last executing test programs: 2m11.575498985s ago: executing program 3 (id=598): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) read$auto(r0, 0x0, 0x1) write$auto(0xffffffffffffffff, 0x0, 0xffd2) close_range$auto(0x2, 0xa, 0x0) r1 = socket(0x2, 0x1, 0x106) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/handlers\x00', 0x200, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) setdomainname$auto(&(0x7f0000000240)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x7) mmap$auto(0x0, 0x3, 0x3, 0x7f, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r3 = open(&(0x7f0000000140)='&&\x00', 0x595082, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r4 = socket(0xa, 0x2, 0x0) setsockopt$auto(r4, 0x29, 0x30, 0x0, 0x56b) close_range$auto(r2, r1, 0x8) write$auto(r3, 0x0, 0xfffffdf1) linkat$auto(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) prctl$auto(0x23, 0x200000000000009, 0x7fffffffefff, 0x0, 0x0) r5 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/cmdline\x00', 0x60502, 0x0) read$auto_proc_pid_cmdline_ops_base(r5, &(0x7f0000000040)=""/159, 0x9f) r6 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto(r6, 0x40044620, 0xffffffffffffffff) fsetxattr$auto(r3, &(0x7f0000000000)=':\xbf+,\x8a}\x00', 0x0, 0x7bf, 0x1) mprotect$auto(0x0, 0x8000000000000001, 0x8) 2m10.476576398s ago: executing program 3 (id=603): set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7ffffffffffffffb, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) unshare$auto(0x21) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, 0x0, 0x40001, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy$auto(0x3, &(0x7f00000000c0)=0xffffffffffffffff, 0x3a) init_module$auto(0x0, 0xffff9, 0x0) syz_genetlink_get_family_id$auto_ovs_ct_limit(0x0, 0xffffffffffffffff) rseq$auto(0xfffffffffffffffc, 0x1000, 0x4, 0x5) r1 = geteuid() keyctl$auto(0x1e, r1, r1, 0x0, 0x7) fstat$auto(r0, &(0x7f0000000140)={0x8000, 0xff, 0x9, 0xe9ec, 0xee01, 0x0, 0x0, 0x8, 0x3, 0x6f7, 0x2, 0x394, 0x6, 0x10000001, 0x3, 0xa5f, 0x1}) mmap$auto(0x0, 0xdf33, 0xe2, 0xeb1, 0x405, 0x8000) r3 = socket(0x2, 0x3, 0xa) r4 = getsockopt$auto(r3, 0x0, 0x29, 0x0, 0x0) read$auto_msr_fops_msr(r4, &(0x7f0000000040)=""/115, 0x73) r5 = syz_clone(0x40280500, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r5, 0x4, 0x8000040006) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r6) r7 = getpgrp(0x0) sendmsg$auto_TASKSTATS_CMD_GET(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) msgctl$auto_IPC_RMID(0x7, 0x0, &(0x7f0000000200)={{0xc, r1, r2, 0x5, 0x2, 0x3, 0x4}, 0x0, 0x0, 0x85, 0x4, 0x8000000000000000, 0x7, 0x4, 0x1, 0x3, 0x8, @inferred=r5, @inferred=r7}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000001780), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r8, &(0x7f0000004400)={0x0, 0x0, &(0x7f00000043c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="68050000", @ANYRES16=r9, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0400018022020180040049000c00b88008002200080000000804f400", @ANYRES32, @ANYBLOB="f8004280903f34799f5a329ada454c35b897d23c10abf68b7114a69cce63082e6ff9e958a189e1a2af0dbc929e45eabc2b93933bf2c0f30cd60fef6fa44401a28ec2b8af5ced2760f81985dffd62102ff54907763fcda1a2952e5dc1943d61d51239bed8f8e6c5ac531c744321c5f41a8a5d0c8c2daa9683645f80c724b2b2cc15d12227c5c2142c526daf13e37d5e746f1dfade9458772494dfc29dd3cd4af9e604f19f5639c758181b17ca0df628c3628594fab20a30db6ad0828b802e515cf142b68251d692b234cd0d7db2ab23c6c2040b162a1f24126f3c2eecedd58dfaca65f7e4206abe048062a5960400e58008004300", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x568}, 0x1, 0x0, 0x0, 0x4001}, 0x4) close_range$auto(0x2, 0xa, 0x0) 2m8.263727741s ago: executing program 3 (id=608): r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0) ioctl$auto_FS_IOC_SETFLAGS(r0, 0x40086602, 0x80000000000002) 2m7.790503556s ago: executing program 3 (id=610): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x2720526777e58b76, 0x0) r1 = socket(0x1e, 0x4, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x20000, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$auto(0x1f, 0x5, 0x8000000000000000, 0x0) ioctl$auto_TCFLSH2(r3, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto(r2, 0x89f0, r2) mmap$auto(0x0, 0xc, 0x5, 0x16, 0xffffffffffffffff, 0x6) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) io_uring_setup$auto(0xf, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) 2m6.570500105s ago: executing program 3 (id=619): write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x88, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x10000052, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x9, 0x4, 'nfsd\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x30}}, 0x4000) timer_create$auto(0x0, 0x0, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000080), r0) sendmsg$auto_KSMBD_EVENT_LOGIN_REQUEST(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x48800) mmap$auto(0x6, 0x4, 0x4000000000dd, 0x40eb1, r2, 0x300000000000) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000020c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MM_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400008d", @ANYRES16=r5, @ANYBLOB="010328bd7000ffdbdf252a000000"], 0x14}, 0x1, 0x0, 0x0, 0x44808}, 0x2004c894) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000680)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/enable\x00', 0x0, 0x0) read$auto_ftrace_enable_fops_trace_events(r6, 0x0, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mlock$auto(0xfbea, 0x7fffffffffffffff) 2m3.83790271s ago: executing program 3 (id=627): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x1d, 0x3, 0x1) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) r1 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, r1, 0x4000eb7a, 0x2, 0xfffffffffffffffc, 0xc, 0xffffffffffffffff, 0x3ff, 0x3}, 0x6f4) r3 = io_uring_setup$auto(0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="ffa2"], 0x44}, 0x1, 0x0, 0x0, 0x10000000}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0x7, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x8, 0x20016, 0x8020000000f, 0x10000, 0x5f, 0x20000000000804, 0x2}, 0x6f0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) socket(0x2, 0x801, 0x100) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000040), 0x121000, 0x0) socket(0x25, 0x1, 0x0) inotify_init1$auto(0x3000000000000) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x101, 0x4000000000df, 0x40000eb1, r2, 0x7ffd) semctl$auto(0x3, 0x7, 0x13, 0x7) r4 = socket(0x2b, 0x1, 0x1) r5 = syz_genetlink_get_family_id$auto_gtp(&(0x7f00000000c0), r3) sendmsg$auto_GTP_CMD_DELPDP(r4, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r5, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FAMILY={0x5, 0xd, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0xffffffff}, @GTPA_MS_ADDR6={0x14, 0xc, @remote}, @GTPA_LINK={0x8, 0x1, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast2}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000851}, 0xc1) setsockopt$auto(r4, 0x29, 0x20, 0x0, 0x20) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1d, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd2b, 0x3}, 0x14}, 0x1, 0x0, 0x0, 0x8801}, 0x4000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) 1m48.555667426s ago: executing program 32 (id=627): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x1d, 0x3, 0x1) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) r1 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, r1, 0x4000eb7a, 0x2, 0xfffffffffffffffc, 0xc, 0xffffffffffffffff, 0x3ff, 0x3}, 0x6f4) r3 = io_uring_setup$auto(0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="ffa2"], 0x44}, 0x1, 0x0, 0x0, 0x10000000}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0x7, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x8, 0x20016, 0x8020000000f, 0x10000, 0x5f, 0x20000000000804, 0x2}, 0x6f0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) socket(0x2, 0x801, 0x100) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000040), 0x121000, 0x0) socket(0x25, 0x1, 0x0) inotify_init1$auto(0x3000000000000) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x101, 0x4000000000df, 0x40000eb1, r2, 0x7ffd) semctl$auto(0x3, 0x7, 0x13, 0x7) r4 = socket(0x2b, 0x1, 0x1) r5 = syz_genetlink_get_family_id$auto_gtp(&(0x7f00000000c0), r3) sendmsg$auto_GTP_CMD_DELPDP(r4, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r5, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FAMILY={0x5, 0xd, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0xffffffff}, @GTPA_MS_ADDR6={0x14, 0xc, @remote}, @GTPA_LINK={0x8, 0x1, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast2}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000851}, 0xc1) setsockopt$auto(r4, 0x29, 0x20, 0x0, 0x20) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1d, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd2b, 0x3}, 0x14}, 0x1, 0x0, 0x0, 0x8801}, 0x4000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) 9.040565923s ago: executing program 1 (id=1050): clone$auto(0xfec, 0xfffffffffffffff1, 0x0, 0x0, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r1, 0xab2b6f799ad46cb1, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8, 0x2, 0x18e}, @GTPA_LINK={0x8, 0x1, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS0\x00', 0x101e81, 0x0) rseq$auto(&(0x7f0000000200)={0xe, 0x400, 0xfb82, 0xfc, 0xffffffff, 0x200}, 0x8000, 0x0, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80302, 0x0) mmap$auto(0x0, 0x20004, 0xdf, 0x20eb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x200000004, 0x400008, 0x2000000000df, 0x9b72, 0xffffffffffffffff, 0x8001) bpf$auto(0x0, 0x0, 0x6f3) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x0, 0x20, 0x0, 0x28) openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), 0xffffffffffffffff) ioctl$auto_BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000001200)=0x7) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x14) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000240)='//ev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101cc0, 0x0) r3 = setfsuid$auto(0xee01) getpriority$auto_PRIO_USER(0x2, r3) lstat$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x6f, 0x1, 0x8, 0x3, r3, 0xee00, 0x0, 0x6, 0x722, 0x9, 0x7, 0x1, 0x3, 0x2c8ebe2a, 0x7c1, 0x1, 0x4}) r4 = socket(0x22, 0x2, 0x2) getsockname$auto(r4, 0x0, 0x0) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) write$auto(r5, 0x0, 0xfffffdef) 7.597315353s ago: executing program 4 (id=1057): mmap$auto(0x6, 0x5, 0x3, 0xeb2, 0x7, 0x8000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) r0 = openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/error_log\x00', 0x4400, 0x0) mmap$auto(0x0, 0x20009, 0x2000000df, 0xeb1, r0, 0x8000) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r2 = epoll_create$auto(0x8800001) epoll_ctl$auto(r2, 0x1, r1, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0x8, 0x0) 7.437217414s ago: executing program 1 (id=1068): close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) r0 = socket(0x10, 0x2, 0x4) (async, rerun: 64) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003a40)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040004) (async) close_range$auto(0x2, 0x8, 0x0) (async) r1 = socket(0x10, 0x2, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0xc8, 0x800454e0, 0x5) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000002c0)={0x0, 0xfc, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2f212cbd7000fcdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="04002d82"], 0x20}}, 0x4000000) (async, rerun: 64) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r1, @ANYBLOB="01"], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) (rerun: 64) write$auto(r0, &(0x7f0000000000)='-\x00', 0xfdef) 7.306404178s ago: executing program 0 (id=1061): r0 = openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$auto_safesetid_gid_file_fops_securityfs(r0, 0x0, 0x0) r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000029c0)='/proc/sysvipc/shm\x00', 0x2400, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) socket(0x28, 0x5, 0x0) arch_prctl$auto_ARCH_SHSTK_STATUS(0x5005, 0xffffffff00000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/snd_hda_intel/parameters/bdl_pos_adj\x00', 0x80102, 0x0) sendfile$auto(r4, r4, 0x0, 0x4000000003) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) openat$auto_proc_fault_inject_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/make-it-fail\x00', 0xe86803cc173cdcf0, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="13002cbd7000dddbdf250200000008000300", @ANYRES32=r5, @ANYBLOB="1800610001aad1000000000000a8380000000800659b1c119661"], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) read$auto_proc_pid_maps_operations_internal(r1, &(0x7f0000002a00)=""/180, 0xb4) r6 = socket(0xa, 0x2, 0x3a) bind$auto(r6, &(0x7f0000000040)=@generic={0xa, "2c551d000000fe8000"}, 0x66) close_range$auto(r6, r0, 0x44c6) 7.084375815s ago: executing program 1 (id=1062): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x6a4, 0x400, 0x2}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r3) sendmsg$auto_TASKSTATS_CMD_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r4, @ANYBLOB="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"], 0xec}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) close_range$auto(r0, 0x8, 0x1) r5 = openat$auto_stat_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) setsockopt$auto_SO_PROTOCOL(r5, 0x8, 0x26, &(0x7f0000000100)='/dev/ptp0\x00', 0x2) socket(0x1d, 0x2, 0x2) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/status\x00', 0x80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r6, 0x0, 0xc, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x40802, 0x0) mmap$auto(0xffffffffffffffff, 0x2000b, 0x4b, 0xeb1, 0x401, 0x8000) r7 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$auto_SNDCTL_DSP_SUBDIVIDE(r7, 0xc0045009, 0x0) r8 = fanotify_init$auto(0x5, 0x0) fanotify_mark$auto(r8, 0x205, 0x1, 0x4, 0x0) sysfs$auto(0x2, 0x7649, 0x3aa7) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x200000, 0x0) openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) 7.080928598s ago: executing program 0 (id=1063): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/devices/virtual/block/zram0/comp_algorithm\x00', 0x20b42, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000600)="de91b83a075ce51fff544f85b0b6d328f3beb9b8634fd16bf2701cb13a2d93abd4142a449aa0cac9a1586e4fbc7b163c42c4adfad8824de8783614b2dcf995a43c8cf63d2e2facaebb7019f67c4241ee77139ef43eacde5fcb4ca071ad7ecd284cb135be34415cca234d6a11827fe881a06111504ccdbebb0a6ee4a2e2a62fc7c8", 0x81) socket(0xa, 0x3, 0x3b) (async) socket(0xa, 0x3, 0x3b) setsockopt$auto(0x400000000000003, 0x29, 0x39, 0xffffffffffffffff, 0x0) mq_timedsend$auto(0xffffffffffffffff, 0x0, 0x2, 0x4, 0x0) (async) mq_timedsend$auto(0xffffffffffffffff, 0x0, 0x2, 0x4, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r2 = io_uring_setup$auto(0x6, 0x0) semget$auto(0x0, 0x13c, 0x1ff) semtimedop$auto(0x0, 0x0, 0x1f4, 0x0) (async) semtimedop$auto(0x0, 0x0, 0x1f4, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) (async) r3 = socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@qipcrtr={0x2a, 0xd4fbed99354b39d2, 0x4000}, 0x54) shutdown$auto(0x200000003, 0x2) shutdown$auto(0x200000003, 0x2) fsmount$auto(r3, 0x8d5, 0x6) (async) fsmount$auto(r3, 0x8d5, 0x6) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x6, 0x37db}, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRES64=r2, @ANYRESHEX=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x4008004}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 6.825515509s ago: executing program 4 (id=1064): syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_GET(0xffffffffffffffff, 0x0, 0x20000008) close_range$auto(0x2, 0xa, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/admmidi2\x00', 0x400282, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x50800, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/midiC2D1\x00', 0x1202, 0x0) prctl$auto(0x401, 0x1, 0xffffffffffffffff, 0x1, 0x600) io_uring_register$auto(0xffffffffffffffff, 0x1, 0x0, 0xd880bb7) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x72042, 0x0) ioctl$auto_BLKTRACESETUP2(r2, 0xc0481273, 0x0) io_uring_setup$auto(0x1000006, 0x0) r3 = socket(0x2, 0x1, 0x106) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) setfsuid$auto(0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/tasks\x00', 0x63102, 0x0) sendfile$auto(r4, r4, 0x0, 0x1) select$auto(0x6, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x800295f4da0a, 0x2, 0x5, 0x1000000062, 0x80000001, 0x50aa, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000001c0)={[0x1ff, 0x0, 0xe, 0x3, 0x7, 0x1, 0x7, 0x7, 0x28, 0x7, 0x70c4, 0x79d, 0x6, 0x100000000000000, 0x8003, 0xf]}, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, r0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0xa0000, 0x0) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 5.956697292s ago: executing program 0 (id=1065): mmap$auto(0x80000000, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, 0x0, 0x20004000) unshare$auto(0x40000080) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, 0x0) unshare$auto(0x40000080) r2 = openat$auto_tracing_total_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/buffer_total_size_kb\x00', 0x80000, 0x0) read$auto_tracing_total_entries_fops_trace(r2, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0xa41, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_available_congestion_control\x00', 0x0, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000002040)='/dev/snd/pcmC1D1c\x00', 0x80, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/class/devcoredump/disabled\x00', 0xe3102, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x0, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x10, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x0, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mincore$auto(0x1000, 0x4000000, 0x0) (fail_nth: 1) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) getsockopt$auto(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xe3, 0xbb72, 0x2, 0x8000) 5.389115626s ago: executing program 1 (id=1067): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x3, 0x0) r0 = epoll_create$auto(0x5) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/projid_map\x00', 0x101002, 0x0) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket(0x15, 0x5, 0x0) get_robust_list$auto(0x1, 0x0, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x8006, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) ioctl$auto_PPPIOCSFLAGS(r1, 0x40047459, 0x0) write$auto(0x3, 0x0, 0x29a) socket(0x2, 0x80002, 0x73) connect$auto(0x3, 0x0, 0x54) write$auto(0x3, 0x0, 0xfdef) sendmmsg$auto(0x3, 0x0, 0xc, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), 0xffffffffffffffff) read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f00000000c0)=""/47, 0x2f) 5.236906478s ago: executing program 4 (id=1069): mmap$auto(0x80000000, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, 0x0, 0x20004000) unshare$auto(0x40000080) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, 0x0) unshare$auto(0x40000080) r2 = openat$auto_tracing_total_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/buffer_total_size_kb\x00', 0x80000, 0x0) read$auto_tracing_total_entries_fops_trace(r2, 0x0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0xa41, 0x0) r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_available_congestion_control\x00', 0x0, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000002040)='/dev/snd/pcmC1D1c\x00', 0x80, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/class/devcoredump/disabled\x00', 0x101000, 0x0) sendfile$auto(r3, r4, 0x0, 0x3) r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x0, 0x0) write$auto(r7, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x10, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x0, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, r7, 0x8000) mincore$auto(0x1000, 0x4000000, 0x0) sendfile$auto(r5, r6, 0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x2000040080000004, 