\xc7\x87\x92\xc9.2\x97R\xf4\xe6s\x00\xcf\x93\x1d\xe0K\xec\xacc$o\xf0\xa8\x93\x93\xe67U\xfb\xe1se\xfewZ\x03\x00\xaf\xc8$\x15\xc7\xd4\xcb\x92\x01\xecsP\x9aSM\xff\xf8\f\xcd3_oZ\x80\xdb\a\xbbY\xb7\xe9`\x1cV\xcdZ\xca\x89\x99#r2, 0x10000}, 0x10) mmap$auto(0x0, 0x7, 0x0, 0x8000200008011, r3, 0x10008000) socket(0x1d, 0x2, 0x7) socket(0x2, 0xa, 0x75) socket(0x3, 0x2, 0x7) setsockopt$auto(r4, 0x6b, 0x400000a, 0xffffffffffffffff, 0xf) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x22000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = io_uring_setup$auto(0x1, 0x0) fcntl$auto(r5, 0x25, r1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/loop15/queue/rotational\x00', 0xd2080, 0x0) 4.443723904s ago: executing program 6 (id=2090): socket(0xa, 0x8080e, 0x0) pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x0, 0x4, 0x0, 0x0, 0x0, 0x400000) uname$auto(&(0x7f0000000180)={"ad84726f530323e52242c6a93688db926cbfc1df52329ce084257b9e88f3763fb54838f1f32351e3de4dd4d19cea9a1e55f92c76b8e5978d75f9c58a45d8c81aba", "04986eda295453432af666835d32fbc12209644003d240001d1b33e1b356e48cc9f32f6f6892796a7f54c8f602e987294f980934ebbb1d75bfd4978b3f61a500", "382bf3fe479186b41938be067ef57648446f01772f5396103529adfb49d37dd17d6d185aefe183b0c681f7c034ad1c4f6173d92f2dcb73c09afeb346dca00217dc", "c0d3b0a967eef631a8130db3027d9d90680cdaae7b014c340b219e3df22244da8c5970a188bbb4ba9d3eae86fd611f522462665398b71ca368a0d910e404cf64a7", "7eaaa11f4a5f991d3d554d459ab70f3fc9947e3348afcbe228be5279d2ac905668cb3cf3504c577c3e4bc62e06777689462f3ccd49455b84526f04d5ad5fa2667a", "0740565cd2129083d9584fa321770915e771bb111720f212c38bafbec6d9d6e89f0bdd0718eb627debedadebfb69443684364970e41228e894c17c7bcb955761ae"}) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0xe984, 0x7fffffffffffffff, 0xeb1, r0, 0x7ffe) modify_ldt$auto(0x1, 0x0, 0x10) fsopen$auto(0x0, 0x1) r1 = io_uring_setup$auto(0x3ff, 0x0) mmap$auto(0xb, 0x20008004008, 0x2000000329, 0xd5, r1, 0x8000) write$auto_proc_reg_file_ops_compat_inode(r1, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) clone$auto(0x8, 0x7, 0x0, 0xffffffffffffffff, 0x80000001) getcwd$auto(0x0, 0xffffffffffffffff) modify_ldt$auto(0x0, 0x0, 0xfffffffffffffffb) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r2, &(0x7f0000000080)={0x0, 0x1000}, 0x3) close_range$auto(0xffffffffffffffff, 0x8, 0x2) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) unshare$auto(0x40000080) write$auto(0xca, 0x0, 0x7f) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101840, 0x0) r3 = socket(0x11, 0x3, 0x3a) ioctl$auto(r3, 0x8912, 0x1) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) 4.383368898s ago: executing program 5 (id=2091): madvise$auto(0x0, 0xffffffffffff0005, 0x19) write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, 0x0, 0x0) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) gettid() mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}, 0x1, 0x0, 0x0, 0x48080}, 0x4c100) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r0, 0x0, 0xffffff4b) brk$auto(0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) read$auto(0xffffffffffffffff, 0x0, 0x4) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0, 0xfffb}, 0x58) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4.1474073s ago: executing program 1 (id=2092): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) get_mempolicy$auto(0x0, &(0x7f0000000380)=0x7, 0x1, 0x0, 0xc76) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) open(0x0, 0x22240, 0x154) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r1 = io_uring_setup$auto(0x59, &(0x7f0000000340)={0x7fffffff, 0x8001, 0x2, 0x6, 0x8002, 0x8, 0xffffffffffffffff, [0xfffffffc], {0x6, 0x6, 0x4000000f, 0x2df, 0x500, 0x10000, 0x501, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x4, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) fchdir$auto(r1) io_uring_register$auto(0x2, 0x24, 0x0, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_VENDOR(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="050710bd7000fbdbdf256700000029f4cfb0c5d94077ebe5324cda2a178626373685547b61aa8a4dd64f2b21b4b64078db7a605e9df4b781dfc33d69631ac84881eeedcd2c6ac018eb5d2a4ff4420da047370d4bf524c59c482f76b711a9baa13e8fd01f8784e291c7a9bb8755704dbd2ca175870115fb31606360effcaa6cbe4d1d10beb7a5bdbfc303a9ac3a12f78b8e71a9da8c62cd0ea2e0741cc5a05cff1606c8dac5ff0b00cfcaa0859a2e6a7cfc9c8dfe49941f"], 0x14}, 0x1, 0x0, 0x0, 0x44054}, 0x80) 3.791811869s ago: executing program 1 (id=2093): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = getpid() openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xb, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) readv$auto(0x3, &(0x7f0000000600)={0x0, 0x4}, 0x1da) io_uring_setup$auto(0x401, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x2) 3.263057643s ago: executing program 5 (id=2094): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x1, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r2, &(0x7f0000000180)="976f29bd689a850edbe36136c8535f593331280bb0b4ba0edd7932ab185cca064833fda24d0f81d1b16c3cca5b2611827c2f1ca88bb01e672131ac62d346b5601f538ccf285e7a197166480ef899794cab4b61107cda1b9fb125fbc752544c11d1640e59f86de019c613761b5d384219a3f53e519954888ce5cf54846c8e07", 0x7f) futex$auto(&(0x7f0000000080)=0x7, 0x69, 0x7, &(0x7f00000000c0)={0x100000001, 0x7fffffff}, &(0x7f0000000140)=0x7, 0x0) write$auto(0x3, 0x0, 0xfffffdef) write$auto(r1, 0x0, 0x3) socket(0x1e, 0x4, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000f9dbdf250100000006000200000000000500070080000000080009000100000008000a000800000014001f00ffffff7f000000000000ffff000000001400200000000000000000000000ffff0000000006001b004e"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) socket(0x1e, 0x4, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/tracing/trace_marker\x00', 0x43, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) ioctl$auto_TCSBRKP2(r5, 0x5425, 0x0) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyv3\x00', 0xc0a81, 0x0) ioctl$auto_TCFLSH2(r7, 0x5408, 0x0) mkdir$auto(&(0x7f0000000140)='./file0\x00', 0xfffd) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) mkdir$auto(&(0x7f0000000000)='./file0/file0\x00', 0x54c) rename$auto(&(0x7f0000000480)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') write$auto_console_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, 0x0) 2.677658252s ago: executing program 1 (id=2095): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@HWSIM_ATTR_REG_CUSTOM_REG={0x8}]}, 0x1c}, 0x1, 0x300000000000000, 0x0, 0x4081}, 0x8000) (fail_nth: 1) 2.417493987s ago: executing program 5 (id=2096): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/clocksource/clocksource0/unbind_clocksource\x00', 0xa001, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x0, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) get_robust_list$auto(0x1, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2a, 0x2, 0x1) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r0, 0x92106401, r0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000002180)='/dev/snd/pcmC0D0p\x00', 0x0, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) ioctl$auto_BLKRRPART(r2, 0xc0401289, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x841, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_udc.2/udc/dummy_udc.2/a_alt_hnp_support\x00', 0x2000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000001c00)=""/4111, 0x100f) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x800, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x80000000, 0x9, 0xffffdfffffffff81, 0x4]}, 0x0) 2.315635057s ago: executing program 1 (id=2097): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mount$auto(0x0, 0x0, &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\x00\x00\x00', 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0x149182, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002ec0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000000040)={0x34, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x24000802) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/workqueue/parameters/default_affinity_scope\x00', 0x1a9242, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r4) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f00000007c0)={0x374, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {0x4, 0x0, 0xe703}, [@HWSIM_ATTR_FRAME={0x357, 0x3, "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"}, @HWSIM_ATTR_PMSR_SUPPORT={0x8, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_TYPE_CAPA={0x4}]}]}, 0x374}, 0x1, 0x0, 0x0, 0x4008040}, 0x20000090) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001f00), r6) sendmsg$auto_NBD_CMD_STATUS(r6, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002000)={0x1c, r7, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x8001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x4008050) sendfile$auto(r3, r3, 0x0, 0x5) getcwd$auto(0x0, 0xffffffffffffffff) fspick$auto(0xffffffffffffffff, 0x0, 0x9) sendmsg$auto_NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x2404808c}, 0x24004040) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) sysfs$auto(0x2, 0x2, 0x0) r8 = fsopen$auto(0x0, 0x1) fsconfig$auto(r8, 0x8, 0x0, 0x0, 0x0) fsmount$auto(0x4, 0x0, 0x200003) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'geneve0\x00'}) bpf$auto_BPF_MAP_DELETE_ELEM(0x3, &(0x7f0000000340)=@bpf_attr_4={0xfffffffffffffffe, 0xffffffffffffffff, 0x1}, 0x5523) 1.995447683s ago: executing program 6 (id=2098): r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) bpf$auto_BPF_MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)=@token_create={0x96, r0}, 0x8) ioctl$auto_SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2, 0x0) r1 = openat$auto_page_owner_stack_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000140), 0x121140, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x40100, 0x0) prctl$auto_PR_SYS_DISPATCH_OFF(0x4, 0x0, 0x0, 0x9, 0x7) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) ioctl$auto_EVIOCGMASK(r2, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x9}) close_range$auto(0x2, 0x8, 0x0) r3 = io_uring_setup$auto(0x1d48, 0x0) io_uring_register$auto(r3, 0x3, 0x0, 0x9) socket$nl_generic(0x10, 0x3, 0x10) pwrite64$auto(r1, &(0x7f0000000100)='/dev/admmidi2\x00', 0xfb, 0x4) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x3, 0x2, 0x3, 0x1) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x8, 0x3, 0x2, 0x4) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x401, 0x200000000000000, 0xfffffffffffffff8, 0x0) setrlimit$auto(0xc, &(0x7f0000000040)={0x5, 0x2}) socket(0xf, 0x800, 0x4) mmap$auto(0x7, 0x9, 0x3ff57696, 0x49b72, 0x2, 0x8000000000008000) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/admmidi2\x00', 0x88042, 0x0) ioprio_set$auto(0x1, 0x0, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x8, 0x7, 0x9, 0x3) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-0/xps_cpus\x00', 0x10b062, 0x0) write$auto(r4, &(0x7f0000000200)=',\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_fastopen_key\x00', 0x181081, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r5, &(0x7f00000001c0)="853632c0d3cfd0d691a83a66ece86459c4a843b9e9874896f27234787ff21efa4738c3738bdff1422ac1a62c", 0x2c) 1.460003892s ago: executing program 1 (id=2099): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x59, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000680)='/dev/v4l-subdev5\x00', 0x20281, 0x0) ioctl$auto(r1, 0xc038563c, r0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) madvise$auto(0xffffffffffffff8d, 0x81, 0x15) 1.315498862s ago: executing program 4 (id=2100): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/stat/rt_cache\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0x8100000001, 0x700) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0x2c, 0x3, 0x0) getsockopt$auto(r1, 0x11b, 0x8, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r4, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) setsockopt$auto_SO_TIMESTAMPING_OLD(r4, 0x2d, 0x25, &(0x7f0000000040)='%\x00', 0x3) socket(0x2, 0x5, 0x0) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) ioctl$auto(0x3, 0x8905, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[], 0x70}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto___SNDRV_PCM_IOCTL_SYNC_PTR64(r3, 0xc0884123, &(0x7f0000000480)={0x0, 0x0, @status={0x3730, 0x0, {}, 0x1, {}, {0x4, 0x8}, 0x1, 0x0, {0x7568, 0x2}}, @control={{}, 0xf67a, {}, {}, 0x8}}) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r6, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\x00', 0x100000002, 0x100000001) 1.085307023s ago: executing program 5 (id=2101): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b58", 0xfdef) r1 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x501, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/lru_gen\x00', 0x18000, 0x0) ioctl$auto_FUSE_DEV_IOC_BACKING_OPEN(r1, 0x4010e501, &(0x7f0000000080)={r2, 0x100}) r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto(r4, 0x40084d05, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r5, 0x5608, 0x1) ioctl$auto_PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000000c0)={0x2, 0x2}) socket(0xa, 0x801, 0x84) rseq$auto(&(0x7f0000000000)={0xc, 0x7, 0xffffffffffffffff, 0x0, 0x4, 0x480000}, 0x0, 0x8, 0x6) setresuid$auto(0x0, 0x7, 0x8080) setfsuid$auto(0x0) r6 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$auto_RNDADDENTROPY2(r6, 0x40085203, 0x0) 581.54861ms ago: executing program 6 (id=2102): r0 = socket(0xa, 0x1, 0x0) setsockopt$auto(r0, 0x29, 0x3b, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/blkio.bfq.weight_device\x00', 0x2062, 0x0) write$auto(r1, &(0x7f0000000080)='/sys/devices/system/cpu/cpuidle/current_governor\x00', 0x1) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) 530.579076ms ago: executing program 1 (id=2103): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_score_adj\x00', 0x142, 0x0) timer_create$auto(0x3, 0x0, &(0x7f0000000140)=0x6) mmap$auto(0x0, 0x5b9, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = ioctl$auto_TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000380)={0x4000, 0x0}) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x8001, 0x0) socket(0xa, 0x2, 0x3a) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xfffe, 0x3, 0x3) ioctl$auto_BLKTRACESETUP2(r0, 0xc0481273, &(0x7f0000000080)={"e7e61e39a7cea422c76a86f907a56e5cfd230a1c648f5515ecb1c55b065cbd33", 0x9, 0x8, 0x4e39, 0x43, 0x5, 0x0}) prctl$auto(0x5, 0x401, r2, 0x1, 0x8000000000000000) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0xfa}, 0x7) 159.579851ms ago: executing program 5 (id=2104): r0 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa1\x00', 0x121041, 0x0) bpf$auto_BPF_ENABLE_STATS(0x20, &(0x7f0000000040)=@link_create={@prog_fd, @target_ifindex, 0x9, 0xfffffffd, @kprobe_multi={0x144, 0xffffffff, 0x6}}, 0x8) write$auto(r0, &(0x7f0000000080)='/sys/kernel/security\xf9\x1cntegrity/evm/evm_xat\x99rs\x00B\b\xbd\x9f\x15\x81\x15\xb6h\xae', 0x1000000006) 0s ago: executing program 6 (id=2105): r0 = openat$auto_trace_fops_debugfs(0xffffffffffffff9c, &(0x7f0000000080), 0x11bc02, 0x0) fcntl$auto_F_CREATED_QUERY(r0, 0x404, 0xcba3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy0/misc\x00', 0x20a40, 0x0) read$auto(r1, &(0x7f0000000280)='\x00\xf4\x00\x01\x9f\x8aW\x19>m\xfd}8\x81\xe0\xb4\x1d\x1cr)JA\x99\xb5I\xee,\xab\x81\xc5\xe4\x17Qk\x8at\xa0V~\x18\x958fd\xf1A\x19l\xc3\xd7\xbb\xf7\xe8\xfd\x90\x8a\r\b>\x9c{u\xc9Hg\xf5#\xe26+\xc1d(L*P\xf9\x8a\xfd\xd0J\x7fq4\xd1X\x92#\xf7\x1c\xe9i\x91\x99\xe4\f\xae\xe3\x9aJ\x8a\xd3\xf0\x00'/119, 0x8) r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/loop0/poll_stat\x00', 0x9cda00, 0x0) r3 = socket(0xa, 0x1, 0x100) accept$auto(r3, 0x0, 0x0) pread64$auto(r2, 0x0, 0x6c, 0xfc) kernel console output (not intermixed with test programs): x_dat: no tx connection found [ 556.694802][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 556.701295][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 556.707789][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 556.714296][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 556.720853][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 556.727353][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 556.733929][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 556.740485][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 556.746972][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 556.753518][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 556.760029][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 556.766494][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 556.773035][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 556.779530][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 556.786051][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 556.792575][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 556.799071][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 556.805531][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 556.812016][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 556.818481][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 556.824976][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 556.831467][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 556.837925][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 556.844407][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 556.851010][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 556.857503][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 556.864022][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 