last executing test programs: 10m44.196121384s ago: executing program 3 (id=96): r0 = socket(0x10, 0x2, 0x4) r1 = socket(0x11, 0x80003, 0xff) write$auto(r0, &(0x7f0000000040)='-\x00', 0xfdef) r2 = getpgid(0x0) set_mempolicy$auto(0x6, 0x0, 0x4) madvise$auto(0x110c230000, 0x8031ca, 0x9) ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={"9885b915a7872c742c8746ddc33be22a05db439a24e40029ced53cc5f6e97e9f", 0x3, 0x0, 0x80000001, 0x5, 0x1, 0x0}) mkdir$auto(&(0x7f0000004440)='./file0\x00', 0x735) rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, &(0x7f0000000100)={0xfff, 0x8, 0x0, 0xfffffffffffffff8, 0x3ff, 0xffffffffffffffff}) r5 = setfsuid$auto(0x0) setuid$auto(r5) ioprio_set$auto(0xffff99af, r5, 0x7) rt_tgsigqueueinfo$auto_SIGCONT(r2, r3, 0x12, &(0x7f0000000140)={@siginfo_0_0={0xffff, 0x80000001, 0x1, @_kill={r4, r5}}}) r6 = io_uring_setup$auto(0x6, 0x0) mmap$auto_binder_fops_binder_internal(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000005, 0x4010, r6, 0x5) fanotify_mark$auto(r1, 0xd, 0x40, r6, &(0x7f0000000000)='./file0\x00') 10m43.621511625s ago: executing program 3 (id=99): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x80002, 0x0) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/cgroup\x00', 0x100382, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/irq.pressure\x00', 0x101102, 0x0) openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000040), 0x669400, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/asound/card0/pcm0p/sub3/xrun_injection\x00', 0x8a180, 0x0) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) r1 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto_minstrel_ht_stat_fops_rc80211_minstrel_ht_debugfs(r1, 0x0, 0x0) ioctl$auto_USBDEVFS_DISCSIGNAL32(r0, 0x8008550e, &(0x7f0000000000)={0x3503, 0x8}) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/batadv_slave_0/proxy_ndp\x00', 0x382, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x28082, 0x0) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0xd1) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket(0xa, 0x801, 0x84) getsockopt$auto(r3, 0x84, 0x82, 0x0, 0x0) ioctl$auto(0x3, 0x80106f53, r2) 10m42.753628792s ago: executing program 3 (id=102): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd14/queue/iosched/prio_aging_expire\x00', 0x207a1, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)='-7', 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000001040)={0x80, 0x6, 0x303, 0xe8, 0x101, 0x6, &(0x7f00000001c0)}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2a, 0x2, 0x0) r3 = socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r4, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r3, 0x8921, 0x24) ioctl$auto(r2, 0x5411, r1) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) 10m40.458026381s ago: executing program 3 (id=110): openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x80002, 0x0) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/cgroup\x00', 0x100382, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/irq.pressure\x00', 0x101102, 0x0) openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000040), 0x669400, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/asound/card0/pcm0p/sub3/xrun_injection\x00', 0x8a180, 0x0) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) r1 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto_minstrel_ht_stat_fops_rc80211_minstrel_ht_debugfs(r1, 0x0, 0x0) ioctl$auto_USBDEVFS_DISCSIGNAL32(r0, 0x8008550e, &(0x7f0000000000)={0x3503, 0x8}) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/batadv_slave_0/proxy_ndp\x00', 0x382, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0xd1) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket(0xa, 0x801, 0x84) getsockopt$auto(r3, 0x84, 0x82, 0x0, 0x0) ioctl$auto(0x3, 0x80106f53, r2) 10m39.750450618s ago: executing program 3 (id=112): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000001380), 0x88cc0, 0x0) r0 = fcntl$auto_F_WRLCK(0xffffffffffffffff, 0xa3e, 0x1) shmctl$auto(0x7, 0x81, &(0x7f0000001080)={{0xb4, 0xffffffffffffffff, 0xee00, 0x101, 0x9, 0x1000}, 0x8, 0x0, 0x8, 0x1, @inferred=0xffffffffffffffff, @raw=0x1000, 0x7, 0x0, &(0x7f0000000040)="52b7b318284d6ab08a009bdd9f7ff1fc44596510b7be7fe621c82fe01485f40ce34a50c534", &(0x7f0000000080)="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"}) shmctl$auto_IPC_RMID(0x31e, 0x0, &(0x7f0000001200)={{0x9, 0xee00, 0xee01, 0x5, 0x10, 0x2, 0x8}, 0x649d, 0xffffffffffffffc3, 0x2, 0x100, @inferred=0xffffffffffffffff, @raw=0xffff, 0x9, 0x0, &(0x7f0000001100)="d075275e70550d39783de15306116cdadd9f7bb31ab7768b7a07eea15658b68920cc531c791dcf983cd8e455cb710c90725593596c2f42b681d93b8c785191b7068e7b2a652e472ae210028113dc438db814f20efa3f6f910a0acfb63c7e55660f0ecbb926a0a4ccc9f2133a721b030ae91f28d98b59e7c1575cb36d5120a418b3051dcdea5c1eb973329229abc2d47645d5114464f84f2114933ecb4979", &(0x7f00000011c0)="ff196ccf514b43b2fa4e21970545"}) statx$auto(r0, &(0x7f0000000000)='./file0\x00', 0xfffffffa, 0x1, &(0x7f0000001280)={0x3, 0x6, 0x45, 0x23, r1, r2, 0x2bdb, 0x1, 0x5, 0x0, 0x8000, 0x9ca86b600, {0x2, 0x2}, {0xff}, {0x9, 0x2}, {0x8000000000000001, 0x40}, 0x3, 0xa, 0xd4d7, 0x0, 0x9, 0x1000, 0x870, 0x6, 0x1, 0x0, 0x5, 0x1200000, [0x3, 0xa425, 0x0, 0x85d4, 0x6, 0xddf, 0x101, 0x5, 0xe]}) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) tkill$auto(0x1, 0x7) 10m35.39733948s ago: executing program 3 (id=125): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) connect$auto(0xffffffffffffffff, 0x0, 0x3a) r0 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000b00), 0x40042, 0x0) write$auto_safesetid_uid_file_fops_securityfs(r0, &(0x7f0000000b40)="33e06908f7cef2ef9652d5e3d0f91cdb9aa7fcd4f56b3ae50e2e7a3fce17ad39061182af048f047adfa552adf5a64941ae9a2564ce32560a", 0x38) socket(0xa, 0x1, 0x84) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) socket(0xf, 0x3, 0x2) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x1e, 0x1, 0x0) fanotify_init$auto(0x5, 0x2000000000002) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0xfff, 0x1, 0x5, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x4, 0x5]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket(0x15, 0x5, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x9, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) ioctl$auto_EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) close_range$auto(0x2, 0x8, 0x0) 10m35.129919464s ago: executing program 32 (id=125): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) connect$auto(0xffffffffffffffff, 0x0, 0x3a) r0 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000b00), 0x40042, 0x0) write$auto_safesetid_uid_file_fops_securityfs(r0, &(0x7f0000000b40)="33e06908f7cef2ef9652d5e3d0f91cdb9aa7fcd4f56b3ae50e2e7a3fce17ad39061182af048f047adfa552adf5a64941ae9a2564ce32560a", 0x38) socket(0xa, 0x1, 0x84) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) socket(0xf, 0x3, 0x2) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x1e, 0x1, 0x0) fanotify_init$auto(0x5, 0x2000000000002) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0xfff, 0x1, 0x5, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x4, 0x5]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket(0x15, 0x5, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x9, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) ioctl$auto_EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) close_range$auto(0x2, 0x8, 0x0) 9m50.329054202s ago: executing program 2 (id=263): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1e2142, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace\x00', 0x181201, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rt_sigaction$auto(0x1, &(0x7f00000001c0)={&(0x7f0000000080)=0x0, 0x7fffffffffffffff, 0x0, {0x5}}, 0x0, 0x8) gettid() syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) getdents$auto(r1, 0x0, 0x62d4) close_range$auto(0x2, 0x8, 0xfffffffd) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x630801, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x0, 0x0) mmap$auto(0x800000000000e0, 0x8400007, 0xdf, 0x10, r2, 0x7ffffffffffffffe) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_SET_CQM(r3, 0x0, 0x2efb31157b9f5d11) connect$auto(0x3, 0x0, 0x58) prctl$auto(0x3e, 0x7, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) syz_genetlink_get_family_id$auto_ovs_vport(0xfffffffffffffffe, 0xffffffffffffffff) socket(0x2c, 0x3, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 9m49.061610893s ago: executing program 2 (id=268): socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x4d}) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{&(0x7f0000000000), 0x3ff, 0x0, 0x9, 0x0, 0x3ff, 0x24000000}, 0xb6}, 0x2, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x8001, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x2, 0x2, 0x8fd6, 0x9488, 0x3, 0x15f4da0a, 0x7, 0x3, 0x62, 0x80000001, 0x6, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) mmap$auto(0x1, 0x80000040000a, 0xdf, 0x9b73, 0xffffffffffffffff, 0xffffffff00000000) ioctl$auto(0xc8, 0xffffffff800454dd, 0x4000000000008) pwrite64$auto(0xc8, 0x0, 0x96, 0xc421) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x44040811) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/tunl0/disable_policy\x00', 0xd02, 0x0) sendfile$auto(r3, r4, 0x0, 0x800048) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) msgctl$auto_IPC_INFO(0x6, 0x3, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty29\x00', 0x800, 0x0) pwritev$auto(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0x2}, 0x3, 0x11, 0x3) ioctl$auto(r5, 0x560a, 0x7) close_range$auto(r4, 0x8, 0x0) io_uring_setup$auto(0x80000001, 0x0) r6 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002240)='/dev/cec26\x00', 0x1a9602, 0x0) ioctl$auto_CEC_DQEVENT(r6, 0xc0506107, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) ioctl$auto_UI_DEV_CREATE(r2, 0x5501, 0x0) writev$auto(r2, &(0x7f0000000340)={0x0, 0xda7e}, 0x9) 9m47.710135594s ago: executing program 2 (id=271): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) rt_sigtimedwait$auto(0x0, 0x0, 0x0, 0x80) mmap$auto(0x0, 0x40000c, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x848000000015, 0x805, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x3) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0xe3) r1 = socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r1) sendmsg$auto_NL802154_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4cdf0000", @ANYRES16=r2, @ANYBLOB="000828bd7000ffdbdf252300000008002c001000000005001200070000000500250009000000080021003d00000006000a0009000000"], 0x3c}}, 0x14000880) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendto$auto(0x3, 0x0, 0x100000002, 0x2000008, 0x0, 0x1c) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x2, 0x73) socket(0xa, 0x1, 0x84) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x20001, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x80900, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/rt_cache\x00', 0x2000, 0x0) select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x800295f4da0a, 0x2, 0x3, 0x62, 0x80000001, 0x50a7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7f, 0xd, 0x1, 0x948f, 0x1005, 0x206, 0x7, 0xfffffffffffffff6, 0x7, 0x9, 0x79d, 0x6, 0x100000000000000, 0xfffffffffffffffe, 0xf]}, 0x0) socket(0x1d, 0x2, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x88282, 0x0) 9m46.788417022s ago: executing program 2 (id=276): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x5, 0xdf, 0x409b70, 0xffffffffffffffff, 0x8000000000000000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x3, 0x7, 0xeb1, 0xffffffffffffffff, 0x10008000) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) r1 = socket(0x10, 0x2, 0x4) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x101001, 0x0) clock_getres$auto(0x3, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101040, 0x0) r3 = socketpair$auto(0xffff, 0x1ff, 0x2, 0x0) close_range$auto(r2, r0, 0x5) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vbi3\x00', 0x2aa01, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r1, r3, 0x4) r4 = io_uring_setup$auto(0x5c, &(0x7f0000000000)={0x7fffffff, 0xe, 0x4, 0x6, 0x2, 0x8, 0xffffffffffffffff, [0x0, 0x2, 0x2], {0xd74f, 0x20000002, 0x81, 0xbc, 0x100, 0x7f, 0x10101, 0xfffffffc, 0x2}, {0xffffff00, 0x1, 0x10003, 0x1, 0xe64f, 0x42, 0x6, 0x400005, 0x8d8}}) mmap$auto(0x5, 0x20089, 0x4000000000df, 0xeb8, r4, 0x0) r5 = openat$auto_fault_around_bytes_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x2282, 0x0) read$auto(r5, 0x0, 0x80) write$auto(r5, 0x0, 0x2) io_uring_enter$auto(0xffffffffffffffff, 0x5, 0x820f, 0x6, 0x0, 0x18) write$auto(0x1, 0x0, 0x80000000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto(0x100000004, 0x2, 0xfffffffffffffffe, 0x13, 0xfffffffffffffffa, 0x41) sysfs$auto(0x2, 0xe, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) getcwd$auto(0x0, 0x8000000000000000) r6 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x8402, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r6, 0x40146f2c, 0x0) 9m46.272374649s ago: executing program 2 (id=278): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x1, 0x0) r1 = setfsuid$auto(0x0) setuid$auto(r1) r2 = getegid() msgctl$auto(0x8, 0x8, &(0x7f0000000180)={{0x8, 0xffffffffffffffff, r2, 0x7ff, 0x2, 0x4c4, 0x2}, 0x0, &(0x7f0000000140)=0x2, 0x8, 0x8000, 0x96e, 0x5, 0x8, 0x7, 0x6c, 0x3, @raw=0x9, @raw=0x7}) shmctl$auto_IPC_STAT(0x5, 0x2, &(0x7f0000000380)={{0x0, r3, r2, 0x8, 0xc0000000, 0x81, 0xc}, 0x80000000, 0x4, 0x3, 0x7, @inferred, @raw=0x4, 0xfd8c, 0x0, &(0x7f00000002c0), 0x0}) keyctl$auto(0xffffff82, 0x7, r3, r2, 0x3) fchown$auto(r0, r1, r2) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) write$auto_cachefiles_daemon_fops_internal(r0, &(0x7f0000001080)="2b680b7911c587e933c4f27c44631c", 0xf) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/devices/virtual/bdi/250:0/stable_pages_required\x00', 0x103700, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000000)=""/4101, 0x1005) pidfd_send_signal$auto_PIDFD_SIGNAL_THREAD(r4, 0x7fffffff, &(0x7f00000010c0)={@_si_pad}, 0x1) tkill$auto(0x1, 0x7) 9m45.286960571s ago: executing program 2 (id=280): mmap$auto(0xfffffffffffffffe, 0x40009, 0xe3, 0x9b72, 0x7, 0x0) r0 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) open_by_handle_at$auto(r0, &(0x7f0000000000)={0x8, 0x2, 'u\x00\x00\x00\x00\x00\x00\x00'}, 0xffffffff) (async) bind$auto(0xffffffffffffffff, 0x0, 0x3) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6e) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x3, 0x3a) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$auto(r1, 0x84, 0x21, 0x0, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x24040854) (async) fcntl$auto(0x3, 0x4, 0xa553) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) (async) write$auto(0x3, 0x0, 0xfffffdef) (async) close_range$auto(0x2, 0x8, 0x0) 9m44.536659556s ago: executing program 33 (id=280): mmap$auto(0xfffffffffffffffe, 0x40009, 0xe3, 0x9b72, 0x7, 0x0) r0 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) open_by_handle_at$auto(r0, &(0x7f0000000000)={0x8, 0x2, 'u\x00\x00\x00\x00\x00\x00\x00'}, 0xffffffff) (async) bind$auto(0xffffffffffffffff, 0x0, 0x3) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6e) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x3, 0x3a) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$auto(r1, 0x84, 0x21, 0x0, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x24040854) (async) fcntl$auto(0x3, 0x4, 0xa553) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) (async) write$auto(0x3, 0x0, 0xfffffdef) (async) close_range$auto(0x2, 0x8, 0x0) 5m31.830256578s ago: executing program 1 (id=1245): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty60\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_tw_reuse\x00', 0x80400, 0x0) r1 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x24042, 0x0) poll$auto(&(0x7f0000000180)={r1, 0xfff7, 0x9816}, 0x7f, 0x9) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$auto(r2, 0xaf01, r1) read$auto(r0, 0x0, 0x1ff) close_range$auto(0xffffffffffffffff, 0xfffffffffffff000, 0x2) getrandom$auto(&(0x7f00000001c0)='/proc/sys/net/ipv4/t]V`\xb7i\xf8\x97\xf5ub\x87^\xc5t2Mp_tw\xed\\\x1f\x96\xfd\x91!