0xe) mmap$auto(0x1, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r8 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) ioctl$auto(r8, 0x92106402, r8) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000180), r0) 4.062033209s ago: executing program 1 (id=1072): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = memfd_create$auto(&(0x7f0000000000)='\x00', 0x8cf) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x242, 0x0) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r1, 0x400454a4, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_nsim_dev_take_snapshot_fops_dev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim3/take_snapshot\x00', 0x82622, 0x0) writev$auto(r2, &(0x7f0000000080)={0x0, 0x9}, 0x0) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) read$auto_proc_iter_file_ops_compat_inode(r3, &(0x7f0000000180)=""/190, 0xbe) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0xe983, 0xffffffffffffffff, 0x8000000eb0, r4, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) socket(0xa, 0x2, 0x3a) r5 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/ieee80211/phy7/netdev:wlan0/rc_rateidx_mask_2ghz\x00', 0x208800, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100082) pwritev$auto(r5, &(0x7f0000000180)={0x0, 0x5}, 0x3, 0x700, 0x5) close_range$auto(r3, r0, 0x2) openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, 0x0, 0x12b002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 3.781651399s ago: executing program 2 (id=1074): mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = socketcall$auto(0xffe, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000600), 0x82, 0x0) read$auto_ima_ascii_measurements_ops_ima_fs(r2, 0x0, 0x0) ioctl$auto(0x3, 0xae60, r2) ioctl$auto(0x3, 0x4008ae61, r0) r3 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x42080, 0x0) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp1\x00', 0x8000, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000140)="1bcc66e6b439d005f5a4980786aa22fb201b8154d34170d8c577acc2b4a62617e7942368eab654c736541e7c77c5075cb4fbf34dd2223ff29585ab31b8be7a6658539f5d42fab54390f0bd4aa0115cc4e144bbfa4b832b602a7b5e82306aac1c14ed9c15c893beb4d1cfa5db47f42d4f5215f3a6210c35f5da0bca1a46bd7a325d73b40485df6b3f43eec0ec25fca8f9a44bca46ddc56189d639") read$auto_proc_mountinfo_operations_mnt_namespace(r3, &(0x7f0000000040)=""/66, 0x42) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r5, &(0x7f0000003900)='\t', 0x1) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) mmap$auto(0x5, 0xc5, 0x2, 0xb873, r5, 0x2) read$auto(r6, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r7 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) unshare$auto(0x40000080) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5) write$auto_proc_fault_inject_operations_base(r7, 0x0, 0x0) 3.28065135s ago: executing program 0 (id=1075): mmap$auto(0x0, 0x2020008, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x29202, 0x0) mmap$auto(0x2000, 0x80009, 0xb, 0x8000000008011, r0, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) r2 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) r3 = socket(0x15, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r4 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) ioctl$auto_PROCMAP_QUERY(0xffffffffffffffff, 0xc0686611, &(0x7f0000000080)={0x67, 0x10001, 0x7fff, 0x5, 0x80000000007, 0x3, 0x6, 0xff, 0x5, 0x7f, 0xfbfffffe, 0xfff, 0x7fb, 0x4, 0x9}) connect$auto(0x3, &(0x7f00000000c0)=@can={0x1d, r5, 0xefff}, 0x18) getsockopt$auto(r3, 0x114, 0x2716, 0xfffffffffffffffc, 0x0) sendmsg$auto(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x200, 0x4}, 0x0) mmap$auto(0x0, 0x10000, 0xde, 0x11, r1, 0x28000) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020008, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x29202, 0x0) (async) mmap$auto(0x2000, 0x80009, 0xb, 0x8000000008011, r0, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) (async) socket(0x15, 0x5, 0x0) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async) socket(0x15, 0x5, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x3, 0x100) (async) socket(0x1d, 0x2, 0x7) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) (async) ioctl$auto_PROCMAP_QUERY(0xffffffffffffffff, 0xc0686611, &(0x7f0000000080)={0x67, 0x10001, 0x7fff, 0x5, 0x80000000007, 0x3, 0x6, 0xff, 0x5, 0x7f, 0xfbfffffe, 0xfff, 0x7fb, 0x4, 0x9}) (async) connect$auto(0x3, &(0x7f00000000c0)=@can={0x1d, r5, 0xefff}, 0x18) (async) getsockopt$auto(r3, 0x114, 0x2716, 0xfffffffffffffffc, 0x0) (async) sendmsg$auto(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x200, 0x4}, 0x0) (async) mmap$auto(0x0, 0x10000, 0xde, 0x11, r1, 0x28000) (async) madvise$auto(0x0, 0x2000040080000004, 0xe) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) 3.087166525s ago: executing program 0 (id=1076): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x2, 0x0) r1 = socket(0xa, 0x3, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x6) socket(0x11, 0x80003, 0x300) socket(0x10, 0x2, 0x0) socket(0x2, 0x3, 0x2) r3 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000100), r0) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r3, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IOAM6_ATTR_NS_ID={0x6, 0x1, 0x401}, @IOAM6_ATTR_SC_NONE={0x4}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x40}, @IOAM6_ATTR_SC_NONE={0x4}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x1}, @IOAM6_ATTR_SC_NONE={0x4}, @IOAM6_ATTR_SC_NONE={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc001}, 0x1) socket(0x2, 0x3, 0x104) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x40, 0x0) socketpair$auto(0x3, 0x5, 0x7, 0x0) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) bind$auto(r1, 0x0, 0x6f) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000080), 0xe24102, 0x0) socket(0x11, 0x3, 0x9) r4 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/ram5/make-it-fail\x00', 0x80302, 0x0) write$auto(r4, &(0x7f0000000000)='-\x00', 0xfdef) connect$auto(r1, 0x0, 0x55) close_range$auto(0x2, 0xa, 0x0) socket(0x11, 0x3, 0x1) socket(0xa, 0x2, 0x88) 2.894799944s ago: executing program 0 (id=1077): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r1, 0xfd}, 0x6a) close_range$auto(0x2, 0x8, 0x0) r2 = io_uring_setup$auto(0x86, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) prctl$auto(0x4b, 0x8, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r2) sendmsg$auto_NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x6fc, r4, 0x202, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x6}, @NL80211_ATTR_BEACON_TAIL={0x6d0, 0xf, "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"}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xfffffff9}, @NL80211_ATTR_SAE_PWE={0x5, 0x12a, 0x2}]}, 0x6fc}, 0x1, 0x0, 0x0, 0x20000841}, 0x4004004) sendfile$auto(r3, r3, 0x0, 0x7) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) statmount$auto(0x0, 0x0, 0x81, 0x40968c) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) unshare$auto(0x1) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000080), r2) fstatfs$auto(0x3, 0x0) ioctl$auto(r5, 0x4b66, 0x1) ioctl$auto_CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000200)={0x2, 0x9, 0x6, 0x4, 0x9, 0xfffffff0, "933c25ea9a9b46be35fe94f586a9479e", 0x9, 0x9, 0x9d, 0x0, 0x81, 0x7, 0x8}) 2.463358892s ago: executing program 4 (id=1078): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001b80)=ANY=[@ANYRES64=0x0, @ANYBLOB="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"], 0x34}}, 0x200000d4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x40000) pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x400c994) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) bind$auto(0xffffffffffffffff, 0x0, 0x6a) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x4, 0x7ff) ptrace$auto(0xf, r0, 0x1, 0x4053) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = semctl$auto(0x80001ff, 0x804, 0x13, 0x4) keyctl$auto(0x1, 0x7, 0x0, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = timerfd_create$auto(0x1, 0x0) getxattrat$auto(r2, &(0x7f0000000080)='./file0\x00', 0x1000, &(0x7f00000003c0)='\x00\xa3B\x9f!\'\xb5\xd8\x7f\xedP\x93S\x8d0\xbe\x80F\x8e\x9d\x97\xea>O\xa0\r\x1d\x15\xd6\xa96\xb3\x0e\xfdf\x14a\x06\x11\xa9r\xad\xe2\x1a\x83/\xa4\x06z\xbf\x88n\xdc\xca\xf3%\xba\x8d\xe7\x17\xccZ\x19Xb\xcf\x1e\x18\xd9\xae\"\xb0\x04=cX\x94\xd3wn\x15\x96[\xc9\xe4B\x99\xf3\xb9\x82-\xad}h\x10o\xec\x05\xe8P_\xa3\xab)\x7f\x97\rS\a\x7f\x97Qt{4C\xe5f\xdc\xe4P\xdb:\xaf\xc5FV s~=\xc9\xda\xbd\xda\x1f\xa9\xda\xd8\x96\x13Hbu\xb5+\"\x94X~\x85\xbf\xc6\xc4\xfcak\x8b\x06UB\xc7R|\x94~.\x90\x8d\xa9d0x0, 0x7, 0x109, 0x7, "aab8e80600080043529f895cf5e8ec8f46cbb766439d070a00", @raw=0x2}, 0x6, 0x4, 0x6, @raw=0xd7, @integer64={0x442df60c, 0x81, 0x7}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f00000000c0)={@inferred=r5, 0x7, 0xd, 0xa4, "e3eabf11dce36a2eac9cb4682c339b3ce615a9b97386d4462bc6553245da56e4978f37368e849db4a6e0aa4e", @raw=0xa2cfa1c}) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x457, 0x7, 0xd, 0x1, 0x948b, 0x6, 0x0, 0x1, 0x3, 0x40, 0x6, 0x1, 0x6d39, 0x5, 0x2, 0x4]}, 0x0) fcntl$auto_F_UNLCK(r3, 0x206, 0x2) select$auto(0x7fff, &(0x7f00000004c0)={[0x21, 0xffffeffffffffff8, 0x1, 0x60000000000, 0x7, 0x1, 0x400, 0x3, 0x0, 0x1, 0x8, 0x7, 0x6, 0x7, 0x9, 0x8]}, &(0x7f0000000200)={[0xfffffffffffffffe, 0x38000000000, 0x1, 0xf, 0x7f, 0x0, 0x20000000d, 0x6, 0xfa2, 0x401, 0x3, 0x1f9, 0x6, 0x8, 0x80000000, 0x7]}, &(0x7f0000000340)={[0x6, 0x4, 0x6c0000000000000, 0xedbb, 0x80, 0x4, 0xffffffffffff5bf5, 0xfffffffffffffffd, 0x9, 0x9, 0x1000, 0xfffffffffffffffe, 0x5, 0x7, 0x8, 0x2]}, &(0x7f0000000280)={0x9, 0xa74}) 1.95780691s ago: executing program 2 (id=1079): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000000080), 0x41180, 0x0) read$auto(r0, 0x0, 0x58b22256) close_range$auto(0x2, r0, 0x0) close_range$auto(0x2, 0xa, 0x0) r1 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs1\x00', 0x0, 0x0) r2 = epoll_create$auto(0x7) epoll_wait$auto(r2, 0x0, 0xe007, 0x1) ioctl$auto_SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000b40)="0c7aaa9fe7f81ea937f60906d468b6a8877f6a5a779abb7302d82fc584e330dd584a87e67a9f5679e50b2157dfdf2e15bb36b2a2ec1d09289b1e77391d4e11f7de0942be416e5d0c6475b6f2906074ce09c94f4d6aa4d34a6796479ee05cba27da7c8a49065178b659a639fa3bb81ff52721439ad322d539c22109372d59df25fc59ea55fafedb3fdeb8d3c07a9c02d7d6fbffadb58049d6f4e288aad2134640972840e8e8badd6bb07b039f76204b4fc0b236c16837d3fcdf7ccc6884fd915cbab9ad0e36877fbf68d42ac97a8ac8338d8bb9") r3 = open(&(0x7f0000000080)='.\x00', 0x518282, 0x78e22799f4a46e8e) fchown$auto(r3, 0xff, 0x5) fcntl$auto(r3, 0x4, 0xfffffffffffffff9) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000b00)={&(0x7f0000000000), 0xc, &(0x7f0000000ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="70ff0000", @ANYRES16=r4, @ANYBLOB="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"], 0x970}}, 0xc040000) r5 = epoll_create$auto(0x5a5d) epoll_ctl$auto(r5, 0x1, r1, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 1.854180538s ago: executing program 2 (id=1080): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x100200, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/dev/cdrom/info\x00', 0x2000, 0x0) read$auto(r1, &(0x7f0000000040)='\x00', 0x4) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/lapb1/dormant\x00', 0x0, 0x0) landlock_add_rule$auto(r0, 0x1, &(0x7f00000001c0)="53064ea5fc6620b8f2ca74279b59ac4f1cb513f5a60ce2ee7429c1de23a7deb9", 0x400) sendmsg$auto_IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1e000008", @ANYRES16=0x0, @ANYRESHEX=r2], 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x200488d1) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r4, 0x0, 0x18) getdents$auto(r4, 0x0, 0xa2b0) mmap$auto(0x40000000, 0x9645, 0xdf, 0x8011, 0x2, 0x2d4a29c0) pivot_root$auto(0x0, 0x0) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x7fff, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000000, 0x2000e) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x8000000000000000, 0x82020009, 0xffffffffffffffff, 0x7c, 0xffffffffffffffff, 0xfff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0x2003f0, 0x15) connect$auto(0x3, 0x0, 0x10) mmap$auto(0x40000000000005, 0x20006, 0xdf, 0xeb1, 0x401, 0x7fff) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x848000000015, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x6b) 1.460613918s ago: executing program 4 (id=1081): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x3, 0x0) r0 = epoll_create$auto(0x5) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/projid_map\x00', 0x101002, 0x0) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket(0x15, 0x5, 0x0) get_robust_list$auto(0x1, 0x0, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x8006, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) ioctl$auto_PPPIOCSFLAGS(r1, 0x40047459, 0x0) write$auto(0x3, 0x0, 0x29a) socket(0x2, 0x80002, 0x73) connect$auto(0x3, 0x0, 0x54) write$auto(0x3, 0x0, 0xfdef) fremovexattr$auto(r0, &(0x7f0000000000)='&\x00') syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), 0xffffffffffffffff) read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f00000000c0)=""/47, 0x2f) 1.002211306s ago: executing program 4 (id=1082): mmap$auto(0x5, 0x7, 0x4, 0x10, 0xffffffffffffffff, 0x4003ffffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ram6\x00', 0xc6fc1, 0x0) r0 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000000200)=0x1005) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x40, 0x2000c, 0xdf, 0x20eb1, r0, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) socket(0xa, 0x5, 0x0) utime$auto(0x0, 0xfffffffffffffffc) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0x0, 0x9, 0x2, 0x8, 0x5}, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x1, 0x1, 0xfffffffffffffff8, 0x0, 0x9, 0x9, 0x4, 0x9, 0xf}) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000004180)='/dev/snd/controlC1\x00', 0x28180, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto_SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto(r4, 0x540a, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/dev\x00', 0x40100, 0x0) pread64$auto(r6, 0x0, 0x10001, 0x82d) write$auto(r5, 0x0, 0xc) close_range$auto(0xffffffffffffffff, r0, 0x5c) 885.2113ms ago: executing program 2 (id=1083): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x800, 0xa) r0 = openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/timestamp_mode\x00', 0x200, 0x0) read$auto_trace_time_stamp_mode_fops_trace(r0, &(0x7f00000000c0)=""/45, 0x2d) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x200) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/version\x00', 0x0, 0x0) mmap$auto(0x0, 0xe987, 0x200000003, 0xeb1, 0xffffffffffffffff, 0x6) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) listmount$auto(&(0x7f0000000100)={0x20, @raw=0x3, 0xffffffffffffffff}, 0x0, 0xf4240, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) fcntl$auto(0x3, 0x8, 0x9ebfffffffffffff) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r3 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0xad00, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002ec0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="14000800", @ANYRES16, @ANYBLOB="010028bd7000fcdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4048c40}, 0x4) setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000280)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00', 0x4) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000300)={{&(0x7f0000000080), 0x1, &(0x7f0000000240)={&(0x7f0000000180)="7b4bdf79b230c6c1bd0ad582aa829025792cdd2e1d2bd1578802e5bf049ba932dccf88b41a8de411ef437d54e627e5ee33ecfaf045aa17d2753cd53e9cb13168f1e7f86ea2617d8ff7f3a5079ff5a72d30a87f9064babbc20a588ee314bc795a686a9f405cc90a2a715b0e700972d72705e0f0cd73ee1dc1e6ecbc4dc81b1bade109331f12", 0x561}, 0xa5, &(0x7f0000000280)="c08366643abd5ff44cb7c2eff5dba9b16015d2a43c0b3b18b63ead986c26955ef3ac4c5509ddfdac00a587f257f4178a987604887be98f70be2dcaf460ea0072cf5d965a4cc54e6b297ec7bfd9e579550747a757fb45dbdd95a6c385", 0x8, 0x1}, 0x6}, 0x10001, 0x8) readv$auto(r3, 0x0, 0x3) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r5, 0x0, 0xfff) r6 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r6, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, 0x6) 503.29754ms ago: executing program 1 (id=1084): mmap$auto(0x80000000, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, 0x0, 0x20004000) unshare$auto(0x40000080) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, 0x0) unshare$auto(0x40000080) r2 = openat$auto_tracing_total_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/buffer_total_size_kb\x00', 0x80000, 0x0) read$auto_tracing_total_entries_fops_trace(r2, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0xa41, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_available_congestion_control\x00', 0x0, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000002040)='/dev/snd/pcmC1D1c\x00', 0x80, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/class/devcoredump/disabled\x00', 0xe3102, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x0, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x10, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x0, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mincore$auto(0x1000, 0x4000000, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) getsockopt$auto(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xe3, 0xbb72, 0x2, 0x8000) 83.605495ms ago: executing program 2 (id=1085): socket(0x21, 0x5, 0x2) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/eql/statistics/rx_packets\x00', 0x183003, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/msr/parameters/allow_writes\x00', 0xa0302, 0x0) sendfile$auto(r1, r1, 0x0, 0x7ffff000) 0s ago: executing program 2 (id=1086): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x2020006, 0x4000000000000003, 0xeb1, 0xffffffffffffffff, 0x8000) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_7={@start_id=0xce04, 0x7, 0x0, 0xffffffffffffffff}, 0x4c) (async) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) kexec_load$auto(0x5, 0x4, 0x0, 0x2) (async) r2 = socket(0x18, 0x5, 0x1) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TCP_METRICS_CMD_GET(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000140)=ANY=[@ANYRES64=r2, @ANYRES16, @ANYBLOB="9bff25bd7000828cdf2501"], 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000580)='/sys/devices/virtual/workqueue/scsi_tmf_0/affinity_strict\x00', 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0xa, 0x2, 0x3a) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$auto_FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000c40)="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") (async) close_range$auto(0x2, 0x8, 0x0) (async) r6 = socket(0x10, 0x2, 0x4) (async) close_range$auto(0x2, 0x8, 0x0) r7 = socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) (async) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x40000f0) write$auto(r6, &(0x7f00000000c0)='-\xb4%J\x14\x05\xc8;\xcc\xad\xee\xc3\xe7J\xdd\xd2\xd0\xa5\xdaM\xa0P}^\x05\x12=9\xdd\xfc\xbev\xdd@\x85\x1b\xa6\x8d\xf9\xdbg\xf7\x86\x1d\x85\xc9#\xf3\xdev$\x1f\xac\xb5\x1e\xd5\xa9\xf1\xe8\xbc\xbb<9\xf1\x99\xfb\x19ed\rB2{\xae\t\xa9a\xdd\xe4-\x9c,\xe2\xa5z{\xb7(\xe3\x1e\x97\xc0p\xf1\'%\xd7\xc3', 0x80000001) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1800"], 0x1ac}}, 0x40000) kernel console output (not intermixed with test programs): x+0x10/0x10 [ 189.883646][ T6929] ? fput+0x70/0xf0 [ 189.883685][ T6929] ? __sys_sendmsg+0x18c/0x220 [ 189.883729][ T6929] __x64_sys_futex+0x1e0/0x4c0 [ 189.883780][ T6929] ? __pfx___x64_sys_futex+0x10/0x10 [ 189.883843][ T6929] do_syscall_64+0xcd/0xf80 [ 189.883887][ T6929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.883920][ T6929] RIP: 0033:0x7fe5a618f7c9 [ 189.883945][ T6929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.883975][ T6929] RSP: 002b:00007fe5a6f8a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 189.884004][ T6929] RAX: ffffffffffffffda RBX: 00007fe5a63e6098 RCX: 00007fe5a618f7c9 [ 189.884025][ T6929] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe5a63e609c [ 189.884044][ T6929] RBP: 00007fe5a63e6090 R08: 00007fe5a6fac000 R09: 0000000000000000 [ 189.884064][ T6929] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 189.884084][ T6929] R13: 00007fe5a63e6128 R14: 00007ffeb86fa2c0 R15: 00007ffeb86fa3a8 [ 189.884126][ T6929] [ 191.571114][ T53] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 191.571147][ T53] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 191.589064][ T53] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 191.589100][ T53] Bluetooth: hci1: adv larger than maximum supported [ 191.596164][ T53] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 191.603387][ T53] Bluetooth: hci1: adv larger than maximum supported [ 191.610577][ T53] Bluetooth: hci1: adv larger than maximum supported [ 191.618315][ T53] Bluetooth: hci1: Malformed LE Event: 0x0d [ 195.652968][ T7021] block nbd0: Unsupported socket: should be TCP or UNIX. [ 196.358203][ T31] audit: type=1800 audit(1764964329.901:6): pid=7037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.243" name="lu_gp_id" dev="configfs" ino=15101 res=0 errno=0 [ 197.094807][ T7049] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 198.529497][ T7059] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 198.535699][ T7059] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 198.564747][ T7059] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 198.657455][ T7059] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 198.746191][ T7059] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 199.697078][ T7080] random: crng reseeded on system resumption [ 199.875356][ T7090] FAULT_INJECTION: forcing a failure. [ 199.875356][ T7090] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 200.007088][ T7090] CPU: 1 UID: 0 PID: 7090 Comm: syz.3.255 Not tainted syzkaller #0 PREEMPT(full) [ 200.007132][ T7090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 200.007150][ T7090] Call Trace: [ 200.007160][ T7090] [ 200.007173][ T7090] dump_stack_lvl+0x16c/0x1f0 [ 200.007211][ T7090] should_fail_ex+0x512/0x640 [ 200.007255][ T7090] should_fail_alloc_page+0xe7/0x130 [ 200.007300][ T7090] prepare_alloc_pages+0x3c2/0x610 [ 200.007338][ T7090] ? arch_stack_walk+0xa6/0x100 [ 200.007384][ T7090] __alloc_frozen_pages_noprof+0x18b/0x2440 [ 200.007442][ T7090] ? stack_trace_save+0x8e/0xc0 [ 200.007480][ T7090] ? __pfx_stack_trace_save+0x10/0x10 [ 200.007519][ T7090] ? stack_depot_save_flags+0x29/0x9b0 [ 200.007557][ T7090] ? find_held_lock+0x2b/0x80 [ 200.007607][ T7090] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 200.007661][ T7090] ? kasan_save_stack+0x42/0x60 [ 200.007690][ T7090] ? kasan_save_stack+0x33/0x60 [ 200.007716][ T7090] ? kasan_save_track+0x14/0x30 [ 200.007747][ T7090] ? __kasan_slab_alloc+0x89/0x90 [ 200.007779][ T7090] ? kmem_cache_alloc_noprof+0x250/0x760 [ 200.007826][ T7090] ? security_inode_alloc+0x3b/0x2b0 [ 200.007857][ T7090] ? inode_init_always_gfp+0xced/0x1040 [ 200.007898][ T7090] ? do_syscall_64+0xcd/0xf80 [ 200.007931][ T7090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.007982][ T7090] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 200.008028][ T7090] ? policy_nodemask+0xea/0x4e0 [ 200.008068][ T7090] alloc_pages_mpol+0x1fb/0x550 [ 200.008107][ T7090] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 200.008155][ T7090] ___kmalloc_large_node+0x130/0x1a0 [ 200.008198][ T7090] __kmalloc_large_node_noprof+0x1c/0x70 [ 200.008241][ T7090] __kmalloc_noprof.cold+0xc/0x62 [ 200.008288][ T7090] ? sk_prot_alloc+0x1a8/0x2a0 [ 200.008342][ T7090] ? sk_prot_alloc+0x1a8/0x2a0 [ 200.008388][ T7090] sk_prot_alloc+0x1a8/0x2a0 [ 200.008440][ T7090] sk_alloc+0x36/0xc20 [ 200.008479][ T7090] can_create+0x1e5/0x630 [ 200.008535][ T7090] __sock_create+0x339/0x8a0 [ 200.008595][ T7090] __sys_socket+0x153/0x2d0 [ 200.008626][ T7090] ? __pfx___sys_socket+0x10/0x10 [ 200.008657][ T7090] ? xfd_validate_state+0x61/0x180 [ 200.008687][ T7090] ? __pfx_ksys_write+0x10/0x10 [ 200.008730][ T7090] __x64_sys_socket+0x72/0xb0 [ 200.008758][ T7090] ? lockdep_hardirqs_on+0x7c/0x110 [ 200.008791][ T7090] do_syscall_64+0xcd/0xf80 [ 200.008828][ T7090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.008867][ T7090] RIP: 0033:0x7fe5a618f7c9 [ 200.008899][ T7090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.008930][ T7090] RSP: 002b:00007fe5a6f69038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 200.008959][ T7090] RAX: ffffffffffffffda RBX: 00007fe5a63e6180 RCX: 00007fe5a618f7c9 [ 200.008980][ T7090] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 000000000000001d [ 200.008999][ T7090] RBP: 00007fe5a6213f91 R08: 0000000000000000 R09: 0000000000000000 [ 200.009027][ T7090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.009046][ T7090] R13: 00007fe5a63e6218 R14: 00007fe5a63e6180 R15: 00007ffeb86fa3a8 [ 200.009090][ T7090] [ 200.372316][ T53] Bluetooth: hci1: command 0x0c1a tx timeout [ 200.536559][ T53] Bluetooth: hci2: command 0x0c1a tx timeout [ 200.617414][ T53] Bluetooth: hci3: command 0x0c1a tx timeout [ 200.696448][ T53] Bluetooth: hci0: command 0x0c1a tx timeout [ 201.461862][ T7107] delete_channel: no stack [ 202.777838][ T53] Bluetooth: hci0: command 0x0c1a tx timeout [ 203.420968][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.439660][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.554841][ T7157] FAULT_INJECTION: forcing a failure. [ 203.554841][ T7157] name fail_futex, interval 1, probability 0, space 0, times 0 [ 203.610907][ T7157] CPU: 1 UID: 0 PID: 7157 Comm: syz.1.273 Not tainted syzkaller #0 PREEMPT(full) [ 203.610949][ T7157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 203.610967][ T7157] Call Trace: [ 203.610977][ T7157] [ 203.610990][ T7157] dump_stack_lvl+0x16c/0x1f0 [ 203.611028][ T7157] should_fail_ex+0x512/0x640 [ 203.611070][ T7157] get_futex_key+0x1d0/0x15f0 [ 203.611115][ T7157] ? __might_fault+0x13b/0x190 [ 203.611160][ T7157] ? __pfx_get_futex_key+0x10/0x10 [ 203.611206][ T7157] ? find_held_lock+0x2b/0x80 [ 203.611263][ T7157] futex_wake+0xea/0x530 [ 203.611318][ T7157] ? __pfx_futex_wake+0x10/0x10 [ 203.611400][ T7157] do_futex+0x1e3/0x350 [ 203.611444][ T7157] ? __pfx_do_futex+0x10/0x10 [ 203.611498][ T7157] __x64_sys_futex+0x1e0/0x4c0 [ 203.611543][ T7157] ? fdget_pos+0x2b8/0x370 [ 203.611577][ T7157] ? __pfx___x64_sys_futex+0x10/0x10 [ 203.611622][ T7157] ? xfd_validate_state+0x61/0x180 [ 203.611661][ T7157] ? __pfx_do_writev+0x10/0x10 [ 203.611702][ T7157] do_syscall_64+0xcd/0xf80 [ 203.611738][ T7157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.611769][ T7157] RIP: 0033:0x7fd7be58f7c9 [ 203.611793][ T7157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.611826][ T7157] RSP: 002b:00007fd7bf5010e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 203.611855][ T7157] RAX: ffffffffffffffda RBX: 00007fd7be7e5fa8 RCX: 00007fd7be58f7c9 [ 203.611875][ T7157] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd7be7e5fac [ 203.611894][ T7157] RBP: 00007fd7be7e5fa0 R08: 00007fd7bf502000 R09: 0000000000000000 [ 203.611923][ T7157] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 203.611941][ T7157] R13: 00007fd7be7e6038 R14: 00007ffde9c32930 R15: 00007ffde9c32a18 [ 203.611980][ T7157] [ 207.437730][ T7231] netlink: 16 bytes leftover after parsing attributes in process `syz.1.289'. [ 207.587286][ T7237] WARNING! power/level is deprecated; use power/control instead [ 207.965500][ T7235] zswap: compressor not available [ 208.148484][ T7250] netlink: 'syz.1.292': attribute type 21 has an invalid length. [ 208.176510][ T7250] netlink: 326 bytes leftover after parsing attributes in process `syz.1.292'. [ 210.229653][ T7287] netlink: 74 bytes leftover after parsing attributes in process `syz.3.300'. [ 210.472480][ T7298] FAULT_INJECTION: forcing a failure. [ 210.472480][ T7298] name fail_futex, interval 1, probability 0, space 0, times 0 [ 210.532490][ T7298] CPU: 0 UID: 0 PID: 7298 Comm: syz.1.303 Not tainted syzkaller #0 PREEMPT(full) [ 210.532531][ T7298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 210.532549][ T7298] Call Trace: [ 210.532559][ T7298] [ 210.532571][ T7298] dump_stack_lvl+0x16c/0x1f0 [ 210.532608][ T7298] should_fail_ex+0x512/0x640 [ 210.532644][ T7298] ? unwind_get_return_address+0x59/0xa0 [ 210.532694][ T7298] get_futex_key+0x1d0/0x15f0 [ 210.532742][ T7298] ? __pfx_get_futex_key+0x10/0x10 [ 210.532786][ T7298] ? stack_trace_save+0x8e/0xc0 [ 210.532822][ T7298] ? __pfx_stack_trace_save+0x10/0x10 [ 210.532866][ T7298] futex_wait_setup+0x9d/0x570 [ 210.532908][ T7298] __futex_wait+0x193/0x2f0 [ 210.532939][ T7298] ? __pfx___futex_wait+0x10/0x10 [ 210.532976][ T7298] ? __pfx_futex_wake_mark+0x10/0x10 [ 210.533033][ T7298] ? futex_hash+0x2c5/0x380 [ 210.533087][ T7298] ? futex_private_hash_put+0x160/0x1b0 [ 210.533144][ T7298] futex_wait+0xe8/0x380 [ 210.533173][ T7298] ? __pfx_futex_wait+0x10/0x10 [ 210.533210][ T7298] ? __lock_acquire+0x433/0x22f0 [ 210.533248][ T7298] ? kmem_cache_free+0x171/0x770 [ 210.533301][ T7298] do_futex+0x229/0x350 [ 210.533345][ T7298] ? __pfx_do_futex+0x10/0x10 [ 210.533386][ T7298] ? find_held_lock+0x2b/0x80 [ 210.533440][ T7298] __x64_sys_futex+0x1e0/0x4c0 [ 210.533486][ T7298] ? __do_sys_close_range+0x278/0x730 [ 210.533522][ T7298] ? __pfx___x64_sys_futex+0x10/0x10 [ 210.533567][ T7298] ? __pfx___do_sys_close_range+0x10/0x10 [ 210.533616][ T7298] do_syscall_64+0xcd/0xf80 [ 210.533651][ T7298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.533682][ T7298] RIP: 0033:0x7fd7be58f7c9 [ 210.533706][ T7298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.533736][ T7298] RSP: 002b:00007fd7bf4e00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 210.533765][ T7298] RAX: ffffffffffffffda RBX: 00007fd7be7e6098 RCX: 00007fd7be58f7c9 [ 210.533785][ T7298] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd7be7e6098 [ 210.533804][ T7298] RBP: 00007fd7be7e6090 R08: 0000000000000000 R09: 0000000000000000 [ 210.533822][ T7298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.533840][ T7298] R13: 00007fd7be7e6128 R14: 00007ffde9c32930 R15: 00007ffde9c32a18 [ 210.533882][ T7298] [ 210.774880][ T7298] bcache: register_bcache() error : failed to open device [ 211.233067][ T7311] Invalid ELF header len 5 [ 212.405167][ T7348] FAULT_INJECTION: forcing a failure. [ 212.405167][ T7348] name failslab, interval 1, probability 0, space 0, times 0 [ 212.419139][ T7348] CPU: 1 UID: 0 PID: 7348 Comm: syz.2.314 Not tainted syzkaller #0 PREEMPT(full) [ 212.419201][ T7348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 212.419220][ T7348] Call Trace: [ 212.419230][ T7348] [ 212.419241][ T7348] dump_stack_lvl+0x16c/0x1f0 [ 212.419279][ T7348] should_fail_ex+0x512/0x640 [ 212.419313][ T7348] ? __kmalloc_cache_noprof+0x5f/0x800 [ 212.419363][ T7348] should_failslab+0xc2/0x120 [ 212.419401][ T7348] __kmalloc_cache_noprof+0x72/0x800 [ 212.419445][ T7348] ? trace_pid_list_alloc+0x1b0/0x3f0 [ 212.419503][ T7348] ? trace_pid_list_alloc+0x1b0/0x3f0 [ 212.419571][ T7348] trace_pid_list_alloc+0x1b0/0x3f0 [ 212.419628][ T7348] trace_pid_write+0x10c/0x4b0 [ 212.419673][ T7348] ? __pfx_trace_pid_write+0x10/0x10 [ 212.419707][ T7348] ? __pfx_aa_file_perm+0x10/0x10 [ 212.419758][ T7348] ? __lock_acquire+0x433/0x22f0 [ 212.419795][ T7348] ? update_last_data+0xb3/0x510 [ 212.419860][ T7348] event_pid_write.isra.0+0x1e4/0x7f0 [ 212.419895][ T7348] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 212.419939][ T7348] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 212.419971][ T7348] vfs_write+0x2a0/0x11d0 [ 212.420007][ T7348] ? __pfx___mutex_lock+0x10/0x10 [ 212.420046][ T7348] ? __pfx_vfs_write+0x10/0x10 [ 212.420092][ T7348] ? __fget_files+0x20e/0x3c0 [ 212.420139][ T7348] ksys_write+0x12a/0x250 [ 212.420200][ T7348] ? __pfx_ksys_write+0x10/0x10 [ 212.420248][ T7348] do_syscall_64+0xcd/0xf80 [ 212.420285][ T7348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.420319][ T7348] RIP: 0033:0x7f90a4d8f7c9 [ 212.420355][ T7348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.420387][ T7348] RSP: 002b:00007f90a5c04038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 212.420418][ T7348] RAX: ffffffffffffffda RBX: 00007f90a4fe6180 RCX: 00007f90a4d8f7c9 [ 212.420438][ T7348] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 212.420456][ T7348] RBP: 00007f90a4e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 212.420476][ T7348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.420495][ T7348] R13: 00007f90a4fe6218 R14: 00007f90a4fe6180 R15: 00007fffe6ed0428 [ 212.420538][ T7348] [ 213.599739][ T7375] FAULT_INJECTION: forcing a failure. [ 213.599739][ T7375] name failslab, interval 1, probability 0, space 0, times 0 [ 213.628569][ T7375] CPU: 1 UID: 0 PID: 7375 Comm: syz.0.320 Tainted: G L syzkaller #0 PREEMPT(full) [ 213.628621][ T7375] Tainted: [L]=SOFTLOCKUP [ 213.628633][ T7375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 213.628652][ T7375] Call Trace: [ 213.628662][ T7375] [ 213.628675][ T7375] dump_stack_lvl+0x16c/0x1f0 [ 213.628714][ T7375] should_fail_ex+0x512/0x640 [ 213.628751][ T7375] ? __kmalloc_node_noprof+0xcd/0x920 [ 213.628830][ T7375] should_failslab+0xc2/0x120 [ 213.628868][ T7375] __kmalloc_node_noprof+0xe0/0x920 [ 213.628922][ T7375] ? alloc_slab_obj_exts+0x43/0xf0 [ 213.628960][ T7375] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 213.629002][ T7375] ? alloc_slab_obj_exts+0x43/0xf0 [ 213.629050][ T7375] alloc_slab_obj_exts+0x43/0xf0 [ 213.629092][ T7375] new_slab+0x353/0x430 [ 213.629137][ T7375] ___slab_alloc+0xe18/0x1c90 [ 213.629181][ T7375] ? sk_prot_alloc+0x60/0x2a0 [ 213.629239][ T7375] ? sk_prot_alloc+0x60/0x2a0 [ 213.629287][ T7375] ? __slab_alloc.constprop.0+0x63/0x110 [ 213.629348][ T7375] __slab_alloc.constprop.0+0x63/0x110 [ 213.629397][ T7375] kmem_cache_alloc_noprof+0x43f/0x760 [ 213.629443][ T7375] ? sk_prot_alloc+0x60/0x2a0 [ 213.629497][ T7375] ? sk_prot_alloc+0x60/0x2a0 [ 213.629544][ T7375] ? find_held_lock+0x2b/0x80 [ 213.629594][ T7375] sk_prot_alloc+0x60/0x2a0 [ 213.629648][ T7375] sk_alloc+0x36/0xc20 [ 213.629689][ T7375] inet_create+0x3a1/0x1040 [ 213.629733][ T7375] ? inet_create+0x93/0x1040 [ 213.629782][ T7375] __sock_create+0x339/0x8a0 [ 213.629844][ T7375] __sys_socket+0x153/0x2d0 [ 213.629873][ T7375] ? fput+0x70/0xf0 [ 213.629914][ T7375] ? __pfx___sys_socket+0x10/0x10 [ 213.629945][ T7375] ? xfd_validate_state+0x61/0x180 [ 213.629977][ T7375] ? __pfx_ksys_write+0x10/0x10 [ 213.630027][ T7375] __x64_sys_socket+0x72/0xb0 [ 213.630059][ T7375] ? lockdep_hardirqs_on+0x7c/0x110 [ 213.630094][ T7375] do_syscall_64+0xcd/0xf80 [ 213.630132][ T7375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.630166][ T7375] RIP: 0033:0x7f2c87d8f7c9 [ 213.630192][ T7375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.630224][ T7375] RSP: 002b:00007f2c88c0d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 213.630255][ T7375] RAX: ffffffffffffffda RBX: 00007f2c87fe5fa0 RCX: 00007f2c87d8f7c9 [ 213.630277][ T7375] RDX: 0000000000000088 RSI: 0000000000000002 RDI: 0000000000000002 [ 213.630297][ T7375] RBP: 00007f2c87e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 213.630317][ T7375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.630337][ T7375] R13: 00007f2c87fe6038 R14: 00007f2c87fe5fa0 R15: 00007ffc33f54f48 [ 213.630382][ T7375] [ 213.630502][ T7375] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 214.145662][ T7380] random: crng reseeded on system resumption [ 215.136805][ T7391] netlink: 16 bytes leftover after parsing attributes in process `syz.2.324'. [ 215.457650][ T53] Bluetooth: hci2: unexpected event 0x03 length: 435 > 11 [ 215.845346][ T7392] syz.2.324 (7392) used greatest stack depth: 17800 bytes left [ 216.074288][ T7405] zswap: compressor not available [ 216.100936][ T7405] FAULT_INJECTION: forcing a failure. [ 216.100936][ T7405] name failslab, interval 1, probability 0, space 0, times 0 [ 216.158443][ T7405] CPU: 0 UID: 0 PID: 7405 Comm: syz.0.329 Tainted: G L syzkaller #0 PREEMPT(full) [ 216.158497][ T7405] Tainted: [L]=SOFTLOCKUP [ 216.158508][ T7405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 216.158528][ T7405] Call Trace: [ 216.158539][ T7405] [ 216.158552][ T7405] dump_stack_lvl+0x16c/0x1f0 [ 216.158600][ T7405] should_fail_ex+0x512/0x640 [ 216.158636][ T7405] ? __kmalloc_cache_noprof+0x5f/0x800 [ 216.158687][ T7405] should_failslab+0xc2/0x120 [ 216.158728][ T7405] __kmalloc_cache_noprof+0x72/0x800 [ 216.158774][ T7405] ? fuse_dev_alloc+0x48/0x280 [ 216.158813][ T7405] ? fuse_dev_alloc+0x48/0x280 [ 216.158843][ T7405] fuse_dev_alloc+0x48/0x280 [ 216.158878][ T7405] fuse_dev_alloc_install+0x13/0x40 [ 216.158913][ T7405] cuse_channel_open+0x100/0x7f0 [ 216.158965][ T7405] ? __pfx_cuse_channel_open+0x10/0x10 [ 216.159019][ T7405] misc_open+0x26d/0x450 [ 216.159059][ T7405] ? __pfx_misc_open+0x10/0x10 [ 216.159096][ T7405] chrdev_open+0x234/0x6a0 [ 216.159133][ T7405] ? __pfx_apparmor_file_open+0x10/0x10 [ 216.159166][ T7405] ? __pfx_chrdev_open+0x10/0x10 [ 216.159204][ T7405] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 216.159253][ T7405] do_dentry_open+0x748/0x1590 [ 216.159288][ T7405] ? __pfx_chrdev_open+0x10/0x10 [ 216.159338][ T7405] vfs_open+0x82/0x3f0 [ 216.159387][ T7405] path_openat+0x2078/0x3140 [ 216.159438][ T7405] ? __pfx_path_openat+0x10/0x10 [ 216.159490][ T7405] do_filp_open+0x20b/0x470 [ 216.159529][ T7405] ? __pfx_do_filp_open+0x10/0x10 [ 216.159610][ T7405] ? alloc_fd+0x471/0x7d0 [ 216.159660][ T7405] do_sys_openat2+0x11f/0x280 [ 216.159707][ T7405] ? __pfx_do_sys_openat2+0x10/0x10 [ 216.159771][ T7405] __x64_sys_openat+0x174/0x210 [ 216.159818][ T7405] ? __pfx___x64_sys_openat+0x10/0x10 [ 216.159885][ T7405] do_syscall_64+0xcd/0xf80 [ 216.159924][ T7405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.159958][ T7405] RIP: 0033:0x7f2c87d8f7c9 [ 216.159986][ T7405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.160018][ T7405] RSP: 002b:00007f2c88c0d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 216.160049][ T7405] RAX: ffffffffffffffda RBX: 00007f2c87fe5fa0 RCX: 00007f2c87d8f7c9 [ 216.160070][ T7405] RDX: 00000000001c1041 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 216.160092][ T7405] RBP: 00007f2c87e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 216.160112][ T7405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.160131][ T7405] R13: 00007f2c87fe6038 R14: 00007f2c87fe5fa0 R15: 00007ffc33f54f48 [ 216.160180][ T7405] [ 221.054452][ T7483] random: crng reseeded on system resumption [ 222.311565][ T7503] futex_wake_op: syz.1.346 tries to shift op by -2048; fix this program [ 222.336656][ T7503] futex_wake_op: syz.1.346 tries to shift op by -2048; fix this program [ 222.356768][ T7503] 0x000000000001-0x000000020000 : "" [ 222.425294][ T7503] ftl_cs: FTL header corrupt! [ 224.230242][ T7531] FAULT_INJECTION: forcing a failure. [ 224.230242][ T7531] name failslab, interval 1, probability 0, space 0, times 0 [ 224.245615][ T7531] CPU: 0 UID: 0 PID: 7531 Comm: syz.1.353 Tainted: G L syzkaller #0 PREEMPT(full) [ 224.245670][ T7531] Tainted: [L]=SOFTLOCKUP [ 224.245682][ T7531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 224.245702][ T7531] Call Trace: [ 224.245713][ T7531] [ 224.245726][ T7531] dump_stack_lvl+0x16c/0x1f0 [ 224.245777][ T7531] should_fail_ex+0x512/0x640 [ 224.245820][ T7531] ? __kmalloc_noprof+0xca/0x8f0 [ 224.245868][ T7531] should_failslab+0xc2/0x120 [ 224.245908][ T7531] __kmalloc_noprof+0xdd/0x8f0 [ 224.245952][ T7531] ? lsm_blob_alloc+0x68/0x90 [ 224.246004][ T7531] ? lsm_blob_alloc+0x68/0x90 [ 224.246047][ T7531] lsm_blob_alloc+0x68/0x90 [ 224.246093][ T7531] security_sk_alloc+0x2f/0x270 [ 224.246127][ T7531] sk_prot_alloc+0x1c7/0x2a0 [ 224.246177][ T7531] sk_alloc+0x36/0xc20 [ 224.246215][ T7531] __netlink_create+0x5e/0x2c0 [ 224.246254][ T7531] ? __wake_up+0x3f/0x60 [ 224.246288][ T7531] netlink_create+0x39e/0x620 [ 224.246336][ T7531] ? __pfx_genl_bind+0x10/0x10 [ 224.246360][ T7531] ? __pfx_genl_unbind+0x10/0x10 [ 224.246387][ T7531] ? __pfx_genl_release+0x10/0x10 [ 224.246421][ T7531] __sock_create+0x339/0x8a0 [ 224.246477][ T7531] __sys_socket+0x153/0x2d0 [ 224.246503][ T7531] ? __x64_sys_openat+0x174/0x210 [ 224.246548][ T7531] ? __pfx___sys_socket+0x10/0x10 [ 224.246578][ T7531] ? xfd_validate_state+0x61/0x180 [ 224.246619][ T7531] __x64_sys_socket+0x72/0xb0 [ 224.246647][ T7531] ? lockdep_hardirqs_on+0x7c/0x110 [ 224.246680][ T7531] do_syscall_64+0xcd/0xf80 [ 224.246715][ T7531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.246746][ T7531] RIP: 0033:0x7fd7be58f7c9 [ 224.246771][ T7531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.246803][ T7531] RSP: 002b:00007fd7bf501038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 224.246841][ T7531] RAX: ffffffffffffffda RBX: 00007fd7be7e5fa0 RCX: 00007fd7be58f7c9 [ 224.246862][ T7531] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 224.246881][ T7531] RBP: 00007fd7be613f91 R08: 0000000000000000 R09: 0000000000000000 [ 224.246900][ T7531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.246919][ T7531] R13: 00007fd7be7e6038 R14: 00007fd7be7e5fa0 R15: 00007ffde9c32a18 [ 224.246962][ T7531] [ 224.694494][ T7542] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input10 [ 225.630805][ T7557] FAULT_INJECTION: forcing a failure. [ 225.630805][ T7557] name failslab, interval 1, probability 0, space 0, times 0 [ 225.706664][ T7557] CPU: 0 UID: 0 PID: 7557 Comm: syz.2.357 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.706714][ T7557] Tainted: [L]=SOFTLOCKUP [ 225.706725][ T7557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 225.706743][ T7557] Call Trace: [ 225.706752][ T7557] [ 225.706764][ T7557] dump_stack_lvl+0x16c/0x1f0 [ 225.706801][ T7557] should_fail_ex+0x512/0x640 [ 225.706837][ T7557] ? kmem_cache_alloc_lru_noprof+0x66/0x760 [ 225.706891][ T7557] should_failslab+0xc2/0x120 [ 225.706937][ T7557] kmem_cache_alloc_lru_noprof+0x79/0x760 [ 225.706987][ T7557] ? shmem_alloc_inode+0x25/0x50 [ 225.707023][ T7557] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 225.707073][ T7557] ? shmem_alloc_inode+0x25/0x50 [ 225.707100][ T7557] shmem_alloc_inode+0x25/0x50 [ 225.707128][ T7557] alloc_inode+0x64/0x240 [ 225.707174][ T7557] new_inode+0x22/0x1c0 [ 225.707228][ T7557] shmem_get_inode+0x19a/0xfb0 [ 225.707264][ T7557] ? __vm_enough_memory+0x184/0x3f0 [ 225.707297][ T7557] __shmem_file_setup+0x279/0x330 [ 225.707341][ T7557] shmem_zero_setup+0x93/0x1a0 [ 225.707389][ T7557] __mmap_region+0x2076/0x2770 [ 225.707442][ T7557] ? __pfx___mmap_region+0x10/0x10 [ 225.707499][ T7557] ? find_held_lock+0x2b/0x80 [ 225.707566][ T7557] ? is_bpf_text_address+0x94/0x1a0 [ 225.707616][ T7557] ? kernel_text_address+0x8d/0x100 [ 225.707733][ T7557] ? rcu_is_watching+0x12/0xc0 [ 225.707776][ T7557] mmap_region+0x1ab/0x3f0 [ 225.707822][ T7557] ? __get_unmapped_area+0x267/0x440 [ 225.707858][ T7557] do_mmap+0xa3e/0x1210 [ 225.707897][ T7557] ? __pfx_do_mmap+0x10/0x10 [ 225.707935][ T7557] ? __pfx_down_write_killable+0x10/0x10 [ 225.707983][ T7557] vm_mmap_pgoff+0x29e/0x470 [ 225.708021][ T7557] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 225.708070][ T7557] ? __pfx___might_resched+0x10/0x10 [ 225.708099][ T7557] ? blkcg_maybe_throttle_current+0x650/0xf30 [ 225.708146][ T7557] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 225.708195][ T7557] ksys_mmap_pgoff+0x7d/0x5c0 [ 225.708225][ T7557] ? rcu_is_watching+0x12/0xc0 [ 225.708259][ T7557] __x64_sys_mmap+0x125/0x190 [ 225.708298][ T7557] do_syscall_64+0xcd/0xf80 [ 225.708333][ T7557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.708365][ T7557] RIP: 0033:0x7f90a4d8f7c9 [ 225.708390][ T7557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.708420][ T7557] RSP: 002b:00007f90a5c25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 225.708449][ T7557] RAX: ffffffffffffffda RBX: 00007f90a4fe6090 RCX: 00007f90a4d8f7c9 [ 225.708470][ T7557] RDX: ffffffffffffffff RSI: 0000000000020009 RDI: 0000000000000000 [ 225.708490][ T7557] RBP: 00007f90a4e13f91 R08: 0000000000000401 R09: 0000000000008000 [ 225.708509][ T7557] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 225.708528][ T7557] R13: 00007f90a4fe6128 R14: 00007f90a4fe6090 R15: 00007fffe6ed0428 [ 225.708571][ T7557] [ 229.839394][ T7631] random: crng reseeded on system resumption [ 231.123740][ T53] Bluetooth: hci3: unexpected event 0x32 length: 727 > 9 [ 231.640862][ T7655] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 231.999477][ T7671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.384'. [ 238.042973][ T7759] random: crng reseeded on system resumption [ 239.993722][ T53] Bluetooth: hci0: unexpected event 0x32 length: 727 > 9 [ 242.570265][ T7840] random: crng reseeded on system resumption [ 242.658675][ T7838] FAULT_INJECTION: forcing a failure. [ 242.658675][ T7838] name failslab, interval 1, probability 0, space 0, times 0 [ 242.672354][ T7838] CPU: 1 UID: 0 PID: 7838 Comm: syz.2.413 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.672404][ T7838] Tainted: [L]=SOFTLOCKUP [ 242.672415][ T7838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 242.672434][ T7838] Call Trace: [ 242.672445][ T7838] [ 242.672458][ T7838] dump_stack_lvl+0x16c/0x1f0 [ 242.672499][ T7838] should_fail_ex+0x512/0x640 [ 242.672535][ T7838] ? __kmalloc_cache_noprof+0x5f/0x800 [ 242.672587][ T7838] should_failslab+0xc2/0x120 [ 242.672627][ T7838] __kmalloc_cache_noprof+0x72/0x800 [ 242.672675][ T7838] ? fuse_dev_alloc+0x8e/0x280 [ 242.672714][ T7838] ? fuse_dev_alloc+0x8e/0x280 [ 242.672743][ T7838] fuse_dev_alloc+0x8e/0x280 [ 242.672777][ T7838] fuse_dev_alloc_install+0x13/0x40 [ 242.672811][ T7838] cuse_channel_open+0x100/0x7f0 [ 242.672864][ T7838] ? __pfx_cuse_channel_open+0x10/0x10 [ 242.672920][ T7838] misc_open+0x26d/0x450 [ 242.672960][ T7838] ? __pfx_misc_open+0x10/0x10 [ 242.672999][ T7838] chrdev_open+0x234/0x6a0 [ 242.673037][ T7838] ? __pfx_apparmor_file_open+0x10/0x10 [ 242.673070][ T7838] ? __pfx_chrdev_open+0x10/0x10 [ 242.673106][ T7838] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 242.673148][ T7838] do_dentry_open+0x748/0x1590 [ 242.673182][ T7838] ? __pfx_chrdev_open+0x10/0x10 [ 242.673242][ T7838] vfs_open+0x82/0x3f0 [ 242.673292][ T7838] path_openat+0x2078/0x3140 [ 242.673341][ T7838] ? __pfx_path_openat+0x10/0x10 [ 242.673395][ T7838] do_filp_open+0x20b/0x470 [ 242.673434][ T7838] ? __pfx_do_filp_open+0x10/0x10 [ 242.673503][ T7838] ? alloc_fd+0x471/0x7d0 [ 242.673551][ T7838] do_sys_openat2+0x11f/0x280 [ 242.673598][ T7838] ? __pfx_do_sys_openat2+0x10/0x10 [ 242.673663][ T7838] __x64_sys_openat+0x174/0x210 [ 242.673712][ T7838] ? __pfx___x64_sys_openat+0x10/0x10 [ 242.673784][ T7838] do_syscall_64+0xcd/0xf80 [ 242.673822][ T7838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.673854][ T7838] RIP: 0033:0x7f90a4d8f7c9 [ 242.673881][ T7838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.673914][ T7838] RSP: 002b:00007f90a5c04038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 242.673945][ T7838] RAX: ffffffffffffffda RBX: 00007f90a4fe6180 RCX: 00007f90a4d8f7c9 [ 242.673967][ T7838] RDX: 00000000001c1041 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 242.673988][ T7838] RBP: 00007f90a4e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 242.674008][ T7838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.674027][ T7838] R13: 00007f90a4fe6218 R14: 00007f90a4fe6180 R15: 00007fffe6ed0428 [ 242.674073][ T7838] [ 242.985523][ T7834] zswap: compressor not available [ 243.607573][ T7842] zswap: compressor not available [ 244.245014][ T7856] nvme_fabrics: unknown parameter or missing value '@' in ctrl creation request [ 245.596526][ T53] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 245.943235][ T7869] netlink: 342 bytes leftover after parsing attributes in process `syz.3.419'. [ 246.859593][ T7884] netlink: zone id is out of range [ 248.035814][ T53] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 248.224581][ T7903] ubi: mtd0 is already attached to ubi31 [ 249.362343][ T7919] netlink: 334 bytes leftover after parsing attributes in process `syz.0.430'. [ 253.723442][ T7993] random: crng reseeded on system resumption [ 254.987604][ T8007] zswap: compressor not available [ 256.184945][ T8032] input: f as /devices/virtual/input/input12 [ 256.412966][ T8029] zswap: compressor not available [ 257.593427][ T8057] device-mapper: ioctl: Unable to rename non-existent device, to uuid [ 258.330954][ T8061] netlink: 28 bytes leftover after parsing attributes in process `syz.3.453'. [ 258.731525][ T8061] bond0: (slave bond_slave_1): Releasing backup interface [ 259.514293][ T8094] netlink: zone id is out of range [ 259.519447][ T8094] netlink: zone id is out of range [ 259.617110][ T8094] netlink: zone id is out of range [ 259.654563][ T8094] netlink: zone id is out of range [ 259.752007][ T8094] netlink: zone id is out of range [ 259.780106][ T8094] netlink: zone id is out of range [ 259.790120][ T8094] netlink: zone id is out of range [ 260.004829][ T8094] netlink: set zone limit has 8 unknown bytes [ 261.539726][ T53] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 262.485670][ T8145] input: f as /devices/virtual/input/input13 [ 263.673093][ T8166] Console: switching to colour VGA+ 80x25 [ 264.100370][ T8176] bridge0: port 4(netdevsim1) entered blocking state [ 264.126755][ T8176] bridge0: port 4(netdevsim1) entered disabled state [ 264.143773][ T8176] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 264.154706][ T8176] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 264.170178][ T8176] bridge0: port 4(netdevsim1) entered blocking state [ 264.177101][ T8176] bridge0: port 4(netdevsim1) entered forwarding state [ 264.463702][ T8181] FAULT_INJECTION: forcing a failure. [ 264.463702][ T8181] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 264.485378][ T8181] CPU: 0 UID: 0 PID: 8181 Comm: syz.0.476 Tainted: G L syzkaller #0 PREEMPT(full) [ 264.485433][ T8181] Tainted: [L]=SOFTLOCKUP [ 264.485445][ T8181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 264.485464][ T8181] Call Trace: [ 264.485475][ T8181] [ 264.485486][ T8181] dump_stack_lvl+0x16c/0x1f0 [ 264.485529][ T8181] should_fail_ex+0x512/0x640 [ 264.485573][ T8181] should_fail_alloc_page+0xe7/0x130 [ 264.485616][ T8181] prepare_alloc_pages+0x3c2/0x610 [ 264.485660][ T8181] __alloc_frozen_pages_noprof+0x18b/0x2440 [ 264.485713][ T8181] ? stack_trace_save+0x8e/0xc0 [ 264.485756][ T8181] ? __pfx_stack_trace_save+0x10/0x10 [ 264.485792][ T8181] ? do_raw_spin_lock+0x12c/0x2b0 [ 264.485838][ T8181] ? stack_depot_save_flags+0x29/0x9b0 [ 264.485872][ T8181] ? find_held_lock+0x2b/0x80 [ 264.485929][ T8181] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 264.485975][ T8181] ? kasan_save_stack+0x33/0x60 [ 264.486006][ T8181] ? __kasan_kmalloc+0xaa/0xb0 [ 264.486033][ T8181] ? copy_splice_read+0x1a8/0xc20 [ 264.486064][ T8181] ? do_splice_read+0x285/0x370 [ 264.486090][ T8181] ? splice_direct_to_actor+0x2a1/0xa30 [ 264.486120][ T8181] ? do_splice_direct+0x174/0x240 [ 264.486150][ T8181] ? do_sendfile+0xb06/0xe50 [ 264.486179][ T8181] ? __x64_sys_sendfile64+0x1d8/0x220 [ 264.486219][ T8181] ? do_syscall_64+0xcd/0xf80 [ 264.486291][ T8181] alloc_pages_bulk_noprof+0x77b/0x1010 [ 264.486355][ T8181] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 264.486415][ T8181] ? splice_from_pipe_next+0x1f7/0x5d0 [ 264.486447][ T8181] ? copy_splice_read+0x1a8/0xc20 [ 264.486485][ T8181] copy_splice_read+0x1e1/0xc20 [ 264.486518][ T8181] ? __pfx_pipe_to_null+0x10/0x10 [ 264.486572][ T8181] ? __lock_acquire+0x433/0x22f0 [ 264.486611][ T8181] ? __pfx_copy_splice_read+0x10/0x10 [ 264.486643][ T8181] ? pipe_unlock+0x4a/0x70 [ 264.486679][ T8181] ? __pfx_splice_from_pipe+0x10/0x10 [ 264.486722][ T8181] ? find_held_lock+0x2b/0x80 [ 264.486777][ T8181] ? __pfx_copy_splice_read+0x10/0x10 [ 264.486811][ T8181] do_splice_read+0x285/0x370 [ 264.486850][ T8181] splice_direct_to_actor+0x2a1/0xa30 [ 264.486888][ T8181] ? __pfx_direct_splice_actor+0x10/0x10 [ 264.486933][ T8181] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 264.486981][ T8181] do_splice_direct+0x174/0x240 [ 264.487018][ T8181] ? __pfx_do_splice_direct+0x10/0x10 [ 264.487055][ T8181] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 264.487115][ T8181] ? bpf_lsm_file_permission+0x9/0x10 [ 264.487163][ T8181] ? security_file_permission+0x71/0x210 [ 264.487207][ T8181] ? rw_verify_area+0xcf/0x6c0 [ 264.487271][ T8181] do_sendfile+0xb06/0xe50 [ 264.487310][ T8181] ? __pfx_do_sendfile+0x10/0x10 [ 264.487348][ T8181] ? __x64_sys_futex+0x1e0/0x4c0 [ 264.487394][ T8181] ? __x64_sys_futex+0x1e9/0x4c0 [ 264.487444][ T8181] __x64_sys_sendfile64+0x1d8/0x220 [ 264.487486][ T8181] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 264.487543][ T8181] do_syscall_64+0xcd/0xf80 [ 264.487579][ T8181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.487612][ T8181] RIP: 0033:0x7f2c87d8f7c9 [ 264.487638][ T8181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.487670][ T8181] RSP: 002b:00007f2c88c0d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 264.487701][ T8181] RAX: ffffffffffffffda RBX: 00007f2c87fe5fa0 RCX: 00007f2c87d8f7c9 [ 264.487723][ T8181] RDX: 0000000000000000 RSI: 000000000000000c RDI: 000000000000000c [ 264.487743][ T8181] RBP: 00007f2c87e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 264.487763][ T8181] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 264.487783][ T8181] R13: 00007f2c87fe6038 R14: 00007f2c87fe5fa0 R15: 00007ffc33f54f48 [ 264.487826][ T8181] [ 265.011373][ T8185] serio: Serial port pty6 [ 265.500453][ T8199] netlink: 17 bytes leftover after parsing attributes in process `syz.0.482'. [ 265.502969][ T8201] nvme_fabrics: unknown parameter or missing value '@' in ctrl creation request [ 265.926619][ T8213] netlink: 28 bytes leftover after parsing attributes in process `syz.2.486'. [ 266.162808][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.169827][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 268.764205][ T31] audit: type=1326 audit(1764965425.278:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8250 comm="syz.0.494" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2c87d8f7c9 code=0x0 [ 269.665200][ T8283] : Can't lookup blockdev [ 269.681634][ T8279] FAULT_INJECTION: forcing a failure. [ 269.681634][ T8279] name failslab, interval 1, probability 0, space 0, times 0 [ 269.702164][ T8279] CPU: 1 UID: 0 PID: 8279 Comm: syz.1.499 Tainted: G L syzkaller #0 PREEMPT(full) [ 269.702218][ T8279] Tainted: [L]=SOFTLOCKUP [ 269.702230][ T8279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 269.702249][ T8279] Call Trace: [ 269.702260][ T8279] [ 269.702273][ T8279] dump_stack_lvl+0x16c/0x1f0 [ 269.702315][ T8279] should_fail_ex+0x512/0x640 [ 269.702351][ T8279] ? kmem_cache_alloc_lru_noprof+0x66/0x760 [ 269.702406][ T8279] should_failslab+0xc2/0x120 [ 269.702446][ T8279] kmem_cache_alloc_lru_noprof+0x79/0x760 [ 269.702498][ T8279] ? shmem_alloc_inode+0x25/0x50 [ 269.702535][ T8279] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 269.702587][ T8279] ? shmem_alloc_inode+0x25/0x50 [ 269.702616][ T8279] shmem_alloc_inode+0x25/0x50 [ 269.702645][ T8279] alloc_inode+0x64/0x240 [ 269.702692][ T8279] new_inode+0x22/0x1c0 [ 269.702743][ T8279] shmem_get_inode+0x19a/0xfb0 [ 269.702779][ T8279] ? __vm_enough_memory+0x184/0x3f0 [ 269.702808][ T8279] __shmem_file_setup+0x279/0x330 [ 269.702854][ T8279] shmem_zero_setup+0x93/0x1a0 [ 269.702903][ T8279] __mmap_region+0x2076/0x2770 [ 269.702958][ T8279] ? __pfx___mmap_region+0x10/0x10 [ 269.703005][ T8279] ? __lock_acquire+0x433/0x22f0 [ 269.703082][ T8279] ? mark_held_locks+0x49/0x80 [ 269.703137][ T8279] ? __schedule+0x114c/0x6150 [ 269.703247][ T8279] ? rcu_is_watching+0x12/0xc0 [ 269.703291][ T8279] mmap_region+0x1ab/0x3f0 [ 269.703339][ T8279] ? __get_unmapped_area+0x267/0x440 [ 269.703378][ T8279] do_mmap+0xa3e/0x1210 [ 269.703418][ T8279] ? __pfx_do_mmap+0x10/0x10 [ 269.703450][ T8279] ? __pfx_down_write_killable+0x10/0x10 [ 269.703500][ T8279] vm_mmap_pgoff+0x29e/0x470 [ 269.703539][ T8279] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 269.703605][ T8279] ? __x64_sys_futex+0x1e0/0x4c0 [ 269.703655][ T8279] ? __x64_sys_futex+0x1e9/0x4c0 [ 269.703713][ T8279] ksys_mmap_pgoff+0x7d/0x5c0 [ 269.703743][ T8279] ? xfd_validate_state+0x61/0x180 [ 269.703774][ T8279] ? __task_pid_nr_ns+0x1f5/0x500 [ 269.703817][ T8279] __x64_sys_mmap+0x125/0x190 [ 269.703857][ T8279] do_syscall_64+0xcd/0xf80 [ 269.703893][ T8279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.703926][ T8279] RIP: 0033:0x7fd7be58f7c9 [ 269.703952][ T8279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.703985][ T8279] RSP: 002b:00007fd7bf4e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 269.704015][ T8279] RAX: ffffffffffffffda RBX: 00007fd7be7e6090 RCX: 00007fd7be58f7c9 [ 269.704044][ T8279] RDX: 00004000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 269.704064][ T8279] RBP: 00007fd7be613f91 R08: 0000000000000401 R09: 0000000000008000 [ 269.704083][ T8279] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 269.704102][ T8279] R13: 00007fd7be7e6128 R14: 00007fd7be7e6090 R15: 00007ffde9c32a18 [ 269.704143][ T8279] [ 270.809724][ T8295] Invalid ELF header len 5 [ 270.997859][ T8295] netlink: 28 bytes leftover after parsing attributes in process `syz.1.504'. [ 271.009370][ T8295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.016818][ T8295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.093886][ T8295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.129255][ T8295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.521655][ T8308] random: crng reseeded on system resumption [ 272.753117][ T8345] FAULT_INJECTION: forcing a failure. [ 272.753117][ T8345] name fail_futex, interval 1, probability 0, space 0, times 0 [ 272.780644][ T8345] CPU: 0 UID: 0 PID: 8345 Comm: syz.2.514 Tainted: G L syzkaller #0 PREEMPT(full) [ 272.780683][ T8345] Tainted: [L]=SOFTLOCKUP [ 272.780691][ T8345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 272.780704][ T8345] Call Trace: [ 272.780712][ T8345] [ 272.780720][ T8345] dump_stack_lvl+0x16c/0x1f0 [ 272.780749][ T8345] should_fail_ex+0x512/0x640 [ 272.780776][ T8345] ? __schedule+0x114c/0x6150 [ 272.780816][ T8345] get_futex_key+0x1d0/0x15f0 [ 272.780850][ T8345] ? __pfx_get_futex_key+0x10/0x10 [ 272.780890][ T8345] futex_wait_setup+0x9d/0x570 [ 272.780920][ T8345] __futex_wait+0x193/0x2f0 [ 272.780942][ T8345] ? __pfx___futex_wait+0x10/0x10 [ 272.780968][ T8345] ? __pfx_futex_wake_mark+0x10/0x10 [ 272.781010][ T8345] ? futex_hash+0x2c5/0x380 [ 272.781043][ T8345] ? futex_private_hash_put+0x160/0x1b0 [ 272.781076][ T8345] futex_wait+0xe8/0x380 [ 272.781096][ T8345] ? __pfx_futex_wait+0x10/0x10 [ 272.781133][ T8345] do_futex+0x229/0x350 [ 272.781165][ T8345] ? __pfx_do_futex+0x10/0x10 [ 272.781206][ T8345] __x64_sys_futex+0x1e0/0x4c0 [ 272.781240][ T8345] ? fdget_pos+0x2b8/0x370 [ 272.781267][ T8345] ? __pfx___x64_sys_futex+0x10/0x10 [ 272.781301][ T8345] ? __pfx_do_readv+0x10/0x10 [ 272.781330][ T8345] do_syscall_64+0xcd/0xf80 [ 272.781356][ T8345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.781380][ T8345] RIP: 0033:0x7f90a4d8f7c9 [ 272.781398][ T8345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.781420][ T8345] RSP: 002b:00007f90a5c460e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 272.781442][ T8345] RAX: ffffffffffffffda RBX: 00007f90a4fe5fa8 RCX: 00007f90a4d8f7c9 [ 272.781457][ T8345] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f90a4fe5fa8 [ 272.781471][ T8345] RBP: 00007f90a4fe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 272.781491][ T8345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.781512][ T8345] R13: 00007f90a4fe6038 R14: 00007fffe6ed0340 R15: 00007fffe6ed0428 [ 272.781542][ T8345] [ 274.387614][ T8379] netlink: 'syz.3.521': attribute type 22 has an invalid length. [ 274.444573][ T8379] netlink: 330 bytes leftover after parsing attributes in process `syz.3.521'. [ 274.735849][ T8387] netlink: 'syz.3.523': attribute type 1 has an invalid length. [ 