556.870556][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 556.877046][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 556.883542][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 556.890034][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 557.017050][T10972] FAULT_INJECTION: forcing a failure. [ 557.017050][T10972] name failslab, interval 1, probability 0, space 0, times 0 [ 557.102006][T10972] CPU: 0 UID: 0 PID: 10972 Comm: syz.3.1232 Tainted: G L syzkaller #0 PREEMPT(full) [ 557.102031][T10972] Tainted: [L]=SOFTLOCKUP [ 557.102036][T10972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 557.102045][T10972] Call Trace: [ 557.102050][T10972] [ 557.102056][T10972] dump_stack_lvl+0x100/0x190 [ 557.102082][T10972] should_fail_ex.cold+0x5/0xa [ 557.102101][T10972] ? mtrr_file_add.constprop.0+0x1c7/0x2a0 [ 557.102121][T10972] should_failslab+0xc2/0x120 [ 557.102137][T10972] __kmalloc_noprof+0xe0/0x850 [ 557.102162][T10972] mtrr_file_add.constprop.0+0x1c7/0x2a0 [ 557.102184][T10972] mtrr_ioctl+0x743/0xcf0 [ 557.102202][T10972] ? __pfx_mtrr_ioctl+0x10/0x10 [ 557.102224][T10972] ? find_held_lock+0x2b/0x80 [ 557.102244][T10972] ? __fget_files+0x21f/0x3d0 [ 557.102258][T10972] ? __pfx_mtrr_ioctl+0x10/0x10 [ 557.102276][T10972] proc_reg_unlocked_ioctl+0x229/0x320 [ 557.102326][T10972] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 557.102349][T10972] __x64_sys_ioctl+0x18e/0x210 [ 557.102371][T10972] do_syscall_64+0x106/0xf80 [ 557.102392][T10972] ? clear_bhb_loop+0x40/0x90 [ 557.102409][T10972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.102424][T10972] RIP: 0033:0x7fda49b9c799 [ 557.102436][T10972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.102450][T10972] RSP: 002b:00007fda47df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 557.102463][T10972] RAX: ffffffffffffffda RBX: 00007fda49e16090 RCX: 00007fda49b9c799 [ 557.102473][T10972] RDX: 0000000000000003 RSI: 0000000040104d05 RDI: 0000000000000003 [ 557.102481][T10972] RBP: 00007fda47df6090 R08: 0000000000000000 R09: 0000000000000000 [ 557.102489][T10972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.102497][T10972] R13: 00007fda49e16128 R14: 00007fda49e16090 R15: 00007ffe11b24fb8 [ 557.102516][T10972] [ 557.409521][T10975] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 558.160977][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807be87400: rx timeout, send abort [ 558.669219][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807be87400: abort rx timeout. Force session deactivation [ 562.243565][T10138] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 562.920326][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.926640][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.829124][T11079] futex_wake_op: syz.0.1257 tries to shift op by -2048; fix this program [ 564.928942][T11074] can: request_module (can-proto-3) failed. [ 565.215089][T11079] futex_wake_op: syz.0.1257 tries to shift op by -2048; fix this program [ 565.867717][T11076] zswap: compressor not available [ 566.074591][T11099] random: crng reseeded on system resumption [ 566.219707][T11099] Unrecognized hibernate image header format! [ 566.225976][T11099] PM: hibernation: Image mismatch: architecture specific data [ 567.815952][T11110] futex_wake_op: syz.2.1263 tries to shift op by -2048; fix this program [ 567.994561][T11110] futex_wake_op: syz.2.1263 tries to shift op by -2048; fix this program [ 571.260534][T11122] FAULT_INJECTION: forcing a failure. [ 571.260534][T11122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 571.273674][ T30] audit: type=1800 audit(1236.932:10): pid=11122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1266" name="discovery_nqn" dev="configfs" ino=289574 res=0 errno=0 [ 571.423271][T11122] CPU: 0 UID: 0 PID: 11122 Comm: syz.1.1266 Tainted: G L syzkaller #0 PREEMPT(full) [ 571.423297][T11122] Tainted: [L]=SOFTLOCKUP [ 571.423302][T11122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 571.423311][T11122] Call Trace: [ 571.423315][T11122] [ 571.423321][T11122] dump_stack_lvl+0x100/0x190 [ 571.423348][T11122] should_fail_ex.cold+0x5/0xa [ 571.423367][T11122] _copy_to_user+0x32/0xd0 [ 571.423387][T11122] simple_read_from_buffer+0xcb/0x170 [ 571.423410][T11122] proc_fail_nth_read+0x1af/0x230 [ 571.423428][T11122] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 571.423447][T11122] ? rw_verify_area+0xce/0x6d0 [ 571.423467][T11122] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 571.423484][T11122] vfs_read+0x1e4/0xb30 [ 571.423500][T11122] ? __pfx_vfs_read+0x10/0x10 [ 571.423513][T11122] ? __fget_files+0x215/0x3d0 [ 571.423531][T11122] ? __fget_files+0x21f/0x3d0 [ 571.423550][T11122] ksys_read+0x12a/0x250 [ 571.423573][T11122] ? __pfx_ksys_read+0x10/0x10 [ 571.423592][T11122] do_syscall_64+0x106/0xf80 [ 571.423614][T11122] ? clear_bhb_loop+0x40/0x90 [ 571.423631][T11122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.423645][T11122] RIP: 0033:0x7fe71695cfce [ 571.423658][T11122] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 571.423672][T11122] RSP: 002b:00007fe7178c4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 571.423686][T11122] RAX: ffffffffffffffda RBX: 00007fe7178c56c0 RCX: 00007fe71695cfce [ 571.423696][T11122] RDX: 000000000000000f RSI: 00007fe7178c50a0 RDI: 0000000000000004 [ 571.423704][T11122] RBP: 00007fe7178c5090 R08: 0000000000000000 R09: 0000000000000000 [ 571.423712][T11122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.423720][T11122] R13: 00007fe716c16038 R14: 00007fe716c15fa0 R15: 00007ffd252bd768 [ 571.423739][T11122] [ 573.922247][T11134] FAULT_INJECTION: forcing a failure. [ 573.922247][T11134] name failslab, interval 1, probability 0, space 0, times 0 [ 574.068952][T11134] CPU: 0 UID: 0 PID: 11134 Comm: syz.0.1270 Tainted: G L syzkaller #0 PREEMPT(full) [ 574.068978][T11134] Tainted: [L]=SOFTLOCKUP [ 574.068983][T11134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 574.068992][T11134] Call Trace: [ 574.068997][T11134] [ 574.069004][T11134] dump_stack_lvl+0x100/0x190 [ 574.069030][T11134] should_fail_ex.cold+0x5/0xa [ 574.069047][T11134] ? copy_splice_read+0x1a3/0xb90 [ 574.069062][T11134] should_failslab+0xc2/0x120 [ 574.069077][T11134] __kmalloc_noprof+0xe0/0x850 [ 574.069102][T11134] copy_splice_read+0x1a3/0xb90 [ 574.069120][T11134] ? __pfx_copy_splice_read+0x10/0x10 [ 574.069136][T11134] ? look_up_lock_class+0x55/0x120 [ 574.069161][T11134] ? lockdep_init_map_type+0x5c/0x250 [ 574.069180][T11134] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 574.069203][T11134] ? __pfx_copy_splice_read+0x10/0x10 [ 574.069217][T11134] do_splice_read+0x285/0x370 [ 574.069233][T11134] splice_direct_to_actor+0x2a1/0xa30 [ 574.069249][T11134] ? __pfx_direct_splice_actor+0x10/0x10 [ 574.069267][T11134] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 574.069287][T11134] do_splice_direct+0x174/0x240 [ 574.069302][T11134] ? __pfx_do_splice_direct+0x10/0x10 [ 574.069317][T11134] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 574.069351][T11134] ? rw_verify_area+0xce/0x6d0 [ 574.069372][T11134] do_sendfile+0xadc/0xe20 [ 574.069397][T11134] ? __pfx_do_sendfile+0x10/0x10 [ 574.069418][T11134] ? __fget_files+0x21f/0x3d0 [ 574.069436][T11134] __x64_sys_sendfile64+0x1d8/0x220 [ 574.069452][T11134] ? ksys_write+0x1ac/0x250 [ 574.069465][T11134] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 574.069487][T11134] do_syscall_64+0x106/0xf80 [ 574.069507][T11134] ? clear_bhb_loop+0x40/0x90 [ 574.069524][T11134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.069539][T11134] RIP: 0033:0x7fdd6819c799 [ 574.069551][T11134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 574.069565][T11134] RSP: 002b:00007fdd68fe3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 574.069579][T11134] RAX: ffffffffffffffda RBX: 00007fdd68415fa0 RCX: 00007fdd6819c799 [ 574.069589][T11134] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 574.069597][T11134] RBP: 00007fdd68fe3090 R08: 0000000000000000 R09: 0000000000000000 [ 574.069605][T11134] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 574.069613][T11134] R13: 00007fdd68416038 R14: 00007fdd68415fa0 R15: 00007ffe6f9ce588 [ 574.069632][T11134] [ 577.241163][T11159] netlink: 322 bytes leftover after parsing attributes in process `syz.2.1279'. [ 580.831252][T11195] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1286'. [ 581.005715][T11198] sd 0:0:1:0: PR command failed: 1026 [ 581.050678][T11198] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 581.117699][T11198] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 581.814466][T11209] netlink: 'syz.1.1290': attribute type 64 has an invalid length. [ 581.869444][T11209] netlink: 74 bytes leftover after parsing attributes in process `syz.1.1290'. [ 585.729114][T11254] FAULT_INJECTION: forcing a failure. [ 585.729114][T11254] name failslab, interval 1, probability 0, space 0, times 0 [ 585.729200][T11254] CPU: 0 UID: 0 PID: 11254 Comm: syz.1.1300 Tainted: G L syzkaller #0 PREEMPT(full) [ 585.729224][T11254] Tainted: [L]=SOFTLOCKUP [ 585.729229][T11254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 585.729239][T11254] Call Trace: [ 585.729244][T11254] [ 585.729250][T11254] dump_stack_lvl+0x100/0x190 [ 585.729282][T11254] should_fail_ex.cold+0x5/0xa [ 585.729304][T11254] should_failslab+0xc2/0x120 [ 585.729321][T11254] __kvmalloc_node_noprof+0xfa/0xa00 [ 585.729344][T11254] ? seq_read_iter+0x819/0x1270 [ 585.729371][T11254] seq_read_iter+0x819/0x1270 [ 585.729394][T11254] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 585.729424][T11254] kernfs_fop_read_iter+0x46c/0x610 [ 585.729446][T11254] copy_splice_read+0x4ba/0xb90 [ 585.729466][T11254] ? __pfx_copy_splice_read+0x10/0x10 [ 585.729482][T11254] ? look_up_lock_class+0x55/0x120 [ 585.729508][T11254] ? lockdep_init_map_type+0x5c/0x250 [ 585.729529][T11254] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 585.729554][T11254] ? __pfx_copy_splice_read+0x10/0x10 [ 585.729569][T11254] do_splice_read+0x285/0x370 [ 585.729586][T11254] splice_direct_to_actor+0x2a1/0xa30 [ 585.729603][T11254] ? __pfx_direct_splice_actor+0x10/0x10 [ 585.729622][T11254] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 585.729651][T11254] do_splice_direct+0x174/0x240 [ 585.729668][T11254] ? __pfx_do_splice_direct+0x10/0x10 [ 585.729685][T11254] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 585.729713][T11254] ? rw_verify_area+0xce/0x6d0 [ 585.729737][T11254] do_sendfile+0xadc/0xe20 [ 585.729764][T11254] ? __pfx_do_sendfile+0x10/0x10 [ 585.729796][T11254] ? __x64_sys_futex+0x34f/0x4d0 [ 585.729816][T11254] ? __x64_sys_futex+0x358/0x4d0 [ 585.729838][T11254] __x64_sys_sendfile64+0x1d8/0x220 [ 585.729857][T11254] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 585.729881][T11254] do_syscall_64+0x106/0xf80 [ 585.729901][T11254] ? clear_bhb_loop+0x40/0x90 [ 585.729920][T11254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.729935][T11254] RIP: 0033:0x7fe71699c799 [ 585.729948][T11254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.729963][T11254] RSP: 002b:00007fe7178c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 585.729978][T11254] RAX: ffffffffffffffda RBX: 00007fe716c15fa0 RCX: 00007fe71699c799 [ 585.729988][T11254] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 585.729996][T11254] RBP: 00007fe716a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 585.730005][T11254] R10: 0000400000000006 R11: 0000000000000246 R12: 0000000000000000 [ 585.730014][T11254] R13: 00007fe716c16038 R14: 00007fe716c15fa0 R15: 00007ffd252bd768 [ 585.730034][T11254] [ 586.333928][T11271] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1306'. [ 589.381094][T11298] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1311'. [ 589.611505][T11303] binder: 11297:11303 ioctl c0046209 9 returned -22 [ 590.398789][T11306] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 591.099731][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888033771000: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 593.273235][ C0] vcan0: j1939_tp_rxtimer: 0xffff88813fe5d400: rx timeout, send abort [ 593.781513][ C0] vcan0: j1939_tp_rxtimer: 0xffff88813fe5d400: abort rx timeout. Force session deactivation [ 593.892115][T10138] Bluetooth: hci2: Malformed LE Event: 0x1d [ 594.829645][T11353] vivid-007: ================= START STATUS ================= [ 594.837297][T11353] vivid-007: Generate PTS: true [ 594.932059][T11353] vivid-007: Generate SCR: true [ 594.936946][T11353] tpg source WxH: 320x240 (Y'CbCr) [ 595.008015][T11353] tpg field: 1 [ 595.048745][T11353] tpg crop: (0,0)/320x240 [ 595.137889][T11353] tpg compose: (0,0)/320x240 [ 595.214947][T11353] tpg colorspace: 8 [ 595.265914][T11353] tpg transfer function: 0/0 [ 595.350187][T11359] sp0: Synchronizing with TNC [ 595.409914][T11353] tpg Y'CbCr encoding: 0/0 [ 595.475302][T11353] tpg quantization: 0/0 [ 595.513942][T11353] tpg RGB range: 0/2 [ 595.536062][T11353] vivid-007: ================== END STATUS ================== [ 595.707317][T11364] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1327'. [ 595.998247][T11364] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1327'. [ 600.413893][T11406] could not allocate digest TFM handle [ 600.841724][T11416] FAULT_INJECTION: forcing a failure. [ 600.841724][T11416] name failslab, interval 1, probability 0, space 0, times 0 [ 600.950176][T11416] CPU: 0 UID: 0 PID: 11416 Comm: syz.2.1340 Tainted: G L syzkaller #0 PREEMPT(full) [ 600.950204][T11416] Tainted: [L]=SOFTLOCKUP [ 600.950218][T11416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 600.950229][T11416] Call Trace: [ 600.950239][T11416] [ 600.950245][T11416] dump_stack_lvl+0x100/0x190 [ 600.950275][T11416] should_fail_ex.cold+0x5/0xa [ 600.950293][T11416] ? group_cpus_evenly+0xec/0x660 [ 600.950416][T11416] should_failslab+0xc2/0x120 [ 600.950434][T11416] __kmalloc_noprof+0xe0/0x850 [ 600.950460][T11416] group_cpus_evenly+0xec/0x660 [ 600.950486][T11416] ? __pfx_group_cpus_evenly+0x10/0x10 [ 600.950516][T11416] blk_mq_map_queues+0x9d/0x430 [ 600.950590][T11416] ? __pfx_blk_mq_map_queues+0x10/0x10 [ 600.950613][T11416] ? rcu_is_watching+0x12/0xc0 [ 600.950635][T11416] ? trace_kmalloc+0x101/0x130 [ 600.950651][T11416] ? __kasan_kmalloc+0xaa/0xb0 [ 600.950676][T11416] blk_mq_update_queue_map+0x305/0x3a0 [ 600.950721][T11416] blk_mq_alloc_tag_set+0x660/0x1330 [ 600.950744][T11416] ? idr_alloc+0x77/0x130 [ 600.950807][T11416] loop_add+0x3b7/0xb60 [ 600.950885][T11416] ? __pfx_loop_add+0x10/0x10 [ 600.950917][T11416] ? find_held_lock+0x2b/0x80 [ 600.950932][T11416] ? __fget_files+0x215/0x3d0 [ 600.950951][T11416] loop_control_ioctl+0xae/0x620 [ 600.950973][T11416] ? __pfx_loop_control_ioctl+0x10/0x10 [ 600.950997][T11416] ? __pfx_loop_control_ioctl+0x10/0x10 [ 600.951018][T11416] __x64_sys_ioctl+0x18e/0x210 [ 600.951041][T11416] do_syscall_64+0x106/0xf80 [ 600.951062][T11416] ? clear_bhb_loop+0x40/0x90 [ 600.951080][T11416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.951095][T11416] RIP: 0033:0x7fa0cf19c799 [ 600.951109][T11416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.951124][T11416] RSP: 002b:00007fa0cff78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 600.951139][T11416] RAX: ffffffffffffffda RBX: 00007fa0cf415fa0 RCX: 00007fa0cf19c799 [ 600.951149][T11416] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000009 [ 600.951158][T11416] RBP: 00007fa0cf232c99 R08: 0000000000000000 R09: 0000000000000000 [ 600.951167][T11416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 600.951176][T11416] R13: 00007fa0cf416038 R14: 00007fa0cf415fa0 R15: 00007ffdc3965ba8 [ 600.951196][T11416] [ 601.862245][T11426] nvme_fcloop: unknown parameter or missing value '7' [ 603.789099][T11451] FAULT_INJECTION: forcing a failure. [ 603.789099][T11451] name failslab, interval 1, probability 0, space 0, times 0 [ 604.026818][T11451] CPU: 0 UID: 0 PID: 11451 Comm: syz.1.1346 Tainted: G L syzkaller #0 PREEMPT(full) [ 604.026845][T11451] Tainted: [L]=SOFTLOCKUP [ 604.026851][T11451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 604.026861][T11451] Call Trace: [ 604.026866][T11451] [ 604.026873][T11451] dump_stack_lvl+0x100/0x190 [ 604.026901][T11451] should_fail_ex.cold+0x5/0xa [ 604.026919][T11451] ? memcg_list_lru_alloc+0x4ec/0x740 [ 604.026942][T11451] should_failslab+0xc2/0x120 [ 604.026959][T11451] __kmalloc_noprof+0xe0/0x850 [ 604.026981][T11451] ? ipcget+0xee/0xf50 [ 604.027092][T11451] memcg_list_lru_alloc+0x4ec/0x740 [ 604.027121][T11451] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 604.027143][T11451] ? rcu_read_unlock+0x17/0x60 [ 604.027165][T11451] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 604.027189][T11451] __memcg_slab_post_alloc_hook+0x130/0x990 [ 604.027211][T11451] ? kasan_save_track+0x14/0x30 [ 604.027226][T11451] kmem_cache_alloc_lru_noprof+0x592/0x6e0 [ 604.027248][T11451] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 604.027268][T11451] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 604.027283][T11451] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 604.027299][T11451] alloc_inode+0x68/0x250 [ 604.027319][T11451] new_inode+0x22/0x1c0 [ 604.027340][T11451] hugetlbfs_get_inode+0x313/0x750 [ 604.027359][T11451] hugetlb_file_setup+0x3cc/0x5b0 [ 604.027378][T11451] newseg+0xabb/0xed0 [ 604.027399][T11451] ? __pfx_newseg+0x10/0x10 [ 604.027417][T11451] ? down_write+0x146/0x1f0 [ 604.027434][T11451] ? ksys_write+0x190/0x250 [ 604.027447][T11451] ? ksys_write+0x190/0x250 [ 