\xae\x0e\xf3\xfa0\x00\x00\x00\xa3\xe3\x00\x00\x00\x00', 0x3, 0x7) landlock_create_ruleset$auto(&(0x7f0000000140)={0x5, 0x3, 0x9}, 0x9, 0x0) open(0x0, 0x591002, 0x408) write$auto(0x3, 0x0, 0x7) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x2, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000002c0)={0x3, 0x81, 0x40005b, 0x1, &(0x7f00000000c0)="08498bec9222e828d1a0fc7c3f02cef807a5d82cb6be958515b3539797ecc430ad9b687d6dca00c17311669af4de", 0xd22ff60, 0x1000, 0xfffdfffe, @number_of_packets=0x4, 0x7, 0x8000000, 0x0, [{0x10, 0x6b, 0x2}, {0x98, 0xfffffff8, 0xfadd}, {0x7f, 0x100, 0x3}, {0xffffffff, 0x7, 0x119}, {0x3, 0x0, 0x2}, {0x7, 0x0, 0x8006}]}) mmap$auto(0x0, 0x88b, 0xdf, 0x9b7f, 0xffffffffffffffff, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) readahead$auto(r4, 0x6, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) read$auto(r4, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x5}, 0x4) unshare$auto(0x40000080) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) 5m30.894547997s ago: executing program 1 (id=1247): write$auto(0xca, &(0x7f0000000040)='\x04>\x01\x0e\xfb\xff\x05OL\xc8\xbe\x94\xf2\xa2\x00\x00', 0x2d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) 5m30.673328237s ago: executing program 1 (id=1248): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd70001cdddf250200020008000308"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/apparmor/current\x00', 0x141000, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D1p\x00', 0x0, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) io_uring_setup$auto(0x0, 0x0) socket(0xa, 0x3, 0xff) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x3f) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x96141, 0x0) r1 = socket(0x1b, 0x3, 0x76) madvise$auto(0x0, 0x2000040080000003, 0xe) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getsockopt$auto_SO_RCVPRIORITY(r1, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x10006, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x4040400, 0x0, 0x58, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x801, 0x106) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r2, 0x11c, 0x1, 0x0, 0x0) 5m29.244354264s ago: executing program 1 (id=1252): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) r1 = socket(0xa, 0x2, 0x0) setsockopt$auto(r1, 0x29, 0x37, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) setsockopt$auto(0x400000000000003, 0x29, 0x3b, 0xffffffffffffffff, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/hwdep\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x262dc938) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000280), r1) r4 = openat$auto_stats_fops_2(0xffffffffffffff9c, &(0x7f0000002680), 0x202400, 0x0) r5 = getpgid(0xffffffffffffffff) r6 = clone3$auto(&(0x7f00000026c0)={0x7, 0x9, 0x6, 0x8000000000000000, 0xa0, 0xff, 0x3, 0x2, 0x9, 0x8000, 0xfffffffffffffffa}, 0x68) msgctl$auto_IPC_INFO(0x0, 0x3, &(0x7f00000027c0)={{0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x812, 0x1, 0x4}, &(0x7f0000002740)=0xcb, &(0x7f0000002780)=0xb5, 0x81, 0x1, 0x100000001, 0xee, 0x7, 0x9, 0x100, 0x5, @inferred=0xffffffffffffffff, @raw=0x7}) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f00000030c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003080)={&(0x7f0000002840)={0x840, r3, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@OVS_FLOW_ATTR_UFID_FLAGS={0x8}, @OVS_FLOW_ATTR_ACTIONS={0x356, 0x2, 0x0, 0x1, [@nested={0x72, 0x113, 0x0, 0x1, [@generic="549932d90f1df548eff92fca669e5c4df611533c18738b2b2ef272960286a6e4f6dd6cc483421b5d69f65fbd975e56d7c4cd9e2fb490eaa4cd55e4c0f275259fda82ac1e85ab8e0cca76722cfb3698984fc4458e44d43241fe255a833c1919301fc7e277ae991816500be2a69291"]}, @nested={0x116, 0x92, 0x0, 0x1, [@typed={0x4, 0xc1}, @generic="45d728dd63dec4423b74cb9706ff5b0c932909ed0d2764f499967d1c1d78d9346be0b4f4e525660c1dcefd4688b1a32add066b267ee349fbd6ac4607d91e0db51bc3d966bf84d57f7eb07c3445d652896260e0211d8bac518b36f3395a25d4615372e8d3327589828b7d1095ed4dcb3e9a652e7143abc53d095be52bbd8c61a19f65c0a216dc062bed95c0a63085598b0c40478ff2713419580e8e8061ddec1167b4c3b35460b6ff5703e47740519b2b968c061794d3939937c3f920b1e1d5f0c7e218e33edcf02f8e162b5c1a04f218cd03b7b24c85ebe13f9375e8c33897ba4421b8f1efb6190499c25651194db5bdd735578f9262", @typed={0x17, 0xb6, 0x0, 0x0, @str='/proc/asound/hwdep\x00'}]}, @nested={0x105, 0x5a, 0x0, 0x1, [@typed={0x8, 0x115, 0x0, 0x0, @fd=r4}, @generic="66d18652d480719951944a3959048ad0d78a1d004fc2c300c13ad3f579449f2251815f38df7ea52f7c9adfa5a8a7b61c9a464dd7f861baac272c043dabbf67e11a45d0c52ea5684745aa0a04af3859fb17046cae9f1d33f080d561b9a707e3d911fdfd09b82ce37e2fc4f86b36250481fde8b08f08eece9faa54fdf224338251eda74ff20e1c129e89d6c0c739d0125c02e2bfeb6ab41a923995ca2244446115f2f35bd1391e8845f6c2b8603f0ede56f4cabf10171032050cea4adf7cb0218e7d7432d2776d8f2213e978a38c82a5d38643224dfd1652def423885d2bc3b6b24bbfb20338f2f524d3", @typed={0x8, 0x14d, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0xe1, 0x0, 0x0, @u32=0x2}]}, @typed={0x8, 0x48, 0x0, 0x0, @pid=r5}, @nested={0x8, 0x38, 0x0, 0x1, [@nested={0x4, 0xb7}]}, @nested={0xc, 0x126, 0x0, 0x1, [@typed={0x8, 0xbe, 0x0, 0x0, @ipv4=@empty}]}, @generic="aed0f74d34e2b6a37f79fa4e67844b633aca9ee317d56be0499895d37d8869a917c3061781ce9705269f8894021b3fe108fad0295e46971b56836331d17e8c2da78cd7a2ff619fff839fada8fcf4c69a4550c5f66bc1a905032bcef987bfcedf2e757b1c436c80566d4965ffd969269eb266e9d65c463074d5e2dd2a31297a5106636584a33a1988bc6859d7bc84c0107390d5f979250edb9af027b0e1924e1d513e"]}, @OVS_FLOW_ATTR_KEY={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xcc}]}, @OVS_FLOW_ATTR_MASK={0x343, 0x7, 0x0, 0x1, [@generic="49e9d1e43d76cf7117b550e8a81b52192b1a3ace478d7c24052c7998e006521278097f5f3b095abc1f993bc124de6a2f1c04a55f68b25d4d3cd0f3accd5061bae922eb69089f977efbd28a75d92e4d91805d5495f4431a30a7396c867b0a96fb9e2a474b24759e945c5b758e32cbf8cdb2fb2e9825b2a2acbf2984b3a06ded608d63d5eb0934fe0dd41eae79369b54285f77e6d4735296dc5237ba9a16880b5c471928b71a1bb17f9e73a582160129d8b2b3a24c0ef26ee6536971025456faf508c738c6490764dcfb8fc881627c32d0394e3c19dbdd232cbe744c758b9f274442709f", @typed={0x8, 0x2e, 0x0, 0x0, @pid=r6}, @generic="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", @generic="a897648ffe5ea47d1d0b519ae9998850e109ef64861de6731446072bd6413afe81b5b68b2274bf1a1a077be09a9a5c4bc0ba35112ae974942fb8b33c840be9bb5b55b0653f1dacc072b774d42a48b5bb6fe806fb010b6eecd07e922d9fe665ad1d2befe45ed93da8783f1c0152bd864a4b4d28360a41d56a398d07c88e61f10ed7bf9a47042b905745ab0d749e28dda1d8204c5a24c99886ba137a87a28fb4826cb2c1c919399e0f048e3d775fe633b374be2705e1d00ce1ba59ee0c7b3499ef353b8ed25a49f88a5820958e3d61bf24ff558f9d395e69da8b797539875a05ee", @generic="84a31496f31fcc0e1af238eb1043a21d2e86b521d0f8c749753d41eee45c7a8b6a06f98dadb5b30c076bc32a9de8038fa24d8582720a69043b9a042d9c64d84003ade2a69a8466dd06535e1a91591b5b2585c8265a2cd7e2d597128e5471ae2d34ab840de3816e58c97ff124ab26712f002d22499061"]}, @OVS_FLOW_ATTR_ACTIONS={0xdb, 0x2, 0x0, 0x1, [@generic="9af2f1232e8d300ce4fe011e2d1854715ec93f85db683c3f0ff0e6796007720e45c2c1c3f6553b044af7d9e3012fcb9a38d23e5be497f4b9a0ccd6cb1e8e6cebb4891c07edbcade9ccaebc8de7f983231441a65af4617c721cbe0f94a193e95caff6df6572db4c57028afb6895c93d5ad5074ddb36830d9b2e947521bac541ddfd1ee4a78d4d8487601fd656e414150446682b6e12ab37d00ac81f619c78ab2a746540c031d42796a6cb983ab9259496dd9d19c879c9a2e6fdd8460f75a8cdade8c94889100fd10e913dbcf47a4d372c9513e4964cac78"]}, @OVS_FLOW_ATTR_KEY={0x99, 0x1, 0x0, 0x1, [@typed={0x8, 0x49, 0x0, 0x0, @uid=r7}, @generic="2b7bf94ea3f39417ae13f8a07f989cdabb8f1e10cd1aebde3684e501203bdd15d95fca185c59a4a1fcf41c0b786c8dc8b8a8a3329eff5b9d612a5842ae4014079801e7c2650a6680c8c50f81640d22b0c60d822706954fed6a52794611cc128f8085b346cdd3a95ad024aff763c10321c37c8c15a8cf99a8233d8603a6f2eb9b4b83cbc416f9698ab0a31ab7f8"]}, @OVS_FLOW_ATTR_UFID_FLAGS={0x8}]}, 0x840}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r8 = getpid() process_vm_readv$auto(r8, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) sendmsg$auto_NL80211_CMD_DISCONNECT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x2364, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_MAC_HINT={0x70, 0xc8, "a29575755f5a6afebcc471cc0f967fb0d16341014077fb30dc8e9d733c1002e769be4382ce73eb128f67a0db848d6cfc2625895ae12e63452a2b98fa9abfb0b6123744cdb57a13048a4cd09a83b160aa14ad5a49add431fd6065773c56377a89fe138a4e2dba0d4aafca1919"}, @NL80211_ATTR_HE_OBSS_PD={0x1114, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0x1004, 0x5, "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"}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x4}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0x1a, 0x4, "b7754016df24c58518312a25d1e27c52f2a9c6336de6"}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xb4, 0x4, "d07b2f20c00e59f406e02b16d71faf6fdbe694ec4a1b285bdbb986b9a839c11df00b5f22f8338b9faeb400e099b435d530352c24e782bdf1a1e06a1204084df23182e907d708e69d02f7e389d1c7196cf29de22afff21e9bb3d06e1109e134e9406273f58cc023a9d38e07748f4a0005d861f52487648faaf455c8c1c70ae282f9c6b2fc7be6e86a2ccbcb6a9a198bb8b3186851ccab6577c2edf0766ac49fe0d6a49a2060df6fd742e72ba0f9d0998c"}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4c}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0x22, 0x5, "d6b1ffd1d7be09f6059ecdbc1907ed6ebe6ca56de7361343c182a7befe63"}]}, @NL80211_ATTR_SPLIT_WIPHY_DUMP={0x4}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xbb, 0xe8, "4be46abec81864ecb4f240fb869801a39cf207f941a052305432a6dedc33ab787165b351b3e6e6ca2db9514d482e5011a10205bfa352403ee2766fcc49e75f2a76ce14be7b9306aecfc081b6d4938bbc8d31cba100186027cd5e9cc6fd0109e1ee95df51af61265272018c132969b014f9bb8e9286d456686a483d50bc5be7979fe1bb4b6bf3dc0c5fdd7b7995f082de4cef0e79ba2894777d4574090beb0951781b7ce009e010d872c33d5120ee14b93f9d2bdf43f0f2"}, @NL80211_ATTR_TX_RATES={0x10ed, 0x5a, 0x0, 0x1, [@typed={0x8, 0x4a, 0x0, 0x0, @ipv4=@broadcast}, @generic="b2b31257d0df2fbbb3387376f6b2168f1fdfff", @generic="c0a4dedb0eff8842bfa5cae47b1dfa8f56fde65137aba764ff54f0c23566fd01fc343033d9546ea45f421ed26fc6a8b6cbf227312c79d74b4dc94c385e1f6dabecbdef42f6ae01a40e87d435ed278aebfd49d560adc9874fc800d2fe4fd752bfe381044c834f997a4afac0e2005ca04156f3da4394c530d4a1a2fd09c63c51effa184a2b29fe41d79dd9cce6be0f63d6f5750b688681d5c14de820ff7485d870d475154b2e0e18855a539c73b58f73374e95bb2b04a811e28f13a79e7c7340d0edd0798cbe31e26aafc85d10e2f4efee7a135f6adaa82a4564611f7b1fe13355f26d9af04dd227fa114ef7e5e88ed02c0ba8d7b339968e270ecc08d73b76e77ad3848375ff7d5878acdc411b5be61338708c6f4975288a40f6d70d1cb12782715144ee5cbcfc4a873aa3ef102315d5d544e35fd12caaeefb76218081f6057adace23ceb9d7a3503d2d8de2343710488c819dbcc01ab4b8f8aaac55904ff415f9a96aef4247e4ddca114aa890fcb2d0cc917864c068d617b980f8e59075b7a884ac14bbf2a8807923159d28960b69d944f7f459eb7e5953747e7cb6ff913680c98a4629f14f51af8f139b314e508526da759318678c6df18ff5279c83d3df05414b0c104f31b378d16346e73a293901719c8fd192ece5ff400675c55e1ac4e384cdccc3c1902d1a2bd2788a892b34daeee484f46e47b53c6f37620b52cd802db1e75713cb9046f66ca28862f95a1ac2d7894d3eac0977fb9eecb6e82d24ac5e2fb5519550594e9a4e7d47f7fc306b66209d3187df4fcdcd370b2bffbdbda54df0a5838dab5f4ee0590e29d592d9c7e5aa96825b4130cd5566cc4c6de15f055409306078cabfa2f7779d7591d1ae49846bf78fbb27eeef49dc1e010ddef6fab4cc00c1ac3e14d77a77fb9eca54561d6d7477d346e76b7fcbc7ec61d587b67815c601e6364f997ffe61fc52b1a4271c227e1360a6d6bbd6a07790e6998026a3450a5b7adf9bb626e83c89b6099de073205c342550a41462881973604fae777b29fc8ae6bafa902dbd9d19d25b846e7e9bd8fad935494366ef6714f277ff0e04a5ae63f9cf237d603b97c2d4d5c0e240b77c46a2831873a12886804a26de6c9aebb0a702d9fcdeebe2aa664ac7ca21149ad94214bb70f88494ffaf9dc317dd63c1588e3722d4b176c7de860211e84b8dd259987c37c742ee76ee2516001109c041b82e19f75bbe884602430e68c8c8723ec495a0a9eef34ae3ed4faa9142f831bbd6b0e5ec7723397684800e1230f3cccff8b06092d8e802d2f1997c1fc15ad1f83c97458d1d8abbbcf854cf960c97fe049663bda650035177a80e51e300983c16cbe802a3eebb98a0b1c238769633f76fd682c03a4872cedf68346e467e5589f8cc70ef18f8258e869db69cf75b1851bf20f0e3d13953e3a23b19d0d2edbbef47251e23ca849af3f502024541c78535de1a417c605b906eef30be5f58a8a0e782038957f2b4cceb728bcc67854f186d0c873f7894c5e2dd2be8202ca9e28f049868a605d64b9d13b066773a26ef4cb852a5dc82a66a89eee5fe419155df69793eb9b0ac48c70e385a1876870f5a2bcb97cb056dc601d3b92733b82b3b8c7526a1f3162af1033d8d98603547a7c2ae5e51590737c53b44f17082af80cbcfd640bc747c3e0cf227c85be01a6e0ef8883f7c8ebef387bdebe0228945c2b0f512ec0835f7dc8866f3fbc9141ea022914a1da70d5ba32a91dd0575bfb3cf166d90e7c470972efe4f20ec46db07ffc39d9cc3fd6fa0b7d78378f05573ff8c24add32d17c00627326bb851459e8dca74f90add6d5a86c5fa855b3b6a85e89cc6686aca3f3a952118178278aa78e6c8fd381cc144b629d9fc06175405e6ec1c16fccb4169966efa7225f39f7a45ba7cb017602add9341db4f1ab28c7ac459ee3935f3f166b69eaca524cac486a8d21652372020f5855c33c5bb6936bfda639d667bf5167b3fcedf6aa5ecb5648e7e7ff65ca10f00