last executing test programs: 10m54.922996938s ago: executing program 2 (id=1808): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, 0x0, 0x4, 0x5) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) ioctl$auto_BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0) madvise$auto(0x0, 0x1010001, 0x100000003) madvise$auto(0x1000, 0x400050, 0x9) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/error_log\x00', 0xb01, 0x0) r1 = io_uring_setup$auto(0x1, 0x0) futex$auto(&(0x7f0000000080)=0x1, 0xb, 0x1, 0x0, 0x0, 0xfffffffa) futex$auto(&(0x7f0000000080)=0xfffffffa, 0xc, 0x1, 0x0, 0x0, 0xfffffffa) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0x2, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ioam6(&(0x7f00000001c0), r0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000780)=@link_create={@map_fd=r1, @target_ifindex, 0xfffffff7, 0x9c, @uprobe_multi={0xbb63, 0x7fffffffffffffff, 0x2, 0xfffffffffffffffb, 0x1d34, 0x1}}, 0x9f) read$auto_tracing_buffers_fops_trace(0xffffffffffffffff, &(0x7f00000000c0)=""/194, 0xc2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x4ff, 0x0) 10m54.185658154s ago: executing program 2 (id=1810): write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, &(0x7f0000000040)="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", 0x18b) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f00000038c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_CAP_GET2(r0, &(0x7f0000003a00)={0x0, 0x0, &(0x7f00000039c0)={&(0x7f00000000c0)={0x1c, r1, 0x301, 0x70bd28, 0x25dfdbff, {}, [@NET_SHAPER_A_CAPS_IFINDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x2) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) unshare$auto(0x400) lstat$auto(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ppoll$auto(0x0, 0x2, &(0x7f0000000040)={0x2, 0xfffffffffffffff8}, 0x0, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0x800, 0x40015) r5 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) seccomp$auto(0x1, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ram14\x00', 0x0, 0x0) ioctl$auto_FS_IOC_GET_ENCRYPTION_POLICY2(r5, 0x400c6615, &(0x7f0000000300)={0x76, 0x5, 0xc, 0x2, "57be872e38cab272"}) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000380)="31241793056049687c928c11541b2567ef5a20a0805f120176f637d62b6b2ffacb688793ea844e8ca187129e23f9c4", 0x2f) sendmsg$auto_NL80211_CMD_VENDOR(r4, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000446c7c8b4c3c9f2dd83d4ec9e8486070f41635086c16de43cc34637dfa1e181519bb9ea538ab052c78f51c2190406cae6dc88e36a6a28bab8ea972763428d053ad983f88995f90d21b92170326f6c922c36bbe43d701bd17e61864c5cc4fc4dd988faffc80eba8bc5c85d9af7cc6149650aa9a31f8b788d2f613a9", @ANYRES16=0x0, @ANYBLOB="050723bd7000fbdbdf2567000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x80) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x9ae}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000881}, 0x20004000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/midi2\x00', 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) 10m52.896114861s ago: executing program 2 (id=1812): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) ioctl$auto_RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) getsockopt$auto_SO_RCVTIMEO_OLD(r0, 0xffffffff, 0x14, &(0x7f00000003c0)='\x00\x00+\xa2\xc7\x92\x00\x00\x00\x00\x00\x00\x03\x90\xf9\xe8\x11\x80\a :w\xac[\xbb\xac\xe3\xe0\xff8g:\x04\x00\x00\x00\x00\x00\x00\x00=r\x03\x95\x87\xbaM\xd80=\x81\x8ez\xab\xc3^\xb0\x03Ijj\xc4\xf9\xe6\x84P\x15q\xaa\xc8\x03\xba\x8c\xe3\xc3r\xb8\x1b\x98\xe8\xbc\x11.\xd9A\xb3P\xfa\x04\x95\xfc*\v\xb8\xc5\x16Z\xb7\x82\xbc\x96o\xd2G\xf8\x0f`\xa1\x1f\xc6\xd6\xc5\xdcM\x17\x11\xd2\x12\x988\xa3`\xad[UI\xf7\xc7\xcc\x13XH\xc1\x02\x84$\x97;\xebM`\x7f\xe4\x8dbe\xd8\x901\x8e\'\x10\xf6`^\xd28Xk\x03\x8d\b\xbd\xe2d\\\x11w(\xc7D!,6\x01\x00\x9f\x8bxg\xe2\xfc~\x006\x17\x9b9?,\xd8\n\x82r\x12\xa9\xfd@\x90&\xd3l\xa7[\x9bx\xf7\xb9[m\x9a\xee\"\x9e\x81|\xa4\x8f5\xea\t\x02Axu\xe9io`\x81\xb5\x89\x01\xa0\xa8~]\xd8]\x14}\x8c\xacRc\r\xb7.\x7f\xb3\x85\xff\xf5\xb0\x11/\x80{\xab)\x05\xb3HHU\xcb\x00', 0x0) set_mempolicy$auto(0x2006, 0x0, 0x4) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x7fffffff) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x400c1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x20020000) write$auto(0x3, 0x0, 0x100000000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x3, 0x4) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, 0x0, 0xa901, 0x0) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, 0x0, 0xa040, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) r1 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ppoll$auto(&(0x7f0000000040)={r1, 0xfffc, 0x8}, 0x4, 0x0, 0x0, 0x8) fstatfs$auto(r1, &(0x7f0000000080)={0x8, 0x2, 0x2, 0xfffffffffffffffd, 0x9f, 0xffffffffffffffff, 0x6, {[0x7, 0x2]}, 0xffffffffffff06e7, 0x7, 0xffffffff, [0x4, 0x10000000000000, 0xe, 0x100000001]}) mmap$auto(0x0, 0x400000400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, 0x0, 0x101002, 0x0) unshare$auto(0x8000000) unshare$auto(0x8000400) 10m51.777282877s ago: executing program 2 (id=1815): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/zram0/initstate\x00', 0x42000, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/shrink_underused\x00', 0x1a1842, 0x0) write$auto(r0, &(0x7f0000000000)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x8) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) mlock$auto(0xfbe8, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vhci_hcd.4/usb18/authorized\x00', 0x44102, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) socket(0x2a, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x4) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x109802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), 0xffffffffffffffff) mmap$auto(0x0, 0xa, 0xdc, 0x9b72, 0x5, 0x4) syz_clone3(&(0x7f00000004c0)={0x22040600, 0x0, 0x0, 0x0, {0x21}, 0x0, 0xffffffffffffffe0, 0x0, 0x0}, 0x58) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000800)='./file1\x00', 0x20200, 0x175) ioctl$sock_SIOCGIFINDEX(r3, 0x40086602, &(0x7f0000000000)={'macvtap0\x00'}) open(0x0, 0x22240, 0x55) socket(0xa, 0x3, 0x87) io_uring_setup$auto(0x6, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r4) 10m51.531094794s ago: executing program 2 (id=1817): socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/dummy0/carrier\x00', 0xc2061, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb1\x00', 0x2a082, 0x0) socket(0xa, 0x3, 0x3b) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/mtd/mtd0/mtdblock0/power/autosuspend_delay_ms\x00', 0x303c02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/oops_count\x00', 0x45874d65875a2b39, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x74ba02, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) open(0x0, 0x261c2, 0x84) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x8000) r0 = pipe$auto(0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/4096, 0x1000) r1 = epoll_create$auto(0x1) epoll_ctl$auto(r1, 0x1, 0x8000000000000000, 0x0) write$auto(0x1, 0x0, 0x80000000) 10m50.570731521s ago: executing program 2 (id=1820): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x5, 0x8000) r0 = socket(0x2, 0xa, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x20, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x7fffffff, 0x1) sendmsg$auto_ILA_CMD_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="09002dbd7000fbdbdf2503000000b9cdaf7afb7490f766072999a5c66007f52a40ad46ce80c05307f38dc84f81045a6564ee047b86922ec922ea04f001ebaae49358b876e612e1a954a18507f3c66af02bc814b9c77ae71f26f037062432f398a1ca18269f160db9b2fdd741a7d1e4ae3024c1d39386e71d2ebd6d77482bbb17664355ab9cca53a7172bbcabb357e3bf7402c66f8ca930d46b1e1cda086d4ff5ad65fb4574bbbbe5033c00b0251e5e3c41ab476bca2a576534904c0f39d0e888db5d7aafa6da37a18e93b9b25ef1fa4ddc99efbd0d93a402786511258037c0c8bc4e9c576439318698a4979c04d604b43ceaf7e79c932793"], 0x14}, 0x1, 0x0, 0x0, 0x4000051}, 0x20048844) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_virt_wifi\x00', 0x0}) sendmsg$auto_ILA_CMD_FLUSH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@ILA_ATTR_IFINDEX={0x8, 0x4, r2}, @ILA_ATTR_CSUM_MODE={0x5, 0x7, 0xf3}, @ILA_ATTR_LOCATOR_MATCH={0xc}, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0xae}, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x97}, @ILA_ATTR_IFINDEX={0x8, 0x4, r3}, @ILA_ATTR_LOCATOR_MATCH={0xc, 0x3, 0x6}, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x10}, @ILA_ATTR_CSUM_MODE={0x5, 0x7, 0xa}, @ILA_ATTR_LOCATOR_MATCH={0xc, 0x3, 0x100}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x20000045) recvmmsg$auto(r0, 0x0, 0x400009, 0x22, 0x0) 10m35.056641194s ago: executing program 32 (id=1820): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x5, 0x8000) r0 = socket(0x2, 0xa, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x20, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x7fffffff, 0x1) sendmsg$auto_ILA_CMD_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="09002dbd7000fbdbdf2503000000b9cdaf7afb7490f766072999a5c66007f52a40ad46ce80c05307f38dc84f81045a6564ee047b86922ec922ea04f001ebaae49358b876e612e1a954a18507f3c66af02bc814b9c77ae71f26f037062432f398a1ca18269f160db9b2fdd741a7d1e4ae3024c1d39386e71d2ebd6d77482bbb17664355ab9cca53a7172bbcabb357e3bf7402c66f8ca930d46b1e1cda086d4ff5ad65fb4574bbbbe5033c00b0251e5e3c41ab476bca2a576534904c0f39d0e888db5d7aafa6da37a18e93b9b25ef1fa4ddc99efbd0d93a402786511258037c0c8bc4e9c576439318698a4979c04d604b43ceaf7e79c932793"], 0x14}, 0x1, 0x0, 0x0, 0x4000051}, 0x20048844) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_virt_wifi\x00', 0x0}) sendmsg$auto_ILA_CMD_FLUSH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@ILA_ATTR_IFINDEX={0x8, 0x4, r2}, @ILA_ATTR_CSUM_MODE={0x5, 0x7, 0xf3}, @ILA_ATTR_LOCATOR_MATCH={0xc}, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0xae}, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x97}, @ILA_ATTR_IFINDEX={0x8, 0x4, r3}, @ILA_ATTR_LOCATOR_MATCH={0xc, 0x3, 0x6}, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x10}, @ILA_ATTR_CSUM_MODE={0x5, 0x7, 0xa}, @ILA_ATTR_LOCATOR_MATCH={0xc, 0x3, 0x100}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x20000045) recvmmsg$auto(r0, 0x0, 0x400009, 0x22, 0x0) 6m43.719697836s ago: executing program 0 (id=2566): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0xc0802, 0x0) r1 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, 0x0, 0x101002, 0x0) unshare$auto(0x8000000) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2, 0x200800, 0xffffffff, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"}) (async) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f0000000000)={0x6, 0x3, 0x200, 0xba44, 0x2, 0xb, "e00026e8fdffdbcd2c02d3c293faa80c2f5336d79fc5b8202cb37f6b6d22c42432352deb58e78afdbae70400"}) (async) mmap$auto(0x0, 0x400008, 0x6, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async) madvise$auto(0x0, 0xffffffffffff0006, 0x17) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) mmap$auto(0x1, 0x8d4, 0x6, 0x6f52, 0xffffffffffffffff, 0x8000) (async) semget$auto(0x0, 0x33, 0x5) (async) semtimedop$auto(0x1, &(0x7f0000000000)={0x7, 0x9, 0x36ec}, 0x1f8, 0x0) (async, rerun: 64) unshare$auto(0x8000400) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x10, 0x2, 0xc) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/force_tx_status\x00', 0x82, 0x0) (async) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x2}, 0x8000000000000003) pread64$auto(r1, 0x0, 0x0, 0x7ffc) r3 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mac80211_hwsim/hwsim13\x00', 0x22200, 0x0) ioctl$auto_XFS_IOC_EXCHANGE_RANGE(r3, 0x40285881, &(0x7f00000000c0)={r0, 0x0, 0x1a, 0x9, 0x218}) (async) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x0, 0x0) (async, rerun: 64) write$auto(r3, &(0x7f00000001c0)='[\xed/-$\'{:\x00', 0x4) (async, rerun: 64) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptyx3\x00', 0x181800, 0x0) (async) mmap$auto(0x0, 0x2100d, 0xa, 0xeb1, 0x404, 0x10008000) (async) mmap$auto(0x0, 0x20005, 0xa, 0x200eb1, 0x401, 0x6) (async) getpid() (async) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x24040004}, 0x800) 6m42.594993262s ago: executing program 0 (id=2570): rseq$auto(&(0x7f0000000640)={0x0, 0x401, 0x0, 0x6, 0x54694660, 0x2}, 0x8000, 0x0, 0x27) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/loop8/queue/atomic_write_unit_max_bytes\x00', 0x400, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r2, &(0x7f00000001c0)="352c8efa618c0bcf83a4ebdb27ec25906b0e1015b18c429fc1d7c523728754e19b394a", 0x23) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) statmount$auto(0x0, &(0x7f0000000300)={0x7, 0x8, 0x1, 0x80000003, 0x2, 0x4, 0xff, 0xbad, 0xd0, 0xae0000000000, 0x8001, 0x1e2b, 0x8, 0x7fff, 0x9, 0x46c8ace, 0x80000001, 0x400000, 0x3ff, 0xb128, 0xc2a, 0x2, 0xbf64, 0x4, 0x7, 0x4, 0x9, 0x20000008, 0x8005, 0x1, 0x2009, [0x101, 0x8, 0x3, 0x1, 0x10000000007, 0x40000000000000e, 0x2000000000003, 0x6, 0xe, 0xffffffffffffa7de, 0x2000000000000000, 0x4a14, 0x4b, 0x5, 0x9, 0x8, 0xffffffffffffff97, 0xf5, 0xa1a4, 0xcf, 0x7fffffffffffffff, 0xffffffffffffff40, 0x2, 0x1a, 0x8001000000000000, 0x3ff, 0x9, 0xe, 0x3c, 0x9, 0x4, 0xfffffffffffefff8, 0x4, 0x3, 0x9, 0x3, 0x7fffffff, 0x100, 0x142, 0x8e29, 0x2, 0x7, 0x7]}, 0x2000000000000002, 0xef) ioctl$auto(0x3, 0xae41, r0) ioctl$auto_KVM_GET_MSRS(r0, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) 6m42.394470866s ago: executing program 0 (id=2572): clock_gettime$auto(0x9, &(0x7f0000000000)={0x7, 0xb}) (async) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x68082, 0x0) mmap$auto(0xff, 0x20009, 0x7ffb, 0x10, r0, 0x8000) mprotect$auto(0x1000, 0x401000, 0x4) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) (async) move_pages$auto(0x0, 0x4, 0x0, 0x0, 0x0, 0x400000) (async) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) read$auto(r1, &(0x7f00000000c0)=',\x00', 0x3) (async) r2 = wait4$auto(0x0, &(0x7f0000000180)=0x3, 0x401, &(0x7f00000001c0)={{0x10000, 0x800}, {0x4, 0x6}, 0x6, 0x7, 0x3, 0x7, 0x4, 0x2, 0x3, 0x1, 0x7ff, 0x7, 0x7, 0x1, 0x4, 0x3}) ptrace$auto_PTRACE_CONT(0x7, r2, 0x401, 0x8) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_SNDCTL_TMR_CONTINUE(r4, 0x5419, &(0x7f0000000040)) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001400)='/sys/devices/system/node/node1/compact\x00', 0xca583, 0x0) writev$auto(r5, &(0x7f0000000080)={0x0, 0x1000}, 0x3) (async) setsockopt$auto_SO_TIMESTAMP_NEW(0xffffffffffffffff, 0x7f, 0x3f, &(0x7f0000001440)=']\x00', 0x1ff) syz_genetlink_get_family_id$auto_smbd_genl(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x3000f, 0xc, 0x4000eb1, 0x401, 0x10000) (async) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) io_uring_setup$auto(0x1, 0x0) (async) ioctl$auto_TIOCSETD2(r6, 0x5423, 0x0) 6m41.563178503s ago: executing program 0 (id=2573): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0x0, 0xffffffffffffffff, 0x3fda, 0x3, 0x7fffffffb000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4004) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x9}, 0x3) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x15, 0x5, 0x0) r1 = io_uring_setup$auto(0x1, 0x0) r2 = socket(0x2d, 0x2, 0x0) ioctl$auto(r2, 0x89e0, r1) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/timestamp_mode\x00', 0x0, 0x0) write$auto(r3, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePbU\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/cpu0/cache/index3/type\x00', 0x22100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000080)=""/247, 0xf7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) write$auto_tomoyo_operations_securityfs_if(0xffffffffffffffff, &(0x7f0000000440)="0a1bab5c30595644f93bb154d7886d8ec5eacee8d3371cadb82b2606381300770dc8f745b5c76eedaa0ec76b0a8b", 0x2e) pread64$auto(0xffffffffffffffff, 0x0, 0x100000002, 0x100000001) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) io_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) 6m40.594311896s ago: executing program 0 (id=2577): r0 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/dummy0/ifalias\x00', 0x8041, 0x0) setreuid$auto(0x3, 0x7) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xda, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x23, 0x80805, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x120) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x1aa, 0x0, 0x6, 0x0, 0x0, 0x1002}, 0x5}, 0x2, 0x100) bpf$auto(0xf7fff011, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x4, 0xfaae, 0x468, 0x9, 0x2, 0x8, 0x3, 0x4, 0x1ff, 0x5, 0xb5, 0x4, 0x806, 0xd9ee}, 0xa3) writev$auto(0xca, &(0x7f0000000080)={0x0, 0x1}, 0x200) setsockopt$auto(0x3, 0x6, 0x3, 0x0, 0xd) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0x1, 0x29f, 0x2, 0x83, 0x4, 0x17f, 0x2}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}}) shmctl$auto(0x7, 0x10001, &(0x7f0000000340)={{0x4, 0x0, 0xee00, 0x4, 0x7fffffff, 0x4, 0x5}, 0x54b3, 0x10002, 0xc817, 0x5, @raw=0x422d, @inferred, 0x6, 0x0, &(0x7f00000003c0)="e07f604fb1cf8762afa30ee3bd6bb4e481b96c6a89ca300bfb386a40e10ecd0196e4592c13fc5a81b81142abd51d97411931f3e5f54206d7b117ff1829deb23d35e22b6c9e5d3b8d9a752548b752b1720409d088680e4bf8bce305d90c969d8e26f6a0fe798cab4b816edd4c521f2c9b5a0cb53aa3ec01bf3bfc4780bea94b5c475601535c0fdb3fbb709bf2e669b6221e419c7faf9aa4682e358d888a99794dfe46bfe6af0815666b25b0c57b0ff8c61d481a29dda5c1588bd1bf3ce99c191683aedff32d8c189dd2be9bf68c6395dcb935c658c528629d0a60394b35912231cde30c0cce947326e96a0268aabc7f5ad84a83bbddf3", &(0x7f0000000100)="49b90908c5bd"}) setuid$auto(r3) io_uring_setup$auto(0xd364, &(0x7f0000000140)={0x400, 0x10002, 0x7f, 0x7, 0x6, 0x5, r2, [], {0x2, 0x4, 0x6, 0x2, 0x40, 0x4, 0x7, 0x7, 0x80000000}, {0x7, 0x1ff, 0x80000001, 0x8, 0x6b, 0x9, 0x0, 0xfffffffa, 0xb1}}) write$auto(r1, &(0x7f0000000500)='%[\x05\x00`T\n&\xc1\x1e\xae\xb8\xd7\x95\x17\xa3\x7f\xa31T\x9fQG0\xe8\xd1\xd7m\xafF\x04\"h\xe6\x10\f)\x7f\x83\xcc\xb4\xa4:R\f\xe7\xe6\xb1I\x03\x9a\xca\x8f\x8c\xbb\xe1*\x9d\x11\x9a\x04F9\"\xe3\xc2\x0f\xc5\xcf\x0f\xb1,w\xfe\x06h\xff\x03\xfd\xffE\x8b}\xa2\xb9g\xa3\xbe|l3\xda\x9bzl\x8c\x8b\xce\x12*=`\x11\xef2\xf3 \xec\xbe:h\x9e\xc8\xf1\x15\xfa\x90\x9d\xeec\xbf\xf9\xf2\xcc\xf5\xa3F\xc2', 0x7) socket(0xa, 0x3, 0x0) brk$auto(0x3) mmap$auto(0x0, 0x2000a, 0x5, 0xeb1, 0x401, 0x8000) r4 = socket(0x1d, 0x2, 0x7) getsockopt$auto(r4, 0x6b, 0x4, 0xfffffffffffffffe, 0x0) landlock_restrict_self$auto(r0, 0xb) 6m39.977878487s ago: executing program 0 (id=2578): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) (async) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) (async, rerun: 32) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) (rerun: 32) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') (async) open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x5, 0x3, 0x3fda, 0x8, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 64) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x28200, 0x0) (rerun: 64) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000001c0)=""/234, 0xea) (async, rerun: 32) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time\x00') (async) socket(0x2, 0x3, 0xa) (async) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (rerun: 32) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2543, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x40000, 0x0) msgctl$auto_IPC_INFO(0x8, 0x3, 0x0) (async) ioctl$auto(r2, 0x560a, r2) (async) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000100)=""/184, 0xb8) (async) madvise$auto(0x0, 0x200007, 0x19) (async) close_range$auto(0x2, 0x8, 0x0) 6m24.02065227s ago: executing program 33 (id=2578): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) (async) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) (async, rerun: 32) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) (rerun: 32) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') (async) open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x5, 0x3, 0x3fda, 0x8, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 64) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x28200, 0x0) (rerun: 64) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000001c0)=""/234, 0xea) (async, rerun: 32) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time\x00') (async) socket(0x2, 0x3, 0xa) (async) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (rerun: 32) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2543, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x40000, 0x0) msgctl$auto_IPC_INFO(0x8, 0x3, 0x0) (async) ioctl$auto(r2, 0x560a, r2) (async) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000100)=""/184, 0xb8) (async) madvise$auto(0x0, 0x200007, 0x19) (async) close_range$auto(0x2, 0x8, 0x0) 2m28.528869705s ago: executing program 1 (id=3344): timer_create$auto_CLOCK_TAI(0xb, 0x0, &(0x7f0000000200)=0xfb) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socketpair$auto(0x8, 0x0, 0x2000, 0x0) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x1, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0x9, 0x0, &(0x7f0000000000)=0x9b) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_ecryptfs_dir_fops_ecryptfs_kernel(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci4\x00', 0x101000, 0x0) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) ioctl$auto_SNDRV_PCM_IOCTL_RESUME(r0, 0x4147, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x2000000000003, 0xeb1, r3, 0x8000) io_uring_setup$auto(0x6, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r4 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x0, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x400) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r5, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xedKW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1\x1f\xf7uw\a\xd0\x83{_>/\xff', 0x100000001) ioctl$auto_FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000080)) ioctl$auto_SOUND_MIXER_READ_DEVMASK2(r4, 0x4604, 0x0) bpf$auto_BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=@enable_stats={0x100000}, 0x8) 2m27.429577652s ago: executing program 1 (id=3347): mmap$auto(0x0, 0x20009, 0xffff, 0x40000000000eb1, 0xffffffffffffffff, 0x8002) setsockopt$auto_SO_TIMESTAMPING_NEW(0xffffffffffffffff, 0x6, 0x41, &(0x7f0000000080)='\x14-)\x00', 0xffffbd0c) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x80000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x34, r3, 0x1, 0x70bd2b, 0x25dddbfd, {}, [@OVS_VPORT_ATTR_UPCALL_STATS={0x4}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0xe00}, @OVS_VPORT_ATTR_NAME={0x8, 0x3, '})[\x00'}, @OVS_VPORT_ATTR_UPCALL_PID={0x4}, @OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x44040}, 0xc0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wg2\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2f212cbd7000fcdbdf252100000008000300", @ANYRES32=r6, @ANYBLOB="10002c8008"], 0x2c}}, 0x4000000) sendmsg$auto_OVS_VPORT_CMD_GET(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x188, r3, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x5}, @OVS_VPORT_ATTR_UPCALL_PID={0x79, 0x5, "7a12bca8d870319273a6f57b216a365ce682207b0efbde24d8b4e35cf1bdfdcb4757367890b6a27739454f6396e629dc40b838ac641a5ea755223b023a5afebd173da588c5270bbbe79a24b1d1d5e41696eebe648048de2c08edf99531ea18401787506fa01747b0822a0fb2d761537f036cc825d3"}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x8001}, @OVS_VPORT_ATTR_NAME={0x5, 0x3, '\x00'}, @OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0x5}, @OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0x3}, @OVS_VPORT_ATTR_UPCALL_PID={0xba, 0x5, "c573d569af0ff8fd4cc4c543a82889bf68046d9a4a60f0ac0130b59a4be231484a2c2fc926514e70249b966e4aff359fad85f404e535dd23b94cc685887f46b071882e88872e5441664d48561858f8e5dca4478f3bacd76cdc34736322a0a8bfaecc52428763b4be8dd1251714b3aee9a9ac674aede6b3092f52fdde5b10f4b98e2ed6ffea0e0616ba76ff6b3b144ca00988f1beb9900a6a4e20d97fc1938a819b4b7af9cde8f00239c0b30ff74d6ab3c0f870d9a2b9"}, @OVS_VPORT_ATTR_UPCALL_STATS={0xc, 0xa, 0x0, 0x1, [@typed={0x8, 0x15b, 0x0, 0x0, @fd=r1}]}, @OVS_VPORT_ATTR_IFINDEX={0x8, 0x8, r6}]}, 0x188}, 0x1, 0x0, 0x0, 0x40000}, 0x10) close_range$auto(0x2, 0xa, 0x3) r7 = io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x128008, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) add_key$auto(&(0x7f0000000040)='[\xb7^:{\x92#,[*\x00', 0xfffffffffffffffe, 0x0, 0x0, 0xffffffff) io_submit$auto(0xe5, 0x7, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r8 = epoll_create$auto(0x70c) epoll_ctl$auto(r8, 0x1, r0, 0x0) r9 = syz_genetlink_get_family_id$auto_batadv(&(0x7f00000003c0), r8) sendmsg$auto_BATADV_CMD_GET_HARDIF(r7, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r9, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_FLAG_BEST={0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0xde2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x40006) 2m26.802503223s ago: executing program 1 (id=3350): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer1\x00', 0x180, 0x0) ioctl$auto_OSS_ALSAEMULVER(r3, 0x40086602, &(0x7f0000000100)) (async) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async, rerun: 64) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE_OLD2(r3, 0xc1004110, &(0x7f0000000280)={0x3, [0x0, 0x9, 0x1000], [{0x6, 0x80, 0x0, 0x0, 0x1, 0x1}, {0x6, 0x812e, 0x0, 0x1, 0x1, 0x1}, {0x0, 0x7, 0x1, 0x1, 0x1}, {0x982b, 0x3800, 0x0, 0x1, 0x1}, {0x8, 0xffffb1db, 0x0, 0x0, 0x1}, {0x3, 0x5, 0x0, 0x1, 0x1}, {0xc, 0x1000, 0x1, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x1, 0x0, 0x0, 0x1}, {0x10, 0x0, 0x0, 0x1, 0x0, 0x1}, {0xfffffffa, 0xe, 0x1, 0x0, 0x1, 0x1}, {0x49ed, 0x8000, 0x1, 0x1, 0x0, 0x1}, {0x9, 0xe00, 0x1, 0x1, 0x1}], 0x80, 0x8, 0x400, 0xfffffffc, 0x8, 0x40000000, 0x8, "9eb9a86fbb136b6d2d2ccbe595e83c362cdcad621638b3fb3335881cf4e4ecad73880c810adb29345c7aeb141ad7e6dcf829db714ae64028ccd5a29e69370a04"}) (rerun: 64) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$auto_TIOCNOTTY(r2, 0x5422, &(0x7f0000000180)="53be3194056301f2a57cfff35f05a55f5fdf2b00dd77d80a153593477a8ca07d0bf424004af3830e2b6cc3ad79b827c4ff0840094e3836a24efb3ac62359bb77003b158ce711dfbb32433d6abf07c0424b92ff1b0b52c7d5d1874325c7f2") (async) keyctl$auto_KEYCTL_SETPERM(0x5, 0xa, 0x4, 0x4, 0xe) (async) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000200)='5', 0x1) syz_genetlink_get_family_id$auto_nl80211(0x0, r4) (async) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) (async) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) (async) mbind$auto(0xffffffffffffff00, 0xff, 0x9, &(0x7f0000000040)=0x100, 0x0, 0x7) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x8001, 0x0) (async) epoll_create$auto(0x6) (async) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) (async) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) (async) r6 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x242000, 0x0) read$auto_proc_pid_smaps_operations_internal(r6, 0x0, 0x0) 2m24.881013488s ago: executing program 1 (id=3354): mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) statx$auto(r1, 0x0, 0x401006, 0x4015, 0x0) process_madvise$auto_MADV_UNMERGEABLE(r1, &(0x7f0000000200)={&(0x7f00000001c0)="ae752ad5a55585b6ebea5296ffbff171c2845b62301e099c971c2eb8638c5aac85e85631", 0x3}, 0x1, 0xd, 0x960) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x2a, 0x2, 0x1) connect$auto(r2, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x3, 0xfffffffe}, 0x52) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE={0x4}, @HWSIM_ATTR_USE_CHANCTX={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf957b92badea2c8b}, 0x4040010) socket(0xa, 0x801, 0x84) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0x4048aec9, r5) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x0, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000001080)="7a47301037954c081c9a0bb04ef84993eab91abe1686f43e43d786e91365f04455bd620de9f3fb6d25e6c078c1a672c549dbc7876cb528ba081a81d884bfc00dd4eef57cedc0cc3756ff6a5b0aa8ba9511fe2b07c6e7f4732fe36ba259b12a0db9acf178c9182899f8360960a04ab85d23de405dad1c35058e30a98cc936ec82e442659cbfa3d11ff0a4e108dcfd7cec18e4f0c89ece6879d06808e003d602efa44c84360582e36aac42dab90d72") read$auto(r7, 0x0, 0x1f40) r8 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r8, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) 2m23.969193145s ago: executing program 1 (id=3358): close_range$auto(0x2, 0x8, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async) mmap$auto(0x9, 0x810004, 0xffb, 0x14, 0x3, 0x9000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) (async) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) (async) ioctl$auto(0xffffffffffffffff, 0xab03, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_smc_pnetid(0x0, 0xffffffffffffffff) (async) write$auto(0xffffffffffffffff, 0x0, 0x100000a3da) (async) ioctl$auto_CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) (async) madvise$auto(0x6, 0xeff, 0x15) (async) writev$auto(0xffffffffffffffff, 0x0, 0x7ff) (async) sendfile$auto(0x1, 0x3, 0x0, 0x400000) 2m23.608498913s ago: executing program 1 (id=3362): mmap$auto(0x0, 0x40000000000005, 0xfffffffffffffffe, 0x40eb2, 0x401, 0x300000000000) (async) mmap$auto(0x1, 0x5, 0x2, 0x40eb2, 0x401, 0xb) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x6, 0x7) (async) semop$auto(0x100, 0x0, 0x7) r0 = socket(0x10, 0x800, 0x7948) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) alarm$auto(0xe) (async) alarm$auto(0x49755df6) (async) write$auto(0x3, 0x0, 0x1) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000004bed7505428b649ded55f1a25e35fb75282c5d96c17e9338732349b5545fe82653bc42ab4219d4fa4325c29534248eff337f1d8a171df6c872e6fa92246cf275d5988648c23712b8bf32a12a341510da1c8c79768f592384d7540fb2212b8c0c57645873d90a9c1d985bd38d4018b2d706bcce27358cce3752b90fb444df6c1a31c8342aa62ff785ac13a315286caeb97e55d73cf11c026acded02072c8a394cf09b2e08500"/182, @ANYRES16=0x0, @ANYBLOB="01002abd7000fbdbdf251e000000"], 0x14}}, 0x2404c045) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ttyS1\x00', 0x201, 0x0) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x40100, 0x0) (async) socket(0x5, 0x800, 0x3f) (async) socket(0x11, 0x2, 0x300) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) close_range$auto(r1, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000180), 0x731482, 0x0) (async) r3 = socket(0x18, 0x800, 0xffffff81) (async) unshare$auto(0x40000080) (async) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/version\x00', 0x68801, 0x0) (async) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r5 = socket(0x10, 0x2, 0x4) (async) close_range$auto(0x2, r2, 0x5) (async) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r3, @ANYRES8=r4], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) write$auto(r5, &(0x7f0000000000)='-\x00', 0xfdef) (async) ioctl$auto(0xffffffffffffffff, 0xc0c0128e, 0xffffffffffffffff) shutdown$auto(0x200000003, 0x2) 2m8.076807907s ago: executing program 34 (id=3362): mmap$auto(0x0, 0x40000000000005, 0xfffffffffffffffe, 0x40eb2, 0x401, 0x300000000000) (async) mmap$auto(0x1, 0x5, 0x2, 0x40eb2, 0x401, 0xb) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x6, 0x7) (async) semop$auto(0x100, 0x0, 0x7) r0 = socket(0x10, 0x800, 0x7948) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) alarm$auto(0xe) (async) alarm$auto(0x49755df6) (async) write$auto(0x3, 0x0, 0x1) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000004bed7505428b649ded55f1a25e35fb75282c5d96c17e9338732349b5545fe82653bc42ab4219d4fa4325c29534248eff337f1d8a171df6c872e6fa92246cf275d5988648c23712b8bf32a12a341510da1c8c79768f592384d7540fb2212b8c0c57645873d90a9c1d985bd38d4018b2d706bcce27358cce3752b90fb444df6c1a31c8342aa62ff785ac13a315286caeb97e55d73cf11c026acded02072c8a394cf09b2e08500"/182, @ANYRES16=0x0, @ANYBLOB="01002abd7000fbdbdf251e000000"], 0x14}}, 0x2404c045) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ttyS1\x00', 0x201, 0x0) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x40100, 0x0) (async) socket(0x5, 0x800, 0x3f) (async) socket(0x11, 0x2, 0x300) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) close_range$auto(r1, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000180), 0x731482, 0x0) (async) r3 = socket(0x18, 0x800, 0xffffff81) (async) unshare$auto(0x40000080) (async) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/version\x00', 0x68801, 0x0) (async) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r5 = socket(0x10, 0x2, 0x4) (async) close_range$auto(0x2, r2, 0x5) (async) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r3, @ANYRES8=r4], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) write$auto(r5, &(0x7f0000000000)='-\x00', 0xfdef) (async) ioctl$auto(0xffffffffffffffff, 0xc0c0128e, 0xffffffffffffffff) shutdown$auto(0x200000003, 0x2) 12.425946126s ago: executing program 4 (id=3647): unshare$auto(0x40000080) unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000040), r0) sendmsg$auto_KSMBD_EVENT_RPC_REQUEST(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r1, 0x200, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0d5}, 0x4008000) shutdown$auto(r0, 0x8001) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8a241, 0x0) unshare$auto(0x0) bpf$auto(0x5, 0x0, 0x39) mmap$auto(0x8247, 0x2, 0xdb, 0x19, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/loop1/capability\x00', 0x22002, 0x0) writev$auto(r3, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x20000a, 0x4) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='T'], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x2, 0x400007, 0xdf, 0x9b72, r2, 0x0) r5 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000580)={0x80000006, 0x0, 0xd12b, 0xfffffffd, 0x200a}) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x17ffffffffffffc, 0x400000004) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) 11.764900489s ago: executing program 5 (id=3648): r0 = openat$auto_dai_list_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000040)={0x9, 0x10000, 0xffffffffffffd2e4, 0x8, 0x6, 0x6da, 0x1, 0x1, 0x6, 0x8, 0x4, 0x2, 0x80, 0x3, 0x200000000008, 0xdd2, 0x5, 0xe91, 0x6, 0x81, 0x0, 0x401}, 0x7fff, 0x80000001) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf25020000000800021d00020000080003"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) pread64$auto(r0, &(0x7f0000000040)='\x05\x1cw}\x9b\a|7{\xe0', 0x3, 0x7) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/system/machinecheck/machinecheck0/cmci_disabled\x00', 0x2062, 0x0) write$auto(r2, &(0x7f0000000440)='+\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x4, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x408c0}, 0x20000004) r4 = io_uring_setup$auto(0x7, 0x0) clock_nanosleep$auto(0x8, 0x1, 0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendfile$auto(r0, r4, &(0x7f0000000000)=0x6, 0x8) 10.937388224s ago: executing program 5 (id=3652): r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) 10.416604893s ago: executing program 5 (id=3654): mkdir$auto(&(0x7f0000000500)='./file0\x00', 0x6) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) lsetxattr$auto(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000280)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2f\'\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\x96\xa3\xc0\xf29\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\xb1N\t\x911@9B\xd8\xb7#\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xa1Yi\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\x12\x8d\x84K\xf0\xd0\x0f\x13)\x17CI\xb7\xf35\xfc\xe8(\xfa\t3\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x86#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=', 0x0, 0x2, 0x0) r0 = openat$auto_fops_u32_(0xffffffffffffff9c, 0x0, 0x3a480, 0x0) fallocate$auto(r0, 0x9, 0x1, 0x8000000000000001) 9.755750249s ago: executing program 4 (id=3655): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, 0x0) (async) r1 = io_uring_setup$auto(0x59, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) capget$auto(&(0x7f0000000080)={0x5, 0xffffffffffffffff}, &(0x7f00000001c0)={0x60, 0x0, 0x401}) getpgid(r3) mmap$auto(0x0, 0x9, 0x8, 0x100000eb1, r2, 0x0) (async) mmap$auto(0x0, 0x9, 0x8, 0x100000eb1, r2, 0x0) close_range$auto(0x0, 0xffffeffe, 0x2) pipe$auto(0x0) (async) pipe$auto(0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x7, 0xfffffffc) (async) socket(0x2a, 0x7, 0xfffffffc) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/v4l-subdev3\x00', 0x80000, 0x0) ioctl$auto(r5, 0xc0305602, r5) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/profile\x00', 0x40802, 0x0) read$auto(r1, 0x0, 0xfff00000) (async) read$auto(r1, 0x0, 0xfff00000) ioctl$auto(0x3, 0x402c542b, 0x38) ioctl$auto_TIOCSTI2(r2, 0x5412, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r6 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) io_uring_setup$auto(0x6, 0x0) futex_waitv$auto(&(0x7f0000000000)={0x0, 0x7e4, 0x2}, 0x1, 0x0, 0x0, 0x623d) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendfile$auto(r6, r4, 0x0, 0x6) connect$auto(0x3, 0x0, 0x55) close_range$auto(0xffffffffffffffff, r4, 0x7) (async) close_range$auto(0xffffffffffffffff, r4, 0x7) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) finit_module$auto(r6, &(0x7f00000000c0)='HSR\x00\b\xb3\xf4E\x88n\xf4\x1a\n\x91{\x15\x8e\x1b\x9a\x88jW_', 0x51) syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000180), r0) (async) syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000180), r0) 9.016892375s ago: executing program 3 (id=3657): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x16, 0xfffffffffffffffa, 0x7f) (async) ioctl$auto_SNDCTL_DSP_STEREO(r0, 0xc0045003, 0x0) 8.832444305s ago: executing program 3 (id=3658): mkdir$auto(&(0x7f0000000500)='./file0\x00', 0x6) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) lsetxattr$auto(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000280)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\x96\xa3\xc0\xf29\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\xb1N\t\x911@9B\xd8\xb7#\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xa1Yi\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\x12\x8d\x84K\xf0\xd0\x0f\x13)\x17CI\xb7\xf35\xfc\xe8(\xfa\t3\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x86#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=', 0x0, 0x2, 0x0) (fail_nth: 6) r0 = openat$auto_fops_u32_(0xffffffffffffff9c, 0x0, 0x3a480, 0x0) fallocate$auto(r0, 0x9, 0x1, 0x8000000000000001) 8.70718302s ago: executing program 4 (id=3659): rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x10001, 0x2}, 0x20, 0x0, 0x8000006) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) inotify_init1$auto(0x3000000000000) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x801, 0x84) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000500)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) 8.465804763s ago: executing program 4 (id=3660): mmap$auto(0x8000000, 0x1, 0xfffffffffffffffe, 0x16, 0xffffffffffffffff, 0x5) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYRES64=0x0], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) mmap$auto(0x8000000000000000, 0x1, 0x1, 0x4000000000000eb1, 0xffffffffffffffff, 0x5) rseq$auto(&(0x7f0000000300)={0xe, 0x0, 0x4, 0x3, 0xffffbfff, 0x6}, 0x8002, 0xffffffff, 0xfffffffb) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/devices/virtual/block/nbd4/queue/iostats_passthrough\x00', 0xc2902, 0x0) setreuid$auto(0xee01, 0x0) keyctl$auto(0x4, 0xfffff7ffffffffff, 0x0, 0x0, 0x9) read$auto(r1, 0x0, 0x20) mmap$auto(0x2, 0x80000002, 0x3, 0x15, 0xfffffffffffffffa, 0x80000000001ff) r2 = socketpair$auto(0xba6, 0x6, 0x1, 0x0) madvise$auto(0xe, 0x7, 0xa) prctl$auto(0x3a, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x40000080) unshare$auto(0x40000080) clone$auto(0x18, 0x100000000000005, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffff8000) socket(0x1, 0x800, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) semtimedop$auto(0x8000000b, 0x0, 0x3, 0x0) rseq$auto(&(0x7f0000000440)={0xd, 0x1d, 0x0, 0x20000006, 0xd, 0x0, "5ef44b7a24f21df2fbbe5c05e3a551ed1364ec3964912d8c4bc8e6804b9f968576bf341b944472477e09b5d0ac019359ed735932ea796496e599d2f9a9416ed3ad23d18783190421a8b1cf5f8e6c6952ed2448f1dc17669f567c37327fe7173834536d"}, 0x6dbd, 0x0, 0x162) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/vhci_hcd.12/usb33/33-0:1.0/bInterfaceProtocol\x00', 0x8a801, 0x0) write$auto(r3, &(0x7f0000000000)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) io_uring_register$auto_IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000000040)="bb6d0a927ee9ae0dd215f77140a6f0148af174f1336d7b", 0xfffffff8) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000080), 0x391c40, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_ENABLE(r2, 0x40095505, 0x0) clone$auto(0x9673, 0xfffffffffffffff9, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/ram0/queue/nomerges\x00', 0xe3102, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) 8.286773452s ago: executing program 5 (id=3661): mmap$auto(0x0, 0x6, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0x9}, 0xf}, 0xd, 0xffffffff) r0 = socket(0xf, 0x2, 0xfffffffc) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r0, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20044004}, 0x20008810) mmap$auto(0x0, 0x20009, 0x9, 0xeb1, 0x401, 0x3208) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="f08fffe50000bceb377ef27bedc8f146883d3000000000000000000000003eb2cb9057da306325ead33dd9ac42d1c5085bfbe4567a23e515d153aa1a8e47af012aa474b78657aaaa9322b17846dc9d69fb6cf3a495d0a02d9faa6a3fa718a687788fb640e0399f09609f919f4147ff09879ceb9308dfd6508acfbd461aaa6cd30d01438dcceaf884be2fc3441a569558f8c336a15e6f9d85e595cc35564cdd30987a276f0f970d032d8b88cd48ef9e12a49452611b56ba90db20b32ac04925"], 0x1ac}, 0x1, 0x0, 0x0, 0x40044088}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYRES64, @ANYRES64, @ANYRES16, @ANYRESOCT, @ANYRESHEX, @ANYRES16, @ANYRESHEX], 0x1ac}, 0x1, 0x0, 0x0, 0x4004041}, 0x0) sendmmsg$auto(r0, &(0x7f0000000000)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x83, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0xa, 0x0) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0x40383d0c, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socketpair$auto(0x1e, 0x2000004, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x200000, 0x2020009, 0x3, 0xebe, r2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x80, 0x17) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram10\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r3, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/loop13/queue/max_sectors_kb\x00', 0x109206, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$auto(0x3, 0x40605346, 0x38) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000240), 0x101200, 0x0) close_range$auto(0x2, 0x8, 0x0) 8.220792075s ago: executing program 6 (id=3662): r0 = socket(0x6, 0x80000, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r1 = memfd_create$auto(0x0, 0xe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r2 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000340), r1) shmctl$auto(0xdc, 0x9, &(0x7f0000000500)={{0x0, 0xee01, 0xee00, 0xe9, 0x5e, 0x5, 0xb}, 0xc875, 0x1, 0xd, 0x19, @raw=0x5a5, @raw=0x1, 0x4, 0x0, &(0x7f0000000380)="fb0dd5a69e5294bcfcb5268258e9c204419562fc664c6b13f68ef96f4f410a9f49daf36232c73946aa2aed28423e1a533d445cee6509983d6d6e964566d22c5c251bebf69abcdec3ebf675f80eb27234c54a57f3742cd56fdce135dcd6fada864c5e860d1673c2ba18acf02d44b6aa592f30f4a1b4cf94b9688ea0431cfa9bbb84b4dcc7f896db4e051cdf719c65d02f00b820bec2e8c377538daf4072fc924ff441ca9db76cf62b5134fc319cd50709", &(0x7f0000000440)="0b4a4f53cf2325c26f80c6c2c10f6c1d069d7179ed53ad367ac967940b60a1641337b30fcf30594ca8a8cb9f9cd6ee5f425e7e93c0bfe45b8f0fc4ea08fb7f58d1b8702114c3ec155f1f20c0a0c5c47f8e06f0c07f7c27e69dc1a578cba924c25fee89f342121b21a8bcace393298ee9a0a0449ff036d731952c09b4c4aae90f024fa2802e250f3330ff08d593df80a2e3"}) sendmsg$auto_MAC802154_HWSIM_CMD_GET_RADIO(r1, &(0x7f0000000b80)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000600)={0x398, r2, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@MAC802154_HWSIM_ATTR_RADIO_EDGES={0x206, 0x3, 0x0, 0x1, [@typed={0x8, 0x6f, 0x0, 0x0, @u32=0x1}, @generic="5b27ca31014d4d17ebc3c24c830061a27aff51d5e3a1521a62aa650b26009779b958e1053ca15101e87a6877d7427782801820e6ede9bc5f82480a771ec260b7b6bd8775c9431f256d16fa7b4d7a5f69143e86e13e10cb6088429bb0737e13fb2d1e046c4fecec43c6864285bdc990d87326", @nested={0x118, 0x9a, 0x0, 0x1, [@nested={0x4, 0x56}, @generic="63635fd79642c18a635555bbb4e447aadeea0872d625df4757daf8fcb2f43540ba1cac33488b4a9a9de60d8c2857b9db8090fcb7812bd3a891317355f51e1a4f7f02725cefdc7e8a40aa47eb3af5bb156c764b1517", @nested={0x4, 0x155}, @generic="11f44ecef2128fc9f9aefbc25312b2e8e18c485647ef38288ae34fc872a12b718b3cf4662ff9d80ed319b227255d1baa74c75218e354ef7d5f24f396298baa6689a70a3e4739a3cac33b0732996582a04ac5285b3f4e66ebc8880612e09355c42d659edc3d537f9e839458edb22dfbab332b9f00bed95a620c20ad84b7dd41fde8430d6a65d6553df787d5d992c8076271e21aa75358c16d8da5f933a2357ae3a537a7812274294f71d84fd7b10faabb82e15c35fc84db"]}, @nested={0x28, 0xab, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0x9}, @nested={0x4, 0xad}, @typed={0x14, 0xb3, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, @typed={0x8, 0x7a, 0x0, 0x0, @ipv4=@remote}, @nested={0xc, 0x43, 0x0, 0x1, [@typed={0x8, 0x2c, 0x0, 0x0, @uid=r3}]}, @nested={0x32, 0x158, 0x0, 0x1, [@typed={0x14, 0xb9, 0x0, 0x0, @ipv6=@remote}, @nested={0x4, 0xf8}, @generic="6f9e013df72e782e606f343047be", @nested={0x4, 0x33}, @typed={0x4, 0xa1}]}]}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0xb6, 0x3, 0x0, 0x1, [@generic="078bc50d4827e2d8b76969dc67953b7e60fe8e309c55bf46f37a6a6c2ce14042379e9c7ae085e2efc324117b05bcaaaf332aa8b2472304ca25eb74f4f59123be9ea118cf21022eb068a95904888ee74c5255f17ac8471ebd9d023a77d41916416d332116f3143e52b8181d5c1e6fd33de14dd7b05eab5733c13cdbe0bc81ef0253b4304e96eef0618aa32f407147cbbffe1d1e7520d13a8a9dca24a26d821c528f344b38342b3de26034", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}]}, @MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0xff}, @MAC802154_HWSIM_ATTR_RADIO_EDGE={0x4}, @MAC802154_HWSIM_ATTR_RADIO_EDGE={0xb8, 0x2, 0x0, 0x1, [@typed={0xc, 0x9b, 0x0, 0x0, @u64=0xe}, @nested={0xa6, 0x14, 0x0, 0x1, [@typed={0x14, 0x37, 0x0, 0x0, @ipv6=@remote}, @nested={0x4, 0xa2}, @nested={0x4, 0x15c}, @generic="89f68d5acc90640e52b29a9926a1be9655ecab356c0e2bf1bc87ea6a315625ca13dad566f45d35f69ed828c512712ffca9712e4c7d98f94bf3fef819e8a8f819ecd1b2f4d44ff66faa0667d2aa9d22520f1d7c9f175c535599dadc4270ad0bfe7c740ff9069e75b89d93c6f182e89cc55a4da310f90ca45973924e66700e85f42af3dba94bcc"]}]}]}, 0x398}, 0x1, 0x0, 0x0, 0x4008880}, 0x1) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(r0, &(0x7f0000001540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2001}, 0xc, &(0x7f0000001500)={&(0x7f0000000240)={0x1298, r2, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@MAC802154_HWSIM_ATTR_RADIO_EDGES={0x127c, 0x3, 0x0, 0x1, [@nested={0x153, 0xe2, 0x0, 0x1, [@generic="2b8ad51bb68c18dfa4210ab28c82eb3bd85d6060ba17510ef270a7e7ebc4bea0d4b822c1cac8edf39929a2372f760863b36b7ea345802ae30fbc92c5c696c9b3c63696f879c71d1f179158be305e8341c233cf4ce0fa475606e05df42f0257254157cd7d63f59fd11f23092920077d5ef26c08feb5a60c24025c2f942ff3edb4d4ca3ba9bc550e04a3b84e88f089358ef1b214afcb363c90dee72eb9e7076ac9d5119e4dbd40c71c801ac75ce4db6dd7c0b38010cab561d38c6fc5a4fa4d813c57db790c9d407eadeaa284da2078ef16eb3dfea66babba8f78c2013cd11ad4dfb3151876e04411d9ca4e75cefe020fdc86007ac1a84c1e9c", @nested={0x4, 0x8a}, @nested={0x4, 0x5b}, @nested={0x4, 0x3e}, @typed={0x8, 0xde, 0x0, 0x0, @pid}, @generic="bbc6bd36e1bbdaf71a340c0111c656a8b554ae9295ce5204648d29668d1113e67572788a2e11af0cf2b956d284eb37f5daa2b8f2a281ecaf03567a8dd5d4a7", @typed={0x4, 0x53}]}, @typed={0x35, 0x8d, 0x0, 0x0, @str='/sys/devices/virtual/block/nbd3/queue/io_timeout\x00'}, @nested={0x10ec, 0xa4, 0x0, 0x1, [@nested={0x4, 0x128}, @nested={0x4, 0x151}, @nested={0x4, 0x134}, @generic="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", @generic="491be9e88ecfaf937d8a0fccae421b80d9382b06751031f97d8b6367a7a98c9d4c105a5b191e8569aae23914386e675d843f47a862628b3740e8ffb5e20f5bd24a955f9ddadb7257f05152e2607022dddfe1ea4adfc51e1805c89cba3e5395aef467a900b7a7379db75f7073502185f0cff5c8d1ec7969db9a2e754562eb3666061fcfbf9b3934a90aeea3d7a1a20fc743511935524cea027ff96ae4df4617168f7e5c455f38da29360dc169138830d4c82380d55264bab7dbb2c60753e31d3f9ba717bf8573a8451ed7675f35a27315ef6837f50d3dbcdb1d495b2a"]}]}, @MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0xb}]}, 0x1298}, 0x1, 0x0, 0x0, 0x4000000}, 0xc090) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r0) sendmsg$auto_NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000001600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x24, r4, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_ASSOC_MLD_EXT_CAPA_OPS={0x6, 0x151, 0x7}, @NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0xffffff81}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) socket(0x3, 0x2, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) shutdown$auto(0x200000003, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00'}) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) shutdown$auto(r5, 0xda6) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) r6 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x1, 0x9, 0x7, 0x3b, 0x3ff, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb2, 0x9, 0x3, 0x40fffc, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0x0, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, [0x1000000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7]}, 0x202, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) 7.306832352s ago: executing program 3 (id=3663): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x4) unshare$auto(0x40000080) unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000017c0), r0) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001800)={0x14, r1, 0x301, 0x70bd26, 0x25dfdbff}, 0x14}}, 0x4008010) r2 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x121102, 0x0) read$auto_vhci_fops_hci_vhci(r2, &(0x7f0000000d40)=""/16, 0x10) madvise$auto(0x0, 0xffffffffffff0005, 0x17) read$auto(0xffffffffffffffff, 0x0, 0x9a28) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) process_madvise$auto_MADV_DOFORK(0xffffffffffffffff, 0x0, 0x0, 0xb, 0x9) unshare$auto(0x6c000000) syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, 0x0, 0x800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r3, 0x8000) r4 = socket(0x10, 0x2, 0x0) times$auto(0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r4) sendmsg$auto_NL80211_CMD_VENDOR(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x114, r5, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x5}, @NL80211_ATTR_QOS_MAP={0xd2, 0xc7, "85389256e69f046e4f3401b6f1dd8be96f3b51ef84d52682939f0648c6eb1c93a1be872cadb142e9fbe7b0b6482f1aa2d5f2a1e8e527b3753bd7bb97fb7615331de28bad6c684f35a258e3faf1fd19e075552a342de6954629b6711cd90b4a8273345064c29d477afbbeec361b01c073afbcad475c037a83bd70d3cc90ae16e40b32794a4942abbb4cdfeb5b81f36922666b549a32ec7b856a0d667a0ab5567615bc88f4e7fc06e4637148510bcee6e88a8296471fbaca9848489b79a9e69009fe75b51f0c47a9313b32de082e3b"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ec2012dfbff225124e53b0a2015ba38a0eda2e3d8d6ce038"}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x114}, 0x1, 0x0, 0x0, 0x80}, 0x40044) mmap$auto(0x0, 0x400008, 0x2, 0x9b72, 0x2, 0x8000000000008000) 6.574719817s ago: executing program 6 (id=3664): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/node/node0/hugepages/hugepages-1048576kB/demote\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000000)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x8) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) r1 = open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) ioctl$auto_UI_SET_RELBIT(r1, 0x40045566, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0x18000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0xffffffffffffffff, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mlockall$auto(0x7) 5.930716726s ago: executing program 6 (id=3665): getsockopt$auto_SO_PROTOCOL(0xffffffffffffffff, 0xb29, 0x26, &(0x7f0000000100)='[(][+/:$!.