274.841319][ T8387] sctp: [Deprecated]: syz.3.523 (pid 8387) Use of int in maxseg socket option. [ 274.841319][ T8387] Use struct sctp_assoc_value instead [ 276.497806][ T8429] bond0: option all_slaves_active: invalid value () [ 278.046646][ T53] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 279.978476][ T8490] kfence: disabled [ 280.084428][ T53] Bluetooth: hci0: command 0x0c1a tx timeout [ 280.345190][ T8492] netlink: 504 bytes leftover after parsing attributes in process `syz.0.543'. [ 280.473448][ T8498] netlink: 28 bytes leftover after parsing attributes in process `syz.1.542'. [ 281.027788][ T8505] netlink: 330 bytes leftover after parsing attributes in process `syz.2.547'. [ 281.103121][ T8488] kexec: Could not allocate control_code_buffer [ 282.164660][ T5853] Bluetooth: hci0: command 0x0c1a tx timeout [ 283.643291][ T8537] FAULT_INJECTION: forcing a failure. [ 283.643291][ T8537] name failslab, interval 1, probability 0, space 0, times 0 [ 283.695614][ T8537] CPU: 1 UID: 0 PID: 8537 Comm: syz.2.553 Tainted: G L syzkaller #0 PREEMPT(full) [ 283.695665][ T8537] Tainted: [L]=SOFTLOCKUP [ 283.695677][ T8537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 283.695696][ T8537] Call Trace: [ 283.695708][ T8537] [ 283.695720][ T8537] dump_stack_lvl+0x16c/0x1f0 [ 283.695760][ T8537] should_fail_ex+0x512/0x640 [ 283.695810][ T8537] ? kmem_cache_alloc_lru_noprof+0x66/0x760 [ 283.695865][ T8537] should_failslab+0xc2/0x120 [ 283.695906][ T8537] kmem_cache_alloc_lru_noprof+0x79/0x760 [ 283.695957][ T8537] ? shmem_alloc_inode+0x25/0x50 [ 283.695993][ T8537] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 283.696046][ T8537] ? shmem_alloc_inode+0x25/0x50 [ 283.696074][ T8537] shmem_alloc_inode+0x25/0x50 [ 283.696102][ T8537] alloc_inode+0x64/0x240 [ 283.696150][ T8537] new_inode+0x22/0x1c0 [ 283.696202][ T8537] shmem_get_inode+0x19a/0xfb0 [ 283.696239][ T8537] ? __vm_enough_memory+0x184/0x3f0 [ 283.696276][ T8537] __shmem_file_setup+0x279/0x330 [ 283.696320][ T8537] shmem_zero_setup+0x93/0x1a0 [ 283.696371][ T8537] __mmap_region+0x2076/0x2770 [ 283.696426][ T8537] ? __pfx___mmap_region+0x10/0x10 [ 283.696474][ T8537] ? __lock_acquire+0x433/0x22f0 [ 283.696540][ T8537] ? mark_held_locks+0x49/0x80 [ 283.696719][ T8537] ? __schedule+0x114c/0x6150 [ 283.696850][ T8537] ? rcu_is_watching+0x12/0xc0 [ 283.696903][ T8537] mmap_region+0x1ab/0x3f0 [ 283.696953][ T8537] ? __get_unmapped_area+0x267/0x440 [ 283.696993][ T8537] do_mmap+0xa3e/0x1210 [ 283.697035][ T8537] ? __pfx_do_mmap+0x10/0x10 [ 283.697069][ T8537] ? __pfx_down_write_killable+0x10/0x10 [ 283.697119][ T8537] vm_mmap_pgoff+0x29e/0x470 [ 283.697159][ T8537] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 283.697224][ T8537] ? __x64_sys_futex+0x1e0/0x4c0 [ 283.697271][ T8537] ? __x64_sys_futex+0x1e9/0x4c0 [ 283.697324][ T8537] ksys_mmap_pgoff+0x7d/0x5c0 [ 283.697354][ T8537] ? xfd_validate_state+0x61/0x180 [ 283.697385][ T8537] ? __task_pid_nr_ns+0x1f5/0x500 [ 283.697429][ T8537] __x64_sys_mmap+0x125/0x190 [ 283.697469][ T8537] do_syscall_64+0xcd/0xf80 [ 283.697509][ T8537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.697544][ T8537] RIP: 0033:0x7f90a4d8f7c9 [ 283.697573][ T8537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.697613][ T8537] RSP: 002b:00007f90a5c25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 283.697645][ T8537] RAX: ffffffffffffffda RBX: 00007f90a4fe6090 RCX: 00007f90a4d8f7c9 [ 283.697667][ T8537] RDX: 00004000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 283.697689][ T8537] RBP: 00007f90a4e13f91 R08: 0000000000000401 R09: 0000000000008000 [ 283.697710][ T8537] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 283.697731][ T8537] R13: 00007f90a4fe6128 R14: 00007f90a4fe6090 R15: 00007fffe6ed0428 [ 283.697777][ T8537] [ 284.963364][ T8560] netlink: 330 bytes leftover after parsing attributes in process `syz.0.559'. [ 285.066496][ T8550] random: crng reseeded on system resumption [ 285.494292][ T8575] block nbd0: Unsupported socket: should be TCP or UNIX. [ 286.325886][ T8571] kexec: Could not allocate control_code_buffer [ 288.299098][ T8601] FAULT_INJECTION: forcing a failure. [ 288.299098][ T8601] name failslab, interval 1, probability 0, space 0, times 0 [ 288.311927][ T8601] CPU: 1 UID: 0 PID: 8601 Comm: syz.3.567 Tainted: G L syzkaller #0 PREEMPT(full) [ 288.311974][ T8601] Tainted: [L]=SOFTLOCKUP [ 288.311985][ T8601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 288.312006][ T8601] Call Trace: [ 288.312015][ T8601] [ 288.312023][ T8601] dump_stack_lvl+0x16c/0x1f0 [ 288.312052][ T8601] should_fail_ex+0x512/0x640 [ 288.312079][ T8601] ? kmem_cache_alloc_noprof+0x62/0x760 [ 288.312116][ T8601] should_failslab+0xc2/0x120 [ 288.312144][ T8601] kmem_cache_alloc_noprof+0x75/0x760 [ 288.312176][ T8601] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 288.312199][ T8601] ? mas_preallocate+0xe6a/0x11f0 [ 288.312231][ T8601] ? mas_preallocate+0xe6a/0x11f0 [ 288.312255][ T8601] mas_preallocate+0xe6a/0x11f0 [ 288.312285][ T8601] ? __pfx_mas_preallocate+0x10/0x10 [ 288.312309][ T8601] ? rcu_is_watching+0x12/0xc0 [ 288.312342][ T8601] ? anon_vma_name+0x81/0x2f0 [ 288.312374][ T8601] __split_vma+0x34a/0x1050 [ 288.312418][ T8601] ? __pfx___split_vma+0x10/0x10 [ 288.312456][ T8601] ? __pfx_mas_prev+0x10/0x10 [ 288.312489][ T8601] vms_gather_munmap_vmas+0x3aa/0x1340 [ 288.312527][ T8601] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 288.312564][ T8601] ? mas_walk+0x6f5/0x980 [ 288.312611][ T8601] __mmap_region+0x434/0x2770 [ 288.312649][ T8601] ? __pfx___mmap_region+0x10/0x10 [ 288.312692][ T8601] ? lock_acquire+0x179/0x330 [ 288.312721][ T8601] ? find_held_lock+0x2b/0x80 [ 288.312758][ T8601] ? finish_task_switch.isra.0+0x202/0xbd0 [ 288.312806][ T8601] ? rcu_is_watching+0x12/0xc0 [ 288.312829][ T8601] ? trace_sched_exit_tp+0xd1/0x110 [ 288.312851][ T8601] ? __schedule+0x10b9/0x6150 [ 288.312887][ T8601] ? __schedule+0x114c/0x6150 [ 288.312928][ T8601] ? __lock_acquire+0x433/0x22f0 [ 288.312995][ T8601] ? rcu_is_watching+0x12/0xc0 [ 288.313025][ T8601] mmap_region+0x1ab/0x3f0 [ 288.313058][ T8601] ? __get_unmapped_area+0x267/0x440 [ 288.313084][ T8601] do_mmap+0xa3e/0x1210 [ 288.313112][ T8601] ? __pfx_do_mmap+0x10/0x10 [ 288.313134][ T8601] ? __pfx_down_write_killable+0x10/0x10 [ 288.313169][ T8601] vm_mmap_pgoff+0x29e/0x470 [ 288.313196][ T8601] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 288.313241][ T8601] ? __x64_sys_futex+0x1e0/0x4c0 [ 288.313272][ T8601] ? __x64_sys_futex+0x1e9/0x4c0 [ 288.313308][ T8601] ksys_mmap_pgoff+0x7d/0x5c0 [ 288.313329][ T8601] ? xfd_validate_state+0x61/0x180 [ 288.313351][ T8601] ? __task_pid_nr_ns+0x1f5/0x500 [ 288.313380][ T8601] __x64_sys_mmap+0x125/0x190 [ 288.313414][ T8601] do_syscall_64+0xcd/0xf80 [ 288.313441][ T8601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.313465][ T8601] RIP: 0033:0x7fe5a618f7c9 [ 288.313484][ T8601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.313506][ T8601] RSP: 002b:00007fe5a6fab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 288.313528][ T8601] RAX: ffffffffffffffda RBX: 00007fe5a63e5fa0 RCX: 00007fe5a618f7c9 [ 288.313543][ T8601] RDX: 00004000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 288.313557][ T8601] RBP: 00007fe5a6213f91 R08: 0000000000000401 R09: 0000000000008000 [ 288.313571][ T8601] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 288.313585][ T8601] R13: 00007fe5a63e6038 R14: 00007fe5a63e5fa0 R15: 00007ffeb86fa3a8 [ 288.313616][ T8601] [ 290.249595][ T8631] ptm ptm4: ldisc open failed (-12), clearing slot 4 [ 290.556628][ T8640] block nbd0: Unsupported socket: should be TCP or UNIX. [ 291.251568][ T8658] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(16) [ 291.311501][ T8659] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 291.360179][ T8658] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 291.627714][ T8666] netlink: 21 bytes leftover after parsing attributes in process `syz.2.579'. [ 291.960450][ T8625] random: crng reseeded on system resumption [ 294.485984][ T8725] block nbd0: Unsupported socket: should be TCP or UNIX. [ 294.836219][ T8731] netlink: 28 bytes leftover after parsing attributes in process `syz.2.592'. [ 296.037712][ T8765] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4) [ 296.364890][ T8761] zswap: compressor not available [ 297.326739][ T8780] Invalid ELF header magic: != ELF [ 297.679998][ T8794] netlink: 16 bytes leftover after parsing attributes in process `syz.2.604'. [ 298.404270][ T8780] netlink: zone id is out of range [ 298.409489][ T8780] netlink: get zone limit has 4 unknown bytes [ 299.490689][ T8815] netlink: 334 bytes leftover after parsing attributes in process `syz.1.611'. [ 301.158623][ T8849] svc: failed to register nfsdv3 RPC service (errno 101). [ 301.276241][ T8849] svc: failed to register nfsaclv3 RPC service (errno 101). [ 302.407397][ T8871] FAULT_INJECTION: forcing a failure. [ 302.407397][ T8871] name fail_futex, interval 1, probability 0, space 0, times 0 [ 302.439654][ T8871] CPU: 1 UID: 0 PID: 8871 Comm: syz.2.623 Tainted: G L syzkaller #0 PREEMPT(full) [ 302.439707][ T8871] Tainted: [L]=SOFTLOCKUP [ 302.439719][ T8871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 302.439753][ T8871] Call Trace: [ 302.439764][ T8871] [ 302.439776][ T8871] dump_stack_lvl+0x16c/0x1f0 [ 302.439818][ T8871] should_fail_ex+0x512/0x640 [ 302.439863][ T8871] get_futex_key+0x1d0/0x15f0 [ 302.439913][ T8871] ? __pfx_get_futex_key+0x10/0x10 [ 302.439961][ T8871] ? mmap_region+0x1ee/0x3f0 [ 302.440009][ T8871] ? __get_unmapped_area+0x267/0x440 [ 302.440047][ T8871] futex_wake+0xea/0x530 [ 302.440112][ T8871] ? __pfx_futex_wake+0x10/0x10 [ 302.440176][ T8871] ? up_write+0x282/0x4e0 [ 302.440228][ T8871] do_futex+0x1e3/0x350 [ 302.440275][ T8871] ? __pfx_do_futex+0x10/0x10 [ 302.440334][ T8871] __x64_sys_futex+0x1e0/0x4c0 [ 302.440387][ T8871] ? __pfx___x64_sys_futex+0x10/0x10 [ 302.440431][ T8871] ? ksys_mmap_pgoff+0x85/0x5c0 [ 302.440460][ T8871] ? xfd_validate_state+0x61/0x180 [ 302.440492][ T8871] ? __pfx_do_writev+0x10/0x10 [ 302.440536][ T8871] do_syscall_64+0xcd/0xf80 [ 302.440574][ T8871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.440608][ T8871] RIP: 0033:0x7f90a4d8f7c9 [ 302.440634][ T8871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.440665][ T8871] RSP: 002b:00007f90a5c460e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 302.440695][ T8871] RAX: ffffffffffffffda RBX: 00007f90a4fe5fa8 RCX: 00007f90a4d8f7c9 [ 302.440717][ T8871] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f90a4fe5fac [ 302.440735][ T8871] RBP: 00007f90a4fe5fa0 R08: 00007f90a5c47000 R09: 0000000000000000 [ 302.440754][ T8871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.440774][ T8871] R13: 00007f90a4fe6038 R14: 00007fffe6ed0340 R15: 00007fffe6ed0428 [ 302.440818][ T8871] [ 303.814022][ T8896] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 303.967817][ T8899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.629'. [ 304.073736][ T8905] random: crng reseeded on system resumption [ 304.122013][ T31] audit: type=1804 audit(1764965460.601:8): pid=8906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.630" name="/newroot/sys/kernel/debug/tracing/set_event" dev="tracefs" ino=7 res=1 errno=0 [ 310.204659][ T8967] Invalid ELF header magic: != ELF [ 310.580457][ T8972] netlink: zone id is out of range [ 310.585661][ T8972] netlink: get zone limit has 4 unknown bytes [ 310.948631][ T8971] netlink: 16 bytes leftover after parsing attributes in process `syz.1.647'. [ 313.026541][ T9008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.655'. [ 314.192595][ T9026] FAULT_INJECTION: forcing a failure. [ 314.192595][ T9026] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 314.230256][ T9026] CPU: 0 UID: 0 PID: 9026 Comm: syz.2.659 Tainted: G L syzkaller #0 PREEMPT(full) [ 314.230306][ T9026] Tainted: [L]=SOFTLOCKUP [ 314.230317][ T9026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 314.230335][ T9026] Call Trace: [ 314.230346][ T9026] [ 314.230357][ T9026] dump_stack_lvl+0x16c/0x1f0 [ 314.230395][ T9026] should_fail_ex+0x512/0x640 [ 314.230437][ T9026] should_fail_alloc_page+0xe7/0x130 [ 314.230477][ T9026] prepare_alloc_pages+0x3c2/0x610 [ 314.230513][ T9026] ? rcu_is_watching+0x12/0xc0 [ 314.230550][ T9026] __alloc_frozen_pages_noprof+0x18b/0x2440 [ 314.230604][ T9026] ? css_rstat_updated+0x1c2/0x510 [ 314.230641][ T9026] ? __pfx_css_rstat_updated+0x10/0x10 [ 314.230685][ T9026] ? __lock_acquire+0x433/0x22f0 [ 314.230727][ T9026] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 314.230793][ T9026] ? __lock_acquire+0x433/0x22f0 [ 314.230835][ T9026] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 314.230870][ T9026] ? policy_nodemask+0xea/0x4e0 [ 314.230907][ T9026] alloc_pages_mpol+0x1fb/0x550 [ 314.230943][ T9026] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 314.230990][ T9026] folio_alloc_mpol_noprof+0x36/0xe0 [ 314.231033][ T9026] vma_alloc_folio_noprof+0xed/0x1e0 [ 314.231075][ T9026] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 314.231139][ T9026] do_pte_missing+0x224d/0x4000 [ 314.231180][ T9026] ? find_held_lock+0x2b/0x80 [ 314.231241][ T9026] __handle_mm_fault+0x154b/0x2ad0 [ 314.231291][ T9026] ? __pfx___handle_mm_fault+0x10/0x10 [ 314.231333][ T9026] ? __pte_offset_map_lock+0x174/0x310 [ 314.231365][ T9026] ? find_held_lock+0x2b/0x80 [ 314.231427][ T9026] ? follow_page_pte+0x611/0x1390 [ 314.231469][ T9026] handle_mm_fault+0x3fe/0xad0 [ 314.231517][ T9026] __get_user_pages+0x605/0x33c0 [ 314.231568][ T9026] ? __pfx___get_user_pages+0x10/0x10 [ 314.231613][ T9026] populate_vma_page_range+0x267/0x3f0 [ 314.231653][ T9026] ? __pfx_populate_vma_page_range+0x10/0x10 [ 314.231689][ T9026] ? __pfx_find_vma_intersection+0x10/0x10 [ 314.231754][ T9026] __mm_populate+0x1d8/0x380 [ 314.231792][ T9026] ? __pfx___mm_populate+0x10/0x10 [ 314.231831][ T9026] ? up_write+0x282/0x4e0 [ 314.231880][ T9026] vm_mmap_pgoff+0x37f/0x470 [ 314.231915][ T9026] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 314.231969][ T9026] ? find_held_lock+0x2b/0x80 [ 314.232025][ T9026] ? __x64_sys_futex+0x1e0/0x4c0 [ 314.232067][ T9026] ? __x64_sys_futex+0x1e9/0x4c0 [ 314.232124][ T9026] ksys_mmap_pgoff+0x7d/0x5c0 [ 314.232153][ T9026] ? xfd_validate_state+0x61/0x180 [ 314.232192][ T9026] __x64_sys_mmap+0x125/0x190 [ 314.232232][ T9026] do_syscall_64+0xcd/0xf80 [ 314.232281][ T9026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.232313][ T9026] RIP: 0033:0x7f90a4d8f7c9 [ 314.232337][ T9026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.232366][ T9026] RSP: 002b:00007f90a5c46038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 314.232413][ T9026] RAX: ffffffffffffffda RBX: 00007f90a4fe5fa0 RCX: 00007f90a4d8f7c9 [ 314.232434][ T9026] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 314.232453][ T9026] RBP: 00007f90a4e13f91 R08: ffffffffffffffff R09: 0000000000000000 [ 314.232473][ T9026] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 314.232493][ T9026] R13: 00007f90a4fe6038 R14: 00007f90a4fe5fa0 R15: 00007fffe6ed0428 [ 314.232534][ T9026] [ 314.627566][ T9040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.661'. [ 315.845422][ T31] audit: type=1400 audit(4295098370.828:9): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=9062 comm="syz.0.666" [ 317.975874][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.672'. [ 318.222932][ T9092] svc: failed to register nfsdv3 RPC service (errno 111). [ 318.273415][ T9092] svc: failed to register nfsaclv3 RPC service (errno 111). [ 318.733188][ T9103] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 318.876480][ T9103] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 318.938591][ T9103] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 319.677058][ T5154] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 319.692986][ T5154] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 319.701627][ T5154] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 319.710202][ T5154] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 319.732037][ T5154] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 320.280724][ T9115] chnl_net:caif_netlink_parms(): no params data found [ 320.394950][ T9126] netlink: 342 bytes leftover after parsing attributes in process `syz.1.680'. [ 320.465682][ T9126] IPv6: NLM_F_CREATE should be specified when creating new route [ 320.496074][ T9126] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 320.503909][ T9126] IPv6: NLM_F_CREATE should be set when creating new route [ 320.511179][ T9126] IPv6: NLM_F_CREATE should be set when creating new route [ 320.622807][ T9126] netlink: 342 bytes leftover after parsing attributes in process `syz.1.680'. [ 320.753961][ T53] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 320.886081][ T9115] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.934339][ T9115] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.964267][ T9115] bridge_slave_0: entered allmulticast mode [ 320.986209][ T9115] bridge_slave_0: entered promiscuous mode [ 321.055983][ T9115] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.063265][ T9115] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.102157][ T9115] bridge_slave_1: entered allmulticast mode [ 321.113614][ T9115] bridge_slave_1: entered promiscuous mode [ 321.375232][ T9115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.441193][ T9115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.773078][ T9115] team0: Port device team_slave_0 added [ 321.788707][ T53] Bluetooth: hci5: command tx timeout [ 321.841257][ T9115] team0: Port device team_slave_1 added [ 321.896515][ T9143] FAULT_INJECTION: forcing a failure. [ 321.896515][ T9143] name failslab, interval 1, probability 0, space 0, times 0 [ 321.945835][ T9143] CPU: 0 UID: 0 PID: 9143 Comm: syz.1.683 Tainted: G L syzkaller #0 PREEMPT(full) [ 321.945872][ T9143] Tainted: [L]=SOFTLOCKUP [ 321.945880][ T9143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 321.945894][ T9143] Call Trace: [ 321.945901][ T9143] [ 321.945910][ T9143] dump_stack_lvl+0x16c/0x1f0 [ 321.945938][ T9143] should_fail_ex+0x512/0x640 [ 321.945964][ T9143] ? __kmalloc_cache_noprof+0x5f/0x800 [ 321.946012][ T9143] should_failslab+0xc2/0x120 [ 321.946039][ T9143] __kmalloc_cache_noprof+0x72/0x800 [ 321.946071][ T9143] ? ptp_open+0xe4/0x550 [ 321.946101][ T9143] ? ptp_open+0xe4/0x550 [ 321.946125][ T9143] ptp_open+0xe4/0x550 [ 321.946154][ T9143] ? __pfx_ptp_open+0x10/0x10 [ 321.946189][ T9143] ? __pfx_ptp_open+0x10/0x10 [ 321.946214][ T9143] posix_clock_open+0x17b/0x290 [ 321.946243][ T9143] ? __pfx_posix_clock_open+0x10/0x10 [ 321.946270][ T9143] chrdev_open+0x234/0x6a0 [ 321.946295][ T9143] ? __pfx_apparmor_file_open+0x10/0x10 [ 321.946317][ T9143] ? __pfx_chrdev_open+0x10/0x10 [ 321.946345][ T9143] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 321.946379][ T9143] do_dentry_open+0x748/0x1590 [ 321.946410][ T9143] ? __pfx_chrdev_open+0x10/0x10 [ 321.946444][ T9143] vfs_open+0x82/0x3f0 [ 321.946478][ T9143] path_openat+0x2078/0x3140 [ 321.946513][ T9143] ? __pfx_path_openat+0x10/0x10 [ 321.946550][ T9143] do_filp_open+0x20b/0x470 [ 321.946577][ T9143] ? __pfx_do_filp_open+0x10/0x10 [ 321.946624][ T9143] ? alloc_fd+0x471/0x7d0 [ 321.946660][ T9143] do_sys_openat2+0x11f/0x280 [ 321.946692][ T9143] ? __pfx_do_sys_openat2+0x10/0x10 [ 321.946736][ T9143] __x64_sys_openat+0x174/0x210 [ 321.946768][ T9143] ? __pfx___x64_sys_openat+0x10/0x10 [ 321.946813][ T9143] do_syscall_64+0xcd/0xf80 [ 321.946839][ T9143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.946863][ T9143] RIP: 0033:0x7fd7be58f7c9 [ 321.946881][ T9143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.946903][ T9143] RSP: 002b:00007fd7bf501038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 321.946925][ T9143] RAX: ffffffffffffffda RBX: 00007fd7be7e5fa0 RCX: 00007fd7be58f7c9 [ 321.946940][ T9143] RDX: 00000000000c0402 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 321.946954][ T9143] RBP: 00007fd7be613f91 R08: 0000000000000000 