e308d19be988d18c48fef85e85256fb7e090290c77b20cd0f684c168165ca89a55f1b4064ee09db781f71a7f18b9c9f8aaa8b64e454632e26697ad8a786750b09dd6a0cb7bb1d6e918bfafe31ac306f358f3481b4eca5489f6cec5000a3a60e074d12a07e752f2dddf5727c01e6f94ff95b52ed4623f35e9aa429598bbacd8c37b7ead7736bd2ffa54f070cb0d3520a8555d29b4b61efced2cbe5f32fa60daa1c2fad06a8ae661e0dfe72d4652c2148db4a641d221959df1bc83e3772e4d8a62597a4033c60996db93158d6a6b06a850fcb60b60ea0da78f7d0a9bb6be6ad20ca832fe083593b9f545082bbef21fa2247edd4ee892a7dcc28b42e8ed7fe9029dbbb863a44d82189d84ba276186613a77a6e9df1d38fc3838038224e7ab3d7814936237949566970a1188daa1d1909b624a02397b14873ab62e090675abe35195fe186fb721ff6d659b91d23aff9f0844c7c8c7a409094a371e5f67729179155ffb8fb884603f3bd639769994d64bf6d55db3dd1c2fafaed3f84e6620485deb23be883cebc04362bf2e6cf38aaaa7b40eba5807146b31864318f41202152add2e04f987bb91bb93bca1fcd5ccc3e1244b39f1f91f8a772c3ce8deabcae315bf842e6b7dc54b12ea11f148a7914b5b644b6981acabeb174e35695e8a8674487403d6c1b191bc26782d7719d0042189aa0ca1ca4a168aad3d32dc0d0563dab363594d58d95500e7adc3afa858e5b8c052990cb52a8897edfc5e58006b3fc1b03fcdb88239fad0c577fc91f2bb59db9ca32eb340075b5e5aec40dd27db11c1f28520bf7ec8f5e54b461519cb70826bc15f9063dd8314a4d763fbe41a882fdb0f9fec4c9963b12cdb95923517beec970030f5f0259b30366c10325bfadeb0f17fe54cc611ba2cfccd662fca13ce7ed9125596cb75d78132f225c856dcf76cf2fb5851e55b2383c5411a9f03c8d72dc51b1d35214d15d586e544898a66fcdf0623c2991d63f9e0717d540b930f9fc93a771555395c40e00481fc945386e1633d241fdfca16f9e2691b11a325d92997bc95f1ca60007567afb813a5ebd64cca64fb2a6c077234d4fceb8e1d1a09545726ef4118ff8e2bfbea9ed96946932086324322ac134ce9f0922dc89074e56ad6456a013b84c4e323077754f5072da87ac4ada94c61b1493def174f314808e6cd31641704fe0d665a9dc10dd25802b8ef6c6d5f1a49c681d096bd74e8b60b7b0e91158746d62bb79cae6513991459ff69291015c45727b93196ce7721ba359bb0408ce22f4f008dceb437849539d18879622aa754ae3b2df9819f58c1592916f70bfa3f201aac002d8c0f7839ff6a3a69a6db7b18c5dad17515c1bc7d0023fbd32afdf81f4cfa7f28901f514d5afa2fe727259bd4de7548012366402b0146118b0bf133d937d12a6413f05f2a9737dc3ec19ac3f6c4e8bb07234374b4a1c1a30fac8847645d0092bf4b282876fbc5d4376de67370847d53760ed5afcab1ee246be2978e8b2dbff8d408e16231eefe6cdf1fba6dd8fd35569f4a80a4cc0fd831c9046eb94b16abc7d3eb2c4a2c3f4d6cc18195bd645cd76366414a84bd7ab0e771afbf066cd0734f19bd931bcce8214a3dbfd0e240c80f2587612562a58bd0b3da06cd3ec8045f83178c820e554995475da3c6ada1ad17f5721afa4d9e60a953f33bc1bb0b31314fd2d0e59b3cdbe258f106abe78cb97d5e2d0822a1ad51bd56d26ad6d06b3d610a08e225f31778dfd3ed530f49bf3006267cf6f74f1c60287808fa7cbb6749b6f77af3492f9607f8b20387644318355b54efa52e8f62f26f64a25adfd0e543d9bd41ed67cdfe1b9ea0a9336f2164c756e0043da034bc859b8f0eaf833bacccc55d58f70a6a025092526190017759a226a161ef1a84870b179529751184cdd8739d06575d2590a25ba395c52fdac0bd4b80c3bf7a4a643693a593b0c3adbdf388d34d041bb4ca509b371ab4d26b19b8b964e14685238fb253f890a7c00c6604ab332dfeb61a69d2334b7888af1aa07a4d9c722fdcb4575e2f6379c1bbcaacaf1472933328cda5a01998c0619bdc04d1b302e58f45cd514857f0ea078df2bdb8701a0c921bbbb507512780e27f9a2893f692a0d65947ae4d1490147a353f98bfbdd5dbb47a8c88ede9a2db33a2d16aa277b0781a4c0a88bf1defbefec6845dc53688e1ff1e688ecd2dd80b7dd6f795bf144fd303a9e5cd221772caa72b8e6d5f477f70238eed8eb6b582b6344a571a2215c681bf37356b48621e5d53c3dbaf2acd8bb5514e441bbfe75657c3380748b5947ac04acc12c651466b501d0d9338c14f0accece7f0452a0acb13792333323b47fee223b3e566b975071ab1435e99d9b08e6dc2a9b7128d1f32174a1598099c5b4b7dada3822a4103fd4fe641fa304b4221879f7908f4a5caf1e50e7f202784127bb4ddb7e54856878b487f6807ac7820ccbf79aa12b6739395afbae9cdbbcdddf87c31f4c04686bb2c2e4e21489f87170e1f23e5ae9044957234da28d7edb0b52fefd50118ed3241ddde9cefad029cf149805eb589e56b180ff56ae5533edb23649103a0ccb94c24ff42e14d4135f6c91d31f8f7c15eacf604c6daf0ebbf7486c3756773ab4eb72fbd7d32efb1a1d01990bacaeece3c63fb66a6c296dc110b7fbd31e3e0b1378a248ab136931e4a2173d5682817ca2e65f2f09ebf3e715a8fa153486c20a476e1b9197a96b4d000f799a0f6ec8db636f90bd6971b299c00c07b117e874631c2292348a728cee2717c3961a2dbd2342585e498c27fc102b87bcc06e001e9de3e884b5da1a8bc3c13af576080cf928236e38da13f1aeb82bf66dd0213449d3ac40a6b233d70c650d266010bf6324c5e937ad133b4de68c1c2ed238a3dfbd83c0cc0a80e33efa4d4860122486217a3a6b806ca013e7979f47fb59ed7d8c62b07d13d5b0216835ca30baff62ff6acbf56d40b74a4e2c17c76d52c896af38b3fa50f733d0a7efc1989aa7c496178eff4fc98385a0af11f035a53188092aa06d4778d5a53b9646d47f4a1479461bc4f4b6f7e64622f07872e29de5f7147d8120ee5ed45d8bc97ca4dacd1a20e1277d75aaf5a2b646f4ec5edcff215bd1a5f2d22f8fe981869295bf7d8c7ce4c3062cdcb62f0aa807b0ce030179805f7faab6eee99866bf034b6cf12f9c3088698f2c8f22f0849535ed7c5dbee775bae398334b4f83babeaa7538278845b70f54ac4bcfcafc8e43d836d5208d0ed2db27fb99ab5769f9677211af6d8980d040eab2ab703cce1d7b18d1db20fcc58997dd7261afdebfc3f921280a681266da0825d5083d8e27b64d20bbcff511771e8a77261eb6d06dc8f37a2f2030a1cfded3ba88dd93ad0eaa4e571e4a7d3063a60ac39377907e12eda1538a7e0cd06f6456201f06090bae2a56948244ac085cfc5ab25645c1b05bba264a51155c96420a87da23fd0d36c92e34a9e9688b50c215766847aeb82a9668ae9e1a23e778f9f0ca577e44dfb5f5cfafebe2bc03708e4468b7d14437e03ec153431b19fff7b390cda6022c3391cff785b8ff3f5416d89655ccf05126c6910c263cef48b96dce510fba42610eaeaf1478182c37c1f7945d68173d20beebed9eb2ce4ac3c34794d268f545a8ccfdbfc842f3aa0dbf89114d90aefad149642542d355236d9ef237baff9fda6b89c33cf8ae1d12d6b28418c4aa296a2eebd9dece7880f7b8350247e72f49ea5ad490080aec3ec805ac5cc09217778a46515469093b31960897b5a085c", @nested={0x28, 0x8, 0x0, 0x1, [@nested={0x4, 0x4e}, @nested={0x4, 0x112}, @nested={0x4, 0x63}, @nested={0x4, 0xcf}, @nested={0x4, 0x77}, @nested={0x4, 0xd2}, @nested={0x4, 0xba}, @typed={0x8, 0xda, 0x0, 0x0, @pid=r8}]}, @generic="a57a81e19403cc40b54149f6a4df084d1e2bcacc21e37ba1433d6191bd6b84000960e5a7d7f6e1346a67ee06f6a70d0d5177c269b55ba12af199290c", @generic="80ac064636a6232bc7f9bc0fe95bfd37660c6e9c0b8d466086cb1a9791671d6010e33d538fd4318bd8bb9a8e83801f1120f59752de20d1ead825b011be29d0d9ebe144abacb0661c647509b2dca12c6e7453cb544ec287b6d9acc96c639e1d06c7ed547b33fad76b8e84"]}, @NL80211_ATTR_FILS_ERP_RRK={0x1a, 0xfc, "267eff669acf551e53bcba25304c4c0f2e7634f2a918"}]}, 0x2364}, 0x1, 0x0, 0x0, 0x10}, 0x8044) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x7}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x4000000) 5m28.585521965s ago: executing program 1 (id=1254): r0 = openat$auto_cpu_latency_qos_fops_qos(0xffffffffffffff9c, &(0x7f0000006640), 0x2240, 0x0) read$auto(r0, &(0x7f0000000080)='/dev/cpu_dma_latency\x00', 0x86c1) getrusage$auto(0x1, &(0x7f0000000080)={{0x3, 0x6}, {0x8, 0xe}, 0x2, 0x0, 0x8000000000000001, 0x5, 0x1000e, 0x7, 0x3, 0x8000000000000001, 0x6, 0x2, 0x6, 0x0, 0x7, 0x2}) unshare$auto(0x20000) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_DEL(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf4, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@OVS_METER_ATTR_BANDS={0xce, 0x4, 0x0, 0x1, [@nested={0x10, 0x81, 0x0, 0x1, [@typed={0xc, 0x18f, 0x0, 0x0, @u64=0x5}]}, @generic="0fc21984e90a7ea3955b7412fabbeafb8c8a91ee60fc311c892d5941512bec06a74e113c95383b5a5c25a7f77a62dfc15409a76ba68ccdbe39fab1e99881e7673ffd79b3df1d5326c9536ffdfbc6711911dda133efe9a800a953fca1d963e501d19acaf4e096b58519c00f50f897ba07b5d303d16194edb539bda33c51cd862992663da169bb3042069d656c1a51ddddaed3990952ad9afb03b5e6d05a5da1e45b75880433d76e66048d940934163dbbcb6dd8e10c0e347577f3"]}, @OVS_METER_ATTR_MAX_BANDS={0x8, 0x8, 0x81}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x3}]}, 0xf4}, 0x1, 0x0, 0x0, 0x24000050}, 0x20008801) mmap$auto(0xffff8000, 0x80009, 0xb, 0x8000000008011, r1, 0x0) unshare$auto(0x20000) 5m28.352155944s ago: executing program 1 (id=1255): chdir$auto(0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x2, 0x73) sendto$auto(r0, 0x0, 0x402, 0x0, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x19) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) mmap$auto(0x3, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto(0x3, 0x5411, 0x38) io_uring_setup$auto(0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x2802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) prctl$auto_PR_SET_MM_ARG_START(0x1, 0x8, 0xffffffffffffffff, 0x9, 0x321) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x23, 0xe, 0x2009, 0x0, 0x0) connect$auto(0x3, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x1, 0x40, 0x0, 0x9) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x20842, 0x0) write$auto(r3, 0x0, 0x4) 5m12.510023773s ago: executing program 34 (id=1255): chdir$auto(0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x2, 0x73) sendto$auto(r0, 0x0, 0x402, 0x0, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x19) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) mmap$auto(0x3, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto(0x3, 0x5411, 0x38) io_uring_setup$auto(0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x2802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) prctl$auto_PR_SET_MM_ARG_START(0x1, 0x8, 0xffffffffffffffff, 0x9, 0x321) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x23, 0xe, 0x2009, 0x0, 0x0) connect$auto(0x3, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x1, 0x40, 0x0, 0x9) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x20842, 0x0) write$auto(r3, 0x0, 0x4) 13.177262853s ago: executing program 4 (id=2166): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd70001cdddf250200020008000308"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/apparmor/current\x00', 0x141000, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D1p\x00', 0x0, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) io_uring_setup$auto(0x0, 0x0) socket(0xa, 0x3, 0xff) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x3f) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x96141, 0x0) r1 = socket(0x1b, 0x3, 0x76) madvise$auto(0x0, 0x2000040080000003, 0xe) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getsockopt$auto_SO_RCVPRIORITY(r1, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x10006, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x4040400, 0x0, 0x58, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x801, 0x106) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r2, 0x11c, 0x1, 0x0, 0x0) 10.371049231s ago: executing program 4 (id=2176): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}, 0x54) (async) write$auto(0x3, 0x0, 0xfffffdef) (async) ioctl$auto(0x3, 0x2, 0x38) (async) mmap$auto(0xffffffffffffffff, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) setsockopt$auto(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x7fffffff) (async) socket(0x2, 0x1, 0x0) getsockopt$auto(0x3, 0x200000000001, 0x400019, 0x0, 0x0) (async, rerun: 32) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd6/range\x00', 0x100, 0x0) (async, rerun: 32) r2 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f00000003c0)="4a67d23edb317545d9bc87452a055975210d2de48606", 0x49}, 0x5, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100) (async) read$auto(r1, 0x0, 0x20) (async, rerun: 64) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (rerun: 64) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) r4 = setfsuid$auto(0xee00) (async, rerun: 32) r5 = setfsuid$auto(0xee01) (rerun: 32) setresuid$auto(r4, r5, r4) msgctl$auto_MSG_STAT(0x0, 0xb, &(0x7f0000001180)={{0x7, r5, 0x0, 0x8, 0x6, 0xc0, 0xec}, &(0x7f0000001100)=0x1, &(0x7f0000001140)=0x2, 0x9, 0xffff, 0xa9b3, 0x2, 0xf2b5, 0x80, 0xfffc, 0x806, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff}) (async) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/fib_multipath_hash_fields\x00', 0x202, 0x0) (async) r8 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) sendfile$auto(r8, r7, 0x0, 0x200) (async) setfsuid$auto(r6) (async) socket(0x26, 0x2, 0x88) (async) read$auto_proc_page_owner_operations_page_owner(0xffffffffffffffff, &(0x7f00000000c0)=""/4085, 0xff5) 9.13971935s ago: executing program 5 (id=2183): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd70001cdddf250200020008000308"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df25"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/apparmor/current\x00', 0x141000, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D1p\x00', 0x0, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) io_uring_setup$auto(0x0, 0x0) socket(0xa, 0x3, 0xff) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x3f) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x96141, 0x0) r1 = socket(0x1b, 0x3, 0x76) madvise$auto(0x0, 0x2000040080000003, 0xe) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getsockopt$auto_SO_RCVPRIORITY(r1, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x10006, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x4040400, 0x0, 0x58, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x801, 0x106) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r2, 0x11c, 0x1, 0x0, 0x0) 8.975050361s ago: executing program 4 (id=2184): socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xa, 0x801, 0x106) socket(0x2, 0x1, 0x0) socket(0xa, 0x2, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) sendmsg$auto_NL80211_CMD_SET_MCAST_RATE(r0, 0x0, 0x20000004) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/030/001\x00', 0x0, 0x0) socket(0x15, 0x5, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) connect$auto(0x3, 0x0, 0x55) madvise$auto(0x5, 0xffffffffffff0004, 0x19) madvise$auto(0x0, 0xf663, 0x15) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x5, 0x0) socket(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x7) socketpair$auto(0x1e, 0x1, 0x0, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) 8.326411929s ago: executing program 6 (id=2187): r0 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) r1 = open_by_handle_at$auto(r0, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/diskstats\x00', 0x0, 0x0) read$auto_proc_iter_file_ops_compat_inode(r3, &(0x7f0000000180)=""/250, 0xfa) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000040)="bdcda609d0dd307ad1695e8740fefb7f2c", 0x11) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)) ioctl$auto_IOCTL_VMCI_CTX_SET_CPT_STATE(r4, 0x7b2, 0x0) r6 = setfsuid$auto(0xee00) setreuid$auto(r6, 0x0) waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000080)={@siginfo_0_0={0x3ac, 0x3, 0x3444d36e, @_sigpoll={0x2, r2}}}, 0x7ff, &(0x7f0000000100)={{0x5, 0x4}, {0x3, 0x7fffffff}, 0x8, 0x5, 0x6, 0x8, 0x0, 0x3, 0xfffffffffffffffd, 0x10, 0x5, 0x6, 0xffffffffffffffff, 0x2, 0x8, 0x6}) shmctl$auto_SHM_INFO(0x0, 0xe, &(0x7f00000003c0)={{0x9, r6, 0xffffffffffffffff, 0x8, 0x9, 0xa, 0xfffe}, 0x3, 0x1, 0x1, 