last executing test programs: 15m28.118355411s ago: executing program 1 (id=1119): io_uring_setup$auto(0xb5, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x10004010) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x4a481, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x80002, 0x73) r1 = socket(0x2, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x4000000) bpf$auto(0x800, &(0x7f0000000480)=@query={@target_fd=r0, 0x3, 0x8, 0x5, 0xe09c, @count=0x12b, 0x0, 0x2, 0x9e, 0x6, 0xa22}, 0x9) syz_clone3(&(0x7f0000000540)={0x0, &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000340), {0x3b}, &(0x7f0000000380)=""/24, 0x18, &(0x7f00000003c0), &(0x7f0000000440)=[0x0], 0x1, {r2}}, 0x58) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) r3 = socket(0x2, 0x1, 0x0) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x5, 0x20000000) socketpair$auto(0xb2c, 0x2, 0x20000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c00, &(0x7f00000003c0)={0x0, 0xc4}, 0x1, 0x0, 0xffffffffffff4ee3, 0x3}, 0x5}, 0x3, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) ustat$auto(0x801, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f00000006c0)='7\x00\\\xa0\x04|4\x00\x00\x03\x00\x00\x00\x10\x01\x00(2\xc2\xa0Ur\xc3\x13Z)\x00\x00\x00\x00\x00\x00\x00rRVr\xc4O\xdc1\x9b%\x10Z\'\xb9\'\xa3stC=\x85\xc6\xf6\x13 \xeb\xff%\x11\x82\x05\xdfV\x02\xca&\xd8$<\xab&\xc8B-\xcc\x15\x04&\x13;\xfe\xbdQ\xaa\x16o\x1f\xc7\x94\xa3\xc9\x9a\xe1d\xf5\n\xe2\x88\x84\vT?\x98\xa2\x00'/217, 0xd03) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7) write$auto(0x3, 0x0, 0x100085) 15m27.70050088s ago: executing program 1 (id=1114): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) madvise$auto(0x0, 0x6, 0x66) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000) mmap$auto(0x3000000, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/sunrpc/parameters/auth_hashtable_size\x00', 0x2ab42, 0x0) sendfile$auto(r0, r0, 0x0, 0x1) mmap$auto(0xe779, 0x400000000007, 0xdf, 0x13, 0xffffffffffffffff, 0x0) unshare$auto(0x40000080) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048004) futex$auto(0x0, 0x9, 0x3e, 0x0, 0x0, 0x0) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fb4a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f00", 0xa}) ioctl$auto_UI_DEV_CREATE(r1, 0x5501, 0x0) writev$auto(r1, &(0x7f0000000340)={0x0, 0x500000}, 0x9) socket(0xa, 0x1, 0x84) 15m26.124097971s ago: executing program 1 (id=1121): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000640)="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", 0xba0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, 0x0, 0x7, 0x8) fchdir$auto(0xffffffffffffffff) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="131729bd7000fedbf19362ee35627ddf25030000f00e0001002f6465762f"], 0x24}, 0x1, 0x0, 0x0, 0x20044010}, 0x20000008) 15m25.909058144s ago: executing program 1 (id=1123): io_uring_setup$auto(0xb5, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x10004010) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x4a481, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x80002, 0x73) r1 = socket(0x2, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x4000000) bpf$auto(0x800, &(0x7f0000000480)=@query={@target_fd=r0, 0x3, 0x8, 0x5, 0xe09c, @count=0x12b, 0x0, 0x2, 0x9e, 0x6, 0xa22}, 0x9) syz_clone3(&(0x7f0000000540)={0x0, &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000340), {0x3b}, &(0x7f0000000380)=""/24, 0x18, &(0x7f00000003c0), &(0x7f0000000440)=[0x0], 0x1, {r2}}, 0x58) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) r3 = socket(0x2, 0x1, 0x0) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x5, 0x20000000) socketpair$auto(0xb2c, 0x2, 0x20000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c00, &(0x7f00000003c0)={0x0, 0xc4}, 0x1, 0x0, 0xffffffffffff4ee3, 0x3}, 0x5}, 0x3, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) ustat$auto(0x801, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f00000006c0)='7\x00\\\xa0\x04|4\x00\x00\x03\x00\x00\x00\x10\x01\x00(2\xc2\xa0Ur\xc3\x13Z)\x00\x00\x00\x00\x00\x00\x00rRVr\xc4O\xdc1\x9b%\x10Z\'\xb9\'\xa3stC=\x85\xc6\xf6\x13 \xeb\xff%\x11\x82\x05\xdfV\x02\xca&\xd8$<\xab&\xc8B-\xcc\x15\x04&\x13;\xfe\xbdQ\xaa\x16o\x1f\xc7\x94\xa3\xc9\x9a\xe1d\xf5\n\xe2\x88\x84\vT?\x98\xa2\x00'/217, 0xd03) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7) write$auto(0x3, 0x0, 0x100085) 15m25.268594904s ago: executing program 1 (id=1125): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy17/hwsim/ps\x00', 0x8000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) rt_sigtimedwait$auto(0x0, 0x0, 0x0, 0x8) 15m24.027885726s ago: executing program 1 (id=1127): mmap$auto(0x0, 0x400008, 0xdb, 0x9b72, 0x2, 0x8000) r0 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/trigger\x00', 0x20000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-8/tx_timeout\x00', 0x40000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/pcm0p/sub0/sw_params\x00', 0x400, 0x0) pread64$auto(r0, 0x0, 0x4, 0x8) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe\x00', 0x2080, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x2, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0x8) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x800295f4da0a, 0x2, 0x3, 0x5, 0x80000001, 0x40, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x100000001, 0x100) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40800000001b, 0x4000000000df, 0x40eb1, 0x401, 0x300010000000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x2, 0x10000002, 0x6}) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = epoll_create$auto(0x8) epoll_ctl$auto(r2, 0x1, 0x8000000000000000, 0x0) 15m8.761294336s ago: executing program 32 (id=1127): mmap$auto(0x0, 0x400008, 0xdb, 0x9b72, 0x2, 0x8000) r0 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/trigger\x00', 0x20000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-8/tx_timeout\x00', 0x40000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/pcm0p/sub0/sw_params\x00', 0x400, 0x0) pread64$auto(r0, 0x0, 0x4, 0x8) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe\x00', 0x2080, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x2, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0x8) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x800295f4da0a, 0x2, 0x3, 0x5, 0x80000001, 0x40, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x100000001, 0x100) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40800000001b, 0x4000000000df, 0x40eb1, 0x401, 0x300010000000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x2, 0x10000002, 0x6}) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = epoll_create$auto(0x8) epoll_ctl$auto(r2, 0x1, 0x8000000000000000, 0x0) 6m16.556207672s ago: executing program 4 (id=2587): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) madvise$auto(0x8000, 0x87fff, 0xf) clone$auto(0xfffffffffffffff9, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x2000000000006) 6m15.755749606s ago: executing program 4 (id=2588): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0xa, 0x801, 0x84) socket(0xa, 0x5, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/loop9/queue/discard_zeroes_data\x00', 0x20000, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$auto(0x6, 0x0, 0x100000001) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x400, 0x2000000000002) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sysfs$auto(0x2, 0xe, 0x0) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) 6m15.321948237s ago: executing program 4 (id=2590): close_range$auto(0x2, 0x8, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000180), 0x80a040, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x4e25, @remote}, 0x6d) sendmmsg$auto(r0, 0x0, 0x5, 0x20000000) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x51}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x2e, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) 6m15.046146183s ago: executing program 4 (id=2591): r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0xf, 0x0, 0x3) r1 = socket(0x2, 0x3, 0xa) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000180)={0x58, r3, 0x1, 0x270bd27, 0x25dfdbfb, {}, [@HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x6}, @HWSIM_ATTR_RADIO_NAME={0x39, 0x11, '/proc/sys/net/ipv6/neigh/veth0_to_team/ucast_solicit\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(r1, 0x0, 0x7, 0x3000000) mmap$auto(0x1, 0x10000000400008, 0x9, 0x800009b72, 0x2, 0x40004008000) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="1100", 0x2) (async) socket(0x25, 0x1, 0x2) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x20401, 0x0) (async) mmap$auto(0xb, 0x20009, 0x1, 0x80000010, 0x401, 0x8000) (async) io_uring_setup$auto(0x1, 0x0) (async) futex$auto(0x0, 0x5, 0xfffff05e, 0x0, 0x0, 0x80000001) r4 = gettid() (async) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x1) kill$auto(r4, 0x11) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/neigh/veth0_to_team/ucast_solicit\x00', 0x80402, 0x0) (async) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.4/usb5/descriptors\x00', 0x18b940, 0x0) readv$auto(0x3, &(0x7f0000000600)={&(0x7f0000000540), 0xc}, 0x1da) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC1\x00', 0x0, 0x0) (async) sendfile$auto(r5, r6, 0x0, 0x1000200) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x8600, 0x0) (async) fcntl$auto(0x3, 0x4, 0xa553) 6m8.816930846s ago: executing program 4 (id=2597): setreuid$auto(0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/blkio.bfq.io_wait_time\x00', 0x40000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'virt_wifi0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x30, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000003b40)={'veth0_to_hsr\x00', 0x0}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x3, 0x8, 0x7, 0x0) socket(0xa, 0x1, 0x0) socket(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) clock_gettime$auto(0x1, 0x0) setresuid$auto(0x0, 0x8, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0x4, 0x1, 0xc, 0x0, 0x6) connect$auto(0x3, 0x0, 0x55) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) listen$auto(0x3, 0x0) connect$auto(0x3, 0x0, 0x55) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYRES16=r4], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyr0\x00', 0x41, 0x0) 6m8.41381546s ago: executing program 4 (id=2599): mmap$auto(0x0, 0x400008, 0xdf, 0xfffffffffffffc10, 0xffffffffffffffff, 0x800008000) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r0, 0x400, 0x1) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fcntl$auto(0x3, 0x8, 0x9ebfffffffffffff) fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cpu.pressure\x00', 0x183142, 0x0) sendfile$auto(r1, r0, 0x0, 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) keyctl$auto(0x4, 0xfffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0x8000000e) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) r2 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000f40), 0x2100, 0x0) ioctl$auto_BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f0000000f80)=[{0x3ff, 0x2, 0x8000000000000000}, {0x5, 0x5, 0x2}, {0xa6, 0x1, 0x2}]) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0x5) unshare$auto(0x40000080) mmap$auto(0x3, 0x9, 0x7, 0xeb1, 0x404, 0x10008000) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) r4 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/pcmC0D0p\x00', 0x80000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_PVERSION(r4, 0x80044100, 0x0) write$auto(r3, 0x0, 0x400000000005) 5m53.245778249s ago: executing program 33 (id=2599): mmap$auto(0x0, 0x400008, 0xdf, 0xfffffffffffffc10, 0xffffffffffffffff, 0x800008000) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r0, 0x400, 0x1) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fcntl$auto(0x3, 0x8, 0x9ebfffffffffffff) fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cpu.pressure\x00', 0x183142, 0x0) sendfile$auto(r1, r0, 0x0, 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) keyctl$auto(0x4, 0xfffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0x8000000e) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) r2 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000f40), 0x2100, 0x0) ioctl$auto_BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f0000000f80)=[{0x3ff, 0x2, 0x8000000000000000}, {0x5, 0x5, 0x2}, {0xa6, 0x1, 0x2}]) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0x5) unshare$auto(0x40000080) mmap$auto(0x3, 0x9, 0x7, 0xeb1, 0x404, 0x10008000) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) r4 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/pcmC0D0p\x00', 0x80000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_PVERSION(r4, 0x80044100, 0x0) write$auto(r3, 0x0, 0x400000000005) 7.390773296s ago: executing program 3 (id=3561): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = open(0x0, 0x163340, 0x2a) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr7/address\x00', 0x80302, 0x0) fchown$auto(r2, 0x0, 0x0) socket(0x2a, 0x2, 0x1) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/renderD128\x00', 0x195901, 0x0) connect$auto(r3, &(0x7f0000000100)=@qipcrtr={0x2a, 0x3}, 0x57) write$auto(0x3, 0x0, 0x3f00) recvmmsg$auto(0x3, 0x0, 0x3, 0x6, 0x0) ioctl$auto(0x3, 0x541b, r0) r4 = pipe$auto(&(0x7f0000000000)=r1) ioctl$auto_OTPERASE(r4, 0x400c4d19, &(0x7f0000000080)={0x43, 0x400, 0x7}) 6.938786127s ago: executing program 3 (id=3562): sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="0100f9"], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x11, 0x3, 0x9) socket(0xa, 0x2, 0x3a) clock_settime$auto(0x10, &(0x7f0000002d80)={0x9, 0x2}) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x787806, 0x0) close_range$auto(0x2, 0x8, 0x0) fsconfig$auto_HIDEPID_NOT_PTRACEABLE(r0, 0x0, &(0x7f00000000c0)='\x00', &(0x7f0000000180)="f15014c0309cd37b6e021cb7bd0f3020be7915e158aeb439a46bf444f86f25dbc77c2f7cc54d5fbbd7fee9f9e71269cc6053f1f7d2082ea80d41bb344ea10566c77273ad6580f0a875243c2452f0f2302cc82ba3a3029406fd4690e507abce667771266418ae560f09de7edbe8ac8341c5f39e739cf18f72eb559cf955a92a7dc38b24b0f94272ea7719274f9a078f5dc916a3ce3bdc4892215895d7211562f0117b3d49f76bac2373729d91b34c77e0c96bd37df29c21ad70dc673854edadb38cbdf213561bff3ac77f73771c2c01bd818e6952de5c30757ce08b07e011cf7bcb", 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/midiC2D0\x00', 0x2841, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000040)={0x0, 0x318f, 0x4, 0x0, 0xff, "50cfeeca8e00"}) mmap$auto(0x4, 0xa020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x7ffe) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mouse0\x00', 0x181502, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x1, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000f7dbdf250100083f060002000100"], 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) io_uring_setup$auto(0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x80) socket(0x10, 0x2, 0x0) socket(0x11, 0x3, 0x9) socket(0xa, 0x2, 0x3a) 6.59380895s ago: executing program 5 (id=3564): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x102, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r1 = socket(0xa, 0x801, 0x84) r2 = socket(0xa, 0x3, 0x3a) close_range$auto(0x2, r2, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000164c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_SCAN(r1, &(0x7f00000165c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001600)=ANY=[@ANYRES64=r0, @ANYBLOB="a5746ad1fd18becaf6cb1b7f1682de19d05a434e7d019192cb01c4cf0f8dfd06f10291ceab85173dfad38338e9c5efdfefeef059ff41f654e30c941ef0ca9b3d19c29174471bd4033af016bc8950a12eb613c415f07580c38ed8b20df43b62a174496d8a8615b5f47dca5c16137409d13c4b1028c3a67330459982be6bc330f3974fa381b16b3bb7f966132d928419cb76381484df244e98195fb6bc92acfc790a07a27effc23a6785a81cd5d00b90951a7fb638d30e4ca1591780c33929ed259012a1c245f25307215b65e5e1480debf2bf147362ae5a727adf6f5a268eb3abb175b1cf76", @ANYBLOB="79a327bd7000fbdbdf252000000005000f0050000000"], 0x1c}, 0x1, 0x0, 0x0, 0x2404c000}, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) inotify_add_watch$auto(0xffffffffffffffff, 0x0, 0x1000e6e) socket(0x29, 0x6, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121100, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, &(0x7f0000000300), 0x10700, 0x0) setsockopt$auto_SO_MARK(r0, 0xb, 0x24, &(0x7f0000001ac0)=',\x00D<\xfa\xefZD\\u\x939\xd9\t\xd1\x06\xea1\xe9e\xee\xb1\xb0\x02\xb8P\xa5E\xf2&.\xb59\x87\xba&4\xac\xa5\xdak\v\xc8\xa7\x14\x98I\xcc\xcat\xbc\x98\x01\xb9\xbd[\xe5q`C\xea\xa6\xfe\xf0\x12\xdf\xde|\x99\xcc5.Z,\x8eq16\x8fJc\xadF71;\xf9K\x88N\xe8\xfcY\xf0\x84\x9d\x824J\xe8\x1a\xc0B\x10x\xe5\xca4\xbc\x9aE\f\x0els\xee\xea\xc8~\xe0\x1aM5\x8d\x81;h\xd9;\xc4S%\xbal\x9b6\xec\x8a0\xdd\x9bp\xe2W\xddS5qt\xfb\xa8j\xb4ZiSQ\xdaY\xc7\xb1\v\xcb\x8bk\xc9;s\xf9\xec\xd8B9\x8an)1\xd5zDP\x93c\xc3\xb7\xe4\x19\x8f\x82\x94\xad\xf0P\x01\xd7\x14\"\x19o\xd8\xbb\xd9\x92\x1e\x83\xec\x9d\n\x8e(gI)\xc4\xfaa\x8d\xb3\xd1\xbc\xf3z\x97H\x1e\xf9\x86Ev`\x84\xc5[R\x84\xc22\xaeBtU\xb8\xf5\xfe\xa6\xcd!\x95\xf5\xee\xab\x04=\xc1\xa2E\x92\xd7\x113\xe8\xcd\xa8b\xdd\xc3\x1d\xee\xcb\xcd\xe6\xff\x15\'sl\x06\xa0\xd04\xd5\x8b\x1e\xc4>\xb1\xd0\xf7m\nn\x7f\x80\xcc\xa0\xb8]\x00\xec~\x1c\xbc\x92\xb8\b\xcdvV^\xb0\xd0-^\xf0\x06?@@ft\xf3\xafM\xdd\xf5g\x82\xe2\xb2Q\xc8\xe9\x9c\x86?~\x04\x96a\xdcl4\x8b\xb9I\x8ci\xaaX\n3^l\xc4)\x06\x9a\xe7\xdfA\x89\xe7\xbc\xcc5P\xbb\xa3\xee\x81W\x9a$0J\x01\xb5\xb5\xa2Y\x04\xeb\xe8\x11;o[\x1c\x00\xda\xf8\xf16}k\xfd\xb8\xeb?\xdfd\x95\xf0S\ny\xe3e7\x10\xa8\xd7%f>\x8b\tb\x03\a\x17\xdf\xb5\x82\xc5\x97\xcb?O\x11\xe2\xf6\x93\xb4\xdf\xca\x83\x12\x9a\xe4_\xcf4J!\x04\xb5\xabK\x89\xf8\xc0!\x900', 0x201) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x1, 0x4020009, 0xc, 0x12, 0xffffffffffffffff, 0x800000008000) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/dev_snmp6/tunl0\x00', 0x195a42, 0x0) pread64$auto(r5, 0x0, 0x80000006, 0x3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) close_range$auto(0x2, 0x8, 0x0) socket(0x29, 0xa, 0x3) socket(0x10, 0x2, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x40a02, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES16=r3, @ANYBLOB='\x00'], 0x1ac}}, 0x4004) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 5.581873562s ago: executing program 5 (id=3566): r0 = openat$auto_ht40allow_map_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/ht40allow_map\x00', 0xc9400, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000940)={'batadv0\x00'}) sendmsg$auto_BATADV_CMD_TP_METER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80) read$auto(r0, &(0x7f0000000040)='^{-!S\x84\x00', 0x9) 5.46448574s ago: executing program 3 (id=3567): socket(0xa, 0x5, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop13\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) timer_create$auto(0x0, 0x0, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) mmap$auto(0xfffffffffffff000, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) io_uring_register$auto(0x2, 0x11, &(0x7f0000000180), 0x83) sendmsg$auto_NL80211_CMD_LEAVE_OCB(r2, 0x0, 0x40000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0x1) set_mempolicy_home_node$auto(0x0, 0x2010001, 0x0, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r3, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@HWSIM_ATTR_RADIO_ID={0x8, 0xa, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000010) 4.959427497s ago: executing program 5 (id=3569): socket(0x2, 0x2, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) socket(0x2, 0x80002, 0x73) close_range$auto(0x2, 0x8, 0x0) 4.409650663s ago: executing program 0 (id=3572): r0 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x4504ab7f6bc68e5e, 0x0) getsockopt$auto_SO_SNDLOWAT(r0, 0xd, 0x13, &(0x7f0000000100)='/dev/mtd0\x00', &(0x7f0000000140)) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mtd0\x00', 0x698241, 0x0) socket(0xa, 0x3, 0x3b) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000003e00)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000014c2875ebba81e61a5e2d7aa2fc5f808d76521dcb4f2ffbbbcb91b", @ANYRES16=r2, @ANYBLOB="35092cbd7000ffdbdf250a0000000c000480080001800400ea00"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event2\x00', 0x24c002, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) r3 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0) poll$auto(&(0x7f0000000040)={r3, 0x1000, 0x1c9}, 0x2, 0x7) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x40000000, 0x400008, 0xe1, 0x38, 0xffffffffffffffff, 0x8000) r5 = socket(0x15, 0x5, 0x0) ioctl$auto(0xffffffffffffffff, 0x40084d02, 0xffffffffffffffff) statmount$auto(&(0x7f0000000180)={0x9, @inferred=r4, 0x85, 0x0, 0x100000000}, &(0x7f0000000480)={0x10007ff, 0xd9, 0x3, 0x1, 0x3, 0xffffffff, 0xffff, 0xfffeffff, 0x7, 0x8, 0xfff, 0x5, 0xc48, 0x5, 0x9ea, 0xfffffffffffffffc, 0x542, 0x0, 0xfffffa39, 0x9, 0xd76c, 0x5, 0xf2, 0x400, 0x4, 0x8001, 0x8, 0xf, 0xb, 0x3, 0x10000, [0x7, 0x8001, 0x7ff, 0x1, 0x1, 0x6, 0x43, 0x7fffffffffffffff, 0x3, 0xfffffffffffffff1, 0x65, 0x2, 0x6, 0x4, 0x379aea6d, 0x7, 0x2, 0x1, 0x9, 0x2cc8ff0e, 0x0, 0x1, 0x1000001, 0x4, 0xfffffffffffffffa, 0x8, 0x3, 0x7fffffffffffffff, 0x7, 0x2, 0x4f, 0x29a, 0x4, 0x200, 0xdc, 0xfa, 0x0, 0x6, 0x8000000000000000, 0x3, 0x3, 0x4, 0x5], "f7513f75280da3c13e6aced0de4d73eb14e6550ccb6eb84d4cca97168d2179f28291776fd25b0548f470d8bdbbc10c2d03dabfed650cd418a2078d87a916bd6e7453042d32ca272eae234fc9f903e18695e478774bcb08f085b4998e79471aaa8dd2e4552c75dc3ed21bd227b64214e28be43309527c35b3e875536213e28de2ebef6564705a537bc17f16689ff20d606c7fd611a304f5d0e82d"}, 0x1, 0xfff) setsockopt$auto(r5, 0x114, 0x8, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x100000) ioctl$auto(0x4000000000000c8, 0x400454d9, 0x3) setresuid$auto(0x8, 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x842, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) io_uring_setup$auto(0x400, 0x0) 4.34282636s ago: executing program 5 (id=3573): r0 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) ioctl$auto_KVM_CREATE_VM(r1, 0x8138ae83, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) fspick$auto(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/acpi/wakeup\x00', 0x48041, 0x0) write$auto(r4, 0x0, 0x0) r5 = setfsuid$auto(0xee00) r6 = setfsuid$auto(0xee01) r7 = memfd_create$auto(&(0x7f0000000700)='/sys/kernel/debug/x86+boot_params/data\x00\"F\xb6\xcd\x06\xd6\x97\xa2L\xe1i\x01&\x04b/\xaa\xfb#s\xc4\xa3\xa7\xacj\xaa\x8e\xf4L\x9a\xf8\xcc\xdcy\x9f\x93\xbc\xf6\xc8\xdb\x05w,|B\xfc\x04\x97\xd3\x0f\x8b\x81\xe8\xbc\x81\x0e\xd7o\xd2\xcd\x18z\xc2\xb7|\xe1\xa6\x9a~\x96\x10rnLnt\xdb\xdb-\x1b\x99\xd4\xed;\xf8\x13a\r\xf2\a\x85%\xef\xa7\x7f#\x96\xf2S\xb0\xf1H\a\x00\x00\x00\xb7\x0fz\x9dN\xc9\x1e\x15r\x97|\xbfE\xce\"\x9bA\xf8\xfbS\v\x16\xa5?E\xfb\xff\xff\xffE\xc9\xd4\xad\f\xe6\xb8\x1b\x91\xad\x18\x058?