R09: 0000000000000000 [ 321.946968][ T9143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.946982][ T9143] R13: 00007fd7be7e6038 R14: 00007fd7be7e5fa0 R15: 00007ffde9c32a18 [ 321.947012][ T9143] [ 322.003636][ T9144] synth uevent: /bus/hid/drivers/zeroplus: unknown uevent action string [ 322.328563][ T9115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.355088][ T9115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.404914][ T9115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.437792][ T9115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.445220][ T9115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.476020][ T9115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.807558][ T9115] hsr_slave_0: entered promiscuous mode [ 322.827098][ T9115] hsr_slave_1: entered promiscuous mode [ 322.836350][ T9115] debugfs: 'hsr0' already exists in 'hsr' [ 322.842137][ T9115] Cannot create hsr debugfs directory [ 323.667691][ T9158] hub 1-0:1.0: USB hub found [ 323.676102][ T9158] hub 1-0:1.0: 1 port detected [ 323.722976][ T9115] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 323.757006][ T9161] hub 1-0:1.0: USB hub found [ 323.782412][ T9161] hub 1-0:1.0: 1 port detected [ 323.798137][ T9115] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 323.839886][ T9115] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 323.876254][ T53] Bluetooth: hci5: command tx timeout [ 324.004398][ T9115] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 324.156845][ T9176] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 324.163712][ T9176] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 324.430020][ T9180] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16 [ 324.561250][ T9115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.659151][ T9115] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.716449][ T6450] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.723667][ T6450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.846503][ T6450] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.853716][ T6450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.228321][ T9184] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17 [ 325.946745][ T53] Bluetooth: hci5: command tx timeout [ 326.383307][ T9115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.612094][ T9210] FAULT_INJECTION: forcing a failure. [ 326.612094][ T9210] name failslab, interval 1, probability 0, space 0, times 0 [ 326.635891][ T9210] CPU: 1 UID: 0 PID: 9210 Comm: syz.1.695 Tainted: G L syzkaller #0 PREEMPT(full) [ 326.635945][ T9210] Tainted: [L]=SOFTLOCKUP [ 326.635956][ T9210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 326.635976][ T9210] Call Trace: [ 326.635988][ T9210] [ 326.636000][ T9210] dump_stack_lvl+0x16c/0x1f0 [ 326.636041][ T9210] should_fail_ex+0x512/0x640 [ 326.636078][ T9210] ? __kmalloc_cache_noprof+0x5f/0x800 [ 326.636129][ T9210] should_failslab+0xc2/0x120 [ 326.636168][ T9210] __kmalloc_cache_noprof+0x72/0x800 [ 326.636213][ T9210] ? snd_seq_prioq_new+0x3f/0x110 [ 326.636260][ T9210] ? snd_seq_prioq_new+0x3f/0x110 [ 326.636298][ T9210] snd_seq_prioq_new+0x3f/0x110 [ 326.636337][ T9210] snd_seq_queue_alloc+0x153/0x5a0 [ 326.636379][ T9210] snd_seq_ioctl_create_queue+0xa9/0x390 [ 326.636429][ T9210] call_seq_client_ctl+0x9f/0x110 [ 326.636478][ T9210] snd_seq_kernel_client_ctl+0x7a/0xc0 [ 326.636529][ T9210] alloc_seq_queue+0xda/0x180 [ 326.636579][ T9210] ? __pfx_alloc_seq_queue+0x10/0x10 [ 326.636653][ T9210] ? mark_held_locks+0x49/0x80 [ 326.636704][ T9210] ? _raw_spin_unlock_irq+0x23/0x50 [ 326.636762][ T9210] ? lockdep_hardirqs_on+0x7c/0x110 [ 326.636804][ T9210] snd_seq_oss_open+0x38c/0xa20 [ 326.636863][ T9210] odev_open+0x79/0xc0 [ 326.636907][ T9210] ? __pfx_odev_open+0x10/0x10 [ 326.636953][ T9210] soundcore_open+0x40c/0x580 [ 326.637006][ T9210] ? __pfx_soundcore_open+0x10/0x10 [ 326.637054][ T9210] chrdev_open+0x234/0x6a0 [ 326.637091][ T9210] ? __pfx_apparmor_file_open+0x10/0x10 [ 326.637133][ T9210] ? __pfx_chrdev_open+0x10/0x10 [ 326.637173][ T9210] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 326.637225][ T9210] do_dentry_open+0x748/0x1590 [ 326.637258][ T9210] ? __pfx_chrdev_open+0x10/0x10 [ 326.637309][ T9210] vfs_open+0x82/0x3f0 [ 326.637360][ T9210] path_openat+0x2078/0x3140 [ 326.637411][ T9210] ? __pfx_path_openat+0x10/0x10 [ 326.637465][ T9210] do_filp_open+0x20b/0x470 [ 326.637505][ T9210] ? __pfx_do_filp_open+0x10/0x10 [ 326.637574][ T9210] ? alloc_fd+0x471/0x7d0 [ 326.637623][ T9210] do_sys_openat2+0x11f/0x280 [ 326.637680][ T9210] ? __pfx_do_sys_openat2+0x10/0x10 [ 326.637723][ T9210] ? __pfx___might_resched+0x10/0x10 [ 326.637756][ T9210] ? blkcg_maybe_throttle_current+0x650/0xf30 [ 326.637809][ T9210] __x64_sys_openat+0x174/0x210 [ 326.637856][ T9210] ? __pfx___x64_sys_openat+0x10/0x10 [ 326.637924][ T9210] do_syscall_64+0xcd/0xf80 [ 326.637963][ T9210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.637997][ T9210] RIP: 0033:0x7fd7be58f7c9 [ 326.638024][ T9210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.638058][ T9210] RSP: 002b:00007fd7bf501038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 326.638090][ T9210] RAX: ffffffffffffffda RBX: 00007fd7be7e5fa0 RCX: 00007fd7be58f7c9 [ 326.638113][ T9210] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 326.638135][ T9210] RBP: 00007fd7be613f91 R08: 0000000000000000 R09: 0000000000000000 [ 326.638157][ T9210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.638177][ T9210] R13: 00007fd7be7e6038 R14: 00007fd7be7e5fa0 R15: 00007ffde9c32a18 [ 326.638223][ T9210] [ 327.152673][ T9216] netlink: 'syz.2.693': attribute type 8 has an invalid length. [ 327.638017][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.646741][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.028118][ T53] Bluetooth: hci5: command tx timeout [ 328.362207][ T9236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.542374][ T9115] veth0_vlan: entered promiscuous mode [ 328.666470][ T6452] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.734222][ T9115] veth1_vlan: entered promiscuous mode [ 328.866897][ T6452] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.983197][ T6452] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.026851][ T9115] veth0_macvtap: entered promiscuous mode [ 329.059740][ T9115] veth1_macvtap: entered promiscuous mode [ 329.123443][ T6452] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.176126][ T9115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.210145][ T9115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.229231][ T4602] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.245168][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.257000][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.273467][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.520237][ T6452] bridge_slave_1: left allmulticast mode [ 329.539549][ T6452] bridge_slave_1: left promiscuous mode [ 329.589717][ T6452] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.732107][ T6452] bridge_slave_0: left allmulticast mode [ 329.813875][ T6452] bridge_slave_0: left promiscuous mode [ 329.881916][ T6452] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.489667][ T9270] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 330.987483][ T9271] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input19 [ 331.313772][ T6452] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.373384][ T6452] bond0 (unregistering): Released all slaves [ 331.463153][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.524774][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.635681][ T6457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.697452][ T6457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.687470][ T9303] FAULT_INJECTION: forcing a failure. [ 332.687470][ T9303] name failslab, interval 1, probability 0, space 0, times 0 [ 332.757869][ T9303] CPU: 0 UID: 0 PID: 9303 Comm: syz.4.708 Tainted: G L syzkaller #0 PREEMPT(full) [ 332.757921][ T9303] Tainted: [L]=SOFTLOCKUP [ 332.757933][ T9303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 332.757952][ T9303] Call Trace: [ 332.757962][ T9303] [ 332.757975][ T9303] dump_stack_lvl+0x16c/0x1f0 [ 332.758016][ T9303] should_fail_ex+0x512/0x640 [ 332.758054][ T9303] ? kmem_cache_alloc_lru_noprof+0x66/0x760 [ 332.758111][ T9303] should_failslab+0xc2/0x120 [ 332.758149][ T9303] kmem_cache_alloc_lru_noprof+0x79/0x760 [ 332.758208][ T9303] ? trace_sched_exit_tp+0xd1/0x110 [ 332.758243][ T9303] ? __d_alloc+0x35/0xa80 [ 332.758291][ T9303] ? __d_alloc+0x35/0xa80 [ 332.758327][ T9303] __d_alloc+0x35/0xa80 [ 332.758364][ T9303] ? __lock_acquire+0x433/0x22f0 [ 332.758408][ T9303] d_alloc_parallel+0x111/0x1510 [ 332.758472][ T9303] ? find_held_lock+0x2b/0x80 [ 332.758526][ T9303] ? __pfx_d_alloc_parallel+0x10/0x10 [ 332.758582][ T9303] ? __d_lookup+0x266/0x4a0 [ 332.758638][ T9303] lookup_open.isra.0+0x66c/0x1780 [ 332.758700][ T9303] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 332.758777][ T9303] ? lookup_fast+0x156/0x610 [ 332.758834][ T9303] path_openat+0x12bb/0x3140 [ 332.758893][ T9303] ? __pfx_path_openat+0x10/0x10 [ 332.758950][ T9303] do_filp_open+0x20b/0x470 [ 332.758990][ T9303] ? __pfx_do_filp_open+0x10/0x10 [ 332.759061][ T9303] ? alloc_fd+0x471/0x7d0 [ 332.759111][ T9303] do_sys_openat2+0x11f/0x280 [ 332.759160][ T9303] ? __pfx_do_sys_openat2+0x10/0x10 [ 332.759234][ T9303] __x64_sys_openat+0x174/0x210 [ 332.759286][ T9303] ? __pfx___x64_sys_openat+0x10/0x10 [ 332.759365][ T9303] do_syscall_64+0xcd/0xf80 [ 332.759403][ T9303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.759437][ T9303] RIP: 0033:0x7f4cea18f7c9 [ 332.759464][ T9303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.759497][ T9303] RSP: 002b:00007f4ceb0bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 332.759529][ T9303] RAX: ffffffffffffffda RBX: 00007f4cea3e5fa0 RCX: 00007f4cea18f7c9 [ 332.759550][ T9303] RDX: 0000000000000100 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 332.759572][ T9303] RBP: 00007f4cea213f91 R08: 0000000000000000 R09: 0000000000000000 [ 332.759592][ T9303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.759611][ T9303] R13: 00007f4cea3e6038 R14: 00007f4cea3e5fa0 R15: 00007fff2b5b30c8 [ 332.759655][ T9303] [ 333.294825][ T6452] hsr_slave_0: left promiscuous mode [ 333.330407][ T6452] hsr_slave_1: left promiscuous mode [ 333.346990][ T6452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.360752][ T6452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.369341][ T6452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.378648][ T6452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.463170][ T6452] veth1_macvtap: left promiscuous mode [ 333.470053][ T6452] veth0_macvtap: left promiscuous mode [ 333.477686][ T6452] veth1_vlan: left promiscuous mode [ 333.483473][ T6452] veth0_vlan: left promiscuous mode [ 333.911888][ T6452] pim6reg (unregistering): left allmulticast mode [ 334.939578][ T9341] FAULT_INJECTION: forcing a failure. [ 334.939578][ T9341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.955243][ T9341] CPU: 0 UID: 0 PID: 9341 Comm: syz.1.715 Tainted: G L syzkaller #0 PREEMPT(full) [ 334.955293][ T9341] Tainted: [L]=SOFTLOCKUP [ 334.955305][ T9341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 334.955324][ T9341] Call Trace: [ 334.955334][ T9341] [ 334.955347][ T9341] dump_stack_lvl+0x16c/0x1f0 [ 334.955384][ T9341] should_fail_ex+0x512/0x640 [ 334.955427][ T9341] _copy_from_user+0x2e/0xd0 [ 334.955464][ T9341] restore_altstack+0x93/0x170 [ 334.955502][ T9341] ? __pfx_restore_altstack+0x10/0x10 [ 334.955540][ T9341] ? _raw_spin_unlock_irq+0x23/0x50 [ 334.955589][ T9341] ? lockdep_hardirqs_on+0x7c/0x110 [ 334.955622][ T9341] ? _raw_spin_unlock_irq+0x2e/0x50 [ 334.955669][ T9341] ? set_current_blocked+0xdd/0x120 [ 334.955717][ T9341] __do_sys_rt_sigreturn+0x1ab/0x2c0 [ 334.955766][ T9341] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 334.955814][ T9341] ? rcu_is_watching+0x12/0xc0 [ 334.955857][ T9341] do_syscall_64+0xcd/0xf80 [ 334.955892][ T9341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.955986][ T9341] RIP: 0033:0x7fd7be52b889 [ 334.956013][ T9341] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 334.956046][ T9341] RSP: 002b:00007fd7bf500a80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 334.956077][ T9341] RAX: ffffffffffffffda RBX: 00007fd7be7e5fa0 RCX: 00007fd7be52b889 [ 334.956097][ T9341] RDX: 00007fd7bf500a80 RSI: 00007fd7bf500bb0 RDI: 0000000000000011 [ 334.956117][ T9341] RBP: 00007fd7be613f91 R08: 0000000000000000 R09: 0000000000000000 [ 334.956137][ T9341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.956156][ T9341] R13: 00007fd7be7e6038 R14: 00007fd7be7e5fa0 R15: 00007ffde9c32a18 [ 334.956203][ T9341] [ 335.589535][ T31] audit: type=1804 audit(4295098390.558:10): pid=9351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.718" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 336.048630][ T6452] team0 (unregistering): Port device team_slave_1 removed [ 336.182229][ T6452] team0 (unregistering): Port device team_slave_0 removed [ 337.604697][ T9376] batman_adv: Routing algorithm '7' is not supported [ 337.652527][ T9376] batman_adv: Routing algorithm '7' is not supported [ 337.659381][ T9376] batman_adv: Routing algorithm '7' is not supported [ 337.782617][ T9376] batman_adv: Routing algorithm '7' is not supported [ 337.789480][ T9376] batman_adv: Routing algorithm '7' is not supported [ 337.851594][ T9376] batman_adv: Routing algorithm '7' is not supported [ 337.885271][ T9376] batman_adv: Routing algorithm '7' is not supported [ 337.900910][ T9389] netlink: 16 bytes leftover after parsing attributes in process `syz.4.726'. [ 337.932773][ T9376] batman_adv: Routing algorithm '7' is not supported [ 337.949634][ T9376] batman_adv: Routing algorithm '7' is not supported [ 337.998266][ T9376] batman_adv: Routing algorithm '7' is not supported [ 338.071933][ T9376] batman_adv: Routing algorithm '7' is not supported [ 338.153790][ T9376] batman_adv: Routing algorithm '7' is not supported [ 338.153880][ T9376] batman_adv: Routing algorithm '7' is not supported [ 338.153940][ T9376] batman_adv: Routing algorithm '7' is not supported [ 338.153990][ T9376] batman_adv: Routing algorithm '7' is not supported [ 338.154042][ T9376] batman_adv: Routing algorithm '7' is not supported [ 338.154094][ T9376] batman_adv: Routing algorithm '7' is not supported [ 338.154148][ T9376] batman_adv: Routing algorithm '7' is not supported [ 338.154212][ T9376] batman_adv: Routing algorithm '7' is not supported [ 338.154303][ T9376] batman_adv: Routing algorithm '7' is not supported [ 338.154356][ T9376] batman_adv: Routing algorithm '7' is not supported [ 338.154407][ T9376] batman_adv: Routing algorithm '7' is not supported [ 338.154458][ T9376] batman_adv: Routing algorithm '7' is not supported [ 338.154510][ T9376] batman_adv: Routing algorithm '7' is not supported [ 338.154563][ T9376] batman_adv: Routing algorithm '7' is not supported [ 338.154616][ T9376] batman_adv: Routing algorithm '7' is not supported [ 338.154669][ T9376] batman_adv: Routing algorithm '7' is not supported [ 338.154722][ T9376] batman_adv: Routing algorithm '7' is not supported [ 338.154776][ T9376] batman_adv: Routing algorithm '7' is not supported [ 338.154829][ T9376] batman_adv: Routing algorithm '7' is not supported [ 338.154881][ T9376] batman_adv: Routing algorithm '7' is not supported [ 338.154940][ T9376] batman_adv: Routing algorithm '7' is not supported [ 338.154996][ T9376] batman_adv: Routing algorithm '7' is not supported [ 338.353581][ T9401] netlink: 28 bytes leftover after parsing attributes in process `syz.0.727'. [ 339.202420][ T9391] tty tty3: ldisc open failed (-12), clearing slot 2 [ 345.911573][ T9568] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 346.083885][ T9566] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 347.169898][ T9589] FAULT_INJECTION: forcing a failure. [ 347.169898][ T9589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 347.189435][ T9589] CPU: 0 UID: 0 PID: 9589 Comm: syz.4.760 Tainted: G L syzkaller #0 PREEMPT(full) [ 347.189491][ T9589] Tainted: [L]=SOFTLOCKUP [ 347.189504][ T9589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 347.189523][ T9589] Call Trace: [ 347.189534][ T9589] [ 347.189547][ T9589] dump_stack_lvl+0x16c/0x1f0 [ 347.189589][ T9589] should_fail_ex+0x512/0x640 [ 347.189635][ T9589] _copy_from_user+0x2e/0xd0 [ 347.189674][ T9589] restore_altstack+0x93/0x170 [ 347.189715][ T9589] ? __pfx_restore_altstack+0x10/0x10 [ 347.189754][ T9589] ? _raw_spin_unlock_irq+0x23/0x50 [ 347.189808][ T9589] ? lockdep_hardirqs_on+0x7c/0x110 [ 347.189842][ T9589] ? _raw_spin_unlock_irq+0x2e/0x50 [ 347.189893][ T9589] ? set_current_blocked+0xdd/0x120 [ 347.189941][ T9589] __do_sys_rt_sigreturn+0x1ab/0x2c0 [ 347.189991][ T9589] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 347.190038][ T9589] ? rcu_is_watching+0x12/0xc0 [ 347.190082][ T9589] do_syscall_64+0xcd/0xf80 [ 347.190119][ T9589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.190163][ T9589] RIP: 0033:0x7f4cea12b889 [ 347.190188][ T9589] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 347.190222][ T9589] RSP: 002b:00007f4ceb0bca80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 347.190253][ T9589] RAX: ffffffffffffffda RBX: 00007f4cea3e5fa0 RCX: 00007f4cea12b889 [ 347.190276][ T9589] RDX: 00007f4ceb0bca80 RSI: 00007f4ceb0bcbb0 RDI: 0000000000000011 [ 347.190298][ T9589] RBP: 00007f4cea213f91 R08: 0000000000000000 R09: 0000000000000000 [ 347.190318][ T9589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.190339][ T9589] R13: 00007f4cea3e6038 R14: 00007f4cea3e5fa0 R15: 00007fff2b5b30c8 [ 347.190384][ T9589] [ 348.399526][ T9619] netlink: 330 bytes leftover after parsing attributes in process `syz.1.766'. [ 348.723716][ T9623] ptp ptp0: only physical clock in use now [ 351.963397][ T9693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.782'. [ 352.013308][ T9693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.782'. [ 352.759161][ T9699] zswap: compressor not available [ 353.634271][ T9724] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 354.342646][ T9739] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 356.007532][ T9780] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 356.046206][ T9780] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 356.200736][ T9780] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 356.266744][ T9780] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 356.366619][ T9793] binder: BINDER_SET_CONTEXT_MGR already set [ 356.368825][ T9780] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 356.416601][ T9793] binder: 9778:9793 ioctl 4018620d 9 returned -16 [ 356.460056][ T9780] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 356.492164][ T9785] binder: BINDER_SET_CONTEXT_MGR already set [ 356.500345][ T9785] binder: 9778:9785 ioctl 4018620d 9 returned -16 [ 356.555372][ T9780] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 357.237297][ T9813] openvswitch: netlink: IP tunnel dst address not specified [ 358.040154][ T53] Bluetooth: hci1: command 0x0c1a tx timeout [ 358.290574][ T5154] Bluetooth: hci3: command 0x0c1a tx timeout [ 358.296758][ T53] Bluetooth: hci0: command 0x0c1a tx timeout [ 358.439862][ T5154] Bluetooth: hci5: command 0x0c1a tx timeout [ 359.700709][ T9872] hub 1-0:1.0: USB hub found [ 359.705837][ T9872] hub 1-0:1.0: 1 port detected [ 359.784474][ T9875] hub 1-0:1.0: USB hub found [ 359.802957][ T9875] hub 1-0:1.0: 1 port detected [ 360.120247][ T5154] Bluetooth: hci1: command 0x0c1a tx timeout [ 360.261497][ T31] audit: type=1800 audit(4295098415.230:11): pid=9883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.808" name="features" dev="configfs" ino=32703 res=0 errno=0 [ 360.519426][ T5154] Bluetooth: hci5: command 0x0c1a tx timeout [ 361.201807][ T9888] capability: warning: `syz.0.809' uses 32-bit capabilities (legacy support in use) [ 362.599434][ T5154] Bluetooth: hci5: command 0x0c1a tx timeout [ 363.003660][ T9941] zswap: compressor not available [ 363.260775][ T9953] FAULT_INJECTION: forcing a failure. [ 363.260775][ T9953] name fail_futex, interval 1, probability 0, space 0, times 0 [ 363.275851][ T9953] CPU: 0 UID: 0 PID: 9953 Comm: syz.4.819 Tainted: G L syzkaller #0 PREEMPT(full) [ 363.275902][ T9953] Tainted: [L]=SOFTLOCKUP [ 363.275914][ T9953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 363.275933][ T9953] Call Trace: [ 363.275942][ T9953] [ 363.275954][ T9953] dump_stack_lvl+0x16c/0x1f0 [ 363.275990][ T9953] should_fail_ex+0x512/0x640 [ 363.276027][ T9953] get_futex_key+0x1d0/0x15f0 [ 363.276074][ T9953] ? __pfx_get_futex_key+0x10/0x10 [ 363.276119][ T9953] ? __pfx_core_sys_select+0x10/0x10 [ 363.276156][ T9953] futex_wake+0xea/0x530 [ 363.276200][ T9953] ? __pfx_futex_wake+0x10/0x10 [ 363.276252][ T9953] ? poll_select_finish+0x376/0x6b0 [ 363.276281][ T9953] do_futex+0x1e3/0x350 [ 363.276318][ T9953] ? __pfx_do_futex+0x10/0x10 [ 363.276367][ T9953] __x64_sys_futex+0x1e0/0x4c0 [ 363.276413][ T9953] ? __pfx___x64_sys_futex+0x10/0x10 [ 363.276470][ T9953] ? syscall_user_dispatch+0x78/0x140 [ 363.276527][ T9953] do_syscall_64+0xcd/0xf80 [ 363.276564][ T9953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.276597][ T9953] RIP: 0033:0x7f4cea18f7c9 [ 363.276619][ T9953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.276646][ T9953] RSP: 002b:00007f4ceb0bd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 363.276670][ T9953] RAX: ffffffffffffffda RBX: 00007f4cea3e5fa8 RCX: 00007f4cea18f7c9 [ 363.276688][ T9953] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4cea3e5fac [ 363.276707][ T9953] RBP: 00007f4cea3e5fa0 R08: 00007f4ceb0be000 R09: 0000000000000000 [ 363.276725][ T9953] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 363.276743][ T9953] R13: 00007f4cea3e6038 R14: 00007fff2b5b2fe0 R15: 00007fff2b5b30c8 [ 363.276781][ T9953] [ 363.277496][ T9945] zswap: compressor not available [ 363.520585][ T9953] UHID_CREATE from different security context by process 120 (syz.4.819), this is not allowed. [ 364.335654][ T9964] zswap: compressor not available [ 365.681412][ T9992] netlink: 'syz.2.826': attribute type 4 has an invalid length. [ 366.491585][T10005] usb usb4: usbfs: interface 0 claimed by hub while 'syz.0.828' sets config #0 [ 366.806817][T10015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.832'. [ 367.282050][T10025] zswap: compressor not available [ 368.442198][T10054] misc userio: No port type given on /dev/userio [ 368.781083][T10058] FAULT_INJECTION: forcing a failure. [ 368.781083][T10058] name failslab, interval 1, probability 0, space 0, times 0 [ 368.860648][T10058] CPU: 1 UID: 0 PID: 10058 Comm: syz.1.840 Tainted: G L syzkaller #0 PREEMPT(full) [ 368.860698][T10058] Tainted: [L]=SOFTLOCKUP [ 368.860708][T10058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 368.860727][T10058] Call Trace: [ 368.860737][T10058] [ 368.860749][T10058] dump_stack_lvl+0x16c/0x1f0 [ 368.860788][T10058] should_fail_ex+0x512/0x640 [ 368.860823][T10058] ? __kmalloc_cache_noprof+0x5f/0x800 [ 368.860870][T10058] should_failslab+0xc2/0x120 [ 368.860908][T10058] __kmalloc_cache_noprof+0x72/0x800 [ 368.860964][T10058] ? ptp_open+0xe4/0x550 [ 368.861006][T10058] ? ptp_open+0xe4/0x550 [ 368.861041][T10058] ptp_open+0xe4/0x550 [ 368.861083][T10058] ? __pfx_ptp_open+0x10/0x10 [ 368.861134][T10058] ? __pfx_ptp_open+0x10/0x10 [ 368.861170][T10058] posix_clock_open+0x17b/0x290 [ 368.861213][T10058] ? __pfx_posix_clock_open+0x10/0x10 [ 368.861252][T10058] chrdev_open+0x234/0x6a0 [ 368.861288][T10058] ? __pfx_apparmor_file_open+0x10/0x10 [ 368.861320][T10058] ? __pfx_chrdev_open+0x10/0x10 [ 368.861359][T10058] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 368.861408][T10058] do_dentry_open+0x748/0x1590 [ 368.861441][T10058] ? __pfx_chrdev_open+0x10/0x10 [ 368.861490][T10058] vfs_open+0x82/0x3f0 [ 368.861538][T10058] path_openat+0x2078/0x3140 [ 368.861589][T10058] ? __pfx_path_openat+0x10/0x10 [ 368.861640][T10058] do_filp_open+0x20b/0x470 [ 368.861678][T10058] ? __pfx_do_filp_open+0x10/0x10 [ 368.861745][T10058] ? alloc_fd+0x471/0x7d0 [ 368.861793][T10058] do_sys_openat2+0x11f/0x280 [ 368.861838][T10058] ? __pfx_do_sys_openat2+0x10/0x10 [ 368.861901][T10058] __x64_sys_openat+0x174/0x210 [ 368.861957][T10058] ? __pfx___x64_sys_openat+0x10/0x10 [ 368.862021][T10058] do_syscall_64+0xcd/0xf80 [ 368.862057][T10058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.862089][T10058] RIP: 0033:0x7fd7be58f7c9 [ 368.862114][T10058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.862143][T10058] RSP: 002b:00007fd7bf501038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 368.862171][T10058] RAX: ffffffffffffffda RBX: 00007fd7be7e5fa0 RCX: 00007fd7be58f7c9 [ 368.862192][T10058] RDX: 00000000000c0402 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 368.862212][T10058] RBP: 00007fd7be613f91 R08: 0000000000000000 R09: 0000000000000000 [ 368.862230][T10058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.862250][T10058] R13: 00007fd7be7e6038 R14: 00007fd7be7e5fa0 R15: 00007ffde9c32a18 [ 368.862294][T10058] [ 373.248536][T10137] CIFS: VFS: Invalid SecurityFlags: 0 [ 374.819661][T10167] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 375.146934][T10172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.862'. [ 376.056347][T10202] FAULT_INJECTION: forcing a failure. [ 376.056347][T10202] name failslab, interval 1, probability 0, space 0, times 0 [ 376.138154][T10202] CPU: 1 UID: 0 PID: 10202 Comm: syz.1.870 Tainted: G L syzkaller #0 PREEMPT(full) [ 376.138210][T10202] Tainted: [L]=SOFTLOCKUP [ 376.138223][T10202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 376.138243][T10202] Call Trace: [ 376.138253][T10202] [ 376.138264][T10202] dump_stack_lvl+0x16c/0x1f0 [ 376.138306][T10202] should_fail_ex+0x512/0x640 [ 376.138342][T10202] ? fs_reclaim_acquire+0xae/0x150 [ 376.138384][T10202] should_failslab+0xc2/0x120 [ 376.138424][T10202] __kmalloc_cache_noprof+0x72/0x800 [ 376.138472][T10202] ? fsnotify_add_mark_locked+0x507/0xfd0 [ 376.138526][T10202] ? fsnotify_add_mark_locked+0x507/0xfd0 [ 376.138580][T10202] fsnotify_add_mark_locked+0x507/0xfd0 [ 376.138641][T10202] do_fanotify_mark+0x301d/0x39e0 [ 376.138694][T10202] ? __pfx_do_fanotify_mark+0x10/0x10 [ 376.138729][T10202] ? __x64_sys_futex+0x1e9/0x4c0 [ 376.138783][T10202] ? xfd_validate_state+0x61/0x180 [ 376.138815][T10202] ? __pfx_ksys_write+0x10/0x10 [ 376.138857][T10202] __x64_sys_fanotify_mark+0xbd/0x160 [ 376.138889][T10202] ? do_syscall_64+0x91/0xf80 [ 376.138923][T10202] ? lockdep_hardirqs_on+0x7c/0x110 [ 376.138957][T10202] do_syscall_64+0xcd/0xf80 [ 376.138993][T10202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.139027][T10202] RIP: 0033:0x7fd7be58f7c9 [ 376.139053][T10202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.139087][T10202] RSP: 002b:00007fd7bf4e0038 EFLAGS: 00000246 ORIG_RAX: 000000000000012d [ 376.139119][T10202] RAX: ffffffffffffffda RBX: 00007fd7be7e6090 RCX: 00007fd7be58f7c9 [ 376.139140][T10202] RDX: 0000000000008009 RSI: 0000000000000105 RDI: 0000000000000000 [ 376.139167][T10202] RBP: 00007fd7be613f91 R08: 0000000000000000 R09: 0000000000000000 [ 376.139186][T10202] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 376.139204][T10202] R13: 00007fd7be7e6128 R14: 00007fd7be7e6090 R15: 00007ffde9c32a18 [ 376.139246][T10202] [ 376.378228][T10199] random: crng reseeded on system resumption [ 376.471865][ T5154] Bluetooth: hci5: unexpected event 0x1c length: 725 > 5 [ 377.875976][T10249] netlink: 4 bytes leftover after parsing attributes in process `syz.4.882'. [ 377.898713][T10249] netlink: 13 bytes leftover after parsing attributes in process `syz.4.882'. [ 377.916670][T10249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.882'. [ 378.076436][ T31] audit: type=1800 audit(4295098433.040:12): pid=10254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.883" name="members" dev="configfs" ino=34644 res=0 errno=0 [ 379.832459][T10294] FAULT_INJECTION: forcing a failure. [ 379.832459][T10294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.883974][T10294] CPU: 1 UID: 0 PID: 10294 Comm: syz.4.894 Tainted: G L syzkaller #0 PREEMPT(full) [ 379.884041][T10294] Tainted: [L]=SOFTLOCKUP [ 379.884049][T10294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 379.884063][T10294] Call Trace: [ 379.884070][T10294] [ 379.884079][T10294] dump_stack_lvl+0x16c/0x1f0 [ 379.884108][T10294] should_fail_ex+0x512/0x640 [ 379.884139][T10294] _copy_from_user+0x2e/0xd0 [ 379.884165][T10294] memdup_user+0x6b/0xe0 [ 379.884200][T10294] strndup_user+0x78/0xe0 [ 379.884235][T10294] __x64_sys_fsopen+0x9c/0x240 [ 379.884272][T10294] do_syscall_64+0xcd/0xf80 [ 379.884299][T10294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.884323][T10294] RIP: 0033:0x7f4cea18f7c9 [ 379.884341][T10294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.884364][T10294] RSP: 002b:00007f4ceb0bd038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 379.884386][T10294] RAX: ffffffffffffffda RBX: 00007f4cea3e5fa0 RCX: 00007f4cea18f7c9 [ 379.884402][T10294] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 379.884416][T10294] RBP: 00007f4cea213f91 R08: 0000000000000000 R09: 0000000000000000 [ 379.884430][T10294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 379.884444][T10294] R13: 00007f4cea3e6038 R14: 00007f4cea3e5fa0 R15: 00007fff2b5b30c8 [ 379.884487][T10294] [ 382.665135][T10347] Console: switching to colour frame buffer device 128x48 [ 384.262567][T10387] netlink: 'syz.0.916': attribute type 11 has an invalid length. [ 384.272752][T10387] netlink: 'syz.0.916': attribute type 11 has an invalid length. [ 384.282805][T10387] netlink: 'syz.0.916': attribute type 11 has an invalid length. [ 384.313205][T10387] netlink: 'syz.0.916': attribute type 11 has an invalid length. [ 385.927349][T10418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.929'. [ 388.260604][T10456] FAULT_INJECTION: forcing a failure. [ 388.260604][T10456] name failslab, interval 1, probability 0, space 0, times 0 [ 388.273632][T10456] CPU: 1 UID: 0 PID: 10456 Comm: syz.4.930 Tainted: G L syzkaller #0 PREEMPT(full) [ 388.273684][T10456] Tainted: [L]=SOFTLOCKUP [ 388.273695][T10456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 388.273714][T10456] Call Trace: [ 388.273724][T10456] [ 388.273735][T10456] dump_stack_lvl+0x16c/0x1f0 [ 388.273776][T10456] should_fail_ex+0x512/0x640 [ 388.273813][T10456] ? fs_reclaim_acquire+0xae/0x150 [ 388.273852][T10456] should_failslab+0xc2/0x120 [ 388.273891][T10456] __kmalloc_noprof+0xdd/0x8f0 [ 388.273934][T10456] ? mempool_init_node+0x11b/0x6e0 [ 388.273985][T10456] ? mempool_init_node+0x2f7/0x6e0 [ 388.274043][T10456] ? __pfx_mempool_kmalloc+0x10/0x10 [ 388.274091][T10456] ? mempool_init_node+0x2f7/0x6e0 [ 388.274140][T10456] ? __pfx_mempool_kmalloc+0x10/0x10 [ 388.274188][T10456] mempool_init_node+0x2f7/0x6e0 [ 388.274248][T10456] ? __pfx_mempool_kmalloc+0x10/0x10 [ 388.274295][T10456] ? __pfx_mempool_kfree+0x10/0x10 [ 388.274343][T10456] mempool_init_noprof+0x3a/0x50 [ 388.274400][T10456] do_fanotify_mark+0x2e6b/0x39e0 [ 388.274452][T10456] ? __pfx_do_fanotify_mark+0x10/0x10 [ 388.274489][T10456] ? __x64_sys_futex+0x1e9/0x4c0 [ 388.274550][T10456] ? xfd_validate_state+0x61/0x180 [ 388.274580][T10456] ? __pfx_ksys_write+0x10/0x10 [ 388.274622][T10456] __x64_sys_fanotify_mark+0xbd/0x160 [ 388.274654][T10456] ? do_syscall_64+0x91/0xf80 [ 388.274687][T10456] ? lockdep_hardirqs_on+0x7c/0x110 [ 388.274719][T10456] do_syscall_64+0xcd/0xf80 [ 388.274754][T10456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.274787][T10456] RIP: 0033:0x7f4cea18f7c9 [ 388.274814][T10456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.274846][T10456] RSP: 002b:00007f4ceb0bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000012d [ 388.274877][T10456] RAX: ffffffffffffffda RBX: 00007f4cea3e5fa0 RCX: 00007f4cea18f7c9 [ 388.274898][T10456] RDX: 0000000000008009 RSI: 0000000000000105 RDI: 0000000000000000 [ 388.274918][T10456] RBP: 00007f4cea213f91 R08: 0000000000000000 R09: 0000000000000000 [ 388.274938][T10456] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 388.274957][T10456] R13: 00007f4cea3e6038 R14: 00007f4cea3e5fa0 R15: 00007fff2b5b30c8 [ 388.275002][T10456] [ 388.635858][T10460] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 388.839770][T10463] netlink: 28 bytes leftover after parsing attributes in process `syz.2.933'. [ 389.088410][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.088521][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 390.003737][T10491] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 392.332250][T10520] Invalid ELF header magic: != ELF [ 392.373045][T10522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.945'. [ 392.626498][T10525] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 392.812454][T10525] netlink: 'syz.4.947': attribute type 1 has an invalid length. [ 393.596009][T10534] FAULT_INJECTION: forcing a failure. [ 393.596009][T10534] name fail_futex, interval 1, probability 0, space 0, times 0 [ 393.629963][T10534] CPU: 0 UID: 0 PID: 10534 Comm: syz.1.949 Tainted: G L syzkaller #0 PREEMPT(full) [ 393.630016][T10534] Tainted: [L]=SOFTLOCKUP [ 393.630024][T10534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 393.630038][T10534] Call Trace: [ 393.630045][T10534] [ 393.630054][T10534] dump_stack_lvl+0x16c/0x1f0 [ 393.630083][T10534] should_fail_ex+0x512/0x640 [ 393.630109][T10534] ? kasan_save_track+0x14/0x30 [ 393.630135][T10534] get_futex_key+0x1d0/0x15f0 [ 393.630169][T10534] ? __pfx_get_futex_key+0x10/0x10 [ 393.630208][T10534] futex_wake+0xea/0x530 [ 393.630248][T10534] ? __pfx_futex_wake+0x10/0x10 [ 393.630289][T10534] ? _setid_policy_lookup+0x218/0x3e0 [ 393.630326][T10534] do_futex+0x1e3/0x350 [ 393.630358][T10534] ? __pfx_do_futex+0x10/0x10 [ 393.630397][T10534] __x64_sys_futex+0x1e0/0x4c0 [ 393.630432][T10534] ? __pfx___x64_sys_futex+0x10/0x10 [ 393.630466][T10534] ? set_current_groups+0x91/0xd0 [ 393.630496][T10534] ? __do_sys_setgroups+0xa2/0x4f0 [ 393.630530][T10534] do_syscall_64+0xcd/0xf80 [ 393.630555][T10534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.630578][T10534] RIP: 0033:0x7fd7be58f7c9 [ 393.630597][T10534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.630619][T10534] RSP: 002b:00007fd7bf5010e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 393.630640][T10534] RAX: ffffffffffffffda RBX: 00007fd7be7e5fa8 RCX: 00007fd7be58f7c9 [ 393.630656][T10534] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd7be7e5fac [ 393.630671][T10534] RBP: 00007fd7be7e5fa0 R08: 00007fd7bf502000 R09: 0000000000000000 [ 393.630685][T10534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.630698][T10534] R13: 00007fd7be7e6038 R14: 00007ffde9c32930 R15: 00007ffde9c32a18 [ 393.630736][T10534] [ 394.635866][T10548] netlink: 'syz.1.951': attribute type 11 has an invalid length. [ 394.669937][T10548] netlink: 'syz.1.951': attribute type 11 has an invalid length. [ 394.686732][T10548] netlink: 'syz.1.951': attribute type 11 has an invalid length. [ 394.712182][T10548] netlink: 'syz.1.951': attribute type 11 has an invalid length. [ 394.851723][T10546] FAULT_INJECTION: forcing a failure. [ 394.851723][T10546] name fail_futex, interval 1, probability 0, space 0, times 0 [ 394.885627][T10546] CPU: 1 UID: 0 PID: 10546 Comm: syz.2.958 Tainted: G L syzkaller #0 PREEMPT(full) [ 394.885664][T10546] Tainted: [L]=SOFTLOCKUP [ 394.885671][T10546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 394.885684][T10546] Call Trace: [ 394.885691][T10546] [ 394.885698][T10546] dump_stack_lvl+0x16c/0x1f0 [ 394.885745][T10546] should_fail_ex+0x512/0x640 [ 394.885775][T10546] get_futex_key+0x1085/0x15f0 [ 394.885809][T10546] ? __pfx_get_futex_key+0x10/0x10 [ 394.885850][T10546] ? __pfx___might_resched+0x10/0x10 [ 394.885878][T10546] futex_wake+0xea/0x530 [ 394.885917][T10546] ? __pfx_futex_wake+0x10/0x10 [ 394.885966][T10546] do_futex+0x1e3/0x350 [ 394.885998][T10546] ? __pfx_do_futex+0x10/0x10 [ 394.886041][T10546] ? __might_fault+0xe3/0x190 [ 394.886079][T10546] mm_release+0x24e/0x300 [ 394.886114][T10546] do_exit+0x69e/0x2bd0 [ 394.886136][T10546] ? lockdep_hardirqs_on+0x7c/0x110 [ 394.886165][T10546] ? __pfx_do_exit+0x10/0x10 [ 394.886189][T10546] ? do_raw_spin_lock+0x12c/0x2b0 [ 394.886220][T10546] ? find_held_lock+0x2b/0x80 [ 394.886259][T10546] do_group_exit+0xd3/0x2a0 [ 394.886306][T10546] get_signal+0x2671/0x26d0 [ 394.886347][T10546] ? kmem_cache_free+0x2d8/0x770 [ 394.886385][T10546] ? __pfx_get_signal+0x10/0x10 [ 394.886424][T10546] ? do_futex+0x122/0x350 [ 394.886457][T10546] arch_do_signal_or_restart+0x8f/0x7a0 [ 394.886493][T10546] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 394.886536][T10546] ? __pfx___x64_sys_futex+0x10/0x10 [ 394.886574][T10546] exit_to_user_mode_loop+0x8c/0x540 [ 394.886613][T10546] do_syscall_64+0x4ee/0xf80 [ 394.886638][T10546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.886662][T10546] RIP: 0033:0x7f90a4d8f7c9 [ 394.886680][T10546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.886703][T10546] RSP: 002b:00007f90a5c250e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 394.886725][T10546] RAX: fffffffffffffe00 RBX: 00007f90a4fe6098 RCX: 00007f90a4d8f7c9 [ 394.886740][T10546] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f90a4fe6098 [ 394.886754][T10546] RBP: 00007f90a4fe6090 R08: 0000000000000000 R09: 0000000000000000 [ 394.886768][T10546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 394.886782][T10546] R13: 00007f90a4fe6128 R14: 00007fffe6ed0340 R15: 00007fffe6ed0428 [ 394.886812][T10546] [ 395.342391][T10554] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 395.833390][T10569] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 397.075532][T10599] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 397.717130][T10616] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 398.391096][T10630] binder: 10620:10630 ioctl 400c620e 0 returned -22 [ 398.628054][T10622] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 398.653172][T10622] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 398.675955][T10622] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 399.611975][T10655] netlink: 256 bytes leftover after parsing attributes in process `syz.4.970'. [ 399.645137][T10655] openvswitch: netlink: Flow key attr not present in new flow. [ 399.869846][T10658] netlink: 28 bytes leftover after parsing attributes in process `syz.4.971'. [ 400.062535][T10665] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 400.193585][ T31] audit: type=1326 audit(4295098455.150:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10669 comm="syz.0.974" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2c87d8f7c9 code=0x0 [ 401.413589][T10709] FAULT_INJECTION: forcing a failure. [ 401.413589][T10709] name failslab, interval 1, probability 0, space 0, times 0 [ 401.459819][T10709] CPU: 0 UID: 0 PID: 10709 Comm: syz.1.981 Tainted: G L syzkaller #0 PREEMPT(full) [ 401.459872][T10709] Tainted: [L]=SOFTLOCKUP [ 401.459884][T10709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 401.459903][T10709] Call Trace: [ 401.459913][T10709] [ 401.459925][T10709] dump_stack_lvl+0x16c/0x1f0 [ 401.459966][T10709] should_fail_ex+0x512/0x640 [ 401.460001][T10709] ? kmem_cache_alloc_noprof+0x62/0x760 [ 401.460055][T10709] should_failslab+0xc2/0x120 [ 401.460114][T10709] kmem_cache_alloc_noprof+0x75/0x760 [ 401.460164][T10709] ? mas_preallocate+0xe6a/0x11f0 [ 401.460209][T10709] ? mas_preallocate+0xe6a/0x11f0 [ 401.460243][T10709] mas_preallocate+0xe6a/0x11f0 [ 401.460290][T10709] ? __memcg_slab_post_alloc_hook+0x472/0x880 [ 401.460337][T10709] ? __pfx_mas_preallocate+0x10/0x10 [ 401.460383][T10709] ? vm_area_alloc+0x1f/0x160 [ 401.460425][T10709] ? lockdep_init_map_type+0x5c/0x270 [ 401.460475][T10709] __mmap_region+0x117f/0x2770 [ 401.460530][T10709] ? __pfx___mmap_region+0x10/0x10 [ 401.460580][T10709] ? kvm_sched_clock_read+0x11/0x20 [ 401.460610][T10709] ? sched_clock+0x38/0x60 [ 401.460666][T10709] ? lock_acquire+0x179/0x330 [ 401.460707][T10709] ? find_held_lock+0x2b/0x80 [ 401.460770][T10709] ? finish_task_switch.isra.0+0x207/0xbd0 [ 401.460825][T10709] ? lockdep_hardirqs_on+0x7c/0x110 [ 401.460933][T10709] ? rcu_is_watching+0x12/0xc0 [ 401.460979][T10709] mmap_region+0x1ab/0x3f0 [ 401.461029][T10709] ? __get_unmapped_area+0x267/0x440 [ 401.461067][T10709] do_mmap+0xa3e/0x1210 [ 401.461105][T10709] ? __pfx_do_mmap+0x10/0x10 [ 401.461137][T10709] ? __pfx_down_write_killable+0x10/0x10 [ 401.461187][T10709] vm_mmap_pgoff+0x29e/0x470 [ 401.461226][T10709] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 401.461298][T10709] ? __x64_sys_futex+0x1e0/0x4c0 [ 401.461344][T10709] ? __x64_sys_futex+0x1e9/0x4c0 [ 401.461397][T10709] ksys_mmap_pgoff+0x7d/0x5c0 [ 401.461426][T10709] ? xfd_validate_state+0x61/0x180 [ 401.461457][T10709] ? __pfx_ksys_write+0x10/0x10 [ 401.461497][T10709] __x64_sys_mmap+0x125/0x190 [ 401.461536][T10709] do_syscall_64+0xcd/0xf80 [ 401.461574][T10709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.461606][T10709] RIP: 0033:0x7fd7be58f7c9 [ 401.461633][T10709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.461666][T10709] RSP: 002b:00007fd7bf501038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 401.461696][T10709] RAX: ffffffffffffffda RBX: 00007fd7be7e5fa0 RCX: 00007fd7be58f7c9 [ 401.461719][T10709] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 401.461740][T10709] RBP: 00007fd7be613f91 R08: 0000000000000003 R09: 0000000000008000 [ 401.461760][T10709] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 401.461780][T10709] R13: 00007fd7be7e6038 R14: 00007fd7be7e5fa0 R15: 00007ffde9c32a18 [ 401.461826][T10709] [ 401.764594][T10709] FAULT_INJECTION: forcing a failure. [ 401.764594][T10709] name failslab, interval 1, probability 0, space 0, times 0 [ 401.777451][T10709] CPU: 0 UID: 0 PID: 10709 Comm: syz.1.981 Tainted: G L syzkaller #0 PREEMPT(full) [ 401.777503][T10709] Tainted: [L]=SOFTLOCKUP [ 401.777515][T10709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 401.777535][T10709] Call Trace: [ 401.777545][T10709] [ 401.777555][T10709] dump_stack_lvl+0x16c/0x1f0 [ 401.777596][T10709] should_fail_ex+0x512/0x640 [ 401.777633][T10709] ? __kmalloc_noprof+0xca/0x8f0 [ 401.777700][T10709] should_failslab+0xc2/0x120 [ 401.777740][T10709] __kmalloc_noprof+0xdd/0x8f0 [ 401.777784][T10709] ? __lock_acquire+0x433/0x22f0 [ 401.777822][T10709] ? sk_prot_alloc+0x1a8/0x2a0 [ 401.777879][T10709] ? sk_prot_alloc+0x1a8/0x2a0 [ 401.777927][T10709] sk_prot_alloc+0x1a8/0x2a0 [ 401.777981][T10709] sk_alloc+0x36/0xc20 [ 401.778021][T10709] pppol2tp_create+0x32/0x250 [ 401.778064][T10709] pppox_create+0x15c/0x2c0 [ 401.778112][T10709] __sock_create+0x339/0x8a0 [ 401.778171][T10709] __sys_socket+0x153/0x2d0 [ 401.778208][T10709] ? __pfx___sys_socket+0x10/0x10 [ 401.778240][T10709] ? xfd_validate_state+0x61/0x180 [ 401.778282][T10709] __x64_sys_socket+0x72/0xb0 [ 401.778311][T10709] ? lockdep_hardirqs_on+0x7c/0x110 [ 401.778343][T10709] do_syscall_64+0xcd/0xf80 [ 401.778375][T10709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.778406][T10709] RIP: 0033:0x7fd7be58f7c9 [ 401.778433][T10709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.778465][T10709] RSP: 002b:00007fd7bf501038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 401.778495][T10709] RAX: ffffffffffffffda RBX: 00007fd7be7e5fa0 RCX: 00007fd7be58f7c9 [ 401.778517][T10709] RDX: 0000000000000001 RSI: 0000000000000005 RDI: 0000000000000018 [ 401.778536][T10709] RBP: 00007fd7be613f91 R08: 0000000000000000 R09: 0000000000000000 [ 401.778557][T10709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 401.778575][T10709] R13: 00007fd7be7e6038 R14: 00007fd7be7e5fa0 R15: 00007ffde9c32a18 [ 401.778619][T10709] [ 403.152430][T10747] input: f as /devices/virtual/input/input21 [ 404.873849][T10779] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 405.378184][T10784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.998'. [ 405.974946][T10787] FAULT_INJECTION: forcing a failure. [ 405.974946][T10787] name fail_futex, interval 1, probability 0, space 0, times 0 [ 405.990544][T10787] CPU: 0 UID: 0 PID: 10787 Comm: syz.0.999 Tainted: G L syzkaller #0 PREEMPT(full) [ 405.990594][T10787] Tainted: [L]=SOFTLOCKUP [ 405.990605][T10787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 405.990632][T10787] Call Trace: [ 405.990642][T10787] [ 405.990655][T10787] dump_stack_lvl+0x16c/0x1f0 [ 405.990694][T10787] should_fail_ex+0x512/0x640 [ 405.990736][T10787] get_futex_key+0x1d0/0x15f0 [ 405.990783][T10787] ? __pfx_get_futex_key+0x10/0x10 [ 405.990825][T10787] ? __pfx___might_resched+0x10/0x10 [ 405.990862][T10787] futex_wake+0xea/0x530 [ 405.990916][T10787] ? __pfx_futex_wake+0x10/0x10 [ 405.990985][T10787] do_futex+0x1e3/0x350 [ 405.991027][T10787] ? __pfx_do_futex+0x10/0x10 [ 405.991067][T10787] ? __might_fault+0xe3/0x190 [ 405.991122][T10787] mm_release+0x24e/0x300 [ 405.991172][T10787] do_exit+0x69e/0x2bd0 [ 405.991217][T10787] ? __pfx_do_exit+0x10/0x10 [ 405.991252][T10787] ? do_raw_spin_lock+0x12c/0x2b0 [ 405.991298][T10787] ? find_held_lock+0x2b/0x80 [ 405.991364][T10787] do_group_exit+0xd3/0x2a0 [ 405.991403][T10787] get_signal+0x2671/0x26d0 [ 405.991460][T10787] ? kmem_cache_free+0x2d8/0x770 [ 405.991510][T10787] ? __pfx_get_signal+0x10/0x10 [ 405.991562][T10787] ? do_futex+0x122/0x350 [ 405.991608][T10787] arch_do_signal_or_restart+0x8f/0x7a0 [ 405.991664][T10787] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 405.991721][T10787] ? __pfx___x64_sys_futex+0x10/0x10 [ 405.991773][T10787] exit_to_user_mode_loop+0x8c/0x540 [ 405.991825][T10787] do_syscall_64+0x4ee/0xf80 [ 405.991862][T10787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.991894][T10787] RIP: 0033:0x7f2c87d8f7c9 [ 405.991918][T10787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.991948][T10787] RSP: 002b:00007f2c88c0d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 405.991977][T10787] RAX: fffffffffffffe00 RBX: 00007f2c87fe5fa8 RCX: 00007f2c87d8f7c9 [ 405.991998][T10787] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2c87fe5fa8 [ 405.992017][T10787] RBP: 00007f2c87fe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 405.992036][T10787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 405.992056][T10787] R13: 00007f2c87fe6038 R14: 00007ffc33f54e60 R15: 00007ffc33f54f48 [ 405.992095][T10787] [ 406.707139][T10810] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 406.763662][T10810] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1003'. [ 407.328882][T10810] team0: Port device team_slave_0 removed [ 407.557159][T10816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.590051][T10816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.799453][ T5154] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 408.546917][T10833] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 410.966190][T10883] nvme_fcloop: unknown parameter or missing value '0' [ 410.985733][T10883] hub 1-0:1.0: USB hub found [ 410.992375][T10883] hub 1-0:1.0: 1 port detected [ 411.017234][T10883] FAULT_INJECTION: forcing a failure. [ 411.017234][T10883] name failslab, interval 1, probability 0, space 0, times 0 [ 411.039434][T10883] CPU: 1 UID: 0 PID: 10883 Comm: syz.4.1019 Tainted: G L syzkaller #0 PREEMPT(full) [ 411.039485][T10883] Tainted: [L]=SOFTLOCKUP [ 411.039497][T10883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 411.039517][T10883] Call Trace: [ 411.039528][T10883] [ 411.039541][T10883] dump_stack_lvl+0x16c/0x1f0 [ 411.039578][T10883] should_fail_ex+0x512/0x640 [ 411.039627][T10883] ? kmem_cache_alloc_noprof+0x62/0x760 [ 411.039678][T10883] should_failslab+0xc2/0x120 [ 411.039718][T10883] kmem_cache_alloc_noprof+0x75/0x760 [ 411.039764][T10883] ? __kernfs_new_node+0xd2/0x8d0 [ 411.039821][T10883] ? __kernfs_new_node+0xd2/0x8d0 [ 411.039866][T10883] __kernfs_new_node+0xd2/0x8d0 [ 411.039920][T10883] ? __pfx___kernfs_new_node+0x10/0x10 [ 411.039981][T10883] ? find_held_lock+0x2b/0x80 [ 411.040033][T10883] ? kernfs_root+0xee/0x2a0 [ 411.040090][T10883] kernfs_new_node+0x13c/0x1e0 [ 411.040134][T10883] __kernfs_create_file+0x53/0x350 [ 411.040182][T10883] sysfs_add_file_mode_ns+0x207/0x3c0 [ 411.040239][T10883] internal_create_group+0x578/0xf20 [ 411.040296][T10883] ? sysfs_create_file_ns+0x154/0x1d0 [ 411.040341][T10883] ? __pfx_internal_create_group+0x10/0x10 [ 411.040388][T10883] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 411.040440][T10883] ? down_read+0x13d/0x460 [ 411.040486][T10883] ? acpi_device_notify+0x351/0x480 [ 411.040518][T10883] ? lockdep_init_map_type+0x5c/0x270 [ 411.040564][T10883] internal_create_groups+0x9d/0x150 [ 411.040641][T10883] device_add+0x77f/0x1950 [ 411.040707][T10883] ? __pfx_device_add+0x10/0x10 [ 411.040753][T10883] ? lockdep_init_map_type+0x5c/0x270 [ 411.040796][T10883] ? __init_waitqueue_head+0xca/0x150 [ 411.040852][T10883] usb_create_ep_devs+0x160/0x2b0 [ 411.040899][T10883] create_intf_ep_devs.isra.0+0x161/0x200 [ 411.040948][T10883] usb_set_configuration+0x11a7/0x1e20 [ 411.041022][T10883] bConfigurationValue_store+0x100/0x180 [ 411.041066][T10883] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 411.041109][T10883] ? find_held_lock+0x2b/0x80 [ 411.041162][T10883] ? sysfs_file_kobj+0xe4/0x290 [ 411.041206][T10883] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 411.041253][T10883] dev_attr_store+0x58/0x80 [ 411.041299][T10883] ? __pfx_dev_attr_store+0x10/0x10 [ 411.041343][T10883] sysfs_kf_write+0xf2/0x150 [ 411.041388][T10883] kernfs_fop_write_iter+0x3af/0x570 [ 411.041431][T10883] ? __pfx_sysfs_kf_write+0x10/0x10 [ 411.041480][T10883] iter_file_splice_write+0xa24/0x12b0 [ 411.041540][T10883] ? copy_splice_read+0x89c/0xc20 [ 411.041573][T10883] ? __pfx_iter_file_splice_write+0x10/0x10 [ 411.041619][T10883] ? __pfx_copy_splice_read+0x10/0x10 [ 411.041676][T10883] ? __pfx_iter_file_splice_write+0x10/0x10 [ 411.041717][T10883] direct_splice_actor+0x192/0x6c0 [ 411.041758][T10883] splice_direct_to_actor+0x345/0xa30 [ 411.041797][T10883] ? __pfx_direct_splice_actor+0x10/0x10 [ 411.041841][T10883] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 411.041889][T10883] do_splice_direct+0x174/0x240 [ 411.041926][T10883] ? __pfx_do_splice_direct+0x10/0x10 [ 411.041962][T10883] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 411.042004][T10883] ? rw_verify_area+0xcf/0x6c0 [ 411.042060][T10883] do_sendfile+0xb06/0xe50 [ 411.042098][T10883] ? __pfx_do_sendfile+0x10/0x10 [ 411.042136][T10883] ? __x64_sys_futex+0x1e0/0x4c0 [ 411.042179][T10883] ? __x64_sys_futex+0x1e9/0x4c0 [ 411.042229][T10883] __x64_sys_sendfile64+0x1d8/0x220 [ 411.042272][T10883] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 411.042328][T10883] do_syscall_64+0xcd/0xf80 [ 411.042365][T10883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.042398][T10883] RIP: 0033:0x7f4cea18f7c9 [ 411.042431][T10883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.042464][T10883] RSP: 002b:00007f4ceb0bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 411.042498][T10883] RAX: ffffffffffffffda RBX: 00007f4cea3e5fa0 RCX: 00007f4cea18f7c9 [ 411.042519][T10883] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 411.042538][T10883] RBP: 00007f4cea213f91 R08: 0000000000000000 R09: 0000000000000000 [ 411.042558][T10883] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 411.042578][T10883] R13: 00007f4cea3e6038 R14: 00007f4cea3e5fa0 R15: 00007fff2b5b30c8 [ 411.042622][T10883] [ 411.073328][T10865] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 411.594274][T10865] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 411.608464][T10865] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 411.638307][T10865] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 411.770025][ T31] audit: type=1800 audit(4295098466.740:14): pid=10885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1020" name="discovery_nqn" dev="configfs" ino=41414 res=0 errno=0 [ 412.654214][T10898] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 412.770400][ T5154] Bluetooth: hci1: command 0x0c1a tx timeout [ 413.649438][ T53] Bluetooth: hci5: command 0x0c1a tx timeout [ 413.655720][ T53] Bluetooth: hci0: command 0x0c1a tx timeout [ 413.660165][T10906] Bluetooth: hci3: command 0x0c1a tx timeout [ 414.531633][T10914] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 414.569728][T10914] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 414.610815][T10914] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 414.617010][T10914] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 414.636349][T10914] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 414.919454][ T5154] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 416.599338][ T5154] Bluetooth: hci1: command 0x0c1a tx timeout [ 416.680034][ T5154] Bluetooth: hci5: command 0x0c1a tx timeout [ 416.680056][T10906] Bluetooth: hci0: command 0x0c1a tx timeout [ 416.680077][ T5853] Bluetooth: hci3: command 0x0c1a tx timeout [ 417.370209][T10969] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:7 is already present [ 419.657366][T11027] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 419.666799][T11030] futex_wake_op: syz.4.1057 tries to shift op by -2048; fix this program [ 419.983188][T11043] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1061'. [ 421.808290][T11067] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 422.203762][T11077] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 423.464668][T11093] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 423.776750][T11093] zswap: compressor not available [ 427.107976][T11151] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 427.186068][T11157] FAULT_INJECTION: forcing a failure. [ 427.186068][T11157] name failslab, interval 1, probability 0, space 0, times 0 [ 427.203308][T11157] CPU: 1 UID: 0 PID: 11157 Comm: syz.2.1086 Tainted: G L syzkaller #0 PREEMPT(full) [ 427.203357][T11157] Tainted: [L]=SOFTLOCKUP [ 427.203368][T11157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 427.203385][T11157] Call Trace: [ 427.203394][T11157] [ 427.203406][T11157] dump_stack_lvl+0x16c/0x1f0 [ 427.203442][T11157] should_fail_ex+0x512/0x640 [ 427.203476][T11157] ? kmem_cache_alloc_noprof+0x62/0x760 [ 427.203525][T11157] should_failslab+0xc2/0x120 [ 427.203561][T11157] kmem_cache_alloc_noprof+0x75/0x760 [ 427.203607][T11157] ? security_file_alloc+0x34/0x2b0 [ 427.203653][T11157] ? security_file_alloc+0x34/0x2b0 [ 427.203697][T11157] security_file_alloc+0x34/0x2b0 [ 427.203736][T11157] init_file+0x93/0x4c0 [ 427.203777][T11157] alloc_empty_file+0x73/0x1e0 [ 427.203820][T11157] alloc_file_pseudo+0x13a/0x230 [ 427.203865][T11157] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 427.203904][T11157] ? alloc_fd+0x471/0x7d0 [ 427.203944][T11157] sock_alloc_file+0x50/0x210 [ 427.203989][T11157] __sys_socket+0x1c6/0x2d0 [ 427.204017][T11157] ? __x64_sys_openat+0x174/0x210 [ 427.204062][T11157] ? __pfx___sys_socket+0x10/0x10 [ 427.204090][T11157] ? xfd_validate_state+0x61/0x180 [ 427.204133][T11157] __x64_sys_socket+0x72/0xb0 [ 427.204160][T11157] ? lockdep_hardirqs_on+0x7c/0x110 [ 427.204191][T11157] do_syscall_64+0xcd/0xf80 [ 427.204227][T11157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.204262][T11157] RIP: 0033:0x7f90a4d8f7c9 [ 427.204287][T11157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.204317][T11157] RSP: 002b:00007f90a5c25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 427.204347][T11157] RAX: ffffffffffffffda RBX: 00007f90a4fe6090 RCX: 00007f90a4d8f7c9 [ 427.204368][T11157] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 427.204387][T11157] RBP: 00007f90a4e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 427.204406][T11157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.204424][T11157] R13: 00007f90a4fe6128 R14: 00007f90a4fe6090 R15: 00007fffe6ed0428 [ 427.204466][T11157] [ 427.205256][T11157] VFS_BUG_ON_INODE(inode_state_read_once(inode) & I_CLEAR) encountered for inode ffff888059b6ee00 [ 427.205256][T11157] fs sockfs mode 140777 opflags 0xc flags 0x0 state 0x300 count 0 [ 427.440641][T11157] ------------[ cut here ]------------ [ 427.446146][T11157] kernel BUG at fs/inode.c:1971! [ 427.451234][T11157] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 427.457533][T11157] CPU: 1 UID: 0 PID: 11157 Comm: syz.2.1086 Tainted: G L syzkaller #0 PREEMPT(full) [ 427.468515][T11157] Tainted: [L]=SOFTLOCKUP [ 427.472846][T11157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 427.482914][T11157] RIP: 0010:iput.part.0+0xb3b/0x1190 [ 427.488275][T11157] Code: 4b 68 ff ff 90 0f 0b e8 73 fa 7c ff 90 0f 0b 90 e9 d3 f8 ff ff e8 65 fa 7c ff 48 c7 c6 a0 79 a0 8b 48 89 df e8 26 68 ff ff 90 <0f> 0b e8 4e fa 7c ff 48 c7 c6 00 7a a0 8b 48 89 df e8 0f 68 ff ff [ 427.507953][T11157] RSP: 0018:ffffc90004befdc8 EFLAGS: 00010296 [ 427.514052][T11157] RAX: 000000000000009f RBX: ffff888059b6ee00 RCX: ffffffff819b7b55 [ 427.522045][T11157] RDX: 0000000000000000 RSI: ffffffff819bf739 RDI: 0000000000000005 [ 427.530038][T11157] RBP: 0000000000000200 R08: 0000000000000005 R09: 0000000000000000 [ 427.538031][T11157] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000000 [ 427.546024][T11157] R13: ffffffff90878234 R14: ffff888059b6eed0 R15: dffffc0000000000 [ 427.554019][T11157] FS: 00007f90a5c256c0(0000) GS:ffff888124a67000(0000) knlGS:0000000000000000 [ 427.562975][T11157] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 427.569585][T11157] CR2: 00007f90a5be2f98 CR3: 000000005953e000 CR4: 00000000003526f0 [ 427.577577][T11157] Call Trace: [ 427.580871][T11157] [ 427.583823][T11157] iput+0x35/0x40 [ 427.587492][T11157] __sock_release+0x20b/0x270 [ 427.592202][T11157] __sys_socket+0x23a/0x2d0 [ 427.596722][T11157] ? __x64_sys_openat+0x174/0x210 [ 427.601782][T11157] ? __pfx___sys_socket+0x10/0x10 [ 427.606838][T11157] ? xfd_validate_state+0x61/0x180 [ 427.611999][T11157] __x64_sys_socket+0x72/0xb0 [ 427.616729][T11157] ? lockdep_hardirqs_on+0x7c/0x110 [ 427.621967][T11157] do_syscall_64+0xcd/0xf80 [ 427.626507][T11157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.632435][T11157] RIP: 0033:0x7f90a4d8f7c9 [ 427.636924][T11157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.656610][T11157] RSP: 002b:00007f90a5c25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 427.665049][T11157] RAX: ffffffffffffffda RBX: 00007f90a4fe6090 RCX: 00007f90a4d8f7c9 [ 427.673039][T11157] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 427.681023][T11157] RBP: 00007f90a4e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 427.689023][T11157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.697028][T11157] R13: 00007f90a4fe6128 R14: 00007f90a4fe6090 R15: 00007fffe6ed0428 [ 427.705039][T11157] [ 427.708070][T11157] Modules linked in: [ 427.712422][T11157] ---[ end trace 0000000000000000 ]--- [ 427.752615][T11157] RIP: 0010:iput.part.0+0xb3b/0x1190 [ 427.760264][T11157] Code: 4b 68 ff ff 90 0f 0b e8 73 fa 7c ff 90 0f 0b 90 e9 d3 f8 ff ff e8 65 fa 7c ff 48 c7 c6 a0 79 a0 8b 48 89 df e8 26 68 ff ff 90 <0f> 0b e8 4e fa 7c ff 48 c7 c6 00 7a a0 8b 48 89 df e8 0f 68 ff ff [ 427.789724][T11157] RSP: 0018:ffffc90004befdc8 EFLAGS: 00010296 [ 427.795940][T11157] RAX: 000000000000009f RBX: ffff888059b6ee00 RCX: ffffffff819b7b55 [ 427.804154][T11157] RDX: 0000000000000000 RSI: ffffffff819bf739 RDI: 0000000000000005 [ 427.814891][T11157] RBP: 0000000000000200 R08: 0000000000000005 R09: 0000000000000000 [ 427.825590][T11157] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000000 [ 427.846652][T11157] R13: ffffffff90878234 R14: ffff888059b6eed0 R15: dffffc0000000000 [ 427.858776][T11157] FS: 00007f90a5c256c0(0000) GS:ffff888124a67000(0000) knlGS:0000000000000000 [ 427.872812][T11157] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 427.889355][T11157] CR2: 0000001b324f4000 CR3: 000000005953e000 CR4: 00000000003526f0 [ 427.904012][T11157] Kernel panic - not syncing: Fatal exception [ 427.910431][T11157] Kernel Offset: disabled [ 427.914777][T11157] Rebooting in 86400 seconds..