0x7ff, @raw=0x7, @inferred=0xffffffffffffffff, 0x1000, 0x0, &(0x7f00000001c0)="47731eb260d6c224a2f26e4b6490006d33c4632c9c8babc952c5585df369585239435654c0d46bdaade2ae88488602ea2ff184edcd98d0b136a1c9e957fafdbb98d0435e7f8b1a7762c2d93f378dc2132114126c0b6e4600b022461f301d47edc85ebffbccef59245c19c914c181f70ccb4d733b877eaf4bf143dbbd0000cdb1fea482aaf7f6d947da21b9fb52c8ff94b5b3371e2bf5bc03c3deab1e15", &(0x7f00000002c0)="bec1cfa3532357c28c7d458a30aa3a1fdfa502bb64355cf93c14620d50643c4fc454160ee2ecf308370d362bb775f2e4fe8f1c21c9b9be0a4f8895330d65250b9150b034a9ae721588a4238ca53e8af537421d3729de5718e269ab8b6099fe78ba793250bcfd6c91786b2b6fafc73eecbdc8b36804e189168468b5d79d65f56c9b838d141470c43519c0c5359a0d670acaa66a07a16e3173a50e4922ac88a06bfd54a5cc513ce87cd3e053a5207476c1519216798c61d30cd7da09c8d2d5cd80bbe2047eed9dd7d678d2185b182147c5"}) shmctl$auto_SHM_STAT_ANY(0x400007, 0xf, &(0x7f0000000300)={{0x3fe, 0xee00, 0xffffffffffffffff, 0x9, 0xc53a, 0x29, 0xe}, 0x4, 0xffffffffffffffff, 0xff, 0x20000000000081, @inferred, @raw=0x2, 0x0, 0x0, 0x0, 0x0}) r8 = setfsgid$auto(r7) fchown$auto(0xffffffffffffffff, 0xee00, r8) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000480), r1) sendmsg$auto_NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x11c, r9, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_MLD_ADDR={0xd6, 0x13a, "331f1c85d02b6a5ea14088e8c8903de6b7bda2871d9314b0aca458d02ff76e961a7b2dc1fc22eea3e363832dca9c5b65d2992fed23f9255e0619d2ac0e5a254a939c5ec785cde5435c84b1a2c8bba40c3d4e220e2b7126f7561746fa02d679d2581ca7996ec64a835079190bdfd2142d33c32e77d37477b9b45f1a20f98805f868a327fe24269c934eca99be96315b848a66680dd373c610d2a1fa33576b9066882108b3e83061eabcd9d79e08a1ce6ba7ff87b5e83f6e6f4b9091965679ecf44ade0adf17f9e74eafd0a23885160e00abc7"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "95ddf46d252c81477369e5d7f3851459524f3031965f6ed2"}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0xfffc}, @NL80211_ATTR_MLO_LINK_DISABLED={0x4}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x1}]}, 0x11c}, 0x1, 0x0, 0x0, 0x48000}, 0x24008081) capset$auto(&(0x7f0000000080)={0x4, 0x0}, &(0x7f0000000100)={0x1, 0x8}) msgctl$auto_MSG_INFO(0xc, 0xc, &(0x7f0000000140)={{0x2, r6, r8, 0x7fffffff, 0x80000000, 0xd765, 0x800}, &(0x7f0000000000)=0x7, &(0x7f0000000040)=0x3, 0xa6f0, 0x5, 0xffff, 0x1, 0x5957, 0x3, 0x0, 0x0, @inferred=r10, @raw=0xb0c0}) 7.120451173s ago: executing program 5 (id=2189): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) mlock$auto(0xfbea, 0x10004) madvise$auto(0x8000, 0x87fff, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syslog$auto_SYSLOG_ACTION_READ(0x2, &(0x7f0000000040)='/dev/kvm\x00', 0xfffffffc) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) r0 = setfsuid$auto(0x0) setuid$auto(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) kcmp$auto(0x0, 0x0, 0x7, 0xffffffffffffffff, r1) sendmsg$auto_NFC_CMD_STOP_POLL(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x80c0) mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) r2 = socket(0xa, 0x801, 0x100) setsockopt$auto(r2, 0x6, 0x2, 0x0, 0xfb3) mkdir$auto(0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) 6.778562618s ago: executing program 0 (id=2190): r0 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) open_by_handle_at$auto(r0, &(0x7f0000001280)={0x8, 0x2, "0200400001000000"}, 0x6) 6.709517774s ago: executing program 4 (id=2191): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) socketpair$auto(0xfffffffe, 0xdd9, 0xb6bd, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendto$auto(0x3, 0x0, 0x100000000, 0x8, 0x0, 0x1c) fcntl$auto(0x3, 0x4, 0xa553) mmap$auto(0x0, 0x1, 0x37eb, 0x40eb2, 0x4, 0x300000000000) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, r1, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, 0x0, 0xa2500, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x80401, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r2) r4 = getpgid$auto(0x0) sendmsg$auto_TASKSTATS_CMD_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r3, 0xa01, 0x70bd2b, 0x25dfdbfb, {}, [@TASKSTATS_CMD_ATTR_TGID={0x8, 0x2, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c8c1}, 0x20008010) 6.431320386s ago: executing program 6 (id=2192): r0 = socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, r0, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) sendmmsg$auto(0x3, 0x0, 0x40, 0x100) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/tracing/set_event\x00', 0x20002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRESHEX, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0xfffffffffffffffe, 0x400003, 0x2040000, 0x9b71, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(r1, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) writev$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x10}, 0x3) mremap$auto(0x200000000000, 0x4, 0x4, 0x3, 0x100000000) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x20000000) socketpair$auto(0x1, 0xd, 0x9, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), r4) r5 = open(&(0x7f0000000800)='./file0\x00', 0xa2240, 0x154) fcntl$auto(r5, 0x400, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) open(&(0x7f0000000080)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) close_range$auto(0x2, 0x8000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop6\x00', 0x14f682, 0x0) 6.414005089s ago: executing program 0 (id=2193): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/net\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x301, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) remap_file_pages$auto(0x7, 0x1000, 0x1, 0x7, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x1000, 0x2) socket(0x15, 0x3, 0x8000) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) socketpair$auto(0x1, 0xfffffffd, 0x6, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) (async) socket(0x27, 0x80000, 0x400) (async) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) bind$auto(0x3, 0x0, 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x21) (async) ioctl$auto_FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000080)) (async) connect$auto(0x3, &(0x7f0000000080)=@nl=@unspec, 0x81) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000180), 0x90000, 0x0) (async) pread64$auto(r1, 0x0, 0x8, 0x420a) (async) listen$auto(0x3, 0x81) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/module/lockd/parameters/nlm_tcpport\x00', 0x8001, 0x0) io_uring_register$auto_IORING_REGISTER_CLOCK(r2, 0x1d, &(0x7f0000000000)="87c5ab0de6019593a0cb0aabaf46c8f582def9fea6c740dd85bced279c32397ada10aebdea0bc91e0ff8e5d6191c5f0ce14e08db52215d58e1202d5939e9f9398e7381ee78902d9f100ec2dbebe3b76a28a24c70355488099d6cf270c304d8190e745e1a5aaaa68232ac90820936ca62d69387a97deec39d32a56476fd65d5ae2cf11615a91f0ccf569a59", 0x7) 6.039518687s ago: executing program 6 (id=2194): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/hwsim0/netdev_group\x00', 0x141000, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) ioctl$auto_KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000140)={0x5}) dup2$auto(r0, r0) 5.936694752s ago: executing program 5 (id=2195): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f00000000c0)={0x1c, 0x0, 0x59e638bc4fbb3f7d, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48018}, 0x400c880) 5.776024712s ago: executing program 6 (id=2196): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd70001cdddf250200020008000308"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/apparmor/current\x00', 0x141000, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D1p\x00', 0x0, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) io_uring_setup$auto(0x0, 0x0) socket(0xa, 0x3, 0xff) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x3f) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x96141, 0x0) r1 = socket(0x1b, 0x3, 0x76) madvise$auto(0x0, 0x2000040080000003, 0xe) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getsockopt$auto_SO_RCVPRIORITY(r1, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x10006, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x4040400, 0x0, 0x58, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x801, 0x106) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r2, 0x11c, 0x1, 0x0, 0x0) 5.632892167s ago: executing program 0 (id=2197): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bind$auto(0x3, 0x0, 0x6a) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x10) write$auto_sg_fops_sg(r2, &(0x7f0000000280)="4a0200000000000000899edb610047eb02eff5d2adc245a4e1eded0e91b86c61b6b42ed64247a11f094252e6eed061", 0x2f) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) r3 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto_l2cap_debugfs_fops_(r3, 0x0, 0x0) close_range$auto(r3, r0, 0x1a) ioctl$auto_EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f00000004c0)=0x2) write$auto(0x3, 0x0, 0xfffffdef) r4 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000100), r0) ioctl$auto(0xffffffffffffffff, 0x900064b5, 0xc14) msgctl$auto(0x9, 0xf8, &(0x7f00000001c0)={{0x8, 0xee00, 0x0, 0x4, 0xa771, 0x7, 0x9}, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x1, 0xc28a, 0x5f52, 0x3, 0x9, 0x8, 0x2cce, 0xfffc, 0x6, @inferred=0x0, @inferred=0xffffffffffffffff}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSC(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01022abd7000fedbdf25030000000c00028008000100d959", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x48010) msgctl$auto(0x6, 0x5, &(0x7f0000000340)={{0x2, r5, r6, 0xd8, 0x6, 0x6, 0x1}, &(0x7f00000002c0)=0x6, &(0x7f0000000300)=0x6, 0x7ff, 0x1ff, 0x4cc, 0x3, 0xd, 0x200, 0x7, 0x5, @inferred=r7, @raw=0x22ad}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r11) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r11, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000200)={0x38, r12, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x1}]}, @NET_SHAPER_A_LEAVES={0x10, 0xa, 0x0, 0x1, [@NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x2}]}]}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r13}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x14) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f00000027c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002780)={&(0x7f0000004140)={0x1bf4, r4, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_IFINDEX={0x8}, @OVS_VPORT_ATTR_NAME={0xf, 0x3, '/de\x02\x00\x00\x00\x00\x00Kq'}, @OVS_VPORT_ATTR_OPTIONS={0x552, 0x4, 0x0, 0x1, [@nested={0xce, 0x144, 0x0, 0x1, [@typed={0x4, 0x75}, @nested={0x4, 0x68}, @generic="d1506bbd2b1ebe4d19b0d1c0ab9c296454e83f6f917ac6b0097c35d5df5abbc18838f7a7f3b46966c809d12efc3a7a069afe67a71d5567097f060e60e752058afe2f21dd8e61df70ef93aeeebfdb2433f6f4fc2a08eaf6e20011cc4749ac9c02feb7059988773029c0283338878bcccdc09ee6318737f2af18d42604ad6bba937d6dd2f5a7d9c92e8f08d40b3f052e083a9bb7bf59ad99a2501b8622414a", @typed={0x14, 0x40, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @nested={0x4, 0x57}, @typed={0xc, 0x104, 0x0, 0x0, @u64=0x7}]}, @nested={0x7d, 0xab, 0x0, 0x1, [@nested={0x4, 0x12}, @nested={0x4, 0x23}, @typed={0x8, 0x69, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x4, 0x5f}, @typed={0x8, 0xd0, 0x0, 0x0, @fd}, @typed={0xc, 0x7c, 0x0, 0x0, @u64=0x2}, @nested={0x4, 0x90}, @generic="79d31828247124c22fc149f17fd8f3fef9b6d50cca19d4edd0d2235c54e103110d26d2fd850efdfbc2bab33821259a212d6398b52a6ec51be2080828160a659c83a3140c6598120c51", @nested={0x4, 0x54}]}, @nested={0x38d, 0xe6, 0x0, 0x1, [@generic="9a9ee0a2123a8fa92a4224c5e320835bc1df4b86308f1eb106b640770860908a7ee198191bec22d0e1fe7b49b4428100781fc9231baa218eb9dff6587e85758d2557a569379b8216c1a1a193109a24a6cbf4ca980e8cd518672d8170bfc296672040c805d2805a666b2c10da076637bada153ac529599e829086c0d426fe1187195bc35fd3", @typed={0x7, 0xa5, 0x0, 0x0, @str='}+\x00'}, @typed={0x8, 0xd8, 0x0, 0x0, @ipv4=@private=0xa010100}, @nested={0x2f4, 0x8e, 0x0, 0x1, [@generic="cc788951154753", @nested={0x3c, 0x5a, 0x0, 0x1, [@nested={0x4, 0xf0}, @typed={0xb, 0x23, 0x0, 0x0, @str='^&{:\\.\x00'}, @generic="1ce72796aad2f61ea2ccfdbf8047b87c57cc0e3b17f2f3d0890c63ef7887b427ffcab38d397e810a"]}, @generic="99d14f4a5a769c947e210132b921539b499d945e61577229cc7673097b5f096836e76d053c798f2a52fe395ef51b6fa9a781877e4654bcbec7415207f8171a851baa3ea6f4532fb2c5ce3f3e39c8adc669f798ee510ae9353620897cd286adf333ef5711bc4ef4ff58ae2dc4632a77f85d62417a855967449077d15bf6d40d10a3c95c17916ac5a01d9fc8a54f23420340", @nested={0x1a4, 0xa8, 0x0, 0x1, [@generic="38c302972c1e237013c706c12582aec3c349b29c3a51023c573107e8fc09adf2234dfa6f1151c0f6ff89ce3bb4831dae3c9944e2bb4a15bb4cc20f2ad878ec41a89e97a1df698bbed6926392fb12cc9cb90f1eba6dd4a46a17efe713c45f", @typed={0x8, 0x8f, 0x0, 0x0, @uid=r10}, @nested={0x4, 0xb2}, @generic="aa59f8bc64aea46d6ebf5afe20d932a57db18da51e7f80483ceade753f68974aaf5bb8d84a81bc9cd8425da1e9ca9be3c789a057a4c56c50ca3dbf88278530b3ca3594cb6a355f2f030be697c196c97935a4f97bb9987f7024023c9248caf826423f31f2bbc3da9c64d6201141f53047a224e7dff8ebd3f45fa64bfc50e478f0d8e638f6875362ce876b465d56b64ef908e1f8c14ca1fa0e2b684772d68f1a710b2a6f9f21de3d5b39f06caf03cc0835603512b5e57aae3dac79a2a35f967ddadc363433869e7d72c7addbce4af2b70d1d18d9dd110b9f96c72e9f44", @generic="12cbbc83a110be5b68de962823f5c75df33a2616eedf3de8df4406702924e1c88eba", @generic="8d10c8b1681bd08129f2477552fee1d0fa40461f5be57b7a2b299a7ad10c61ba2a3c944325900daa8f5f5d29e6ed575a055734c8", @nested={0x4, 0xe2}]}, @nested={0x78, 0x62, 0x0, 0x1, [@generic="4eedbdd1a9cd976a48ee33bf95efa8ae74dac200b5579207790bd8f44b247c9d270e2a6c811eec556766fdb3f889f42bdff71371ee9e9e4c404f7f973dbf172471be351acbc51f5998673feb851a925eca48fa952efe837a03c1cb8e732039efd3c999d79abd7b6a", @typed={0x8, 0xe, 0x0, 0x0, @u32=0x7}, @nested={0x4, 0x46}]}]}]}, @typed={0x8, 0xb6, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @generic="78679f385b78dc", @typed={0xf, 0x141, 0x0, 0x0, @str='/dev/adsp1\x00'}, @generic="34dbb4a18fb580bda46a26cb741baeb66648b73e16593e6280ab1f493bdceced1b1cb8e704a055f6ba30c848e10359186bdac20f914fc3e87ed1e9d944940d1af2861a7aa210570710731e24a2b60c"]}, @OVS_VPORT_ATTR_UPCALL_STATS={0x165c, 0xa, 0x0, 0x1, [@generic, @nested={0x1546, 0xd0, 0x0, 0x1, [@typed={0x8, 0x14f, 0x0, 0x0, @fd=r0}, @generic="f9a797da505dcf906b68d0f035d37a61d68ee9fdb9f149686ec13987efdb7cb8b185d252799b09b7091181776ea1604abe13aeafbb2e8f4162663e90b0013fa4bf28e1cfa9559f778b65f7cb", @generic="82dc8554d44b61c6435db14dd74cb862a76fa5d2566be2e01a51fdc29997a706501c6c8cf9e63f622cd95ede2c49c0586a4678379137826b409067c97cccbd0a450d3048781b00d6311b53a262fa5935a5bd1660b80051edcc79d9dd0f3b5c97261a2319349c7b75d6db90ad0a518b5b7c7255a420e7c1c29e920317bb2018475f27ea1d62c4ccdbc8d0305332", @generic="6834094893092faf8c83d0b182d105500414bcf1f486f373a04d400154", @nested={0x1340, 