\x0f\xd4\x10\r*\xf1\x1a\x83|\\:\x9d\xc6\xdd\x97\n*\xea\xb5\n\x1a@{\xb9\x9bFL\x84\xf1\xd0\xb8\xea\x84\xa2\x92\x1f\x15\xc7e\x1f\xc77Un\x9e\x17\xde\xb9-c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd0\x9d(5\xa2\xf04\x1es\xa1\xe1\xd1\xc67\x8c,\xc4\xc5\xf8\xb6\xfc\xa2f\x9c\x14\xa2\xd8Y\x93`\xcd\xa3\x1d\xa9\xad\xf6o\xbf\xbfH\x06;\xe1\xa9\b\xcdQf_\x1c\x85~\xb4\x91e9De\x02q\x9f\x9b\x00\x00\x00\x00\x00\x00\x00', 0x5) fallocate$auto(r7, 0x0, 0x9, 0x4cbd5d) fallocate$auto(0x8000000000000003, 0x3, 0xf, 0x200000004) setresuid$auto(r5, r6, r5) r8 = socket(0x2, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto(r8, 0x84, 0x76, 0x0, 0x0) getuid() semctl$auto_GETPID(0x9, 0xfffffff7, 0xb, 0x7) sendmsg$auto_NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x168, r3, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x101}, @NL80211_ATTR_MAC_ADDRS={0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x80, 0xbd, "5d2a390340ddc8523b3618f7b76fc1e43f3f8d51b82b19d58530da97b51a693682d653839a621f36fedfc6a59f5e5fa4e0f28cbde6dfe119d35368c6778d22a69c17c51aacf37708e7393c80a2cc3833d28ee469b547bcf3a9bb135a2cff6db0c7613806e3db7ccb11756ad72bf9e3dad2685707bc0897909e86f138"}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_MAC_MASK={0xad, 0xd7, "7fff73534e15e77492de42b859bcf532ae977d16a412dd209e6056e2c0685cc4c5a23303f27b65017a079586422546be2f741cb797043fc39c521d7198868b0f8cc60847972d46a8af340817ba2ddb2729c42b38dac26e7ffa235bf59ca0fbc2f409ff92ec811481226aca20ca0d57138795dc6c78be2851b6ca0030599c992dfebb5d3e6c0157775df5e203f86a8c98bce30e191b1aab4c88364ab2425931a1bc32bfa0635ef4d022"}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x1}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x168}, 0x1, 0x0, 0x0, 0x4000800}, 0x20008000) mremap$auto(0x3d9e, 0x2, 0x1, 0x2, 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r9, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="090029bd7000fed3df250400000006000b002c290000a18253dedb112b77729abb41a05c817bc061ffff37453c07ad51051b0f7c7bb8a0a7ae92b8916f7603a3fee69cb300c3fca083c60cb48123143bd2eb2415a72b7f244f1d8f42a01dc33c3c93d5d38a3306205977cf3ca99e725e0f52e489a949ad4e18c045252c8b4098f3f0e8d3648ba3109de6645ce9c445e7a1aa8b1ce7aeda3e855a7daff24bafdbe514403933ea3434a73fd89f2de729f5401dc910c6f598c4b26c4ca0f9dfd7edde66f9bc83484672382addd9f9d0deb9d524341345ff30f2fed7e4f5"], 0x1c}, 0x1, 0x0, 0x0, 0x4000060}, 0x0) readv$auto(r9, &(0x7f0000000080)={&(0x7f0000000000)="9e91da8170cdb2e834ade2001a5e65a0caa50846e478898e81", 0x1}, 0x6) openat$auto_bsg_fops_bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg/1:0:0:0\x00', 0x290000, 0x0) 4.205356578s ago: executing program 0 (id=3574): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_GETPDP(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x800}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40080d1) prlimit64$auto(0x0, 0x9, &(0x7f0000000040)={0x0, 0xfffffffffffffffa}, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) rt_tgsigqueueinfo$auto(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xe, 0x5, @_sigchld={0x0, 0x0, 0x401, 0x5, 0x3}}}) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/devices/virtual/block/zram0/comp_algorithm\x00', 0x20b42, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), r3) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) pipe2$auto(0x0, 0x80) arch_prctl$auto_ARCH_SHSTK_STATUS(0x5005, 0x8) r4 = socket(0x2, 0x801, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x80002, 0x73) setsockopt$auto(0x3, 0x0, 0x2b, 0x0, 0x108) getsockopt$auto(r4, 0x11c, 0x2, 0x0, 0x0) io_cancel$auto(0x400, &(0x7f0000000000)={0xff, 0x8, 0x8, 0x8, 0x40, r2, 0x9, 0xa7, 0xa, 0x0, 0x80000001, r2}, &(0x7f0000000040)={0x2, 0xff, 0x3, 0x5}) sendfile$auto(r2, r5, 0x0, 0x7) 4.159765983s ago: executing program 2 (id=3575): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000080)={0x414, r1, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x380, 0x23, 0x0, 0x1, [@generic="a8c38ea72c1527421d747c8aa269eb67ef3197a4ec313fa8cd50c5bd7a1feec31ef47f51d18647f82e012b4581670d7647148bc1aa1936cc5b49f172e39b6e6a9fa0b90075e6b040be938fcd9e92ce27e249406214213f72cb927a49dff148e8698419aa5aa887a602d4ba49dbcc47e975ef152cfc504144c931b1ac6c9b363fad3f4f4dc28faca71f1166069543262a2dc8e831199f041ae7dc60416a7cd61ef13a11ee75c3d26cc603011e8988", @typed={0x8, 0x50, 0x0, 0x0, @fd}, @nested={0x16c, 0x93, 0x0, 0x1, [@generic="c772fdd09c2035f26b2069f76453ef2786e464c90ab7684abe07c93852bb27b028abb15725aca4f0dc70e0f5dc4df228dbb0aaa41b9779ce5058e4fb6db5b549b487ce711c8cbc7242f0ed6529b1c717679dc817c8a63e59b48250f69eec68be", @nested={0x4, 0x64}, @typed={0x8, 0x14e, 0x0, 0x0, @str='(A)\x00'}, @generic="b97eb4997893ace3f353ebbcfab4cbeab3e366210e63d7414c1b8552e5e77ea400eb318fa97635f5e47a9b96d96999786aef14363167f4bc0070aac5de8086819b7c5e727c30cee452f91900bf0cb3dde3c784955f4e2236e95a22b9a9c0252d7c94b38ff332448bcc5e4cb7812c043ef1ea00cc1217d362692c749874efccf08131780710f14c9934cf013cab6c34ebbbb599a62017ef2a1266824721f4b8559c4d048bb74dde25bc560d4839f44151936ca06f34c9b23c1b1abe6206a53188cbc596733d41ca4fca251dcf546a949b8d9b14f433550fec8151e930878d48069774a6a6bc3610ac156b018445ceac2803197520cffcfa6a873bb939"]}, @generic="ca84a6f1cc3c4b5b0c52f457b40c28cfa5f7b7ed1036855c3f53ac2c4b70d6e4220eef5e2894bc6c094971d967d07586322abdaaa27b774b8811deedf55a238426e0917a5867a09bdf15657f3a86f7822c9e3110bf9c82e5c841e2094c15f20507f661f1c86c16daa20a222ed9d087241b5a91c7ec8e6698a5362c7141313b422b459544c880ce0563b345b33f1ab210dd20272157532e78f52c6a735566055bbab38dfd7830958e3ca038", @generic="cb5f207051ba4ffdaf45243e1bc285e3fbc960e2ae2255a2c03476d8afba36cbbc34be73f555442b173d23ed6c759f8606ad050c588745377265b6b23b3ef692c49f3ddff9775dc1d5c01d59aaf2739c0474fa6bfc1def234538e55e55e2ea8b0c5890c6f15ba616f0d3297e6f8013274f19bc0b2169b4279e2325561b526aa424583418addbc7e784e5e299132facdafad056f8c548548ea1b6b0e246d5f390c1979667994414", @typed={0x8, 0x5c, 0x0, 0x0, @u32=0x9}]}, @NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x9}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0xdf}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x9}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0x61, 0xe8, "ac8a00c8f179cb4134cc35db9611835a50f605aa4c4879b5381d51382e89f11902b034618ab748e5605e88823b7fef13a296461b5bfcfca56a1f0176cdfc9572f98184becf35cdeac87caab7fc353cce6442ee79fa1879ce5aa0615b3c"}]}, 0x414}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (async) r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000580), r0) r3 = getuid() msgctl$auto_IPC_INFO(0x1000, 0x3, &(0x7f0000000640)={{0x8, 0xee01, 0x0, 0xe30a, 0x4, 0x8, 0xf000}, &(0x7f00000005c0)=0x6, &(0x7f0000000600)=0x7, 0x74d9, 0xa, 0x7, 0x0, 0xc, 0xe2, 0x80, 0x9, @raw=0x7, @inferred=0x0}) (async) msgctl$auto_MSG_INFO(0x0, 0xc, &(0x7f0000000740)={{0x4, 0xee00, 0xee01, 0xffffffff, 0x9, 0xffffff81, 0x800}, &(0x7f00000006c0)=0x5, &(0x7f0000000700), 0x6, 0x3ff, 0x8, 0x10001, 0x9, 0xf, 0x101, 0x1479, @inferred=0xffffffffffffffff, @raw=0x6}) r9 = waitid$auto_P_PID(0x1, 0x0, &(0x7f00000007c0)={@_si_pad}, 0x0, &(0x7f0000000840)={{0x4, 0x8}, {0x6, 0x5}, 0x4, 0x400, 0x2b1, 0x8, 0x0, 0x5, 0x6, 0x0, 0x5, 0x0, 0x15b26b20, 0xa, 0x6, 0x6}) (async, rerun: 64) ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, &(0x7f0000000900)={"7af7207a24de3feda5b679ec536865c247d365f22ff33094f0621e1e4d37f0c5", 0x1, 0xfffffffd, 0x6875, 0x8, 0x5aba, 0xffffffffffffffff}) (rerun: 64) newfstatat$auto(0xffffffffffffffff, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)={0x5, 0x1000, 0x7, 0x1, 0xee01, 0xee00, 0x0, 0x80, 0x7, 0x0, 0x5, 0xb4a4, 0x8000000000000001, 0x7fffffffffffffff, 0x5, 0x0, 0xbf}, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a80)={'\x00', 0x0}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000ac0)={'macvlan1\x00', 0x0}) (rerun: 32) sendmsg$auto_MACSEC_CMD_UPD_OFFLOAD(r0, &(0x7f00000013c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x42060000}, 0xc, &(0x7f0000001380)={&(0x7f0000000b00)={0x860, r2, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@MACSEC_ATTR_RXSC_CONFIG={0xf0, 0x2, 0x0, 0x1, [@generic="63580219cbfff04ebd88dc53866a2768bf58b0f470f026f5bfb3dbc95bf0fa520290f33c8b1c3c586680608f3096dbc9f0d7a3c3aaa3d2934214790f2fc24dee411ecae41b67167482cdef8191e59e6159714861eee3716f7342341b91140e6c95200d3147300ad805f1a064d18f30c16f522c5dc2afb46a1092888f14895bbe8533443e3580520aca1d4b3c2cc26b143a2f10a756d981da8e24acb401322817ac503db8f9412ab7c20253c432e9139e07965dc8da5564f0bb951cf2f044e341af0767b7f653e2249b7846e6da95e632ac9a60f200387caf7cd44c603b212319d3cf3fcf", @typed={0x8, 0x65, 0x0, 0x0, @uid=r3}]}, @MACSEC_ATTR_RXSC_CONFIG={0x382, 0x2, 0x0, 0x1, [@nested={0x14, 0x152, 0x0, 0x1, [@nested={0x4, 0x58}, @typed={0x8, 0x121, 0x0, 0x0, @uid=r4}, @nested={0x4, 0x45}]}, @typed={0x4, 0x13b}, @nested={0x132, 0x3b, 0x0, 0x1, [@nested={0x4, 0x7d}, @nested={0x4, 0x70}, @generic="f666e2646ba67c0193e835f1a80f569258fd02fe2fc0f645bb2fd6dfe213da13f6982f485ce18c431b499d3c64dc8013d549204f0d9ea4c651f24e5c26dd790311c5e2d9282c56b055e3c6c2a3ee93ae28fd07bd4906e083816d", @generic="4cd8d004c79740a5c72d015ee16501081d119d9def20fdae9cbdcc47f2de3f179a5aca4270b87fd7379709777fda89ca6f16f7917ee239f0e26a42f95bff0d230a81d27a19bdd73e8b92b826be28dc09dedc686e9ecb3fdbc6c75d7453636dc1040730ce4cc9457b270ebbd2e026007c4cfb24a6d7d2b1b97ec5c1287c6947047cbf5c572d6235cc09160e7e2e76dbadcc8a1d8bcb7bbec3f3ec680e0f8ab8bd3b2ff2a758efc55bc0358d310040ef1e009eb6ec7ef5f6eec7640135d7266a71fb1a21afa33a2fc09ad43175"]}, @generic="6937a24c317b84f939935802977d8f934216280e5339203cac5caeba28b28ace35992db7d21d0c6e05b7bc9bbd1685132f266fe4e2532f398d1ee160d61d49fc54a55127d262c9e000d19eb0ce889a6d9ceeb72fd4daf843f71e6fdced55d9bda6b1041f177be72b1f949acea3f930e6bc605a1911737fce453816fc56b81c722e52d7b62eb653a66e1583e317b7f722c14b67b27af820a304eb129f2fc0cf9c06ad3f8082f48183ebd3f89da6b64288438d59740738971f1ea76b9f827a196efbc7a902c660c5d72442eb472ec256874d1f6fb646331ed74c8ff0b45267878a1c2cbc3d3b0926bb71f088d9b957", @typed={0xc, 0x11a, 0x0, 0x0, @u64=0x6}, @nested={0xe7, 0xd, 0x0, 0x1, [@typed={0x8, 0x44, 0x0, 0x0, @uid=r6}, @typed={0xc, 0x2a, 0x0, 0x0, @u64=0x8001}, @typed={0xc, 0x142, 0x0, 0x0, @u64=0x7}, @typed={0x8, 0x32, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x4, 0x136}, @typed={0x8, 0x154, 0x0, 0x0, @fd=r0}, @generic="79c28cfcece81584804151f27efee36ac7500d9fbef5ecebae920cfa7c4ba0f25d76566eb85869f502b86317e28e5217895505532439d34b212fa4932ff993efa9790875a8de87638a57adfa8225e9bd3c43fed2813751432416249eb7810a1cbea36f1e5deba4bed0515efce43110d0783b06fb0ed143917281e9dd9b42d914581f3fe88ec80f66592dad787beac193217aa5d860949539061508ad28a0544c0657a43e4bc46b", @typed={0x8, 0xf0, 0x0, 0x0, @ipv4=@empty}]}, @nested={0x18, 0xa4, 0x0, 0x1, [@nested={0x4, 0x4b}, @typed={0x8, 0x2a, 0x0, 0x0, @pid=r9}, @typed={0x8, 0x103, 0x0, 0x0, @fd=r0}]}, @nested={0x35, 0x10e, 0x0, 0x1, [@generic="ebfe998620a1a7088a5734fcea4671bf6e252bf93b8aa8e2fad978196ed5b9e989d03c99f88840b9b740efbaf422a44da0"]}]}, @MACSEC_ATTR_OFFLOAD={0x3c8, 0x9, 0x0, 0x1, [@nested={0x22f, 0xc8, 0x0, 0x1, [@typed={0xc, 0xa2, 0x0, 0x0, @u64=0x1}, @generic="1acf61922a975cbfbba361a9f2d7735ea0f18e46df9662b4c53debe3e6e01011e82deab2eeb608469f15f255ce107092d26661a0706a32d12f947c16f41535e54b937e1db3bd18ee967926d683766d552cdec2dfc00dd767af7af2abe308750a44038c3e9a5ae7099b212a40a2c2cb752028d828a81ce9fcb10e05b4b548dcef1276c0007c5da09bf431", @generic="37e0d1eccb58423382c5e16e640956d40dd1a7582325ac3dfca1dc2b7fddf4ff217f5f86f408cb7bdd9b83032fd882f99e587b0d8c569a9751b1488a39ce36c494e352a480aa9a5df15ba7c0ec423f8f2360d2cbd362e85cd31fb487124dc7a98312a4c9f3a6f3b838257a1d7f879ac43b5f89af6d1efe8f551bfcb3d764deef1420d52ed89fb2f0277b8ecf8b1c9cb0eee645a231630f2fbd32a58dda950a23ce6ed8204f8618606632f30732366dfba67005280b6d77a81e93d3267c9bd3ba3261fa513ff6bf7a63e833323a0fa5651d7be3514f44be3373e427a54e9265a388c47a87e34ef9d2eb3c08", @typed={0x8, 0x120, 0x0, 0x0, @fd=r0}, @generic="b157123b58ad5f66f2b7ff5ad60aacf5c8e9578772f82bb5834893821a2de476a8b685eed0976b1b33a52b91f6e5b30ba27d0fd3fe4bbd1f52a74060733e2f05cab157ca28ff62d8adf2fd4e474f18a6ca5bec7cb70949ea8ef8a0d444f5112eb0ab82d71cb912651327bbb02085f619ba85725920f4822c521c91103d57eb8b4e6b86344a5c0031b8f875338b40626d72458a09e94faa7d10d2782b0a95", @nested={0x4, 0xfb}]}, @generic="db7ba375e910fef5bc5ac4bbb59af43e5ef89f4b4d049aff107624db23c74d7961fd9096a4bd7bc9b2d12057d722a4d693e4027cd87c1cd4e09524559628aa6591327846b499aca872", @nested={0xc, 0x78, 0x0, 0x1, [@typed={0x8, 0xb4, 0x0, 0x0, @fd=r0}]}, @generic="bc72c5a0251c9f6dcef4c8240a776309a05a81dd5e6853998e64dadb6ea872408678ff80d435e320d29e736be5f77b505c4a6fef3d0b7e679fa61811d899ad6f5aeee2444a55c146245c89f61543d12c239a25637638067f8fa8c411358abf65b851fcb175f7af8493d87f", @nested={0xd1, 0x31, 0x0, 0x1, [@generic="8cc6698d87538fc7e4d3cb9b3ca80a1fed3bf42a28ab306a86b2553e8af8a40f391bb242", @typed={0x8, 0x13f, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x74, 0x0, 0x0, @pid=r10}, @generic="6c8e38e9a48acea5a5f8db34c1048b49d819734f36977c8581272bf1cef72252de62bfbda2442cc3813a2fda7736627afcb1a8ca4bc9ce5e590ea1941dbabf4d067e048f980746649ad80c33ad49b91c873e7a5ed65346517e9b0c2cbef54f2614e045dbb6515c9d050854f3068282de969fce1e757e0bacdcc625ccbb9b8d24ef9f167f85a1d716fc", @typed={0x8, 0x136, 0x0, 0x0, @fd=r0}, @typed={0x8, 0xd9, 0x0, 0x0, @uid=r11}]}]}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r12}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r13}]}, 0x860}, 0x1, 0x0, 0x0, 0x8000}, 0x1) (async) msgctl$auto_IPC_STAT(0x0, 0x2, &(0x7f0000001480)={{0x5, r3, r7, 0x6, 0xe0000000, 0x8, 0xfee0}, &(0x7f0000001400)=0x3, &(0x7f0000001440)=0x4, 0x4, 0x3, 0x7, 0x6, 0x0, 0x0, 0x9, 0x8, @raw=0x6, @raw=0xd58}) (async) r14 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000001540), r0) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x34, r14, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7fff}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r15 = openat$auto_transactions_fops_(0xffffffffffffff9c, &(0x7f0000001640), 0x200000, 0x0) read$auto_transactions_fops_(r15, &(0x7f0000001680)=""/111, 0x6f) (async, rerun: 32) r16 = fcntl$auto_F_DUPFD_CLOEXEC(r0, 0x406, r15) (rerun: 32) r17 = socket(0x21, 0x3, 0x8c) socket(0x8, 0x800, 0x1) (async) r18 = prctl$auto(0xd9, 0x2, 0xffffffffffffffff, 0x7, 0x800000) (async) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r16, &(0x7f0000001a00)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001740)={0x280, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@THERMAL_GENL_ATTR_THRESHOLD_TEMP={0x8, 0x19, 0x2}, @THERMAL_GENL_ATTR_TZ_TEMP={0x8, 0x3, 0x7}, @THERMAL_GENL_ATTR_CDEV={0x23c, 0xe, 0x0, 0x1, [@typed={0x8, 0x147, 0x0, 0x0, @u32}, @generic="b4da72d296a96db8b71660667122de1cecf1b937b06f386caee829caabaf60394b4473a9b98f794f7c30b3e24f2308c132263169e1a4885cb24be5ba44f497fd2920c0cb063c2ba167795d948b4456a22e14616f6a9b97247e7f38992ff2748dbd4fc531fe709fa1eac0da7fe7f1eeedb38067f3097dbaee52a9a7f6de09f931b4e6ea7eacec8c4178475ab4cffb6b6de90d9d129bd3cdcd88ec0400ba459b8fa02bf38d342ac395bd5478a2892c16a9b739e602a59ebf60163b7d1ca59feaff81648069ad48def87866ec5c5cc020b3a58f358b", @nested={0x62, 0xac, 0x0, 0x1, [@nested={0x4, 0x107}, @generic="5e6b76392f00245ce1c610efd979fea1871824a83b928f48e9c6e8faae0d37912de362ab79e835b478cb71a67ca6f6f020cc69ae732a3e3b82d0bca1c1fed443636fbd7a46b4e1ec2e941285d54b8cf945feaeb765a3", @nested={0x4, 0x116}]}, @nested={0xf8, 0x12d, 0x0, 0x1, [@generic="83f9113a2037a39c98815327b7cdd4cb4f186255ac31a53e082b88822c606712e8ceb4360b21d74501c13a22d814bc99cfd1d553ccc377b57ba1e153725c7a17457e85bf17858283d8b3c22b6c74543ed3c69cbe0a4bf45393895bdea8808ba88b0ce4e0f8ff6aebb03a1d9a74c061dbb00a3e4cde03b3900e2ce1c4cf6083f948fbf2fe5dcb91ee03237d6c2392ed1b2265442be03cc448bdf5145c7c2cecf7b4864ec5450b86eac3946d87511ad6c1feec1e66d95da908e36691b92eddc04a68b4b720109ad8dcddfc9d05c87849da3b1ab334", @typed={0x8, 0x88, 0x0, 0x0, @fd=r17}, @typed={0x8, 0x64, 0x0, 0x0, @pid=r8}, @nested={0x4, 0x141}, @typed={0x8, 0x133, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @nested={0x4, 0x103}]}]}, @THERMAL_GENL_ATTR_THRESHOLD_TEMP={0x8, 0x19, 0x8}, @THERMAL_GENL_ATTR_TZ_TRIP_TEMP={0x8, 0x7, 0x5}, @THERMAL_GENL_ATTR_CDEV_ID={0x8, 0xf, 0x40}, @THERMAL_GENL_ATTR_TZ_TEMP={0x8, 0x3, 0x10001}]}, 0x280}, 0x1, 0x0, 0x0, 0x4000}, 0x1) openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000001a40), 0x108000, 0x0) (async) getgroups$auto(0x80, &(0x7f0000001a80)=0x6) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000001ac0), 0x1a1002, 0x0) (async) pidfd_open$auto(r5, 0x0) (async) read$auto_fb_fops_fb_chrdev(r18, &(0x7f0000001b00)=""/157, 0x9d) ioctl$auto_FBIOGET_CON2FBMAP(r18, 0x460f, &(0x7f0000001bc0)="cf63cecb3d26541b9f8f1b86053a480023f39b4fdf4be17b9ac0f27d53d16ef876a44e6b8a848fe9454efe9f68593dbffdd380065b8c8cd114023812fc514279c6fcb9f495aeddd3c8b17e120f86a151502c5c1dc45b81d4743a02e6bcf3e155d2917d8daa29ae4ae90c9061b98edb0bf65a6f9fcbc23e2e0a4c45d2a01fa7ec7ffedd642d89e3b1c03d08b5c4f55f90c87f72409b02b57db7fb05d01be65c21") (async, rerun: 64) fsconfig$auto_EROFS_MOUNT_DAX_NEVER(r18, 0xad2, &(0x7f0000001c80)='nfsd\x00', &(0x7f0000001cc0)="37298e0ed032787a68d41e4e2b7fb72e00b74e027ee569ee41574c025dbe484d6ab472270b20c05fc2dbd7c6612aa579309b66c195f6e86aa2c3adfdc88fff6848fda5eab5219bcfec3f96f013e9b68e131999263236588ed3874b3860b84136c2f45fb2e6760d48e0e9afab5c78cd734f46414398ddf5e23939bcf3dc9e66aa433a1d0542b7e7c7e03a12bf896a4c1b7db6ef330dec1a56a3f956fa5e2626ae04cc3247f4b2b673f67068872c3deb6986179a25b4452a", 0x80) (rerun: 64) 3.855188799s ago: executing program 2 (id=3576): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0x7, 0x9b52, 0x2, 0x8000000000008000) clone$auto(0x3ffc, 0xad3, 0x0, 0x0, 0x800000000006) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'netdevsim0\x00', 0x0}) bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x3, 0x4, 0xf, 0x63, 0x400, 0xfffffffd, 0x1, 0x80f0c8, 0x0, "38c1d5cbcb9f6b5e511f0cd8ed068f65", r2, 0x2, 0xffffffffffffffff, 0xe4, 0x2, 0x5, 0x3ad, 0x3, 0x0, 0x3, @attach_prog_fd, 0x6, 0xffff, 0x2, 0x81, 0xfffffffe}, 0x4a) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/scsi/scsi\x00', 0x400, 0x0) read$auto(r3, &(0x7f0000000000)='/\x00', 0x6) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r5 = seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0x7, &(0x7f00000005c0)="b0d4adaf04f82818982989a1389d14e5820ff674c9707695268f4297c792bf2d381234beab35402d9caffbb438b0b51410") getsockopt$auto_SO_ZEROCOPY(r5, 0x3, 0x3c, &(0x7f0000000600)='%\x00', &(0x7f0000000640)=0x7) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/route/flush\x00', 0x80401, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r6, 0x0, 0x20) write$auto(0x3, 0x0, 0x5c8) getsid$auto(0x0) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="e30e0000", @ANYRES16=r4, @ANYBLOB="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"], 0x40c}, 0x1, 0x0, 0x0, 0x4814}, 0x400c1) pidfd_getfd$auto(0x3, 0x1, 0x100000000) r7 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/buffer_size_kb\x00', 0x40, 0x0) readv$auto(r7, &(0x7f0000000100)={0x0, 0x3}, 0x1) 3.693815172s ago: executing program 0 (id=3577): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)=""/184, 0xb8) 3.598618147s ago: executing program 5 (id=3578): socket(0xa, 0x5, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop13\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) timer_create$auto(0x0, 0x0, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x500000000000000, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) io_uring_register$auto(0x2, 0x11, &(0x7f0000000180), 0x83) sendmsg$auto_NL80211_CMD_LEAVE_OCB(r2, 0x0, 0x40000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0x1) set_mempolicy_home_node$auto(0x0, 0x2010001, 0x0, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r3, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@HWSIM_ATTR_RADIO_ID={0x8, 0xa, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000010) 3.372542923s ago: executing program 2 (id=3579): close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon33\x00', 0x2a400, 0x0) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x800, 0x0) ioctl$auto(r0, 0x90006441, 0xc35) recvmmsg$auto(0x3, 0x0, 0x10000, 0xffe, 0x0) close_range$auto(0x2, 0x8, 0x0) 3.278127575s ago: executing program 0 (id=3580): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) r0 = socket(0x11, 0x80003, 0x300) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000001c0)='/\x00', &(0x7f0000000400)={0x0, 0x10}, 0x0, 0x1001) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) io_uring_setup$auto(0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x2, 0x2, 0x4) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8, &(0x7f00000002c0)={0x0, 0xfdef}, 0x4, 0x0, 0x3, 0x9}, 0xff}, 0x1, 0xb10) setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x4) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r1, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ae, &(0x7f0000000100)={&(0x7f0000000200)="4c03", 0x101}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x100) 2.633428658s ago: executing program 3 (id=3581): socket(0x2, 0x2, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) bind$auto(0xffffffffffffffff, &(0x7f0000000340)=@l2tp={0x2, 0x0, @empty, 0x1}, 0x6b) close_range$auto(0x2, 0x8, 0x0) 2.366419192s ago: executing program 0 (id=3582): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x745100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x10000007, 0x400b, 0xffffffffffffffff, [], {0x401, 0x6, 0x8c48, 0x29a, 0x0, 0x80, 0x2000104, 0x6, 0x4000000400004}, {0x208, 0x1, 0x101, 0x85, 0x2, 0x24, 0xfe000000, 0x8, 0x3}}) r2 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) read$auto_vhci_fops_hci_vhci(r2, &(0x7f0000000d40)=""/16, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x2000a, 0x4000000000df, 0x2eb1, r3, 0x7ffc) r4 = bpf$auto(0x2, 0x0, 0xf) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x0, r4, 0x8, 0xc4, 0xd, 0x1, r1, 0x7, 0x5}, 0x400000c) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x64c1, 0x8000001f, 0x8, 0x6d3e, 0xc, 0x2, 0x2]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)) close$auto(r2) ioctl$auto_SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) io_uring_register$auto(0xffffffffffffffff, 0x9, 0x0, 0x3) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x13) madvise$auto(0x1, 0xed1, 0x7006) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) 2.109687198s ago: executing program 3 (id=3583): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) statx$auto(0xffffffffffffffff, 0x0, 0x6d7, 0x80000008, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) madvise$auto(0x1000, 0x400050, 0x9) madvise$auto(0x9, 0x8ad, 0x20000) mlock$auto(0x112, 0x80006) 1.215264432s ago: executing program 2 (id=3584): sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000003cc0)='/dev/bus/usb/016/001\x00', 0x1, 0x0) recvmmsg$auto(0xffffffffffffffff, 0x0, 0x1, 0x1, &(0x7f00000003c0)={0x85, 0x4}) mmap$auto(0x0, 0x62, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/compaction_proactiveness\x00', 0x40001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x0, 0x0) socket(0xa, 0x2, 0x0) memfd_secret$auto(0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video57\x00', 0x101000, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptys5\x00', 0x2000, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000300)="dd") 1.203530955s ago: executing program 0 (id=3585): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r0, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async) r1 = open(0x0, 0x261c2, 0x84) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) fanotify_init$auto(0x5, 0x2000000000002) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) (async) clone$auto(0x20003b4a, 0x8, 0x0, 0x0, 0x2) (async) pidfd_getfd$auto(0x3, 0x1, 0x100000000) (async) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r3, r2, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) io_uring_setup$auto(0x6, 0x0) (async) bpf$auto(0x1, &(0x7f0000000380)=@raw_tracepoint={0x5, r1, 0x0, 0x6}, 0xc) sendfile$auto(r0, r0, 0x0, 0x91dd) (async) unshare$auto(0x40000080) (async) setgroups$auto(0x7, 0x0) 694.708122ms ago: executing program 2 (id=3586): openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) r0 = socket(0x11, 0x80003, 0x300) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000001c0)='/\x00', &(0x7f0000000400)={0x0, 0x10}, 0x0, 0x1001) setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x4) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r1, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ae, &(0x7f0000000100)={&(0x7f0000000200)="4c0300", 0x3000}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x100) 389.843903ms ago: executing program 3 (id=3587): unshare$auto(0x40000080) r0 = socket(0xa, 0x5, 0x0) mmap$auto(0x4, 0x7fffffff, 0x3, 0xebd, r0, 0x434110f) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/rpc/nfsd.fh/content\x00', 0x200881, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000009c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="39dd6a19f43edcb951d38b6e3c15173c4ed8a82d812e21dbe1d80678522548e35df1bb5296349b6ea274e450609ccd5283657f78e4ac91bb98aabc7d373f3a2561b4bf00d81f33717d0869d032d1daedb083e2dc3b16c37fa9ee31b83f95ac975027321e241848fffabf41f413d72345c4071958146129802d664783711ff27ca23b44b6ee1bbb685d195620b8448f8f10ef913f6b19d09a945a8a88b861ae4fb9ac08e6c1ca862b1151609e2c5dc8535b53a6c3d50d", @ANYBLOB="010026bd7000e7dbdf251a0000000c00018008000100", @ANYRES32=r4, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40801}, 0x80) write$auto(r2, &(0x7f0000000600)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbbo\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\xff\xb3}\xc2\x1e\tj\x7f\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc:\xfa\x01\xd1\xa3\xb5\xc2B\xa5\xac:woR^a\xb9}\xe7\xbd\xe1\xf77.