\x00', 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/sctp/udp_port\x00', 0x202, 0x0) sendfile$auto(r0, r0, 0x0, 0x7fffe000) writev$auto(0x8000, &(0x7f0000000040)={0x0, 0x1000000000004}, 0x2bc) r1 = io_uring_setup$auto(0x6, 0x0) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), r1) sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0xc1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0011) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) kexec_load$auto(0x100000000000000, 0x0, 0x0, 0xffffffff) ioctl$auto_SNDCTL_SEQ_THRESHOLD(r1, 0x4004510d, &(0x7f0000000500)) close_range$auto(0x2, r1, 0x0) r3 = open(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0) getdents$auto(r3, 0x0, 0x5f) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000140), r3) sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r4, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x6}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x9f}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0xed24}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x1) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x2, 0x0) mknod$auto(&(0x7f0000000100)='./file0\x00', 0x1001, 0x4) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0xa3) open$dir(&(0x7f0000000500)='./file0\x00', 0x40a01, 0x14) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000003c0)=""/231, 0xe7) sendfile$auto(r5, r5, &(0x7f00000000c0)=0x1, 0xc9) fcntl$auto(0x8000000000000001, 0x25, 0x8) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) r7 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/input/event1\x00', 0x2080, 0x0) ioctl$auto_EVIOCSCLOCKID(r7, 0x400445a0, &(0x7f0000000000)=0x1) mmap$auto(0x0, 0x8, 0xffa, 0x8000000008011, r6, 0x4008000) madvise$auto(0x0, 0x400053, 0x9) 5.009548415s ago: executing program 6 (id=3666): mmap$auto(0x2000000000, 0x2020009, 0x8, 0xeb1, 0xffffffffffffffff, 0x28974783) mmap$auto(0x0, 0x8, 0x3, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x100000000001, 0x4, 0x5, 0x7) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa2500, 0x0) pread64$auto(r0, 0x0, 0x8, 0x10000000000) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x200007, 0x19) mprotect$auto(0x0, 0x806121, 0x6) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x181881, 0x0) ioctl$auto_XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0xfffffffd, 0x0, 0x9, 0x0, &(0x7f0000000480)=0x1}) syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, 0x0, 0x169a02, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x8000400) socket(0x2b, 0x6, 0x0) r2 = socket(0x10, 0x2, 0xf) bpf$auto(0x0, &(0x7f0000000680)=@bpf_attr_4={0x1e, r2, 0x24000000, r2}, 0x210) socket(0x2, 0x3, 0xa) io_uring_setup$auto(0x1, 0x0) 3.678032369s ago: executing program 6 (id=3667): mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') read$auto(r0, 0x0, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4010}, 0x51) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gre0\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000340)=@bpf_attr_5={@target_ifindex=r2, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x8, 0x6}, 0x92) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) r3 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) lsm_list_modules$auto(0x0, &(0x7f0000000100)=0x3efd, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x5, 0x9, 0x9, 0x940, 0x1ffde, 0x1, 0x6, 0x8000004, 0xb, 0x0, 0x0, 0x4, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x7069, 0x0, 0x0, 0x0, 0x0, 0xb, 0x3, [0x0, 0x0, 0x0, 0x8, 0x5, 0x8000004, 0x8000000000000000, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x1, 0xbf, 0x3, 0x0, 0x0, 0x33, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffd, 0x80000, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000000]}, 0x4b9, 0x7d) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x60000004, 0x0, 0x2, 0x0, 0x7, 0xa505}, 0x1000800}, 0x9, 0x10) sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) 2.724110222s ago: executing program 4 (id=3668): mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x3, 0x3a) getsockopt$auto(r0, 0x29, 0x18, 0x0, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop4\x00', 0xc8040, 0x0) r2 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) mmap$auto(0x0, 0x2020009, 0x2000000000000006, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) writev$auto(r3, &(0x7f0000000080)={0x0, 0x1ff}, 0x7) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x2, 0x4000010, 0x0, 0x6, 0x5, 0x80a, 0xffffffffffffffff, [0x0, 0x40], {0xfffffff7, 0x10001, 0x3, 0x2de, 0x8e, 0x3, 0x101, 0x6, 0x2000007}, {0xfff7fffd, 0x3, 0x52, 0x1a2, 0x10001, 0x4040, 0x76c5, 0x8, 0x8000000000040000}}) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0x1001}, 0x800000001, &(0x7f0000000500)={&(0x7f0000000080), 0x800001ffffffff}, 0x6, 0x0) ioctl$auto(r2, 0xc0bc5310, 0x38) mmap$auto(0x0, 0x10000, 0xde, 0x11, r1, 0x28000) mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-touch8\x00', 0x80f00, 0x0) unshare$auto(0x40000080) write$auto(0xca, 0x0, 0x7d) r6 = openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x143382, 0x0) preadv$auto(r6, &(0x7f0000000140)={0x0, 0x3}, 0x5, 0x1ff, 0x81) ioctl$auto(r5, 0x5646, r5) madvise$auto(0x0, 0xffffffffffff0005, 0x17) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x10, 0x3e, 0x0, 0x9) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000003f40)=""/156, 0x9c) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, 0x0, 0x80) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) 2.665995504s ago: executing program 6 (id=3669): mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x3, 0x3a) getsockopt$auto(r0, 0x29, 0x18, 0x0, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop4\x00', 0xc8040, 0x0) r2 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) mmap$auto(0x0, 0x2020009, 0x2000000000000006, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) writev$auto(r3, &(0x7f0000000080)={0x0, 0x1ff}, 0x7) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x2, 0x4000010, 0x0, 0x6, 0x5, 0x80a, 0xffffffffffffffff, [0x0, 0x40], {0xfffffff7, 0x10001, 0x3, 0x2de, 0x8e, 0x3, 0x101, 0x6, 0x2000007}, {0xfff7fffd, 0x3, 0x52, 0x1a2, 0x10001, 0x4040, 0x76c5, 0x8, 0x8000000000040000}}) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0x1001}, 0x800000001, &(0x7f0000000500)={&(0x7f0000000080), 0x800001ffffffff}, 0x6, 0x0) ioctl$auto(r2, 0xc0bc5310, 0x38) mmap$auto(0x0, 0x10000, 0xde, 0x11, r1, 0x28000) mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-touch8\x00', 0x80f00, 0x0) unshare$auto(0x40000080) write$auto(0xca, 0x0, 0x7d) r6 = openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x143382, 0x0) preadv$auto(r6, &(0x7f0000000140)={0x0, 0x3}, 0x5, 0x1ff, 0x81) ioctl$auto(r5, 0x5646, r5) madvise$auto(0x0, 0xffffffffffff0005, 0x17) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x10, 0x3e, 0x0, 0x9) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000003f40)=""/156, 0x9c) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, 0x0, 0x80) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) 2.560252772s ago: executing program 5 (id=3670): mkdir$auto(&(0x7f0000000500)='./file0\x00', 0x6) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) lsetxattr$auto(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000280)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\xb5\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\x96\xa3\xc0\xf29\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\xb1N\t\x911@9B\xd8\xb7#\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xa1Yi\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\x12\x8d\x84K\xf0\xd0\x0f\x13)\x17CI\xb7\xf35\xfc\xe8(\xfa\t3\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x86#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=', 0x0, 0x2, 0x0) r0 = openat$auto_fops_u32_(0xffffffffffffff9c, 0x0, 0x3a480, 0x0) fallocate$auto(r0, 0x9, 0x1, 0x8000000000000001) 2.459987784s ago: executing program 3 (id=3671): read$auto(0xffffffffffffffff, 0x0, 0x4) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x100000001, 0x8, 0x16, 0x401, 0xc00000000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) timer_create$auto(0x6, 0x0, &(0x7f0000000140)=0x40) timer_settime$auto(0x8, 0x9af, 0x0, 0x0) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0xc0203, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/pci0000:00/0000:00:03.0/subsystem_vendor\x00', 0x28200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x3) mmap$auto(0x0, 0x9, 0x0, 0x810, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x0, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710}, 0x55) setsockopt$auto(0x400000000000003, 0x28, 0x0, 0x0, 0x56b) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/fail-nth\x00', 0x0, 0x0) mmap$auto(0x0, 0x800e983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ttyb8/power/control\x00', 0x202341, 0x0) read$auto(r2, &(0x7f00000002c0)='J))\x00^\xbd\xa6a3\xe3\x84\x01O\x85\xa48\xd0u\x1d\xf4\x8ebg[k\xbe<\xc5\x88\xbd\xf4KHm\x9f\x84O\xa8\x9d\xbb\x82\xa4#\xda\x8a\b\xa2\xfe\xa5\x1aU\xaa\x045\xac\x82\x8b\xbc\xe8B\xf5e\xf8\xa8\xe9\xc4\xf2\x82~pO\xd4Ux\xf4u\x80\x93 \x16M\x02\x88\x1b[O\xe2\xdb\x156m+I\xc9\xa4\xb5\\\x19zX\xd2\xf6\xca\x03\xb0r\x01nO\x85\xa4JP\x994~\xee\xe8\xe3\x84DQ\xcf\a\xacc\x88:/\xffX}\xf1\x85c\xf1\xa7;\x92\xc8\xcbh\x8eKD\"\xf4\xe2Ot\x13Gd\xbe\x81\x83f\xfc\xda\xcc\xe1\xabE\x9f\x19^\'\xe0l\xf7\xf1Py8\x94\xe5\xaal-\x9ae\xcd\xf4<\x9f\x1d\xf8\xaa1\xc6\x11\x1a\x93\x96;x\x067\xcd\x14\tPvL\x98\xbbr\xaa\x16\xffZ\xf1\xd2\xcd\t', 0x7fd) open_by_handle_at$auto(r1, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) read$auto(r0, 0x0, 0x5) r3 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x11, 0x4, 0x8) ioctl$auto_posix_clock_file_operations_posix_clock(r3, 0x43403d0e, 0x0) 1.417177782s ago: executing program 3 (id=3672): openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/irq/3/node\x00', 0x189c40, 0x0) getsockopt$auto(0xffffffffffffffff, 0x0, 0x53, 0x0, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x8f3b7a51b80ebd01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000040)="205c2078027e0dc0023af10e9bfa1babfa20a974ca9a20370a", 0x19) mmap$auto(0x0, 0x400005, 0xffffffffffeffffe, 0x9b72, 0xc76, 0x8000) r1 = openat$auto_long_retry_limit_ops_(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy0/long_retry_limit\x00', 0x400, 0x0) read$auto_long_retry_limit_ops_(r1, 0x0, 0x0) lseek$auto(0x3, 0x2, 0x4) r2 = socket(0x27, 0x80000, 0x6) syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/pcrypt/pencrypt/parallel_cpumask\x00', 0x80302, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) statmount$auto(0x0, 0x0, 0x800, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) write$auto(r3, &(0x7f0000000340)=',,2.15.4 ]\x98\x0f7V\xd4l\xf2AC\x04\xecQ=\xa2\xce\nO}\x1d\xd7\xb5\x92\xf7\xb2\xc2\xddm\xfbR\xfb\x92x\xd8\xb2\x8a&\xda\\\xa1}&^\x03\x02\xf28\xfd|\xed~\a\xaf\x14\xb5.\x92\"-6.\xb2$\x88\xeb\xdc\x0f\xba$?c\x8b\xcb\xf4q\r\xf5>}4\x99(\xb8D\x15\xb8\xc9U\x14\xd6r\xc9\x81\xbbI\xc9+^\x00\xf6\xb5\xd9\x1e\x89G?/\xc5\x86\xd0\xab\xb3\xfd\xc9?\xa7B\x1b\xdc\xff\xab\xb6~\x96\xd6\x9f\x1d\xfb\xa1dg\x9d\x8d]\xdek\x9c0\xea\xb3\nV\x1d\x10g\xaa\xf9\xf0\xc9\n\x8c\xf25G\x9c\x19\xe5\xd8\xa3\xee\x11\x12f\xd5o\x00\xeaY\n\xe0\x9f\r\xd4\x8e9G\x01\x04\xb2j\xbfYX\x9a)OQ\xedk\xb9\x85\x03c\xf3\x80\x10eG(\x94m81PL\x8d\xa47\x1a\x16\x11\xcd\xcdf\x15\r\x19\xc3\x90\xbe\x12\x85V\xeb\x8d\x97\xf0\x9c!\x86:\xe8\x8b\xa7@l', 0x3) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000240)=""/147, 0x93) r4 = socket(0x28, 0x3, 0x100000) ioctl$sock_SIOCGIFINDEX(r4, 0x8955, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TCP_METRICS_CMD_GET(r5, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$auto_TCP_METRICS_CMD_GET(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d3daa4eea8a4c661d22579a25d9423ba845e63e4dfe7a102c3d215cbca355f461df3c1025962c2b3e55c414f5ddf82359b2ce666f9cb206f92bc1f902b23c36128bf83c58b143d52968a872a0c2fdab9b11188b452513ef2fd395b7f0f63710e2e61d8ba633dc04cfd902d192e3d700e7297302c6154840c6a09e2d0e90e", @ANYBLOB="02002abd7000fbdbdf250100000008000b00e000000114000200fc0000000000"], 0x30}}, 0x40004) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r6, 0x401070cd, 0x5) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0x80) syz_genetlink_get_family_id$auto_ovs_flow(0x0, r2) 1.206394554s ago: executing program 5 (id=3673): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) r1 = socket(0x2, 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x175801, 0x0) ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) sendfile$auto(r0, 0x3, 0x0, 0x7) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x6}, 0x5, 0x20000000) mkdir$auto(&(0x7f0000000140)='./file0\x00', 0xfffd) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) mkdir$auto(&(0x7f0000000000)='./file0/file0\x00', 0x54c) rename$auto(&(0x7f0000000480)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90) getsockopt$auto(0xffffffffffffffff, 0x6a, 0x85fa, 0x0, 0x0) socketpair$auto(0x10401e, 0x5, 0xfffffffc, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x1, 0x0) 227.106733ms ago: executing program 4 (id=3674): openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x626000, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x40, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mprotect$auto(0x110c238000, 0x1, 0x800000000003) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x9a28) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000100)={0x0, 0x4dcf3887}, 0x7) socket(0x10, 0x1, 0x106) getsockopt$auto(r0, 0x1011c, 0x4000003, 0xfffffffffffffffe, 0xfffffffffffffffd) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = io_uring_setup$auto(0x86, 0x0) ioctl$auto_EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000140)=0x7fff) r3 = socket(0xa, 0x5, 0x0) getsockopt$auto(r3, 0x84, 0x13, 0x0, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/memory.force_empty\x00', 0xa001, 0x0) write$auto(r4, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000004ec0)='/dev/snd/pcmC1D0p\x00', 0x2100, 0x0) openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/enable\x00', 0x28602, 0x0) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) process_madvise$auto_MADV_DOFORK(0xffffffffffffffff, 0x0, 0x2040000000000, 0xb, 0x5) 0s ago: executing program 3 (id=3675): r0 = socket(0x6, 0x80000, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r1 = memfd_create$auto(0x0, 0xe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r2 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000340), r1) shmctl$auto(0xdc, 0x9, &(0x7f0000000500)={{0x0, 0xee01, 0xee00, 0xe9, 0x5e, 0x5, 0xb}, 0xc875, 0x1, 0xd, 0x19, @raw=0x5a5, @raw=0x1, 0x4, 0x0, &(0x7f0000000380)="fb0dd5a69e5294bcfcb5268258e9c204419562fc664c6b13f68ef96f4f410a9f49daf36232c73946aa2aed28423e1a533d445cee6509983d6d6e964566d22c5c251bebf69abcdec3ebf675f80eb27234c54a57f3742cd56fdce135dcd6fada864c5e860d1673c2ba18acf02d44b6aa592f30f4a1b4cf94b9688ea0431cfa9bbb84b4dcc7f896db4e051cdf719c65d02f00b820bec2e8c377538daf4072fc924ff441ca9db76cf62b5134fc319cd50709", &(0x7f0000000440)="0b4a4f53cf2325c26f80c6c2c10f6c1d069d7179ed53ad367ac967940b60a1641337b30fcf30594ca8a8cb9f9cd6ee5f425e7e93c0bfe45b8f0fc4ea08fb7f58d1b8702114c3ec155f1f20c0a0c5c47f8e06f0c07f7c27e69dc1a578cba924c25fee89f342121b21a8bcace393298ee9a0a0449ff036d731952c09b4c4aae90f024fa2802e250f3330ff08d593df80a2e3"}) sendmsg$auto_MAC802154_HWSIM_CMD_GET_RADIO(r1, &(0x7f0000000b80)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000600)={0x398, r2, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@MAC802154_HWSIM_ATTR_RADIO_EDGES={0x206, 0x3, 0x0, 0x1, [@typed={0x8, 0x6f, 0x0, 0x0, @u32=0x1}, @generic="5b27ca31014d4d17ebc3c24c830061a27aff51d5e3a1521a62aa650b26009779b958e1053ca15101e87a6877d7427782801820e6ede9bc5f82480a771ec260b7b6bd8775c9431f256d16fa7b4d7a5f69143e86e13e10cb6088429bb0737e13fb2d1e046c4fecec43c6864285bdc990d87326", @nested={0x118, 0x9a, 0x0, 0x1, [@nested={0x4, 0x56}, @generic="63635fd79642c18a635555bbb4e447aadeea0872d625df4757daf8fcb2f43540ba1cac33488b4a9a9de60d8c2857b9db8090fcb7812bd3a891317355f51e1a4f7f02725cefdc7e8a40aa47eb3af5bb156c764b1517", @nested={0x4, 0x155}, @generic="11f44ecef2128fc9f9aefbc25312b2e8e18c485647ef38288ae34fc872a12b718b3cf4662ff9d80ed319b227255d1baa74c75218e354ef7d5f24f396298baa6689a70a3e4739a3cac33b0732996582a04ac5285b3f4e66ebc8880612e09355c42d659edc3d537f9e839458edb22dfbab332b9f00bed95a620c20ad84b7dd41fde8430d6a65d6553df787d5d992c8076271e21aa75358c16d8da5f933a2357ae3a537a7812274294f71d84fd7b10faabb82e15c35fc84db"]}, @nested={0x28, 0xab, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0x9}, @nested={0x4, 0xad}, @typed={0x14, 0xb3, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, @typed={0x8, 0x7a, 0x0, 0x0, @ipv4=@remote}, @nested={0xc, 0x43, 0x0, 0x1, [@typed={0x8, 0x2c, 0x0, 0x0, @uid=r3}]}, @nested={0x32, 0x158, 0x0, 0x1, [@typed={0x14, 0xb9, 0x0, 0x0, @ipv6=@remote}, @nested={0x4, 0xf8}, @generic="6f9e013df72e782e606f343047be", @nested={0x4, 0x33}, @typed={0x4, 0xa1}]}]}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0xb6, 0x3, 0x0, 0x1, [@generic="078bc50d4827e2d8b76969dc67953b7e60fe8e309c55bf46f37a6a6c2ce14042379e9c7ae085e2efc324117b05bcaaaf332aa8b2472304ca25eb74f4f59123be9ea118cf21022eb068a95904888ee74c5255f17ac8471ebd9d023a77d41916416d332116f3143e52b8181d5c1e6fd33de14dd7b05eab5733c13cdbe0bc81ef0253b4304e96eef0618aa32f407147cbbffe1d1e7520d13a8a9dca24a26d821c528f344b38342b3de26034", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}]}, @MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0xff}, @MAC802154_HWSIM_ATTR_RADIO_EDGE={0x4}, @MAC802154_HWSIM_ATTR_RADIO_EDGE={0xb8, 0x2, 0x0, 0x1, [@typed={0xc, 0x9b, 0x0, 0x0, @u64=0xe}, @nested={0xa6, 0x14, 0x0, 0x1, [@typed={0x14, 0x37, 0x0, 0x0, @ipv6=@remote}, @nested={0x4, 0xa2}, @nested={0x4, 0x15c}, @generic="89f68d5acc90640e52b29a9926a1be9655ecab356c0e2bf1bc87ea6a315625ca13dad566f45d35f69ed828c512712ffca9712e4c7d98f94bf3fef819e8a8f819ecd1b2f4d44ff66faa0667d2aa9d22520f1d7c9f175c535599dadc4270ad0bfe7c740ff9069e75b89d93c6f182e89cc55a4da310f90ca45973924e66700e85f42af3dba94bcc"]}]}]}, 0x398}, 0x1, 0x0, 0x0, 0x4008880}, 0x1) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(r0, &(0x7f0000001540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2001}, 0xc, &(0x7f0000001500)={&(0x7f0000000240)={0x1298, r2, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@MAC802154_HWSIM_ATTR_RADIO_EDGES={0x127c, 0x3, 0x0, 0x1, [@nested={0x153, 0xe2, 0x0, 0x1, [@generic="2b8ad51bb68c18dfa4210ab28c82eb3bd85d6060ba17510ef270a7e7ebc4bea0d4b822c1cac8edf39929a2372f760863b36b7ea345802ae30fbc92c5c696c9b3c63696f879c71d1f179158be305e8341c233cf4ce0fa475606e05df42f0257254157cd7d63f59fd11f23092920077d5ef26c08feb5a60c24025c2f942ff3edb4d4ca3ba9bc550e04a3b84e88f089358ef1b214afcb363c90dee72eb9e7076ac9d5119e4dbd40c71c801ac75ce4db6dd7c0b38010cab561d38c6fc5a4fa4d813c57db790c9d407eadeaa284da2078ef16eb3dfea66babba8f78c2013cd11ad4dfb3151876e04411d9ca4e75cefe020fdc86007ac1a84c1e9c", @nested={0x4, 0x8a}, @nested={0x4, 0x5b}, @nested={0x4, 0x3e}, @typed={0x8, 0xde, 0x0, 0x0, @pid}, @generic="bbc6bd36e1bbdaf71a340c0111c656a8b554ae9295ce5204648d29668d1113e67572788a2e11af0cf2b956d284eb37f5daa2b8f2a281ecaf03567a8dd5d4a7", @typed={0x4, 0x53}]}, @typed={0x35, 0x8d, 0x0, 0x0, @str='/sys/devices/virtual/block/nbd3/queue/io_timeout\x00'}, @nested={0x10ec, 0xa4, 0x0, 0x1, [@nested={0x4, 0x128}, @nested={0x4, 0x151}, @nested={0x4, 0x134}, @generic="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", @generic="491be9e88ecfaf937d8a0fccae421b80d9382b06751031f97d8b6367a7a98c9d4c105a5b191e8569aae23914386e675d843f47a862628b3740e8ffb5e20f5bd24a955f9ddadb7257f05152e2607022dddfe1ea4adfc51e1805c89cba3e5395aef467a900b7a7379db75f7073502185f0cff5c8d1ec7969db9a2e754562eb3666061fcfbf9b3934a90aeea3d7a1a20fc743511935524cea027ff96ae4df4617168f7e5c455f38da29360dc169138830d4c82380d55264bab7dbb2c60753e31d3f9ba717bf8573a8451ed7675f35a27315ef6837f50d3dbcdb1d495b2a"]}]}, @MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0xb}]}, 0x1298}, 0x1, 0x0, 0x0, 0x4000000}, 0xc090) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r0) sendmsg$auto_NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000001600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x24, r4, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_ASSOC_MLD_EXT_CAPA_OPS={0x6, 0x151, 0x7}, @NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0xffffff81}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) socket(0x3, 0x2, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) shutdown$auto(0x200000003, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00'}) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) shutdown$auto(r5, 0xda6) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) r6 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x1, 0x9, 0x7, 0x3b, 0x3ff, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb2, 0x9, 0x3, 0x40fffc, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0x0, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, [0x1000000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7]}, 0x202, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) kernel console output (not intermixed with test programs): 007f809f403f38 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 901.288856][T25767] RAX: ffffffffffffffda RBX: 00007f809f4056c0 RCX: 00007f809e55d68e [ 901.288867][T25767] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000c [ 901.288875][T25767] RBP: 000000000000000c R08: 0000000000000000 R09: 0000000000000000 [ 901.288884][T25767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 901.288894][T25767] R13: 00007f809e816038 R14: 00007f809e815fa0 R15: 00007ffdda475288 [ 901.288914][T25767] [ 902.054055][T25779] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 902.596970][T25786] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 902.603824][T25786] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 902.648518][T25786] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 902.675880][T25786] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 904.614880][T13738] Bluetooth: hci5: command 0x2016 tx timeout [ 904.621028][ T8055] Bluetooth: hci4: command 0x0c1a tx timeout [ 904.695311][T13738] Bluetooth: hci2: command 0x0c1a tx timeout [ 904.701470][ T8055] Bluetooth: hci1: command 0x0c1a tx timeout [ 909.018293][T26138] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 912.869727][T26409] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2768'. [ 913.169253][T26417] netlink: 334 bytes leftover after parsing attributes in process `syz.1.2769'. [ 913.750541][T26435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2773'. [ 913.820795][T26435] tc_dump_action: action bad kind [ 914.002606][T26435] can0: slcan on pty238. [ 914.064589][T26462] usb usb3: usbfs: process 26462 (syz.5.2774) did not claim interface 0 before use [ 914.125226][T26434] can0 (unregistered): slcan off pty238. [ 914.219326][T26462] random: crng reseeded on system resumption [ 916.143711][T26592] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2779'. [ 916.287951][ T8062] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.346453][ T8062] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.385620][ T8062] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.452387][ T8062] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.580575][T13738] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 918.658408][T26735] usb usb3: usbfs: process 26735 (syz.3.2790) did not claim interface 0 before use [ 919.269038][T26781] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2791'. [ 919.443683][T16226] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.486945][T16226] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.629055][T16226] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.673756][T16226] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.392463][T26813] futex_wake_op: syz.1.2792 tries to shift op by -1; fix this program [ 920.451284][T26842] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 920.615127][T26608] Bluetooth: hci4: command 0x0c1a tx timeout [ 921.113859][T26682] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 921.134100][T26682] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 921.156847][T26682] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 921.178499][T26682] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 921.221830][T26810] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 922.696385][T13738] Bluetooth: hci4: command 0x0c1a tx timeout [ 922.909733][T26907] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2801'. [ 923.177175][T26608] Bluetooth: hci5: command 0x2016 tx timeout [ 923.183273][T13738] Bluetooth: hci1: command 0x0c1a tx timeout [ 923.254796][T13738] Bluetooth: hci2: command 0x0c1a tx timeout [ 925.395322][T27008] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 925.431659][T27008] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 925.469958][T27008] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 925.492377][T26992] futex_wake_op: syz.5.2803 tries to shift op by -1; fix this program [ 925.513065][T27008] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 926.934966][T13738] Bluetooth: hci4: command 0x0c1a tx timeout [ 927.048803][T27055] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2809'. [ 927.186868][T27062] FAULT_INJECTION: forcing a failure. [ 927.186868][T27062] name failslab, interval 1, probability 0, space 0, times 0 [ 927.338295][T27062] CPU: 0 UID: 0 PID: 27062 Comm: syz.5.2810 Tainted: G L syzkaller #0 PREEMPT(full) [ 927.338323][T27062] Tainted: [L]=SOFTLOCKUP [ 927.338330][T27062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 927.338348][T27062] Call Trace: [ 927.338354][T27062] [ 927.338361][T27062] dump_stack_lvl+0x100/0x190 [ 927.338384][T27062] should_fail_ex.cold+0x5/0xa [ 927.338404][T27062] should_failslab+0xc2/0x120 [ 927.338424][T27062] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 927.338447][T27062] ? skb_clone+0x190/0x400 [ 927.338469][T27062] skb_clone+0x190/0x400 [ 927.338487][T27062] netlink_broadcast_filtered+0xab3/0xe90 [ 927.338514][T27062] ? netlink_has_listeners+0x21b/0x430 [ 927.338538][T27062] netlink_broadcast+0x39/0x50 [ 927.338560][T27062] kobject_uevent_env+0xcdd/0x18b0 [ 927.338583][T27062] ? bus_to_subsys+0x114/0x150 [ 927.338609][T27062] device_add+0x116e/0x1950 [ 927.338632][T27062] ? __pfx_device_add+0x10/0x10 [ 927.338659][T27062] nfc_register_device+0x41/0x3e0 [ 927.338685][T27062] nci_register_device+0x7f1/0xb80 [ 927.338705][T27062] ? __pfx_nci_register_device+0x10/0x10 [ 927.338727][T27062] ? lockdep_init_map_type+0x5c/0x250 [ 927.338746][T27062] virtual_ncidev_open+0x141/0x220 [ 927.338771][T27062] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 927.338793][T27062] misc_open+0x26d/0x450 [ 927.338814][T27062] ? __pfx_misc_open+0x10/0x10 [ 927.338832][T27062] chrdev_open+0x234/0x6a0 [ 927.338852][T27062] ? __pfx_apparmor_file_open+0x10/0x10 [ 927.338870][T27062] ? __pfx_chrdev_open+0x10/0x10 [ 927.338890][T27062] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 927.338915][T27062] do_dentry_open+0x6d8/0x1660 [ 927.338934][T27062] ? __pfx_chrdev_open+0x10/0x10 [ 927.338958][T27062] vfs_open+0x82/0x3f0 [ 927.338983][T27062] path_openat+0x208c/0x31a0 [ 927.339009][T27062] ? __pfx_path_openat+0x10/0x10 [ 927.339034][T27062] do_file_open+0x20e/0x430 [ 927.339055][T27062] ? __pfx_do_file_open+0x10/0x10 [ 927.339088][T27062] ? alloc_fd+0x476/0x790 [ 927.339109][T27062] ? do_getname+0x191/0x390 [ 927.339132][T27062] do_sys_openat2+0x10d/0x1e0 [ 927.339155][T27062] ? __pfx_do_sys_openat2+0x10/0x10 [ 927.339178][T27062] ? find_held_lock+0x2b/0x80 [ 927.339202][T27062] __x64_sys_openat+0x12d/0x210 [ 927.339226][T27062] ? __pfx___x64_sys_openat+0x10/0x10 [ 927.339252][T27062] ? rcu_is_watching+0x12/0xc0 [ 927.339272][T27062] do_syscall_64+0x10b/0xf80 [ 927.339294][T27062] ? clear_bhb_loop+0x40/0x90 [ 927.339320][T27062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.339343][T27062] RIP: 0033:0x7fdfaf59ce59 [ 927.339359][T27062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 927.339374][T27062] RSP: 002b:00007fdfb047c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 927.339390][T27062] RAX: ffffffffffffffda RBX: 00007fdfaf815fa0 RCX: 00007fdfaf59ce59 [ 927.339401][T27062] RDX: 0000000000000100 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 927.339411][T27062] RBP: 00007fdfaf632d6f R08: 0000000000000000 R09: 0000000000000000 [ 927.339421][T27062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 927.339431][T27062] R13: 00007fdfaf816038 R14: 00007fdfaf815fa0 R15: 00007ffd6c633688 [ 927.339451][T27062] [ 928.238958][T13738] Bluetooth: hci1: command 0x0c1a tx timeout [ 928.245401][T13738] Bluetooth: hci5: command 0x2016 tx timeout [ 928.251486][T13738] Bluetooth: hci2: command 0x0c1a tx timeout [ 929.945639][T27154] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2814'. [ 931.657687][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.670570][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.461137][ T30] audit: type=1326 audit(4294967422.020:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27391 comm="syz.4.2832" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe07999ce59 code=0x0 [ 936.548437][T27445] netlink: 'syz.3.2834': attribute type 83 has an invalid length. [ 937.246620][T27477] vivid-007: ================= START STATUS ================= [ 937.335453][T27477] vivid-007: Generate PTS: true [ 937.421690][T27477] vivid-007: Generate SCR: true [ 937.551533][T27477] tpg source WxH: 320x240 (Y'CbCr) [ 937.672617][T27477] tpg field: 1 [ 937.745639][T27477] tpg crop: (0,0)/320x240 [ 937.831285][T27494] FAULT_INJECTION: forcing a failure. [ 937.831285][T27494] name failslab, interval 1, probability 0, space 0, times 0 [ 937.870551][T27477] tpg compose: (0,0)/320x240 [ 937.950799][T27477] tpg colorspace: 8 [ 938.040699][T27477] tpg transfer function: 0/0 [ 938.065879][T27494] CPU: 0 UID: 0 PID: 27494 Comm: syz.4.2838 Tainted: G L syzkaller #0 PREEMPT(full) [ 938.065905][T27494] Tainted: [L]=SOFTLOCKUP [ 938.065911][T27494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 938.065920][T27494] Call Trace: [ 938.065925][T27494] [ 938.065931][T27494] dump_stack_lvl+0x100/0x190 [ 938.065952][T27494] should_fail_ex.cold+0x5/0xa [ 938.065971][T27494] ? lsm_blob_alloc+0x68/0x90 [ 938.065992][T27494] should_failslab+0xc2/0x120 [ 938.066010][T27494] __kmalloc_noprof+0xe0/0x850 [ 938.066024][T27494] ? trace_kmalloc+0xe3/0x110 [ 938.066044][T27494] lsm_blob_alloc+0x68/0x90 [ 938.066065][T27494] security_sk_alloc+0x2d/0x290 [ 938.066080][T27494] sk_prot_alloc+0x12a/0x2a0 [ 938.066104][T27494] sk_alloc+0x36/0xe80 [ 938.066121][T27494] __netlink_create+0x5e/0x2c0 [ 938.066139][T27494] ? __wake_up+0x3f/0x60 [ 938.066162][T27494] netlink_create+0x29b/0x610 [ 938.066181][T27494] ? __pfx_genl_bind+0x10/0x10 [ 938.066202][T27494] ? __pfx_genl_unbind+0x10/0x10 [ 938.066223][T27494] ? __pfx_genl_release+0x10/0x10 [ 938.066239][T27494] __sock_create+0x339/0x860 [ 938.066264][T27494] __sys_socket+0x14d/0x260 [ 938.066287][T27494] ? __pfx___sys_socket+0x10/0x10 [ 938.066322][T27494] __x64_sys_socket+0x72/0xb0 [ 938.066335][T27494] ? lockdep_hardirqs_on+0x78/0x100 [ 938.066358][T27494] do_syscall_64+0x10b/0xf80 [ 938.066380][T27494] ? clear_bhb_loop+0x40/0x90 [ 938.066398][T27494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.066414][T27494] RIP: 0033:0x7fe07999e6c7 [ 938.066427][T27494] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 938.066441][T27494] RSP: 002b:00007fe077bb2f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 938.066457][T27494] RAX: ffffffffffffffda RBX: 00007fe079c16270 RCX: 00007fe07999e6c7 [ 938.066467][T27494] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 938.066476][T27494] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 938.066485][T27494] R10: 00002000000020c0 R11: 0000000000000286 R12: 0000000000000000 [ 938.066494][T27494] R13: 00007fe079c16308 R14: 00007fe079c16270 R15: 00007fff80a9e388 [ 938.066513][T27494] [ 938.542007][T27477] tpg Y'CbCr encoding: 0/0 [ 938.562230][T27477] tpg quantization: 0/0 [ 938.584562][T27477] tpg RGB range: 0/2 [ 938.620901][T27477] vivid-007: ================== END STATUS ================== [ 938.795424][T27477] FAULT_INJECTION: forcing a failure. [ 938.795424][T27477] name failslab, interval 1, probability 0, space 0, times 0 [ 938.870449][T27477] CPU: 0 UID: 0 PID: 27477 Comm: syz.5.2837 Tainted: G L syzkaller #0 PREEMPT(full) [ 938.870477][T27477] Tainted: [L]=SOFTLOCKUP [ 938.870482][T27477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 938.870492][T27477] Call Trace: [ 938.870498][T27477] [ 938.870504][T27477] dump_stack_lvl+0x100/0x190 [ 938.870526][T27477] should_fail_ex.cold+0x5/0xa [ 938.870547][T27477] should_failslab+0xc2/0x120 [ 938.870565][T27477] __kmalloc_cache_node_noprof+0x7d/0x770 [ 938.870582][T27477] ? init_rescuer+0x19f/0x550 [ 938.870609][T27477] init_rescuer+0x19f/0x550 [ 938.870631][T27477] ? __pfx_init_rescuer+0x10/0x10 [ 938.870658][T27477] ? wq_adjust_max_active+0x352/0x4a0 [ 938.870676][T27477] __alloc_workqueue+0xc70/0x1980 [ 938.870703][T27477] alloc_workqueue_noprof+0xc7/0x130 [ 938.870725][T27477] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 938.870751][T27477] ? __pfx___debug_object_init+0x10/0x10 [ 938.870779][T27477] nci_register_device+0x21e/0xb80 [ 938.870800][T27477] ? __pfx_nci_register_device+0x10/0x10 [ 938.870821][T27477] ? lockdep_init_map_type+0x5c/0x250 [ 938.870840][T27477] virtual_ncidev_open+0x141/0x220 [ 938.870864][T27477] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 938.870887][T27477] misc_open+0x26d/0x450 [ 938.870907][T27477] ? __pfx_misc_open+0x10/0x10 [ 938.870925][T27477] chrdev_open+0x234/0x6a0 [ 938.870943][T27477] ? __pfx_apparmor_file_open+0x10/0x10 [ 938.870958][T27477] ? __pfx_chrdev_open+0x10/0x10 [ 938.870978][T27477] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 938.871002][T27477] do_dentry_open+0x6d8/0x1660 [ 938.871020][T27477] ? __pfx_chrdev_open+0x10/0x10 [ 938.871043][T27477] vfs_open+0x82/0x3f0 [ 938.871068][T27477] path_openat+0x208c/0x31a0 [ 938.871093][T27477] ? __pfx_path_openat+0x10/0x10 [ 938.871119][T27477] do_file_open+0x20e/0x430 [ 938.871139][T27477] ? __pfx_do_file_open+0x10/0x10 [ 938.871171][T27477] ? alloc_fd+0x476/0x790 [ 938.871191][T27477] ? do_getname+0x191/0x390 [ 938.871214][T27477] do_sys_openat2+0x10d/0x1e0 [ 938.871244][T27477] ? __pfx_do_sys_openat2+0x10/0x10 [ 938.871268][T27477] ? find_held_lock+0x2b/0x80 [ 938.871293][T27477] __x64_sys_openat+0x12d/0x210 [ 938.871316][T27477] ? __pfx___x64_sys_openat+0x10/0x10 [ 938.871342][T27477] ? rcu_is_watching+0x12/0xc0 [ 938.871363][T27477] do_syscall_64+0x10b/0xf80 [ 938.871384][T27477] ? clear_bhb_loop+0x40/0x90 [ 938.871403][T27477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.871418][T27477] RIP: 0033:0x7fdfaf59ce59 [ 938.871432][T27477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 938.871447][T27477] RSP: 002b:00007fdfb047c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 938.871463][T27477] RAX: ffffffffffffffda RBX: 00007fdfaf815fa0 RCX: 00007fdfaf59ce59 [ 938.871473][T27477] RDX: 0000000000000100 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 938.871484][T27477] RBP: 00007fdfaf632d6f R08: 0000000000000000 R09: 0000000000000000 [ 938.871493][T27477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 938.871503][T27477] R13: 00007fdfaf816038 R14: 00007fdfaf815fa0 R15: 00007ffd6c633688 [ 938.871523][T27477] [ 938.871530][T27477] workqueue: Failed to allocate a rescuer for wq "nfc2_nci_cmd_wq" [ 941.466346][T27550] FAULT_INJECTION: forcing a failure. [ 941.466346][T27550] name failslab, interval 1, probability 0, space 0, times 0 [ 941.528927][T27550] CPU: 0 UID: 0 PID: 27550 Comm: syz.4.2843 Tainted: G L syzkaller #0 PREEMPT(full) [ 941.528955][T27550] Tainted: [L]=SOFTLOCKUP [ 941.528961][T27550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 941.528971][T27550] Call Trace: [ 941.528977][T27550] [ 941.528983][T27550] dump_stack_lvl+0x100/0x190 [ 941.529005][T27550] should_fail_ex.cold+0x5/0xa [ 941.529028][T27550] should_failslab+0xc2/0x120 [ 941.529046][T27550] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 941.529069][T27550] ? alloc_empty_file+0x5b/0x1c0 [ 941.529095][T27550] alloc_empty_file+0x5b/0x1c0 [ 941.529117][T27550] alloc_file_pseudo+0x13a/0x230 [ 941.529140][T27550] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 941.529161][T27550] ? alloc_fd+0x476/0x790 [ 941.529180][T27550] ? do_raw_spin_unlock+0x145/0x1e0 [ 941.529206][T27550] __anon_inode_getfile+0xe8/0x280 [ 941.529232][T27550] anon_inode_getfile_fmode+0x37/0xa0 [ 941.529257][T27550] do_eventfd+0x159/0x2b0 [ 941.529274][T27550] __x64_sys_eventfd+0x32/0x50 [ 941.529290][T27550] do_syscall_64+0x10b/0xf80 [ 941.529313][T27550] ? clear_bhb_loop+0x40/0x90 [ 941.529331][T27550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.529346][T27550] RIP: 0033:0x7fe07999ce59 [ 941.529361][T27550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 941.529376][T27550] RSP: 002b:00007fe07a76e028 EFLAGS: 00000246 ORIG_RAX: 000000000000011c [ 941.529390][T27550] RAX: ffffffffffffffda RBX: 00007fe079c15fa0 RCX: 00007fe07999ce59 [ 941.529402][T27550] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 941.529411][T27550] RBP: 00007fe079a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 941.529421][T27550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 941.529430][T27550] R13: 00007fe079c16038 R14: 00007fe079c15fa0 R15: 00007fff80a9e388 [ 941.529450][T27550] [ 947.258280][T27641] netlink: 62 bytes leftover after parsing attributes in process `syz.5.2849'. [ 948.131417][T27686] FAULT_INJECTION: forcing a failure. [ 948.131417][T27686] name failslab, interval 1, probability 0, space 0, times 0 [ 948.207339][T27686] CPU: 0 UID: 0 PID: 27686 Comm: syz.5.2853 Tainted: G L syzkaller #0 PREEMPT(full) [ 948.207366][T27686] Tainted: [L]=SOFTLOCKUP [ 948.207372][T27686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 948.207382][T27686] Call Trace: [ 948.207388][T27686] [ 948.207394][T27686] dump_stack_lvl+0x100/0x190 [ 948.207416][T27686] should_fail_ex.cold+0x5/0xa [ 948.207435][T27686] should_failslab+0xc2/0x120 [ 948.207454][T27686] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 948.207477][T27686] ? alloc_empty_file+0x5b/0x1c0 [ 948.207502][T27686] alloc_empty_file+0x5b/0x1c0 [ 948.207524][T27686] alloc_file_pseudo+0x13a/0x230 [ 948.207547][T27686] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 948.207567][T27686] ? alloc_fd+0x476/0x790 [ 948.207586][T27686] ? do_raw_spin_unlock+0x145/0x1e0 [ 948.207606][T27686] __anon_inode_getfile+0xe8/0x280 [ 948.207630][T27686] anon_inode_getfile_fmode+0x37/0xa0 [ 948.207653][T27686] do_eventfd+0x159/0x2b0 [ 948.207669][T27686] __x64_sys_eventfd+0x32/0x50 [ 948.207684][T27686] do_syscall_64+0x10b/0xf80 [ 948.207706][T27686] ? clear_bhb_loop+0x40/0x90 [ 948.207725][T27686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.207740][T27686] RIP: 0033:0x7fdfaf59ce59 [ 948.207754][T27686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 948.207769][T27686] RSP: 002b:00007fdfb047c028 EFLAGS: 00000246 ORIG_RAX: 000000000000011c [ 948.207784][T27686] RAX: ffffffffffffffda RBX: 00007fdfaf815fa0 RCX: 00007fdfaf59ce59 [ 948.207794][T27686] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 948.207803][T27686] RBP: 00007fdfaf632d6f R08: 0000000000000000 R09: 0000000000000000 [ 948.207815][T27686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 948.207824][T27686] R13: 00007fdfaf816038 R14: 00007fdfaf815fa0 R15: 00007ffd6c633688 [ 948.207843][T27686] [ 949.398255][T27703] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2854'. [ 953.560972][T27839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2868'. [ 954.128370][T27928] syz.1.2871 (27928): drop_caches: 0 [ 955.765691][T27991] : entered promiscuous mode [ 956.584447][T27968] kexec: Could not allocate control_code_buffer [ 958.042856][T28020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2882'. [ 958.697410][T28131] syz.5.2885 (28131): drop_caches: 0 [ 960.693393][T26608] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 960.783050][T28229] random: crng reseeded on system resumption [ 962.576193][T28268] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 962.782149][T13738] Bluetooth: hci1: command 0x0c1a tx timeout syzkaller syzkaller login: [ 964.857241][T26608] Bluetooth: hci1: command 0x0c1a tx timeout [ 967.436294][T28493] FAULT_INJECTION: forcing a failure. [ 967.436294][T28493] name fail_futex, interval 1, probability 0, space 0, times 0 [ 967.588615][T28493] CPU: 0 UID: 0 PID: 28493 Comm: syz.5.2916 Tainted: G L syzkaller #0 PREEMPT(full) [ 967.588644][T28493] Tainted: [L]=SOFTLOCKUP [ 967.588650][T28493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 967.588660][T28493] Call Trace: [ 967.588665][T28493] [ 967.588672][T28493] dump_stack_lvl+0x100/0x190 [ 967.588694][T28493] should_fail_ex.cold+0x5/0xa [ 967.588714][T28493] get_futex_key+0x1d2/0x1510 [ 967.588733][T28493] ? __pfx_get_futex_key+0x10/0x10 [ 967.588748][T28493] ? putname+0xb1/0x110 [ 967.588768][T28493] ? kasan_save_stack+0x3f/0x50 [ 967.588782][T28493] ? kasan_save_stack+0x30/0x50 [ 967.588797][T28493] ? kasan_save_track+0x14/0x30 [ 967.588811][T28493] ? kasan_save_free_info+0x3b/0x70 [ 967.588831][T28493] ? __kasan_slab_free+0x5f/0x80 [ 967.588846][T28493] ? kmem_cache_free+0x127/0x6c0 [ 967.588869][T28493] futex_wake+0xea/0x530 [ 967.588889][T28493] ? __pfx_futex_wake+0x10/0x10 [ 967.588916][T28493] do_futex+0x32b/0x350 [ 967.588933][T28493] ? __pfx_do_futex+0x10/0x10 [ 967.588954][T28493] __x64_sys_futex+0x34f/0x4d0 [ 967.588973][T28493] ? __pfx___x64_sys_futex+0x10/0x10 [ 967.588993][T28493] ? rcu_is_watching+0x12/0xc0 [ 967.589013][T28493] do_syscall_64+0x10b/0xf80 [ 967.589035][T28493] ? clear_bhb_loop+0x40/0x90 [ 967.589053][T28493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.589068][T28493] RIP: 0033:0x7fdfaf59ce59 [ 967.589082][T28493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 967.589097][T28493] RSP: 002b:00007fdfb045b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 967.589112][T28493] RAX: ffffffffffffffda RBX: 00007fdfaf816098 RCX: 00007fdfaf59ce59 [ 967.589122][T28493] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fdfaf81609c [ 967.589132][T28493] RBP: 00007fdfaf816090 R08: 0000000000000001 R09: 0000000000000000 [ 967.589141][T28493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 967.589150][T28493] R13: 00007fdfaf816128 R14: 00007ffd6c6335a0 R15: 00007ffd6c633688 [ 967.589170][T28493] [ 968.308375][T28507] cgroup: fork rejected by pids controller in /syz3 [ 970.423876][T28638] netlink: 'syz.4.2928': attribute type 11 has an invalid length. [ 971.088999][T28687] sg_write: data in/out 262108/258 bytes for SCSI command 0x61-- guessing data in; [ 971.088999][T28687] program syz.3.2930 not setting count and/or reply_len properly [ 971.219183][T28682] nvme_fabrics: missing parameter 'transport=%s' [ 971.276542][T28682] nvme_fabrics: missing parameter 'nqn=%s' [ 975.752150][T28892] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2949'. [ 975.859530][T28904] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2949'. [ 976.894837][T28949] futex_wake_op: syz.1.2953 tries to shift op by -2048; fix this program [ 977.751234][T29016] FAULT_INJECTION: forcing a failure. [ 977.751234][T29016] name failslab, interval 1, probability 0, space 0, times 0 [ 977.751273][T29016] CPU: 0 UID: 0 PID: 29016 Comm: syz.4.2959 Tainted: G L syzkaller #0 PREEMPT(full) [ 977.751294][T29016] Tainted: [L]=SOFTLOCKUP [ 977.751299][T29016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 977.751309][T29016] Call Trace: [ 977.751314][T29016] [ 977.751320][T29016] dump_stack_lvl+0x100/0x190 [ 977.751342][T29016] should_fail_ex.cold+0x5/0xa [ 977.751361][T29016] ? tomoyo_realpath_from_path+0xb6/0x690 [ 977.751381][T29016] should_failslab+0xc2/0x120 [ 977.751400][T29016] __kmalloc_noprof+0xe0/0x850 [ 977.751414][T29016] ? kfree+0x1dd/0x6c0 [ 977.751437][T29016] tomoyo_realpath_from_path+0xb6/0x690 [ 977.751461][T29016] tomoyo_path_number_perm+0x23c/0x580 [ 977.751477][T29016] ? tomoyo_path_number_perm+0x22e/0x580 [ 977.751495][T29016] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 977.751530][T29016] ? find_held_lock+0x2b/0x80 [ 977.751549][T29016] ? __fget_files+0x215/0x3d0 [ 977.751565][T29016] ? hook_file_ioctl_common+0x149/0x410 [ 977.751582][T29016] ? __fget_files+0x215/0x3d0 [ 977.751610][T29016] ? __fget_files+0x21f/0x3d0 [ 977.751630][T29016] security_file_ioctl+0xd3/0x230 [ 977.751648][T29016] __x64_sys_ioctl+0xb7/0x210 [ 977.751665][T29016] do_syscall_64+0x10b/0xf80 [ 977.751687][T29016] ? clear_bhb_loop+0x40/0x90 [ 977.751705][T29016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.751721][T29016] RIP: 0033:0x7fe07999ce59 [ 977.751734][T29016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 977.751748][T29016] RSP: 002b:00007fe07a76e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 977.751763][T29016] RAX: ffffffffffffffda RBX: 00007fe079c15fa0 RCX: 00007fe07999ce59 [ 977.751773][T29016] RDX: 0000200000000280 RSI: 00000000c0245720 RDI: 0000000000000003 [ 977.751782][T29016] RBP: 00007fe07a76e090 R08: 0000000000000000 R09: 0000000000000000 [ 977.751792][T29016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 977.751800][T29016] R13: 00007fe079c16038 R14: 00007fe079c15fa0 R15: 00007fff80a9e388 [ 977.751820][T29016] [ 977.795513][T29016] ERROR: Out of memory at tomoyo_realpath_from_path. [ 978.476970][T29022] cougar: G6 mapped to space [ 979.065896][T29029] queue_state_write: operation too long [ 979.065935][T29029] queue_state_write: use 'run', 'start' or 'kick' [ 979.066149][T29029] queue_state_write: operation too long [ 979.066157][T29029] queue_state_write: use 'run', 'start' or 'kick' [ 979.144169][T29035] queue_state_write: operation too long [ 979.144184][T29035] queue_state_write: use 'run', 'start' or 'kick' [ 979.411566][ T30] audit: type=1800 audit(4294967464.960:28): pid=29025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2962" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 980.925445][T29054] ecryptfs_miscdev_write: Invalid packet size [0] [ 981.743411][T29100] random: crng reseeded on system resumption [ 982.167182][T29111] FAULT_INJECTION: forcing a failure. [ 982.167182][T29111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 982.282418][T29111] CPU: 0 UID: 0 PID: 29111 Comm: syz.5.2973 Tainted: G L syzkaller #0 PREEMPT(full) [ 982.282445][T29111] Tainted: [L]=SOFTLOCKUP [ 982.282451][T29111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 982.282461][T29111] Call Trace: [ 982.282466][T29111] [ 982.282473][T29111] dump_stack_lvl+0x100/0x190 [ 982.282493][T29111] should_fail_ex.cold+0x5/0xa [ 982.282513][T29111] _copy_from_user+0x2e/0xd0 [ 982.282530][T29111] snd_rawmidi_ioctl_status32+0xe7/0x2a0 [ 982.282547][T29111] ? __pfx_snd_rawmidi_ioctl_status32+0x10/0x10 [ 982.282565][T29111] ? do_vfs_ioctl+0x226/0x13e0 [ 982.282590][T29111] snd_rawmidi_ioctl+0x25f/0x950 [ 982.282607][T29111] ? __pfx_snd_rawmidi_ioctl+0x10/0x10 [ 982.282625][T29111] ? __fget_files+0x21f/0x3d0 [ 982.282646][T29111] ? __pfx_snd_rawmidi_ioctl+0x10/0x10 [ 982.282663][T29111] __x64_sys_ioctl+0x18e/0x210 [ 982.282680][T29111] do_syscall_64+0x10b/0xf80 [ 982.282703][T29111] ? clear_bhb_loop+0x40/0x90 [ 982.282721][T29111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.282737][T29111] RIP: 0033:0x7fdfaf59ce59 [ 982.282751][T29111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 982.282768][T29111] RSP: 002b:00007fdfb047c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 982.282783][T29111] RAX: ffffffffffffffda RBX: 