604.027471][T11451] ipcget+0xee/0xf50 [ 604.027490][T11451] ? do_futex+0x192/0x350 [ 604.027512][T11451] ? __pfx_do_futex+0x10/0x10 [ 604.027533][T11451] ? __pfx_ipcget+0x10/0x10 [ 604.027553][T11451] ? __x64_sys_futex+0x34f/0x4d0 [ 604.027571][T11451] ? __x64_sys_futex+0x358/0x4d0 [ 604.027592][T11451] __x64_sys_shmget+0x13b/0x1b0 [ 604.027635][T11451] ? __pfx___x64_sys_shmget+0x10/0x10 [ 604.027662][T11451] do_syscall_64+0x106/0xf80 [ 604.027684][T11451] ? clear_bhb_loop+0x40/0x90 [ 604.027702][T11451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.027717][T11451] RIP: 0033:0x7fe71699c799 [ 604.027738][T11451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 604.027753][T11451] RSP: 002b:00007fe7178a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 604.027768][T11451] RAX: ffffffffffffffda RBX: 00007fe716c16090 RCX: 00007fe71699c799 [ 604.027778][T11451] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000 [ 604.027788][T11451] RBP: 00007fe716a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 604.027797][T11451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 604.027807][T11451] R13: 00007fe716c16128 R14: 00007fe716c16090 R15: 00007ffd252bd768 [ 604.027827][T11451] [ 605.180456][T11457] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1349'. [ 605.193152][T10138] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 605.446261][T11457] netlink: 154 bytes leftover after parsing attributes in process `syz.0.1349'. [ 608.440102][T11489] binder: 11487:11489 ioctl c0405665 34 returned -22 [ 609.480205][T11503] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1360'. [ 609.678730][T11513] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1360'. [ 609.713195][T11515] binder: 11508:11515 ioctl c0905664 38 returned -22 [ 610.562776][T11518] rtc_cmos 00:00: Alarms can be up to one day in the future [ 611.064799][T11532] bond0: option packets_per_slave: invalid value ( Xnp) [ 611.293491][T11532] bond0: option packets_per_slave: allowed values 0 - 65535 [ 611.316614][ T119] rtc_cmos 00:00: Alarms can be up to one day in the future [ 611.392824][ T119] rtc_cmos 00:00: Alarms can be up to one day in the future [ 611.445086][ T119] rtc_cmos 00:00: Alarms can be up to one day in the future [ 611.520409][ T119] rtc_cmos 00:00: Alarms can be up to one day in the future [ 611.527690][ T119] rtc rtc0: __rtc_set_alarm: err=-22 [ 612.417505][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807dc67000: rx timeout, send abort [ 612.429777][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807dc67000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 614.808193][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880232a6800: rx timeout, send abort [ 615.143053][T11546] bond0: invalid ARP target specified [ 615.316523][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880232a6800: abort rx timeout. Force session deactivation [ 617.541735][T10138] Bluetooth: hci0: command 0x0406 tx timeout [ 617.560608][T11548] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 617.952467][T11548] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 618.079820][T11548] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 618.273516][T11548] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 618.348957][T11567] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1376'. [ 618.498139][T10138] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 618.555961][T11567] netlink: 154 bytes leftover after parsing attributes in process `syz.3.1376'. [ 619.698746][T10138] Bluetooth: hci1: command 0x0406 tx timeout [ 619.978900][T11589] netlink: 280 bytes leftover after parsing attributes in process `syz.0.1383'. [ 620.099576][T10138] Bluetooth: hci2: command 0x0406 tx timeout [ 620.511133][T10138] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 621.239264][T11606] FAULT_INJECTION: forcing a failure. [ 621.239264][T11606] name failslab, interval 1, probability 0, space 0, times 0 [ 621.300048][T11604] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1388'. [ 621.339319][T11606] CPU: 0 UID: 0 PID: 11606 Comm: syz.3.1387 Tainted: G L syzkaller #0 PREEMPT(full) [ 621.339350][T11606] Tainted: [L]=SOFTLOCKUP [ 621.339356][T11606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 621.339365][T11606] Call Trace: [ 621.339370][T11606] [ 621.339376][T11606] dump_stack_lvl+0x100/0x190 [ 621.339405][T11606] should_fail_ex.cold+0x5/0xa [ 621.339424][T11606] should_failslab+0xc2/0x120 [ 621.339441][T11606] __kmalloc_cache_noprof+0x7a/0x6f0 [ 621.339463][T11606] ? mon_bin_open+0x1a8/0x470 [ 621.339577][T11606] ? lockdep_init_map_type+0x5c/0x250 [ 621.339602][T11606] mon_bin_open+0x1a8/0x470 [ 621.339620][T11606] ? __pfx_mon_bin_open+0x10/0x10 [ 621.339638][T11606] chrdev_open+0x234/0x6a0 [ 621.339655][T11606] ? __pfx_chrdev_open+0x10/0x10 [ 621.339673][T11606] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 621.339698][T11606] do_dentry_open+0x6d8/0x1660 [ 621.339714][T11606] ? __pfx_chrdev_open+0x10/0x10 [ 621.339735][T11606] vfs_open+0x82/0x3f0 [ 621.339757][T11606] path_openat+0x208c/0x31a0 [ 621.339780][T11606] ? __pfx_path_openat+0x10/0x10 [ 621.339807][T11606] do_file_open+0x20e/0x430 [ 621.339825][T11606] ? __pfx_do_file_open+0x10/0x10 [ 621.339861][T11606] ? alloc_fd+0x476/0x790 [ 621.339880][T11606] ? do_getname+0x191/0x390 [ 621.339902][T11606] do_sys_openat2+0x10d/0x1e0 [ 621.339923][T11606] ? __pfx_do_sys_openat2+0x10/0x10 [ 621.339944][T11606] ? __fget_files+0x21f/0x3d0 [ 621.339963][T11606] __x64_sys_openat+0x12d/0x210 [ 621.339983][T11606] ? __pfx___x64_sys_openat+0x10/0x10 [ 621.340010][T11606] do_syscall_64+0x106/0xf80 [ 621.340031][T11606] ? clear_bhb_loop+0x40/0x90 [ 621.340050][T11606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.340066][T11606] RIP: 0033:0x7fda49b9c799 [ 621.340080][T11606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 621.340095][T11606] RSP: 002b:00007fda47dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 621.340110][T11606] RAX: ffffffffffffffda RBX: 00007fda49e16180 RCX: 00007fda49b9c799 [ 621.340121][T11606] RDX: 0000000000002040 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 621.340131][T11606] RBP: 00007fda49c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 621.340140][T11606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 621.340149][T11606] R13: 00007fda49e16218 R14: 00007fda49e16180 R15: 00007ffe11b24fb8 [ 621.340169][T11606] [ 622.049758][T11604] netlink: 166 bytes leftover after parsing attributes in process `syz.2.1388'. [ 624.346477][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.356750][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.412428][T11625] zswap: compressor not available [ 627.386925][T11664] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 628.438441][T10138] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 629.448965][T11687] netlink: 322 bytes leftover after parsing attributes in process `syz.2.1405'. [ 629.639128][T11687] netlink: 322 bytes leftover after parsing attributes in process `syz.2.1405'. [ 629.640008][T11687] netlink: 250 bytes leftover after parsing attributes in process `syz.2.1405'. [ 630.384399][T11698] FAULT_INJECTION: forcing a failure. [ 630.384399][T11698] name failslab, interval 1, probability 0, space 0, times 0 [ 630.569933][T11698] CPU: 0 UID: 0 PID: 11698 Comm: syz.2.1407 Tainted: G L syzkaller #0 PREEMPT(full) [ 630.569969][T11698] Tainted: [L]=SOFTLOCKUP [ 630.569974][T11698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 630.569984][T11698] Call Trace: [ 630.569989][T11698] [ 630.569995][T11698] dump_stack_lvl+0x100/0x190 [ 630.570024][T11698] should_fail_ex.cold+0x5/0xa [ 630.570044][T11698] should_failslab+0xc2/0x120 [ 630.570062][T11698] __kmalloc_cache_noprof+0x7a/0x6f0 [ 630.570082][T11698] ? mon_bin_open+0x1a8/0x470 [ 630.570099][T11698] ? lockdep_init_map_type+0x5c/0x250 [ 630.570123][T11698] mon_bin_open+0x1a8/0x470 [ 630.570141][T11698] ? __pfx_mon_bin_open+0x10/0x10 [ 630.570158][T11698] chrdev_open+0x234/0x6a0 [ 630.570174][T11698] ? __pfx_apparmor_file_open+0x10/0x10 [ 630.570190][T11698] ? __pfx_chrdev_open+0x10/0x10 [ 630.570207][T11698] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 630.570228][T11698] do_dentry_open+0x6d8/0x1660 [ 630.570243][T11698] ? __pfx_chrdev_open+0x10/0x10 [ 630.570264][T11698] vfs_open+0x82/0x3f0 [ 630.570285][T11698] path_openat+0x208c/0x31a0 [ 630.570308][T11698] ? __pfx_path_openat+0x10/0x10 [ 630.570331][T11698] do_file_open+0x20e/0x430 [ 630.570348][T11698] ? __pfx_do_file_open+0x10/0x10 [ 630.570378][T11698] ? alloc_fd+0x476/0x790 [ 630.570394][T11698] ? do_getname+0x191/0x390 [ 630.570415][T11698] do_sys_openat2+0x10d/0x1e0 [ 630.570434][T11698] ? __pfx_do_sys_openat2+0x10/0x10 [ 630.570455][T11698] ? __fget_files+0x21f/0x3d0 [ 630.570473][T11698] __x64_sys_openat+0x12d/0x210 [ 630.570493][T11698] ? __pfx___x64_sys_openat+0x10/0x10 [ 630.570520][T11698] do_syscall_64+0x106/0xf80 [ 630.570542][T11698] ? clear_bhb_loop+0x40/0x90 [ 630.570560][T11698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.570575][T11698] RIP: 0033:0x7fa0cf19c799 [ 630.570588][T11698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 630.570604][T11698] RSP: 002b:00007fa0cd3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 630.570618][T11698] RAX: ffffffffffffffda RBX: 00007fa0cf416090 RCX: 00007fa0cf19c799 [ 630.570628][T11698] RDX: 0000000000002040 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 630.570637][T11698] RBP: 00007fa0cf232c99 R08: 0000000000000000 R09: 0000000000000000 [ 630.570646][T11698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 630.570654][T11698] R13: 00007fa0cf416128 R14: 00007fa0cf416090 R15: 00007ffdc3965ba8 [ 630.570674][T11698] [ 631.380478][T10138] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 632.370445][T11714] FAULT_INJECTION: forcing a failure. [ 632.370445][T11714] name fail_futex, interval 1, probability 0, space 0, times 0 [ 632.688843][T11714] CPU: 0 UID: 0 PID: 11714 Comm: syz.2.1411 Tainted: G L syzkaller #0 PREEMPT(full) [ 632.688877][T11714] Tainted: [L]=SOFTLOCKUP [ 632.688881][T11714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 632.688890][T11714] Call Trace: [ 632.688895][T11714] [ 632.688901][T11714] dump_stack_lvl+0x100/0x190 [ 632.688928][T11714] should_fail_ex.cold+0x5/0xa [ 632.688946][T11714] get_futex_key+0x295/0x1620 [ 632.688967][T11714] ? __pfx_get_futex_key+0x10/0x10 [ 632.688982][T11714] ? lock_acquire+0x1cf/0x380 [ 632.689007][T11714] futex_wake+0xea/0x530 [ 632.689029][T11714] ? __pfx_futex_wake+0x10/0x10 [ 632.689050][T11714] ? exit_mm_release+0x19/0x30 [ 632.689073][T11714] do_futex+0x32b/0x350 [ 632.689091][T11714] ? __pfx_do_futex+0x10/0x10 [ 632.689107][T11714] ? __might_fault+0xc5/0x140 [ 632.689132][T11714] mm_release+0x24a/0x2f0 [ 632.689148][T11714] do_exit+0x704/0x2b60 [ 632.689169][T11714] ? __pfx_do_exit+0x10/0x10 [ 632.689187][T11714] ? do_raw_spin_lock+0x128/0x260 [ 632.689206][T11714] ? find_held_lock+0x2b/0x80 [ 632.689219][T11714] ? get_signal+0x7e0/0x21e0 [ 632.689236][T11714] do_group_exit+0xd5/0x2a0 [ 632.689256][T11714] get_signal+0x1ec7/0x21e0 [ 632.689277][T11714] ? __pfx_get_signal+0x10/0x10 [ 632.689293][T11714] ? do_futex+0x192/0x350 [ 632.689313][T11714] arch_do_signal_or_restart+0x91/0x770 [ 632.689332][T11714] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 632.689354][T11714] ? __pfx___x64_sys_futex+0x10/0x10 [ 632.689377][T11714] exit_to_user_mode_loop+0x86/0x4a0 [ 632.689397][T11714] do_syscall_64+0x668/0xf80 [ 632.689418][T11714] ? clear_bhb_loop+0x40/0x90 [ 632.689436][T11714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.689451][T11714] RIP: 0033:0x7fa0cf19c799 [ 632.689463][T11714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.689477][T11714] RSP: 002b:00007fa0cff780e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 632.689491][T11714] RAX: fffffffffffffe00 RBX: 00007fa0cf415fa8 RCX: 00007fa0cf19c799 [ 632.689501][T11714] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa0cf415fa8 [ 632.689509][T11714] RBP: 00007fa0cf415fa0 R08: 0000000000000000 R09: 0000000000000000 [ 632.689517][T11714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 632.689525][T11714] R13: 00007fa0cf416038 R14: 00007ffdc3965ac0 R15: 00007ffdc3965ba8 [ 632.689544][T11714] [ 633.539275][T11721] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1412'. [ 635.335242][T10138] Bluetooth: hci2: unexpected event 0x3e length: 508 > 260 [ 635.335265][T10138] Bluetooth: hci2: unexpected subevent 0x02 length: 507 > 260 [ 635.350376][T10138] Bluetooth: hci2: Dropping invalid advertising data [ 635.357046][T10138] Bluetooth: hci2: unknown advertising packet type: 0xe9 [ 635.357069][T10138] Bluetooth: hci2: Dropping invalid advertising data [ 635.371273][T10138] Bluetooth: hci2: Malformed LE Event: 0x02 [ 640.751461][T11776] block2mtd: Using custom MTD label '' for dev [ 640.757746][T11776] block2mtd: error: cannot open device [ 643.391128][T11810] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1433'. [ 644.419015][T11813] sctp: [Deprecated]: syz.0.1434 (pid 11813) Use of int in maxseg socket option. [ 644.419015][T11813] Use struct sctp_assoc_value instead [ 645.323869][T10138] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 645.996081][T11826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1436'. [ 647.124600][T11836] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1441'. [ 647.304370][T11836] netlink: 166 bytes leftover after parsing attributes in process `syz.2.1441'. [ 649.052333][T11856] nvme_fcloop: unknown parameter or missing value '7' [ 651.505246][T11881] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.16.0), cmd(12) [ 656.535714][T11917] FAULT_INJECTION: forcing a failure. [ 656.535714][T11917] name fail_futex, interval 1, probability 0, space 0, times 0 [ 657.060556][T11917] CPU: 0 UID: 0 PID: 11917 Comm: syz.3.1460 Tainted: G L syzkaller #0 PREEMPT(full) [ 657.060582][T11917] Tainted: [L]=SOFTLOCKUP [ 657.060588][T11917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 657.060597][T11917] Call Trace: [ 657.060603][T11917] [ 657.060608][T11917] dump_stack_lvl+0x100/0x190 [ 657.060638][T11917] should_fail_ex.cold+0x5/0xa [ 657.060657][T11917] get_futex_key+0x1d2/0x1620 [ 657.060679][T11917] ? __pfx_get_futex_key+0x10/0x10 [ 657.060694][T11917] ? lock_acquire+0x1cf/0x380 [ 657.060720][T11917] futex_wake+0xea/0x530 [ 657.060742][T11917] ? __pfx_futex_wake+0x10/0x10 [ 657.060763][T11917] ? exit_mm_release+0x19/0x30 [ 657.060786][T11917] do_futex+0x32b/0x350 [ 657.060804][T11917] ? __pfx_do_futex+0x10/0x10 [ 657.060821][T11917] ? __might_fault+0xc5/0x140 [ 657.060846][T11917] mm_release+0x24a/0x2f0 [ 657.060861][T11917] do_exit+0x704/0x2b60 [ 657.060882][T11917] ? __pfx_do_exit+0x10/0x10 [ 657.060900][T11917] ? do_raw_spin_lock+0x128/0x260 [ 657.060919][T11917] ? find_held_lock+0x2b/0x80 [ 657.060932][T11917] ? get_signal+0x7e0/0x21e0 [ 657.060949][T11917] do_group_exit+0xd5/0x2a0 [ 657.060969][T11917] get_signal+0x1ec7/0x21e0 [ 657.060990][T11917] ? __pfx_get_signal+0x10/0x10 [ 657.061006][T11917] ? do_futex+0x192/0x350 [ 657.061026][T11917] arch_do_signal_or_restart+0x91/0x770 [ 657.061045][T11917] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 657.061068][T11917] ? __pfx___x64_sys_futex+0x10/0x10 [ 657.061090][T11917] exit_to_user_mode_loop+0x86/0x4a0 [ 657.061111][T11917] do_syscall_64+0x668/0xf80 [ 657.061134][T11917] ? clear_bhb_loop+0x40/0x90 [ 657.061152][T11917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.061166][T11917] RIP: 0033:0x7fda49b9c799 [ 657.061180][T11917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 657.061193][T11917] RSP: 002b:00007fda4a9820e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 657.061208][T11917] RAX: fffffffffffffe00 RBX: 00007fda49e15fa8 RCX: 00007fda49b9c799 [ 657.061217][T11917] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fda49e15fa8 [ 657.061226][T11917] RBP: 00007fda49e15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 657.061234][T11917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 657.061242][T11917] R13: 00007fda49e16038 R14: 00007ffe11b24ed0 R15: 00007ffe11b24fb8 [ 657.061261][T11917] [ 657.786937][T10138] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 664.444284][T11960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1474'. [ 665.544617][T10138] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 668.145085][T11992] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input20 [ 673.509095][T12034] ERROR: Out of memory at tomoyo_memory_ok. [ 674.155424][T10138] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 676.770550][T12065] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1500'. [ 678.167239][T12080] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1505'. [ 679.489060][T12080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 680.168233][T12080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 680.461032][T12080] bond0 (unregistering): Released all slaves [ 682.721051][T12107] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1512'. [ 682.760727][T10138] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 683.189989][ T8553] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 683.209826][ T8553] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 683.229089][ T8553] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 683.269173][ T8553] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 683.277221][ T8553] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 