\xa3\xd8\xc2T\x95\x13\x91\xb6p\xf3\xb2w\xe6\xd7\x94DW\x97\x90a\xe6c\xfb\x88x\xd5L\xa9\xe4\x82\x04\xb1\x8b\r\xcaP\\\x1aVP\xc9\xa4`\xfd\v\x94\f\xc1\x0fQ\xc9\xdcL\x03\x9c\xbfk\xa6\xb1\xb0\xa1\xeeJ\xd8\xef\xc8t\x9d\x1e=J\x91W\xc6AuJ\xb9Q\xed\xd1\a\x05\x9d\x85\xb7b#r\xcd\xaf\xb7\x9f\xf7\xd2\xae\x0f\x98\xa9&\xb6~\xd4\xbd\xbbr\xb9\xc3\xacH!\xc1\x90K2\x05K@\xee\xac\xe8\xc7\t\xab\xbf\xa3\xedb\xd7\xb5\xd7\x83&\x95\xb2?\x0e\x85\xaaIGu\xd6$\xeb\xb6\xdd\a\x121\a\xac\x1bx#\x87\xa9\x10\x9b\xf8YD\x04ZL\xca\x99]\x8f[\x90[\xa8\xbf\x98\xa6\xe50(zC\xe84*w\x13\x96\xd5\xd0\x877\x12\xbc\xa1\xd0h@|\xe5S\xad\x18\x94\xb9\xe7\xf3\x15\x05\x91\xe8\x98p\x7f:\xd7s\xd9wo\x82\xda\xec\x91\xb7\xd9;H\x8a\b\x00\x00\x00\x00\x00\x01\x00\x8aZ\x94\x14$X7\xaeW6=^I\x9fQ\r5c\x81\xca]\x97m\x89o\x8f\xd8}P>I\xd0\xb3\x88C\xd7\x00'/465, 0x100000a3dc) ioctl$auto(r1, 0x5, r2) poll$auto(0x0, 0x83, 0xffff) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(0xffffffffffffffff, &(0x7f0000001300)="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", 0x1000) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000040)=""/217, 0xd9) r6 = socket(0x1d, 0x2, 0x6) setsockopt$auto(r6, 0x6a, 0x5, 0x0, 0x3) syz_genetlink_get_family_id$auto_vdpa(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_VDPA_CMD_DEV_ATTR_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="e53752379692e02a63c02737d9e49dc4e7050714f15d5fb3f9fafb2c8391ec8dcf2d8b04b4a4699afc5e251bfa2723c3d6", @ANYRES16, @ANYBLOB="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"], 0xaac}, 0x1, 0x0, 0x0, 0x10}, 0x4008814) write$auto_console_fops_tty_io(r5, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) ioctl$auto_VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) r7 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) mmap$auto(0x0, 0x400008, 0xe3, 0x9b72, 0x2, 0x8000) socket(0x27, 0x1, 0x0) setsockopt$auto(0x3, 0x1ff, 0x3, 0x0, 0xd) ioctl$auto_UBI_IOCDET(r7, 0x40046f41, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f00000000c0)=0x52a6, &(0x7f0000000140)=0x2) ioctl$auto_VHOST_SET_LOG_FD2(0xffffffffffffffff, 0x4004af07, &(0x7f00000003c0)) mmap$auto(0x3, 0x8, 0xffffffffffffffff, 0x40eb1, 0x401, 0x300000000000) 89.401368ms ago: executing program 2 (id=3588): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/workqueue/cpumask\x00', 0x2, 0x0) r1 = getsid$auto(0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) fallocate$auto(r2, 0x1, 0x820, 0x7fff) syz_clone3(&(0x7f0000000200)={0x203203200, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0), {0xb}, &(0x7f0000000100)=""/1, 0x1, &(0x7f0000000280)=""/133, &(0x7f00000001c0)=[0xffffffffffffffff, r1], 0x2, {r2}}, 0x58) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x101440, 0x0) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) close_range$auto(r3, 0xfffffffffffff000, 0x12) pidfd_open$auto(0x1, 0xf75f) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x82002, 0x0) write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000003900)="fb", 0x1) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/apparmor/parameters/path_max\x00', 0x40, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40280, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000000c0)=""/5, 0x5) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop5\x00', 0x24040, 0x0) socket(0x2, 0x1, 0x0) ioctl$auto(0x3, 0x894b, 0x38) sendfile$auto(r0, r0, 0x0, 0x200000000000004) 0s ago: executing program 5 (id=3589): socket(0x15, 0x5, 0x0) r0 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r0, 0x29, 0x16, 0x0, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x200000000eb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x1, 0x3c, 0x0, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x3, 0x0, 0x54) madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D1\x00', 0x480000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, 0x0, 0x100000a3d9) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/025/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000240)={0x0, 0x1, 0x1, 0x10, 0x1, 0x4, &(0x7f00000001c0)}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="94000000", @ANYRES16=r4, @ANYBLOB="01032dbd7000ffdbdf251100fffc"], 0x14}}, 0x400c0) ioctl$auto_VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) sysfs$auto(0x2, 0x23, 0x0) openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x123000, 0x0) setsockopt$auto(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x8) r5 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x1c, r8, 0xb01, 0x70bd27, 0x25dfdbfc, {0x5, 0x0, 0xc00e}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000050}, 0x240088e4) sendmsg$auto_NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2010000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x278, r8, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_VENDOR_DATA={0xc6, 0xc5, "f217a409ab2f865e30c0f10eb9d14f8d264ce6156c592539fc572b87835ffe9563cae8a19849854a73372852527de6e47611162114be306746e3da183e8941e4f040ea006c7365a983b2fc4bc7ae64a1dafa5a3dc20aa1351daecc54b818ed2054d45833ecbd733b2a48c2acf4b62dd0817634a6918515b991f467ed5acb17e2e95daadc4aea2c87c45a669298adc7eba965e6a9fd8895ecdbe4b9c455e5cb7778643157c5ea3297b47a5396965b09a34853e0df55a65d3312054aa6711ac0e8326c"}, @NL80211_ATTR_MBSSID_CONFIG={0x4}, @NL80211_ATTR_EMA_RNR_ELEMS={0x11c, 0x145, 0x0, 0x1, [@nested={0x117, 0x107, 0x0, 0x1, [@generic="4cdc3ef4572b10832ff05981f16584ed6b4ed8b344413403e042bea5b94d79d024cf2014f82238df429af7dc97e83924a1d548a6fc941637f686f45e26aa3a87a2fbdbf37f2667d88c6d3d408c87fae9ca3e25204803b4aeaabb499044231ba8d69e70ab92d74fa4a1666177427d61896972173256168580e45b73f1638b615f8a8339cc914638f919a3aa5ddc9e2959345a768771a898ca7af77b78d7cb18852c1530fd383a5f5567a0516a0f1453b45135a0b2f0ebf027141103c0cd182a125e4a6ba330", @generic="6dd5b8886e02fd9edec7b87d5dd80690509c0cb546c570fcf08522e06dff2366cbafa5e2e9076c27e28ff179b4114b1ff9d6e30f3103356140e3109fb8450f5ecae3162124a01d676bf0839021c8"]}]}, @NL80211_ATTR_KEY_DATA={0x24, 0x7, "699fe90ce9a00830cfbe149e4d1518628d1ade21cab2a6925f34f5cb464aa9e0"}, @NL80211_ATTR_MNTR_FLAGS={0x3d, 0x17, "43c8be3412a3e4df88e6e5344b2c8eae8ee10257b54e284e25304c44aaa900781abd799fcfcd903ff9427def00bcbb4fbfdf95b9a9553bab72"}, @NL80211_ATTR_SCAN_FREQUENCIES={0x18, 0x2c, 0x0, 0x1, [@nested={0x14, 0x9a, 0x0, 0x1, [@typed={0x5, 0x15b, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x62, 0x0, 0x0, @ipv4=@loopback}]}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) write$auto(r5, 0x0, 0x4) kernel console output (not intermixed with test programs): 6/0x9c0 [ 913.767680][T16309] ? __lock_acquire+0x4a5/0x2630 [ 913.767704][T16309] ? security_inode_alloc+0x3b/0x2c0 [ 913.767749][T16309] ? sk_prot_alloc+0x10b/0x2a0 [ 913.767781][T16309] sk_prot_alloc+0x10b/0x2a0 [ 913.767816][T16309] sk_alloc+0x36/0xe80 [ 913.767851][T16309] pppoe_create+0x32/0x360 [ 913.767886][T16309] pppox_create+0x15c/0x2c0 [ 913.767919][T16309] __sock_create+0x339/0x860 [ 913.767960][T16309] __sys_socket+0x14d/0x260 [ 913.767996][T16309] ? __fget_files+0x21f/0x3d0 [ 913.768020][T16309] ? __pfx___sys_socket+0x10/0x10 [ 913.768055][T16309] ? xfd_validate_state+0x129/0x190 [ 913.768092][T16309] __x64_sys_socket+0x72/0xb0 [ 913.768128][T16309] ? lockdep_hardirqs_on+0x78/0x100 [ 913.768166][T16309] do_syscall_64+0x106/0xf80 [ 913.768202][T16309] ? clear_bhb_loop+0x40/0x90 [ 913.768232][T16309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.768258][T16309] RIP: 0033:0x7fc8f319bf79 [ 913.768277][T16309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 913.768301][T16309] RSP: 002b:00007fc8f407d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 913.768324][T16309] RAX: ffffffffffffffda RBX: 00007fc8f3415fa0 RCX: 00007fc8f319bf79 [ 913.768341][T16309] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000018 [ 913.768356][T16309] RBP: 00007fc8f32327e0 R08: 0000000000000000 R09: 0000000000000000 [ 913.768371][T16309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 913.768386][T16309] R13: 00007fc8f3416038 R14: 00007fc8f3415fa0 R15: 00007ffcceb4b8b8 [ 913.768417][T16309] [ 916.324226][T16344] FAULT_INJECTION: forcing a failure. [ 916.324226][T16344] name failslab, interval 1, probability 0, space 0, times 0 [ 916.387430][T16344] CPU: 1 UID: 0 PID: 16344 Comm: syz.2.2542 Tainted: G U L syzkaller #0 PREEMPT(full) [ 916.387491][T16344] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 916.387505][T16344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 916.387525][T16344] Call Trace: [ 916.387537][T16344] [ 916.387550][T16344] dump_stack_lvl+0x100/0x190 [ 916.387600][T16344] should_fail_ex.cold+0x5/0xa [ 916.387642][T16344] should_failslab+0xc2/0x120 [ 916.387682][T16344] kmem_cache_alloc_node_noprof+0x8c/0x880 [ 916.387719][T16344] ? __alloc_skb+0x156/0x410 [ 916.387750][T16344] ? __alloc_skb+0x35d/0x410 [ 916.387788][T16344] ? __alloc_skb+0x156/0x410 [ 916.387819][T16344] __alloc_skb+0x156/0x410 [ 916.387850][T16344] ? __alloc_skb+0x35d/0x410 [ 916.387881][T16344] ? __pfx___alloc_skb+0x10/0x10 [ 916.387927][T16344] alloc_skb_with_frags+0xe0/0x810 [ 916.387978][T16344] sock_alloc_send_pskb+0x801/0x980 [ 916.388011][T16344] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 916.388056][T16344] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 916.388086][T16344] ? find_held_lock+0x2b/0x80 [ 916.388128][T16344] ? dev_get_by_index+0x180/0x380 [ 916.388162][T16344] ? dev_get_by_index+0x180/0x380 [ 916.388196][T16344] ? sock_cmsg_send+0x1a0/0x280 [ 916.388236][T16344] packet_sendmsg+0x20e0/0x53c0 [ 916.388306][T16344] ? __pfx___might_resched+0x10/0x10 [ 916.388346][T16344] ? __lock_acquire+0x4a5/0x2630 [ 916.388383][T16344] ? aa_sk_perm+0x2de/0xb40 [ 916.388416][T16344] ? __pfx_packet_sendmsg+0x10/0x10 [ 916.388462][T16344] ? __pfx_aa_sk_perm+0x10/0x10 [ 916.388506][T16344] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 916.388561][T16344] ____sys_sendmsg+0xa54/0xc30 [ 916.388612][T16344] ? __pfx_____sys_sendmsg+0x10/0x10 [ 916.388674][T16344] ? __pfx__kstrtoull+0x10/0x10 [ 916.388726][T16344] ___sys_sendmsg+0x190/0x1e0 [ 916.388780][T16344] ? __pfx____sys_sendmsg+0x10/0x10 [ 916.388849][T16344] ? find_held_lock+0x2b/0x80 [ 916.388920][T16344] __sys_sendmmsg+0x205/0x430 [ 916.388963][T16344] ? __pfx___sys_sendmmsg+0x10/0x10 [ 916.389015][T16344] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 916.389087][T16344] ? fput+0x79/0x100 [ 916.389127][T16344] ? ksys_write+0x1ac/0x250 [ 916.389158][T16344] ? __pfx_ksys_write+0x10/0x10 [ 916.389197][T16344] __x64_sys_sendmmsg+0x9c/0x100 [ 916.389235][T16344] ? lockdep_hardirqs_on+0x78/0x100 [ 916.389287][T16344] do_syscall_64+0x106/0xf80 [ 916.389335][T16344] ? clear_bhb_loop+0x40/0x90 [ 916.389377][T16344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.389412][T16344] RIP: 0033:0x7f1db119bf79 [ 916.389438][T16344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 916.389470][T16344] RSP: 002b:00007f1daf3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 916.389502][T16344] RAX: ffffffffffffffda RBX: 00007f1db1415fa0 RCX: 00007f1db119bf79 [ 916.389524][T16344] RDX: 0000000000000002 RSI: 00002000000006c0 RDI: 0000000000000004 [ 916.389545][T16344] RBP: 00007f1daf3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 916.389566][T16344] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 916.389588][T16344] R13: 00007f1db1416038 R14: 00007f1db1415fa0 R15: 00007ffec9196568 [ 916.389639][T16344] [ 916.764426][T16333] zswap: compressor not available [ 917.791013][T16355] netlink: 712 bytes leftover after parsing attributes in process `syz.0.2544'. [ 918.964325][ T6161] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 918.978576][ T6161] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 918.995171][ T6161] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 919.037769][ T6161] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 919.054979][ T6161] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 921.137142][ T6161] Bluetooth: hci3: command tx timeout [ 921.312508][T16371] chnl_net:caif_netlink_parms(): no params data found [ 921.546155][T13919] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.109754][T13919] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.424179][T13919] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.928067][T13919] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.178962][T16371] bridge0: port 1(bridge_slave_0) entered blocking state [ 923.196030][ T6161] Bluetooth: hci3: command tx timeout [ 923.205326][T16371] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.246982][T16371] bridge_slave_0: entered allmulticast mode [ 923.281511][T16371] bridge_slave_0: entered promiscuous mode [ 923.422114][T16371] bridge0: port 2(bridge_slave_1) entered blocking state [ 923.445799][T16371] bridge0: port 2(bridge_slave_1) entered disabled state [ 923.453240][T16371] bridge_slave_1: entered allmulticast mode [ 923.492251][T16371] bridge_slave_1: entered promiscuous mode [ 924.106141][T16371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 924.312382][T16371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 924.509877][T16371] team0: Port device team_slave_0 added [ 924.673127][T16371] team0: Port device team_slave_1 added [ 924.874477][T13919] bridge_slave_1: left allmulticast mode [ 924.885638][T13919] bridge_slave_1: left promiscuous mode [ 924.945065][T13919] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.091052][T13919] bridge_slave_0: left allmulticast mode [ 925.126117][T13919] bridge_slave_0: left promiscuous mode [ 925.132078][T13919] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.275048][ T6161] Bluetooth: hci3: command tx timeout [ 925.485310][T16468] netlink: 712 bytes leftover after parsing attributes in process `syz.4.2568'. [ 927.355736][ T6161] Bluetooth: hci3: command tx timeout [ 927.854902][T13919] bond0 (unregistering): (slave ): Releasing backup interface [ 927.926759][T13919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 927.976925][T13919] bond0 (unregistering): Released all slaves [ 928.022686][T16371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 928.052250][T16371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 928.134550][T16371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 928.172143][T16371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 928.209528][T16371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 928.307102][T16371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 929.796799][T16371] hsr_slave_0: entered promiscuous mode [ 929.803708][T16371] hsr_slave_1: entered promiscuous mode [ 929.855833][T16371] debugfs: 'hsr0' already exists in 'hsr' [ 929.861786][T16371] Cannot create hsr debugfs directory [ 935.134631][T16371] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 935.707263][T16371] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 935.757189][T16371] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 935.890582][T16371] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 936.110936][T13919] hsr_slave_0: left promiscuous mode [ 936.132282][T13919] hsr_slave_1: left promiscuous mode [ 936.195733][T13919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 936.203193][T13919] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 936.395520][T13919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 936.434911][T13919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 936.713745][T13919] veth1_macvtap: left promiscuous mode [ 936.755067][T13919] veth0_macvtap: left promiscuous mode [ 936.760813][T13919] veth1_vlan: left promiscuous mode [ 936.795329][T13919] veth0_vlan: left promiscuous mode [ 936.939315][T16580] FAULT_INJECTION: forcing a failure. [ 936.939315][T16580] name failslab, interval 1, probability 0, space 0, times 0 [ 937.121162][T16580] CPU: 1 UID: 0 PID: 16580 Comm: syz.0.2589 Tainted: G U L syzkaller #0 PREEMPT(full) [ 937.121219][T16580] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 937.121232][T16580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 937.121251][T16580] Call Trace: [ 937.121263][T16580] [ 937.121285][T16580] dump_stack_lvl+0x100/0x190 [ 937.121338][T16580] should_fail_ex.cold+0x5/0xa [ 937.121377][T16580] should_failslab+0xc2/0x120 [ 937.121423][T16580] __kmalloc_cache_noprof+0x80/0x810 [ 937.121476][T16580] ? snd_seq_oss_readq_new+0x4a/0x2c0 [ 937.121522][T16580] ? snd_seq_oss_readq_new+0x4a/0x2c0 [ 937.121561][T16580] ? lockdep_hardirqs_on+0x78/0x100 [ 937.121610][T16580] snd_seq_oss_readq_new+0x4a/0x2c0 [ 937.121652][T16580] snd_seq_oss_open+0x476/0xa10 [ 937.121709][T16580] odev_open+0x79/0xc0 [ 937.121749][T16580] ? __pfx_odev_open+0x10/0x10 [ 937.121794][T16580] soundcore_open+0x2e3/0x5a0 [ 937.121846][T16580] ? __pfx_soundcore_open+0x10/0x10 [ 937.121893][T16580] chrdev_open+0x234/0x6a0 [ 937.121929][T16580] ? __pfx_apparmor_file_open+0x10/0x10 [ 937.121981][T16580] ? __pfx_chrdev_open+0x10/0x10 [ 937.122021][T16580] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 937.122069][T16580] do_dentry_open+0x6d8/0x1660 [ 937.122103][T16580] ? __pfx_chrdev_open+0x10/0x10 [ 937.122147][T16580] vfs_open+0x82/0x3f0 [ 937.122197][T16580] path_openat+0x208c/0x31a0 [ 937.122247][T16580] ? __pfx_path_openat+0x10/0x10 [ 937.122312][T16580] do_file_open+0x20e/0x430 [ 937.122353][T16580] ? __pfx_do_file_open+0x10/0x10 [ 937.122422][T16580] ? alloc_fd+0x476/0x790 [ 937.122461][T16580] ? do_getname+0x191/0x390 [ 937.122508][T16580] do_sys_openat2+0x10d/0x1e0 [ 937.122556][T16580] ? __pfx_do_sys_openat2+0x10/0x10 [ 937.122605][T16580] ? find_held_lock+0x2b/0x80 [ 937.122674][T16580] __x64_sys_openat+0x12d/0x210 [ 937.122725][T16580] ? __pfx___x64_sys_openat+0x10/0x10 [ 937.122772][T16580] ? xfd_validate_state+0x129/0x190 [ 937.122830][T16580] do_syscall_64+0x106/0xf80 [ 937.122880][T16580] ? clear_bhb_loop+0x40/0x90 [ 937.122921][T16580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.122958][T16580] RIP: 0033:0x7fd51ef9bf79 [ 937.122985][T16580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 937.123020][T16580] RSP: 002b:00007fd51fed2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 937.123055][T16580] RAX: ffffffffffffffda RBX: 00007fd51f215fa0 RCX: 00007fd51ef9bf79 [ 937.123079][T16580] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 937.123102][T16580] RBP: 00007fd51f0327e0 R08: 0000000000000000 R09: 0000000000000000 [ 937.123124][T16580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 937.123146][T16580] R13: 00007fd51f216038 R14: 00007fd51f215fa0 R15: 00007fff78ffeda8 [ 937.123191][T16580] [ 939.825324][T16599] FAULT_INJECTION: forcing a failure. [ 939.825324][T16599] name failslab, interval 1, probability 0, space 0, times 0 [ 939.914917][T16599] CPU: 1 UID: 0 PID: 16599 Comm: syz.0.2594 Tainted: G U L syzkaller #0 PREEMPT(full) [ 939.914973][T16599] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 939.914987][T16599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 939.915007][T16599] Call Trace: [ 939.915019][T16599] [ 939.915037][T16599] dump_stack_lvl+0x100/0x190 [ 939.915088][T16599] should_fail_ex.cold+0x5/0xa [ 939.915126][T16599] should_failslab+0xc2/0x120 [ 939.915166][T16599] __kmalloc_cache_noprof+0x80/0x810 [ 939.915217][T16599] ? snd_seq_oss_readq_new+0x4a/0x2c0 [ 939.915272][T16599] ? snd_seq_oss_readq_new+0x4a/0x2c0 [ 939.915308][T16599] ? lockdep_hardirqs_on+0x78/0x100 [ 939.915359][T16599] snd_seq_oss_readq_new+0x4a/0x2c0 [ 939.915399][T16599] snd_seq_oss_open+0x476/0xa10 [ 939.915466][T16599] odev_open+0x79/0xc0 [ 939.915508][T16599] ? __pfx_odev_open+0x10/0x10 [ 939.915553][T16599] soundcore_open+0x2e3/0x5a0 [ 939.915605][T16599] ? __pfx_soundcore_open+0x10/0x10 [ 939.915650][T16599] chrdev_open+0x234/0x6a0 [ 939.915686][T16599] ? __pfx_apparmor_file_open+0x10/0x10 [ 939.915740][T16599] ? __pfx_chrdev_open+0x10/0x10 [ 939.915782][T16599] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 939.915828][T16599] do_dentry_open+0x6d8/0x1660 [ 939.915863][T16599] ? __pfx_chrdev_open+0x10/0x10 [ 939.915909][T16599] vfs_open+0x82/0x3f0 [ 939.915960][T16599] path_openat+0x208c/0x31a0 [ 939.916013][T16599] ? __pfx_path_openat+0x10/0x10 [ 939.916065][T16599] do_file_open+0x20e/0x430 [ 939.916105][T16599] ? __pfx_do_file_open+0x10/0x10 [ 939.916173][T16599] ? alloc_fd+0x476/0x790 [ 939.916212][T16599] ? do_getname+0x191/0x390 [ 939.916271][T16599] do_sys_openat2+0x10d/0x1e0 [ 939.916319][T16599] ? __pfx_do_sys_openat2+0x10/0x10 [ 939.916367][T16599] ? find_held_lock+0x2b/0x80 [ 939.916425][T16599] __x64_sys_openat+0x12d/0x210 [ 939.916485][T16599] ? __pfx___x64_sys_openat+0x10/0x10 [ 939.916532][T16599] ? xfd_validate_state+0x129/0x190 [ 939.916587][T16599] do_syscall_64+0x106/0xf80 [ 939.916646][T16599] ? clear_bhb_loop+0x40/0x90 [ 939.916690][T16599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.916727][T16599] RIP: 0033:0x7fd51ef9bf79 [ 939.916754][T16599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 939.916790][T16599] RSP: 002b:00007fd51fed2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 939.916824][T16599] RAX: ffffffffffffffda RBX: 00007fd51f215fa0 RCX: 00007fd51ef9bf79 [ 939.916848][T16599] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 939.916871][T16599] RBP: 00007fd51f0327e0 R08: 0000000000000000 R09: 0000000000000000 [ 939.916893][T16599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 939.916914][T16599] R13: 00007fd51f216038 R14: 00007fd51f215fa0 R15: 00007fff78ffeda8 [ 939.916959][T16599] [ 940.635726][T13919] team0 (unregistering): Port device team_slave_1 removed [ 940.840265][T13919] team0 (unregistering): Port device team_slave_0 removed [ 941.998702][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 942.010779][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 944.016590][T16371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 944.175751][T16371] 8021q: adding VLAN 0 to HW filter on device team0 [ 944.250053][T13924] bridge0: port 1(bridge_slave_0) entered blocking state [ 944.257308][T13924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 944.365585][T13924] bridge0: port 2(bridge_slave_1) entered blocking state [ 944.372897][T13924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 944.902385][T16371] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 945.029014][T16371] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 946.177090][T16653] FAULT_INJECTION: forcing a failure. [ 946.177090][T16653] name failslab, interval 1, probability 0, space 0, times 0 [ 946.284933][T16653] CPU: 1 UID: 0 PID: 16653 Comm: syz.0.2602 Tainted: G U L syzkaller #0 PREEMPT(full) [ 946.284991][T16653] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 946.285005][T16653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 946.285026][T16653] Call Trace: [ 946.285038][T16653] [ 946.285052][T16653] dump_stack_lvl+0x100/0x190 [ 946.285106][T16653] should_fail_ex.cold+0x5/0xa [ 946.285146][T16653] should_failslab+0xc2/0x120 [ 946.285187][T16653] ? snd_seq_oss_readq_new+0x96/0x2c0 [ 946.285224][T16653] __kmalloc_noprof+0xf6/0x9c0 [ 946.285286][T16653] ? snd_seq_oss_readq_new+0x96/0x2c0 [ 946.285322][T16653] snd_seq_oss_readq_new+0x96/0x2c0 [ 946.285365][T16653] snd_seq_oss_open+0x476/0xa10 [ 946.285424][T16653] odev_open+0x79/0xc0 [ 946.285480][T16653] ? __pfx_odev_open+0x10/0x10 [ 946.285529][T16653] soundcore_open+0x2e3/0x5a0 [ 946.285580][T16653] ? __pfx_soundcore_open+0x10/0x10 [ 946.285649][T16653] chrdev_open+0x234/0x6a0 [ 946.285686][T16653] ? __pfx_apparmor_file_open+0x10/0x10 [ 946.285740][T16653] ? __pfx_chrdev_open+0x10/0x10 [ 946.285780][T16653] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 946.285827][T16653] do_dentry_open+0x6d8/0x1660 [ 946.285861][T16653] ? __pfx_chrdev_open+0x10/0x10 [ 946.285909][T16653] vfs_open+0x82/0x3f0 [ 946.285959][T16653] path_openat+0x208c/0x31a0 [ 946.286011][T16653] ? __pfx_path_openat+0x10/0x10 [ 946.286064][T16653] do_file_open+0x20e/0x430 [ 946.286104][T16653] ? __pfx_do_file_open+0x10/0x10 [ 946.286172][T16653] ? alloc_fd+0x476/0x790 [ 946.286212][T16653] ? do_getname+0x191/0x390 [ 946.286261][T16653] do_sys_openat2+0x10d/0x1e0 [ 946.286308][T16653] ? __pfx_do_sys_openat2+0x10/0x10 [ 946.286357][T16653] ? find_held_lock+0x2b/0x80 [ 946.286416][T16653] __x64_sys_openat+0x12d/0x210 [ 946.286471][T16653] ? __pfx___x64_sys_openat+0x10/0x10 [ 946.286518][T16653] ? xfd_validate_state+0x129/0x190 [ 946.286575][T16653] do_syscall_64+0x106/0xf80 [ 946.286633][T16653] ? clear_bhb_loop+0x40/0x90 [ 946.286678][T16653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.286715][T16653] RIP: 0033:0x7fd51ef9bf79 [ 946.286743][T16653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 946.286779][T16653] RSP: 002b:00007fd51fed2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 946.286813][T16653] RAX: ffffffffffffffda RBX: 00007fd51f215fa0 RCX: 00007fd51ef9bf79 [ 946.286836][T16653] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 946.286859][T16653] RBP: 00007fd51f0327e0 R08: 0000000000000000 R09: 0000000000000000 [ 946.286880][T16653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 946.286901][T16653] R13: 00007fd51f216038 R14: 00007fd51f215fa0 R15: 00007fff78ffeda8 [ 946.286945][T16653] [ 946.581568][T16371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 947.055024][T16371] veth0_vlan: entered promiscuous mode [ 947.225682][T16663] FAULT_INJECTION: forcing a failure. [ 947.225682][T16663] name failslab, interval 1, probability 0, space 0, times 0 [ 947.274201][T16663] CPU: 1 UID: 0 PID: 16663 Comm: syz.2.2603 Tainted: G U L syzkaller #0 PREEMPT(full) [ 947.274263][T16663] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 947.274277][T16663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 947.274299][T16663] Call Trace: [ 947.274310][T16663] [ 947.274323][T16663] dump_stack_lvl+0x100/0x190 [ 947.274379][T16663] should_fail_ex.cold+0x5/0xa [ 947.274419][T16663] should_failslab+0xc2/0x120 [ 947.274460][T16663] __kmalloc_cache_noprof+0x80/0x810 [ 947.274514][T16663] ? snd_seq_oss_readq_new+0x4a/0x2c0 [ 947.274571][T16663] ? snd_seq_oss_readq_new+0x4a/0x2c0 [ 947.274607][T16663] ? lockdep_hardirqs_on+0x78/0x100 [ 947.274659][T16663] snd_seq_oss_readq_new+0x4a/0x2c0 [ 947.274701][T16663] snd_seq_oss_open+0x476/0xa10 [ 947.274761][T16663] odev_open+0x79/0xc0 [ 947.274804][T16663] ? __pfx_odev_open+0x10/0x10 [ 947.274849][T16663] soundcore_open+0x2e3/0x5a0 [ 947.274901][T16663] ? __pfx_soundcore_open+0x10/0x10 [ 947.274947][T16663] chrdev_open+0x234/0x6a0 [ 947.274983][T16663] ? __pfx_apparmor_file_open+0x10/0x10 [ 947.275038][T16663] ? __pfx_chrdev_open+0x10/0x10 [ 947.275079][T16663] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 947.275128][T16663] do_dentry_open+0x6d8/0x1660 [ 947.275163][T16663] ? __pfx_chrdev_open+0x10/0x10 [ 947.275211][T16663] vfs_open+0x82/0x3f0 [ 947.275263][T16663] path_openat+0x208c/0x31a0 [ 947.275315][T16663] ? __pfx_path_openat+0x10/0x10 [ 947.275369][T16663] do_file_open+0x20e/0x430 [ 947.275410][T16663] ? __pfx_do_file_open+0x10/0x10 [ 947.275478][T16663] ? alloc_fd+0x476/0x790 [ 947.275525][T16663] ? do_getname+0x191/0x390 [ 947.275576][T16663] do_sys_openat2+0x10d/0x1e0 [ 947.275626][T16663] ? __pfx_do_sys_openat2+0x10/0x10 [ 947.275676][T16663] ? find_held_lock+0x2b/0x80 [ 947.275735][T16663] __x64_sys_openat+0x12d/0x210 [ 947.275786][T16663] ? __pfx___x64_sys_openat+0x10/0x10 [ 947.275834][T16663] ? xfd_validate_state+0x129/0x190 [ 947.275892][T16663] do_syscall_64+0x106/0xf80 [ 947.275945][T16663] ? clear_bhb_loop+0x40/0x90 [ 947.275985][T16663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.276021][T16663] RIP: 0033:0x7f1db119bf79 [ 947.276049][T16663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 947.276084][T16663] RSP: 002b:00007f1daf3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 947.276118][T16663] RAX: ffffffffffffffda RBX: 00007f1db1415fa0 RCX: 00007f1db119bf79 [ 947.276142][T16663] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 947.276164][T16663] RBP: 00007f1db12327e0 R08: 0000000000000000 R09: 0000000000000000 [ 947.276186][T16663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 947.276207][T16663] R13: 00007f1db1416038 R14: 00007f1db1415fa0 R15: 00007ffec9196568 [ 947.276252][T16663] [ 947.737705][T16371] veth1_vlan: entered promiscuous mode [ 948.243347][T16371] veth0_macvtap: entered promiscuous mode [ 948.323066][T16371] veth1_macvtap: entered promiscuous mode [ 948.441554][T16371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 948.542693][T16371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 948.630090][T13924] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.709567][T13924] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.756215][T13924] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.882490][T13924] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.165902][T16669] binder: 16668:16669 ioctl c018620c 9 returned -1 [ 949.334018][T13924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 949.405828][T13924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 949.574081][T13916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 949.651393][T13916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 950.673417][T16698] vivid-009: ================= START STATUS ================= [ 950.735285][T16698] vivid-009: Radio HW Seek Mode: Bounded [ 950.741067][T16698] vivid-009: Radio Programmable HW Seek: false [ 950.793874][T16698] vivid-009: RDS Rx I/O Mode: Block I/O [ 950.879978][T16698] vivid-009: Generate RBDS Instead of RDS: false [ 951.015049][T16698] vivid-009: RDS Reception: true [ 951.015111][T16698] vivid-009: RDS Program Type: 0 inactive [ 951.015158][T16698] vivid-009: RDS PS Name: inactive [ 951.015201][T16698] vivid-009: RDS Radio Text: inactive [ 951.015252][T16698] vivid-009: RDS Traffic Announcement: false inactive [ 951.015297][T16698] vivid-009: RDS Traffic Program: false inactive [ 951.015342][T16698] vivid-009: RDS Music: false inactive [ 951.015386][T16698] vivid-009: ================== END STATUS ================== [ 955.485358][T16750] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 956.499182][T16766] __vm_enough_memory: pid: 16766, comm: syz.3.2627, bytes: 4398046511104 not enough memory for the allocation [ 958.188421][T16775] kexec: Could not allocate control_code_buffer [ 958.529004][T16781] netlink: 186 bytes leftover after parsing attributes in process `syz.0.2629'. [ 958.618921][T16785] netlink: 186 bytes leftover after parsing attributes in process `syz.0.2629'. [ 959.335511][T16790] delete_channel: no stack [ 959.634166][T11420] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 959.664984][T11420] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 959.691367][T11420] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 959.720440][T11420] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 959.734951][T11420] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 960.138756][T16799] FAULT_INJECTION: forcing a failure. [ 960.138756][T16799] name failslab, interval 1, probability 0, space 0, times 0 [ 960.195101][T16799] CPU: 0 UID: 0 PID: 16799 Comm: syz.3.2634 Tainted: G U L syzkaller #0 PREEMPT(full) [ 960.195162][T16799] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 960.195176][T16799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 960.195197][T16799] Call Trace: [ 960.195209][T16799] [ 960.195222][T16799] dump_stack_lvl+0x100/0x190 [ 960.195280][T16799] should_fail_ex.cold+0x5/0xa [ 960.195319][T16799] should_failslab+0xc2/0x120 [ 960.195361][T16799] __kmalloc_cache_noprof+0x80/0x810 [ 960.195416][T16799] ? snd_seq_oss_readq_new+0x4a/0x2c0 [ 960.195464][T16799] ? snd_seq_oss_readq_new+0x4a/0x2c0 [ 960.195500][T16799] ? lockdep_hardirqs_on+0x78/0x100 [ 960.195553][T16799] snd_seq_oss_readq_new+0x4a/0x2c0 [ 960.195595][T16799] snd_seq_oss_open+0x476/0xa10 [ 960.195655][T16799] odev_open+0x79/0xc0 [ 960.195699][T16799] ? __pfx_odev_open+0x10/0x10 [ 960.195745][T16799] soundcore_open+0x2e3/0x5a0 [ 960.195799][T16799] ? __pfx_soundcore_open+0x10/0x10 [ 960.195849][T16799] chrdev_open+0x234/0x6a0 [ 960.195892][T16799] ? __pfx_apparmor_file_open+0x10/0x10 [ 960.195959][T16799] ? __pfx_chrdev_open+0x10/0x10 [ 960.196009][T16799] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 960.196058][T16799] do_dentry_open+0x6d8/0x1660 [ 960.196095][T16799] ? __pfx_chrdev_open+0x10/0x10 [ 960.196144][T16799] vfs_open+0x82/0x3f0 [ 960.196195][T16799] path_openat+0x208c/0x31a0 [ 960.196245][T16799] ? __pfx_path_openat+0x10/0x10 [ 960.196300][T16799] do_file_open+0x20e/0x430 [ 960.196341][T16799] ? __pfx_do_file_open+0x10/0x10 [ 960.196417][T16799] ? alloc_fd+0x476/0x790 [ 960.196458][T16799] ? do_getname+0x191/0x390 [ 960.196508][T16799] do_sys_openat2+0x10d/0x1e0 [ 960.196555][T16799] ? __pfx_do_sys_openat2+0x10/0x10 [ 960.196607][T16799] ? find_held_lock+0x2b/0x80 [ 960.196663][T16799] __x64_sys_openat+0x12d/0x210 [ 960.196711][T16799] ? __pfx___x64_sys_openat+0x10/0x10 [ 960.196758][T16799] ? xfd_validate_state+0x129/0x190 [ 960.196814][T16799] do_syscall_64+0x106/0xf80 [ 960.196866][T16799] ? clear_bhb_loop+0x40/0x90 [ 960.196904][T16799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.196937][T16799] RIP: 0033:0x7f959bf9bf79 [ 960.196964][T16799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 960.197010][T16799] RSP: 002b:00007f959cdfe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 960.197045][T16799] RAX: ffffffffffffffda RBX: 00007f959c215fa0 RCX: 00007f959bf9bf79 [ 960.197070][T16799] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 960.197094][T16799] RBP: 00007f959c0327e0 R08: 0000000000000000 R09: 0000000000000000 [ 960.197116][T16799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 960.197138][T16799] R13: 00007f959c216038 R14: 00007f959c215fa0 R15: 00007fff20b82488 [ 960.197185][T16799] [ 961.836235][T11420] Bluetooth: hci1: command tx timeout [ 962.300590][T16793] chnl_net:caif_netlink_parms(): no params data found [ 963.922765][T11420] Bluetooth: hci1: command tx timeout [ 964.155679][T16793] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.204940][T16793] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.212317][T16793] bridge_slave_0: entered allmulticast mode [ 964.257094][T16793] bridge_slave_0: entered promiscuous mode [ 964.306924][T16793] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.385094][T16793] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.392584][T16793] bridge_slave_1: entered allmulticast mode [ 964.427351][T16793] bridge_slave_1: entered promiscuous mode [ 965.178825][T16793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 965.258959][T16793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 965.598290][T16793] team0: Port device team_slave_0 added [ 965.719591][T16793] team0: Port device team_slave_1 added [ 965.994844][T11420] Bluetooth: hci1: command tx timeout [ 966.058124][T16793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 966.094824][T16793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 966.204820][T16793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 966.244429][T16793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 966.286118][T16793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 966.420534][T16793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 966.478312][T16840] netlink: 'syz.2.2641': attribute type 1 has an invalid length. [ 966.814019][T16850] can: request_module (can-proto-0) failed. [ 966.911596][T16793] hsr_slave_0: entered promiscuous mode [ 966.947359][T16793] hsr_slave_1: entered promiscuous mode [ 968.076451][T11420] Bluetooth: hci1: command tx timeout [ 968.802168][T16793] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 969.174644][T16793] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 969.219580][T16793] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 969.327606][T16793] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 970.412105][T16793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 970.607286][T16793] 8021q: adding VLAN 0 to HW filter on device team0 [ 970.667121][T13918] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.674364][T13918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 970.773472][T13918] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.780691][T13918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 970.951461][T16793] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 971.037344][T16793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 971.134273][T16891] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16 [ 972.222568][T16793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 972.865431][T16893] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17 [ 973.337474][T16917] input: jJǸ-9%vJ86 as /devices/virtual/input/input18 [ 974.409646][T16793] veth0_vlan: entered promiscuous mode [ 974.489350][T16793] veth1_vlan: entered promiscuous mode [ 974.648213][T16793] veth0_macvtap: entered promiscuous mode [ 974.707924][T16793] veth1_macvtap: entered promiscuous mode [ 974.839346][T16793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 975.036227][T16793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 975.457830][T13918] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.492596][T13918] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.533788][T13918] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.546440][T13918] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.102121][ T6164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 976.141790][ T6164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 976.283149][T13926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 976.334796][T13926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 981.126087][T16994] usb usb3: usbfs: process 16994 (syz.2.2667) did not claim interface 0 before use [ 981.457227][T16995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2666'. [ 982.115193][T16991] Invalid ELF header magic: != ELF [ 986.755817][T17042] input: jJǸ-9%vJ86 as /devices/virtual/input/input19 [ 988.702621][T17065] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 988.987687][T17070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2685'. [ 995.421785][T13918] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.764838][T13918] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.950194][T13918] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.183744][T13918] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.084871][T13918] bridge_slave_0: left allmulticast mode [ 997.121514][T13918] bridge_slave_0: left promiscuous mode [ 997.170349][T13918] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.205866][T13918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 999.295838][T13918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 999.377745][T13918] bond0 (unregistering): Released all slaves [ 999.551390][T17190] mkiss: ax0: crc mode is auto. [ 1000.644364][T17206] CIFS mount error: No usable UNC path provided in device string! [ 1000.644364][T17206] [ 1000.684892][T17206] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1003.453416][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1003.462440][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1004.535047][T13918] hsr_slave_0: left promiscuous mode [ 1004.571836][T13918] hsr_slave_1: left promiscuous mode [ 1004.628912][T13918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1004.672031][T13918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1004.836386][T13918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1004.969137][T13918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1005.215794][T13918] veth1_macvtap: left promiscuous mode [ 1005.294018][T13918] veth0_macvtap: left promiscuous mode [ 1005.344129][T13918] veth1_vlan: left promiscuous mode [ 1006.514895][T17289] netlink: 'syz.5.2729': attribute type 3 has an invalid length. [ 1006.548093][T17289] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1006.632420][T17292] netlink: 'syz.5.2729': attribute type 3 has an invalid length. [ 1007.977144][T13918] team0 (unregistering): Port device team_slave_1 removed [ 1008.078561][T13918] team0 (unregistering): Port device team_slave_0 removed [ 1009.538551][T17248] Process accounting resumed [ 1009.985245][T17320] usb usb16: usbfs: process 17320 (syz.2.2737) did not claim interface 0 before use [ 1013.115317][T11420] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1013.297016][T17377] usb usb16: usbfs: process 17377 (syz.5.2748) did not claim interface 0 before use [ 1014.747160][T17388] sd 0:0:1:0: PR command failed: 1026 [ 1014.814618][T11420] Bluetooth: hci5: ACL packet too small [ 1014.852481][T17388] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1014.895656][T17411] FAULT_INJECTION: forcing a failure. [ 1014.895656][T17411] name failslab, interval 1, probability 0, space 0, times 0 [ 1014.920185][T17388] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1015.026163][T17411] CPU: 1 UID: 0 PID: 17411 Comm: syz.3.2754 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1015.026206][T17411] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1015.026216][T17411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1015.026232][T17411] Call Trace: [ 1015.026240][T17411] [ 1015.026250][T17411] dump_stack_lvl+0x100/0x190 [ 1015.026290][T17411] should_fail_ex.cold+0x5/0xa [ 1015.026317][T17411] should_failslab+0xc2/0x120 [ 1015.026347][T17411] __kmalloc_node_track_caller_noprof+0xf9/0x9d0 [ 1015.026373][T17411] ? rcu_is_watching+0x12/0xc0 [ 1015.026405][T17411] ? key_alloc+0x423/0x1310 [ 1015.026436][T17411] ? kmemdup_noprof+0x29/0x60 [ 1015.026461][T17411] kmemdup_noprof+0x29/0x60 [ 1015.026487][T17411] key_alloc+0x423/0x1310 [ 1015.026520][T17411] ? trace_kmalloc+0x83/0xb0 [ 1015.026547][T17411] ? __kmalloc_noprof+0x365/0x9c0 [ 1015.026583][T17411] ? __pfx_key_alloc+0x10/0x10 [ 1015.026617][T17411] keyring_alloc+0x44/0xc0 [ 1015.026660][T17411] install_thread_keyring_to_cred+0xc1/0x140 [ 1015.026705][T17411] keyctl_set_reqkey_keyring+0xd3/0x1c0 [ 1015.026747][T17411] __do_sys_keyctl+0x316/0x5a0 [ 1015.026787][T17411] do_syscall_64+0x106/0xf80 [ 1015.026823][T17411] ? clear_bhb_loop+0x40/0x90 [ 