00007fdfaf815fa0 RCX: 00007fdfaf59ce59 [ 982.282793][T29111] RDX: 0000200000000280 RSI: 00000000c0245720 RDI: 0000000000000003 [ 982.282802][T29111] RBP: 00007fdfb047c090 R08: 0000000000000000 R09: 0000000000000000 [ 982.282812][T29111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 982.282821][T29111] R13: 00007fdfaf816038 R14: 00007fdfaf815fa0 R15: 00007ffd6c633688 [ 982.282840][T29111] [ 983.028550][T29123] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2975'. [ 983.259822][T29128] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2978'. [ 984.986862][T29192] [U] 0="/ [ 985.031479][T29192] [U] [ 985.043018][T29192] [U] EeQ@ [ 985.068375][T29188] [U]  [ 985.935447][T29183] zswap: compressor not available [ 986.733834][T29257] netlink: 146 bytes leftover after parsing attributes in process `syz.4.2993'. [ 989.160461][T29389] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3006'. [ 989.171355][T29390] vivid-008: ================= START STATUS ================= [ 989.297004][T29395] ubi0: attaching mtd0 [ 989.307119][T29390] vivid-008: ================== END STATUS ================== [ 989.350435][T29395] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 2 [ 989.446720][T29395] eraseblock attaching information dump: [ 989.541903][T29395] ec 1 [ 989.594422][T29395] pnum 1 [ 989.646081][T29395] lnum 1 [ 989.687739][T29395] scrub 0 [ 989.721621][T29395] sqnum 2 [ 989.778852][T29395] Volume identifier header dump: [ 989.846437][T29395] magic 55424921 [ 989.903821][T29395] version 1 [ 989.967506][T29395] vol_type 1 [ 990.030764][T29395] copy_flag 0 [ 990.101135][T29395] compat 5 [ 990.201461][T29395] vol_id 2147479551 [ 990.307092][T29395] lnum 1 [ 990.406479][T29395] data_size 0 [ 990.493364][T29395] used_ebs 0 [ 990.552857][T29395] data_pad 0 [ 990.622648][T29395] sqnum 2 [ 990.685046][T29395] hdr_crc 7beff9af [ 990.764764][T29395] Volume identifier header hexdump: [ 991.482761][T29395] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 992.423848][T29506] netlink: 330 bytes leftover after parsing attributes in process `syz.3.3012'. [ 992.592509][T29373] ima: policy update failed [ 992.673027][ T30] audit: type=1802 audit(4294967478.230:29): pid=29373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.3005" res=0 errno=0 [ 993.100530][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.110357][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 996.002523][T29653] nvme_fabrics: missing parameter 'transport=%s' [ 996.126831][T29653] nvme_fabrics: missing parameter 'nqn=%s' [ 996.760277][T29676] ubi0: attaching mtd0 [ 996.849115][T29676] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 2 [ 997.094315][T29676] eraseblock attaching information dump: [ 997.268756][T29676] ec 1 [ 997.348894][T29676] pnum 1 [ 997.428853][T29676] lnum 1 [ 997.512861][T29676] scrub 0 [ 997.603221][T29676] sqnum 2 [ 997.743736][T29676] Volume identifier header dump: [ 997.931055][T29676] magic 55424921 [ 997.935172][ T30] audit: type=1806 audit(4294967483.460:30): xattr="." res=0 [ 998.057373][T29676] version 1 [ 998.167398][T29676] vol_type 1 [ 998.209260][T29723] netlink: zone id is out of range [ 998.243291][T29676] copy_flag 0 [ 998.298617][T29723] netlink: zone id is out of range [ 998.360703][T29676] compat 5 [ 998.410532][T29723] netlink: zone id is out of range [ 998.483272][T29676] vol_id 2147479551 [ 998.536304][T29723] netlink: zone id is out of range [ 998.640245][T29676] lnum 1 [ 998.663219][T29723] netlink: zone id is out of range [ 998.764758][T29676] data_size 0 [ 998.791998][T29723] netlink: zone id is out of range [ 998.916391][T29676] used_ebs 0 [ 998.941031][T29723] netlink: zone id is out of range [ 999.036307][T29676] data_pad 0 [ 999.089866][T29723] netlink: zone id is out of range [ 999.154041][T29676] sqnum 2 [ 999.208406][T29723] netlink: zone id is out of range [ 999.306707][T29676] hdr_crc 7beff9af [ 999.328216][T29723] netlink: zone id is out of range [ 999.458926][T29676] Volume identifier header hexdump: [ 1000.631834][T29676] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1002.607087][T29860] FAULT_INJECTION: forcing a failure. [ 1002.607087][T29860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1002.878650][T29860] CPU: 0 UID: 0 PID: 29860 Comm: syz.5.3039 Tainted: G L syzkaller #0 PREEMPT(full) [ 1002.878677][T29860] Tainted: [L]=SOFTLOCKUP [ 1002.878682][T29860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1002.878691][T29860] Call Trace: [ 1002.878697][T29860] [ 1002.878703][T29860] dump_stack_lvl+0x100/0x190 [ 1002.878724][T29860] should_fail_ex.cold+0x5/0xa [ 1002.878743][T29860] _copy_from_user+0x2e/0xd0 [ 1002.878760][T29860] get_timespec64+0x8b/0x1b0 [ 1002.878783][T29860] ? __pfx_get_timespec64+0x10/0x10 [ 1002.878805][T29860] ? lockdep_hardirqs_on+0x78/0x100 [ 1002.878832][T29860] __x64_sys_futex+0x21a/0x4d0 [ 1002.878852][T29860] ? __pfx___x64_sys_futex+0x10/0x10 [ 1002.878872][T29860] ? rcu_is_watching+0x12/0xc0 [ 1002.878893][T29860] do_syscall_64+0x10b/0xf80 [ 1002.878915][T29860] ? clear_bhb_loop+0x40/0x90 [ 1002.878933][T29860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.878948][T29860] RIP: 0033:0x7fdfaf59ce59 [ 1002.878962][T29860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1002.878977][T29860] RSP: 002b:00007ffd6c6337e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1002.878991][T29860] RAX: ffffffffffffffda RBX: 00000000000f4bde RCX: 00007fdfaf59ce59 [ 1002.879001][T29860] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdfaf81609c [ 1002.879010][T29860] RBP: 0000000000000032 R08: 0000000000000001 R09: 0000000000000000 [ 1002.879019][T29860] R10: 00007ffd6c6338f0 R11: 0000000000000246 R12: 00007ffd6c633910 [ 1002.879028][T29860] R13: 00007fdfaf81609c R14: 00000000000f4c10 R15: 00007ffd6c6338f0 [ 1002.879047][T29860] [ 1003.763624][T29909] netlink: 'syz.4.3044': attribute type 8 has an invalid length. [ 1005.364496][T13738] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 1006.264327][T30014] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3050'. [ 1007.423000][T26608] Bluetooth: hci4: command 0x0c1a tx timeout [ 1008.652876][T30092] FAULT_INJECTION: forcing a failure. [ 1008.652876][T30092] name failslab, interval 1, probability 0, space 0, times 0 [ 1008.728582][T30092] CPU: 0 UID: 0 PID: 30092 Comm: syz.3.3057 Tainted: G L syzkaller #0 PREEMPT(full) [ 1008.728609][T30092] Tainted: [L]=SOFTLOCKUP [ 1008.728615][T30092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1008.728624][T30092] Call Trace: [ 1008.728630][T30092] [ 1008.728636][T30092] dump_stack_lvl+0x100/0x190 [ 1008.728657][T30092] should_fail_ex.cold+0x5/0xa [ 1008.728677][T30092] should_failslab+0xc2/0x120 [ 1008.728695][T30092] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1008.728718][T30092] ? skb_clone+0x190/0x400 [ 1008.728740][T30092] skb_clone+0x190/0x400 [ 1008.728759][T30092] netlink_deliver_tap+0xaed/0xcc0 [ 1008.728785][T30092] netlink_unicast+0x62b/0x850 [ 1008.728809][T30092] ? __pfx_netlink_unicast+0x10/0x10 [ 1008.728830][T30092] ? __build_skb_around+0x278/0x390 [ 1008.728855][T30092] ? is_vmalloc_addr+0x86/0xa0 [ 1008.728880][T30092] netlink_sendmsg+0x8b0/0xda0 [ 1008.728904][T30092] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1008.728929][T30092] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1008.728956][T30092] sock_write_iter+0x524/0x5a0 [ 1008.728978][T30092] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1008.729013][T30092] ? __pfx_sock_write_iter+0x10/0x10 [ 1008.729041][T30092] ? bpf_lsm_file_permission+0x9/0x10 [ 1008.729062][T30092] ? security_file_permission+0x76/0x210 [ 1008.729081][T30092] ? rw_verify_area+0xce/0x6d0 [ 1008.729098][T30092] vfs_write+0x6ac/0x1070 [ 1008.729116][T30092] ? __pfx_sock_write_iter+0x10/0x10 [ 1008.729140][T30092] ? __pfx_vfs_write+0x10/0x10 [ 1008.729155][T30092] ? find_held_lock+0x2b/0x80 [ 1008.729186][T30092] ksys_write+0x1f8/0x250 [ 1008.729204][T30092] ? __pfx_ksys_write+0x10/0x10 [ 1008.729222][T30092] ? rcu_is_watching+0x12/0xc0 [ 1008.729243][T30092] do_syscall_64+0x10b/0xf80 [ 1008.729266][T30092] ? clear_bhb_loop+0x40/0x90 [ 1008.729284][T30092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.729300][T30092] RIP: 0033:0x7f0b1179ce59 [ 1008.729313][T30092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1008.729327][T30092] RSP: 002b:00007f0b12583028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1008.729342][T30092] RAX: ffffffffffffffda RBX: 00007f0b11a15fa0 RCX: 00007f0b1179ce59 [ 1008.729352][T30092] RDX: 0000000000001d30 RSI: 0000200000000000 RDI: 0000000000000003 [ 1008.729361][T30092] RBP: 00007f0b12583090 R08: 0000000000000000 R09: 0000000000000000 [ 1008.729370][T30092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1008.729379][T30092] R13: 00007f0b11a16038 R14: 00007f0b11a15fa0 R15: 00007ffdd1956e08 [ 1008.729398][T30092] [ 1009.555313][T13738] Bluetooth: hci4: command 0x0c1a tx timeout [ 1011.940123][T30185] Process accounting resumed [ 1012.156566][T30225] warning: `syz.5.3067' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1014.690393][T30311] vhci_hcd vhci_hcd.0: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 1017.419632][T30451] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(56.33554432.7388454), cmd(2) [ 1017.487878][T30450] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(56.33554432.7388454), cmd(2) [ 1019.496487][T30529] FAULT_INJECTION: forcing a failure. [ 1019.496487][T30529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1019.633502][T30529] CPU: 0 UID: 0 PID: 30529 Comm: syz.1.3102 Tainted: G L syzkaller #0 PREEMPT(full) [ 1019.633527][T30529] Tainted: [L]=SOFTLOCKUP [ 1019.633533][T30529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1019.633542][T30529] Call Trace: [ 1019.633548][T30529] [ 1019.633554][T30529] dump_stack_lvl+0x100/0x190 [ 1019.633576][T30529] should_fail_ex.cold+0x5/0xa [ 1019.633596][T30529] _copy_from_user+0x2e/0xd0 [ 1019.633613][T30529] kstrtouint_from_user+0xd6/0x1d0 [ 1019.633634][T30529] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1019.633653][T30529] ? __lock_acquire+0x4a5/0x2630 [ 1019.633671][T30529] ? lock_acquire+0x1b1/0x370 [ 1019.633689][T30529] proc_fail_nth_write+0x83/0x220 [ 1019.633713][T30529] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1019.633742][T30529] vfs_write+0x2aa/0x1070 [ 1019.633760][T30529] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1019.633786][T30529] ? __pfx_vfs_write+0x10/0x10 [ 1019.633802][T30529] ? __fget_files+0x215/0x3d0 [ 1019.633824][T30529] ? __fget_files+0x21f/0x3d0 [ 1019.633847][T30529] ksys_write+0x12a/0x250 [ 1019.633864][T30529] ? __pfx_ksys_write+0x10/0x10 [ 1019.633883][T30529] ? rcu_is_watching+0x12/0xc0 [ 1019.633903][T30529] do_syscall_64+0x10b/0xf80 [ 1019.633926][T30529] ? clear_bhb_loop+0x40/0x90 [ 1019.633949][T30529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.633965][T30529] RIP: 0033:0x7f809e55d68e [ 1019.633978][T30529] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1019.633992][T30529] RSP: 002b:00007f809f404fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1019.634007][T30529] RAX: ffffffffffffffda RBX: 00007f809f4056c0 RCX: 00007f809e55d68e [ 1019.634018][T30529] RDX: 0000000000000001 RSI: 00007f809f4050a0 RDI: 0000000000000004 [ 1019.634027][T30529] RBP: 00007f809f405090 R08: 0000000000000000 R09: 0000000000000000 [ 1019.634036][T30529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1019.634045][T30529] R13: 00007f809e816038 R14: 00007f809e815fa0 R15: 00007ffdda475288 [ 1019.634064][T30529] [ 1020.564059][T30554] random: crng reseeded on system resumption [ 1027.880660][T30734] lo: entered allmulticast mode [ 1027.964522][T30738] lo: left allmulticast mode [ 1029.152025][T30772] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3132'. [ 1030.858345][T30827] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3135'. [ 1032.141608][T30880] can: request_module (can-proto-0) failed. [ 1035.532719][T30955] KVM: debugfs: duplicate directory 30955-3 [ 1036.932379][T26608] block nbd1: Receive control failed (result -32) [ 1037.285684][T31051] netlink: 146 bytes leftover after parsing attributes in process `syz.4.3152'. [ 1037.321330][T31057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3156'. [ 1037.719057][T31069] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input13 [ 1037.844803][T31079] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3160'. [ 1038.537937][ T30] audit: type=1800 audit(4294967524.100:31): pid=31088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3159" name="dbroot" dev="configfs" ino=87840 res=0 errno=0 [ 1039.048463][T31109] netlink: 25 bytes leftover after parsing attributes in process `syz.4.3159'. [ 1040.378360][T31234] FAULT_INJECTION: forcing a failure. [ 1040.378360][T31234] name failslab, interval 1, probability 0, space 0, times 0 [ 1040.449803][T31234] CPU: 0 UID: 0 PID: 31234 Comm: syz.5.3167 Tainted: G L syzkaller #0 PREEMPT(full) [ 1040.449831][T31234] Tainted: [L]=SOFTLOCKUP [ 1040.449837][T31234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1040.449847][T31234] Call Trace: [ 1040.449853][T31234] [ 1040.449860][T31234] dump_stack_lvl+0x100/0x190 [ 1040.449884][T31234] should_fail_ex.cold+0x5/0xa [ 1040.449905][T31234] should_failslab+0xc2/0x120 [ 1040.449923][T31234] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1040.449945][T31234] ? register_netdevice+0x50c/0x24b0 [ 1040.449965][T31234] ? lockdep_init_map_type+0x5c/0x250 [ 1040.449984][T31234] register_netdevice+0x50c/0x24b0 [ 1040.450006][T31234] ? idr_alloc+0xdd/0x130 [ 1040.450028][T31234] ? __pfx_register_netdevice+0x10/0x10 [ 1040.450046][T31234] ? net_generic+0xea/0x2a0 [ 1040.450074][T31234] ppp_dev_configure+0x986/0xcb0 [ 1040.450102][T31234] ppp_ioctl+0x9d7/0x27c0 [ 1040.450118][T31234] ? find_held_lock+0x2b/0x80 [ 1040.450138][T31234] ? __pfx_ppp_ioctl+0x10/0x10 [ 1040.450156][T31234] ? __fget_files+0x21f/0x3d0 [ 1040.450177][T31234] ? __pfx_ppp_ioctl+0x10/0x10 [ 1040.450192][T31234] __x64_sys_ioctl+0x18e/0x210 [ 1040.450209][T31234] do_syscall_64+0x10b/0xf80 [ 1040.450230][T31234] ? clear_bhb_loop+0x40/0x90 [ 1040.450248][T31234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.450263][T31234] RIP: 0033:0x7fdfaf59ce59 [ 1040.450277][T31234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1040.450291][T31234] RSP: 002b:00007fdfb047c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1040.450307][T31234] RAX: ffffffffffffffda RBX: 00007fdfaf815fa0 RCX: 00007fdfaf59ce59 [ 1040.450317][T31234] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 000000000000000a [ 1040.450326][T31234] RBP: 00007fdfaf632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1040.450335][T31234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1040.450344][T31234] R13: 00007fdfaf816038 R14: 00007fdfaf815fa0 R15: 00007ffd6c633688 [ 1040.450363][T31234] [ 1042.282075][T31213] Process accounting paused [ 1042.371163][T31293] FAULT_INJECTION: forcing a failure. [ 1042.371163][T31293] name failslab, interval 1, probability 0, space 0, times 0 [ 1042.445660][T31293] CPU: 0 UID: 0 PID: 31293 Comm: syz.5.3171 Tainted: G L syzkaller #0 PREEMPT(full) [ 1042.445686][T31293] Tainted: [L]=SOFTLOCKUP [ 1042.445692][T31293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1042.445701][T31293] Call Trace: [ 1042.445707][T31293] [ 1042.445713][T31293] dump_stack_lvl+0x100/0x190 [ 1042.445734][T31293] should_fail_ex.cold+0x5/0xa [ 1042.445753][T31293] ? tomoyo_encode2+0xfb/0x3c0 [ 1042.445772][T31293] should_failslab+0xc2/0x120 [ 1042.445790][T31293] __kmalloc_noprof+0xe0/0x850 [ 1042.445804][T31293] ? d_absolute_path+0x136/0x1b0 [ 1042.445822][T31293] tomoyo_encode2+0xfb/0x3c0 [ 1042.445844][T31293] tomoyo_encode+0x29/0x50 [ 1042.445862][T31293] tomoyo_realpath_from_path+0x18c/0x690 [ 1042.445886][T31293] tomoyo_check_open_permission+0x2af/0x3c0 [ 1042.445904][T31293] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1042.445928][T31293] ? hook_file_open+0x24e/0x7a0 [ 1042.445958][T31293] ? path_get+0x61/0x80 [ 1042.445980][T31293] tomoyo_file_open+0x6b/0x90 [ 1042.446003][T31293] security_file_open+0xb5/0x1e0 [ 1042.446021][T31293] do_dentry_open+0x5aa/0x1660 [ 1042.446044][T31293] ? security_inode_permission+0xbf/0x250 [ 1042.446064][T31293] vfs_open+0x82/0x3f0 [ 1042.446088][T31293] path_openat+0x208c/0x31a0 [ 1042.446114][T31293] ? __pfx_path_openat+0x10/0x10 [ 1042.446139][T31293] do_file_open+0x20e/0x430 [ 1042.446159][T31293] ? __pfx_do_file_open+0x10/0x10 [ 1042.446192][T31293] ? alloc_fd+0x476/0x790 [ 1042.446213][T31293] ? do_getname+0x191/0x390 [ 1042.446236][T31293] do_sys_openat2+0x10d/0x1e0 [ 1042.446258][T31293] ? __pfx_do_sys_openat2+0x10/0x10 [ 1042.446287][T31293] __x64_sys_openat+0x12d/0x210 [ 1042.446311][T31293] ? __pfx___x64_sys_openat+0x10/0x10 [ 1042.446333][T31293] ? ksys_write+0x1ac/0x250 [ 1042.446352][T31293] ? rcu_is_watching+0x12/0xc0 [ 1042.446373][T31293] do_syscall_64+0x10b/0xf80 [ 1042.446396][T31293] ? clear_bhb_loop+0x40/0x90 [ 1042.446414][T31293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.446430][T31293] RIP: 0033:0x7fdfaf59ce59 [ 1042.446442][T31293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1042.446457][T31293] RSP: 002b:00007fdfb047c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1042.446472][T31293] RAX: ffffffffffffffda RBX: 00007fdfaf815fa0 RCX: 00007fdfaf59ce59 [ 1042.446482][T31293] RDX: 0000000000008000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1042.446492][T31293] RBP: 00007fdfaf632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1042.446501][T31293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1042.446510][T31293] R13: 00007fdfaf816038 R14: 00007fdfaf815fa0 R15: 00007ffd6c633688 [ 1042.446529][T31293] [ 1042.452444][T31293] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1044.393082][T31344] netlink: 342 bytes leftover after parsing attributes in process `syz.5.3179'. [ 1044.511404][T31350] netlink: 342 bytes leftover after parsing attributes in process `syz.5.3179'. [ 1044.876282][T31378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3178'. [ 1045.018035][T31388] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1045.084206][T31388] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 1046.607749][T31449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3185'. [ 1052.981759][T31605] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3198'. [ 1053.511840][T31705] FAULT_INJECTION: forcing a failure. [ 1053.511840][T31705] name failslab, interval 1, probability 0, space 0, times 0 [ 1053.612325][T31705] CPU: 0 UID: 0 PID: 31705 Comm: syz.4.3202 Tainted: G L syzkaller #0 PREEMPT(full) [ 1053.612351][T31705] Tainted: [L]=SOFTLOCKUP [ 1053.612356][T31705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1053.612365][T31705] Call Trace: [ 1053.612371][T31705] [ 1053.612377][T31705] dump_stack_lvl+0x100/0x190 [ 1053.612398][T31705] should_fail_ex.cold+0x5/0xa [ 1053.612417][T31705] ? tomoyo_encode2+0xfb/0x3c0 [ 1053.612436][T31705] should_failslab+0xc2/0x120 [ 1053.612459][T31705] __kmalloc_noprof+0xe0/0x850 [ 1053.612473][T31705] ? d_absolute_path+0x136/0x1b0 [ 1053.612491][T31705] tomoyo_encode2+0xfb/0x3c0 [ 1053.612513][T31705] tomoyo_encode+0x29/0x50 [ 1053.612531][T31705] tomoyo_realpath_from_path+0x18c/0x690 [ 1053.612555][T31705] tomoyo_path_number_perm+0x23c/0x580 [ 1053.612571][T31705] ? tomoyo_path_number_perm+0x22e/0x580 [ 1053.612589][T31705] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1053.612624][T31705] ? find_held_lock+0x2b/0x80 [ 1053.612644][T31705] ? __fget_files+0x215/0x3d0 [ 1053.612660][T31705] ? hook_file_ioctl_common+0x149/0x410 [ 1053.612677][T31705] ? __fget_files+0x215/0x3d0 [ 1053.612697][T31705] ? __fget_files+0x21f/0x3d0 [ 1053.612717][T31705] security_file_ioctl+0xd3/0x230 [ 1053.612735][T31705] __x64_sys_ioctl+0xb7/0x210 [ 1053.612753][T31705] do_syscall_64+0x10b/0xf80 [ 1053.612775][T31705] ? clear_bhb_loop+0x40/0x90 [ 1053.612794][T31705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.612809][T31705] RIP: 0033:0x7fe07999ce59 [ 1053.612822][T31705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1053.612837][T31705] RSP: 002b:00007fe07a76e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1053.612852][T31705] RAX: ffffffffffffffda RBX: 00007fe079c15fa0 RCX: 00007fe07999ce59 [ 1053.612862][T31705] RDX: 0000000000000000 RSI: 0000000000004604 RDI: 0000000000000003 [ 1053.612871][T31705] RBP: 00007fe07a76e090 R08: 0000000000000000 R09: 0000000000000000 [ 1053.612880][T31705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1053.612889][T31705] R13: 00007fe079c16038 R14: 00007fe079c15fa0 R15: 00007fff80a9e388 [ 1053.612908][T31705] [ 1053.612923][T31705] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1054.591998][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.604956][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.931757][T31831] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3207'. [ 1056.153932][T31831] veth0_vlan: entered allmulticast mode [ 1058.988915][T31925] unsupported nla_type 113 [ 1061.073056][T32039] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3226'. [ 1064.462277][T32228] FAULT_INJECTION: forcing a failure. [ 1064.462277][T32228] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1064.542134][T32228] CPU: 0 UID: 0 PID: 32228 Comm: syz.5.3237 Tainted: G L syzkaller #0 PREEMPT(full) [ 1064.542163][T32228] Tainted: [L]=SOFTLOCKUP [ 1064.542169][T32228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1064.542179][T32228] Call Trace: [ 1064.542185][T32228] [ 1064.542191][T32228] dump_stack_lvl+0x100/0x190 [ 1064.542214][T32228] should_fail_ex.cold+0x5/0xa [ 1064.542231][T32228] ? prepare_alloc_pages+0x16d/0x5f0 [ 1064.542252][T32228] should_fail_alloc_page+0xeb/0x140 [ 1064.542272][T32228] prepare_alloc_pages+0x1f0/0x5f0 [ 1064.542294][T32228] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 1064.542322][T32228] ? __lock_acquire+0x4a5/0x2630 [ 1064.542340][T32228] ? __lock_acquire+0x4a5/0x2630 [ 1064.542359][T32228] ? css_rstat_updated+0x1ce/0x5a0 [ 1064.542385][T32228] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1064.542411][T32228] ? do_raw_spin_lock+0x128/0x260 [ 1064.542429][T32228] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1064.542447][T32228] ? find_held_lock+0x2b/0x80 [ 1064.542473][T32228] ? __lock_acquire+0x4a5/0x2630 [ 1064.542488][T32228] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1064.542511][T32228] ? policy_nodemask+0xed/0x4f0 [ 1064.542530][T32228] alloc_pages_mpol+0x1fb/0x540 [ 1064.542549][T32228] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1064.542566][T32228] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 1064.542582][T32228] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 1064.542600][T32228] folio_alloc_mpol_noprof+0x36/0x260 [ 1064.542622][T32228] shmem_alloc_folio+0x135/0x160 [ 1064.542644][T32228] shmem_alloc_and_add_folio+0x371/0xd40 [ 1064.542672][T32228] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1064.542697][T32228] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 1064.542717][T32228] shmem_get_folio_gfp+0x6ab/0x1900 [ 1064.542736][T32228] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1064.542752][T32228] ? ktime_get_coarse_real_ts64_mg+0x235/0x300 [ 1064.542769][T32228] ? lockdep_hardirqs_on+0x78/0x100 [ 1064.542794][T32228] shmem_fault+0x1f9/0xa20 [ 1064.542808][T32228] ? __lock_acquire+0x4a5/0x2630 [ 1064.542823][T32228] ? __pfx_shmem_fault+0x10/0x10 [ 1064.542839][T32228] ? __up_read+0x2c1/0x6e0 [ 1064.542862][T32228] ? __pfx_filemap_map_pages+0x10/0x10 [ 1064.542885][T32228] __do_fault+0x10b/0x440 [ 1064.542899][T32228] ? find_held_lock+0x2b/0x80 [ 1064.542919][T32228] do_fault+0x2db/0x1750 [ 1064.542941][T32228] __handle_mm_fault+0x187d/0x2a00 [ 1064.542965][T32228] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1064.542985][T32228] ? __pfx___handle_mm_fault+0x10/0x10 [ 1064.543007][T32228] ? pte_offset_map_lock+0x174/0x320 [ 1064.543025][T32228] ? find_held_lock+0x2b/0x80 [ 1064.543050][T32228] ? follow_page_pte+0x4d0/0x13f0 [ 1064.543071][T32228] handle_mm_fault+0x36d/0xa20 [ 1064.543096][T32228] __get_user_pages+0x1178/0x32a0 [ 1064.543119][T32228] ? down_read_killable+0x307/0x4b0 [ 1064.543141][T32228] ? __pfx___get_user_pages+0x10/0x10 [ 1064.543166][T32228] faultin_page_range+0x1f1/0x9e0 [ 1064.543189][T32228] madvise_do_behavior+0x354/0x510 [ 1064.543212][T32228] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1064.543244][T32228] do_madvise+0x195/0x240 [ 1064.543263][T32228] ? __pfx_do_madvise+0x10/0x10 [ 1064.543282][T32228] ? do_futex+0x192/0x350 [ 1064.543316][T32228] ? __fget_files+0x21f/0x3d0 [ 1064.543347][T32228] __x64_sys_madvise+0xa9/0x110 [ 1064.543371][T32228] ? lockdep_hardirqs_on+0x78/0x100 [ 1064.543394][T32228] do_syscall_64+0x10b/0xf80 [ 1064.543416][T32228] ? clear_bhb_loop+0x40/0x90 [ 1064.543435][T32228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.543451][T32228] RIP: 