684.663910][T12114] chnl_net:caif_netlink_parms(): no params data found [ 685.086459][ T30] audit: type=1800 audit(2373.733:11): pid=12127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1515" name="discovery_nqn" dev="configfs" ino=385760 res=0 errno=0 [ 685.281334][T12114] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.331193][T12127] FAULT_INJECTION: forcing a failure. [ 685.331193][T12127] name failslab, interval 1, probability 0, space 0, times 0 [ 685.350167][T12114] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.408305][T10138] Bluetooth: hci4: command tx timeout [ 685.415137][T12114] bridge_slave_0: entered allmulticast mode [ 685.462352][T12114] bridge_slave_0: entered promiscuous mode [ 685.525963][T12114] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.591982][T12114] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.650477][T12127] CPU: 0 UID: 0 PID: 12127 Comm: syz.3.1515 Tainted: G L syzkaller #0 PREEMPT(full) [ 685.650505][T12127] Tainted: [L]=SOFTLOCKUP [ 685.650510][T12127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 685.650519][T12127] Call Trace: [ 685.650525][T12127] [ 685.650531][T12127] dump_stack_lvl+0x100/0x190 [ 685.650560][T12127] should_fail_ex.cold+0x5/0xa [ 685.650578][T12127] should_failslab+0xc2/0x120 [ 685.650596][T12127] __kmalloc_cache_noprof+0x7a/0x6f0 [ 685.650616][T12127] ? snd_timer_instance_new+0x47/0x2e0 [ 685.650732][T12127] snd_timer_instance_new+0x47/0x2e0 [ 685.650751][T12127] snd_seq_timer_open+0x1d4/0x600 [ 685.650820][T12127] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 685.650857][T12127] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 685.650909][T12127] ? lockdep_hardirqs_on+0x78/0x100 [ 685.650932][T12127] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 685.650955][T12127] queue_use+0xdc/0x1f0 [ 685.650975][T12127] snd_seq_queue_alloc+0x2e5/0x590 [ 685.650997][T12127] snd_seq_ioctl_create_queue+0xa9/0x370 [ 685.651047][T12127] call_seq_client_ctl+0xa3/0x130 [ 685.651064][T12127] snd_seq_kernel_client_ctl+0x77/0xd0 [ 685.651081][T12127] alloc_seq_queue+0xdb/0x180 [ 685.651119][T12127] ? __pfx_alloc_seq_queue+0x10/0x10 [ 685.651147][T12127] ? mark_held_locks+0x40/0x70 [ 685.651167][T12127] ? _raw_spin_unlock_irq+0x23/0x50 [ 685.651187][T12127] ? lockdep_hardirqs_on+0x78/0x100 [ 685.651210][T12127] snd_seq_oss_open+0x2b2/0xa10 [ 685.651230][T12127] odev_open+0x79/0xc0 [ 685.651247][T12127] ? __pfx_odev_open+0x10/0x10 [ 685.651261][T12127] soundcore_open+0x2e3/0x5a0 [ 685.651300][T12127] ? __pfx_soundcore_open+0x10/0x10 [ 685.651316][T12127] chrdev_open+0x234/0x6a0 [ 685.651333][T12127] ? __pfx_apparmor_file_open+0x10/0x10 [ 685.651351][T12127] ? __pfx_chrdev_open+0x10/0x10 [ 685.651367][T12127] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 685.651388][T12127] do_dentry_open+0x6d8/0x1660 [ 685.651404][T12127] ? __pfx_chrdev_open+0x10/0x10 [ 685.651424][T12127] vfs_open+0x82/0x3f0 [ 685.651445][T12127] path_openat+0x208c/0x31a0 [ 685.651467][T12127] ? __pfx_path_openat+0x10/0x10 [ 685.651490][T12127] do_file_open+0x20e/0x430 [ 685.651510][T12127] ? __pfx_do_file_open+0x10/0x10 [ 685.651540][T12127] ? alloc_fd+0x476/0x790 [ 685.651557][T12127] ? do_getname+0x191/0x390 [ 685.651577][T12127] do_sys_openat2+0x10d/0x1e0 [ 685.651597][T12127] ? __pfx_do_sys_openat2+0x10/0x10 [ 685.651623][T12127] __x64_sys_openat+0x12d/0x210 [ 685.651643][T12127] ? __pfx___x64_sys_openat+0x10/0x10 [ 685.651682][T12127] do_syscall_64+0x106/0xf80 [ 685.651705][T12127] ? clear_bhb_loop+0x40/0x90 [ 685.651735][T12127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.651751][T12127] RIP: 0033:0x7fda49b9c799 [ 685.651765][T12127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.651780][T12127] RSP: 002b:00007fda4a982028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 685.651795][T12127] RAX: ffffffffffffffda RBX: 00007fda49e15fa0 RCX: 00007fda49b9c799 [ 685.651805][T12127] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 685.651814][T12127] RBP: 00007fda49c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 685.651823][T12127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 685.651832][T12127] R13: 00007fda49e16038 R14: 00007fda49e15fa0 R15: 00007ffe11b24fb8 [ 685.651852][T12127] [ 685.655251][T12114] bridge_slave_1: entered allmulticast mode [ 686.060073][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.066517][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.959468][T12138] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 687.573645][T10138] Bluetooth: hci4: command tx timeout [ 688.542813][T12114] bridge_slave_1: entered promiscuous mode [ 688.662796][T12147] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 688.765152][T12114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 688.989460][T12147] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 689.053471][T12114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 689.192182][T12147] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 689.435500][T12114] team0: Port device team_slave_0 added [ 689.536615][T12114] team0: Port device team_slave_1 added [ 689.645213][T10138] Bluetooth: hci4: command tx timeout [ 689.972813][T12151] zswap: compressor not available [ 690.669801][T12114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 690.773646][T12114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 691.014592][T12114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 691.146671][T12114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 691.245648][T12114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 691.473178][T12114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 691.723354][T10138] Bluetooth: hci4: command tx timeout [ 691.903679][T12114] hsr_slave_0: entered promiscuous mode [ 691.958498][T12114] hsr_slave_1: entered promiscuous mode [ 691.998163][T12114] debugfs: 'hsr0' already exists in 'hsr' [ 692.083437][T12114] Cannot create hsr debugfs directory [ 696.660931][T12114] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 697.099550][T12114] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 697.353242][T12114] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 697.440349][T12114] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 698.812777][T12114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 698.961616][T12114] 8021q: adding VLAN 0 to HW filter on device team0 [ 699.068975][T10460] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.076106][T10460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 699.242956][T10460] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.250103][T10460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 699.384094][T12176] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 699.597773][T12176] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 699.857522][T12176] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 700.446637][T12114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 701.078986][T12211] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1531'. [ 701.162411][T12211] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1531'. [ 701.933634][T12223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1533'. [ 702.357524][T12114] veth0_vlan: entered promiscuous mode [ 702.496481][T12114] veth1_vlan: entered promiscuous mode [ 702.850634][T12114] veth0_macvtap: entered promiscuous mode [ 702.992278][T12114] veth1_macvtap: entered promiscuous mode [ 703.106189][T12114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 703.791216][T12114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 703.919487][ T9649] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.047730][ T9649] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.130172][ T9649] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.490170][ T9649] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.770041][ T8584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.777862][ T8584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.932499][T12235] sctp: [Deprecated]: syz.2.1536 (pid 12235) Use of struct sctp_assoc_value in delayed_ack socket option. [ 704.932499][T12235] Use struct sctp_sack_info instead [ 705.219721][ T9649] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.244875][ T9649] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.492172][T12252] can0: slcan on pty53. [ 706.954480][T12248] can0 (unregistered): slcan off pty53. [ 709.031963][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802c108000: rx timeout, send abort [ 709.055272][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802c108000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 709.756748][ T5175] ERROR: Out of memory at tomoyo_memory_ok. [ 710.473797][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880375a9400: rx timeout, send abort [ 710.982282][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880375a9400: abort rx timeout. Force session deactivation [ 711.304209][T12288] futex_wake_op: syz.3.1545 tries to shift op by -2048; fix this program [ 711.514944][T12288] futex_wake_op: syz.3.1545 tries to shift op by -2048; fix this program [ 713.217140][T12313] __vm_enough_memory: pid: 12313, comm: syz.3.1550, bytes: 4398046457856 not enough memory for the allocation [ 723.619697][T12392] netlink: 'syz.3.1566': attribute type 1 has an invalid length. [ 725.855440][T12411] netlink: 346 bytes leftover after parsing attributes in process `syz.3.1575'. [ 735.887422][T12499] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 735.937116][T12499] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 736.017548][T12499] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 736.075748][T12499] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 736.125886][T12499] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 736.164682][T12499] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 736.506337][T12499] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 736.849603][T12520] FAULT_INJECTION: forcing a failure. [ 736.849603][T12520] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 737.026117][T10138] Bluetooth: hci0: command 0x0406 tx timeout [ 737.259370][T12520] CPU: 0 UID: 0 PID: 12520 Comm: syz.1.1598 Tainted: G L syzkaller #0 PREEMPT(full) [ 737.259396][T12520] Tainted: [L]=SOFTLOCKUP [ 737.259401][T12520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 737.259410][T12520] Call Trace: [ 737.259415][T12520] [ 737.259420][T12520] dump_stack_lvl+0x100/0x190 [ 737.259447][T12520] should_fail_ex.cold+0x5/0xa [ 737.259462][T12520] ? prepare_alloc_pages+0x16d/0x5f0 [ 737.259481][T12520] should_fail_alloc_page+0xeb/0x140 [ 737.259498][T12520] prepare_alloc_pages+0x1f0/0x5f0 [ 737.259514][T12520] ? kernel_text_address+0x8d/0x100 [ 737.259537][T12520] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 737.259564][T12520] ? copy_splice_read+0x1a3/0xb90 [ 737.259578][T12520] ? stack_trace_save+0x8e/0xc0 [ 737.259593][T12520] ? __pfx_stack_trace_save+0x10/0x10 [ 737.259609][T12520] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 737.259631][T12520] ? copy_splice_read+0x1a3/0xb90 [ 737.259644][T12520] ? kasan_save_stack+0x3f/0x50 [ 737.259664][T12520] ? kasan_save_stack+0x30/0x50 [ 737.259683][T12520] ? kasan_save_track+0x14/0x30 [ 737.259695][T12520] ? __kasan_kmalloc+0xaa/0xb0 [ 737.259714][T12520] ? __kmalloc_noprof+0x301/0x850 [ 737.259733][T12520] ? copy_splice_read+0x1a3/0xb90 [ 737.259746][T12520] ? do_splice_read+0x285/0x370 [ 737.259760][T12520] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.259785][T12520] alloc_pages_bulk_noprof+0x782/0x1490 [ 737.259813][T12520] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 737.259846][T12520] ? __kmalloc_noprof+0x320/0x850 [ 737.259869][T12520] copy_splice_read+0x1e1/0xb90 [ 737.259887][T12520] ? __pfx_copy_splice_read+0x10/0x10 [ 737.259903][T12520] ? look_up_lock_class+0x55/0x120 [ 737.259928][T12520] ? lockdep_init_map_type+0x5c/0x250 [ 737.259947][T12520] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 737.259971][T12520] ? __pfx_copy_splice_read+0x10/0x10 [ 737.259985][T12520] do_splice_read+0x285/0x370 [ 737.260001][T12520] splice_direct_to_actor+0x2a1/0xa30 [ 737.260017][T12520] ? __pfx_direct_splice_actor+0x10/0x10 [ 737.260035][T12520] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 737.260055][T12520] do_splice_direct+0x174/0x240 [ 737.260070][T12520] ? __pfx_do_splice_direct+0x10/0x10 [ 737.260085][T12520] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 737.260111][T12520] ? rw_verify_area+0xce/0x6d0 [ 737.260132][T12520] do_sendfile+0xadc/0xe20 [ 737.260156][T12520] ? __pfx_do_sendfile+0x10/0x10 [ 737.260177][T12520] ? __fget_files+0x21f/0x3d0 [ 737.260196][T12520] __x64_sys_sendfile64+0x1d8/0x220 [ 737.260211][T12520] ? ksys_write+0x1ac/0x250 [ 737.260224][T12520] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 737.260246][T12520] do_syscall_64+0x106/0xf80 [ 737.260265][T12520] ? clear_bhb_loop+0x40/0x90 [ 737.260282][T12520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.260296][T12520] RIP: 0033:0x7fe71699c799 [ 737.260308][T12520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 737.260322][T12520] RSP: 002b:00007fe7178c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 737.260337][T12520] RAX: ffffffffffffffda RBX: 00007fe716c15fa0 RCX: 00007fe71699c799 [ 737.260346][T12520] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 737.260353][T12520] RBP: 00007fe7178c5090 R08: 0000000000000000 R09: 0000000000000000 [ 737.260362][T12520] R10: 0000000001000200 R11: 0000000000000246 R12: 0000000000000001 [ 737.260370][T12520] R13: 00007fe716c16038 R14: 00007fe716c15fa0 R15: 00007ffd252bd768 [ 737.260389][T12520] [ 738.452068][T10138] Bluetooth: hci2: command 0x0406 tx timeout [ 738.459139][T10138] Bluetooth: hci1: command 0x0406 tx timeout [ 738.465116][T10138] Bluetooth: hci4: command 0x0c1a tx timeout [ 738.472610][T10138] Bluetooth: hci3: command 0x0406 tx timeout [ 738.794670][T12526] syz.1.1602 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 739.097427][T12526] futex_wake_op: syz.1.1602 tries to shift op by -2048; fix this program [ 739.106011][T12526] futex_wake_op: syz.1.1602 tries to shift op by -2048; fix this program [ 739.351263][T12530] 0x000000000001-0x000000020000 : "" [ 739.696183][T12530] ftl_cs: FTL header corrupt! [ 739.979565][T12535] ERROR: Out of memory at tomoyo_memory_ok. [ 740.551462][ T8553] Bluetooth: hci4: command 0x0c1a tx timeout [ 741.946681][T12556] netlink: 252 bytes leftover after parsing attributes in process `syz.4.1605'. [ 742.643386][ T8553] Bluetooth: hci4: command 0x0c1a tx timeout [ 747.276104][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.283400][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.747828][ C0] vcan0: j1939_tp_rxtimer: 0xffff88809d805c00: rx timeout, send abort [ 747.761753][ T5175] ERROR: Out of memory at tomoyo_memory_ok. [ 748.262209][ C0] vcan0: j1939_tp_rxtimer: 0xffff88809d805c00: abort rx timeout. Force session deactivation [ 750.322921][T12611] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 750.416461][ T30] audit: type=1800 audit(2439.021:12): pid=12613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1617" name="dbroot" dev="configfs" ino=433451 res=0 errno=0 [ 750.436395][ C0] vcan0: j1939_tp_rxtimer: 0xffff888061898800: rx timeout, send abort [ 750.836123][T12610] Invalid ELF header magic: != ELF [ 750.936689][ C0] vcan0: j1939_tp_rxtimer: 0xffff888061898800: abort rx timeout. Force session deactivation [ 751.634623][T12632] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1622'. [ 751.968554][T12634] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.16.0), cmd(12) [ 752.864920][T12640] FAULT_INJECTION: forcing a failure. [ 752.864920][T12640] name failslab, interval 1, probability 0, space 0, times 0 [ 752.984567][T12640] CPU: 0 UID: 0 PID: 12640 Comm: syz.3.1623 Tainted: G L syzkaller #0 PREEMPT(full) [ 752.984612][T12640] Tainted: [L]=SOFTLOCKUP [ 752.984617][T12640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 752.984627][T12640] Call Trace: [ 752.984632][T12640] [ 752.984638][T12640] dump_stack_lvl+0x100/0x190 [ 752.984667][T12640] should_fail_ex.cold+0x5/0xa [ 752.984686][T12640] should_failslab+0xc2/0x120 [ 752.984704][T12640] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 752.984726][T12640] ? __pmd_alloc+0xbf/0x950 [ 752.984747][T12640] __pmd_alloc+0xbf/0x950 [ 752.984763][T12640] ? __pud_alloc+0x52e/0x6e0 [ 752.984782][T12640] copy_page_range+0x4531/0x6570 [ 752.984807][T12640] ? __lock_acquire+0x4a5/0x2630 [ 752.984840][T12640] ? mas_wr_store_entry+0x6d2/0x2390 [ 752.984858][T12640] ? __pfx_copy_page_range+0x10/0x10 [ 752.984881][T12640] ? mas_store+0x666/0xac0 [ 752.984897][T12640] ? __pfx_mas_store+0x10/0x10 [ 752.984916][T12640] ? __pfx___vma_start_write+0x10/0x10 [ 752.984941][T12640] dup_mmap+0xd25/0x2180 [ 752.984967][T12640] ? __pfx_dup_mmap+0x10/0x10 [ 752.984984][T12640] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 752.985009][T12640] ? __lock_acquire+0x4a5/0x2630 [ 752.985028][T12640] ? find_held_lock+0x2b/0x80 [ 752.985042][T12640] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 752.985151][T12640] copy_process+0x7523/0x7a40 [ 752.985169][T12640] ? futex_unqueue+0x133/0x2c0 [ 752.985199][T12640] ? __pfx_copy_process+0x10/0x10 [ 752.985221][T12640] ? _copy_from_user+0x59/0xd0 [ 752.985242][T12640] kernel_clone+0xfc/0x9a0 [ 752.985261][T12640] ? __pfx_kernel_clone+0x10/0x10 [ 752.985282][T12640] ? __pfx_futex_wait+0x10/0x10 [ 752.985308][T12640] __do_sys_clone3+0x214/0x290 [ 752.985326][T12640] ? __pfx___do_sys_clone3+0x10/0x10 [ 752.985376][T12640] do_syscall_64+0x106/0xf80 [ 752.985398][T12640] ? clear_bhb_loop+0x40/0x90 [ 752.985418][T12640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.985434][T12640] RIP: 0033:0x7fda49b9c799 [ 752.985447][T12640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 752.985461][T12640] RSP: 002b:00007fda4a981ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 752.985476][T12640] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fda49b9c799 [ 752.985486][T12640] RDX: 00007fda4a981f10 RSI: 0000000000000058 RDI: 00007fda4a981f10 [ 752.985496][T12640] RBP: 00007fda49c32c99 R08: 0000000000000000 R09: 0000000000000058 [ 752.985504][T12640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 752.985513][T12640] R13: 00007fda49e16038 R14: 00007fda49e15fa0 R15: 00007ffe11b24fb8 [ 752.985534][T12640] [ 755.286722][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f3e0c00: rx timeout, send abort [ 755.295290][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805f3e0c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 756.748086][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ac13800: rx timeout, send abort [ 756.756475][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ac12400: rx timeout, send abort [ 756.765837][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807ac13800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 756.780302][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807ac12400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 757.059111][T12665] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1633'. [ 759.268935][T12679] random: crng reseeded on system resumption [ 762.113285][T12721] Invalid ELF header magic: != ELF [ 766.585766][ T30] audit: type=1800 audit(2455.193:13): pid=12740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1651" name="dbroot" dev="configfs" ino=444367 res=0 errno=0 [ 769.294784][T12773] ERROR: Out of memory at tomoyo_memory_ok. [ 770.669187][T12800] ERROR: Out of memory at tomoyo_memory_ok. [ 770.853973][T12801] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1669'. [ 771.268326][T12806] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 771.444386][T12806] FAULT_INJECTION: forcing a failure. [ 771.444386][T12806] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 771.616211][T12806] CPU: 0 UID: 0 PID: 12806 Comm: syz.4.1671 Tainted: G L syzkaller #0 PREEMPT(full) [ 771.616244][T12806] Tainted: [L]=SOFTLOCKUP [ 771.616249][T12806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 771.616259][T12806] Call Trace: [ 771.616265][T12806] [ 771.616271][T12806] dump_stack_lvl+0x100/0x190 [ 771.616303][T12806] should_fail_ex.cold+0x5/0xa [ 771.616320][T12806] ? prepare_alloc_pages+0x16d/0x5f0 [ 771.616347][T12806] should_fail_alloc_page+0xeb/0x140 [ 771.616366][T12806] prepare_alloc_pages+0x1f0/0x5f0 [ 771.616387][T12806] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 771.616419][T12806] ? stack_trace_save+0x8e/0xc0 [ 771.616436][T12806] ? __pfx_stack_trace_save+0x10/0x10 [ 771.616451][T12806] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 771.616472][T12806] ? stack_depot_save_flags+0x27/0x9d0 [ 771.616497][T12806] ? kasan_save_stack+0x3f/0x50 [ 771.616518][T12806] ? kasan_save_stack+0x30/0x50 [ 771.616539][T12806] ? kasan_save_track+0x14/0x30 [ 771.616551][T12806] ? __kasan_kmalloc+0xaa/0xb0 [ 771.616574][T12806] ? do_file_open+0x20e/0x430 [ 771.616588][T12806] ? do_sys_openat2+0x10d/0x1e0 [ 771.616606][T12806] ? __x64_sys_openat+0x12d/0x210 [ 771.616624][T12806] ? do_syscall_64+0x106/0xf80 [ 771.616646][T12806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.616665][T12806] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 771.616682][T12806] ? policy_nodemask+0xed/0x4f0 [ 771.616700][T12806] alloc_pages_mpol+0x1fb/0x550 [ 771.616717][T12806] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 771.616738][T12806] alloc_pages_noprof+0x131/0x390 [ 771.616755][T12806] get_zeroed_page_noprof+0x18/0xb0 [ 771.616772][T12806] mon_alloc_buff+0xce/0x1b0 [ 771.616790][T12806] ? kasan_save_track+0x14/0x30 [ 771.616806][T12806] mon_bin_open+0x207/0x470 [ 771.616823][T12806] ? __pfx_mon_bin_open+0x10/0x10 [ 771.616840][T12806] chrdev_open+0x234/0x6a0 [ 771.616856][T12806] ? __pfx_apparmor_file_open+0x10/0x10 [ 771.616872][T12806] ? __pfx_chrdev_open+0x10/0x10 [ 771.616889][T12806] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 771.616910][T12806] do_dentry_open+0x6d8/0x1660 [ 771.616925][T12806] ? __pfx_chrdev_open+0x10/0x10 [ 771.616945][T12806] vfs_open+0x82/0x3f0 [ 771.616965][T12806] path_openat+0x208c/0x31a0 [ 771.616988][T12806] ? __pfx_path_openat+0x10/0x10 [ 771.617010][T12806] do_file_open+0x20e/0x430 [ 771.617027][T12806] ? __pfx_do_file_open+0x10/0x10 [ 771.617056][T12806] ? alloc_fd+0x476/0x790 [ 771.617074][T12806] ? do_getname+0x191/0x390 [ 771.617093][T12806] do_sys_openat2+0x10d/0x1e0 [ 771.617113][T12806] ? __pfx_do_sys_openat2+0x10/0x10 [ 771.617133][T12806] ? __fget_files+0x21f/0x3d0 [ 771.617152][T12806] __x64_sys_openat+0x12d/0x210 [ 771.617171][T12806] ? __pfx___x64_sys_openat+0x10/0x10 [ 771.617198][T12806] do_syscall_64+0x106/0xf80 [ 771.617228][T12806] ? clear_bhb_loop+0x40/0x90 [ 771.617249][T12806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.617265][T12806] RIP: 0033:0x7ff48f39c799 [ 771.617280][T12806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 771.617294][T12806] RSP: 002b:00007ff4901df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 771.617309][T12806] RAX: ffffffffffffffda RBX: 00007ff48f615fa0 RCX: 00007ff48f39c799 [ 771.617320][T12806] RDX: 0000000000002040 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 771.617329][T12806] RBP: 00007ff48f432c99 R08: 0000000000000000 R09: 0000000000000000 [ 771.617338][T12806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 771.617347][T12806] R13: 00007ff48f616038 R14: 00007ff48f615fa0 R15: 00007ffc2407d628 [ 771.617367][T12806] [ 772.019190][T12811] FAULT_INJECTION: forcing a failure. [ 772.019190][T12811] name failslab, interval 1, probability 0, space 0, times 0 [ 772.032058][T12811] CPU: 0 UID: 0 PID: 12811 Comm: syz.3.1672 Tainted: G L syzkaller #0 PREEMPT(full) [ 772.032084][T12811] Tainted: [L]=SOFTLOCKUP [ 772.032090][T12811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 772.032099][T12811] Call Trace: [ 772.032105][T12811] [ 772.032111][T12811] dump_stack_lvl+0x100/0x190 [ 772.032139][T12811] should_fail_ex.cold+0x5/0xa [ 772.032159][T12811] should_failslab+0xc2/0x120 [ 772.032176][T12811] __kmalloc_cache_noprof+0x7a/0x6f0 [ 772.032196][T12811] ? mon_bin_open+0x1a8/0x470 [ 772.032213][T12811] ? lockdep_init_map_type+0x5c/0x250 [ 772.032238][T12811] mon_bin_open+0x1a8/0x470 [ 772.032255][T12811] ? __pfx_mon_bin_open+0x10/0x10 [ 772.032272][T12811] chrdev_open+0x234/0x6a0 [ 772.032287][T12811] ? __pfx_apparmor_file_open+0x10/0x10 [ 772.032304][T12811] ? __pfx_chrdev_open+0x10/0x10 [ 772.032320][T12811] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 772.032341][T12811] do_dentry_open+0x6d8/0x1660 [ 772.032356][T12811] ? __pfx_chrdev_open+0x10/0x10 [ 772.032376][T12811] vfs_open+0x82/0x3f0 [ 772.032396][T12811] path_openat+0x208c/0x31a0 [ 772.032419][T12811] ? __pfx_path_openat+0x10/0x10 [ 772.032441][T12811] do_file_open+0x20e/0x430 [ 772.032458][T12811] ? __pfx_do_file_open+0x10/0x10 [ 772.032488][T12811] ? alloc_fd+0x476/0x790 [ 772.032505][T12811] ? do_getname+0x191/0x390 [ 772.032525][T12811] do_sys_openat2+0x10d/0x1e0 [ 772.032544][T12811] ? __pfx_do_sys_openat2+0x10/0x10 [ 772.032574][T12811] ? __fget_files+0x21f/0x3d0 [ 772.032594][T12811] __x64_sys_openat+0x12d/0x210 [ 772.032614][T12811] ? __pfx___x64_sys_openat+0x10/0x10 [ 772.032643][T12811] do_syscall_64+0x106/0xf80 [ 772.032666][T12811] ? clear_bhb_loop+0x40/0x90 [ 772.032685][T12811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.032699][T12811] RIP: 0033:0x7fda49b9c799 [ 772.032714][T12811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 772.032729][T12811] RSP: 002b:00007fda4a982028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 772.032742][T12811] RAX: ffffffffffffffda RBX: 00007fda49e15fa0 RCX: 00007fda49b9c799 [ 772.032752][T12811] RDX: 0000000000002040 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 772.032762][T12811] RBP: 00007fda49c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 772.032771][T12811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 772.032779][T12811] R13: 00007fda49e16038 R14: 00007fda49e15fa0 R15: 00007ffe11b24fb8 [ 772.032800][T12811] [ 775.279664][ T8553] Bluetooth: hci2: unexpected event 0x0f length: 440 > 4 [ 776.879330][T12859] futex_wake_op: syz.4.1683 tries to shift op by -2048; fix this program [ 777.148556][T12862] FAULT_INJECTION: forcing a failure. [ 777.148556][T12862] name failslab, interval 1, probability 0, space 0, times 0 [ 777.217378][T12859] futex_wake_op: syz.4.1683 tries to shift op by -2048; fix this program [ 777.392413][T12862] CPU: 0 UID: 0 PID: 12862 Comm: syz.2.1684 Tainted: G L syzkaller #0 PREEMPT(full) [ 777.392440][T12862] Tainted: [L]=SOFTLOCKUP [ 777.392446][T12862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 777.392455][T12862] Call Trace: [ 777.392461][T12862] [ 777.392467][T12862] dump_stack_lvl+0x100/0x190 [ 777.392496][T12862] should_fail_ex.cold+0x5/0xa [ 777.392516][T12862] should_failslab+0xc2/0x120 [ 777.392534][T12862] __kmalloc_cache_noprof+0x7a/0x6f0 [ 777.392554][T12862] ? mon_bin_open+0x1a8/0x470 [ 777.392571][T12862] ? lockdep_init_map_type+0x5c/0x250 [ 777.392595][T12862] mon_bin_open+0x1a8/0x470 [ 777.392612][T12862] ? __pfx_mon_bin_open+0x10/0x10 [ 777.392630][T12862] chrdev_open+0x234/0x6a0 [ 777.392645][T12862] ? __pfx_apparmor_file_open+0x10/0x10 [ 777.392661][T12862] ? __pfx_chrdev_open+0x10/0x10 [ 777.392678][T12862] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 777.392698][T12862] do_dentry_open+0x6d8/0x1660 [ 777.392713][T12862] ? __pfx_chrdev_open+0x10/0x10 [ 777.392734][T12862] vfs_open+0x82/0x3f0 [ 777.392755][T12862] path_openat+0x208c/0x31a0 [ 777.392778][T12862] ? __pfx_path_openat+0x10/0x10 [ 777.392801][T12862] do_file_open+0x20e/0x430 [ 777.392818][T12862] ? __pfx_do_file_open+0x10/0x10 [ 777.392848][T12862] ? alloc_fd+0x476/0x790 [ 777.392864][T12862] ? do_getname+0x191/0x390 [ 777.392885][T12862] do_sys_openat2+0x10d/0x1e0 [ 777.392904][T12862] ? __pfx_do_sys_openat2+0x10/0x10 [ 777.392925][T12862] ? __fget_files+0x21f/0x3d0 [ 777.392944][T12862] __x64_sys_openat+0x12d/0x210 [ 777.392964][T12862] ? __pfx___x64_sys_openat+0x10/0x10 [ 777.392991][T12862] do_syscall_64+0x106/0xf80 [ 777.393013][T12862] ? clear_bhb_loop+0x40/0x90 [ 777.393031][T12862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.393055][T12862] RIP: 0033:0x7fa0cf19c799 [ 777.393069][T12862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 777.393084][T12862] RSP: 002b:00007fa0cff78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 777.393098][T12862] RAX: ffffffffffffffda RBX: 00007fa0cf415fa0 RCX: 00007fa0cf19c799 [ 777.393108][T12862] RDX: 0000000000002040 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 777.393117][T12862] RBP: 00007fa0cf232c99 R08: 0000000000000000 R09: 0000000000000000 [ 777.393126][T12862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 777.393135][T12862] R13: 00007fa0cf416038 R14: 00007fa0cf415fa0 R15: 00007ffdc3965ba8 [ 777.393156][T12862] [ 779.367192][ T8553] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 779.386773][ T8553] Bluetooth: hci2: Injecting HCI hardware error event [ 779.395601][ T8553] Bluetooth: hci2: hardware error 0x00 [ 781.454642][ T8553] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 781.695915][T12891] HSR: entered promiscuous mode [ 785.597469][ T8553] Bluetooth: hci3: unexpected event 0x0f length: 440 > 4 [ 789.205692][T12987] Format for deleting device is "id" (uint). [ 789.246109][T12988] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1716'. [ 789.466579][T12991] netlink: 326 bytes leftover after parsing attributes in process `syz.2.1715'. [ 789.612717][ T8553] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 789.623945][ T8553] Bluetooth: hci3: Injecting HCI hardware error event [ 789.633561][ T8553] Bluetooth: hci3: hardware error 0x00 [ 791.693658][ T8553] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 791.787975][T13025] aoe: can't write to that file. [ 793.853759][T13050] netlink: Failed to add  helper -22 [ 795.199910][T13063] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1733'. [ 795.815747][T13063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 796.101339][T13070] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1735'. [ 796.135902][T13063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 796.546764][T13063] bond0 (unregistering): Released all slaves [ 798.260547][T13093] FAULT_INJECTION: forcing a failure. [ 798.260547][T13093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 798.424405][T13093] CPU: 0 UID: 0 PID: 13093 Comm: syz.3.1743 Tainted: G L syzkaller #0 PREEMPT(full) [ 798.424432][T13093] Tainted: [L]=SOFTLOCKUP [ 798.424437][T13093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 798.424451][T13093] Call Trace: [ 798.424456][T13093] [ 798.424462][T13093] dump_stack_lvl+0x100/0x190 [ 798.424488][T13093] should_fail_ex.cold+0x5/0xa [ 798.424506][T13093] _copy_to_user+0x32/0xd0 [ 798.424527][T13093] put_timespec64+0xb5/0x130 [ 798.424543][T13093] ? __pfx_put_timespec64+0x10/0x10 [ 798.424558][T13093] ? lockdep_hardirqs_on+0x78/0x100 [ 798.424579][T13093] ? read_tsc+0x9/0x20 [ 798.424595][T13093] ? ktime_get_ts64+0x256/0x3f0 [ 798.424611][T13093] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 798.424627][T13093] poll_select_finish+0x54b/0x670 [ 798.424650][T13093] ? __pfx_poll_select_finish+0x10/0x10 [ 798.424670][T13093] ? timespec64_add_safe+0x192/0x220 [ 798.424686][T13093] ? __pfx_timespec64_add_safe+0x10/0x10 [ 798.424701][T13093] ? set_user_sigmask+0x1e1/0x270 [ 798.424724][T13093] ? __pfx_set_user_sigmask+0x10/0x10 [ 798.424746][T13093] ? read_tsc+0x9/0x20 [ 798.424763][T13093] ? ktime_get_ts64+0x256/0x3f0 [ 798.424780][T13093] __x64_sys_ppoll+0x2c7/0x350 [ 798.424797][T13093] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 798.424818][T13093] do_syscall_64+0x106/0xf80 [ 798.424837][T13093] ? clear_bhb_loop+0x40/0x90 [ 798.424854][T13093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.424869][T13093] RIP: 0033:0x7fda49b9c799 [ 798.424881][T13093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 798.424895][T13093] RSP: 002b:00007fda4a982028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 798.424909][T13093] RAX: ffffffffffffffda RBX: 00007fda49e15fa0 RCX: 00007fda49b9c799 [ 798.424918][T13093] RDX: 0000200000003640 RSI: 00000000000000d6 RDI: 0000200000003600 [ 798.424926][T13093] RBP: 00007fda49c32c99 R08: 0000000000000008 R09: 0000000000000000 [ 798.424935][T13093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 798.424943][T13093] R13: 00007fda49e16038 R14: 00007fda49e15fa0 R15: 00007ffe11b24fb8 [ 798.424961][T13093] [ 800.368592][T13120] nvme_fcloop: unknown parameter or missing value '7' [ 802.047851][T13142] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1753'. [ 808.484424][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032ce4400: rx timeout, send abort [ 808.496855][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888032ce4400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 808.545969][ T5175] ERROR: Out of memory at tomoyo_memory_ok. [ 808.858476][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.864918][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.608806][ C0] vcan0: j1939_tp_rxtimer: 0xffff88809e154000: rx timeout, send abort [ 809.617220][ C0] vcan0: j1939_tp_rxtimer: 0xffff88809e157800: rx timeout, send abort [ 809.625783][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88809e154000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 809.640135][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88809e157800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 810.793530][T13234] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1774'. [ 810.939280][T13238] usbip-vudc usbip-vudc.0: gadget not bound [ 810.958818][ T8553] Bluetooth: hci0: unexpected event 0x10 length: 440 > 1 [ 810.960190][ T8553] Bluetooth: hci0: hardware error 0x00 [ 811.524326][T13246] FAULT_INJECTION: forcing a failure. [ 811.524326][T13246] name failslab, interval 1, probability 0, space 0, times 0 [ 811.653325][T13246] CPU: 0 UID: 0 PID: 13246 Comm: syz.3.1777 Tainted: G L syzkaller #0 PREEMPT(full) [ 811.653353][T13246] Tainted: [L]=SOFTLOCKUP [ 811.653359][T13246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 811.653368][T13246] Call Trace: [ 811.653374][T13246] [ 811.653381][T13246] dump_stack_lvl+0x100/0x190 [ 811.653409][T13246] should_fail_ex.cold+0x5/0xa [ 811.653429][T13246] should_failslab+0xc2/0x120 [ 811.653445][T13246] __kmalloc_cache_noprof+0x7a/0x6f0 [ 811.653465][T13246] ? mon_bin_open+0xe6/0x470 [ 811.653487][T13246] mon_bin_open+0xe6/0x470 [ 811.653504][T13246] ? __pfx_mon_bin_open+0x10/0x10 [ 811.653531][T13246] chrdev_open+0x234/0x6a0 [ 811.653552][T13246] ? __pfx_apparmor_file_open+0x10/0x10 [ 811.653570][T13246] ? __pfx_chrdev_open+0x10/0x10 [ 811.653587][T13246] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 811.653608][T13246] do_dentry_open+0x6d8/0x1660 [ 811.653624][T13246] ? __pfx_chrdev_open+0x10/0x10 [ 811.653645][T13246] vfs_open+0x82/0x3f0 [ 811.653665][T13246] path_openat+0x208c/0x31a0 [ 811.653687][T13246] ? __pfx_path_openat+0x10/0x10 [ 811.653710][T13246] do_file_open+0x20e/0x430 [ 811.653728][T13246] ? __pfx_do_file_open+0x10/0x10 [ 811.653757][T13246] ? alloc_fd+0x476/0x790 [ 811.653774][T13246] ? do_getname+0x191/0x390 [ 811.653794][T13246] do_sys_openat2+0x10d/0x1e0 [ 811.653814][T13246] ? __pfx_do_sys_openat2+0x10/0x10 [ 811.653840][T13246] __x64_sys_openat+0x12d/0x210 [ 811.653861][T13246] ? __pfx___x64_sys_openat+0x10/0x10 [ 811.653888][T13246] do_syscall_64+0x106/0xf80 [ 811.653909][T13246] ? clear_bhb_loop+0x40/0x90 [ 811.653927][T13246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.653942][T13246] RIP: 0033:0x7fda49b9c799 [ 811.653956][T13246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 811.653975][T13246] RSP: 002b:00007fda4a982028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 811.653990][T13246] RAX: ffffffffffffffda RBX: 00007fda49e15fa0 RCX: 00007fda49b9c799 [ 811.654001][T13246] RDX: 0000000000002040 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 811.654011][T13246] RBP: 00007fda49c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 811.654020][T13246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 811.654029][T13246] R13: 00007fda49e16038 R14: 00007fda49e15fa0 R15: 00007ffe11b24fb8 [ 811.654049][T13246] [ 813.048431][ T8553] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 815.326107][T13283] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1784'. [ 817.180238][T13312] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1791'. [ 820.384410][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880330b8800: rx timeout, send abort [ 820.405252][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880330b8800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 821.307759][T13337] __vm_enough_memory: pid: 13337, comm: syz.2.1800, bytes: 4398046457856 not enough memory for the allocation [ 821.573161][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880330b8c00: rx timeout, send abort [ 822.081701][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880330b8c00: abort rx timeout. Force session deactivation [ 823.606642][T13382] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1813'. [ 825.892075][ T8553] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 828.412586][T13452] FAULT_INJECTION: forcing a failure. [ 828.412586][T13452] name failslab, interval 1, probability 0, space 0, times 0 [ 828.635991][T13452] CPU: 0 UID: 0 PID: 13452 Comm: syz.4.1830 Tainted: G L syzkaller #0 PREEMPT(full) [ 828.636018][T13452] Tainted: [L]=SOFTLOCKUP [ 828.636023][T13452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 828.636033][T13452] Call Trace: [ 828.636038][T13452] [ 828.636045][T13452] dump_stack_lvl+0x100/0x190 [ 828.636073][T13452] should_fail_ex.cold+0x5/0xa [ 828.636093][T13452] should_failslab+0xc2/0x120 [ 828.636110][T13452] __kmalloc_cache_noprof+0x7a/0x6f0 [ 828.636130][T13452] ? mon_bin_open+0x1a8/0x470 [ 828.636147][T13452] ? lockdep_init_map_type+0x5c/0x250 [ 828.636179][T13452] mon_bin_open+0x1a8/0x470 [ 828.636197][T13452] ? __pfx_mon_bin_open+0x10/0x10 [ 828.636215][T13452] chrdev_open+0x234/0x6a0 [ 828.636232][T13452] ? __pfx_apparmor_file_open+0x10/0x10 [ 828.636248][T13452] ? __pfx_chrdev_open+0x10/0x10 [ 828.636265][T13452] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 828.636285][T13452] do_dentry_open+0x6d8/0x1660 [ 828.636301][T13452] ? __pfx_chrdev_open+0x10/0x10 [ 828.636322][T13452] vfs_open+0x82/0x3f0 [ 828.636347][T13452] path_openat+0x208c/0x31a0 [ 828.636369][T13452] ? __pfx_path_openat+0x10/0x10 [ 828.636392][T13452] do_file_open+0x20e/0x430 [ 828.636410][T13452] ? __pfx_do_file_open+0x10/0x10 [ 828.636440][T13452] ? alloc_fd+0x476/0x790 [ 828.636459][T13452] ? do_getname+0x191/0x390 [ 828.636479][T13452] do_sys_openat2+0x10d/0x1e0 [ 828.636498][T13452] ? __pfx_do_sys_openat2+0x10/0x10 [ 828.636519][T13452] ? __fget_files+0x21f/0x3d0 [ 828.636537][T13452] __x64_sys_openat+0x12d/0x210 [ 828.636557][T13452] ? __pfx___x64_sys_openat+0x10/0x10 [ 828.636584][T13452] do_syscall_64+0x106/0xf80 [ 828.636606][T13452] ? clear_bhb_loop+0x40/0x90 [ 828.636624][T13452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.636644][T13452] RIP: 0033:0x7ff48f39c799 [ 828.636658][T13452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 828.636673][T13452] RSP: 002b:00007ff4901df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 828.636689][T13452] RAX: ffffffffffffffda RBX: 00007ff48f615fa0 RCX: 00007ff48f39c799 [ 828.636699][T13452] RDX: 0000000000002040 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 828.636709][T13452] RBP: 00007ff48f432c99 R08: 0000000000000000 R09: 0000000000000000 [ 828.636718][T13452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 828.636728][T13452] R13: 00007ff48f616038 R14: 00007ff48f615fa0 R15: 00007ffc2407d628 [ 828.636748][T13452] [ 829.818449][T13483] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1838'. [ 830.106457][T13476] zswap: compressor not available [ 830.360649][T13487] netlink: 326 bytes leftover after parsing attributes in process `syz.4.1839'. [ 834.763684][T13544] netlink: 252 bytes leftover after parsing attributes in process `syz.4.1852'. [ 835.444852][T13549] netlink: Failed to add  helper -22 [ 835.737399][T13550] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1855'. [ 835.866015][T13550] bond_slave_0: entered allmulticast mode [ 838.173885][T13574] futex_wake_op: syz.2.1863 tries to shift op by -2048; fix this program [ 839.139929][T13593] dlm: non-version read from control device 255 [ 839.535852][T13603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1869'. [ 839.806987][T13608] FAULT_INJECTION: forcing a failure. [ 839.806987][T13608] name failslab, interval 1, probability 0, space 0, times 0 [ 839.959503][T13608] CPU: 0 UID: 0 PID: 13608 Comm: syz.4.1870 Tainted: G L syzkaller #0 PREEMPT(full) [ 839.959531][T13608] Tainted: [L]=SOFTLOCKUP [ 839.959536][T13608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 839.959546][T13608] Call Trace: [ 839.959551][T13608] [ 839.959558][T13608] dump_stack_lvl+0x100/0x190 [ 839.959586][T13608] should_fail_ex.cold+0x5/0xa [ 839.959606][T13608] should_failslab+0xc2/0x120 [ 839.959623][T13608] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 839.959647][T13608] ? __d_alloc+0x34/0xa80 [ 839.959670][T13608] __d_alloc+0x34/0xa80 [ 839.959692][T13608] d_alloc_pseudo+0x1c/0xc0 [ 839.959713][T13608] alloc_file_pseudo+0xcf/0x230 [ 839.959735][T13608] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 839.959760][T13608] __shmem_file_setup+0x221/0x490 [ 839.959782][T13608] ? __pfx___shmem_file_setup+0x10/0x10 [ 839.959805][T13608] ? vm_area_alloc+0x1f/0x160 [ 839.959827][T13608] shmem_zero_setup+0x96/0x1b0 [ 839.959843][T13608] __mmap_region+0x2198/0x29e0 [ 839.959868][T13608] ? __pfx___mmap_region+0x10/0x10 [ 839.959893][T13608] ? set_next_entity+0x11e/0x9c0 [ 839.959918][T13608] ? __lock_acquire+0x4a5/0x2630 [ 839.959936][T13608] ? update_cfs_rq_load_avg+0x51/0x550 [ 839.959961][T13608] ? find_held_lock+0x2b/0x80 [ 839.959975][T13608] ? finish_task_switch.isra.0+0x200/0xb80 [ 839.959991][T13608] ? finish_task_switch.isra.0+0x200/0xb80 [ 839.960015][T13608] ? trace_sched_exit_tp+0x13a/0x180 [ 839.960033][T13608] ? __schedule+0x1000/0x6120 [ 839.960078][T13608] ? rcu_is_watching+0x12/0xc0 [ 839.960100][T13608] ? cap_capable+0x107/0x460 [ 839.960128][T13608] mmap_region+0x180/0x3e0 [ 839.960154][T13608] do_mmap+0xc63/0x12f0 [ 839.960174][T13608] ? __pfx_do_mmap+0x10/0x10 [ 839.960201][T13608] ? __pfx_down_write_killable+0x10/0x10 [ 839.960221][T13608] vm_mmap_pgoff+0x29e/0x470 [ 839.960243][T13608] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 839.960262][T13608] ? do_futex+0x192/0x350 [ 839.960282][T13608] ? __pfx_do_futex+0x10/0x10 [ 839.960304][T13608] ksys_mmap_pgoff+0xe1/0x650 [ 839.960321][T13608] ? __x64_sys_futex+0x34f/0x4d0 [ 839.960339][T13608] ? __x64_sys_futex+0x358/0x4d0 [ 839.960358][T13608] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 839.960374][T13608] ? xfd_validate_state+0x129/0x190 [ 839.960399][T13608] __x64_sys_mmap+0x125/0x190 [ 839.960423][T13608] do_syscall_64+0x106/0xf80 [ 839.960444][T13608] ? clear_bhb_loop+0x40/0x90 [ 839.960462][T13608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.960477][T13608] RIP: 0033:0x7ff48f39c799 [ 839.960491][T13608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 839.960506][T13608] RSP: 002b:00007ff4901df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 839.960520][T13608] RAX: ffffffffffffffda RBX: 00007ff48f615fa0 RCX: 00007ff48f39c799 [ 839.960530][T13608] RDX: 00004000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 839.960539][T13608] RBP: 00007ff48f432c99 R08: 0000000000000401 R09: 0000000000008000 [ 839.960549][T13608] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 839.960558][T13608] R13: 00007ff48f616038 R14: 00007ff48f615fa0 R15: 00007ffc2407d628 [ 839.960578][T13608] [ 840.249194][T13613] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1871'. [ 840.925749][T13620] program syz.2.1875 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 840.933952][T13620] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 841.693380][T13628] FAULT_INJECTION: forcing a failure. [ 841.693380][T13628] name failslab, interval 1, probability 0, space 0, times 0 [ 841.693413][T13628] CPU: 0 UID: 0 PID: 13628 Comm: syz.2.1878 Tainted: G L syzkaller #0 PREEMPT(full) [ 841.693436][T13628] Tainted: [L]=SOFTLOCKUP [ 841.693442][T13628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 841.693451][T13628] Call Trace: [ 841.693456][T13628] [ 841.693461][T13628] dump_stack_lvl+0x100/0x190 [ 841.693489][T13628] should_fail_ex.cold+0x5/0xa [ 841.693508][T13628] should_failslab+0xc2/0x120 [ 841.693526][T13628] __kvmalloc_node_noprof+0xfa/0xa00 [ 841.693550][T13628] ? seq_read_iter+0x819/0x1270 [ 841.693578][T13628] seq_read_iter+0x819/0x1270 [ 841.693603][T13628] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 841.693633][T13628] kernfs_fop_read_iter+0x46c/0x610 [ 841.693658][T13628] copy_splice_read+0x4ba/0xb90 [ 841.693679][T13628] ? __pfx_copy_splice_read+0x10/0x10 [ 841.693696][T13628] ? look_up_lock_class+0x55/0x120 [ 841.693724][T13628] ? lockdep_init_map_type+0x5c/0x250 [ 841.693746][T13628] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 841.693772][T13628] ? __pfx_copy_splice_read+0x10/0x10 [ 841.693788][T13628] do_splice_read+0x285/0x370 [ 841.693806][T13628] splice_direct_to_actor+0x2a1/0xa30 [ 841.693823][T13628] ? __pfx_direct_splice_actor+0x10/0x10 [ 841.693843][T13628] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 841.693866][T13628] do_splice_direct+0x174/0x240 [ 841.693883][T13628] ? __pfx_do_splice_direct+0x10/0x10 [ 841.693900][T13628] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 841.693928][T13628] ? rw_verify_area+0xce/0x6d0 [ 841.693952][T13628] do_sendfile+0xadc/0xe20 [ 841.693993][T13628] ? __pfx_do_sendfile+0x10/0x10 [ 841.694022][T13628] ? __x64_sys_futex+0x34f/0x4d0 [ 841.694043][T13628] ? __x64_sys_futex+0x358/0x4d0 [ 841.694065][T13628] __x64_sys_sendfile64+0x1d8/0x220 [ 841.694084][T13628] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 841.694108][T13628] do_syscall_64+0x106/0xf80 [ 841.694130][T13628] ? clear_bhb_loop+0x40/0x90 [ 841.694149][T13628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.694166][T13628] RIP: 0033:0x7fa0cf19c799 [ 841.694180][T13628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 841.694195][T13628] RSP: 002b:00007fa0cff78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 841.694210][T13628] RAX: ffffffffffffffda RBX: 00007fa0cf415fa0 RCX: 00007fa0cf19c799 [ 841.694222][T13628] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 841.694232][T13628] RBP: 00007fa0cf232c99 R08: 0000000000000000 R09: 0000000000000000 [ 841.694242][T13628] R10: 0000400000000006 R11: 0000000000000246 R12: 0000000000000000 [ 841.694251][T13628] R13: 00007fa0cf416038 R14: 00007fa0cf415fa0 R15: 00007ffdc3965ba8 [ 841.694271][T13628] [ 844.899562][T13650] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1884'. [ 845.944558][T13656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1887'. [ 845.955821][T13654] FAULT_INJECTION: forcing a failure. [ 845.955821][T13654] name failslab, interval 1, probability 0, space 0, times 0 [ 846.079763][T13654] CPU: 0 UID: 0 PID: 13654 Comm: syz.1.1886 Tainted: G L syzkaller #0 PREEMPT(full) [ 846.079793][T13654] Tainted: [L]=SOFTLOCKUP [ 846.079799][T13654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 846.079808][T13654] Call Trace: [ 846.079813][T13654] [ 846.079819][T13654] dump_stack_lvl+0x100/0x190 [ 846.079849][T13654] should_fail_ex.cold+0x5/0xa [ 846.079868][T13654] should_failslab+0xc2/0x120 [ 846.079885][T13654] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 846.079909][T13654] ? ima_inode_get+0x11f/0x580 [ 846.080018][T13654] ima_inode_get+0x11f/0x580 [ 846.080043][T13654] process_measurement+0x1213/0x2350 [ 846.080070][T13654] ? stack_depot_save_flags+0x27/0x9d0 [ 846.080089][T13654] ? stack_trace_save+0x8e/0xc0 [ 846.080105][T13654] ? __pfx_process_measurement+0x10/0x10 [ 846.080128][T13654] ? __lock_acquire+0x4a5/0x2630 [ 846.080148][T13654] ? __kasan_slab_alloc+0x89/0x90 [ 846.080161][T13654] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 846.080183][T13654] ? init_file+0x95/0x480 [ 846.080199][T13654] ? alloc_empty_file+0x73/0x1c0 [ 846.080215][T13654] ? alloc_file_pseudo+0x13a/0x230 [ 846.080233][T13654] ? ksys_mmap_pgoff+0x232/0x650 [ 846.080247][T13654] ? __x64_sys_mmap+0x125/0x190 [ 846.080268][T13654] ? do_syscall_64+0x106/0xf80 [ 846.080306][T13654] ? __pfx_aa_file_perm+0x10/0x10 [ 846.080332][T13654] ima_file_mmap+0x1c4/0x1f0 [ 846.080355][T13654] ? __pfx_ima_file_mmap+0x10/0x10 [ 846.080383][T13654] security_mmap_file+0x278/0x9b0 [ 846.080405][T13654] vm_mmap_pgoff+0xec/0x470 [ 846.080424][T13654] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 846.080439][T13654] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 846.080459][T13654] ? hugetlbfs_get_inode+0x36e/0x750 [ 846.080482][T13654] ksys_mmap_pgoff+0x273/0x650 [ 846.080498][T13654] ? __x64_sys_futex+0x358/0x4d0 [ 846.080527][T13654] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 846.080544][T13654] ? xfd_validate_state+0x129/0x190 [ 846.080570][T13654] __x64_sys_mmap+0x125/0x190 [ 846.080595][T13654] do_syscall_64+0x106/0xf80 [ 846.080616][T13654] ? clear_bhb_loop+0x40/0x90 [ 846.080635][T13654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.080650][T13654] RIP: 0033:0x7fe71699c799 [ 846.080663][T13654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 846.080678][T13654] RSP: 002b:00007fe7178c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 846.080693][T13654] RAX: ffffffffffffffda RBX: 00007fe716c15fa0 RCX: 00007fe71699c799 [ 846.080702][T13654] RDX: 00004000000000df RSI: 0000000000000008 RDI: 0000000000000000 [ 846.080712][T13654] RBP: 00007fe716a32c99 R08: 0000000000000401 R09: 0000300000000000 [ 846.080721][T13654] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 846.080730][T13654] R13: 00007fe716c16038 R14: 00007fe716c15fa0 R15: 00007ffd252bd768 [ 846.080750][T13654] [ 847.878495][ T8553] Bluetooth: hci4: unexpected event 0x10 length: 440 > 1 [ 847.880038][ T8553] Bluetooth: hci4: hardware error 0x00 [ 849.962795][ T8553] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 851.585826][T13720] usb usb24: usbfs: process 13720 (syz.2.1900) did not claim interface 0 before use [ 851.802748][T13726] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1900'. [ 853.228514][T13742] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1908'. [ 857.540762][T13778] FAULT_INJECTION: forcing a failure. [ 857.540762][T13778] name failslab, interval 1, probability 0, space 0, times 0 [ 857.696253][T13778] CPU: 0 UID: 0 PID: 13778 Comm: syz.4.1918 Tainted: G L syzkaller #0 PREEMPT(full) [ 857.696278][T13778] Tainted: [L]=SOFTLOCKUP [ 857.696283][T13778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 857.696291][T13778] Call Trace: [ 857.696297][T13778] [ 857.696303][T13778] dump_stack_lvl+0x100/0x190 [ 857.696333][T13778] should_fail_ex.cold+0x5/0xa [ 857.696352][T13778] ? tomoyo_realpath_from_path+0xb6/0x690 [ 857.696373][T13778] should_failslab+0xc2/0x120 [ 857.696389][T13778] __kmalloc_noprof+0xe0/0x850 [ 857.696421][T13778] tomoyo_realpath_from_path+0xb6/0x690 [ 857.696444][T13778] tomoyo_path_number_perm+0x23c/0x580 [ 857.696459][T13778] ? tomoyo_path_number_perm+0x22e/0x580 [ 857.696477][T13778] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 857.696511][T13778] ? find_held_lock+0x2b/0x80 [ 857.696525][T13778] ? __fget_files+0x215/0x3d0 [ 857.696539][T13778] ? hook_file_ioctl_common+0x146/0x410 [ 857.696559][T13778] ? __fget_files+0x21f/0x3d0 [ 857.696576][T13778] security_file_ioctl+0xd3/0x230 [ 857.696594][T13778] __x64_sys_ioctl+0xb7/0x210 [ 857.696615][T13778] do_syscall_64+0x106/0xf80 [ 857.696636][T13778] ? clear_bhb_loop+0x40/0x90 [ 857.696654][T13778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.696669][T13778] RIP: 0033:0x7ff48f39c799 [ 857.696681][T13778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 857.696695][T13778] RSP: 002b:00007ff4901df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 857.696709][T13778] RAX: ffffffffffffffda RBX: 00007ff48f615fa0 RCX: 00007ff48f39c799 [ 857.696718][T13778] RDX: 0000200000000240 RSI: 0000000050009404 RDI: 0000000000000003 [ 857.696726][T13778] RBP: 