1015.026853][T17411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.026877][T17411] RIP: 0033:0x7f959bf9bf79 [ 1015.026897][T17411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1015.026922][T17411] RSP: 002b:00007f959cdbc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1015.026946][T17411] RAX: ffffffffffffffda RBX: 00007f959c216180 RCX: 00007f959bf9bf79 [ 1015.026963][T17411] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000e [ 1015.026977][T17411] RBP: 00007f959c0327e0 R08: 0000000000000008 R09: 0000000000000000 [ 1015.026993][T17411] R10: 0000000000005eaf R11: 0000000000000246 R12: 0000000000000000 [ 1015.027008][T17411] R13: 00007f959c216218 R14: 00007f959c216180 R15: 00007fff20b82488 [ 1015.027039][T17411] [ 1016.614917][T17416] warning: `syz.0.2757' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1019.337821][T17455] Invalid ELF header magic: != ELF [ 1027.087010][T17567] input: jJǸ-9%vJ86 as /devices/virtual/input/input21 [ 1028.664866][T17547] sd 0:0:1:0: PR command failed: 1026 [ 1028.682658][T17547] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1028.689660][T17547] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1031.716614][T17606] NFSD: Failed to start, no listeners configured. [ 1039.522102][T17733] &#$@\]\-: entered promiscuous mode [ 1039.821864][T17733] Process accounting paused [ 1040.204501][T17741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2828'. [ 1041.357986][T11420] Bluetooth: hci3: command 0x0406 tx timeout [ 1041.587237][T17727] bond0: invalid ARP target specified [ 1042.083672][T17757] Invalid ELF header magic: != ELF [ 1043.161913][T17782] FAULT_INJECTION: forcing a failure. [ 1043.161913][T17782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1043.305794][T17782] CPU: 1 UID: 0 PID: 17782 Comm: syz.5.2837 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1043.305855][T17782] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1043.305871][T17782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1043.305892][T17782] Call Trace: [ 1043.305905][T17782] [ 1043.305923][T17782] dump_stack_lvl+0x100/0x190 [ 1043.305978][T17782] should_fail_ex.cold+0x5/0xa [ 1043.306017][T17782] _copy_from_user+0x2e/0xd0 [ 1043.306056][T17782] move_addr_to_kernel+0x65/0x170 [ 1043.306111][T17782] __sys_bind+0x11d/0x260 [ 1043.306165][T17782] ? __pfx___sys_bind+0x10/0x10 [ 1043.306244][T17782] __x64_sys_bind+0x72/0xb0 [ 1043.306295][T17782] ? lockdep_hardirqs_on+0x78/0x100 [ 1043.306347][T17782] do_syscall_64+0x106/0xf80 [ 1043.306399][T17782] ? clear_bhb_loop+0x40/0x90 [ 1043.306443][T17782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.306477][T17782] RIP: 0033:0x7fc86899bf79 [ 1043.306505][T17782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1043.306540][T17782] RSP: 002b:00007fc869808028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1043.306574][T17782] RAX: ffffffffffffffda RBX: 00007fc868c16090 RCX: 00007fc86899bf79 [ 1043.306597][T17782] RDX: 000000000000006a RSI: 0000200000000040 RDI: 0000000000000003 [ 1043.306618][T17782] RBP: 00007fc868a327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1043.306639][T17782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1043.306658][T17782] R13: 00007fc868c16128 R14: 00007fc868c16090 R15: 00007ffe3df358e8 [ 1043.306703][T17782] [ 1044.797941][T17797] futex_wake_op: syz.2.2842 tries to shift op by -2048; fix this program [ 1044.835287][T17797] futex_wake_op: syz.2.2842 tries to shift op by -2048; fix this program [ 1044.886535][T17797] 0x000000000001-0x000000020000 : "" [ 1044.962550][T17797] ftl_cs: FTL header corrupt! [ 1046.484129][T17818] input: jJǸ-9%vJ86 as /devices/virtual/input/input22 [ 1049.339845][T17828] FAULT_INJECTION: forcing a failure. [ 1049.339845][T17828] name failslab, interval 1, probability 0, space 0, times 0 [ 1049.521867][T17828] CPU: 1 UID: 0 PID: 17828 Comm: syz.2.2846 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1049.521928][T17828] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1049.521943][T17828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1049.521964][T17828] Call Trace: [ 1049.521976][T17828] [ 1049.521990][T17828] dump_stack_lvl+0x100/0x190 [ 1049.522045][T17828] should_fail_ex.cold+0x5/0xa [ 1049.522085][T17828] should_failslab+0xc2/0x120 [ 1049.522126][T17828] kmem_cache_alloc_noprof+0x83/0x780 [ 1049.522165][T17828] ? __kernfs_new_node+0xd2/0x960 [ 1049.522230][T17828] ? __kernfs_new_node+0xd2/0x960 [ 1049.522271][T17828] __kernfs_new_node+0xd2/0x960 [ 1049.522320][T17828] ? __pfx___kernfs_new_node+0x10/0x10 [ 1049.522374][T17828] ? find_held_lock+0x2b/0x80 [ 1049.522421][T17828] ? kernfs_root+0xee/0x2a0 [ 1049.522462][T17828] ? kernfs_root+0xee/0x2a0 [ 1049.522515][T17828] kernfs_new_node+0x11b/0x1a0 [ 1049.522572][T17828] __kernfs_create_file+0x53/0x350 [ 1049.522613][T17828] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1049.522666][T17828] sysfs_merge_group+0x194/0x340 [ 1049.522712][T17828] ? __pfx_sysfs_merge_group+0x10/0x10 [ 1049.522764][T17828] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1049.522799][T17828] ? bus_to_subsys+0x114/0x150 [ 1049.522845][T17828] dpm_sysfs_add+0x237/0x280 [ 1049.522880][T17828] device_add+0x9ef/0x1950 [ 1049.522918][T17828] ? __pfx_device_add+0x10/0x10 [ 1049.522952][T17828] ? lockdep_init_map_type+0x5c/0x250 [ 1049.522989][T17828] ? __init_waitqueue_head+0xca/0x150 [ 1049.523042][T17828] rfkill_register+0x1ad/0xb30 [ 1049.523093][T17828] nfc_register_device+0x11f/0x3e0 [ 1049.523152][T17828] nci_register_device+0x7f1/0xb80 [ 1049.523200][T17828] ? __pfx_nci_register_device+0x10/0x10 [ 1049.523258][T17828] ? lockdep_init_map_type+0x5c/0x250 [ 1049.523303][T17828] virtual_ncidev_open+0x141/0x220 [ 1049.523346][T17828] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1049.523387][T17828] misc_open+0x26d/0x450 [ 1049.523437][T17828] ? __pfx_misc_open+0x10/0x10 [ 1049.523488][T17828] chrdev_open+0x234/0x6a0 [ 1049.523524][T17828] ? __pfx_apparmor_file_open+0x10/0x10 [ 1049.523577][T17828] ? __pfx_chrdev_open+0x10/0x10 [ 1049.523620][T17828] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1049.523664][T17828] do_dentry_open+0x6d8/0x1660 [ 1049.523699][T17828] ? __pfx_chrdev_open+0x10/0x10 [ 1049.523745][T17828] vfs_open+0x82/0x3f0 [ 1049.523794][T17828] path_openat+0x208c/0x31a0 [ 1049.523845][T17828] ? __pfx_path_openat+0x10/0x10 [ 1049.523898][T17828] do_file_open+0x20e/0x430 [ 1049.523939][T17828] ? __pfx_do_file_open+0x10/0x10 [ 1049.524007][T17828] ? alloc_fd+0x476/0x790 [ 1049.524046][T17828] ? do_getname+0x191/0x390 [ 1049.524091][T17828] do_sys_openat2+0x10d/0x1e0 [ 1049.524136][T17828] ? __pfx_do_sys_openat2+0x10/0x10 [ 1049.524186][T17828] ? __fget_files+0x21f/0x3d0 [ 1049.524237][T17828] __x64_sys_openat+0x12d/0x210 [ 1049.524288][T17828] ? __pfx___x64_sys_openat+0x10/0x10 [ 1049.524334][T17828] ? xfd_validate_state+0x129/0x190 [ 1049.524392][T17828] do_syscall_64+0x106/0xf80 [ 1049.524443][T17828] ? clear_bhb_loop+0x40/0x90 [ 1049.524487][T17828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.524522][T17828] RIP: 0033:0x7f1db119bf79 [ 1049.524550][T17828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1049.524586][T17828] RSP: 002b:00007f1daf3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1049.524619][T17828] RAX: ffffffffffffffda RBX: 00007f1db1415fa0 RCX: 00007f1db119bf79 [ 1049.524643][T17828] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1049.524665][T17828] RBP: 00007f1db12327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1049.524685][T17828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1049.524706][T17828] R13: 00007f1db1416038 R14: 00007f1db1415fa0 R15: 00007ffec9196568 [ 1049.524753][T17828] [ 1051.095787][T17859] FAULT_INJECTION: forcing a failure. [ 1051.095787][T17859] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1051.146173][T17859] CPU: 1 UID: 0 PID: 17859 Comm: syz.3.2856 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1051.146230][T17859] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1051.146244][T17859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1051.146264][T17859] Call Trace: [ 1051.146276][T17859] [ 1051.146289][T17859] dump_stack_lvl+0x100/0x190 [ 1051.146340][T17859] should_fail_ex.cold+0x5/0xa [ 1051.146377][T17859] get_futex_key+0x1d2/0x1620 [ 1051.146432][T17859] ? __pfx_get_futex_key+0x10/0x10 [ 1051.146496][T17859] futex_wait_setup+0x81/0x500 [ 1051.146546][T17859] __futex_wait+0x19f/0x300 [ 1051.146588][T17859] ? __pfx___futex_wait+0x10/0x10 [ 1051.146633][T17859] ? __pfx_futex_wake_mark+0x10/0x10 [ 1051.146677][T17859] ? __hrtimer_setup+0x178/0x280 [ 1051.146713][T17859] ? ktime_add_safe+0x60/0x70 [ 1051.146751][T17859] futex_wait+0xed/0x380 [ 1051.146789][T17859] ? __pfx_futex_wait+0x10/0x10 [ 1051.146824][T17859] ? __lock_acquire+0x4a5/0x2630 [ 1051.146858][T17859] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1051.146906][T17859] do_futex+0x1ef/0x350 [ 1051.146938][T17859] ? __pfx_do_futex+0x10/0x10 [ 1051.146964][T17859] ? rcu_is_watching+0x12/0xc0 [ 1051.147011][T17859] ? ktime_get+0x200/0x300 [ 1051.147055][T17859] ? lockdep_hardirqs_on+0x78/0x100 [ 1051.147104][T17859] ? read_tsc+0x9/0x20 [ 1051.147139][T17859] __x64_sys_futex+0x34f/0x4d0 [ 1051.147176][T17859] ? __pfx___x64_sys_futex+0x10/0x10 [ 1051.147206][T17859] ? xfd_validate_state+0x129/0x190 [ 1051.147261][T17859] do_syscall_64+0x106/0xf80 [ 1051.147309][T17859] ? clear_bhb_loop+0x40/0x90 [ 1051.147349][T17859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1051.147382][T17859] RIP: 0033:0x7f959bf9bf79 [ 1051.147408][T17859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1051.147440][T17859] RSP: 002b:00007fff20b825e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1051.147472][T17859] RAX: ffffffffffffffda RBX: 00000000001009ab RCX: 00007f959bf9bf79 [ 1051.147495][T17859] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f959c215fac [ 1051.147516][T17859] RBP: 0000000000000032 R08: 0000000000000000 R09: 0000000000000000 [ 1051.147536][T17859] R10: 00007fff20b826f0 R11: 0000000000000246 R12: 00007fff20b82710 [ 1051.147558][T17859] R13: 00007f959c215fac R14: 00000000001009dd R15: 00007fff20b826f0 [ 1051.147601][T17859] [ 1052.320705][T17880] FAULT_INJECTION: forcing a failure. [ 1052.320705][T17880] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1052.388611][T17880] CPU: 1 UID: 0 PID: 17880 Comm: syz.0.2862 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1052.388669][T17880] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1052.388684][T17880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1052.388705][T17880] Call Trace: [ 1052.388717][T17880] [ 1052.388731][T17880] dump_stack_lvl+0x100/0x190 [ 1052.388786][T17880] should_fail_ex.cold+0x5/0xa [ 1052.388819][T17880] ? prepare_alloc_pages+0x16d/0x5f0 [ 1052.388881][T17880] should_fail_alloc_page+0xeb/0x140 [ 1052.388927][T17880] prepare_alloc_pages+0x1f0/0x5f0 [ 1052.388982][T17880] __alloc_frozen_pages_noprof+0x193/0x2410 [ 1052.389041][T17880] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1052.389092][T17880] ? stack_depot_save_flags+0x479/0x9d0 [ 1052.389141][T17880] ? kasan_save_stack+0x3f/0x50 [ 1052.389175][T17880] ? kasan_save_stack+0x30/0x50 [ 1052.389209][T17880] ? kasan_save_track+0x14/0x30 [ 1052.389242][T17880] ? __kasan_slab_alloc+0x89/0x90 [ 1052.389278][T17880] ? kmem_cache_alloc_noprof+0x2ad/0x780 [ 1052.389315][T17880] ? __pmd_alloc+0xbf/0x9c0 [ 1052.389359][T17880] ? __handle_mm_fault+0xa99/0x2b50 [ 1052.389410][T17880] ? handle_mm_fault+0x36d/0xa20 [ 1052.389464][T17880] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1052.389522][T17880] ? do_mlock+0x3f0/0x7f0 [ 1052.389551][T17880] ? do_syscall_64+0x106/0xf80 [ 1052.389628][T17880] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1052.389678][T17880] ? policy_nodemask+0xed/0x4f0 [ 1052.389724][T17880] alloc_pages_mpol+0x1fb/0x550 [ 1052.389768][T17880] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1052.389823][T17880] alloc_pages_noprof+0x131/0x390 [ 1052.389867][T17880] pte_alloc_one+0x1e/0x3e0 [ 1052.389934][T17880] do_fault+0x8cc/0x1990 [ 1052.389980][T17880] ? __pmd_alloc+0x6aa/0x9c0 [ 1052.390030][T17880] __handle_mm_fault+0x1807/0x2b50 [ 1052.390097][T17880] ? mt_find+0x45e/0x8e0 [ 1052.390138][T17880] ? __pfx___handle_mm_fault+0x10/0x10 [ 1052.390190][T17880] ? __pfx_mt_find+0x10/0x10 [ 1052.390256][T17880] handle_mm_fault+0x36d/0xa20 [ 1052.390319][T17880] __get_user_pages+0xf9c/0x34d0 [ 1052.390383][T17880] ? __pfx___get_user_pages+0x10/0x10 [ 1052.390441][T17880] populate_vma_page_range+0x267/0x3f0 [ 1052.390493][T17880] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1052.390542][T17880] ? __pfx_find_vma_intersection+0x10/0x10 [ 1052.390588][T17880] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 1052.390654][T17880] __mm_populate+0x107/0x3a0 [ 1052.390705][T17880] ? __pfx___mm_populate+0x10/0x10 [ 1052.390756][T17880] ? up_write+0x290/0x4f0 [ 1052.390802][T17880] do_mlock+0x3f0/0x7f0 [ 1052.390841][T17880] ? __pfx_do_mlock+0x10/0x10 [ 1052.390878][T17880] ? __x64_sys_futex+0x34f/0x4d0 [ 1052.390912][T17880] ? __x64_sys_futex+0x358/0x4d0 [ 1052.390948][T17880] ? fput+0x79/0x100 [ 1052.390991][T17880] ? xfd_validate_state+0x129/0x190 [ 1052.391047][T17880] __x64_sys_mlock+0x59/0x80 [ 1052.391082][T17880] do_syscall_64+0x106/0xf80 [ 1052.391136][T17880] ? clear_bhb_loop+0x40/0x90 [ 1052.391180][T17880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.391217][T17880] RIP: 0033:0x7fd51ef9bf79 [ 1052.391245][T17880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1052.391280][T17880] RSP: 002b:00007fd51fed2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1052.391314][T17880] RAX: ffffffffffffffda RBX: 00007fd51f215fa0 RCX: 00007fd51ef9bf79 [ 1052.391344][T17880] RDX: 0000000000000000 RSI: 0000000000080006 RDI: 0000000000000112 [ 1052.391365][T17880] RBP: 00007fd51f0327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1052.391386][T17880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1052.391406][T17880] R13: 00007fd51f216038 R14: 00007fd51f215fa0 R15: 00007fff78ffeda8 [ 1052.391450][T17880] [ 1052.815260][T17884] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xfffffd1f [ 1052.833499][T17886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2863'. [ 1053.272927][T17886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1055.992629][T17916] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1056.060977][T17916] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1056.175037][T17916] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1056.191040][T17916] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1056.270079][T17916] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1056.716850][T17916] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1056.854804][T17916] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1056.924753][T17916] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1057.301120][T17916] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1057.574161][T17934] Process accounting resumed [ 1057.676171][T11420] Bluetooth: hci2: command 0x0c1a tx timeout [ 1058.077724][T11420] Bluetooth: hci5: command 0x0c1a tx timeout [ 1058.238070][T11420] Bluetooth: hci3: command 0x0406 tx timeout [ 1058.245438][T11420] Bluetooth: hci0: command 0x0c1a tx timeout [ 1058.798496][T11420] Bluetooth: hci1: command 0x0c1a tx timeout [ 1059.236065][T17966] FAULT_INJECTION: forcing a failure. [ 1059.236065][T17966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1059.297056][T17966] CPU: 1 UID: 0 PID: 17966 Comm: syz.2.2882 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1059.297112][T17966] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1059.297124][T17966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1059.297142][T17966] Call Trace: [ 1059.297153][T17966] [ 1059.297166][T17966] dump_stack_lvl+0x100/0x190 [ 1059.297224][T17966] should_fail_ex.cold+0x5/0xa [ 1059.297259][T17966] _copy_to_user+0x32/0xd0 [ 1059.297295][T17966] simple_read_from_buffer+0xcb/0x170 [ 1059.297345][T17966] proc_fail_nth_read+0x1af/0x230 [ 1059.297370][T17960] Invalid ELF header magic: != ELF [ 1059.297380][T17966] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1059.297418][T17966] ? rw_verify_area+0xce/0x6d0 [ 1059.297580][T17966] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1059.297675][T17966] vfs_read+0x1e4/0xb30 [ 1059.297770][T17966] ? __pfx_vfs_read+0x10/0x10 [ 1059.297853][T17966] ? __fget_files+0x215/0x3d0 [ 1059.297952][T17966] ? __fget_files+0x21f/0x3d0 [ 1059.298080][T17966] ksys_read+0x12a/0x250 [ 1059.298144][T17966] ? __pfx_ksys_read+0x10/0x10 [ 1059.298280][T17966] do_syscall_64+0x106/0xf80 [ 1059.298408][T17966] ? clear_bhb_loop+0x40/0x90 [ 1059.298520][T17966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.298606][T17966] RIP: 0033:0x7f1db115c84e [ 1059.298671][T17966] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1059.298754][T17966] RSP: 002b:00007f1daf3f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1059.298830][T17966] RAX: ffffffffffffffda RBX: 00007f1daf3f66c0 RCX: 00007f1db115c84e [ 1059.298893][T17966] RDX: 000000000000000f RSI: 00007f1daf3f60a0 RDI: 0000000000000004 [ 1059.298962][T17966] RBP: 00007f1daf3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1059.299030][T17966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1059.299084][T17966] R13: 00007f1db1416038 R14: 00007f1db1415fa0 R15: 00007ffec9196568 [ 1059.299211][T17966] [ 1059.598622][T17961] random: crng reseeded on system resumption [ 1060.405227][T11420] Bluetooth: hci3: command 0x0406 tx timeout [ 1060.665671][T17977] ======================================================= [ 1060.665671][T17977] WARNING: The mand mount option has been deprecated and [ 1060.665671][T17977] and is ignored by this kernel. Remove the mand [ 1060.665671][T17977] option from the mount to silence this warning. [ 1060.665671][T17977] ======================================================= [ 1060.880802][T11420] Bluetooth: hci1: command 0x0c1a tx timeout [ 1061.123354][T17979] bond0: invalid ARP target specified [ 1062.485915][T11420] Bluetooth: hci3: command 0x0406 tx timeout [ 1062.954766][T11420] Bluetooth: hci1: command 0x0c1a tx timeout [ 1063.556468][T18019] FAULT_INJECTION: forcing a failure. [ 1063.556468][T18019] name failslab, interval 1, probability 0, space 0, times 0 [ 1063.569191][T18019] CPU: 0 UID: 0 PID: 18019 Comm: syz.5.2894 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1063.569233][T18019] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1063.569243][T18019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1063.569260][T18019] Call Trace: [ 1063.569269][T18019] [ 1063.569279][T18019] dump_stack_lvl+0x100/0x190 [ 1063.569318][T18019] should_fail_ex.cold+0x5/0xa [ 1063.569345][T18019] should_failslab+0xc2/0x120 [ 1063.569375][T18019] __kmalloc_cache_noprof+0x80/0x810 [ 1063.569414][T18019] ? alloc_super+0x52/0xd20 [ 1063.569456][T18019] ? alloc_super+0x52/0xd20 [ 1063.569491][T18019] ? sget_fc+0xb2/0xc70 [ 1063.569526][T18019] alloc_super+0x52/0xd20 [ 1063.569567][T18019] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1063.569601][T18019] sget_fc+0x117/0xc70 [ 1063.569638][T18019] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1063.569676][T18019] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1063.569710][T18019] get_tree_nodev+0x28/0x190 [ 1063.569733][T18019] mqueue_get_tree+0xf1/0x130 [ 1063.569767][T18019] vfs_get_tree+0x92/0x320 [ 1063.569808][T18019] fc_mount_longterm+0x1a/0x270 [ 1063.569852][T18019] mq_init_ns+0x482/0x820 [ 1063.569892][T18019] copy_ipcs+0x3dd/0x7e0 [ 1063.569916][T18019] create_new_namespaces+0x20a/0xac0 [ 1063.569952][T18019] ? security_capable+0x80/0x260 [ 1063.569991][T18019] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1063.570038][T18019] ksys_unshare+0x455/0xab0 [ 1063.570066][T18019] ? __pfx_ksys_unshare+0x10/0x10 [ 1063.570092][T18019] ? xfd_validate_state+0x129/0x190 [ 1063.570130][T18019] __x64_sys_unshare+0x31/0x40 [ 1063.570155][T18019] do_syscall_64+0x106/0xf80 [ 1063.570192][T18019] ? clear_bhb_loop+0x40/0x90 [ 1063.570221][T18019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.570247][T18019] RIP: 0033:0x7fc86899bf79 [ 1063.570266][T18019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1063.570291][T18019] RSP: 002b:00007fc869808028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1063.570316][T18019] RAX: ffffffffffffffda RBX: 00007fc868c16090 RCX: 00007fc86899bf79 [ 1063.570332][T18019] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 1063.570348][T18019] RBP: 00007fc868a327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1063.570363][T18019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1063.570378][T18019] R13: 00007fc868c16128 R14: 00007fc868c16090 R15: 00007ffe3df358e8 [ 1063.570409][T18019] [ 1064.881824][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1064.918940][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1066.456542][T18018] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1066.462716][T18018] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1066.475105][T11420] Bluetooth: hci2: command 0x0c1a tx timeout [ 1066.490948][T18018] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1066.505091][T18018] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1066.544969][T18018] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1066.555281][T18018] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1066.950046][T18031] Invalid ELF header magic: != ELF [ 1067.608436][T18043] input: jJǸ-9%vJ86 as /devices/virtual/input/input23 [ 1068.478421][T11420] Bluetooth: hci5: command 0x0c1a tx timeout [ 1068.564829][T11420] Bluetooth: hci3: command 0x0406 tx timeout [ 1068.574841][ T6161] Bluetooth: hci0: command 0x0c1a tx timeout [ 1068.635437][T11420] Bluetooth: hci1: command 0x0c1a tx timeout [ 1070.273915][T18067] Process accounting resumed [ 1070.654892][T11420] Bluetooth: hci3: command 0x0406 tx timeout [ 1073.198049][T18105] zswap: compressor not available [ 1075.730367][ T30] audit: type=1800 audit(4294968165.560:15): pid=18144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2925" name="dbroot" dev="configfs" ino=102729 res=0 errno=0 [ 1075.818238][T18141] Invalid ELF header magic: != ELF [ 1077.647716][T18170] blktrace: Concurrent blktraces are not allowed on loop2 [ 1077.855403][T18172] netlink: 'syz.2.2931': attribute type 21 has an invalid length. [ 1077.884903][T18172] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2931'. [ 1077.949936][T18172] netlink: 'syz.2.2931': attribute type 21 has an invalid length. [ 1077.958658][T18172] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2931'. [ 1079.238196][T18150] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1079.266654][T18150] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1079.342288][T18150] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1079.390494][T18150] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1079.478899][T18150] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1079.565530][T18150] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1080.973412][T11420] Bluetooth: hci2: command 0x0c1a tx timeout [ 1081.280131][T11420] Bluetooth: hci5: command 0x0c1a tx timeout [ 1081.359203][T11420] Bluetooth: hci0: command 0x0c1a tx timeout [ 1081.435166][T11420] Bluetooth: hci3: command 0x0406 tx timeout [ 1081.607481][T11420] Bluetooth: hci1: command 0x0c1a tx timeout [ 1083.377142][T18240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2946'. [ 1083.472720][T18246] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2946'. [ 1083.515111][T11420] Bluetooth: hci3: command 0x0406 tx timeout [ 1083.991539][T18250] blktrace: Concurrent blktraces are not allowed on loop2 [ 1086.647595][T18260] bond0: invalid ARP target specified [ 1087.630396][T18281] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2954'. [ 1087.755811][T18094] Process accounting paused [ 1089.142938][T18299] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2961'. [ 1095.471684][T11420] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1098.505686][T18390] usb usb3: usbfs: process 18390 (syz.2.2981) did not claim interface 0 before use [ 1099.518660][T18405] FAULT_INJECTION: forcing a failure. [ 1099.518660][T18405] name failslab, interval 1, probability 0, space 0, times 0 [ 1099.518721][T18405] CPU: 0 UID: 0 PID: 18405 Comm: syz.2.2986 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1099.518775][T18405] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1099.518791][T18405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1099.518812][T18405] Call Trace: [ 1099.518825][T18405] [ 1099.518839][T18405] dump_stack_lvl+0x100/0x190 [ 1099.518895][T18405] should_fail_ex.cold+0x5/0xa [ 1099.518936][T18405] should_failslab+0xc2/0x120 [ 1099.518977][T18405] kmem_cache_alloc_noprof+0x83/0x780 [ 1099.519018][T18405] ? security_file_alloc+0x34/0x2c0 [ 1099.519065][T18405] ? security_file_alloc+0x34/0x2c0 [ 1099.519102][T18405] security_file_alloc+0x34/0x2c0 [ 1099.519143][T18405] init_file+0x95/0x480 [ 1099.519187][T18405] alloc_empty_file+0x73/0x1c0 [ 1099.519246][T18405] alloc_file_pseudo+0x13a/0x230 [ 1099.519294][T18405] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1099.519340][T18405] ? inode_init_always_gfp+0xd0e/0x1040 [ 1099.519388][T18405] sock_alloc_file+0x50/0x210 [ 1099.519433][T18405] do_accept+0x242/0x530 [ 1099.519489][T18405] ? 