0033:0x7fdfaf59ce59 [ 1064.543464][T32228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1064.543479][T32228] RSP: 002b:00007fdfb047c028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1064.543494][T32228] RAX: ffffffffffffffda RBX: 00007fdfaf815fa0 RCX: 00007fdfaf59ce59 [ 1064.543505][T32228] RDX: 0000000000000017 RSI: 00000000002003f0 RDI: 0000000000000000 [ 1064.543514][T32228] RBP: 00007fdfaf632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1064.543524][T32228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1064.543533][T32228] R13: 00007fdfaf816038 R14: 00007fdfaf815fa0 R15: 00007ffd6c633688 [ 1064.543553][T32228] [ 1065.634487][T32236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3239'. [ 1065.669641][T32238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3239'. [ 1066.870730][T32328] ubi0: attaching mtd0 [ 1066.906473][T32328] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 2 [ 1066.978030][T32328] eraseblock attaching information dump: [ 1067.018122][T32328] ec 1 [ 1067.046781][T32328] pnum 1 [ 1067.063511][T32328] lnum 1 [ 1067.082323][T32328] scrub 0 [ 1067.108584][T32328] sqnum 2 [ 1067.127201][T32328] Volume identifier header dump: [ 1067.152805][T32328] magic 55424921 [ 1067.171456][T32328] version 1 [ 1067.209675][T32328] vol_type 1 [ 1067.229492][T32328] copy_flag 0 [ 1067.243687][T32328] compat 5 [ 1067.254575][T32328] vol_id 2147479551 [ 1067.281517][T32328] lnum 1 [ 1067.297098][T32328] data_size 0 [ 1067.309550][T32328] used_ebs 0 [ 1067.320294][T32328] data_pad 0 [ 1067.338919][T32328] sqnum 2 [ 1067.353812][T32328] hdr_crc 7beff9af [ 1067.373444][T32328] Volume identifier header hexdump: [ 1068.399434][T32328] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1069.254814][T26608] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1069.268990][T13738] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1069.446409][T32458] dyndbg: expected <4096 bytes into control [ 1069.765659][T13738] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 1070.162144][T32498] random: crng reseeded on system resumption [ 1071.298736][T32577] FAULT_INJECTION: forcing a failure. [ 1071.298736][T32577] name failslab, interval 1, probability 0, space 0, times 0 [ 1071.468747][T32577] CPU: 0 UID: 0 PID: 32577 Comm: syz.3.3261 Tainted: G L syzkaller #0 PREEMPT(full) [ 1071.468775][T32577] Tainted: [L]=SOFTLOCKUP [ 1071.468781][T32577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1071.468790][T32577] Call Trace: [ 1071.468796][T32577] [ 1071.468802][T32577] dump_stack_lvl+0x100/0x190 [ 1071.468824][T32577] should_fail_ex.cold+0x5/0xa [ 1071.468845][T32577] should_failslab+0xc2/0x120 [ 1071.468864][T32577] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1071.468888][T32577] ? __d_alloc+0x34/0xa40 [ 1071.468912][T32577] __d_alloc+0x34/0xa40 [ 1071.468933][T32577] d_alloc_pseudo+0x1c/0xc0 [ 1071.468948][T32577] alloc_file_pseudo+0xcf/0x230 [ 1071.468972][T32577] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1071.468994][T32577] ? alloc_fd+0x476/0x790 [ 1071.469015][T32577] sock_alloc_file+0x50/0x210 [ 1071.469035][T32577] __sys_socket+0x1c0/0x260 [ 1071.469057][T32577] ? __pfx___sys_socket+0x10/0x10 [ 1071.469079][T32577] ? ksys_write+0x1ac/0x250 [ 1071.469100][T32577] __x64_sys_socket+0x72/0xb0 [ 1071.469113][T32577] ? lockdep_hardirqs_on+0x78/0x100 [ 1071.469136][T32577] do_syscall_64+0x10b/0xf80 [ 1071.469158][T32577] ? clear_bhb_loop+0x40/0x90 [ 1071.469176][T32577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.469191][T32577] RIP: 0033:0x7f0b1179ce59 [ 1071.469204][T32577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1071.469220][T32577] RSP: 002b:00007f0b12583028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1071.469235][T32577] RAX: ffffffffffffffda RBX: 00007f0b11a15fa0 RCX: 00007f0b1179ce59 [ 1071.469245][T32577] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 1071.469254][T32577] RBP: 00007f0b11832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1071.469264][T32577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1071.469273][T32577] R13: 00007f0b11a16038 R14: 00007f0b11a15fa0 R15: 00007ffdd1956e08 [ 1071.469293][T32577] [ 1071.750505][T32614] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3264'. [ 1071.933792][T13738] Bluetooth: hci4: command 0x0c1a tx timeout [ 1072.283484][ T30] audit: type=1326 audit(4294967557.840:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32727 comm="syz.4.3268" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe07999ce59 code=0x0 [ 1072.650139][T32585] Process accounting resumed [ 1073.603641][ T326] zswap: compressor not available [ 1073.975182][T13738] Bluetooth: hci4: command 0x0c1a tx timeout [ 1074.565072][ T30] audit: type=1807 audit(4294967560.120:33): UNKNOWN= res=0 [ 1074.631824][ T355] ima: policy update failed [ 1074.644452][ T30] audit: type=1802 audit(4294967560.190:34): pid=355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.5.3276" res=0 errno=0 [ 1074.744635][ T30] audit: type=1802 audit(4294967560.260:35): pid=355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.3276" res=0 errno=0 [ 1077.264443][ T496] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3286'. [ 1080.396983][ T670] FAULT_INJECTION: forcing a failure. [ 1080.396983][ T670] name failslab, interval 1, probability 0, space 0, times 0 [ 1080.527530][ T670] CPU: 0 UID: 0 PID: 670 Comm: syz.5.3297 Tainted: G L syzkaller #0 PREEMPT(full) [ 1080.527558][ T670] Tainted: [L]=SOFTLOCKUP [ 1080.527564][ T670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1080.527574][ T670] Call Trace: [ 1080.527580][ T670] [ 1080.527587][ T670] dump_stack_lvl+0x100/0x190 [ 1080.527610][ T670] should_fail_ex.cold+0x5/0xa [ 1080.527629][ T670] should_failslab+0xc2/0x120 [ 1080.527648][ T670] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1080.527671][ T670] ? vm_area_alloc+0x1f/0x160 [ 1080.527692][ T670] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1080.527717][ T670] vm_area_alloc+0x1f/0x160 [ 1080.527746][ T670] __mmap_region+0x104d/0x2da0 [ 1080.527773][ T670] ? is_bpf_text_address+0x8a/0x1a0 [ 1080.527794][ T670] ? __pfx___mmap_region+0x10/0x10 [ 1080.527821][ T670] ? __lock_acquire+0x4a5/0x2630 [ 1080.527845][ T670] ? __lock_acquire+0x4a5/0x2630 [ 1080.527859][ T670] ? do_raw_spin_unlock+0x145/0x1e0 [ 1080.527877][ T670] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1080.527907][ T670] ? find_held_lock+0x2b/0x80 [ 1080.527927][ T670] ? rcu_is_watching+0x12/0xc0 [ 1080.527953][ T670] ? rcu_is_watching+0x12/0xc0 [ 1080.527971][ T670] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 1080.527992][ T670] ? lockdep_hardirqs_on+0x78/0x100 [ 1080.528036][ T670] ? futex_unqueue+0x133/0x2c0 [ 1080.528057][ T670] mmap_region+0x35d/0x620 [ 1080.528074][ T670] ? __pfx_mmap_region+0x10/0x10 [ 1080.528088][ T670] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 1080.528109][ T670] ? cap_mmap_addr+0x4b/0x120 [ 1080.528130][ T670] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1080.528145][ T670] ? security_mmap_addr+0x71/0x1e0 [ 1080.528166][ T670] ? __get_unmapped_area+0x255/0x3e0 [ 1080.528186][ T670] do_mmap+0xc63/0x12f0 [ 1080.528208][ T670] ? __pfx_do_mmap+0x10/0x10 [ 1080.528227][ T670] ? __pfx_down_write_killable+0x10/0x10 [ 1080.528247][ T670] vm_mmap_pgoff+0x29e/0x470 [ 1080.528270][ T670] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1080.528290][ T670] ? do_futex+0x192/0x350 [ 1080.528307][ T670] ? __pfx_do_futex+0x10/0x10 [ 1080.528326][ T670] ksys_mmap_pgoff+0xe4/0x610 [ 1080.528345][ T670] ? __x64_sys_futex+0x358/0x4d0 [ 1080.528361][ T670] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1080.528379][ T670] ? xfd_validate_state+0x129/0x190 [ 1080.528394][ T670] ? ksys_write+0x1ac/0x250 [ 1080.528416][ T670] __x64_sys_mmap+0x125/0x190 [ 1080.528435][ T670] do_syscall_64+0x10b/0xf80 [ 1080.528456][ T670] ? clear_bhb_loop+0x40/0x90 [ 1080.528474][ T670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1080.528490][ T670] RIP: 0033:0x7fdfaf59ce59 [ 1080.528505][ T670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1080.528520][ T670] RSP: 002b:00007fdfb045b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1080.528535][ T670] RAX: ffffffffffffffda RBX: 00007fdfaf816090 RCX: 00007fdfaf59ce59 [ 1080.528546][ T670] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000401000 [ 1080.528555][ T670] RBP: 00007fdfaf632d6f R08: 0000000000000002 R09: 0000000000008000 [ 1080.528565][ T670] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1080.528574][ T670] R13: 00007fdfaf816128 R14: 00007fdfaf816090 R15: 00007ffd6c633688 [ 1080.528595][ T670] [ 1081.226335][ T675] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 1082.832937][ T751] FAULT_INJECTION: forcing a failure. [ 1082.832937][ T751] name failslab, interval 1, probability 0, space 0, times 0 [ 1082.925023][ T751] CPU: 0 UID: 0 PID: 751 Comm: syz.1.3305 Tainted: G L syzkaller #0 PREEMPT(full) [ 1082.925050][ T751] Tainted: [L]=SOFTLOCKUP [ 1082.925056][ T751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1082.925065][ T751] Call Trace: [ 1082.925070][ T751] [ 1082.925076][ T751] dump_stack_lvl+0x100/0x190 [ 1082.925097][ T751] should_fail_ex.cold+0x5/0xa [ 1082.925116][ T751] should_failslab+0xc2/0x120 [ 1082.925135][ T751] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1082.925158][ T751] ? do_getname+0x35/0x390 [ 1082.925179][ T751] ? find_held_lock+0x2b/0x80 [ 1082.925197][ T751] ? ksys_write+0x190/0x250 [ 1082.925217][ T751] do_getname+0x35/0x390 [ 1082.925241][ T751] do_sys_openat2+0xc5/0x1e0 [ 1082.925264][ T751] ? __pfx_do_sys_openat2+0x10/0x10 [ 1082.925285][ T751] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1082.925304][ T751] ? __fget_files+0x21f/0x3d0 [ 1082.925324][ T751] __x64_sys_openat+0x12d/0x210 [ 1082.925347][ T751] ? __pfx___x64_sys_openat+0x10/0x10 [ 1082.925369][ T751] ? ksys_write+0x1ac/0x250 [ 1082.925389][ T751] ? rcu_is_watching+0x12/0xc0 [ 1082.925409][ T751] do_syscall_64+0x10b/0xf80 [ 1082.925432][ T751] ? clear_bhb_loop+0x40/0x90 [ 1082.925457][ T751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.925472][ T751] RIP: 0033:0x7f809e59ce59 [ 1082.925485][ T751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1082.925500][ T751] RSP: 002b:00007f809f405028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1082.925514][ T751] RAX: ffffffffffffffda RBX: 00007f809e815fa0 RCX: 00007f809e59ce59 [ 1082.925524][ T751] RDX: 0000000000002600 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1082.925533][ T751] RBP: 00007f809f405090 R08: 0000000000000000 R09: 0000000000000000 [ 1082.925542][ T751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1082.925551][ T751] R13: 00007f809e816038 R14: 00007f809e815fa0 R15: 00007ffdda475288 [ 1082.925570][ T751] [ 1084.888893][ T831] usbip-vudc usbip-vudc.0: gadget not bound [ 1085.062478][ T838] FAULT_INJECTION: forcing a failure. [ 1085.062478][ T838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1085.172786][ T838] CPU: 0 UID: 0 PID: 838 Comm: syz.1.3316 Tainted: G L syzkaller #0 PREEMPT(full) [ 1085.172812][ T838] Tainted: [L]=SOFTLOCKUP [ 1085.172817][ T838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1085.172827][ T838] Call Trace: [ 1085.172832][ T838] [ 1085.172838][ T838] dump_stack_lvl+0x100/0x190 [ 1085.172858][ T838] should_fail_ex.cold+0x5/0xa [ 1085.172877][ T838] strncpy_from_user+0x3b/0x2d0 [ 1085.172897][ T838] do_getname+0x78/0x390 [ 1085.172922][ T838] do_sys_openat2+0xc5/0x1e0 [ 1085.172945][ T838] ? __pfx_do_sys_openat2+0x10/0x10 [ 1085.172966][ T838] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1085.172984][ T838] ? __fget_files+0x21f/0x3d0 [ 1085.173005][ T838] __x64_sys_openat+0x12d/0x210 [ 1085.173028][ T838] ? __pfx___x64_sys_openat+0x10/0x10 [ 1085.173050][ T838] ? ksys_write+0x1ac/0x250 [ 1085.173070][ T838] ? rcu_is_watching+0x12/0xc0 [ 1085.173091][ T838] do_syscall_64+0x10b/0xf80 [ 1085.173117][ T838] ? clear_bhb_loop+0x40/0x90 [ 1085.173135][ T838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.173151][ T838] RIP: 0033:0x7f809e59ce59 [ 1085.173164][ T838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1085.173178][ T838] RSP: 002b:00007f809f405028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1085.173193][ T838] RAX: ffffffffffffffda RBX: 00007f809e815fa0 RCX: 00007f809e59ce59 [ 1085.173204][ T838] RDX: 0000000000002600 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1085.173213][ T838] RBP: 00007f809f405090 R08: 0000000000000000 R09: 0000000000000000 [ 1085.173222][ T838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1085.173231][ T838] R13: 00007f809e816038 R14: 00007f809e815fa0 R15: 00007ffdda475288 [ 1085.173251][ T838] [ 1085.423957][ T853] binder: 852:853 ioctl c018620c 200000000140 returned -22 [ 1087.392887][T26608] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 1087.400660][T26608] Bluetooth: hci5: Invalid handle: 0x3a4a > 0x0eff [ 1087.520971][ T999] FAULT_INJECTION: forcing a failure. [ 1087.520971][ T999] name failslab, interval 1, probability 0, space 0, times 0 [ 1087.598673][ T999] CPU: 0 UID: 0 PID: 999 Comm: syz.5.3329 Tainted: G L syzkaller #0 PREEMPT(full) [ 1087.598698][ T999] Tainted: [L]=SOFTLOCKUP [ 1087.598703][ T999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1087.598713][ T999] Call Trace: [ 1087.598718][ T999] [ 1087.598724][ T999] dump_stack_lvl+0x100/0x190 [ 1087.598745][ T999] should_fail_ex.cold+0x5/0xa [ 1087.598764][ T999] should_failslab+0xc2/0x120 [ 1087.598783][ T999] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1087.598806][ T999] ? alloc_empty_file+0x5b/0x1c0 [ 1087.598827][ T999] ? __pfx_stack_trace_save+0x10/0x10 [ 1087.598851][ T999] alloc_empty_file+0x5b/0x1c0 [ 1087.598874][ T999] path_openat+0xe8/0x31a0 [ 1087.598892][ T999] ? kasan_save_stack+0x3f/0x50 [ 1087.598906][ T999] ? kasan_save_stack+0x30/0x50 [ 1087.598919][ T999] ? kasan_save_track+0x14/0x30 [ 1087.598933][ T999] ? __kasan_slab_alloc+0x89/0x90 [ 1087.598948][ T999] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1087.598970][ T999] ? do_getname+0x35/0x390 [ 1087.598996][ T999] ? do_sys_openat2+0xc5/0x1e0 [ 1087.599018][ T999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.599036][ T999] ? __pfx_path_openat+0x10/0x10 [ 1087.599061][ T999] do_file_open+0x20e/0x430 [ 1087.599081][ T999] ? __pfx_do_file_open+0x10/0x10 [ 1087.599112][ T999] ? alloc_fd+0x476/0x790 [ 1087.599132][ T999] ? do_getname+0x191/0x390 [ 1087.599155][ T999] do_sys_openat2+0x10d/0x1e0 [ 1087.599177][ T999] ? __pfx_do_sys_openat2+0x10/0x10 [ 1087.599198][ T999] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1087.599217][ T999] ? __fget_files+0x21f/0x3d0 [ 1087.599237][ T999] __x64_sys_openat+0x12d/0x210 [ 1087.599260][ T999] ? __pfx___x64_sys_openat+0x10/0x10 [ 1087.599282][ T999] ? ksys_write+0x1ac/0x250 [ 1087.599301][ T999] ? rcu_is_watching+0x12/0xc0 [ 1087.599321][ T999] do_syscall_64+0x10b/0xf80 [ 1087.599346][ T999] ? clear_bhb_loop+0x40/0x90 [ 1087.599365][ T999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.599380][ T999] RIP: 0033:0x7fdfaf59ce59 [ 1087.599393][ T999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1087.599407][ T999] RSP: 002b:00007fdfb047c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1087.599422][ T999] RAX: ffffffffffffffda RBX: 00007fdfaf815fa0 RCX: 00007fdfaf59ce59 [ 1087.599432][ T999] RDX: 0000000000002600 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1087.599442][ T999] RBP: 00007fdfb047c090 R08: 0000000000000000 R09: 0000000000000000 [ 1087.599451][ T999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1087.599460][ T999] R13: 00007fdfaf816038 R14: 00007fdfaf815fa0 R15: 00007ffd6c633688 [ 1087.599479][ T999] [ 1088.407633][ T999] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1088.887823][T11294] Process accounting resumed [ 1089.041214][ T988] Process accounting resumed [ 1090.773751][ T1190] i2c i2c-0: new_device: Invalid device name [ 1090.989568][ T1210] FAULT_INJECTION: forcing a failure. [ 1090.989568][ T1210] name failslab, interval 1, probability 0, space 0, times 0 [ 1091.069865][ T1210] CPU: 0 UID: 0 PID: 1210 Comm: syz.1.3342 Tainted: G L syzkaller #0 PREEMPT(full) [ 1091.069891][ T1210] Tainted: [L]=SOFTLOCKUP [ 1091.069897][ T1210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1091.069906][ T1210] Call Trace: [ 1091.069911][ T1210] [ 1091.069916][ T1210] dump_stack_lvl+0x100/0x190 [ 1091.069938][ T1210] should_fail_ex.cold+0x5/0xa [ 1091.069957][ T1210] should_failslab+0xc2/0x120 [ 1091.069975][ T1210] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1091.069998][ T1210] ? security_file_alloc+0x34/0x2c0 [ 1091.070017][ T1210] ? trace_kmem_cache_alloc+0xd5/0x100 [ 1091.070038][ T1210] security_file_alloc+0x34/0x2c0 [ 1091.070056][ T1210] init_file+0x95/0x480 [ 1091.070077][ T1210] alloc_empty_file+0x79/0x1c0 [ 1091.070100][ T1210] path_openat+0xe8/0x31a0 [ 1091.070118][ T1210] ? kasan_save_stack+0x3f/0x50 [ 1091.070132][ T1210] ? kasan_save_stack+0x30/0x50 [ 1091.070145][ T1210] ? kasan_save_track+0x14/0x30 [ 1091.070159][ T1210] ? __kasan_slab_alloc+0x89/0x90 [ 1091.070173][ T1210] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1091.070195][ T1210] ? do_getname+0x35/0x390 [ 1091.070215][ T1210] ? do_sys_openat2+0xc5/0x1e0 [ 1091.070236][ T1210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.070254][ T1210] ? __pfx_path_openat+0x10/0x10 [ 1091.070279][ T1210] do_file_open+0x20e/0x430 [ 1091.070299][ T1210] ? __pfx_do_file_open+0x10/0x10 [ 1091.070330][ T1210] ? alloc_fd+0x476/0x790 [ 1091.070351][ T1210] ? do_getname+0x191/0x390 [ 1091.070374][ T1210] do_sys_openat2+0x10d/0x1e0 [ 1091.070396][ T1210] ? __pfx_do_sys_openat2+0x10/0x10 [ 1091.070417][ T1210] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1091.070435][ T1210] ? __fget_files+0x21f/0x3d0 [ 1091.070455][ T1210] __x64_sys_openat+0x12d/0x210 [ 1091.070478][ T1210] ? __pfx___x64_sys_openat+0x10/0x10 [ 1091.070500][ T1210] ? ksys_write+0x1ac/0x250 [ 1091.070519][ T1210] ? rcu_is_watching+0x12/0xc0 [ 1091.070543][ T1210] do_syscall_64+0x10b/0xf80 [ 1091.070566][ T1210] ? clear_bhb_loop+0x40/0x90 [ 1091.070584][ T1210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.070599][ T1210] RIP: 0033:0x7f809e59ce59 [ 1091.070612][ T1210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1091.070634][ T1210] RSP: 002b:00007f809f405028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1091.070649][ T1210] RAX: ffffffffffffffda RBX: 00007f809e815fa0 RCX: 00007f809e59ce59 [ 1091.070659][ T1210] RDX: 0000000000002600 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1091.070668][ T1210] RBP: 00007f809f405090 R08: 0000000000000000 R09: 0000000000000000 [ 1091.070678][ T1210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1091.070687][ T1210] R13: 00007f809e816038 R14: 00007f809e815fa0 R15: 00007ffdda475288 [ 1091.070706][ T1210] [ 1091.862854][ T1210] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1094.118326][ T1341] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3349'. [ 1094.940186][ T1364] netlink: 596 bytes leftover after parsing attributes in process `syz.5.3352'. [ 1094.969617][ T1370] FAULT_INJECTION: forcing a failure. [ 1094.969617][ T1370] name failslab, interval 1, probability 0, space 0, times 0 [ 1095.038567][ T1370] CPU: 0 UID: 0 PID: 1370 Comm: syz.4.3353 Tainted: G L syzkaller #0 PREEMPT(full) [ 1095.038594][ T1370] Tainted: [L]=SOFTLOCKUP [ 1095.038600][ T1370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1095.038608][ T1370] Call Trace: [ 1095.038614][ T1370] [ 1095.038620][ T1370] dump_stack_lvl+0x100/0x190 [ 1095.038641][ T1370] should_fail_ex.cold+0x5/0xa [ 1095.038668][ T1370] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1095.038689][ T1370] should_failslab+0xc2/0x120 [ 1095.038708][ T1370] __kmalloc_noprof+0xe0/0x850 [ 1095.038721][ T1370] ? kfree+0x1dd/0x6c0 [ 1095.038744][ T1370] tomoyo_realpath_from_path+0xb6/0x690 [ 1095.038769][ T1370] tomoyo_check_open_permission+0x2af/0x3c0 [ 1095.038788][ T1370] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1095.038812][ T1370] ? hook_file_open+0x24e/0x7a0 [ 1095.038842][ T1370] ? path_get+0x61/0x80 [ 1095.038864][ T1370] tomoyo_file_open+0x6b/0x90 [ 1095.038887][ T1370] security_file_open+0xb5/0x1e0 [ 1095.038906][ T1370] do_dentry_open+0x5aa/0x1660 [ 1095.038926][ T1370] ? security_inode_permission+0xbf/0x250 [ 1095.038946][ T1370] vfs_open+0x82/0x3f0 [ 1095.038970][ T1370] path_openat+0x208c/0x31a0 [ 1095.039002][ T1370] ? __pfx_path_openat+0x10/0x10 [ 1095.039028][ T1370] do_file_open+0x20e/0x430 [ 1095.039048][ T1370] ? __pfx_do_file_open+0x10/0x10 [ 1095.039081][ T1370] ? alloc_fd+0x476/0x790 [ 1095.039104][ T1370] ? do_getname+0x191/0x390 [ 1095.039128][ T1370] do_sys_openat2+0x10d/0x1e0 [ 1095.039150][ T1370] ? __pfx_do_sys_openat2+0x10/0x10 [ 1095.039172][ T1370] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1095.039190][ T1370] ? __fget_files+0x21f/0x3d0 [ 1095.039215][ T1370] __x64_sys_openat+0x12d/0x210 [ 1095.039239][ T1370] ? __pfx___x64_sys_openat+0x10/0x10 [ 1095.039262][ T1370] ? ksys_write+0x1ac/0x250 [ 1095.039281][ T1370] ? rcu_is_watching+0x12/0xc0 [ 1095.039303][ T1370] do_syscall_64+0x10b/0xf80 [ 1095.039325][ T1370] ? clear_bhb_loop+0x40/0x90 [ 1095.039344][ T1370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.039359][ T1370] RIP: 0033:0x7fe07999ce59 [ 1095.039373][ T1370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1095.039388][ T1370] RSP: 002b:00007fe07a76e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1095.039403][ T1370] RAX: ffffffffffffffda RBX: 00007fe079c15fa0 RCX: 00007fe07999ce59 [ 1095.039413][ T1370] RDX: 0000000000002600 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1095.039423][ T1370] RBP: 00007fe07a76e090 R08: 0000000000000000 R09: 0000000000000000 [ 1095.039432][ T1370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1095.039441][ T1370] R13: 00007fe079c16038 R14: 00007fe079c15fa0 R15: 00007fff80a9e388 [ 1095.039461][ T1370] [ 1096.662091][ T1370] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1096.740737][ T30] audit: type=1800 audit(4294967588.295:36): pid=1407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3358" name="dbroot" dev="configfs" ino=92426 res=0 errno=0 [ 1099.231245][ T1501] vhci_hcd vhci_hcd.0: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 1099.840853][ T1567] FAULT_INJECTION: forcing a failure. [ 1099.840853][ T1567] name failslab, interval 1, probability 0, space 0, times 0 [ 1100.037538][ T1567] CPU: 0 UID: 0 PID: 1567 Comm: syz.3.3370 Tainted: G L syzkaller #0 PREEMPT(full) [ 1100.037564][ T1567] Tainted: [L]=SOFTLOCKUP [ 1100.037569][ T1567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1100.037581][ T1567] Call Trace: [ 1100.037587][ T1567] [ 1100.037593][ T1567] dump_stack_lvl+0x100/0x190 [ 1100.037614][ T1567] should_fail_ex.cold+0x5/0xa [ 1100.037633][ T1567] ? tomoyo_encode2+0xfb/0x3c0 [ 1100.037652][ T1567] should_failslab+0xc2/0x120 [ 1100.037676][ T1567] __kmalloc_noprof+0xe0/0x850 [ 1100.037689][ T1567] ? d_absolute_path+0x136/0x1b0 [ 1100.037707][ T1567] tomoyo_encode2+0xfb/0x3c0 [ 1100.037729][ T1567] tomoyo_encode+0x29/0x50 [ 1100.037747][ T1567] tomoyo_realpath_from_path+0x18c/0x690 [ 1100.037772][ T1567] tomoyo_check_open_permission+0x2af/0x3c0 [ 1100.037790][ T1567] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1100.037814][ T1567] ? hook_file_open+0x24e/0x7a0 [ 1100.037845][ T1567] ? path_get+0x61/0x80 [ 1100.037872][ T1567] tomoyo_file_open+0x6b/0x90 [ 1100.037895][ T1567] security_file_open+0xb5/0x1e0 [ 1100.037914][ T1567] do_dentry_open+0x5aa/0x1660 [ 1100.037935][ T1567] ? security_inode_permission+0xbf/0x250 [ 1100.037954][ T1567] vfs_open+0x82/0x3f0 [ 1100.037978][ T1567] path_openat+0x208c/0x31a0 [ 1100.038004][ T1567] ? __pfx_path_openat+0x10/0x10 [ 1100.038029][ T1567] do_file_open+0x20e/0x430 [ 1100.038050][ T1567] ? __pfx_do_file_open+0x10/0x10 [ 1100.038082][ T1567] ? alloc_fd+0x476/0x790 [ 1100.038103][ T1567] ? do_getname+0x191/0x390 [ 1100.038126][ T1567] do_sys_openat2+0x10d/0x1e0 [ 1100.038148][ T1567] ? __pfx_do_sys_openat2+0x10/0x10 [ 1100.038169][ T1567] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1100.038187][ T1567] ? __fget_files+0x21f/0x3d0 [ 1100.038206][ T1567] __x64_sys_openat+0x12d/0x210 [ 1100.038229][ T1567] ? __pfx___x64_sys_openat+0x10/0x10 [ 1100.038251][ T1567] ? ksys_write+0x1ac/0x250 [ 1100.038271][ T1567] ? rcu_is_watching+0x12/0xc0 [ 1100.038291][ T1567] do_syscall_64+0x10b/0xf80 [ 1100.038314][ T1567] ? clear_bhb_loop+0x40/0x90 [ 1100.038332][ T1567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.038348][ T1567] RIP: 0033:0x7f0b1179ce59 [ 1100.038361][ T1567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1100.038375][ T1567] RSP: 002b:00007f0b12583028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1100.038390][ T1567] RAX: ffffffffffffffda RBX: 00007f0b11a15fa0 