00007ff4901df090 R08: 0000000000000000 R09: 0000000000000000 [ 857.696735][T13778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 857.696743][T13778] R13: 00007ff48f616038 R14: 00007ff48f615fa0 R15: 00007ffc2407d628 [ 857.696762][T13778] [ 857.696769][T13778] ERROR: Out of memory at tomoyo_realpath_from_path. [ 858.298435][T13782] loop6: detected capacity change from 0 to 8192 [ 859.871522][ T30] audit: type=1400 audit(2548.426:14): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=13795 comm="syz.2.1925" [ 860.540077][ T30] audit: type=1800 audit(2549.096:15): pid=13806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1927" name="discovery_nqn" dev="configfs" ino=509982 res=0 errno=0 [ 863.109628][T13834] netlink: 252 bytes leftover after parsing attributes in process `syz.2.1936'. [ 863.741092][T13843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1938'. [ 863.958701][T13845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1939'. [ 864.088186][T13845] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 865.802233][T13864] FAULT_INJECTION: forcing a failure. [ 865.802233][T13864] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 865.985961][T13864] CPU: 0 UID: 0 PID: 13864 Comm: syz.2.1945 Tainted: G L syzkaller #0 PREEMPT(full) [ 865.986007][T13864] Tainted: [L]=SOFTLOCKUP [ 865.986012][T13864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 865.986022][T13864] Call Trace: [ 865.986027][T13864] [ 865.986034][T13864] dump_stack_lvl+0x100/0x190 [ 865.986063][T13864] should_fail_ex.cold+0x5/0xa [ 865.986080][T13864] ? prepare_alloc_pages+0x16d/0x5f0 [ 865.986100][T13864] should_fail_alloc_page+0xeb/0x140 [ 865.986117][T13864] prepare_alloc_pages+0x1f0/0x5f0 [ 865.986134][T13864] ? rcu_is_watching+0x12/0xc0 [ 865.986158][T13864] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 865.986180][T13864] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 865.986203][T13864] ? __lock_acquire+0x4a5/0x2630 [ 865.986232][T13864] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 865.986254][T13864] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 865.986278][T13864] ? is_bpf_text_address+0x8a/0x1a0 [ 865.986300][T13864] ? bpf_ksym_find+0x124/0x1c0 [ 865.986318][T13864] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 865.986347][T13864] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 865.986365][T13864] ? policy_nodemask+0xed/0x4f0 [ 865.986384][T13864] alloc_pages_mpol+0x1fb/0x550 [ 865.986402][T13864] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 865.986418][T13864] ? do_raw_spin_lock+0x128/0x260 [ 865.986440][T13864] ? find_held_lock+0x2b/0x80 [ 865.986454][T13864] ? __pud_alloc+0x529/0x6e0 [ 865.986474][T13864] alloc_pages_noprof+0x131/0x390 [ 865.986492][T13864] __pmd_alloc+0x3b/0x950 [ 865.986508][T13864] ? __pud_alloc+0x52e/0x6e0 [ 865.986527][T13864] copy_page_range+0x4531/0x6570 [ 865.986551][T13864] ? __lock_acquire+0x4a5/0x2630 [ 865.986583][T13864] ? mas_wr_store_entry+0x6d2/0x2390 [ 865.986601][T13864] ? __pfx_copy_page_range+0x10/0x10 [ 865.986624][T13864] ? mas_store+0x666/0xac0 [ 865.986648][T13864] ? __pfx_mas_store+0x10/0x10 [ 865.986668][T13864] ? __pfx___vma_start_write+0x10/0x10 [ 865.986694][T13864] dup_mmap+0xd25/0x2180 [ 865.986720][T13864] ? __pfx_dup_mmap+0x10/0x10 [ 865.986737][T13864] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 865.986762][T13864] ? __lock_acquire+0x4a5/0x2630 [ 865.986781][T13864] ? find_held_lock+0x2b/0x80 [ 865.986794][T13864] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 865.986828][T13864] copy_process+0x7523/0x7a40 [ 865.986846][T13864] ? __pfx___schedule+0x10/0x10 [ 865.986875][T13864] ? __pfx_copy_process+0x10/0x10 [ 865.986897][T13864] ? _copy_from_user+0x59/0xd0 [ 865.986918][T13864] kernel_clone+0xfc/0x9a0 [ 865.986937][T13864] ? __pfx_kernel_clone+0x10/0x10 [ 865.986953][T13864] ? futex_private_hash_put+0x107/0x1c0 [ 865.986977][T13864] ? __pfx_futex_wake+0x10/0x10 [ 865.987001][T13864] __do_sys_clone3+0x214/0x290 [ 865.987019][T13864] ? __pfx___do_sys_clone3+0x10/0x10 [ 865.987062][T13864] do_syscall_64+0x106/0xf80 [ 865.987083][T13864] ? clear_bhb_loop+0x40/0x90 [ 865.987102][T13864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.987117][T13864] RIP: 0033:0x7fa0cf19c799 [ 865.987131][T13864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 865.987145][T13864] RSP: 002b:00007fa0cd3f5ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 865.987159][T13864] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fa0cf19c799 [ 865.987169][T13864] RDX: 00007fa0cd3f5f10 RSI: 0000000000000058 RDI: 00007fa0cd3f5f10 [ 865.987179][T13864] RBP: 00007fa0cf232c99 R08: 0000000000000000 R09: 0000000000000058 [ 865.987188][T13864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 865.987197][T13864] R13: 00007fa0cf416128 R14: 00007fa0cf416090 R15: 00007ffdc3965ba8 [ 865.987218][T13864] [ 866.759268][T13862] input: jJǸ-9%vJ86 as /devices/virtual/input/input21 [ 870.214991][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.221295][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.363388][T13901] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1952'. [ 871.504267][T13906] binder: 13905:13906 ioctl 40046210 0 returned -14 [ 872.333617][T13909] FAULT_INJECTION: forcing a failure. [ 872.333617][T13909] name failslab, interval 1, probability 0, space 0, times 0 [ 872.704293][T13909] CPU: 0 UID: 0 PID: 13909 Comm: syz.2.1956 Tainted: G L syzkaller #0 PREEMPT(full) [ 872.704318][T13909] Tainted: [L]=SOFTLOCKUP [ 872.704324][T13909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 872.704332][T13909] Call Trace: [ 872.704338][T13909] [ 872.704344][T13909] dump_stack_lvl+0x100/0x190 [ 872.704371][T13909] should_fail_ex.cold+0x5/0xa [ 872.704389][T13909] should_failslab+0xc2/0x120 [ 872.704405][T13909] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 872.704427][T13909] ? do_getname+0x35/0x390 [ 872.704448][T13909] do_getname+0x35/0x390 [ 872.704467][T13909] do_sys_openat2+0xc5/0x1e0 [ 872.704486][T13909] ? __pfx_do_sys_openat2+0x10/0x10 [ 872.704510][T13909] __x64_sys_openat+0x12d/0x210 [ 872.704529][T13909] ? __pfx___x64_sys_openat+0x10/0x10 [ 872.704554][T13909] do_syscall_64+0x106/0xf80 [ 872.704575][T13909] ? clear_bhb_loop+0x40/0x90 [ 872.704592][T13909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.704607][T13909] RIP: 0033:0x7fa0cf19c799 [ 872.704619][T13909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 872.704633][T13909] RSP: 002b:00007fa0cff78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 872.704647][T13909] RAX: ffffffffffffffda RBX: 00007fa0cf415fa0 RCX: 00007fa0cf19c799 [ 872.704657][T13909] RDX: 0000000000080000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 872.704665][T13909] RBP: 00007fa0cf232c99 R08: 0000000000000000 R09: 0000000000000000 [ 872.704674][T13909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 872.704682][T13909] R13: 00007fa0cf416038 R14: 00007fa0cf415fa0 R15: 00007ffdc3965ba8 [ 872.704700][T13909] [ 874.092533][T13919] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1958'. [ 879.561028][T13933] MTRR 1 not used [ 883.473250][T13977] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1970'. [ 883.590067][T13977] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1970'. [ 884.019391][T13978] netlink: 110 bytes leftover after parsing attributes in process `syz.4.1970'. [ 886.114614][T14002] NFSD: Failed to start, no listeners configured. [ 886.190971][T13993] FAULT_INJECTION: forcing a failure. [ 886.190971][T13993] name failslab, interval 1, probability 0, space 0, times 0 [ 886.306977][T13993] CPU: 0 UID: 0 PID: 13993 Comm: syz.2.1976 Tainted: G L syzkaller #0 PREEMPT(full) [ 886.307001][T13993] Tainted: [L]=SOFTLOCKUP [ 886.307007][T13993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 886.307015][T13993] Call Trace: [ 886.307021][T13993] [ 886.307026][T13993] dump_stack_lvl+0x100/0x190 [ 886.307054][T13993] should_fail_ex.cold+0x5/0xa [ 886.307072][T13993] ? drm_atomic_state_init+0x190/0x490 [ 886.307091][T13993] should_failslab+0xc2/0x120 [ 886.307108][T13993] __kmalloc_noprof+0xe0/0x850 [ 886.307133][T13993] drm_atomic_state_init+0x190/0x490 [ 886.307150][T13993] ? kasan_save_track+0x14/0x30 [ 886.307166][T13993] drm_atomic_state_alloc+0xd3/0x120 [ 886.307184][T13993] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 886.307206][T13993] ? trace_contention_end+0x140/0x180 [ 886.307226][T13993] ? __mutex_lock+0x26a/0x1b90 [ 886.307249][T13993] ? __mutex_lock+0x26a/0x1b90 [ 886.307269][T13993] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 886.307290][T13993] ? drm_master_internal_acquire+0x21/0x80 [ 886.307328][T13993] drm_client_modeset_commit_locked+0x14d/0x580 [ 886.307351][T13993] drm_client_modeset_commit+0x4f/0x80 [ 886.307371][T13993] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 886.307396][T13993] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 886.307419][T13993] drm_fbdev_client_restore+0x1b/0x30 [ 886.307436][T13993] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 886.307452][T13993] drm_client_dev_restore+0x205/0x2a0 [ 886.307475][T13993] drm_release+0x2c6/0x360 [ 886.307494][T13993] ? __pfx_drm_release+0x10/0x10 [ 886.307513][T13993] __fput+0x3ff/0xb40 [ 886.307535][T13993] task_work_run+0x150/0x240 [ 886.307556][T13993] ? __pfx_task_work_run+0x10/0x10 [ 886.307582][T13993] exit_to_user_mode_loop+0x100/0x4a0 [ 886.307603][T13993] do_syscall_64+0x668/0xf80 [ 886.307622][T13993] ? clear_bhb_loop+0x40/0x90 [ 886.307640][T13993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.307654][T13993] RIP: 0033:0x7fa0cf19c799 [ 886.307667][T13993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 886.307681][T13993] RSP: 002b:00007fa0cff78028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 886.307695][T13993] RAX: 0000000000000000 RBX: 00007fa0cf415fa0 RCX: 00007fa0cf19c799 [ 886.307704][T13993] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 886.307712][T13993] RBP: 00007fa0cf232c99 R08: 0000000000000000 R09: 0000000000000000 [ 886.307720][T13993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 886.307728][T13993] R13: 00007fa0cf416038 R14: 00007fa0cf415fa0 R15: 00007ffdc3965ba8 [ 886.307754][T13993] [ 887.401507][T13994] Invalid ELF header magic: != ELF [ 889.794217][T14016] FAULT_INJECTION: forcing a failure. [ 889.794217][T14016] name failslab, interval 1, probability 0, space 0, times 0 [ 890.033814][T14016] CPU: 0 UID: 0 PID: 14016 Comm: syz.4.1979 Tainted: G L syzkaller #0 PREEMPT(full) [ 890.033840][T14016] Tainted: [L]=SOFTLOCKUP [ 890.033845][T14016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 890.033854][T14016] Call Trace: [ 890.033859][T14016] [ 890.033865][T14016] dump_stack_lvl+0x100/0x190 [ 890.033894][T14016] should_fail_ex.cold+0x5/0xa [ 890.033912][T14016] ? alloc_pipe_info+0x1ec/0x590 [ 890.033928][T14016] should_failslab+0xc2/0x120 [ 890.033944][T14016] __kmalloc_noprof+0xe0/0x850 [ 890.033970][T14016] alloc_pipe_info+0x1ec/0x590 [ 890.033986][T14016] splice_direct_to_actor+0x78f/0xa30 [ 890.034004][T14016] ? __lock_acquire+0x4a5/0x2630 [ 890.034022][T14016] ? __pfx_direct_splice_actor+0x10/0x10 [ 890.034037][T14016] ? __pfx_aa_file_perm+0x10/0x10 [ 890.034059][T14016] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 890.034079][T14016] do_splice_direct+0x174/0x240 [ 890.034094][T14016] ? __pfx_do_splice_direct+0x10/0x10 [ 890.034110][T14016] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 890.034135][T14016] ? rw_verify_area+0xce/0x6d0 [ 890.034156][T14016] do_sendfile+0xadc/0xe20 [ 890.034181][T14016] ? __pfx_do_sendfile+0x10/0x10 [ 890.034202][T14016] ? __fget_files+0x21f/0x3d0 [ 890.034220][T14016] __x64_sys_sendfile64+0x1d8/0x220 [ 890.034236][T14016] ? ksys_write+0x1ac/0x250 [ 890.034249][T14016] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 890.034271][T14016] do_syscall_64+0x106/0xf80 [ 890.034293][T14016] ? clear_bhb_loop+0x40/0x90 [ 890.034311][T14016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.034325][T14016] RIP: 0033:0x7ff48f39c799 [ 890.034337][T14016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 890.034351][T14016] RSP: 002b:00007ff4901df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 890.034365][T14016] RAX: ffffffffffffffda RBX: 00007ff48f615fa0 RCX: 00007ff48f39c799 [ 890.034374][T14016] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 890.034382][T14016] RBP: 00007ff4901df090 R08: 0000000000000000 R09: 0000000000000000 [ 890.034397][T14016] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 890.034405][T14016] R13: 00007ff48f616038 R14: 00007ff48f615fa0 R15: 00007ffc2407d628 [ 890.034424][T14016] [ 894.956525][T14022] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1981'. [ 895.098531][T14025] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1982'. [ 895.136354][T14023] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1981'. [ 895.270701][T14026] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1981'. [ 897.358783][T14045] can: request_module (can-proto-0) failed. [ 904.320468][T14083] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 905.969816][T14106] netlink: 'syz.1.2000': attribute type 1 has an invalid length. [ 906.115744][T14106] ptrace attach of "./syz-executor exec"[5821] was attempted by ""[14106] [ 906.394019][ T8553] Bluetooth: hci1: command 0x0406 tx timeout [ 917.495309][T12995] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 917.504558][T12995] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 917.512345][T12995] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 917.520301][T12995] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 917.527939][T12995] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 918.750585][T14188] nvme_fcloop: unknown parameter or missing value '7' [ 918.913964][T14179] chnl_net:caif_netlink_parms(): no params data found [ 919.597112][T12995] Bluetooth: hci5: command tx timeout [ 919.788960][T14179] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.888907][T14179] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.896083][T14179] bridge_slave_0: entered allmulticast mode [ 920.023387][ T8553] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 920.033178][ T8553] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 920.041310][ T8553] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 920.050738][ T8553] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 920.058552][ T8553] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 920.147674][T14179] bridge_slave_0: entered promiscuous mode [ 920.194186][T14179] bridge0: port 2(bridge_slave_1) entered blocking state [ 920.279074][T14179] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.346337][T14179] bridge_slave_1: entered allmulticast mode [ 920.457973][T14179] bridge_slave_1: entered promiscuous mode [ 920.909014][T14179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 921.010346][T14179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 921.299378][T14179] team0: Port device team_slave_0 added [ 921.432462][T14179] team0: Port device team_slave_1 added [ 921.678264][ T8553] Bluetooth: hci5: command tx timeout [ 922.158626][ T8553] Bluetooth: hci6: command tx timeout [ 922.733906][T14179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 922.818759][T14179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 923.077196][T14179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 923.182724][T14179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 923.259491][T14179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 923.519322][T14179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 923.759235][ T8553] Bluetooth: hci5: command tx timeout [ 924.239609][ T8553] Bluetooth: hci6: command tx timeout [ 924.562765][T14179] hsr_slave_0: entered promiscuous mode [ 924.615974][T14179] hsr_slave_1: entered promiscuous mode [ 924.709294][T14179] debugfs: 'hsr0' already exists in 'hsr' [ 924.739687][T14179] Cannot create hsr debugfs directory [ 925.840238][ T8553] Bluetooth: hci5: command tx timeout [ 926.324878][ T8553] Bluetooth: hci6: command tx timeout [ 926.665897][T14227] rnbd_client L213: map_device: Parameters missing [ 928.185321][T14200] chnl_net:caif_netlink_parms(): no params data found [ 928.406492][ T8553] Bluetooth: hci6: command tx timeout [ 930.243386][T14200] bridge0: port 1(bridge_slave_0) entered blocking state [ 930.252234][T14200] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.382956][T14200] bridge_slave_0: entered allmulticast mode [ 930.432367][T14200] bridge_slave_0: entered promiscuous mode [ 930.789361][ T8721] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.992884][T14200] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.062507][T14200] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.114059][T14200] bridge_slave_1: entered allmulticast mode [ 931.172038][T14200] bridge_slave_1: entered promiscuous mode [ 931.448064][ T8721] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.692520][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.700887][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.877823][ T8721] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.990049][T14200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 932.065687][T14200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 932.387999][ T8721] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.553249][T14179] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 932.735296][T14200] team0: Port device team_slave_0 added [ 