0x34, 0x0, 0x1, [@nested={0x4, 0xf9}, @nested={0x328, 0x86, 0x0, 0x1, [@nested={0x213, 0x149, 0x0, 0x1, [@generic="297913a6bdaae74a540032f03dc540033a0fe0720c6e62cdd85f17620db3e25f6566956cf4df53b4b91aaa78c9422505740f32d0411234f2f8c121ef6dc9985d90493c29987a00592a53f42e4d756a90f3d3", @nested={0x4, 0x1b}, @typed={0x14, 0x136, 0x0, 0x0, @ipv6=@private1}, @typed={0xc, 0xad, 0x0, 0x0, @u64=0xffffffffffffffff}, @typed={0x39, 0x113, 0x0, 0x0, @binary="ac83bac417c663e9df8f6c3bf15a1ddc5487c8fb2b42e0ed1a0fdef4bf54015f07d8b65fb4bb7614f1c48d8de35cef982538a02ace"}, @nested={0x4, 0x11b}, @generic="83ae86dd3620448a83b6c0bed778a16470e7426cc8a13bcbcbd28aa1c3189dfb637ca2a72bc8a77b94d2ccecc688a24b7397f0c3d3c7882cbf24729a12502e6799cefb7cc6a2e1ad7f73a94bf94fb950f55d123f35449a47ab2ef844807cbc4f1c70dfec8d36226f01f2c2bdd78c7c84536d7629666124f8c90e45", @generic="3f407675ebc83b494aa92ce82c472b3f9cf22fe6da8287a9a6cf7327e1060092aaee3912becad2287a262719c23b523a92e787f615ba88921fa2efe9606b813b8af911e12f0f23333032e9871c0272d2e3e1feedf994b2858addbd57dd5d9c404552f7511b040c02ae7dcbb8f1d88e8dde5e7e6f044d6f46971b8f71b58f68a79bec427442a9f7849bed156b98208cd06421a0e69046e3831aeb215e061d8e67e30935601d16e72a78c9b5c88c7cea2c875f34eb6c7d23e4792d4ee74c67f57e91b4ccea0692241e869bda6fe0a02953b294a62a7efcbc6a6109", @nested={0x4, 0x13d}]}, @typed={0x8, 0x6c, 0x0, 0x0, @fd=r1}, @nested={0xef, 0x10d, 0x0, 0x1, [@typed={0x8, 0x8c, 0x0, 0x0, @ipv4=@empty}, @typed={0x8, 0x82, 0x0, 0x0, @fd=r11}, @generic="6665f93f5b2df2127f8c42259ef15ce840c64ac5b7c8084aad805340915db3f9c81284c623a95b30694d87256036fc879266a5c2e3b0a180de2d17aeaeb6319d0a056b5915ff698f4611052e1fd9a793b64ba60f5956ee8d45fb2c1bdf774fdc0dfc206a0f002e7a4009ee9b3e4b181cdb51e72a848ac61fb21f747409feb38ee6899226e9237b2cf4dbe9cccb14cf653349e043d648dc300ab1c7d61de60c8508204ddd46343f7ff365a20c6f22a1acd5c2cf35422c08b51d00f5e4bf4f0cf3778cd5", @nested={0x4, 0x23}, @typed={0x14, 0x78, 0x0, 0x0, @ipv6=@private1}]}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @typed={0x4, 0x73}]}, @generic="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", @typed={0xc, 0x9f, 0x0, 0x0, @u64=0x6}, @nested={0x4, 0x9c}]}, @typed={0x8, 0x8d, 0x0, 0x0, @ipv4=@multicast1}, @nested={0xfc, 0xe0, 0x0, 0x1, [@typed={0x8, 0x148, 0x0, 0x0, @u32=0x1}, @typed={0xb, 0xc, 0x0, 0x0, @str='macsec\x00'}, @typed={0x8, 0xa6, 0x0, 0x0, @pid=r7}, @generic="8fbbe55649726c289d493bcd81112b3137c3fac819c510aee67c037e9462e97e66d85e15ac587d82685b306eb0f5a05ce52e5bc5ff7acd581c033fd7f3277eea419a78b9c6daa2b117c27ee0624767e30bb388d912052b65369d2f3b663439743404a3328ed67f44d49d55af22f97cf0cc16aaa47a97eaa57396b29a0d9f8a0070f5ad7f8804918850689c92427cafe1e5fb2fa68122e95948aa47df6a75347fa6257ba8403488d1aae92e192561c9eac3c7fb77d056cdf69df137262b3831f69071241a93b7417165d1410a833ad373b0678afd", @typed={0x8, 0x3e, 0x0, 0x0, @u32}]}]}, @generic="777da6d34d1810f0b8f8d86364fcd9ec35", @generic="67f408c1595a0dceeca0c32d84b6e5cb8cf09ea89b052e2cdb002d2273986b3a09392b120fae17018bb264346509fb0dccfbbd0c6479353ac961875209d3614b9189546f5fc5a5a4c7bfe16a1297dbc47cacab35a46076457a376b2b9bd7771c2ad90a795d7d7375091fc4164b4db5db69d5b1112aab6ac5d3be0521164281e6dd0ac0df38c8c099821107093a2147474c861f05e6c38ddeef2d2301ede4824aa14fd16283c71cc20d013a87c453eb38492ada068d7ddb455a950f9591aa57f6bcd02628083c257bf433c2db3d20bb54bf1bba96597e40b80d340eb516e67da032c6e1cc6f4b179536cc9a5deab6db72f8ade26db5e6484af394677610433b"]}, @OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0x5}, @OVS_VPORT_ATTR_NETNSID={0x8}, @OVS_VPORT_ATTR_IFINDEX={0x8, 0x8, r13}]}, 0x1bf4}, 0x1, 0x0, 0x0, 0xd5}, 0x4000040) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20002, 0x0) 5.173287831s ago: executing program 5 (id=2198): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$auto_NVRAM_INIT(r1, 0x7040, 0x0) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000001100), r0) sendmsg$auto_CTRL_CMD_GETFAMILY(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002dbd7000ffdbdf25030000000600010030"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000044) r3 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000200), r0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TRIP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=')\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="ffff2cbd7000fbdbdf2502000000040001"], 0x18}}, 0x4000010) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 3.896262602s ago: executing program 0 (id=2199): mmap$auto(0x0, 0x128009, 0xdf, 0xd9, 0x401, 0x8000) (async) keyctl$auto(0x2, 0xfffffffd, 0x2, 0x0, 0xfffffffffffffbf9) mmap$auto(0x2, 0x4003, 0xdf, 0x16, 0x7, 0x27ffc) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) (async) landlock_restrict_self$auto(r0, 0x7) (async) socket(0x1, 0x2, 0x1) mmap$auto(0x0, 0x8, 0xdf, 0x16, 0x401, 0xf) (async) r1 = socket(0x1, 0x1, 0x0) (async) bind$auto(0x3, 0x0, 0x2) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000180), r2) r4 = ioctl$auto_TUNSETVNETLE2(0xffffffffffffffff, 0x400454dc, &(0x7f0000000180)=0x1) sendmsg$auto_L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000007584e6503090e8e2b5345e9cfa0488f164657bdaf133aa4d7b077ba1ef5b8363cdf15c32d776d70c37fb947a373d39b4b398c60a30cb4220b77d78a224eccfe5f9139e82a44281e7f788c99891cf49fa1b2380ab80cd79cf342a3b905512943361100d75bc2e483ca3ca496b33e9996c6fee13b68bc901361cdc0c0cd298dd13f50a00233aa3fc4c1b156e9e90874f09ebcf719ce5e1d9f413aefcd288c40620579d97fb92bcecc60d7641a0d988b839fceabc568e02f2dd121a9e600194462cd48f42024cc98b2e5fc7cdc4b0e510adbabb11b8ab20", @ANYRES16=r3, @ANYBLOB="020026bd7000ff9a7d001c000000000014001f00fe88000000000000000000000000010100"/46], 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async, rerun: 32) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r3, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@HSR_A_IF1_SEQ={0x6, 0x6, 0x7}, @HSR_A_IF2_AGE={0x8, 0x4, 0x142}, @HSR_A_IF1_AGE={0x8, 0x3, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x1) (async, rerun: 32) r5 = socket(0x10, 0x2, 0x0) recvmmsg$auto(r5, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) (async) r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="8b0500000000fedbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) sendmsg$auto_BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x8001) 2.89726812s ago: executing program 0 (id=2200): r0 = openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/bus/serio/drivers/pulse8-cec/bind_mode\x00', 0x1eb842, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x8) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) unshare$auto(0x40000080) write$auto(0xca, &(0x7f0000000000)='\x04\x01\x04\x00\x00\x00\xf1\xff\x00\xb6', 0x8) clock_gettime$auto(0xfffffffffffffff0, 0x0) write$auto(r1, &(0x7f00000001c0)='\x00', 0xffffffff) io_uring_setup$auto(0x40, &(0x7f0000000040)={0x3, 0x400, 0x5634ca5d, 0x4, 0x9ce, 0xe60, r1, [0x6, 0x20000, 0x96e], {0x7c0, 0x2, 0xba32, 0x5, 0x2, 0x5e43, 0x1, 0x1, 0xc}, {0x0, 0x3, 0xffffff81, 0x6, 0x2, 0x8000, 0x4, 0x200, 0xd5}}) r2 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r2, 0x29, 0x3e, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_prog_fd=r0, 0x7fff, @old_prog_fd=0x13b}, 0xa3) 2.777058447s ago: executing program 5 (id=2201): r0 = openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) bpf$auto(0x2000, &(0x7f0000000780)=@link_update={0xa, @new_prog_fd=r0, 0x7fff, @old_prog_fd=0x13b}, 0xa3) 2.634369794s ago: executing program 6 (id=2202): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x8000, 0x0) setitimer$auto(0x2, &(0x7f0000000080)={{0x2, 0x5}, {0x0, 0x8}}, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x40000000f42c, 0x2) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000001c0), 0x7a5180, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f00000000c0), 0x307ac1, 0x0) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000140)={0x6, &(0x7f0000000100)={0x7b79, 0x3, 0x7f, @inferred=r0}}) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pci0000:00/0000:00:00.0/ari_enabled\x00', 0xa0440, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000080)=""/64, 0x40) ioctl$auto(r2, 0x800064c1, 0xffffffffffffffff) io_uring_setup$auto(0x7, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8000ffff}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x23, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r4, 0x10e, 0x1, 0x0, 0xe) close_range$auto(0x2, r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x14) socket(0x11, 0x80003, 0x300) socket(0xa, 0x801, 0x100) socket(0x2, 0x80002, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.517748754s ago: executing program 5 (id=2203): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd70001cdddf250200020008000308"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/apparmor/current\x00', 0x141000, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D1p\x00', 0x0, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) io_uring_setup$auto(0x0, 0x0) socket(0xa, 0x3, 0xff) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x3f) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x96141, 0x0) r1 = socket(0x1b, 0x3, 0x76) madvise$auto(0x0, 0x2000040080000003, 0xe) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getsockopt$auto_SO_RCVPRIORITY(r1, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x10006, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x4040400, 0x0, 0x58, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x801, 0x106) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r2, 0x11c, 0x1, 0x0, 0x0) 2.405595434s ago: executing program 4 (id=2204): msgrcv$auto(0x200, 0x0, 0xff, 0x8, 0xb5) 1.909177148s ago: executing program 4 (id=2205): socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x5, 0x5) syz_clone(0x2000200, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioprio_set$auto(0x2, 0x800000000, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_RINGS_GET(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010039bd0f0000000c000180080001", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x8004805}, 0x20004804) r6 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) read$auto(r6, 0x0, 0x1f40) r7 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r7, &(0x7f00000000c0)={0x0, 0x7}, 0x3) getpgid$auto(0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000140)=""/122, 0x7a) syslog$auto(0x3, 0xfffffffffffffffd, 0x6) newfstatat$auto(0xffffffffffffffff, 0x0, 0x0, 0xfffffffd) r8 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r8, 0xc0603d06, 0x0) r9 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000002c00), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004440)={&(0x7f0000000040)={0xa0, r9, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x88, 0x1, 0x0, 0x1, [@nested={0x84, 0x10a, 0x0, 0x1, [@nested={0x7f, 0x106, 0x0, 0x1, [@generic="c5d92bda15c812dce50c00260cbee210c173caf9b8115cc49860774a00784d9280c2bee46f969224b25ffb68dd9694d630791a339aa3c253d49c68df80ae6dc3f9634b41233ac659b05d6e77b4ee1857cfc349fe2f99933b3b3b08d88f0b69b3b025595ffc1e5c42f0cafd35bf883bc2dffee964a543097fbca5ef"]}]}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000840}, 0x840) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r10 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup.cpu/memory.stat\x00', 0x80200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r10, &(0x7f0000000240)=""/118, 0x76) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd27, 0x2ddfdc02, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @ETHTOOL_A_RINGS_RX_BUF_LEN={0x8, 0xa, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x80014) 275.675689ms ago: executing program 6 (id=2206): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd13/queue/scheduler\x00', 0x2c62, 0x0) write$auto(r0, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x12, 0x400, 0x18002) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x100010008000) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000140)={0xf0, 0xd, 0xfffffffe, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [0x0, 0x1], {0x8, 0x10001, 0xb, 0x2de, 0x504, 0x1, 0x101, 0x6, 0x2}, {0xfff7ffff, 0xfffffff9, 0x52, 0x4af, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000003}}) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000100)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={0x0, 0x6}, 0xa, 0x0) socket(0xa, 0x2, 0x0) setsockopt$auto(r0, 0x2, 0x920, 0x0, 0x56b) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) pread64$auto(r2, &(0x7f0000000040)='/proc/mtrr\x00', 0x1, 0x5) r3 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000540), 0xa0100, 0x0) lseek$auto(r3, 0x0, 0x3) memfd_create$auto(0x0, 0x9) socket(0x1a, 0x6, 0x968c) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto(0xffffffffffffffff, 0x545c, 0xffffffffffffffff) r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x1, 0x0) ioctl$auto(r4, 0x4018620d, 0x9) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x29, 0x5, 0x0) 0s ago: executing program 0 (id=2207): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) brk$auto(0x7fffffffafff) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x6) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000ffdbdf25050000000c00010007000000000000000c00010004000000000000000c0040000000000000000c00010004000000000000000c0001000000000200000000"], 0x50}, 0x1, 0x0, 0x0, 0x4048801}, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x100, 0x810004, 0xffb, 0x8000000008015, 0x3, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0x2003f0, 0x18) r3 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000001100), 0x0, 0x0) ioctl$auto_USB_RAW_IOCTL_EP0_READ(r3, 0xc0085504, &(0x7f0000000040)={0x9, 0x1, 0x5}) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sysfs$auto(0x2, 0x2000000000040, 0x0) fsopen$auto(0x0, 0x1) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400020009, 0x9, 0x15, 0x8000000401, 0x7fffffffffffffff) fstat$auto(r3, &(0x7f0000000200)={0x4, 0x4, 0x0, 0x76d508f6, 0x0, 0xee01, 0x0, 0xffffffffffffff01, 0xa6ee, 0x3a, 0x20fffffffd, 0x3, 0x8, 0x3, 0x9, 0x7, 0x9}) mmap$auto(0xfffffffffffffffd, 0x400008, 0x6, 0x18, r0, 0x8000) mmap$auto(0x0, 0x104020009, 0xe2, 0xeb5, 0x401, 0x8000) unshare$auto(0x40000080) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) kernel console output (not intermixed with test programs): 000 [ 