0xffffffff81000000 [ 1099.519514][T18405] ? do_raw_spin_lock+0x128/0x260 [ 1099.519557][T18405] ? __pfx_do_accept+0x10/0x10 [ 1099.519638][T18405] ? 0xffffffff81000000 [ 1099.519663][T18405] __sys_accept4+0x108/0x200 [ 1099.519696][T18405] ? __pfx___sys_accept4+0x10/0x10 [ 1099.519727][T18405] ? xfd_validate_state+0x129/0x190 [ 1099.519779][T18405] __x64_sys_accept+0x74/0xb0 [ 1099.519810][T18405] ? lockdep_hardirqs_on+0x78/0x100 [ 1099.519864][T18405] do_syscall_64+0x106/0xf80 [ 1099.519915][T18405] ? clear_bhb_loop+0x40/0x90 [ 1099.519957][T18405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1099.519992][T18405] RIP: 0033:0x7f1db119bf79 [ 1099.520019][T18405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1099.520055][T18405] RSP: 002b:00007f1daf3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 1099.520089][T18405] RAX: ffffffffffffffda RBX: 00007f1db1415fa0 RCX: 00007f1db119bf79 [ 1099.520113][T18405] RDX: ffffffff81000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 1099.520136][T18405] RBP: 00007f1db12327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1099.520158][T18405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1099.520179][T18405] R13: 00007f1db1416038 R14: 00007f1db1415fa0 R15: 00007ffec9196568 [ 1099.520222][T18405] ? 0xffffffff81000000 [ 1099.520256][T18405] [ 1100.979713][T18419] vivid-007: ================= START STATUS ================= [ 1100.979746][T18419] vivid-007: Generate PTS: true [ 1100.979800][T18419] vivid-007: Generate SCR: true [ 1100.979851][T18419] tpg source WxH: 320x240 (Y'CbCr) [ 1100.979874][T18419] tpg field: 1 [ 1100.979888][T18419] tpg crop: (0,0)/320x240 [ 1100.979912][T18419] tpg compose: (0,0)/320x240 [ 1100.979935][T18419] tpg colorspace: 8 [ 1100.979950][T18419] tpg transfer function: 0/0 [ 1100.979968][T18419] tpg Y'CbCr encoding: 0/0 [ 1100.979986][T18419] tpg quantization: 0/0 [ 1100.980003][T18419] tpg RGB range: 0/2 [ 1100.980020][T18419] vivid-007: ================== END STATUS ================== [ 1101.489048][T18377] Process accounting paused [ 1111.440199][T18517] random: crng reseeded on system resumption [ 1112.663181][T18531] zswap: compressor not available [ 1115.568325][T18561] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1115.648782][T18561] random: crng reseeded on system resumption [ 1117.493244][T18587] zswap: compressor not available [ 1117.730739][T18573] Invalid ELF header magic: != ELF [ 1118.198299][T18596] futex_wake_op: syz.2.3034 tries to shift op by -2048; fix this program [ 1118.231546][T18596] futex_wake_op: syz.2.3034 tries to shift op by -2048; fix this program [ 1118.243433][T18596] 0x000000000001-0x000000020000 : "" [ 1118.705127][T18596] ftl_cs: FTL header corrupt! [ 1120.081100][T18571] Process accounting resumed [ 1120.403945][T18614] netlink: 342 bytes leftover after parsing attributes in process `syz.5.3031'. [ 1121.442928][T18631] ptrace attach of "./syz-executor exec"[16371] was attempted by "./syz-executor exec"[18631] [ 1121.550626][T18637] ptrace attach of "./syz-executor exec"[16371] was attempted by "./syz-executor exec"[18637] [ 1121.824812][T18642] ksmbd: Unknown IPC event: 14, ignore. [ 1122.657822][T18654] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1124.515643][T18686] FAULT_INJECTION: forcing a failure. [ 1124.515643][T18686] name failslab, interval 1, probability 0, space 0, times 0 [ 1124.528497][T18686] CPU: 0 UID: 0 PID: 18686 Comm: syz.0.3048 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1124.528551][T18686] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1124.528565][T18686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1124.528584][T18686] Call Trace: [ 1124.528596][T18686] [ 1124.528609][T18686] dump_stack_lvl+0x100/0x190 [ 1124.528661][T18686] should_fail_ex.cold+0x5/0xa [ 1124.528698][T18686] should_failslab+0xc2/0x120 [ 1124.528737][T18686] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1124.528779][T18686] __kmalloc_noprof+0xf6/0x9c0 [ 1124.528828][T18686] ? kfree+0x2a9/0x690 [ 1124.528884][T18686] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1124.528926][T18686] tomoyo_realpath_from_path+0xb6/0x690 [ 1124.528978][T18686] tomoyo_check_open_permission+0x2af/0x3c0 [ 1124.529022][T18686] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1124.529099][T18686] ? do_raw_spin_lock+0x128/0x260 [ 1124.529143][T18686] ? path_get+0x61/0x80 [ 1124.529186][T18686] tomoyo_file_open+0x6b/0x90 [ 1124.529235][T18686] security_file_open+0xb5/0x1e0 [ 1124.529274][T18686] do_dentry_open+0x5aa/0x1660 [ 1124.529313][T18686] ? security_inode_permission+0xbf/0x250 [ 1124.529355][T18686] vfs_open+0x82/0x3f0 [ 1124.529405][T18686] path_openat+0x208c/0x31a0 [ 1124.529455][T18686] ? __pfx_path_openat+0x10/0x10 [ 1124.529507][T18686] do_file_open+0x20e/0x430 [ 1124.529545][T18686] ? __pfx_do_file_open+0x10/0x10 [ 1124.529612][T18686] ? alloc_fd+0x476/0x790 [ 1124.529649][T18686] ? do_getname+0x191/0x390 [ 1124.529696][T18686] do_sys_openat2+0x10d/0x1e0 [ 1124.529742][T18686] ? __pfx_do_sys_openat2+0x10/0x10 [ 1124.529784][T18686] ? rcu_is_watching+0x12/0xc0 [ 1124.529832][T18686] __x64_sys_openat+0x12d/0x210 [ 1124.529880][T18686] ? __pfx___x64_sys_openat+0x10/0x10 [ 1124.529925][T18686] ? xfd_validate_state+0x129/0x190 [ 1124.529981][T18686] do_syscall_64+0x106/0xf80 [ 1124.530050][T18686] ? clear_bhb_loop+0x40/0x90 [ 1124.530092][T18686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.530126][T18686] RIP: 0033:0x7fd51ef9bf79 [ 1124.530152][T18686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1124.530185][T18686] RSP: 002b:00007fd51fe90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1124.530217][T18686] RAX: ffffffffffffffda RBX: 00007fd51f216180 RCX: 00007fd51ef9bf79 [ 1124.530240][T18686] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1124.530261][T18686] RBP: 00007fd51f0327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1124.530282][T18686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1124.530302][T18686] R13: 00007fd51f216218 R14: 00007fd51f216180 R15: 00007fff78ffeda8 [ 1124.530347][T18686] [ 1124.530362][T18686] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1125.169807][ T30] audit: type=1326 audit(4294968215.020:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18691 comm="syz.2.3050" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1db119bf79 code=0x0 [ 1126.320110][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1126.334811][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1126.831015][T18718] input: jJǸ-9%vJ86 as /devices/virtual/input/input25 [ 1128.756481][T18712] kexec: Could not allocate control_code_buffer [ 1128.856718][T18740] nfs: Unknown parameter 'm?LH>｢^eko}* ' [ 1132.887054][T18779] Process accounting resumed [ 1133.093386][T18805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3078'. [ 1136.273723][T18843] syz.3.3087: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1136.357862][T18843] CPU: 0 UID: 0 PID: 18843 Comm: syz.3.3087 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1136.357914][T18843] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1136.357924][T18843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1136.357939][T18843] Call Trace: [ 1136.357948][T18843] [ 1136.357958][T18843] dump_stack_lvl+0x100/0x190 [ 1136.357996][T18843] warn_alloc.cold+0x95/0x1c1 [ 1136.358038][T18843] ? __pfx_warn_alloc+0x10/0x10 [ 1136.358079][T18843] ? __lock_acquire+0x4a5/0x2630 [ 1136.358118][T18843] __vmalloc_node_range_noprof+0x1252/0x1530 [ 1136.358154][T18843] ? __pfx___might_resched+0x10/0x10 [ 1136.358184][T18843] ? rcu_is_watching+0x12/0xc0 [ 1136.358213][T18843] ? trace_contention_end+0xd6/0x110 [ 1136.358240][T18843] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 1136.358265][T18843] ? kfree+0x1c7/0x690 [ 1136.358297][T18843] ? dvb_dvr_do_ioctl+0x7e/0x270 [ 1136.358319][T18843] ? tomoyo_path_number_perm+0x28f/0x580 [ 1136.358343][T18843] ? tomoyo_path_number_perm+0x28f/0x580 [ 1136.358369][T18843] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1136.358403][T18843] ? __pfx___mutex_lock+0x10/0x10 [ 1136.358447][T18843] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1136.358470][T18843] ? futex_wake+0x1ad/0x530 [ 1136.358501][T18843] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 1136.358524][T18843] __vmalloc_node_noprof+0xad/0xf0 [ 1136.358558][T18843] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 1136.358584][T18843] dvb_dvr_do_ioctl+0x15d/0x270 [ 1136.358612][T18843] dvb_usercopy+0x167/0x340 [ 1136.358633][T18843] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 1136.358658][T18843] ? __pfx_dvb_usercopy+0x10/0x10 [ 1136.358699][T18843] ? __fget_files+0x21f/0x3d0 [ 1136.358729][T18843] dvb_dvr_ioctl+0x29/0x40 [ 1136.358751][T18843] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 1136.358775][T18843] __x64_sys_ioctl+0x18e/0x210 [ 1136.358814][T18843] do_syscall_64+0x106/0xf80 [ 1136.358850][T18843] ? clear_bhb_loop+0x40/0x90 [ 1136.358880][T18843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1136.358905][T18843] RIP: 0033:0x7f959bf9bf79 [ 1136.358925][T18843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1136.358950][T18843] RSP: 002b:00007f959cdfe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1136.358974][T18843] RAX: ffffffffffffffda RBX: 00007f959c215fa0 RCX: 00007f959bf9bf79 [ 1136.358991][T18843] RDX: ffffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000004 [ 1136.359008][T18843] RBP: 00007f959c0327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1136.359023][T18843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1136.359038][T18843] R13: 00007f959c216038 R14: 00007f959c215fa0 R15: 00007fff20b82488 [ 1136.359071][T18843] [ 1136.359080][T18843] Mem-Info: [ 1136.667480][T18843] active_anon:51053 inactive_anon:8 isolated_anon:0 [ 1136.667480][T18843] active_file:12890 inactive_file:47503 isolated_file:0 [ 1136.667480][T18843] unevictable:768 dirty:336 writeback:0 [ 1136.667480][T18843] slab_reclaimable:12314 slab_unreclaimable:99587 [ 1136.667480][T18843] mapped:48530 shmem:38757 pagetables:1343 [ 1136.667480][T18843] sec_pagetables:0 bounce:0 [ 1136.667480][T18843] kernel_misc_reclaimable:0 [ 1136.667480][T18843] free:1251405 free_pcp:13833 free_cma:0 [ 1136.739943][T18845] FAULT_INJECTION: forcing a failure. [ 1136.739943][T18845] name failslab, interval 1, probability 0, space 0, times 0 [ 1136.769493][T18845] CPU: 0 UID: 0 PID: 18845 Comm: syz.2.3086 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1136.769561][T18845] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1136.769575][T18845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1136.769596][T18845] Call Trace: [ 1136.769609][T18845] [ 1136.769623][T18845] dump_stack_lvl+0x100/0x190 [ 1136.769673][T18845] should_fail_ex.cold+0x5/0xa [ 1136.769710][T18845] should_failslab+0xc2/0x120 [ 1136.769753][T18845] kmem_cache_alloc_noprof+0x83/0x780 [ 1136.769792][T18845] ? do_epoll_ctl+0xc6c/0x36a0 [ 1136.769838][T18845] ? do_epoll_ctl+0xc6c/0x36a0 [ 1136.769874][T18845] do_epoll_ctl+0xc6c/0x36a0 [ 1136.769911][T18845] ? io_uring_setup+0xd7/0x160 [ 1136.769953][T18845] ? ksys_write+0x190/0x250 [ 1136.769999][T18845] ? __pfx_do_epoll_ctl+0x10/0x10 [ 1136.770036][T18845] ? find_held_lock+0x2b/0x80 [ 1136.770080][T18845] ? __might_fault+0xc5/0x140 [ 1136.770144][T18845] ? __might_fault+0xc5/0x140 [ 1136.770215][T18845] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 1136.770251][T18845] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 1136.770290][T18845] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 1136.770342][T18845] do_syscall_64+0x106/0xf80 [ 1136.770394][T18845] ? clear_bhb_loop+0x40/0x90 [ 1136.770437][T18845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1136.770473][T18845] RIP: 0033:0x7f1db119bf79 [ 1136.770501][T18845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1136.770564][T18845] RSP: 002b:00007f1daf3f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1136.770599][T18845] RAX: ffffffffffffffda RBX: 00007f1db1415fa0 RCX: 00007f1db119bf79 [ 1136.770623][T18845] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 1136.770643][T18845] RBP: 00007f1db12327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1136.770665][T18845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1136.770687][T18845] R13: 00007f1db1416038 R14: 00007f1db1415fa0 R15: 00007ffec9196568 [ 1136.770739][T18845] [ 1136.815894][T18843] Node 0 active_anon:204412kB inactive_anon:32kB active_file:51560kB inactive_file:189876kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:194920kB dirty:1440kB writeback:0kB shmem:153592kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11872kB pagetables:5244kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1137.015913][T18843] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1137.046819][T18843] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1137.149393][T18843] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 1137.191255][T18843] Node 0 DMA32 free:1073488kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB free_highatomic:0KB active_anon:202620kB inactive_anon:32kB active_file:51560kB inactive_file:189876kB unevictable:1536kB writepending:1520kB zspages:0kB present:3129332kB managed:2537264kB mlocked:0kB bounce:0kB free_pcp:56088kB local_pcp:18192kB free_cma:0kB [ 1137.283895][T18843] lowmem_reserve[]: 0 0 1 1 1 [ 1137.309125][T18843] Node 0 Normal free:12kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1137.411238][T18843] lowmem_reserve[]: 0 0 0 0 0 [ 1137.431977][T18843] Node 1 Normal free:3916072kB boost:0kB min:55584kB low:69480kB high:83376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:756kB local_pcp:756kB free_cma:0kB [ 1137.531467][T18843] lowmem_reserve[]: 0 0 0 0 0 [ 1137.536874][T18843] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1137.564728][T18843] Node 0 DMA32: 194*4kB (UE) 3571*8kB (UME) 4397*16kB (UME) 1589*32kB (UME) 974*64kB (UME) 778*128kB (UME) 353*256kB (UM) 193*512kB (UM) 74*1024kB (UME) 22*2048kB (UM) 109*4096kB (UM) = 1068944kB [ 1137.639701][T18843] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1137.664763][T18843] Node 1 Normal: 62*4kB (UE) 60*8kB (UE) 39*16kB (UE) 207*32kB (UE) 92*64kB (UE) 28*128kB (UE) 11*256kB (UM) 11*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 948*4096kB (M) = 3916072kB [ 1137.724405][T18843] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1137.759055][T18843] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1137.798453][T18843] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1137.848809][T18843] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1137.872782][T18843] 97104 total pagecache pages [ 1137.895448][T18843] 2 pages in swap cache [ 1137.908484][T18843] Free swap = 124988kB [ 1137.925372][T18843] Total swap = 124996kB [ 1137.942773][T18843] 2097051 pages RAM [ 1137.961707][T18843] 0 pages HighMem/MovableOnly [ 1137.978774][T18843] 430837 pages reserved [ 1138.014799][T18843] 0 pages cma reserved [ 1139.107641][ T30] audit: type=1326 audit(4294968228.960:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18878 comm="syz.3.3095" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f959bf9bf79 code=0x0 [ 1139.449161][ T30] audit: type=1800 audit(4294968229.300:18): pid=18886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3097" name="trace_pipe" dev="tracefs" ino=185 res=0 errno=0 [ 1140.672162][T18905] FAULT_INJECTION: forcing a failure. [ 1140.672162][T18905] name failslab, interval 1, probability 0, space 0, times 0 [ 1140.727751][T18905] CPU: 1 UID: 0 PID: 18905 Comm: syz.2.3104 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1140.727808][T18905] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1140.727822][T18905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1140.727842][T18905] Call Trace: [ 1140.727854][T18905] [ 1140.727867][T18905] dump_stack_lvl+0x100/0x190 [ 1140.727919][T18905] should_fail_ex.cold+0x5/0xa [ 1140.727956][T18905] should_failslab+0xc2/0x120 [ 1140.727996][T18905] kmem_cache_alloc_noprof+0x83/0x780 [ 1140.728032][T18905] ? ext4_init_io_end+0x24/0x170 [ 1140.728091][T18905] ? ext4_init_io_end+0x24/0x170 [ 1140.728228][T18905] ext4_init_io_end+0x24/0x170 [ 1140.728347][T18905] ext4_do_writepages+0x9dd/0x3df0 [ 1140.728412][T18905] ? is_bpf_text_address+0x8a/0x1a0 [ 1140.728458][T18905] ? __pfx_ext4_do_writepages+0x10/0x10 [ 1140.728522][T18905] ? ext4_writepages+0x347/0x790 [ 1140.728559][T18905] ext4_writepages+0x347/0x790 [ 1140.728601][T18905] ? __pfx_ext4_writepages+0x10/0x10 [ 1140.728653][T18905] ? __pfx__kstrtoull+0x10/0x10 [ 1140.728702][T18905] ? __pfx_ext4_writepages+0x10/0x10 [ 1140.728744][T18905] do_writepages+0x278/0x600 [ 1140.728795][T18905] ? __pfx_do_writepages+0x10/0x10 [ 1140.728839][T18905] ? do_raw_spin_unlock+0x145/0x1e0 [ 1140.728882][T18905] ? _raw_spin_unlock+0x28/0x50 [ 1140.728930][T18905] filemap_writeback+0x22d/0x2e0 [ 1140.728982][T18905] ? __pfx_filemap_writeback+0x10/0x10 [ 1140.729084][T18905] ? __pfx___might_resched+0x10/0x10 [ 1140.729129][T18905] file_write_and_wait_range+0xcd/0x140 [ 1140.729186][T18905] ext4_sync_file+0x306/0xe50 [ 1140.729226][T18905] ? __pfx_ext4_sync_file+0x10/0x10 [ 1140.729259][T18905] vfs_fsync_range+0x9b/0x190 [ 1140.729332][T18905] __do_sys_msync+0x3ca/0x590 [ 1140.729486][T18905] do_syscall_64+0x106/0xf80 [ 1140.729542][T18905] ? clear_bhb_loop+0x40/0x90 [ 1140.729583][T18905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.729616][T18905] RIP: 0033:0x7f1db119bf79 [ 1140.729642][T18905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1140.729676][T18905] RSP: 002b:00007f1daf3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 1140.729707][T18905] RAX: ffffffffffffffda RBX: 00007f1db1415fa0 RCX: 00007f1db119bf79 [ 1140.729729][T18905] RDX: 0000000400000004 RSI: 0180000000000000 RDI: 000000001ffff000 [ 1140.729751][T18905] RBP: 00007f1daf3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1140.729771][T18905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1140.729789][T18905] R13: 00007f1db1416038 R14: 00007f1db1415fa0 R15: 00007ffec9196568 [ 1140.729833][T18905] [ 1143.396874][T18935] misc userio: No port type given on /dev/userio [ 1143.414898][T18935] FAULT_INJECTION: forcing a failure. [ 1143.414898][T18935] name failslab, interval 1, probability 0, space 0, times 0 [ 1143.445178][T18935] CPU: 1 UID: 0 PID: 18935 Comm: syz.2.3111 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1143.445238][T18935] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1143.445253][T18935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1143.445275][T18935] Call Trace: [ 1143.445287][T18935] [ 1143.445301][T18935] dump_stack_lvl+0x100/0x190 [ 1143.445356][T18935] should_fail_ex.cold+0x5/0xa [ 1143.445396][T18935] should_failslab+0xc2/0x120 [ 1143.445437][T18935] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 1143.445493][T18935] __kmalloc_noprof+0xf6/0x9c0 [ 1143.445559][T18935] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 1143.445613][T18935] kernfs_fop_write_iter+0x26a/0x5f0 [ 1143.445676][T18935] vfs_write+0x6ac/0x1070 [ 1143.445711][T18935] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1143.445772][T18935] ? __pfx_vfs_write+0x10/0x10 [ 1143.445834][T18935] ksys_write+0x12a/0x250 [ 1143.445867][T18935] ? __pfx_ksys_write+0x10/0x10 [ 1143.445915][T18935] do_syscall_64+0x106/0xf80 [ 1143.445967][T18935] ? clear_bhb_loop+0x40/0x90 [ 1143.446008][T18935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1143.446041][T18935] RIP: 0033:0x7f1db119bf79 [ 1143.446068][T18935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1143.446103][T18935] RSP: 002b:00007f1daf3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1143.446145][T18935] RAX: ffffffffffffffda RBX: 00007f1db1415fa0 RCX: 00007f1db119bf79 [ 1143.446170][T18935] RDX: 000000007fffffff RSI: 0000200000000040 RDI: 0000000000000002 [ 1143.446193][T18935] RBP: 00007f1db12327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1143.446215][T18935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1143.446237][T18935] R13: 00007f1db1416038 R14: 00007f1db1415fa0 R15: 00007ffec9196568 [ 1143.446284][T18935] [ 1144.091858][T18932] Invalid ELF header magic: != ELF [ 1144.386921][T18945] netlink: zone id is out of range [ 1144.392692][T18945] netlink: zone id is out of range [ 1144.424566][T18945] netlink: zone id is out of range [ 1144.451025][T18945] netlink: zone id is out of range [ 1144.485397][T18945] netlink: zone id is out of range [ 1144.544877][T18945] netlink: zone id is out of range [ 1144.589166][T18945] netlink: zone id is out of range [ 1144.594321][T18945] netlink: zone id is out of range [ 1144.683600][T18945] netlink: zone id is out of range [ 1144.762920][T18945] netlink: zone id is out of range [ 1145.406188][T18960] usb usb3: usbfs: process 18960 (syz.0.3115) did not claim interface 0 before use [ 1147.284447][T18987] FAULT_INJECTION: forcing a failure. [ 1147.284447][T18987] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1147.347115][T18987] CPU: 1 UID: 0 PID: 18987 Comm: syz.2.3124 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1147.347156][T18987] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1147.347165][T18987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1147.347180][T18987] Call Trace: [ 1147.347188][T18987] [ 1147.347197][T18987] dump_stack_lvl+0x100/0x190 [ 1147.347235][T18987] should_fail_ex.cold+0x5/0xa [ 1147.347261][T18987] get_futex_key+0x1d2/0x1620 [ 1147.347301][T18987] ? __pfx_get_futex_key+0x10/0x10 [ 1147.347335][T18987] ? lock_acquire+0x17c/0x330 [ 1147.347367][T18987] futex_wake+0xea/0x530 [ 1147.347397][T18987] ? __pfx_futex_wake+0x10/0x10 [ 1147.347424][T18987] ? exit_mm_release+0x19/0x30 [ 1147.347455][T18987] do_futex+0x32b/0x350 [ 1147.347477][T18987] ? __pfx_do_futex+0x10/0x10 [ 1147.347498][T18987] ? __might_fault+0xc5/0x140 [ 1147.347542][T18987] mm_release+0x24a/0x2f0 [ 1147.347578][T18987] do_exit+0x675/0x2a30 [ 1147.347608][T18987] ? __pfx_do_exit+0x10/0x10 [ 1147.347633][T18987] ? do_raw_spin_lock+0x128/0x260 [ 1147.347660][T18987] ? find_held_lock+0x2b/0x80 [ 1147.347691][T18987] ? get_signal+0x7e0/0x21e0 [ 1147.347728][T18987] do_group_exit+0xd5/0x2a0 [ 1147.347757][T18987] get_signal+0x1ec7/0x21e0 [ 1147.347797][T18987] ? io_uring_setup+0xd7/0x160 [ 1147.347832][T18987] ? ksys_write+0x190/0x250 [ 1147.347856][T18987] ? __pfx_get_signal+0x10/0x10 [ 1147.347892][T18987] ? do_futex+0x192/0x350 [ 1147.347917][T18987] arch_do_signal_or_restart+0x91/0x770 [ 1147.347944][T18987] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1147.347976][T18987] ? __pfx___x64_sys_futex+0x10/0x10 [ 1147.347998][T18987] ? xfd_validate_state+0x129/0x190 [ 1147.348032][T18987] exit_to_user_mode_loop+0x86/0x4a0 [ 1147.348055][T18987] ? rcu_is_watching+0x12/0xc0 [ 1147.348085][T18987] do_syscall_64+0x668/0xf80 [ 1147.348120][T18987] ? clear_bhb_loop+0x40/0x90 [ 1147.348149][T18987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1147.348173][T18987] RIP: 0033:0x7f1db119bf79 [ 1147.348192][T18987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1147.348217][T18987] RSP: 002b:00007f1daf3f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1147.348239][T18987] RAX: fffffffffffffe00 RBX: 00007f1db1415fa8 RCX: 00007f1db119bf79 [ 1147.348255][T18987] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1db1415fa8 [ 1147.348270][T18987] RBP: 00007f1db1415fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1147.348284][T18987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1147.348298][T18987] R13: 00007f1db1416038 R14: 00007ffec9196480 R15: 00007ffec9196568 [ 1147.348328][T18987] [ 1149.591357][T19012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3129'. [ 1149.641584][T19012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3129'. [ 1149.999456][T11420] Bluetooth: hci1: unexpected event 0x03 length: 43 > 11 [ 1150.117931][T19022] Process accounting paused [ 1150.999465][T19002] Setting dangerous option i915.mitigations - tainting kernel [ 1151.665781][T19042] net_ratelimit: 47 callbacks suppressed [ 1151.665814][T19042] netlink: NAT attribute type 6 has unexpected length (4 != 2) [ 1151.968908][T19050] FAULT_INJECTION: forcing a failure. [ 1151.968908][T19050] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1151.982250][T19050] CPU: 1 UID: 0 PID: 19050 Comm: syz.5.3140 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1151.982303][T19050] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1151.982317][T19050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1151.982336][T19050] Call Trace: [ 1151.982348][T19050] [ 1151.982361][T19050] dump_stack_lvl+0x100/0x190 [ 1151.982413][T19050] should_fail_ex.cold+0x5/0xa [ 1151.982452][T19050] _copy_from_user+0x2e/0xd0 [ 1151.982489][T19050] kstrtouint_from_user+0xd6/0x1d0 [ 1151.982535][T19050] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1151.982580][T19050] ? __lock_acquire+0x4a5/0x2630 [ 1151.982619][T19050] ? lock_acquire+0x17c/0x330 [ 1151.982661][T19050] proc_fail_nth_write+0x83/0x220 [ 1151.982700][T19050] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1151.982750][T19050] vfs_write+0x2aa/0x1070 [ 1151.982784][T19050] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1151.982825][T19050] ? __pfx_vfs_write+0x10/0x10 [ 1151.982856][T19050] ? __fget_files+0x215/0x3d0 [ 1151.982899][T19050] ? __fget_files+0x21f/0x3d0 [ 1151.982945][T19050] ksys_write+0x12a/0x250 [ 1151.982978][T19050] ? __pfx_ksys_write+0x10/0x10 [ 1151.983023][T19050] do_syscall_64+0x106/0xf80 [ 1151.983082][T19050] ? clear_bhb_loop+0x40/0x90 [ 1151.983124][T19050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.983160][T19050] RIP: 0033:0x7fc86895c84e [ 1151.983187][T19050] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1151.983221][T19050] RSP: 002b:00007fc869828fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1151.983254][T19050] RAX: ffffffffffffffda RBX: 00007fc8698296c0 RCX: 00007fc86895c84e [ 1151.983277][T19050] RDX: 0000000000000001 RSI: 00007fc8698290a0 RDI: 0000000000000006 [ 1151.983298][T19050] RBP: 00007fc869829090 R08: 0000000000000000 R09: 0000000000000000 [ 1151.983319][T19050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1151.983339][T19050] R13: 00007fc868c16038 R14: 00007fc868c15fa0 R15: 00007ffe3df358e8 [ 1151.983384][T19050] [ 1152.431990][T19051] FAULT_INJECTION: forcing a failure. [ 1152.431990][T19051] name failslab, interval 1, probability 0, space 0, times 0 [ 1152.445322][T19051] CPU: 1 UID: 0 PID: 19051 Comm: syz.2.3139 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1152.445380][T19051] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1152.445394][T19051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1152.445415][T19051] Call Trace: [ 1152.445427][T19051] [ 1152.445440][T19051] dump_stack_lvl+0x100/0x190 [ 1152.445493][T19051] should_fail_ex.cold+0x5/0xa [ 1152.445533][T19051] should_failslab+0xc2/0x120 [ 1152.445573][T19051] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 1152.445612][T19051] ? shmem_alloc_inode+0x25/0x50 [ 1152.445658][T19051] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1152.445698][T19051] ? shmem_alloc_inode+0x25/0x50 [ 1152.445739][T19051] shmem_alloc_inode+0x25/0x50 [ 1152.445780][T19051] alloc_inode+0x68/0x250 [ 1152.445827][T19051] new_inode+0x22/0x1c0 [ 1152.445876][T19051] shmem_get_inode+0x197/0xf30 [ 1152.445925][T19051] ? __vm_enough_memory+0x184/0x390 [ 1152.445975][T19051] __shmem_file_setup+0x279/0x330 [ 1152.446028][T19051] shmem_zero_setup+0x93/0x1b0 [ 1152.446066][T19051] __mmap_region+0x2101/0x2820 [ 1152.446129][T19051] ? __pfx___mmap_region+0x10/0x10 [ 1152.446210][T19051] ? finish_task_switch.isra.0+0x205/0xb80 [ 1152.446262][T19051] ? lockdep_hardirqs_on+0x78/0x100 [ 1152.446325][T19051] ? finish_task_switch.isra.0+0x205/0xb80 [ 1152.446451][T19051] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 1152.446497][T19051] ? rcu_is_watching+0x12/0xc0 [ 1152.446548][T19051] mmap_region+0x180/0x3e0 [ 1152.446588][T19051] do_mmap+0xc63/0x12f0 [ 1152.446638][T19051] ? __pfx_do_mmap+0x10/0x10 [ 1152.446683][T19051] ? __pfx_down_write_killable+0x10/0x10 [ 1152.446728][T19051] vm_mmap_pgoff+0x29e/0x470 [ 1152.446778][T19051] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1152.446832][T19051] ? __x64_sys_futex+0x34f/0x4d0 [ 1152.446864][T19051] ? __x64_sys_futex+0x358/0x4d0 [ 1152.446902][T19051] ksys_mmap_pgoff+0x7d/0x5b0 [ 1152.446952][T19051] __x64_sys_mmap+0x125/0x190 [ 1152.447002][T19051] do_syscall_64+0x106/0xf80 [ 1152.447055][T19051] ? clear_bhb_loop+0x40/0x90 [ 1152.447098][T19051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.447133][T19051] RIP: 0033:0x7f1db119bf79 [ 1152.447160][T19051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1152.447194][T19051] RSP: 002b:00007f1daf3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1152.447228][T19051] RAX: ffffffffffffffda RBX: 00007f1db1415fa0 RCX: 00007f1db119bf79 [ 1152.447251][T19051] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 1152.447272][T19051] RBP: 00007f1db12327e0 R08: fffffffffffffffa R09: 0000000000008000 [ 1152.447313][T19051] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1152.447334][T19051] R13: 00007f1db1416038 R14: 00007f1db1415fa0 R15: 00007ffec9196568 [ 1152.447382][T19051] [ 1153.995355][T19070] netlink: 330 bytes leftover after parsing attributes in process `syz.2.3145'. [ 1155.092739][T19090] Invalid ELF header magic: != ELF [ 1158.052507][T19156] netlink: 'syz.5.3159': attribute type 27 has an invalid length. [ 1158.060669][T19156] netlink: 334 bytes leftover after parsing attributes in process `syz.5.3159'. [ 1159.554257][T19180] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input26 [ 1161.865031][T19220] netlink: 'syz.0.3171': attribute type 1 has an invalid length. [ 1161.904754][T19220] netlink: 'syz.0.3171': attribute type 1 has an invalid length. [ 1161.952231][T19220] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3171'. [ 1162.062516][T19220] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3171'. [ 1162.398756][T19228] netlink: 330 bytes leftover after parsing attributes in process `syz.5.3176'. [ 1165.354944][T11420] Bluetooth: hci2: command 0x0c1a tx timeout [ 1165.368830][T19248] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1166.094834][T19248] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1166.101027][T19248] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1166.119563][T19248] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1166.155225][T19248] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1166.193302][T19248] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1167.039727][T19243] Process accounting paused [ 1167.285317][T19310] misc userio: No port type given on /dev/userio [ 1167.515409][T11420] Bluetooth: hci5: command 0x0c1a tx timeout [ 1168.155367][T11420] Bluetooth: hci3: command 0x0406 tx timeout [ 1168.161520][T11420] Bluetooth: hci0: command 0x0c1a tx timeout [ 1168.243442][T19323] Bluetooth: hci1: command 0x0c1a tx timeout [ 1170.117491][T19350] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input27 [ 1170.245285][T19323] Bluetooth: hci3: command 0x0406 tx timeout [ 1172.238972][T19374] netlink: 'syz.3.3203': attribute type 1 has an invalid length. [ 1172.255183][T19374] netlink: 'syz.3.3203': attribute type 1 has an invalid length. [ 1172.284840][T19374] netlink: 124 bytes leftover after parsing attributes in process `syz.3.3203'. [ 1172.299225][T19374] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3203'. [ 1173.324986][T19390] input: jJǸ-9%vJ86 as /devices/virtual/input/input28 [ 1178.653074][T19415] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.056078][T19441] [U] [ 1180.058921][T19441] [U] [ 1180.061641][T19441] [U] [ 1180.064388][T19441] [U] [ 1180.285684][T19441] [U] [ 1180.288586][T19441] [U] [ 1180.291350][T19441] [U] [ 1180.294118][T19441] [U] [ 1180.352783][T19442] Process accounting resumed [ 1180.444736][T19441] [U] [ 1184.469245][T19495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3231'. [ 1184.536359][T19496] FAULT_INJECTION: forcing a failure. [ 1184.536359][T19496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1184.598884][T19496] CPU: 0 UID: 0 PID: 19496 Comm: syz.0.3231 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1184.598938][T19496] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1184.598951][T19496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1184.598972][T19496] Call Trace: [ 1184.598984][T19496] [ 1184.598997][T19496] dump_stack_lvl+0x100/0x190 [ 1184.599055][T19496] should_fail_ex.cold+0x5/0xa [ 1184.599092][T19496] _copy_from_iter+0x1f4/0x1690 [ 1184.599133][T19496] ? rcu_is_watching+0x12/0xc0 [ 1184.599174][T19496] ? __pfx__copy_from_iter+0x10/0x10 [ 1184.599210][T19496] ? __asan_memset+0x23/0x50 [ 1184.599260][T19496] ? __build_skb_around+0x278/0x390 [ 1184.599313][T19496] ? is_vmalloc_addr+0x86/0xa0 [ 1184.599370][T19496] netlink_sendmsg+0x808/0xda0 [ 1184.599418][T19496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1184.599466][T19496] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1184.599521][T19496] sock_write_iter+0x566/0x610 [ 1184.599571][T19496] ? __pfx_sock_write_iter+0x10/0x10 [ 1184.599632][T19496] ? bpf_lsm_file_permission+0x9/0x10 [ 1184.599676][T19496] ? security_file_permission+0x76/0x210 [ 1184.599715][T19496] ? rw_verify_area+0xce/0x6d0 [ 1184.599768][T19496] vfs_write+0x6ac/0x1070 [ 1184.599801][T19496] ? __pfx_sock_write_iter+0x10/0x10 [ 1184.599852][T19496] ? __pfx_vfs_write+0x10/0x10 [ 1184.599880][T19496] ? find_held_lock+0x2b/0x80 [ 1184.599951][T19496] ksys_write+0x1f8/0x250 [ 1184.599983][T19496] ? __pfx_ksys_write+0x10/0x10 [ 1184.600015][T19496] ? do_user_addr_fault+0x8d6/0x12f0 [ 1184.600078][T19496] do_syscall_64+0x106/0xf80 [ 1184.600128][T19496] ? clear_bhb_loop+0x40/0x90 [ 1184.600169][T19496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.600202][T19496] RIP: 0033:0x7fd51ef9bf79 [ 1184.600229][T19496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1184.600260][T19496] RSP: 002b:00007fd51fe90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1184.600293][T19496] RAX: ffffffffffffffda RBX: 00007fd51f216180 RCX: 00007fd51ef9bf79 [ 1184.600315][T19496] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000002 [ 1184.600337][T19496] RBP: 00007fd51fe90090 R08: 0000000000000000 R09: 0000000000000000 [ 1184.600357][T19496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1184.600378][T19496] R13: 00007fd51f216218 R14: 00007fd51f216180 R15: 00007fff78ffeda8 [ 1184.600421][T19496] [ 1185.424130][T19510] futex_wake_op: syz.3.3235 tries to shift op by -1; fix this program [ 1187.379905][T19538] netlink: 306 bytes leftover after parsing attributes in process `syz.2.3239'. [ 1187.762283][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1187.768827][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1189.578917][T19565] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3246'. [ 1189.622784][T19565] netlink: 13 bytes leftover after parsing attributes in process `syz.5.3246'. [ 1189.643078][T19565] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3246'. [ 1189.806752][T19568] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1190.309148][T19578] blktrace: Concurrent blktraces are not allowed on loop2 [ 1192.041366][T19599] misc userio: No port type given on /dev/userio [ 1193.414730][T19618] netlink: 186 bytes leftover after parsing attributes in process `syz.5.3262'. [ 1193.955275][T19618] netlink: 186 bytes leftover after parsing attributes in process `syz.5.3262'. [ 1196.494582][T19653] FAULT_INJECTION: forcing a failure. [ 1196.494582][T19653] name failslab, interval 1, probability 0, space 0, times 0 [ 1196.567872][T19653] CPU: 0 UID: 0 PID: 19653 Comm: syz.2.3271 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1196.567934][T19653] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1196.567958][T19653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1196.567980][T19653] Call Trace: [ 1196.567993][T19653] [ 1196.568014][T19653] dump_stack_lvl+0x100/0x190 [ 1196.568078][T19653] should_fail_ex.cold+0x5/0xa [ 1196.568118][T19653] should_failslab+0xc2/0x120 [ 1196.568161][T19653] __kmalloc_node_track_caller_noprof+0xf9/0x9d0 [ 1196.568202][T19653] ? register_pidns_sysctls+0x4b/0x1c0 [ 1196.568250][T19653] ? kmemdup_noprof+0x29/0x60 [ 1196.568283][T19653] ? __pfx_set_is_seen+0x10/0x10 [ 1196.568336][T19653] kmemdup_noprof+0x29/0x60 [ 1196.568372][T19653] register_pidns_sysctls+0x4b/0x1c0 [ 1196.568410][T19653] ? __ns_common_init+0x299/0x4b0 [ 1196.568467][T19653] copy_pid_ns+0x67a/0x1090 [ 1196.568522][T19653] ? __pfx_copy_pid_ns+0x10/0x10 [ 1196.568576][T19653] ? rcu_is_watching+0x12/0xc0 [ 1196.568618][T19653] ? copy_mnt_ns+0x106/0xc30 [ 1196.568671][T19653] create_new_namespaces+0x2aa/0xac0 [ 1196.568731][T19653] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1196.568786][T19653] ksys_unshare+0x455/0xab0 [ 1196.568825][T19653] ? __pfx_ksys_unshare+0x10/0x10 [ 1196.568861][T19653] ? xfd_validate_state+0x129/0x190 [ 1196.568916][T19653] __x64_sys_unshare+0x31/0x40 [ 1196.568960][T19653] do_syscall_64+0x106/0xf80 [ 1196.569015][T19653] ? clear_bhb_loop+0x40/0x90 [ 1196.569057][T19653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1196.569093][T19653] RIP: 0033:0x7f1db119bf79 [ 1196.569122][T19653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1196.569157][T19653] RSP: 002b:00007f1daf3d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1196.569192][T19653] RAX: ffffffffffffffda RBX: 00007f1db1416090 RCX: 00007f1db119bf79 [ 1196.569216][T19653] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1196.569237][T19653] RBP: 00007f1db12327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1196.569257][T19653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1196.569278][T19653] R13: 00007f1db1416128 R14: 00007f1db1416090 R15: 00007ffec9196568 [ 1196.569324][T19653] [ 1197.063926][T19648] Process accounting resumed [ 1197.510093][T19657] netlink: 186 bytes leftover after parsing attributes in process `syz.3.3274'. [ 1197.666067][T19657] netlink: 186 bytes leftover after parsing attributes in process `syz.3.3274'. [ 1198.046741][T19658] FAULT_INJECTION: forcing a failure. [ 1198.046741][T19658] name failslab, interval 1, probability 0, space 0, times 0 [ 1198.424741][T19658] CPU: 1 UID: 0 PID: 19658 Comm: syz.5.3282 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1198.424801][T19658] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1198.424816][T19658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1198.424839][T19658] Call Trace: [ 1198.424851][T19658] [ 1198.424866][T19658] dump_stack_lvl+0x100/0x190 [ 1198.424936][T19658] should_fail_ex.cold+0x5/0xa [ 1198.424980][T19658] should_failslab+0xc2/0x120 [ 1198.425024][T19658] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1198.425069][T19658] __kmalloc_noprof+0xf6/0x9c0 [ 1198.425118][T19658] ? kfree+0x2a9/0x690 [ 1198.425178][T19658] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1198.425222][T19658] tomoyo_realpath_from_path+0xb6/0x690 [ 1198.425278][T19658] tomoyo_check_open_permission+0x2af/0x3c0 [ 1198.425318][T19658] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1198.425405][T19658] ? lock_acquire+0x17c/0x330 [ 1198.425439][T19658] ? find_held_lock+0x2b/0x80 [ 1198.425495][T19658] tomoyo_file_open+0x6b/0x90 [ 1198.425608][T19658] security_file_open+0xb5/0x1e0 [ 1198.425650][T19658] do_dentry_open+0x5aa/0x1660 [ 1198.425696][T19658] vfs_open+0x82/0x3f0 [ 1198.425747][T19658] path_openat+0x208c/0x31a0 [ 1198.425797][T19658] ? __pfx_path_openat+0x10/0x10 [ 1198.425848][T19658] do_file_open+0x20e/0x430 [ 1198.425895][T19658] ? __pfx_do_file_open+0x10/0x10 [ 1198.425947][T19658] ? __pfx_kfree_link+0x10/0x10 [ 1198.426013][T19658] ? alloc_fd+0x476/0x790 [ 1198.426053][T19658] ? do_getname+0x191/0x390 [ 1198.426102][T19658] do_sys_openat2+0x10d/0x1e0 [ 1198.426151][T19658] ? __pfx_do_sys_openat2+0x10/0x10 [ 1198.426202][T19658] ? __fget_files+0x21f/0x3d0 [ 1198.426245][T19658] __x64_sys_openat+0x12d/0x210 [ 1198.426296][T19658] ? __pfx___x64_sys_openat+0x10/0x10 [ 1198.426344][T19658] ? xfd_validate_state+0x129/0x190 [ 1198.426400][T19658] do_syscall_64+0x106/0xf80 [ 1198.426450][T19658] ? clear_bhb_loop+0x40/0x90 [ 1198.426491][T19658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1198.426529][T19658] RIP: 0033:0x7fc86899bf79 [ 1198.426569][T19658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1198.426606][T19658] RSP: 002b:00007fc869829028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1198.426643][T19658] RAX: ffffffffffffffda RBX: 00007fc868c15fa0 RCX: 00007fc86899bf79 [ 1198.426669][T19658] RDX: 0000000000000802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1198.426692][T19658] RBP: 00007fc868a327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1198.426714][T19658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1198.426736][T19658] R13: 00007fc868c16038 R14: 00007fc868c15fa0 R15: 00007ffe3df358e8 [ 1198.426783][T19658] [ 1198.835262][T19658] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1199.038519][T19687] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 1199.365218][T19669] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1199.374825][T19669] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1199.384423][T19669] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1200.142501][T19694] blktrace: Concurrent blktraces are not allowed on loop2 [ 1202.529450][T19714] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3290'. [ 1202.599309][T19714] bond0: entered promiscuous mode [ 1202.604428][T19714] bond_slave_0: entered promiscuous mode [ 1202.647048][T19714] bond_slave_1: entered promiscuous mode [ 1202.667043][T19714] bond0: entered allmulticast mode [ 1202.672251][T19714] bond_slave_0: entered allmulticast mode [ 1202.694340][T19714] bond_slave_1: entered allmulticast mode [ 1203.859177][T19739] i8042 aux 00:02: in use; can't configure [ 1205.908827][T19760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3296'. [ 1206.059096][T19765] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input29 [ 1210.662231][T19754] Process accounting paused [ 1211.515424][T19795] Invalid ELF header magic: != ELF [ 1213.399090][T19841] FAULT_INJECTION: forcing a