RCX: 00007f0b1179ce59 [ 1100.038400][ T1567] RDX: 0000000000002600 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1100.038410][ T1567] RBP: 00007f0b12583090 R08: 0000000000000000 R09: 0000000000000000 [ 1100.038419][ T1567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1100.038428][ T1567] R13: 00007f0b11a16038 R14: 00007f0b11a15fa0 R15: 00007ffdd1956e08 [ 1100.038447][ T1567] [ 1100.038483][ T1567] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1103.353510][ T1567] Process accounting paused [ 1104.831788][ T1715] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3385'. [ 1104.889143][ T1715] netlink: 25 bytes leftover after parsing attributes in process `syz.5.3385'. [ 1105.163964][ T1723] vmstat_refresh: nr_hugetlb -7680 [ 1108.243863][ T1809] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3394'. [ 1108.285789][ T1824] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3397'. [ 1108.432468][ T1814] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3394'. [ 1108.453511][ T1826] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3396'. [ 1108.557051][ T1809] nbd: must specify at least one socket [ 1108.698487][ T1809] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3394'. [ 1108.927216][ T1809] nbd: must specify at least one socket [ 1111.794597][T13738] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1111.812878][T13738] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1111.824157][T13738] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1111.834761][T13738] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1111.846382][T13738] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1112.607709][ T1917] kexec: Could not allocate control_code_buffer [ 1113.023999][T26608] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1113.042116][T26608] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1113.049963][T26608] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1113.060188][T26608] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1113.067717][T26608] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1113.898437][T13738] Bluetooth: hci0: command tx timeout [ 1114.251921][ T2038] random: crng reseeded on system resumption [ 1114.434264][ T1914] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.490292][ T1914] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.543395][ T1914] bridge_slave_0: entered allmulticast mode [ 1114.612526][ T1914] bridge_slave_0: entered promiscuous mode [ 1114.720032][ T1914] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.789660][ T1914] bridge0: port 2(bridge_slave_1) entered disabled state [ 1114.848543][ T1914] bridge_slave_1: entered allmulticast mode [ 1114.889072][ T1914] bridge_slave_1: entered promiscuous mode [ 1115.049172][ T1914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1115.175698][T13738] Bluetooth: hci2: command tx timeout [ 1115.205608][ T1914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1115.281910][ T2089] Invalid ELF header magic: != ELF [ 1115.706289][ T1914] team0: Port device team_slave_0 added [ 1115.752244][ T1914] team0: Port device team_slave_1 added [ 1115.978794][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.986836][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.993550][T13738] Bluetooth: hci0: command tx timeout [ 1116.298811][ T1914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1116.348875][ T1914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1116.485398][ T1914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1116.552813][ T1914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1116.597547][ T1914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1116.758298][ T1914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1117.203989][ T1914] hsr_slave_0: entered promiscuous mode [ 1117.238098][ T1914] hsr_slave_1: entered promiscuous mode [ 1117.257005][T13738] Bluetooth: hci2: command tx timeout [ 1117.278712][ T1914] debugfs: 'hsr0' already exists in 'hsr' [ 1117.306237][ T1914] Cannot create hsr debugfs directory [ 1118.055020][T13738] Bluetooth: hci0: command tx timeout [ 1118.795563][ T1936] bridge0: port 1(bridge_slave_0) entered blocking state [ 1118.836866][ T1936] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.872846][ T1936] bridge_slave_0: entered allmulticast mode [ 1118.910947][ T1936] bridge_slave_0: entered promiscuous mode [ 1119.254095][ T1914] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.336352][T13738] Bluetooth: hci2: command tx timeout [ 1119.430074][ T1936] bridge0: port 2(bridge_slave_1) entered blocking state [ 1119.463050][ T1936] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.507201][ T1936] bridge_slave_1: entered allmulticast mode [ 1119.543543][ T1936] bridge_slave_1: entered promiscuous mode [ 1119.727306][ T1914] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.941968][ T1936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1120.007246][ T1936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1120.138278][T13738] Bluetooth: hci0: command tx timeout [ 1120.332812][ T1914] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.437413][ T1936] team0: Port device team_slave_0 added [ 1120.493068][ T1936] team0: Port device team_slave_1 added [ 1120.733473][ T1914] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.970133][ T2477] netlink: 334 bytes leftover after parsing attributes in process `syz.3.3422'. [ 1121.032596][ T1936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1121.066593][ T1936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1121.189816][ T1936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1121.242802][ T1936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1121.276735][ T1936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1121.392690][ T1936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1121.415233][T13738] Bluetooth: hci2: command tx timeout [ 1121.675003][ T2486] FAULT_INJECTION: forcing a failure. [ 1121.675003][ T2486] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1121.783543][ T2486] CPU: 0 UID: 0 PID: 2486 Comm: syz.3.3422 Tainted: G L syzkaller #0 PREEMPT(full) [ 1121.783568][ T2486] Tainted: [L]=SOFTLOCKUP [ 1121.783574][ T2486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1121.783583][ T2486] Call Trace: [ 1121.783588][ T2486] [ 1121.783594][ T2486] dump_stack_lvl+0x100/0x190 [ 1121.783615][ T2486] should_fail_ex.cold+0x5/0xa [ 1121.783635][ T2486] get_futex_key+0xf78/0x1510 [ 1121.783653][ T2486] ? __pfx_get_futex_key+0x10/0x10 [ 1121.783667][ T2486] ? lock_acquire+0x1b1/0x370 [ 1121.783687][ T2486] futex_wake+0xea/0x530 [ 1121.783707][ T2486] ? __pfx_futex_wake+0x10/0x10 [ 1121.783725][ T2486] ? exit_mm_release+0x19/0x30 [ 1121.783752][ T2486] do_futex+0x32b/0x350 [ 1121.783769][ T2486] ? __pfx_do_futex+0x10/0x10 [ 1121.783783][ T2486] ? __might_fault+0xc5/0x140 [ 1121.783810][ T2486] mm_release+0x24a/0x2f0 [ 1121.783829][ T2486] do_exit+0x707/0x2af0 [ 1121.783854][ T2486] ? __pfx_do_exit+0x10/0x10 [ 1121.783876][ T2486] ? do_raw_spin_lock+0x128/0x260 [ 1121.783893][ T2486] ? find_held_lock+0x2b/0x80 [ 1121.783912][ T2486] ? get_signal+0x7e5/0x2210 [ 1121.783932][ T2486] do_group_exit+0xd5/0x2a0 [ 1121.783956][ T2486] get_signal+0x20ff/0x2210 [ 1121.783974][ T2486] ? madvise_unlock+0x172/0x220 [ 1121.783997][ T2486] ? __audit_ipc_set_perm+0x69/0x190 [ 1121.784012][ T2486] ? __pfx_get_signal+0x10/0x10 [ 1121.784033][ T2486] ? do_futex+0x192/0x350 [ 1121.784050][ T2486] arch_do_signal_or_restart+0x91/0x7a0 [ 1121.784073][ T2486] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1121.784102][ T2486] ? rcu_is_watching+0x12/0xc0 [ 1121.784122][ T2486] exit_to_user_mode_loop+0x8b/0x4f0 [ 1121.784137][ T2486] ? rcu_is_watching+0x12/0xc0 [ 1121.784157][ T2486] do_syscall_64+0x6f2/0xf80 [ 1121.784180][ T2486] ? clear_bhb_loop+0x40/0x90 [ 1121.784198][ T2486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.784213][ T2486] RIP: 0033:0x7f0b1179ce59 [ 1121.784228][ T2486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1121.784242][ T2486] RSP: 002b:00007f0b0f5b20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1121.784257][ T2486] RAX: fffffffffffffe00 RBX: 00007f0b11a16278 RCX: 00007f0b1179ce59 [ 1121.784267][ T2486] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0b11a16278 [ 1121.784276][ T2486] RBP: 00007f0b11a16270 R08: 0000000000000000 R09: 0000000000000000 [ 1121.784285][ T2486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1121.784294][ T2486] R13: 00007f0b11a16308 R14: 00007ffdd1956d20 R15: 00007ffdd1956e08 [ 1121.784313][ T2486] [ 1122.309736][ T1936] hsr_slave_0: entered promiscuous mode [ 1122.321269][ T1936] hsr_slave_1: entered promiscuous mode [ 1122.335155][ T1936] debugfs: 'hsr0' already exists in 'hsr' [ 1122.343380][ T1936] Cannot create hsr debugfs directory [ 1123.647620][ T2719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3424'. [ 1124.000913][ T1914] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1124.056080][ T1914] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1124.099108][ T1914] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1124.156826][ T1914] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1124.268576][ T1914] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1124.307495][ T1914] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1124.341912][ T1914] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1124.388845][ T1914] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1125.368346][ T1936] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1125.446928][ T1936] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1125.479513][ T1936] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1125.560055][ T1936] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1125.603942][ T1936] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1125.666015][ T1936] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1125.712046][ T1936] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1125.782725][ T1936] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1126.132454][ T1914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1126.296865][ T1914] 8021q: adding VLAN 0 to HW filter on device team0 [ 1126.393013][T27334] bridge0: port 1(bridge_slave_0) entered blocking state [ 1126.400168][T27334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1126.514077][T27334] bridge0: port 2(bridge_slave_1) entered blocking state [ 1126.521240][T27334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1126.693522][ T1936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1126.841892][ T1936] 8021q: adding VLAN 0 to HW filter on device team0 [ 1126.963125][T27334] bridge0: port 1(bridge_slave_0) entered blocking state [ 1126.970339][T27334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1127.139002][T27334] bridge0: port 2(bridge_slave_1) entered blocking state [ 1127.146176][T27334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1129.123614][ T1914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1129.391906][ T1936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1130.541435][ T1914] veth0_vlan: entered promiscuous mode [ 1130.683813][ T1914] veth1_vlan: entered promiscuous mode [ 1131.298105][ T1936] veth0_vlan: entered promiscuous mode [ 1131.360670][ T1914] veth0_macvtap: entered promiscuous mode [ 1131.529877][ T1914] veth1_macvtap: entered promiscuous mode [ 1131.581960][ T1936] veth1_vlan: entered promiscuous mode [ 1131.671270][ T1914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1131.730069][ T1914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1131.802700][T27336] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.843621][T27336] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.889385][ T1936] veth0_macvtap: entered promiscuous mode [ 1131.936157][T27336] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.987071][T27336] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.051627][ T1936] veth1_macvtap: entered promiscuous mode [ 1132.482922][ T1936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1132.712039][ T1936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1132.816484][T27332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1132.873080][T27332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1133.280622][T27333] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.332373][T27333] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.400912][ T3042] capability: warning: `syz.3.3434' uses deprecated v2 capabilities in a way that may be insecure [ 1133.461830][ T30] audit: type=1800 audit(4294967625.015:37): pid=3053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3436" name="lu_gp_id" dev="configfs" ino=95309 res=0 errno=0 [ 1133.563550][T27333] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.601995][ T3046] Process accounting resumed [ 1133.612979][T27333] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.745564][T27333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1133.772532][T27333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1134.294464][T27337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1134.351235][T27337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1134.483641][T27334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1134.552652][T27334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1136.222622][ T3214] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1136.723342][ T3224] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3445'. [ 1138.167052][ T3310] FAULT_INJECTION: forcing a failure. [ 1138.167052][ T3310] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1138.262154][ T3310] CPU: 0 UID: 0 PID: 3310 Comm: syz.5.3456 Tainted: G L syzkaller #0 PREEMPT(full) [ 1138.262183][ T3310] Tainted: [L]=SOFTLOCKUP [ 1138.262189][ T3310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1138.262202][ T3310] Call Trace: [ 1138.262207][ T3310] [ 1138.262215][ T3310] dump_stack_lvl+0x100/0x190 [ 1138.262237][ T3310] should_fail_ex.cold+0x5/0xa [ 1138.262254][ T3310] ? prepare_alloc_pages+0x16d/0x5f0 [ 1138.262276][ T3310] should_fail_alloc_page+0xeb/0x140 [ 1138.262296][ T3310] prepare_alloc_pages+0x1f0/0x5f0 [ 1138.262318][ T3310] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 1138.262350][ T3310] ? __lock_acquire+0x4a5/0x2630 [ 1138.262368][ T3310] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1138.262392][ T3310] ? __lock_acquire+0x4a5/0x2630 [ 1138.262416][ T3310] ? find_held_lock+0x2b/0x80 [ 1138.262434][ T3310] ? is_bpf_text_address+0x8a/0x1a0 [ 1138.262455][ T3310] ? is_bpf_text_address+0x8a/0x1a0 [ 1138.262473][ T3310] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1138.262496][ T3310] ? policy_nodemask+0xed/0x4f0 [ 1138.262515][ T3310] alloc_pages_mpol+0x1fb/0x540 [ 1138.262533][ T3310] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1138.262549][ T3310] ? arch_stack_walk+0xa6/0xf0 [ 1138.262572][ T3310] folio_alloc_mpol_noprof+0x36/0x260 [ 1138.262594][ T3310] shmem_alloc_folio+0x135/0x160 [ 1138.262615][ T3310] shmem_alloc_and_add_folio+0x371/0xd40 [ 1138.262644][ T3310] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1138.262669][ T3310] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 1138.262689][ T3310] shmem_get_folio_gfp+0x6ab/0x1900 [ 1138.262708][ T3310] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1138.262724][ T3310] ? filemap_map_pages+0x9c1/0x2140 [ 1138.262751][ T3310] shmem_fault+0x1f9/0xa20 [ 1138.262767][ T3310] ? __pfx_shmem_fault+0x10/0x10 [ 1138.262782][ T3310] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 1138.262806][ T3310] ? __pfx_filemap_map_pages+0x10/0x10 [ 1138.262832][ T3310] ? find_held_lock+0x2b/0x80 [ 1138.262852][ T3310] __do_fault+0x10b/0x440 [ 1138.262870][ T3310] do_fault+0xa99/0x1750 [ 1138.262888][ T3310] ? __pmd_alloc+0x3fb/0x950 [ 1138.262908][ T3310] __handle_mm_fault+0x187d/0x2a00 [ 1138.262932][ T3310] ? mt_find+0x45e/0x8e0 [ 1138.262949][ T3310] ? __pfx___handle_mm_fault+0x10/0x10 [ 1138.262969][ T3310] ? __pfx_mt_find+0x10/0x10 [ 1138.262994][ T3310] ? find_vma+0xbf/0x140 [ 1138.263010][ T3310] ? __pfx_find_vma+0x10/0x10 [ 1138.263028][ T3310] handle_mm_fault+0x36d/0xa20 [ 1138.263053][ T3310] do_user_addr_fault+0x74c/0x12f0 [ 1138.263074][ T3310] ? trace_page_fault_kernel+0x7a/0x200 [ 1138.263093][ T3310] exc_page_fault+0x6f/0xd0 [ 1138.263116][ T3310] asm_exc_page_fault+0x26/0x30 [ 1138.263131][ T3310] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 1138.263156][ T3310] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 9b 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 1138.263172][ T3310] RSP: 0018:ffffc90003e37a98 EFLAGS: 00050212 [ 1138.263186][ T3310] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000024 [ 1138.263195][ T3310] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90003e37b28 [ 1138.263205][ T3310] RBP: 0000000000000024 R08: 0000000000000001 R09: fffff520007c6f69 [ 1138.263214][ T3310] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 1138.263223][ T3310] R13: ffffc90003e37b28 R14: 0000000000000000 R15: 000000000000b6bd [ 1138.263242][ T3310] _copy_from_user+0x98/0xd0 [ 1138.263259][ T3310] sg_write+0x2af/0xdb0 [ 1138.263283][ T3310] ? __pfx_sg_write+0x10/0x10 [ 1138.263321][ T3310] ? apparmor_file_permission+0x13f/0x1c0 [ 1138.263339][ T3310] ? bpf_lsm_file_permission+0x9/0x10 [ 1138.263354][ T3310] ? security_file_permission+0x76/0x210 [ 1138.263372][ T3310] ? rw_verify_area+0xce/0x6d0 [ 1138.263389][ T3310] vfs_write+0x2aa/0x1070 [ 1138.263407][ T3310] ? __pfx_sg_write+0x10/0x10 [ 1138.263427][ T3310] ? __pfx_vfs_write+0x10/0x10 [ 1138.263442][ T3310] ? find_held_lock+0x2b/0x80 [ 1138.263461][ T3310] ? __fget_files+0x215/0x3d0 [ 1138.263478][ T3310] ? __fget_files+0x215/0x3d0 [ 1138.263498][ T3310] ? __fget_files+0x21f/0x3d0 [ 1138.263520][ T3310] ksys_write+0x12a/0x250 [ 1138.263537][ T3310] ? __pfx_ksys_write+0x10/0x10 [ 1138.263556][ T3310] ? rcu_is_watching+0x12/0xc0 [ 1138.263576][ T3310] do_syscall_64+0x10b/0xf80 [ 1138.263597][ T3310] ? clear_bhb_loop+0x40/0x90 [ 1138.263615][ T3310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1138.263630][ T3310] RIP: 0033:0x7fcaa079ce59 [ 1138.263643][ T3310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1138.263657][ T3310] RSP: 002b:00007fcaa172f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1138.263671][ T3310] RAX: ffffffffffffffda RBX: 00007fcaa0a15fa0 RCX: 00007fcaa079ce59 [ 1138.263681][ T3310] RDX: 000000000000b6bd RSI: 0000000000000000 RDI: 0000000000000003 [ 1138.263689][ T3310] RBP: 00007fcaa0832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1138.263699][ T3310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1138.263708][ T3310] R13: 00007fcaa0a16038 R14: 00007fcaa0a15fa0 R15: 00007ffecf065bd8 [ 1138.263728][ T3310] [ 1140.188890][ T3373] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3465'. [ 1140.253553][ T3371] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3465'. [ 1141.062510][T13738] Bluetooth: hci2: unexpected subevent 0x18 length: 0 < 19 [ 1144.796277][ T3480] Process accounting resumed            [ 1152.253672][ T3769] nvme_fabrics: missing parameter 'transport=%s' syzkaller syzkaller login: [ 1152.399094][ T3769] nvme_fabrics: missing parameter 'nqn=%s' [ 1154.657849][ T3895] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3496'. [ 1154.779523][ T3895] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3496'. [ 1155.629521][ T3929] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1157.136259][ T3949] netlink: 322 bytes leftover after parsing attributes in process `syz.3.3500'. syzkaller syzkaller login: [ 1157.823645][ T3964] sg_write: data in/out 262108/258 bytes for SCSI command 0x61-- guessing data in; [ 1157.823645][ T3964] program syz.6.3502 not setting count and/or reply_len properly [ 1157.960069][ T3962] nvme_fabrics: missing parameter 'transport=%s' [ 1158.004572][ T3962] nvme_fabrics: missing parameter 'nqn=%s' [ 1158.829821][ T3972] cougar: G6 mapped to space [ 1161.979575][ T4101] FAULT_INJECTION: forcing a failure. [ 1161.979575][ T4101] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1162.106063][ T4101] CPU: 0 UID: 0 PID: 4101 Comm: syz.3.3512 Tainted: G L syzkaller #0 PREEMPT(full) [ 1162.106091][ T4101] Tainted: [L]=SOFTLOCKUP [ 1162.106096][ T4101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1162.106107][ T4101] Call Trace: [ 1162.106112][ T4101] [ 1162.106119][ T4101] dump_stack_lvl+0x100/0x190 [ 1162.106142][ T4101] should_fail_ex.cold+0x5/0xa [ 1162.106160][ T4101] ? prepare_alloc_pages+0x16d/0x5f0 [ 1162.106181][ T4101] should_fail_alloc_page+0xeb/0x140 [ 1162.106200][ T4101] prepare_alloc_pages+0x1f0/0x5f0 [ 1162.106222][ T4101] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 1162.106250][ T4101] ? __lock_acquire+0x4a5/0x2630 [ 1162.106267][ T4101] ? __lock_acquire+0x4a5/0x2630 [ 1162.106281][ T4101] ? css_rstat_updated+0x1ce/0x5a0 [ 1162.106305][ T4101] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1162.106331][ T4101] ? do_raw_spin_lock+0x128/0x260 [ 1162.106348][ T4101] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1162.106365][ T4101] ? find_held_lock+0x2b/0x80 [ 1162.106422][ T4101] ? __lock_acquire+0x4a5/0x2630 [ 1162.106437][ T4101] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1162.106460][ T4101] ? policy_nodemask+0xed/0x4f0 [ 1162.106481][ T4101] alloc_pages_mpol+0x1fb/0x540 [ 1162.106500][ T4101] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1162.106517][ T4101] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 1162.106533][ T4101] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 1162.106551][ T4101] folio_alloc_mpol_noprof+0x36/0x260 [ 1162.106573][ T4101] shmem_alloc_folio+0x135/0x160 [ 1162.106595][ T4101] shmem_alloc_and_add_folio+0x371/0xd40 [ 1162.106623][ T4101] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1162.106648][ T4101] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 1162.106668][ T4101] shmem_get_folio_gfp+0x6ab/0x1900 [ 1162.106687][ T4101] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1162.106702][ T4101] ? ktime_get_coarse_real_ts64_mg+0x235/0x300 [ 1162.106719][ T4101] ? lockdep_hardirqs_on+0x78/0x100 [ 1162.106747][ T4101] shmem_fault+0x1f9/0xa20 [ 1162.106761][ T4101] ? __lock_acquire+0x4a5/0x2630 [ 1162.106776][ T4101] ? __pfx_shmem_fault+0x10/0x10 [ 1162.106791][ T4101] ? __up_read+0x2c1/0x6e0 [ 1162.106815][ T4101] ? __pfx_filemap_map_pages+0x10/0x10 [ 1162.106837][ T4101] __do_fault+0x10b/0x440 [ 1162.106852][ T4101] ? find_held_lock+0x2b/0x80 [ 1162.106874][ T4101] do_fault+0x2db/0x1750 [ 1162.106895][ T4101] __handle_mm_fault+0x187d/0x2a00 [ 1162.106919][ T4101] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1162.106938][ T4101] ? __pfx___handle_mm_fault+0x10/0x10 [ 1162.106961][ T4101] ? pte_offset_map_lock+0x174/0x320 [ 1162.106979][ T4101] ? find_held_lock+0x2b/0x80 [ 1162.107004][ T4101] ? follow_page_pte+0x4d0/0x13f0 [ 1162.107025][ T4101] handle_mm_fault+0x36d/0xa20 [ 1162.107050][ T4101] __get_user_pages+0x1178/0x32a0 [ 1162.107074][ T4101] ? down_read_killable+0x307/0x4b0 [ 1162.107091][ T4101] ? __pfx___get_user_pages+0x10/0x10 [ 1162.107115][ T4101] faultin_page_range+0x1f1/0x9e0 [ 1162.107139][ T4101] madvise_do_behavior+0x354/0x510 [ 1162.107161][ T4101] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1162.107191][ T4101] do_madvise+0x195/0x240 [ 1162.107210][ T4101] ? __pfx_do_madvise+0x10/0x10 [ 1162.107229][ T4101] ? do_futex+0x192/0x350 [ 1162.107250][ T4101] ? __fget_files+0x21f/0x3d0 [ 1162.107279][ T4101] __x64_sys_madvise+0xa9/0x110 [ 1162.107298][ T4101] ? lockdep_hardirqs_on+0x78/0x100 [ 1162.107320][ T4101] do_syscall_64+0x10b/0xf80 [ 1162.107342][ T4101] ? clear_bhb_loop+0x40/0x90 [ 1162.107361][ T4101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1162.107376][ T4101] RIP: 0033:0x7f0b1179ce59 [ 1162.107397][ T4101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1162.107413][ T4101] RSP: 002b:00007f0b12583028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1162.107429][ T4101] RAX: ffffffffffffffda RBX: 00007f0b11a15fa0 RCX: 00007f0b1179ce59 [ 1162.107440][ T4101] RDX: 0000000000000017 RSI: 00000000002003f0 RDI: 0000000000000000 [ 1162.107449][ T4101] RBP: 00007f0b11832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1162.107459][ T4101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1162.107469][ T4101] R13: 00007f0b11a16038 R14: 00007f0b11a15fa0 R15: 00007ffdd1956e08 [ 1162.107489][ T4101] [ 1167.008018][ T4209] cougar: G6 mapped to space [ 1173.286913][ T4323] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3529'. [ 1175.354012][ T4353] Process accounting paused [ 1177.124895][ T4518] netlink: 146 bytes leftover after parsing attributes in process `syz.6.3539'. [ 1177.417654][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.424491][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.603942][ T4541] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input14 [ 1185.966787][ T4663] lo: entered allmulticast mode [ 1186.109533][ T4663] lo: left allmulticast mode [ 1189.350490][ T4795] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3568'. [ 1191.827305][T13738] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 1192.557206][ T4899] net_ratelimit: 48 callbacks suppressed [ 1192.557229][ T4899] netlink: zone id is out of range [ 1192.635652][ T4899] netlink: zone id is out of range [ 1192.670457][ T4899] netlink: zone id is out of range [ 1192.751514][ T4899] netlink: zone id is out of range [ 1192.828384][ T4899] netlink: zone id is out of range [ 1192.896255][ T4899] netlink: zone id is out of range [ 1192.973903][ T4899] netlink: zone id is out of range [ 1193.103060][ T4899] netlink: zone id is out of range [ 1193.127413][ T4863] tipc: can't start tipc receive workqueue [ 1193.169151][ T4899] netlink: zone id is out of range [ 1193.243639][ T4899] netlink: zone id is out of range [ 1193.895031][T13738] Bluetooth: hci1: command 0x0c1a tx timeout [ 1195.976051][T13738] Bluetooth: hci1: command 0x0c1a tx timeout [ 1199.452876][ T5101] net_ratelimit: 48 callbacks suppressed [ 1199.452891][ T5101] netlink: zone id is out of range [ 1199.548805][ T5101] netlink: zone id is out of range [ 1199.631252][ T5101] netlink: zone id is out of range [ 1199.692438][ T5101] netlink: zone id is out of range [ 1199.759362][ T5101] netlink: zone id is out of range [ 1199.828981][ T5101] netlink: zone id is out of range [ 1199.909974][ T5101] netlink: zone id is out of range [ 1199.986610][ T5101] netlink: zone id is out of range [ 1200.079970][ T5101] netlink: zone id is out of range [ 1200.151857][ T5101] netlink: zone id is out of range [ 1203.918578][ T5223] ubi0: attaching mtd0 [ 1203.985620][ T5223] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 2 [ 1204.039977][ T5223] eraseblock attaching information dump: [ 1204.084789][ T5223] ec 1 [ 1204.123980][ T5223] pnum 1 [ 1204.154027][ T5223] lnum 1 [ 1204.202190][ T5223] scrub 0 [ 1204.246184][ T5223] sqnum 2 [ 1204.319403][ T5223] Volume identifier header dump: [ 1204.402732][ T5223] magic 55424921 [ 1204.492151][ T5223] version 1 [ 1204.568901][ T5223] vol_type 1 [ 1204.656491][ T5223] copy_flag 0 [ 1204.737660][ T5223] compat 5 [ 1204.839043][ T5223] vol_id 2147479551 [ 1204.905384][ T5223] lnum 1 [ 1204.972825][ T5223] data_size 0 [ 1205.033871][ T5223] used_ebs 0 [ 1205.099188][ T5223] data_pad 0 [ 1205.156587][ T5223] sqnum 2 [ 1205.197226][ T5223] hdr_crc 7beff9af [ 1205.247502][ T5223] Volume identifier header hexdump: [ 1206.017599][ T5223] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1208.361616][ T5316] Process accounting resumed [ 1209.141261][ T5357] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3605'. [ 1210.022605][ T5389] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3609'. [ 1211.223228][ T5422] vivid-008: ================= START STATUS ================= [ 1211.356049][ T5422] vivid-008: ================== END STATUS ================== [ 1213.644640][ T8225] bridge_slave_1: left allmulticast mode [ 1213.677679][ T8225] bridge_slave_1: left promiscuous mode [ 1213.727090][ T8225] bridge0: port 2(bridge_slave_1) entered disabled state [ 1213.864078][ T8225] bridge_slave_0: left allmulticast mode [ 1213.911732][ T8225] bridge_slave_0: left promiscuous mode [ 1213.958418][ T8225] bridge0: port 1(bridge_slave_0) entered disabled state [ 1214.889640][ T5412] ima: policy update failed [ 1214.970641][ T30] audit: type=1802 audit(4294967374.560:38): pid=5412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.3612" res=0 errno=0 [ 1215.210667][ T8225] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1215.308730][ T8225] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1215.380214][ T8225] bond0 (unregistering): Released all slaves [ 1215.599996][ T8225] tipc: Left network mode [ 1217.423060][ T8225] hsr_slave_0: left promiscuous mode [ 1217.482103][ T8225] hsr_slave_1: left promiscuous mode [ 1217.531959][ T8225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1217.601342][ T8225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1217.682397][ T8225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1217.744453][ T8225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1217.872105][ T8225] veth1_macvtap: left promiscuous mode [ 1217.916211][ T8225] veth0_macvtap: left promiscuous mode [ 1217.965093][ T8225] veth1_vlan: left promiscuous mode [ 1219.449131][ T8225] team0 (unregistering): Port device team_slave_1 removed [ 1219.569795][ T8225] team0 (unregistering): Port device team_slave_0 removed [ 1221.523487][ T5614] FAULT_INJECTION: forcing a failure. [ 1221.523487][ T5614] name failslab, interval 1, probability 0, space 0, times 0 [ 1221.589106][ T5614] CPU: 0 UID: 0 PID: 5614 Comm: syz.4.3629 Tainted: G L syzkaller #0 PREEMPT(full) [ 1221.589134][ T5614] Tainted: [L]=SOFTLOCKUP [ 1221.589139][ T5614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1221.589149][ T5614] Call Trace: [ 1221.589154][ T5614] [ 1221.589161][ T5614] dump_stack_lvl+0x100/0x190 [ 1221.589182][ T5614] should_fail_ex.cold+0x5/0xa [ 1221.589201][ T5614] should_failslab+0xc2/0x120 [ 1221.589220][ T5614] __kvmalloc_node_noprof+0xfa/0xa00 [ 1221.589235][ T5614] ? seq_read_iter+0x819/0x1270 [ 1221.589257][ T5614] seq_read_iter+0x819/0x1270 [ 1221.589272][ T5614] ? lock_acquire+0x1b1/0x370 [ 1221.589300][ T5614] kernfs_fop_read_iter+0x46c/0x610 [ 1221.589323][ T5614] ? rw_verify_area+0xce/0x6d0 [ 1221.589338][ T5614] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 1221.589361][ T5614] vfs_read+0x825/0xb30 [ 1221.589381][ T5614] ? __pfx_vfs_read+0x10/0x10 [ 1221.589409][ T5614] ksys_read+0x12a/0x250 [ 1221.589426][ T5614] ? __pfx_ksys_read+0x10/0x10 [ 1221.589444][ T5614] ? rcu_is_watching+0x12/0xc0 [ 1221.589465][ T5614] do_syscall_64+0x10b/0xf80 [ 1221.589489][ T5614] ? clear_bhb_loop+0x40/0x90 [ 1221.589507][ T5614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.589523][ T5614] RIP: 0033:0x7fe07999ce59 [ 1221.589535][ T5614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1221.589550][ T5614] RSP: 002b:00007fe07a76e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1221.589566][ T5614] RAX: ffffffffffffffda RBX: 00007fe079c15fa0 RCX: 00007fe07999ce59 [ 1221.589576][ T5614] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000003 [ 1221.589585][ T5614] RBP: 00007fe07a76e090 R08: 0000000000000000 R09: 0000000000000000 [ 1221.589594][ T5614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1221.589603][ T5614] R13: 00007fe079c16038 R14: 00007fe079c15fa0 R15: 00007fff80a9e388 [ 1221.589622][ T5614] [ 1224.117260][ T5636] nvme_fcloop: unknown parameter or missing value '7=";&L=j"Yq'R"' [ 1224.141035][ T5624] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3633'. [ 1224.212288][ T5624] ipvlan1: entered promiscuous mode [ 1224.286273][ T5624] ipvlan1: entered allmulticast mode [ 1224.323527][ T5624] veth0_vlan: entered allmulticast mode [ 1226.544525][ T5757] FAULT_INJECTION: forcing a failure. [ 1226.544525][ T5757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1226.670044][ T5757] CPU: 0 UID: 0 PID: 5757 Comm: syz.6.3640 Tainted: G L syzkaller #0 PREEMPT(full) [ 1226.670070][ T5757] Tainted: [L]=SOFTLOCKUP [ 1226.670076][ T5757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1226.670085][ T5757] Call Trace: [ 1226.670090][ T5757] [ 1226.670096][ T5757] dump_stack_lvl+0x100/0x190 [ 1226.670117][ T5757] should_fail_ex.cold+0x5/0xa [ 1226.670137][ T5757] _copy_to_iter+0x1f3/0x1720 [ 1226.670157][ T5757] ? __pfx__copy_to_iter+0x10/0x10 [ 1226.670172][ T5757] ? kernfs_seq_stop+0xcd/0x120 [ 1226.670197][ T5757] ? kernfs_put_active+0x93/0xe0 [ 1226.670218][ T5757] seq_read_iter+0xdab/0x1270 [ 1226.670246][ T5757] kernfs_fop_read_iter+0x46c/0x610 [ 1226.670269][ T5757] ? rw_verify_area+0xce/0x6d0 [ 1226.670283][ T5757] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 1226.670306][ T5757] vfs_read+0x825/0xb30 [ 1226.670325][ T5757] ? __pfx_vfs_read+0x10/0x10 [ 1226.670354][ T5757] ksys_read+0x12a/0x250 [ 1226.670370][ T5757] ? __pfx_ksys_read+0x10/0x10 [ 1226.670389][ T5757] ? rcu_is_watching+0x12/0xc0 [ 1226.670410][ T5757] do_syscall_64+0x10b/0xf80 [ 1226.670433][ T5757] ? clear_bhb_loop+0x40/0x90 [ 1226.670452][ T5757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.670467][ T5757] RIP: 0033:0x7f37a6d9ce59 [ 1226.670480][ T5757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1226.670495][ T5757] RSP: 002b:00007f37a7b86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1226.670510][ T5757] RAX: ffffffffffffffda RBX: 00007f37a7015fa0 RCX: 00007f37a6d9ce59 [ 1226.670520][ T5757] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000003 [ 1226.670529][ T5757] RBP: 00007f37a7b86090 R08: 0000000000000000 R09: 0000000000000000 [ 1226.670538][ T5757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1226.670547][ T5757] R13: 00007f37a7016038 R14: 00007f37a7015fa0 R15: 00007fffe0665278 [ 1226.670567][ T5757] [ 1229.016760][ T5871] netlink: 334 bytes leftover after parsing attributes in process `syz.5.3648'. [ 1232.158345][ T6038] FAULT_INJECTION: forcing a failure. [ 1232.158345][ T6038] name failslab, interval 1, probability 0, space 0, times 0 [ 1232.406843][ T6038] CPU: 0 UID: 0 PID: 6038 Comm: syz.3.3658 Tainted: G L syzkaller #0 PREEMPT(full) [ 1232.406869][ T6038] Tainted: [L]=SOFTLOCKUP [ 1232.406875][ T6038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1232.406884][ T6038] Call Trace: [ 1232.406890][ T6038] [ 1232.406896][ T6038] dump_stack_lvl+0x100/0x190 [ 1232.406917][ T6038] should_fail_ex.cold+0x5/0xa [ 1232.406937][ T6038] should_failslab+0xc2/0x120 [ 1232.406955][ T6038] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1232.406977][ T6038] ? simple_xattrs_alloc+0x40/0xd0 [ 1232.406999][ T6038] ? lockref_get_not_dead+0x6a/0x80 [ 1232.407017][ T6038] simple_xattrs_alloc+0x40/0xd0 [ 1232.407040][ T6038] simple_xattrs_lazy_alloc+0x62/0x100 [ 1232.407064][ T6038] shmem_xattr_handler_set+0x8d/0x400 [ 1232.407083][ T6038] ? xattr_resolve_name+0x27d/0x3f0 [ 1232.407107][ T6038] ? __pfx_shmem_xattr_handler_set+0x10/0x10 [ 1232.407128][ T6038] __vfs_setxattr+0x175/0x1e0 [ 1232.407148][ T6038] ? __pfx___vfs_setxattr+0x10/0x10 [ 1232.407173][ T6038] ? bpf_lsm_capable+0x9/0x10 [ 1232.407195][ T6038] __vfs_setxattr_noperm+0x127/0x660 [ 1232.407219][ T6038] __vfs_setxattr_locked+0x127/0x2b0 [ 1232.407241][ T6038] vfs_setxattr+0x14a/0x390 [ 1232.407262][ T6038] ? __pfx_vfs_setxattr+0x10/0x10 [ 1232.407281][ T6038] ? mnt_get_write_access+0x52/0x2f0 [ 1232.407305][ T6038] ? mnt_get_write_access+0x52/0x2f0 [ 1232.407330][ T6038] do_setxattr+0x145/0x180 [ 1232.407350][ T6038] filename_setxattr+0x167/0x1d0 [ 1232.407371][ T6038] ? __pfx_filename_setxattr+0x10/0x10 [ 1232.407392][ T6038] ? do_getname+0x191/0x390 [ 1232.407416][ T6038] path_setxattrat+0x1ff/0x3b0 [ 1232.407436][ T6038] ? __pfx_path_setxattrat+0x10/0x10 [ 1232.407475][ T6038] ? fput+0x79/0x100 [ 1232.407495][ T6038] ? ksys_write+0x1ac/0x250 [ 1232.407511][ T6038] ? __pfx_ksys_write+0x10/0x10 [ 1232.407531][ T6038] __x64_sys_lsetxattr+0xc9/0x140 [ 1232.407551][ T6038] ? do_syscall_64+0x90/0xf80 [ 1232.407573][ T6038] ? lockdep_hardirqs_on+0x78/0x100 [ 1232.407596][ T6038] do_syscall_64+0x10b/0xf80 [ 1232.407618][ T6038] ? clear_bhb_loop+0x40/0x90 [ 1232.407636][ T6038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1232.407651][ T6038] RIP: 0033:0x7f0b1179ce59 [ 1232.407664][ T6038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1232.407678][ T6038] RSP: 002b:00007f0b0f9f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 1232.407693][ T6038] RAX: ffffffffffffffda RBX: 00007f0b11a16090 RCX: 00007f0b1179ce59 [ 1232.407703][ T6038] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000200000000d40 [ 1232.407712][ T6038] RBP: 00007f0b0f9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1232.407721][ T6038] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1232.407730][ T6038] R13: 00007f0b11a16128 R14: 00007f0b11a16090 R15: 00007ffdd1956e08 [ 1232.407749][ T6038] [ 1234.678410][ T6044] zswap: compressor not available [ 1235.822933][ T6097] Bluetooth: hci0: command 0x0406 tx timeout [ 1235.829129][ T6097] Bluetooth: hci2: command 0x0406 tx timeout [ 1236.695211][ T8055] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1237.135421][ T6252] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3667'. [ 1238.326732][ T6333] vivid-008: ================= START STATUS ================= [ 1238.484751][ T6333] vivid-008: ================== END STATUS ================== [ 1238.640813][ T6337] vivid-008: ================= START STATUS ================= [ 1238.743598][ T6337] vivid-008: ================== END STATUS ================== [ 1238.858916][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.869679][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.073870][ T6336] Process accounting paused [ 1240.124520][ T6383] sd 0:0:1:0: PR command failed: 1026 [ 1240.166276][ T6383] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1240.222297][ T6383] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1240.681161][ T6437] FAULT_INJECTION: forcing a failure. [ 1240.681161][ T6437] name failslab, interval 1, probability 0, space 0, times 0 [ 1240.893177][ T6437] CPU: 0 UID: 0 PID: 6437 Comm: syz.4.3674 Tainted: G L syzkaller #0 PREEMPT(full) [ 1240.893205][ T6437] Tainted: [L]=SOFTLOCKUP [ 1240.893211][ T6437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1240.893221][ T6437] Call Trace: [ 1240.893227][ T6437] [ 1240.893234][ T6437] dump_stack_lvl+0x100/0x190 [ 1240.893255][ T6437] should_fail_ex.cold+0x5/0xa [ 1240.893276][ T6437] should_failslab+0xc2/0x120 [ 1240.893340][ T6437] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1240.893364][ T6437] ? security_file_alloc+0x34/0x2c0 [ 1240.893383][ T6437] ? trace_kmem_cache_alloc+0xd5/0x100 [ 1240.893404][ T6437] security_file_alloc+0x34/0x2c0 [ 1240.893423][ T6437] init_file+0x95/0x480 [ 1240.893444][ T6437] alloc_empty_file+0x79/0x1c0 [ 1240.893466][ T6437] alloc_file_pseudo+0x13a/0x230 [ 1240.893489][ T6437] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1240.893516][ T6437] __shmem_file_setup+0x205/0x460 [ 1240.893541][ T6437] ? __pfx___shmem_file_setup+0x10/0x10 [ 1240.893563][ T6437] ? vm_area_alloc+0x1f/0x160 [ 1240.893587][ T6437] shmem_zero_setup+0x96/0x1b0 [ 1240.893603][ T6437] __mmap_region+0x24e9/0x2da0 [ 1240.893629][ T6437] ? __pfx___mmap_region+0x10/0x10 [ 1240.893656][ T6437] ? rcu_is_watching+0x12/0xc0 [ 1240.893674][ T6437] ? trace_pelt_se_tp+0x13b/0x190 [ 1240.893697][ T6437] ? __lock_acquire+0x4a5/0x2630 [ 1240.893712][ T6437] ? do_raw_spin_unlock+0x145/0x1e0 [ 1240.893730][ T6437] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1240.893759][ T6437] ? find_held_lock+0x2b/0x80 [ 1240.893779][ T6437] ? rcu_is_watching+0x12/0xc0 [ 1240.893804][ T6437] ? rcu_is_watching+0x12/0xc0 [ 1240.893822][ T6437] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 1240.893841][ T6437] ? lockdep_hardirqs_on+0x78/0x100 [ 1240.893892][ T6437] mmap_region+0x35d/0x620 [ 1240.893906][ T6437] ? rcu_is_watching+0x12/0xc0 [ 1240.893924][ T6437] ? __pfx_mmap_region+0x10/0x10 [ 1240.893940][ T6437] ? cap_mmap_addr+0x4b/0x120 [ 1240.893961][ T6437] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1240.893976][ T6437] ? security_mmap_addr+0x71/0x1e0 [ 1240.893993][ T6437] ? __get_unmapped_area+0x255/0x3e0 [ 1240.894014][ T6437] do_mmap+0xc63/0x12f0 [ 1240.894036][ T6437] ? __pfx_do_mmap+0x10/0x10 [ 1240.894058][ T6437] vm_mmap_pgoff+0x29e/0x470 [ 1240.894081][ T6437] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1240.894100][ T6437] ? do_futex+0x192/0x350 [ 1240.894117][ T6437] ? __pfx_do_futex+0x10/0x10 [ 1240.894136][ T6437] ksys_mmap_pgoff+0xe4/0x610 [ 1240.894154][ T6437] ? __x64_sys_futex+0x358/0x4d0 [ 1240.894171][ T6437] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1240.894188][ T6437] ? xfd_validate_state+0x129/0x190 [ 1240.894208][ T6437] __x64_sys_mmap+0x125/0x190 [ 1240.894227][ T6437] do_syscall_64+0x10b/0xf80 [ 1240.894248][ T6437] ? clear_bhb_loop+0x40/0x90 [ 1240.894266][ T6437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1240.894282][ T6437] RIP: 0033:0x7fe07999ce59 [ 1240.894301][ T6437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1240.894317][ T6437] RSP: 002b:00007fe077bd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1240.894332][ T6437] RAX: ffffffffffffffda RBX: 00007fe079c16180 RCX: 00007fe07999ce59 [ 1240.894343][ T6437] RDX: 00000000000000df RSI: 0000000004020009 RDI: 0000000000000000 [ 1240.894353][ T6437] RBP: 00007fe079a32d6f R08: 0000000000000401 R09: 0000000000008000 [ 1240.894363][ T6437] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1240.894373][ T6437] R13: 00007fe079c16218 R14: 00007fe079c16180 R15: 00007fff80a9e388 [ 1240.894394][ T6437] [ 1241.700867][ T31] INFO: task syz.1.3362:1428 blocked for more than 144 seconds. [ 1241.763116][ T31] Tainted: G L syzkaller #0 [ 1241.785053][ T6318] ima: policy update failed [ 1241.802300][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1241.849716][ T31] task:syz.1.3362 state:D stack:28408 pid:1428 tgid:1421 ppid:20593 task_flags:0x400640 flags:0x00080002 [ 1241.897141][ T31] Call Trace: [ 1241.904741][ T31] [ 1241.910449][ T31] __schedule+0x1295/0x67a0 [ 1241.917915][ T30] audit: type=1802 audit(4294967401.410:39): pid=6318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.3669" res=0 errno=0 [ 1241.939345][ T31] ? __pfx___schedule+0x10/0x10 [ 1241.964778][ T31] ? find_held_lock+0x2b/0x80 [ 1241.972447][ T31] ? schedule+0x2bf/0x390 [ 1241.996476][ T31] schedule+0xdd/0x390 [ 1242.004752][ T31] schedule_timeout+0x1b2/0x280 [ 1242.019103][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1242.044762][ T31] ? __wait_for_common+0x2da/0x4c0 [ 1242.050038][ T31] ? rcu_is_watching+0x12/0xc0 [ 1242.066464][ T31] __wait_for_common+0x2e7/0x4c0 [ 1242.083043][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1242.104816][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 1242.126267][ T31] ? __pfx_try_to_wake_up+0x10/0x10 [ 1242.143178][ T31] ? vfs_coredump+0x7e0/0x5770 [ 1242.149663][ T31] ? rcu_is_watching+0x12/0xc0 [ 1242.166226][ T31] wait_for_completion_state+0x1c/0x40 [ 1242.181462][ T31] vfs_coredump+0x80d/0x5770 [ 1242.196031][ T31] ? find_held_lock+0x2b/0x80 [ 1242.218988][ T31] ? __pfx_vfs_coredump+0x10/0x10 [ 1242.232422][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1242.252604][ T31] ? lock_acquire+0x1b1/0x370 [ 1242.260479][ T31] ? lock_acquire+0x1b1/0x370 [ 1242.280330][ T31] ? find_held_lock+0x2b/0x80 [ 1242.288743][ T31] ? is_bpf_text_address+0x8a/0x1a0 [ 1242.304834][ T31] ? is_bpf_text_address+0x8a/0x1a0 [ 1242.310055][ T31] ? bpf_ksym_find+0x124/0x1c0 [ 1242.326366][ T31] ? __kernel_text_address+0xd/0x30 [ 1242.333080][ T31] ? unwind_get_return_address+0x59/0xa0 [ 1242.344774][ T31] ? arch_stack_walk+0xa6/0xf0 [ 1242.355048][ T31] ? __sigqueue_free+0xbe/0x2a0 [ 1242.374728][ T31] ? stack_trace_save+0x8e/0xc0 [ 1242.379735][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 1242.388234][ T31] ? stack_depot_save_flags+0x27/0x9d0 [ 1242.399092][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1242.410261][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.424749][ T31] ? proc_coredump_connector+0x2d3/0x4f0 [ 1242.433745][ T31] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1242.448449][ T31] ? rcu_is_watching+0x12/0xc0 [ 1242.465134][ T31] get_signal+0x2162/0x2210 [ 1242.470441][ T31] ? __pfx_get_signal+0x10/0x10 [ 1242.484776][ T31] ? lockdep_hardirqs_on+0x78/0x100 [ 1242.490569][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1242.504782][ T31] arch_do_signal_or_restart+0x91/0x7a0 [ 1242.514966][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1242.535053][ T31] ? rcu_is_watching+0x12/0xc0 [ 1242.539896][ T31] exit_to_user_mode_loop+0x8b/0x4f0 [ 1242.549847][ T31] ? rcu_is_watching+0x12/0xc0 [ 1242.562431][ T31] do_syscall_64+0x6f2/0xf80 [ 1242.572258][ T31] ? clear_bhb_loop+0x40/0x90 [ 1242.583766][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.605597][ T31] RIP: 0033:0x7f809e59ce59 [ 1242.619902][ T31] RSP: 002b:00007f809f3c30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1242.646823][ T31] RAX: ffffffffffffffda RBX: 00007f809e816188 RCX: 00007f809e59ce59 [ 1242.675813][ T31] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f809e81618c [ 1242.702448][ T31] RBP: 00007f809e816180 R08: 0000000000000001 R09: 0000000000000000 [ 1242.728622][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1242.753143][ T31] R13: 00007f809e816218 R14: 00007ffdda4751a0 R15: 00007ffdda475288 [ 1242.788851][ T31] [ 1242.798974][ T31] [ 1242.798974][ T31] Showing all locks held in the system: [ 1242.866739][ T31] 1 lock held by khungtaskd/31: [ 1242.891376][ T31] #0: ffffffff8e7e5420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1242.929885][ T31] 3 locks held by udevd/4994: [ 1242.945769][ T31] 5 locks held by kworker/u10:25/27336: [ 1242.963400][ T31] #0: ffff88801c6ae140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 1242.997924][ T31] #1: ffffc90005a47d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 1243.030934][ T31] #2: ffffffff905f7f08 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 1243.061354][ T31] #3: ffffffff90610c60 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 1243.091477][ T31] #4: ffffffff8e7f0f68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 1243.126493][ T31] 1 lock held by syz.1.3362/1424: [ 1243.141876][ T31] 2 locks held by getty/3956: [ 1243.158989][ T31] #0: ffff888037d900a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1243.191074][ T31] #1: ffffc90003ded2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 1243.225094][ T31] [ 1243.234160][ T31] ============================================= [ 1243.234160][ T31] [ 1243.306514][ T31] NMI backtrace for cpu 0 [ 1243.306533][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1243.306554][ T31] Tainted: [L]=SOFTLOCKUP [ 1243.306560][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1243.306569][ T31] Call Trace: [ 1243.306574][ T31] [ 1243.306580][ T31] dump_stack_lvl+0x100/0x190 [ 1243.306601][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1243.306619][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1243.306636][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1243.306658][ T31] sys_info+0x141/0x190 [ 1243.306673][ T31] watchdog+0xcb1/0x1030 [ 1243.306699][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1243.306722][ T31] ? __pfx_watchdog+0x10/0x10 [ 1243.306743][ T31] ? __kthread_parkme+0x18c/0x230 [ 1243.306766][ T31] ? kthread+0x13a/0x450 [ 1243.306778][ T31] ? __pfx_watchdog+0x10/0x10 [ 1243.306797][ T31] kthread+0x370/0x450 [ 1243.306809][ T31] ? __pfx_kthread+0x10/0x10 [ 1243.306824][ T31] ret_from_fork+0x72b/0xd50 [ 1243.306841][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1243.306858][ T31] ? __switch_to+0x800/0x1100 [ 1243.306878][ T31] ? __switch_to_asm+0x39/0x70 [ 1243.306897][ T31] ? __pfx_kthread+0x10/0x10 [ 1243.306912][ T31] ret_from_fork_asm+0x1a/0x30 [ 1243.306939][ T31] [ 1243.907064][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1243.913932][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1243.924591][ T31] Tainted: [L]=SOFTLOCKUP [ 1243.928891][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1243.938926][ T31] Call Trace: [ 1243.942186][ T31] [ 1243.945099][ T31] dump_stack_lvl+0x100/0x190 [ 1243.949789][ T31] vpanic+0x552/0x970 [ 1243.953754][ T31] ? __pfx_vpanic+0x10/0x10 [ 1243.958237][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1243.964380][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1243.970525][ T31] panic+0xd1/0xe0 [ 1243.974230][ T31] ? __pfx_panic+0x10/0x10 [ 1243.978635][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1243.984775][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1243.990913][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1243.997057][ T31] ? watchdog.cold+0x1ec/0x234 [ 1244.001850][ T31] ? watchdog+0xcc1/0x1030 [ 1244.006283][ T31] watchdog.cold+0x1fd/0x234 [ 1244.010881][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1244.016704][ T31] ? __pfx_watchdog+0x10/0x10 [ 1244.021384][ T31] ? __kthread_parkme+0x18c/0x230 [ 1244.026411][ T31] ? kthread+0x13a/0x450 [ 1244.030648][ T31] ? __pfx_watchdog+0x10/0x10 [ 1244.035324][ T31] kthread+0x370/0x450 [ 1244.039383][ T31] ? __pfx_kthread+0x10/0x10 [ 1244.043956][ T31] ret_from_fork+0x72b/0xd50 [ 1244.048556][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1244.053676][ T31] ? __switch_to+0x800/0x1100 [ 1244.058343][ T31] ? __switch_to_asm+0x39/0x70 [ 1244.063093][ T31] ? __pfx_kthread+0x10/0x10 [ 1244.067666][ T31] ret_from_fork_asm+0x1a/0x30 [ 1244.072427][ T31] [ 1244.075493][ T31] Kernel Offset: disabled [ 1244.079807][ T31] Rebooting in 86400 seconds..