616.174115][T14260] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 616.174132][T14260] R13: 00007f16b91e6038 R14: 00007f16b91e5fa0 R15: 00007fff7bcdc3e8 [ 616.174171][T14260] [ 616.194767][T14259] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1800'. [ 616.197198][ C0] vkms_vblank_simulate: vblank timer overrun [ 616.435246][ C0] vkms_vblank_simulate: vblank timer overrun [ 616.551990][T14259] netlink: 504 bytes leftover after parsing attributes in process `syz.5.1800'. [ 616.633932][T10831] Bluetooth: hci2: command 0x0c1a tx timeout [ 616.713813][T10831] Bluetooth: hci3: command 0x0c1a tx timeout [ 616.743194][T14264] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1801'. [ 617.284099][T10831] Bluetooth: hci4: command 0x041b tx timeout [ 618.417340][T14289] FAULT_INJECTION: forcing a failure. [ 618.417340][T14289] name failslab, interval 1, probability 0, space 0, times 0 [ 618.436503][T14289] CPU: 0 UID: 0 PID: 14289 Comm: syz.5.1808 Not tainted syzkaller #0 PREEMPT(full) [ 618.436528][T14289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 618.436538][T14289] Call Trace: [ 618.436543][T14289] [ 618.436550][T14289] dump_stack_lvl+0x16c/0x1f0 [ 618.436573][T14289] should_fail_ex+0x512/0x640 [ 618.436591][T14289] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 618.436612][T14289] should_failslab+0xc2/0x120 [ 618.436632][T14289] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 618.436650][T14289] ? security_file_alloc+0x34/0x2b0 [ 618.436674][T14289] security_file_alloc+0x34/0x2b0 [ 618.436695][T14289] init_file+0x93/0x4c0 [ 618.436715][T14289] alloc_empty_file+0x73/0x1e0 [ 618.436741][T14289] alloc_file_pseudo+0x13a/0x230 [ 618.436764][T14289] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 618.436788][T14289] ? alloc_fd+0x471/0x7d0 [ 618.436806][T14289] sock_alloc_file+0x50/0x210 [ 618.436825][T14289] __sys_socket+0x1c0/0x260 [ 618.436845][T14289] ? __pfx___sys_socket+0x10/0x10 [ 618.436864][T14289] ? __pfx___x64_sys_open+0x10/0x10 [ 618.436883][T14289] __x64_sys_socket+0x72/0xb0 [ 618.436902][T14289] ? lockdep_hardirqs_on+0x7c/0x110 [ 618.436917][T14289] do_syscall_64+0xcd/0x4c0 [ 618.436933][T14289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.436949][T14289] RIP: 0033:0x7f911ad8eec9 [ 618.436961][T14289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 618.436975][T14289] RSP: 002b:00007f911bccd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 618.436989][T14289] RAX: ffffffffffffffda RBX: 00007f911afe5fa0 RCX: 00007f911ad8eec9 [ 618.436999][T14289] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 618.437007][T14289] RBP: 00007f911ae11f91 R08: 0000000000000000 R09: 0000000000000000 [ 618.437017][T14289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 618.437026][T14289] R13: 00007f911afe6038 R14: 00007f911afe5fa0 R15: 00007ffcbd4c58d8 [ 618.437044][T14289] [ 618.642838][ C0] vkms_vblank_simulate: vblank timer overrun [ 619.232236][T14292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1809'. [ 619.267118][T14292] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1809'. [ 619.496257][T10831] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 619.496314][T10831] Bluetooth: hci2: unexpected subevent 0x0e length: 725 > 15 [ 619.512064][T10831] Bluetooth: hci2: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 619.880470][T14308] netlink: 334 bytes leftover after parsing attributes in process `syz.6.1812'. [ 619.927196][T14309] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1813'. [ 620.034719][T14312] netlink: 334 bytes leftover after parsing attributes in process `syz.5.1811'. [ 620.287878][T14311] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1814'. [ 621.195794][T14322] netlink: 334 bytes leftover after parsing attributes in process `syz.6.1816'. [ 621.253121][T14315] openvswitch: .^: Dropping previously announced user features [ 623.792670][T14349] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1823'. [ 623.867873][T14349] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 623.952666][T14352] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1824'. [ 623.998896][T14352] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 624.341119][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.360953][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 syzkaller syzkaller login: [ 625.710407][T14370] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1826'. [ 625.755009][T14370] netlink: 25 bytes leftover after parsing attributes in process `syz.6.1826'. [ 625.899527][T14350] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 625.907771][T14350] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 625.963938][T14350] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 626.017577][T14350] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 626.138754][T14361] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 626.176344][T14362] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 626.202885][T14384] netlink: 'syz.6.1828': attribute type 11 has an invalid length. [ 626.362739][T14387] FAULT_INJECTION: forcing a failure. [ 626.362739][T14387] name fail_futex, interval 1, probability 0, space 0, times 0 [ 626.407675][T14387] CPU: 1 UID: 0 PID: 14387 Comm: syz.4.1829 Not tainted syzkaller #0 PREEMPT(full) [ 626.407713][T14387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 626.407729][T14387] Call Trace: [ 626.407739][T14387] [ 626.407751][T14387] dump_stack_lvl+0x16c/0x1f0 [ 626.407785][T14387] should_fail_ex+0x512/0x640 [ 626.407820][T14387] get_futex_key+0x1d0/0x1560 [ 626.407857][T14387] ? __pfx_get_futex_key+0x10/0x10 [ 626.407899][T14387] futex_wake+0xea/0x530 [ 626.407936][T14387] ? __pfx_futex_wake+0x10/0x10 [ 626.407975][T14387] ? errseq_sample+0x53/0x70 [ 626.408004][T14387] ? file_init_path+0x4fe/0x760 [ 626.408046][T14387] do_futex+0x1e3/0x350 [ 626.408078][T14387] ? __pfx_do_futex+0x10/0x10 [ 626.408110][T14387] ? fd_install+0x225/0x750 [ 626.408143][T14387] __x64_sys_futex+0x1e0/0x4c0 [ 626.408176][T14387] ? __sys_socket+0xac/0x260 [ 626.408212][T14387] ? __pfx___x64_sys_futex+0x10/0x10 [ 626.408245][T14387] ? xfd_validate_state+0x61/0x180 [ 626.408294][T14387] do_syscall_64+0xcd/0x4c0 [ 626.408325][T14387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.408354][T14387] RIP: 0033:0x7fbd6bd8eec9 [ 626.408376][T14387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 626.408402][T14387] RSP: 002b:00007fbd6cc390e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 626.408428][T14387] RAX: ffffffffffffffda RBX: 00007fbd6bfe5fa8 RCX: 00007fbd6bd8eec9 [ 626.408446][T14387] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbd6bfe5fac [ 626.408463][T14387] RBP: 00007fbd6bfe5fa0 R08: 00007fbd6cc3a000 R09: 0000000000000000 [ 626.408480][T14387] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 626.408496][T14387] R13: 00007fbd6bfe6038 R14: 00007fff06202f90 R15: 00007fff06203078 [ 626.408531][T14387] [ 626.633097][T14384] netlink: 'syz.6.1828': attribute type 11 has an invalid length. [ 626.923980][T10831] Bluetooth: hci1: command 0x0c1a tx timeout [ 627.694653][T10831] Bluetooth: hci3: unexpected event 0x1c length: 444 > 5 [ 627.925315][T10831] Bluetooth: hci2: command 0x0c1a tx timeout [ 627.949659][T14404] FAULT_INJECTION: forcing a failure. [ 627.949659][T14404] name failslab, interval 1, probability 0, space 0, times 0 [ 627.980820][T14405] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1832'. [ 627.993854][T10831] Bluetooth: hci3: command 0x0c1a tx timeout [ 628.040872][T14404] CPU: 1 UID: 0 PID: 14404 Comm: syz.4.1833 Not tainted syzkaller #0 PREEMPT(full) [ 628.040895][T14404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 628.040905][T14404] Call Trace: [ 628.040912][T14404] [ 628.040920][T14404] dump_stack_lvl+0x16c/0x1f0 [ 628.040942][T14404] should_fail_ex+0x512/0x640 [ 628.040960][T14404] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 628.040980][T14404] should_failslab+0xc2/0x120 [ 628.041000][T14404] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 628.041018][T14404] ? vm_area_dup+0x27/0x8d0 [ 628.041035][T14404] vm_area_dup+0x27/0x8d0 [ 628.041052][T14404] __split_vma+0x18e/0x1070 [ 628.041070][T14404] ? __pfx___split_vma+0x10/0x10 [ 628.041085][T14404] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 628.041111][T14404] vms_gather_munmap_vmas+0x3b1/0x1340 [ 628.041131][T14404] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 628.041159][T14404] do_vmi_align_munmap+0x27c/0x7d0 [ 628.041178][T14404] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 628.041220][T14404] do_vmi_munmap+0x204/0x3e0 [ 628.041246][T14404] move_vma+0xb67/0x1780 [ 628.041267][T14404] ? __pfx_move_vma+0x10/0x10 [ 628.041286][T14404] ? mm_get_unmapped_area_vmflags+0x97/0xe0 [ 628.041316][T14404] ? vrm_set_new_addr+0x208/0x290 [ 628.041334][T14404] mremap_to+0x1b7/0x450 [ 628.041352][T14404] do_mremap+0x13b0/0x2030 [ 628.041370][T14404] ? futex_private_hash_put+0xe0/0x300 [ 628.041392][T14404] ? __pfx_do_mremap+0x10/0x10 [ 628.041412][T14404] ? do_writev+0x218/0x340 [ 628.041433][T14404] __do_sys_mremap+0x119/0x170 [ 628.041449][T14404] ? __pfx___do_sys_mremap+0x10/0x10 [ 628.041473][T14404] ? __x64_sys_futex+0x1e0/0x4c0 [ 628.041503][T14404] do_syscall_64+0xcd/0x4c0 [ 628.041520][T14404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.041535][T14404] RIP: 0033:0x7fbd6bd8eec9 [ 628.041548][T14404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 628.041562][T14404] RSP: 002b:00007fbd6cc39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 628.041580][T14404] RAX: ffffffffffffffda RBX: 00007fbd6bfe5fa0 RCX: 00007fbd6bd8eec9 [ 628.041590][T14404] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 628.041599][T14404] RBP: 00007fbd6be11f91 R08: 0000000100000000 R09: 0000000000000000 [ 628.041609][T14404] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 628.041618][T14404] R13: 00007fbd6bfe6038 R14: 00007fbd6bfe5fa0 R15: 00007fff06203078 [ 628.041638][T14404] [ 628.073938][T10831] Bluetooth: hci4: command 0x041b tx timeout [ 628.239471][ C0] vkms_vblank_simulate: vblank timer overrun [ 628.772837][T14409] FAULT_INJECTION: forcing a failure. [ 628.772837][T14409] name failslab, interval 1, probability 0, space 0, times 0 [ 628.873165][T14409] CPU: 0 UID: 0 PID: 14409 Comm: syz.5.1834 Not tainted syzkaller #0 PREEMPT(full) [ 628.873202][T14409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 628.873218][T14409] Call Trace: [ 628.873227][T14409] [ 628.873239][T14409] dump_stack_lvl+0x16c/0x1f0 [ 628.873274][T14409] should_fail_ex+0x512/0x640 [ 628.873303][T14409] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 628.873338][T14409] should_failslab+0xc2/0x120 [ 628.873373][T14409] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 628.873404][T14409] ? security_file_alloc+0x34/0x2b0 [ 628.873443][T14409] security_file_alloc+0x34/0x2b0 [ 628.873477][T14409] init_file+0x93/0x4c0 [ 628.873512][T14409] alloc_empty_file+0x73/0x1e0 [ 628.873547][T14409] alloc_file_pseudo+0x13a/0x230 [ 628.873584][T14409] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 628.873621][T14409] ? alloc_fd+0x471/0x7d0 [ 628.873655][T14409] sock_alloc_file+0x50/0x210 [ 628.873693][T14409] __sys_socket+0x1c0/0x260 [ 628.873730][T14409] ? __pfx___sys_socket+0x10/0x10 [ 628.873765][T14409] ? xfd_validate_state+0x61/0x180 [ 628.873809][T14409] __x64_sys_socket+0x72/0xb0 [ 628.873842][T14409] ? lockdep_hardirqs_on+0x7c/0x110 [ 628.873869][T14409] do_syscall_64+0xcd/0x4c0 [ 628.873899][T14409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.873926][T14409] RIP: 0033:0x7f911ad8eec9 [ 628.873946][T14409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 628.873969][T14409] RSP: 002b:00007f911bccd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 628.873991][T14409] RAX: ffffffffffffffda RBX: 00007f911afe5fa0 RCX: 00007f911ad8eec9 [ 628.874008][T14409] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 628.874024][T14409] RBP: 00007f911ae11f91 R08: 0000000000000000 R09: 0000000000000000 [ 628.874039][T14409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 628.874055][T14409] R13: 00007f911afe6038 R14: 00007f911afe5fa0 R15: 00007ffcbd4c58d8 [ 628.874090][T14409] [ 629.073924][ C0] vkms_vblank_simulate: vblank timer overrun [ 629.509221][T14418] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1835'. [ 630.412723][T14428] ptrace attach of "./syz-executor exec"[5844] was attempted by "./syz-executor exec"[14428] [ 630.706482][T14435] netlink: 334 bytes leftover after parsing attributes in process `syz.6.1840'. [ 631.404879][ T30] audit: type=1800 audit(4294967410.640:25): pid=14434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1838" name="members" dev="configfs" ino=46041 res=0 errno=0 [ 633.418740][T14459] netlink: 342 bytes leftover after parsing attributes in process `syz.6.1845'. [ 633.549266][T14459] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 634.387814][T14459] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 634.394824][T14459] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 634.401084][T14459] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 634.413798][T14459] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 634.588539][T14464] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 636.057565][T14497] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1851'. [ 636.097076][T10831] Bluetooth: hci1: command 0x0c1a tx timeout [ 636.485697][T10831] Bluetooth: hci4: command 0x041b tx timeout [ 636.494351][ T5163] Bluetooth: hci3: command 0x0c1a tx timeout [ 636.495872][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 637.014494][T14504] nvme_fcloop: unknown parameter or missing value 'Ù›ª' [ 637.186553][T14513] usb usb36: usbfs: process 14513 (syz.5.1855) did not claim interface 0 before use [ 638.325174][T14554] could not allocate digest TFM handle [ 639.084895][T14594] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 639.384470][T14599] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1861'. [ 641.377300][T14594] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 641.383486][T14594] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 641.594044][T14594] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 641.611401][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 641.704240][T14594] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 641.738637][T14601] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 642.124501][T14620] usb