932.967655][T14179] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 933.056274][T14179] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 933.118739][T14200] team0: Port device team_slave_1 added [ 933.167025][T14179] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 933.567141][T14200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 933.657492][T14200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 933.769457][T14249] futex_wake_op: syz.4.2031 tries to shift op by -2048; fix this program [ 933.851621][T14249] futex_wake_op: syz.4.2031 tries to shift op by -2048; fix this program [ 933.865185][T14200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 933.943816][T14200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 934.017428][T14200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 934.212763][T14200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 934.865342][T14200] hsr_slave_0: entered promiscuous mode [ 934.943537][T14200] hsr_slave_1: entered promiscuous mode [ 934.991371][T14200] debugfs: 'hsr0' already exists in 'hsr' [ 935.036012][T14200] Cannot create hsr debugfs directory [ 935.099322][ T8721] bridge_slave_1: left allmulticast mode [ 935.125922][ T8721] bridge_slave_1: left promiscuous mode [ 935.156397][ T8721] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.291688][ T8721] bridge_slave_0: left allmulticast mode [ 935.328814][ T8721] bridge_slave_0: left promiscuous mode [ 935.388851][ T8721] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.907474][ T8721] tipc: Left network mode [ 937.561168][T14179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 937.983991][T14179] 8021q: adding VLAN 0 to HW filter on device team0 [ 938.378213][ T9649] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.385338][ T9649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 938.528483][ T9649] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.535583][ T9649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 939.826247][T14179] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 940.971527][T14200] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 941.251615][ T8721] hsr_slave_0: left promiscuous mode [ 941.343748][ T8721] hsr_slave_1: left promiscuous mode [ 941.396161][ T8721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 941.462448][ T8721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 941.513960][ T8721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 941.513980][ T8721] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 941.631846][ T8721] veth1_macvtap: left promiscuous mode [ 941.631966][ T8721] veth0_macvtap: left promiscuous mode [ 941.632086][ T8721] veth1_vlan: left promiscuous mode [ 941.632141][ T8721] veth0_vlan: left promiscuous mode [ 943.550668][T14200] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 943.705243][T14200] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 943.762200][T14200] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 943.972151][T14179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 945.437165][T14200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 945.816912][ T8721] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.041531][T14200] 8021q: adding VLAN 0 to HW filter on device team0 [ 946.404055][ T8721] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.643552][ T8721] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.846923][ T8721] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.926020][ T8552] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.933187][ T8552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 947.236455][ T8584] bridge0: port 2(bridge_slave_1) entered blocking state [ 947.243606][ T8584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 947.517257][T14179] veth0_vlan: entered promiscuous mode [ 947.617295][T14179] veth1_vlan: entered promiscuous mode [ 948.270708][T14179] veth0_macvtap: entered promiscuous mode [ 948.356003][T14179] veth1_macvtap: entered promiscuous mode [ 948.592812][T14179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 948.676143][T14179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 950.874397][ T8721] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 951.007522][ T8721] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 951.113887][ T8721] bond0 (unregistering): Released all slaves [ 951.356004][ T8584] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.421521][ T8584] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.572357][ T8584] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.683379][ T8584] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.804757][T14200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 951.887759][T14392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2047'. [ 952.391644][ T9661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 952.494295][ T9661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.086251][ T8552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.187153][ T8552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.886620][ T8721] hsr_slave_0: left promiscuous mode [ 953.960571][ T8721] hsr_slave_1: left promiscuous mode [ 954.036331][ T8721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 954.116544][ T8721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 954.186869][ T8721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 954.194270][ T8721] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 954.416773][ T8721] veth1_macvtap: left promiscuous mode [ 954.422431][ T8721] veth0_macvtap: left promiscuous mode [ 954.518933][ T8721] veth1_vlan: left promiscuous mode [ 954.524188][ T8721] veth0_vlan: left promiscuous mode [ 956.510701][ T8721] team0 (unregistering): Port device team_slave_1 removed [ 956.728772][ T8721] team0 (unregistering): Port device team_slave_0 removed [ 957.698843][T14200] veth0_vlan: entered promiscuous mode [ 957.764766][T14200] veth1_vlan: entered promiscuous mode [ 957.966116][T14200] veth0_macvtap: entered promiscuous mode [ 957.996461][T14433] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2052'. [ 958.100645][T14200] veth1_macvtap: entered promiscuous mode [ 958.264297][T14200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 958.415651][T14200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 958.566702][ T9661] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.575527][ T9661] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.784378][ T9661] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.948754][ T9661] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.513733][ T9661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 959.597077][ T9661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 959.830969][ T8722] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 959.917557][ T8722] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 960.398921][T14453] zswap: compressor not available [ 961.228888][T14463] netlink: 334 bytes leftover after parsing attributes in process `syz.5.2056'. [ 965.701220][T14515] FAULT_INJECTION: forcing a failure. [ 965.701220][T14515] name fail_futex, interval 1, probability 0, space 0, times 0 [ 965.867233][T14515] CPU: 0 UID: 0 PID: 14515 Comm: syz.6.2061 Tainted: G L syzkaller #0 PREEMPT(full) [ 965.867258][T14515] Tainted: [L]=SOFTLOCKUP [ 965.867263][T14515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 965.867272][T14515] Call Trace: [ 965.867277][T14515] [ 965.867283][T14515] dump_stack_lvl+0x100/0x190 [ 965.867314][T14515] should_fail_ex.cold+0x5/0xa [ 965.867332][T14515] get_futex_key+0x295/0x1620 [ 965.867353][T14515] ? __pfx_get_futex_key+0x10/0x10 [ 965.867369][T14515] ? lock_acquire+0x1cf/0x380 [ 965.867393][T14515] futex_wake+0xea/0x530 [ 965.867415][T14515] ? __pfx_futex_wake+0x10/0x10 [ 965.867435][T14515] ? exit_mm_release+0x19/0x30 [ 965.867459][T14515] do_futex+0x32b/0x350 [ 965.867478][T14515] ? __pfx_do_futex+0x10/0x10 [ 965.867494][T14515] ? __might_fault+0xc5/0x140 [ 965.867519][T14515] mm_release+0x24a/0x2f0 [ 965.867534][T14515] do_exit+0x704/0x2b60 [ 965.867555][T14515] ? __pfx_do_exit+0x10/0x10 [ 965.867573][T14515] ? do_raw_spin_lock+0x128/0x260 [ 965.867592][T14515] ? find_held_lock+0x2b/0x80 [ 965.867605][T14515] ? get_signal+0x7e0/0x21e0 [ 965.867623][T14515] do_group_exit+0xd5/0x2a0 [ 965.867642][T14515] get_signal+0x1ec7/0x21e0 [ 965.867664][T14515] ? __pfx_get_signal+0x10/0x10 [ 965.867680][T14515] ? do_futex+0x192/0x350 [ 965.867700][T14515] arch_do_signal_or_restart+0x91/0x770 [ 965.867720][T14515] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 965.867743][T14515] ? __pfx___x64_sys_futex+0x10/0x10 [ 965.867765][T14515] exit_to_user_mode_loop+0x86/0x4a0 [ 965.867786][T14515] do_syscall_64+0x668/0xf80 [ 965.867807][T14515] ? clear_bhb_loop+0x40/0x90 [ 965.867824][T14515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.867838][T14515] RIP: 0033:0x7ff0d679c799 [ 965.867850][T14515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 965.867867][T14515] RSP: 002b:00007ff0d76380e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 965.867881][T14515] RAX: fffffffffffffe00 RBX: 00007ff0d6a15fa8 RCX: 00007ff0d679c799 [ 965.867890][T14515] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff0d6a15fa8 [ 965.867898][T14515] RBP: 00007ff0d6a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 965.867907][T14515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 965.867915][T14515] R13: 00007ff0d6a16038 R14: 00007ffd833c3d70 R15: 00007ffd833c3e58 [ 965.867933][T14515] [ 966.656419][T14520] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2063'. [ 966.722029][T14520] nbd: must specify a size in bytes for the device [ 971.677631][ T8553] Bluetooth: hci6: unexpected event 0x3e length: 726 > 260 [ 971.677654][ T8553] Bluetooth: hci6: unexpected subevent 0x0d length: 725 > 260 [ 971.692721][ T8553] Bluetooth: hci6: Unknown advertising packet type: 0x7f [ 971.692776][ T8553] Bluetooth: hci6: Malformed LE Event: 0x0d [ 973.765848][T14616] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2084'. [ 979.044063][T14699] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22 [ 979.263869][T14701] ================================================================== [ 979.263891][T14701] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 979.264000][T14701] Write of size 8 at addr ffffc900043d9be0 by task syz.5.2104/14701 [ 979.264013][T14701] [ 979.264022][T14701] CPU: 0 UID: 0 PID: 14701 Comm: syz.5.2104 Tainted: G L syzkaller #0 PREEMPT(full) [ 979.264044][T14701] Tainted: [L]=SOFTLOCKUP [ 979.264049][T14701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 979.264059][T14701] Call Trace: [ 979.264064][T14701] [ 979.264070][T14701] dump_stack_lvl+0x100/0x190 [ 979.264092][T14701] print_report+0x156/0x4c9 [ 979.264112][T14701] ? _raw_spin_lock_irqsave+0x52/0x60 [ 979.264133][T14701] ? __virt_addr_valid+0x81/0x620 [ 979.264154][T14701] ? sys_imageblit+0x19fb/0x1d60 [ 979.264173][T14701] kasan_report+0xdf/0x1e0 [ 979.264190][T14701] ? sys_imageblit+0x19fb/0x1d60 [ 979.264212][T14701] sys_imageblit+0x19fb/0x1d60 [ 979.264234][T14701] ? __pfx_sys_imageblit+0x10/0x10 [ 979.264255][T14701] ? drm_fb_helper_damage_area+0xb4/0xe0 [ 979.264278][T14701] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 979.264295][T14701] soft_cursor+0x524/0xa10 [ 979.264313][T14701] ? fb_get_color_depth+0x120/0x250 [ 979.264368][T14701] bit_cursor+0xe58/0x16f0 [ 979.264387][T14701] ? __pfx_bit_cursor+0x10/0x10 [ 979.264407][T14701] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 979.264424][T14701] ? get_color+0x1da/0x450 [ 979.264446][T14701] ? __pfx_bit_cursor+0x10/0x10 [ 979.264462][T14701] fbcon_cursor+0x43c/0x5e0 [ 979.264478][T14701] ? add_softcursor+0x160/0x290 [ 979.264499][T14701] set_cursor+0x1db/0x250 [ 979.264517][T14701] vcs_write+0xba9/0xd60 [ 979.264535][T14701] ? __bpf_trace_sched_exit_tp+0x40/0xc0 [ 979.264560][T14701] ? __pfx_vcs_write+0x10/0x10 [ 979.264578][T14701] ? apparmor_file_permission+0x13f/0x1c0 [ 979.264595][T14701] ? bpf_lsm_file_permission+0x9/0x10 [ 979.264610][T14701] ? security_file_permission+0x76/0x210 [ 979.264628][T14701] ? rw_verify_area+0xce/0x6d0 [ 979.264650][T14701] vfs_write+0x2aa/0x1070 [ 979.264666][T14701] ? __pfx_vcs_write+0x10/0x10 [ 979.264683][T14701] ? __pfx_vfs_write+0x10/0x10 [ 979.264696][T14701] ? find_held_lock+0x2b/0x80 [ 979.264709][T14701] ? __fget_files+0x215/0x3d0 [ 979.264723][T14701] ? __fget_files+0x215/0x3d0 [ 979.264738][T14701] ? __fget_files+0x21f/0x3d0 [ 979.264754][T14701] ksys_write+0x12a/0x250 [ 979.264767][T14701] ? __pfx_ksys_write+0x10/0x10 [ 979.264784][T14701] do_syscall_64+0x106/0xf80 [ 979.264805][T14701] ? clear_bhb_loop+0x40/0x90 [ 979.264822][T14701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.264837][T14701] RIP: 0033:0x7fa1b619c799 [ 979.264850][T14701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 979.264864][T14701] RSP: 002b:00007fa1b708c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 979.264879][T14701] RAX: ffffffffffffffda RBX: 00007fa1b6415fa0 RCX: 00007fa1b619c799 [ 979.264889][T14701] RDX: 0000001000000006 RSI: 0000200000000080 RDI: 0000000000000003 [ 979.264899][T14701] RBP: 00007fa1b6232c99 R08: 0000000000000000 R09: 0000000000000000 [ 979.264908][T14701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 979.264918][T14701] R13: 00007fa1b6416038 R14: 00007fa1b6415fa0 R15: 00007fff6cc52718 [ 979.264932][T14701] [ 979.264938][T14701] [ 979.264942][T14701] The buggy address belongs to a vmalloc virtual mapping [ 979.264953][T14701] Memory state around the buggy address: [ 979.264962][T14701] ffffc900043d9a80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 979.264973][T14701] ffffc900043d9b00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 979.264983][T14701] >ffffc900043d9b80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 979.264991][T14701] ^ [ 979.265001][T14701] ffffc900043d9c00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 979.265012][T14701] ffffc900043d9c80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 979.265020][T14701] ================================================================== [ 979.288714][T14701] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 979.288734][T14701] CPU: 0 UID: 0 PID: 14701 Comm: syz.5.2104 Tainted: G L syzkaller #0 PREEMPT(full) [ 979.288759][T14701] Tainted: [L]=SOFTLOCKUP [ 979.288765][T14701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 979.288774][T14701] Call Trace: [ 979.288780][T14701] [ 979.288787][T14701] dump_stack_lvl+0x100/0x190 [ 979.288815][T14701] vpanic+0x552/0x970 [ 979.288829][T14701] ? __pfx_vpanic+0x10/0x10 [ 979.288845][T14701] ? sys_imageblit+0x19fb/0x1d60 [ 979.288867][T14701] panic+0xd1/0xe0 [ 979.288881][T14701] ? __pfx_panic+0x10/0x10 [ 979.288896][T14701] ? sys_imageblit+0x19fb/0x1d60 [ 979.288915][T14701] ? preempt_schedule_common+0x42/0xc0 [ 979.288940][T14701] check_panic_on_warn.cold+0x19/0x34 [ 979.288956][T14701] end_report.part.0+0x3a/0x90 [ 979.288976][T14701] kasan_report.cold+0xe/0x18 [ 979.288996][T14701] ? sys_imageblit+0x19fb/0x1d60 [ 979.289024][T14701] sys_imageblit+0x19fb/0x1d60 [ 979.289052][T14701] ? __pfx_sys_imageblit+0x10/0x10 [ 979.289076][T14701] ? drm_fb_helper_damage_area+0xb4/0xe0 [ 979.289098][T14701] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 979.289115][T14701] soft_cursor+0x524/0xa10 [ 979.289135][T14701] ? fb_get_color_depth+0x120/0x250 [ 979.289153][T14701] bit_cursor+0xe58/0x16f0 [ 979.289187][T14701] ? __pfx_bit_cursor+0x10/0x10 [ 979.289208][T14701] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 979.289225][T14701] ? get_color+0x1da/0x450 [ 979.289240][T14701] ? __pfx_bit_cursor+0x10/0x10 [ 979.289257][T14701] fbcon_cursor+0x43c/0x5e0 [ 979.289272][T14701] ? add_softcursor+0x160/0x290 [ 979.289292][T14701] set_cursor+0x1db/0x250 [ 979.289310][T14701] vcs_write+0xba9/0xd60 [ 979.289328][T14701] ? __bpf_trace_sched_exit_tp+0x40/0xc0 [ 979.289357][T14701] ? __pfx_vcs_write+0x10/0x10 [ 979.289373][T14701] ? apparmor_file_permission+0x13f/0x1c0 [ 979.289391][T14701] ? bpf_lsm_file_permission+0x9/0x10 [ 979.289405][T14701] ? security_file_permission+0x76/0x210 [ 979.289425][T14701] ? rw_verify_area+0xce/0x6d0 [ 979.289514][T14701] vfs_write+0x2aa/0x1070 [ 979.289531][T14701] ? __pfx_vcs_write+0x10/0x10 [ 979.289551][T14701] ? __pfx_vfs_write+0x10/0x10 [ 979.289564][T14701] ? find_held_lock+0x2b/0x80 [ 979.289579][T14701] ? __fget_files+0x215/0x3d0 [ 979.289606][T14701] ? __fget_files+0x215/0x3d0 [ 979.289622][T14701] ? __fget_files+0x21f/0x3d0 [ 979.289644][T14701] ksys_write+0x12a/0x250 [ 979.289659][T14701] ? __pfx_ksys_write+0x10/0x10 [ 979.289677][T14701] do_syscall_64+0x106/0xf80 [ 979.289699][T14701] ? clear_bhb_loop+0x40/0x90 [ 979.289717][T14701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.289733][T14701] RIP: 0033:0x7fa1b619c799 [ 979.289749][T14701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 979.289766][T14701] RSP: 002b:00007fa1b708c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 979.289781][T14701] RAX: ffffffffffffffda RBX: 00007fa1b6415fa0 RCX: 00007fa1b619c799 [ 979.289792][T14701] RDX: 0000001000000006 RSI: 0000200000000080 RDI: 0000000000000003 [ 979.289803][T14701] RBP: 00007fa1b6232c99 R08: 0000000000000000 R09: 0000000000000000 [ 979.289812][T14701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 979.289823][T14701] R13: 00007fa1b6416038 R14: 00007fa1b6415fa0 R15: 00007fff6cc52718 [ 979.289838][T14701] [ 979.289947][T14701] Kernel Offset: disabled