failure. [ 1213.399090][T19841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1213.448715][T19841] CPU: 1 UID: 0 PID: 19841 Comm: syz.0.3315 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1213.448771][T19841] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1213.448785][T19841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1213.448806][T19841] Call Trace: [ 1213.448820][T19841] [ 1213.448834][T19841] dump_stack_lvl+0x100/0x190 [ 1213.448889][T19841] should_fail_ex.cold+0x5/0xa [ 1213.448927][T19841] _copy_from_iter+0x1f4/0x1690 [ 1213.448966][T19841] ? sk_leave_memory_pressure+0x81/0x140 [ 1213.449017][T19841] ? __pfx__copy_from_iter+0x10/0x10 [ 1213.449050][T19841] ? alloc_pages_noprof+0x233/0x390 [ 1213.449096][T19841] ? __sk_mem_schedule+0xd0/0x100 [ 1213.449149][T19841] tcp_sendmsg_locked+0xca4/0x4780 [ 1213.449230][T19841] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1213.449281][T19841] ? do_raw_spin_lock+0x128/0x260 [ 1213.449320][T19841] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1213.449369][T19841] ? __local_bh_enable_ip+0x9e/0x120 [ 1213.449426][T19841] tcp_sendmsg+0x2e/0x50 [ 1213.449467][T19841] ? __pfx_tcp_sendmsg+0x10/0x10 [ 1213.449512][T19841] inet_sendmsg+0xb9/0x140 [ 1213.449562][T19841] __sys_sendto+0x467/0x520 [ 1213.449597][T19841] ? __pfx___sys_sendto+0x10/0x10 [ 1213.449665][T19841] ? ksys_write+0x1ac/0x250 [ 1213.449696][T19841] ? __pfx_ksys_write+0x10/0x10 [ 1213.449733][T19841] __x64_sys_sendto+0xe0/0x1c0 [ 1213.449766][T19841] ? do_syscall_64+0x95/0xf80 [ 1213.449816][T19841] ? lockdep_hardirqs_on+0x78/0x100 [ 1213.449865][T19841] do_syscall_64+0x106/0xf80 [ 1213.449914][T19841] ? clear_bhb_loop+0x40/0x90 [ 1213.449956][T19841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.449990][T19841] RIP: 0033:0x7fd51ef9bf79 [ 1213.450022][T19841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1213.450047][T19841] RSP: 002b:00007fd51feb1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1213.450072][T19841] RAX: ffffffffffffffda RBX: 00007fd51f216090 RCX: 00007fd51ef9bf79 [ 1213.450089][T19841] RDX: 000000000002000f RSI: 0000000000000000 RDI: 0000000000000003 [ 1213.450104][T19841] RBP: 00007fd51feb1090 R08: 0000000000000000 R09: 000000000000001c [ 1213.450119][T19841] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000001 [ 1213.450134][T19841] R13: 00007fd51f216128 R14: 00007fd51f216090 R15: 00007fff78ffeda8 [ 1213.450166][T19841] [ 1217.073213][T19862] Invalid ELF header magic: != ELF [ 1226.897914][T19981] FAULT_INJECTION: forcing a failure. [ 1226.897914][T19981] name failslab, interval 1, probability 0, space 0, times 0 [ 1226.945381][T19981] CPU: 0 UID: 0 PID: 19981 Comm: syz.2.3346 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1226.945436][T19981] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1226.945448][T19981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1226.945472][T19981] Call Trace: [ 1226.945484][T19981] [ 1226.945496][T19981] dump_stack_lvl+0x100/0x190 [ 1226.945545][T19981] should_fail_ex.cold+0x5/0xa [ 1226.945581][T19981] should_failslab+0xc2/0x120 [ 1226.945627][T19981] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1226.945740][T19981] __kmalloc_noprof+0xf6/0x9c0 [ 1226.945887][T19981] ? kfree+0x2a9/0x690 [ 1226.945945][T19981] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1226.945985][T19981] tomoyo_realpath_from_path+0xb6/0x690 [ 1226.946036][T19981] tomoyo_path_number_perm+0x23c/0x580 [ 1226.946067][T19981] ? tomoyo_path_number_perm+0x22e/0x580 [ 1226.946101][T19981] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1226.946174][T19981] ? find_held_lock+0x2b/0x80 [ 1226.946218][T19981] ? __fget_files+0x215/0x3d0 [ 1226.946248][T19981] ? hook_file_ioctl_common+0x146/0x410 [ 1226.946290][T19981] ? __fget_files+0x21f/0x3d0 [ 1226.946328][T19981] security_file_ioctl+0xd3/0x230 [ 1226.946363][T19981] __x64_sys_ioctl+0xb7/0x210 [ 1226.946431][T19981] do_syscall_64+0x106/0xf80 [ 1226.946480][T19981] ? clear_bhb_loop+0x40/0x90 [ 1226.946522][T19981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.946555][T19981] RIP: 0033:0x7f1db119bf79 [ 1226.946583][T19981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1226.946617][T19981] RSP: 002b:00007f1daf3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1226.946649][T19981] RAX: ffffffffffffffda RBX: 00007f1db1415fa0 RCX: 00007f1db119bf79 [ 1226.946683][T19981] RDX: 0000200000000300 RSI: 00000000c0386105 RDI: 0000000000000003 [ 1226.946705][T19981] RBP: 00007f1daf3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1226.946726][T19981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1226.946746][T19981] R13: 00007f1db1416038 R14: 00007f1db1415fa0 R15: 00007ffec9196568 [ 1226.946789][T19981] [ 1226.949325][T19981] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1230.673427][T19985] Process accounting paused [ 1230.906246][T20017] random: crng reseeded on system resumption [ 1234.071240][T20054] overlayfs: missing 'lowerdir' [ 1237.453715][T20097] Invalid ELF header magic: != ELF [ 1239.819501][T20134] FAULT_INJECTION: forcing a failure. [ 1239.819501][T20134] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1239.895011][T20134] CPU: 1 UID: 0 PID: 20134 Comm: syz.2.3381 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1239.895067][T20134] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1239.895080][T20134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1239.895101][T20134] Call Trace: [ 1239.895112][T20134] [ 1239.895125][T20134] dump_stack_lvl+0x100/0x190 [ 1239.895175][T20134] should_fail_ex.cold+0x5/0xa [ 1239.895212][T20134] get_futex_key+0x1d2/0x1620 [ 1239.895268][T20134] ? __pfx_get_futex_key+0x10/0x10 [ 1239.895314][T20134] ? lock_acquire+0x17c/0x330 [ 1239.895380][T20134] futex_wake+0xea/0x530 [ 1239.895432][T20134] ? __pfx_futex_wake+0x10/0x10 [ 1239.895471][T20134] ? exit_mm_release+0x19/0x30 [ 1239.895523][T20134] do_futex+0x32b/0x350 [ 1239.895554][T20134] ? __pfx_do_futex+0x10/0x10 [ 1239.895583][T20134] ? __might_fault+0xc5/0x140 [ 1239.895647][T20134] mm_release+0x24a/0x2f0 [ 1239.895698][T20134] do_exit+0x675/0x2a30 [ 1239.895742][T20134] ? __pfx_do_exit+0x10/0x10 [ 1239.895778][T20134] ? do_raw_spin_lock+0x128/0x260 [ 1239.895815][T20134] ? find_held_lock+0x2b/0x80 [ 1239.895859][T20134] ? get_signal+0x7e0/0x21e0 [ 1239.895914][T20134] do_group_exit+0xd5/0x2a0 [ 1239.895955][T20134] get_signal+0x1ec7/0x21e0 [ 1239.896012][T20134] ? io_uring_setup+0xd7/0x160 [ 1239.896052][T20134] ? ksys_write+0x190/0x250 [ 1239.896086][T20134] ? __pfx_get_signal+0x10/0x10 [ 1239.896138][T20134] ? do_futex+0x192/0x350 [ 1239.896174][T20134] arch_do_signal_or_restart+0x91/0x770 [ 1239.896212][T20134] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1239.896259][T20134] ? __pfx___x64_sys_futex+0x10/0x10 [ 1239.896290][T20134] ? xfd_validate_state+0x129/0x190 [ 1239.896338][T20134] exit_to_user_mode_loop+0x86/0x4a0 [ 1239.896371][T20134] ? rcu_is_watching+0x12/0xc0 [ 1239.896420][T20134] do_syscall_64+0x668/0xf80 [ 1239.896471][T20134] ? clear_bhb_loop+0x40/0x90 [ 1239.896512][T20134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.896547][T20134] RIP: 0033:0x7f1db119bf79 [ 1239.896574][T20134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1239.896608][T20134] RSP: 002b:00007f1daf3f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1239.896640][T20134] RAX: fffffffffffffe00 RBX: 00007f1db1415fa8 RCX: 00007f1db119bf79 [ 1239.896663][T20134] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1db1415fa8 [ 1239.896690][T20134] RBP: 00007f1db1415fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1239.896711][T20134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1239.896730][T20134] R13: 00007f1db1416038 R14: 00007ffec9196480 R15: 00007ffec9196568 [ 1239.896774][T20134] [ 1240.685505][T20145] usb usb3: usbfs: process 20145 (syz.2.3382) did not claim interface 0 before use [ 1241.755775][T20135] Process accounting resumed [ 1248.201953][T20207] bridge0: port 3(netdevsim1) entered blocking state [ 1248.249788][T20207] bridge0: port 3(netdevsim1) entered disabled state [ 1248.293124][T20207] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 1248.330443][T20207] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 1248.360670][T20207] bridge0: port 3(netdevsim1) entered blocking state [ 1248.367838][T20207] bridge0: port 3(netdevsim1) entered forwarding state [ 1249.201330][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1249.208462][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1249.662058][T20228] random: crng reseeded on system resumption [ 1249.969364][T20229] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input30 [ 1250.594965][T19323] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 1252.249662][T20235] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input31 [ 1252.639641][ T6161] Bluetooth: hci1: command 0x0c1a tx timeout [ 1254.276427][T20278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3413'. [ 1254.721353][T19323] Bluetooth: hci1: command 0x0c1a tx timeout [ 1255.085827][T20288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3417'. [ 1255.136351][T20288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3417'. [ 1256.411631][T20306] vivid-009: ================= START STATUS ================= [ 1256.419855][T20306] vivid-009: Radio HW Seek Mode: Bounded [ 1256.430651][T20306] vivid-009: Radio Programmable HW Seek: false [ 1256.451017][T20305] FAULT_INJECTION: forcing a failure. [ 1256.451017][T20305] name failslab, interval 1, probability 0, space 0, times 0 [ 1256.466971][T20306] vivid-009: RDS Rx I/O Mode: Block I/O [ 1256.473256][T20306] vivid-009: Generate RBDS Instead of RDS: false [ 1256.593023][T20305] CPU: 0 UID: 0 PID: 20305 Comm: syz.5.3422 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1256.593066][T20305] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1256.593076][T20305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1256.593092][T20305] Call Trace: [ 1256.593102][T20305] [ 1256.593113][T20305] dump_stack_lvl+0x100/0x190 [ 1256.593152][T20305] should_fail_ex.cold+0x5/0xa [ 1256.593179][T20305] should_failslab+0xc2/0x120 [ 1256.593209][T20305] __kmalloc_cache_noprof+0x80/0x810 [ 1256.593254][T20305] ? trace_pid_list_alloc+0x232/0x480 [ 1256.593289][T20305] ? trace_pid_list_alloc+0x232/0x480 [ 1256.593317][T20305] trace_pid_list_alloc+0x232/0x480 [ 1256.593349][T20305] trace_pid_write+0x110/0x480 [ 1256.593387][T20305] ? __pfx_trace_pid_write+0x10/0x10 [ 1256.593424][T20305] ? update_last_data+0xaa/0x510 [ 1256.593474][T20305] event_pid_write.isra.0+0x1e4/0x7f0 [ 1256.593508][T20305] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 1256.593548][T20305] vfs_write+0x2aa/0x1070 [ 1256.593577][T20305] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 1256.593612][T20305] ? __pfx_vfs_write+0x10/0x10 [ 1256.593640][T20305] ? __fget_files+0x215/0x3d0 [ 1256.593670][T20305] ? __fget_files+0x21f/0x3d0 [ 1256.593702][T20305] ksys_write+0x12a/0x250 [ 1256.593750][T20305] ? __pfx_ksys_write+0x10/0x10 [ 1256.593783][T20305] do_syscall_64+0x106/0xf80 [ 1256.593820][T20305] ? clear_bhb_loop+0x40/0x90 [ 1256.593850][T20305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.593875][T20305] RIP: 0033:0x7fc86899bf79 [ 1256.593894][T20305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1256.593919][T20305] RSP: 002b:00007fc869829028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1256.593943][T20305] RAX: ffffffffffffffda RBX: 00007fc868c15fa0 RCX: 00007fc86899bf79 [ 1256.593959][T20305] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 1256.593975][T20305] RBP: 00007fc868a327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1256.593993][T20305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1256.594011][T20305] R13: 00007fc868c16038 R14: 00007fc868c15fa0 R15: 00007ffe3df358e8 [ 1256.594049][T20305] [ 1256.840969][T20306] vivid-009: RDS Reception: true [ 1257.092285][T20306] vivid-009: RDS Program Type: 0 inactive [ 1257.214701][T20306] vivid-009: RDS PS Name: inactive [ 1257.232304][T20306] vivid-009: RDS Radio Text: inactive [ 1257.315406][T20306] vivid-009: RDS Traffic Announcement: false inactive [ 1257.446549][T20306] vivid-009: RDS Traffic Program: false inactive [ 1257.453186][T20306] vivid-009: RDS Music: false inactive [ 1257.545965][T20306] vivid-009: ================== END STATUS ================== [ 1260.785179][T20348] sp0: Synchronizing with TNC [ 1260.842695][T20318] Process accounting resumed [ 1260.978477][T20348] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 1268.726960][T20456] netlink: 13 bytes leftover after parsing attributes in process `syz.3.3451'. [ 1273.671477][T20453] Process accounting paused [ 1278.076330][T20540] vivid-010: ================= START STATUS ================= [ 1278.145396][T20540] vivid-010: Interlaced VBI Format: false [ 1278.189567][T20540] vivid-010: ================== END STATUS ================== [ 1279.032715][T20542] Invalid ELF header magic: != ELF [ 1283.020753][T20594] zswap: compressor not available [ 1286.501760][T20650] input: jJǸ-9%vJ86 as /devices/virtual/input/input33 [ 1288.605968][T20676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3498'. [ 1289.225438][T20684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3501'. [ 1291.244326][T20700] Process accounting paused [ 1292.880571][T20745] blktrace: Concurrent blktraces are not allowed on nbd8 [ 1293.619063][T20745] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1293.644889][T20745] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1293.651135][T20745] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1293.702706][T20745] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1293.734770][T20745] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1293.740991][T20745] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1295.194709][T19323] Bluetooth: hci2: command 0x0c1a tx timeout [ 1295.684900][ T6161] Bluetooth: hci5: command 0x0c1a tx timeout [ 1295.691133][T19323] Bluetooth: hci0: command 0x0c1a tx timeout [ 1295.754822][T19323] Bluetooth: hci1: command 0x0c1a tx timeout [ 1295.760911][T19323] Bluetooth: hci3: command 0x0406 tx timeout [ 1296.723041][T20789] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3527'. [ 1297.411629][ T30] audit: type=1800 audit(4294968387.250:19): pid=20803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3529" name="file0" dev="tmpfs" ino=1617 res=0 errno=0 [ 1297.837125][T19323] Bluetooth: hci3: command 0x0406 tx timeout [ 1300.841551][T20838] sp0: Synchronizing with TNC [ 1301.697512][T20846] ptp ptp0: new virtual clock ptp1 [ 1301.753137][T20846] ptp ptp0: guarantee physical clock free running [ 1301.868909][T20849] ptp ptp0: delete virtual clock ptp1 [ 1302.204443][T20849] ptp ptp0: only physical clock in use now [ 1303.728599][T20888] Process accounting resumed [ 1304.864044][T20916] input: jJǸ-9%vJ86 as /devices/virtual/input/input35 [ 1305.109034][T20903] zswap: compressor not available [ 1305.589199][T20923] random: crng reseeded on system resumption [ 1310.644591][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1310.655025][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1312.240636][T21013] ================================================================== [ 1312.240665][T21013] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 1312.240720][T21013] Write of size 8 at addr ffffc900036099a0 by task syz.3.3587/21013 [ 1312.240749][T21013] [ 1312.240769][T21013] CPU: 1 UID: 0 PID: 21013 Comm: syz.3.3587 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1312.240821][T21013] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1312.240836][T21013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1312.240857][T21013] Call Trace: [ 1312.240869][T21013] [ 1312.240883][T21013] dump_stack_lvl+0x100/0x190 [ 1312.240930][T21013] print_report+0x156/0x4c9 [ 1312.240977][T21013] ? __virt_addr_valid+0x81/0x620 [ 1312.241015][T21013] ? sys_imageblit+0x19fb/0x1d60 [ 1312.241051][T21013] kasan_report+0xdf/0x1a0 [ 1312.241092][T21013] ? sys_imageblit+0x19fb/0x1d60 [ 1312.241138][T21013] sys_imageblit+0x19fb/0x1d60 [ 1312.241187][T21013] ? __pfx_sys_imageblit+0x10/0x10 [ 1312.241224][T21013] ? prb_read_valid+0x78/0xa0 [ 1312.241255][T21013] ? __pfx_prb_read_valid+0x10/0x10 [ 1312.241287][T21013] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 1312.241327][T21013] soft_cursor+0x524/0xa10 [ 1312.241356][T21013] ? fb_get_color_depth+0x120/0x250 [ 1312.241403][T21013] bit_cursor+0xe58/0x16f0 [ 1312.241432][T21013] ? __pfx_bit_cursor+0x10/0x10 [ 1312.241459][T21013] ? __lock_acquire+0x4a5/0x2630 [ 1312.241491][T21013] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1312.241537][T21013] ? get_color+0x1da/0x450 [ 1312.241577][T21013] ? __pfx_bit_cursor+0x10/0x10 [ 1312.241603][T21013] fbcon_cursor+0x43c/0x5e0 [ 1312.241644][T21013] ? add_softcursor+0x220/0x290 [ 1312.241672][T21013] set_cursor+0x1db/0x250 [ 1312.241696][T21013] con_write+0x89/0xb0 [ 1312.241728][T21013] n_tty_write+0x44f/0x12d0 [ 1312.241775][T21013] ? __pfx_n_tty_write+0x10/0x10 [ 1312.241814][T21013] ? __pfx_woken_wake_function+0x10/0x10 [ 1312.241852][T21013] ? __pfx___might_resched+0x10/0x10 [ 1312.241887][T21013] ? __pfx_n_tty_write+0x10/0x10 [ 1312.241927][T21013] file_tty_write.isra.0+0x4d2/0x890 [ 1312.241964][T21013] redirected_tty_write+0xd4/0x120 [ 1312.241996][T21013] vfs_write+0x6ac/0x1070 [ 1312.242023][T21013] ? __pfx_redirected_tty_write+0x10/0x10 [ 1312.242057][T21013] ? __pfx_vfs_write+0x10/0x10 [ 1312.242082][T21013] ? find_held_lock+0x2b/0x80 [ 1312.242131][T21013] ksys_write+0x12a/0x250 [ 1312.242157][T21013] ? __pfx_ksys_write+0x10/0x10 [ 1312.242189][T21013] do_syscall_64+0x106/0xf80 [ 1312.242233][T21013] ? clear_bhb_loop+0x40/0x90 [ 1312.242268][T21013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1312.242297][T21013] RIP: 0033:0x7f959bf9bf79 [ 1312.242319][T21013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1312.242350][T21013] RSP: 002b:00007f959cddd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1312.242378][T21013] RAX: ffffffffffffffda RBX: 00007f959c216090 RCX: 00007f959bf9bf79 [ 1312.242397][T21013] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000006 [ 1312.242416][T21013] RBP: 00007f959c0327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1312.242434][T21013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1312.242452][T21013] R13: 00007f959c216128 R14: 00007f959c216090 R15: 00007fff20b82488 [ 1312.242480][T21013] [ 1312.242490][T21013] [ 1312.242505][T21013] The buggy address belongs to a vmalloc virtual mapping [ 1312.242526][T21013] Memory state around the buggy address: [ 1312.242541][T21013] ffffc90003609880: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1312.242569][T21013] ffffc90003609900: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1312.242589][T21013] >ffffc90003609980: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1312.242605][T21013] ^ [ 1312.242621][T21013] ffffc90003609a00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1312.242642][T21013] ffffc90003609a80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1312.242658][T21013] ================================================================== [ 1312.243273][T21013] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1312.243300][T21013] CPU: 1 UID: 0 PID: 21013 Comm: syz.3.3587 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1312.243351][T21013] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1312.243363][T21013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1312.243382][T21013] Call Trace: [ 1312.243393][T21013] [ 1312.243405][T21013] dump_stack_lvl+0x100/0x190 [ 1312.243455][T21013] vpanic+0x20d/0x630 [ 1312.243489][T21013] panic+0xd1/0xd1 [ 1312.243526][T21013] ? __pfx_panic+0x10/0x10 [ 1312.243558][T21013] ? sys_imageblit+0x19fb/0x1d60 [ 1312.243600][T21013] ? preempt_schedule_common+0x42/0xc0 [ 1312.243655][T21013] check_panic_on_warn.cold+0x19/0x34 [ 1312.243693][T21013] end_report.part.0+0x3a/0x90 [ 1312.243739][T21013] kasan_report.cold+0xe/0x18 [ 1312.243788][T21013] ? sys_imageblit+0x19fb/0x1d60 [ 1312.243833][T21013] sys_imageblit+0x19fb/0x1d60 [ 1312.243882][T21013] ? __pfx_sys_imageblit+0x10/0x10 [ 1312.243925][T21013] ? prb_read_valid+0x78/0xa0 [ 1312.243960][T21013] ? __pfx_prb_read_valid+0x10/0x10 [ 1312.244021][T21013] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 1312.244068][T21013] soft_cursor+0x524/0xa10 [ 1312.244104][T21013] ? fb_get_color_depth+0x120/0x250 [ 1312.244176][T21013] bit_cursor+0xe58/0x16f0 [ 1312.244212][T21013] ? __pfx_bit_cursor+0x10/0x10 [ 1312.244244][T21013] ? __lock_acquire+0x4a5/0x2630 [ 1312.244281][T21013] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1312.244329][T21013] ? get_color+0x1da/0x450 [ 1312.244377][T21013] ? __pfx_bit_cursor+0x10/0x10 [ 1312.244416][T21013] fbcon_cursor+0x43c/0x5e0 [ 1312.244473][T21013] ? add_softcursor+0x220/0x290 [ 1312.244527][T21013] set_cursor+0x1db/0x250 [ 1312.244561][T21013] con_write+0x89/0xb0 [ 1312.244597][T21013] n_tty_write+0x44f/0x12d0 [ 1312.244654][T21013] ? __pfx_n_tty_write+0x10/0x10 [ 1312.244705][T21013] ? __pfx_woken_wake_function+0x10/0x10 [ 1312.244749][T21013] ? __pfx___might_resched+0x10/0x10 [ 1312.244790][T21013] ? __pfx_n_tty_write+0x10/0x10 [ 1312.244838][T21013] file_tty_write.isra.0+0x4d2/0x890 [ 1312.244886][T21013] redirected_tty_write+0xd4/0x120 [ 1312.244924][T21013] vfs_write+0x6ac/0x1070 [ 1312.244965][T21013] ? __pfx_redirected_tty_write+0x10/0x10 [ 1312.245006][T21013] ? __pfx_vfs_write+0x10/0x10 [ 1312.245037][T21013] ? find_held_lock+0x2b/0x80 [ 1312.245094][T21013] ksys_write+0x12a/0x250 [ 1312.245126][T21013] ? __pfx_ksys_write+0x10/0x10 [ 1312.245164][T21013] do_syscall_64+0x106/0xf80 [ 1312.245215][T21013] ? clear_bhb_loop+0x40/0x90 [ 1312.245256][T21013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1312.245290][T21013] RIP: 0033:0x7f959bf9bf79 [ 1312.245316][T21013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1312.245349][T21013] RSP: 002b:00007f959cddd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1312.245382][T21013] RAX: ffffffffffffffda RBX: 00007f959c216090 RCX: 00007f959bf9bf79 [ 1312.245406][T21013] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000006 [ 1312.245428][T21013] RBP: 00007f959c0327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1312.245450][T21013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1312.245471][T21013] R13: 00007f959c216128 R14: 00007f959c216090 R15: 00007fff20b82488 [ 1312.245512][T21013] [ 1312.246120][T21013] Kernel Offset: disabled