usb36: usbfs: process 14620 (syz.5.1865) did not claim interface 0 before use [ 643.434202][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 643.674351][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 643.753822][ T51] Bluetooth: hci4: command 0x041b tx timeout [ 645.479320][T14657] FAULT_INJECTION: forcing a failure. [ 645.479320][T14657] name failslab, interval 1, probability 0, space 0, times 0 [ 645.492454][T14657] CPU: 1 UID: 0 PID: 14657 Comm: syz.0.1872 Not tainted syzkaller #0 PREEMPT(full) [ 645.492475][T14657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 645.492485][T14657] Call Trace: [ 645.492491][T14657] [ 645.492505][T14657] dump_stack_lvl+0x16c/0x1f0 [ 645.492541][T14657] should_fail_ex+0x512/0x640 [ 645.492569][T14657] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 645.492602][T14657] should_failslab+0xc2/0x120 [ 645.492623][T14657] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 645.492641][T14657] ? vm_area_dup+0x27/0x8d0 [ 645.492660][T14657] vm_area_dup+0x27/0x8d0 [ 645.492677][T14657] __split_vma+0x18e/0x1070 [ 645.492703][T14657] ? __pfx___split_vma+0x10/0x10 [ 645.492725][T14657] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 645.492755][T14657] vms_gather_munmap_vmas+0x3b1/0x1340 [ 645.492788][T14657] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 645.492818][T14657] do_vmi_align_munmap+0x27c/0x7d0 [ 645.492838][T14657] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 645.492886][T14657] do_vmi_munmap+0x204/0x3e0 [ 645.492905][T14657] move_vma+0xb67/0x1780 [ 645.492926][T14657] ? __pfx_move_vma+0x10/0x10 [ 645.492945][T14657] ? mm_get_unmapped_area_vmflags+0x97/0xe0 [ 645.492972][T14657] ? vrm_set_new_addr+0x208/0x290 [ 645.492989][T14657] mremap_to+0x1b7/0x450 [ 645.493007][T14657] do_mremap+0x13b0/0x2030 [ 645.493024][T14657] ? futex_private_hash_put+0xe0/0x300 [ 645.493047][T14657] ? __pfx_do_mremap+0x10/0x10 [ 645.493068][T14657] ? do_writev+0x218/0x340 [ 645.493089][T14657] __do_sys_mremap+0x119/0x170 [ 645.493105][T14657] ? __pfx___do_sys_mremap+0x10/0x10 [ 645.493127][T14657] ? __x64_sys_futex+0x1e0/0x4c0 [ 645.493156][T14657] do_syscall_64+0xcd/0x4c0 [ 645.493172][T14657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.493187][T14657] RIP: 0033:0x7f16b8f8eec9 [ 645.493200][T14657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 645.493214][T14657] RSP: 002b:00007f16b9dec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 645.493229][T14657] RAX: ffffffffffffffda RBX: 00007f16b91e5fa0 RCX: 00007f16b8f8eec9 [ 645.493238][T14657] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 645.493248][T14657] RBP: 00007f16b9011f91 R08: 0000000100000000 R09: 0000000000000000 [ 645.493259][T14657] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 645.493267][T14657] R13: 00007f16b91e6038 R14: 00007f16b91e5fa0 R15: 00007fff7bcdc3e8 [ 645.493286][T14657] [ 646.099605][T14664] FAULT_INJECTION: forcing a failure. [ 646.099605][T14664] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 646.132709][T14664] CPU: 1 UID: 0 PID: 14664 Comm: syz.0.1873 Not tainted syzkaller #0 PREEMPT(full) [ 646.132747][T14664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 646.132765][T14664] Call Trace: [ 646.132775][T14664] [ 646.132787][T14664] dump_stack_lvl+0x16c/0x1f0 [ 646.132823][T14664] should_fail_ex+0x512/0x640 [ 646.132859][T14664] should_fail_alloc_page+0xe7/0x130 [ 646.132898][T14664] prepare_alloc_pages+0x3c2/0x610 [ 646.132939][T14664] ? rcu_is_watching+0x12/0xc0 [ 646.132969][T14664] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 646.133006][T14664] ? __cgroup_account_cputime+0xcc/0x120 [ 646.133037][T14664] ? __pick_eevdf+0x127/0x670 [ 646.133068][T14664] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 646.133113][T14664] ? __lock_acquire+0x62e/0x1ce0 [ 646.133149][T14664] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 646.133186][T14664] ? policy_nodemask+0xea/0x4e0 [ 646.133220][T14664] alloc_pages_mpol+0x1fb/0x550 [ 646.133262][T14664] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 646.133298][T14664] ? __lock_acquire+0x62e/0x1ce0 [ 646.133334][T14664] folio_alloc_mpol_noprof+0x36/0x2f0 [ 646.133374][T14664] vma_alloc_folio_noprof+0xed/0x1e0 [ 646.133410][T14664] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 646.133460][T14664] do_pte_missing+0x2230/0x3ba0 [ 646.133488][T14664] ? find_held_lock+0x2b/0x80 [ 646.133524][T14664] __handle_mm_fault+0x152a/0x2a50 [ 646.133562][T14664] ? __pfx___handle_mm_fault+0x10/0x10 [ 646.133593][T14664] ? __pte_offset_map_lock+0x174/0x310 [ 646.133628][T14664] ? find_held_lock+0x2b/0x80 [ 646.133658][T14664] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 646.133703][T14664] handle_mm_fault+0x589/0xd10 [ 646.133737][T14664] __get_user_pages+0x551/0x34a0 [ 646.133789][T14664] ? __pfx___get_user_pages+0x10/0x10 [ 646.133837][T14664] populate_vma_page_range+0x267/0x3f0 [ 646.133865][T14664] ? __pfx_populate_vma_page_range+0x10/0x10 [ 646.133885][T14664] ? __pfx_find_vma_intersection+0x10/0x10 [ 646.133926][T14664] ? do_mmap+0x69c/0x1210 [ 646.133975][T14664] __mm_populate+0x1d8/0x380 [ 646.134002][T14664] ? __pfx___mm_populate+0x10/0x10 [ 646.134031][T14664] ? up_write+0x1b2/0x520 [ 646.134072][T14664] vm_mmap_pgoff+0x37f/0x470 [ 646.134112][T14664] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 646.134155][T14664] ? __x64_sys_futex+0x1e0/0x4c0 [ 646.134185][T14664] ? __x64_sys_futex+0x1e9/0x4c0 [ 646.134222][T14664] ksys_mmap_pgoff+0x7d/0x5c0 [ 646.134266][T14664] ? xfd_validate_state+0x61/0x180 [ 646.134310][T14664] __x64_sys_mmap+0x125/0x190 [ 646.134340][T14664] do_syscall_64+0xcd/0x4c0 [ 646.134371][T14664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.134399][T14664] RIP: 0033:0x7f16b8f8eec9 [ 646.134421][T14664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 646.134448][T14664] RSP: 002b:00007f16b9dec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 646.134473][T14664] RAX: ffffffffffffffda RBX: 00007f16b91e5fa0 RCX: 00007f16b8f8eec9 [ 646.134491][T14664] RDX: 00000000000000df RSI: 0000000000400009 RDI: 0000000000000000 [ 646.134507][T14664] RBP: 00007f16b9011f91 R08: 8000000000000003 R09: 0000000000008000 [ 646.134524][T14664] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 646.134539][T14664] R13: 00007f16b91e6038 R14: 00007f16b91e5fa0 R15: 00007fff7bcdc3e8 [ 646.134575][T14664] [ 646.640146][T14667] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input45 [ 646.744573][T14668] FAULT_INJECTION: forcing a failure. [ 646.744573][T14668] name failslab, interval 1, probability 0, space 0, times 0 [ 646.758501][T14668] CPU: 1 UID: 0 PID: 14668 Comm: syz.5.1874 Not tainted syzkaller #0 PREEMPT(full) [ 646.758537][T14668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 646.758553][T14668] Call Trace: [ 646.758562][T14668] [ 646.758570][T14668] dump_stack_lvl+0x16c/0x1f0 [ 646.758605][T14668] should_fail_ex+0x512/0x640 [ 646.758634][T14668] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 646.758668][T14668] should_failslab+0xc2/0x120 [ 646.758703][T14668] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 646.758734][T14668] ? vm_area_dup+0x27/0x8d0 [ 646.758765][T14668] vm_area_dup+0x27/0x8d0 [ 646.758794][T14668] __split_vma+0x18e/0x1070 [ 646.758823][T14668] ? __pfx___split_vma+0x10/0x10 [ 646.758848][T14668] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 646.758890][T14668] vms_gather_munmap_vmas+0x3b1/0x1340 [ 646.758921][T14668] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 646.758973][T14668] do_vmi_align_munmap+0x27c/0x7d0 [ 646.759005][T14668] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 646.759080][T14668] do_vmi_munmap+0x204/0x3e0 [ 646.759112][T14668] move_vma+0xb67/0x1780 [ 646.759175][T14668] ? __pfx_move_vma+0x10/0x10 [ 646.759212][T14668] ? mm_get_unmapped_area_vmflags+0x97/0xe0 [ 646.759261][T14668] ? vrm_set_new_addr+0x208/0x290 [ 646.759294][T14668] mremap_to+0x1b7/0x450 [ 646.759324][T14668] do_mremap+0x13b0/0x2030 [ 646.759351][T14668] ? futex_private_hash_put+0xe0/0x300 [ 646.759386][T14668] ? __pfx_do_mremap+0x10/0x10 [ 646.759421][T14668] ? do_writev+0x218/0x340 [ 646.759460][T14668] __do_sys_mremap+0x119/0x170 [ 646.759487][T14668] ? __pfx___do_sys_mremap+0x10/0x10 [ 646.759525][T14668] ? __x64_sys_futex+0x1e0/0x4c0 [ 646.759576][T14668] do_syscall_64+0xcd/0x4c0 [ 646.759607][T14668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.759633][T14668] RIP: 0033:0x7f911ad8eec9 [ 646.759655][T14668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 646.759679][T14668] RSP: 002b:00007f911bccd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 646.759704][T14668] RAX: ffffffffffffffda RBX: 00007f911afe5fa0 RCX: 00007f911ad8eec9 [ 646.759721][T14668] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 646.759737][T14668] RBP: 00007f911ae11f91 R08: 0000000100000000 R09: 0000000000000000 [ 646.759753][T14668] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 646.759768][T14668] R13: 00007f911afe6038 R14: 00007f911afe5fa0 R15: 00007ffcbd4c58d8 [ 646.759804][T14668] [ 647.165770][T14664] FAULT_INJECTION: forcing a failure. [ 647.165770][T14664] name failslab, interval 1, probability 0, space 0, times 0 [ 647.379919][T14664] CPU: 1 UID: 0 PID: 14664 Comm: syz.0.1873 Not tainted syzkaller #0 PREEMPT(full) [ 647.379955][T14664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 647.379970][T14664] Call Trace: [ 647.379979][T14664] [ 647.379989][T14664] dump_stack_lvl+0x16c/0x1f0 [ 647.380023][T14664] should_fail_ex+0x512/0x640 [ 647.380049][T14664] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 647.380084][T14664] should_failslab+0xc2/0x120 [ 647.380116][T14664] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 647.380144][T14664] ? __pfx___might_resched+0x10/0x10 [ 647.380169][T14664] ? __anon_vma_prepare+0xae/0x5e0 [ 647.380201][T14664] __anon_vma_prepare+0xae/0x5e0 [ 647.380233][T14664] __vmf_anon_prepare+0x11c/0x240 [ 647.380269][T14664] do_pte_missing+0x10bd/0x3ba0 [ 647.380296][T14664] ? find_held_lock+0x2b/0x80 [ 647.380326][T14664] __handle_mm_fault+0x152a/0x2a50 [ 647.380368][T14664] ? __pfx___handle_mm_fault+0x10/0x10 [ 647.380397][T14664] ? __pte_offset_map_lock+0x174/0x310 [ 647.380434][T14664] ? find_held_lock+0x2b/0x80 [ 647.380472][T14664] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 647.380519][T14664] handle_mm_fault+0x589/0xd10 [ 647.380554][T14664] __get_user_pages+0x551/0x34a0 [ 647.380607][T14664] ? __pfx___get_user_pages+0x10/0x10 [ 647.380654][T14664] populate_vma_page_range+0x267/0x3f0 [ 647.380682][T14664] ? __pfx_populate_vma_page_range+0x10/0x10 [ 647.380706][T14664] ? __pfx_find_vma_intersection+0x10/0x10 [ 647.380743][T14664] ? do_mmap+0x69c/0x1210 [ 647.380782][T14664] __mm_populate+0x1d8/0x380 [ 647.380808][T14664] ? __pfx___mm_populate+0x10/0x10 [ 647.380836][T14664] ? up_write+0x1b2/0x520 [ 647.380871][T14664] vm_mmap_pgoff+0x37f/0x470 [ 647.380904][T14664] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 647.380948][T14664] ? __x64_sys_futex+0x1e0/0x4c0 [ 647.380978][T14664] ? __x64_sys_futex+0x1e9/0x4c0 [ 647.381015][T14664] ksys_mmap_pgoff+0x7d/0x5c0 [ 647.381048][T14664] ? xfd_validate_state+0x61/0x180 [ 647.381092][T14664] ? __pfx_ksys_write+0x10/0x10 [ 647.381126][T14664] __x64_sys_mmap+0x125/0x190 [ 647.381156][T14664] do_syscall_64+0xcd/0x4c0 [ 647.381188][T14664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.381216][T14664] RIP: 0033:0x7f16b8f8eec9 [ 647.381239][T14664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 647.381264][T14664] RSP: 002b:00007f16b9dec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 647.381291][T14664] RAX: ffffffffffffffda RBX: 00007f16b91e5fa0 RCX: 00007f16b8f8eec9 [ 647.381310][T14664] RDX: 00000000000000df RSI: 0000000000000008 RDI: 0000000000000000 [ 647.381326][T14664] RBP: 00007f16b9011f91 R08: 0000000000000002 R09: 0000000000008000 [ 647.381343][T14664] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 647.381422][T14664] R13: 00007f16b91e6038 R14: 00007f16b91e5fa0 R15: 00007fff7bcdc3e8 [ 647.381460][T14664] [ 649.703706][T14706] serio: Serial port pty6 [ 650.752407][T14723] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1884'. [ 650.793166][T14716] FAULT_INJECTION: forcing a failure. [ 650.793166][T14716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 650.840517][T14716] CPU: 0 UID: 0 PID: 14716 Comm: syz.0.1883 Not tainted syzkaller #0 PREEMPT(full) [ 650.840548][T14716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 650.840562][T14716] Call Trace: [ 650.840576][T14716] [ 650.840586][T14716] dump_stack_lvl+0x16c/0x1f0 [ 650.840617][T14716] should_fail_ex+0x512/0x640 [ 650.840650][T14716] _copy_to_user+0x32/0xd0 [ 650.840680][T14716] simple_read_from_buffer+0xcb/0x170 [ 650.840709][T14716] proc_fail_nth_read+0x197/0x240 [ 650.840737][T14716] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 650.840764][T14716] ? rw_verify_area+0xcf/0x6c0 [ 650.840787][T14716] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 650.840813][T14716] vfs_read+0x1e1/0xcf0 [ 650.840842][T14716] ? __pfx___mutex_lock+0x10/0x10 [ 650.840868][T14716] ? __pfx_vfs_read+0x10/0x10 [ 650.840902][T14716] ? __fget_files+0x20e/0x3c0 [ 650.840937][T14716] ksys_read+0x12a/0x250 [ 650.840966][T14716] ? __pfx_ksys_read+0x10/0x10 [ 650.841003][T14716] do_syscall_64+0xcd/0x4c0 [ 650.841032][T14716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.841056][T14716] RIP: 0033:0x7f16b8f8d8dc [ 650.841075][T14716] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 650.841097][T14716] RSP: 002b:00007f16b9dec030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 650.841118][T14716] RAX: ffffffffffffffda RBX: 00007f16b91e5fa0 RCX: 00007f16b8f8d8dc [ 650.841134][T14716] RDX: 000000000000000f RSI: 00007f16b9dec0a0 RDI: 0000000000000003 [ 650.841198][T14716] RBP: 00007f16b9dec090 R08: 0000000000000000 R09: 0000000000000000 [ 650.841219][T14716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 650.841234][T14716] R13: 00007f16b91e6038 R14: 00007f16b91e5fa0 R15: 00007fff7bcdc3e8 [ 650.841269][T14716] [ 650.842270][T14725] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input46 [ 651.191270][T14731] serio: Serial port pty6 [ 651.484991][T14736] FAULT_INJECTION: forcing a failure. [ 651.484991][T14736] name failslab, interval 1, probability 0, space 0, times 0 [ 651.503800][T14736] CPU: 1 UID: 0 PID: 14736 Comm: syz.5.1888 Not tainted syzkaller #0 PREEMPT(full) [ 651.503845][T14736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 651.503862][T14736] Call Trace: [ 651.503871][T14736] [ 651.503882][T14736] dump_stack_lvl+0x16c/0x1f0 [ 651.503916][T14736] should_fail_ex+0x512/0x640 [ 651.503945][T14736] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 651.503981][T14736] should_failslab+0xc2/0x120 [ 651.504016][T14736] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 651.504048][T14736] ? sock_alloc_inode+0x25/0x1c0 [ 651.504088][T14736] ? __pfx_sock_alloc_inode+0x10/0x10 [ 651.504119][T14736] sock_alloc_inode+0x25/0x1c0 [ 651.504153][T14736] alloc_inode+0x61/0x240 [ 651.504189][T14736] sock_alloc+0x40/0x280 [ 651.504220][T14736] __sock_create+0xc1/0x8d0 [ 651.504261][T14736] __sys_socket+0x14d/0x260 [ 651.504297][T14736] ? __pfx___sys_socket+0x10/0x10 [ 651.504333][T14736] ? xfd_validate_state+0x61/0x180 [ 651.504379][T14736] __x64_sys_socket+0x72/0xb0 [ 651.504412][T14736] ? lockdep_hardirqs_on+0x7c/0x110 [ 651.504439][T14736] do_syscall_64+0xcd/0x4c0 [ 651.504469][T14736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.504496][T14736] RIP: 0033:0x7f911ad8eec9 [ 651.504517][T14736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 651.504543][T14736] RSP: 002b:00007f911bccd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 651.504569][T14736] RAX: ffffffffffffffda RBX: 00007f911afe5fa0 RCX: 00007f911ad8eec9 [ 651.504587][T14736] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 651.504603][T14736] RBP: 00007f911ae11f91 R08: 0000000000000000 R09: 0000000000000000 [ 651.504620][T14736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 651.504636][T14736] R13: 00007f911afe6038 R14: 00007f911afe5fa0 R15: 00007ffcbd4c58d8 [ 651.504672][T14736] [ 651.504837][T14736] socket: no more sockets [ 652.593257][T14756] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 653.212174][T14772] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 653.678151][T14772] netlink: 186 bytes leftover after parsing attributes in process `syz.6.1895'. [ 654.033944][T14756] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 654.068340][T14756] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 654.108462][T14756] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 654.135302][T14756] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 654.166123][T14759] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 654.205451][T14793] FAULT_INJECTION: forcing a failure. [ 654.205451][T14793] name failslab, interval 1, probability 0, space 0, times 0 [ 654.248780][T14793] CPU: 0 UID: 0 PID: 14793 Comm: syz.6.1899 Not tainted syzkaller #0 PREEMPT(full) [ 654.248816][T14793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 654.248832][T14793] Call Trace: [ 654.248841][T14793] [ 654.248853][T14793] dump_stack_lvl+0x16c/0x1f0 [ 654.248897][T14793] should_fail_ex+0x512/0x640 [ 654.248927][T14793] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 654.248963][T14793] should_failslab+0xc2/0x120 [ 654.248998][T14793] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 654.249028][T14793] ? security_file_alloc+0x34/0x2b0 [ 654.249069][T14793] security_file_alloc+0x34/0x2b0 [ 654.249104][T14793] init_file+0x93/0x4c0 [ 654.249139][T14793] alloc_empty_file+0x73/0x1e0 [ 654.249176][T14793] alloc_file_pseudo+0x13a/0x230 [ 654.249215][T14793] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 654.249251][T14793] ? alloc_fd+0x471/0x7d0 [ 654.249284][T14793] sock_alloc_file+0x50/0x210 [ 654.249316][T14793] __sys_socket+0x1c0/0x260 [ 654.249353][T14793] ? __pfx___sys_socket+0x10/0x10 [ 654.249388][T14793] ? xfd_validate_state+0x61/0x180 [ 654.249431][T14793] __x64_sys_socket+0x72/0xb0 [ 654.249464][T14793] ? lockdep_hardirqs_on+0x7c/0x110 [ 654.249491][T14793] do_syscall_64+0xcd/0x4c0 [ 654.249522][T14793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.249548][T14793] RIP: 0033:0x7fdd5e98eec9 [ 654.249570][T14793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 654.249597][T14793] RSP: 002b:00007fdd5f76a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 654.249622][T14793] RAX: ffffffffffffffda RBX: 00007fdd5ebe5fa0 RCX: 00007fdd5e98eec9 [ 654.249638][T14793] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 654.249654][T14793] RBP: 00007fdd5ea11f91 R08: 0000000000000000 R09: 0000000000000000 [ 654.249671][T14793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 654.249687][T14793] R13: 00007fdd5ebe6038 R14: 00007fdd5ebe5fa0 R15: 00007fff61330288 [ 654.249723][T14793] [ 654.892834][T14798] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 654.953791][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 655.377118][T14805] usb usb36: usbfs: process 14805 (syz.5.1902) did not claim interface 0 before use [ 656.026802][T14817] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1903'. [ 656.036578][T14817] netlink: 25 bytes leftover after parsing attributes in process `syz.5.1903'. [ 656.073920][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 656.153810][ T51] Bluetooth: hci4: command 0x041b tx timeout [ 656.154619][T10831] Bluetooth: hci3: command 0x0c1a tx timeout [ 656.968339][T14798] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 656.975280][T14798] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 656.982675][T14798] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 656.991912][T14798] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 657.024319][T14809] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 657.116957][T10831] Bluetooth: hci1: command 0x0c1a tx timeout [ 657.605904][T14845] FAULT_INJECTION: forcing a failure. [ 657.605904][T14845] name failslab, interval 1, probability 0, space 0, times 0 [ 657.618899][T14845] CPU: 1 UID: 0 PID: 14845 Comm: syz.6.1909 Not tainted syzkaller #0 PREEMPT(full) [ 657.618932][T14845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 657.618948][T14845] Call Trace: [ 657.618957][T14845] [ 657.618966][T14845] dump_stack_lvl+0x16c/0x1f0 [ 657.619000][T14845] should_fail_ex+0x512/0x640 [ 657.619027][T14845] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 657.619063][T14845] should_failslab+0xc2/0x120 [ 657.619099][T14845] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 657.619129][T14845] ? security_file_alloc+0x34/0x2b0 [ 657.619166][T14845] security_file_alloc+0x34/0x2b0 [ 657.619197][T14845] init_file+0x93/0x4c0 [ 657.619230][T14845] alloc_empty_file+0x73/0x1e0 [ 657.619266][T14845] alloc_file_pseudo+0x13a/0x230 [ 657.619303][T14845] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 657.619340][T14845] ? alloc_fd+0x471/0x7d0 [ 657.619370][T14845] sock_alloc_file+0x50/0x210 [ 657.619416][T14845] __sys_socket+0x1c0/0x260 [ 657.619452][T14845] ? __pfx___sys_socket+0x10/0x10 [ 657.619486][T14845] ? xfd_validate_state+0x61/0x180 [ 657.619530][T14845] __x64_sys_socket+0x72/0xb0 [ 657.619563][T14845] ? lockdep_hardirqs_on+0x7c/0x110 [ 657.619590][T14845] do_syscall_64+0xcd/0x4c0 [ 657.619620][T14845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.619648][T14845] RIP: 0033:0x7fdd5e98eec9 [ 657.619670][T14845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 657.619695][T14845] RSP: 002b:00007fdd5f76a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 657.619721][T14845] RAX: ffffffffffffffda RBX: 00007fdd5ebe5fa0 RCX: 00007fdd5e98eec9 [ 657.619740][T14845] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 657.619755][T14845] RBP: 00007fdd5ea11f91 R08: 0000000000000000 R09: 0000000000000000 [ 657.619771][T14845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 657.619787][T14845] R13: 00007fdd5ebe6038 R14: 00007fdd5ebe5fa0 R15: 00007fff61330288 [ 657.619822][T14845] [ 657.631338][T14843] FAULT_INJECTION: forcing a failure. [ 657.631338][T14843] name failslab, interval 1, probability 0, space 0, times 0 [ 657.778923][ C0] vkms_vblank_simulate: vblank timer overrun [ 657.888804][T14843] CPU: 1 UID: 0 PID: 14843 Comm: syz.5.1908 Not tainted syzkaller #0 PREEMPT(full) [ 657.888840][T14843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 657.888857][T14843] Call Trace: [ 657.888867][T14843] [ 657.888878][T14843] dump_stack_lvl+0x16c/0x1f0 [ 657.888915][T14843] should_fail_ex+0x512/0x640 [ 657.888944][T14843] ? fs_reclaim_acquire+0xae/0x150 [ 657.888986][T14843] should_failslab+0xc2/0x120 [ 657.889023][T14843] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 657.889056][T14843] ? security_inode_alloc+0x3b/0x2b0 [ 657.889093][T14843] security_inode_alloc+0x3b/0x2b0 [ 657.889126][T14843] inode_init_always_gfp+0xce4/0x1030 [ 657.889162][T14843] alloc_inode+0x86/0x240 [ 657.889198][T14843] sock_alloc+0x40/0x280 [ 657.889231][T14843] __sock_create+0xc1/0x8d0 [ 657.889272][T14843] __sys_socket+0x14d/0x260 [ 657.889309][T14843] ? __pfx___sys_socket+0x10/0x10 [ 657.889353][T14843] ? xfd_validate_state+0x61/0x180 [ 657.889389][T14843] ? __pfx___x64_sys_mount+0x10/0x10 [ 657.889428][T14843] __x64_sys_socket+0x72/0xb0 [ 657.889462][T14843] ? lockdep_hardirqs_on+0x7c/0x110 [ 657.889488][T14843] do_syscall_64+0xcd/0x4c0 [ 657.889518][T14843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.889552][T14843] RIP: 0033:0x7f911ad8eec9 [ 657.889574][T14843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 657.889599][T14843] RSP: 002b:00007f911bccd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 657.889624][T14843] RAX: ffffffffffffffda RBX: 00007f911afe5fa0 RCX: 00007f911ad8eec9 [ 657.889642][T14843] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 657.889658][T14843] RBP: 00007f911ae11f91 R08: 0000000000000000 R09: 0000000000000000 [ 657.889674][T14843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 657.889690][T14843] R13: 00007f911afe6038 R14: 00007f911afe5fa0 R15: 00007ffcbd4c58d8 [ 657.889726][T14843] [ 657.889761][T14843] socket: no more sockets [ 658.242362][T14852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1911'. [ 658.532831][T14859] vivid-003: ================= START STATUS ================= [ 658.545938][T14859] vivid-003: Radio HW Seek Mode: Bounded [ 658.572836][T14859] vivid-003: Radio Programmable HW Seek: false [ 658.722988][T14859] vivid-003: RDS Rx I/O Mode: Block I/O [ 658.752903][T14859] vivid-003: Generate RBDS Instead of RDS: false [ 658.782559][T14859] vivid-003: RDS Reception: true [ 658.825706][T14859] vivid-003: RDS Program Type: 0 inactive [ 658.832497][T14859] vivid-003: RDS PS Name: inactive [ 658.838318][T14859] vivid-003: RDS Radio Text: inactive [ 658.854742][T14863] FAULT_INJECTION: forcing a failure. [ 658.854742][T14863] name fail_futex, interval 1, probability 0, space 0, times 0 [ 658.895835][T14859] vivid-003: RDS Traffic Announcement: false inactive [ 658.910438][T14859] vivid-003: RDS Traffic Program: false inactive [ 658.920429][T14859] vivid-003: RDS Music: false inactive [ 658.926383][T14859] vivid-003: ================== END STATUS ================== [ 658.954320][T14863] CPU: 0 UID: 0 PID: 14863 Comm: syz.6.1912 Not tainted syzkaller #0 PREEMPT(full) [ 658.954353][T14863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 658.954365][T14863] Call Trace: [ 658.954371][T14863] [ 658.954378][T14863] dump_stack_lvl+0x16c/0x1f0 [ 658.954401][T14863] should_fail_ex+0x512/0x640 [ 658.954421][T14863] get_futex_key+0x1d0/0x1560 [ 658.954442][T14863] ? __pfx_get_futex_key+0x10/0x10 [ 658.954465][T14863] futex_wait_setup+0x9d/0x550 [ 658.954492][T14863] __futex_wait+0x194/0x2f0 [ 658.954514][T14863] ? __pfx___futex_wait+0x10/0x10 [ 658.954540][T14863] ? __pfx_futex_wake_mark+0x10/0x10 [ 658.954564][T14863] ? futex_private_hash_put+0x176/0x300 [ 658.954584][T14863] ? futex_private_hash_put+0x18a/0x300 [ 658.954602][T14863] futex_wait+0xe8/0x380 [ 658.954622][T14863] ? __pfx_futex_wait+0x10/0x10 [ 658.954647][T14863] ? __lock_acquire+0x62e/0x1ce0 [ 658.954671][T14863] do_futex+0x229/0x350 [ 658.954688][T14863] ? __pfx_do_futex+0x10/0x10 [ 658.954706][T14863] ? __fget_files+0x204/0x3c0 [ 658.954725][T14863] __x64_sys_futex+0x1e0/0x4c0 [ 658.954747][T14863] ? __pfx___x64_sys_futex+0x10/0x10 [ 658.954765][T14863] ? __sys_setsockopt+0x140/0x1a0 [ 658.954785][T14863] do_syscall_64+0xcd/0x4c0 [ 658.954803][T14863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.954819][T14863] RIP: 0033:0x7fdd5e98eec9 [ 658.954832][T14863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 658.954846][T14863] RSP: 002b:00007fdd5cbf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 658.954861][T14863] RAX: ffffffffffffffda RBX: 00007fdd5ebe6188 RCX: 00007fdd5e98eec9 [ 658.954871][T14863] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdd5ebe6188 [ 658.954880][T14863] RBP: 00007fdd5ebe6180 R08: 0000000000000000 R09: 0000000000000000 [ 658.954889][T14863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 658.954897][T14863] R13: 00007fdd5ebe6218 R14: 00007fff613301a0 R15: 00007fff61330288 [ 658.954916][T14863] [ 659.168683][ C0] vkms_vblank_simulate: vblank timer overrun [ 659.203230][T10831] Bluetooth: hci4: command 0x041b tx timeout [ 659.210330][T10831] Bluetooth: hci3: command 0x0c1a tx timeout [ 659.216500][T10831] Bluetooth: hci2: command 0x0c1a tx timeout [ 660.949770][T14897] FAULT_INJECTION: forcing a failure. [ 660.949770][T14897] name failslab, interval 1, probability 0, space 0, times 0 [ 661.025558][T14897] CPU: 1 UID: 0 PID: 14897 Comm: syz.4.1921 Not tainted syzkaller #0 PREEMPT(full) [ 661.025598][T14897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 661.025615][T14897] Call Trace: [ 661.025625][T14897] [ 661.025637][T14897] dump_stack_lvl+0x16c/0x1f0 [ 661.025673][T14897] should_fail_ex+0x512/0x640 [ 661.025703][T14897] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 661.025742][T14897] should_failslab+0xc2/0x120 [ 661.025778][T14897] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 661.025811][T14897] ? security_file_alloc+0x34/0x2b0 [ 661.025852][T14897] security_file_alloc+0x34/0x2b0 [ 661.025884][T14897] init_file+0x93/0x4c0 [ 661.025919][T14897] alloc_empty_file+0x73/0x1e0 [ 661.025958][T14897] alloc_file_pseudo+0x13a/0x230 [ 661.025993][T14897] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 661.026027][T14897] ? alloc_fd+0x471/0x7d0 [ 661.026058][T14897] sock_alloc_file+0x50/0x210 [ 661.026092][T14897] __sys_socket+0x1c0/0x260 [ 661.026131][T14897] ? __pfx___sys_socket+0x10/0x10 [ 661.026168][T14897] ? xfd_validate_state+0x61/0x180 [ 661.026214][T14897] __x64_sys_socket+0x72/0xb0 [ 661.026244][T14897] ? lockdep_hardirqs_on+0x7c/0x110 [ 661.026272][T14897] do_syscall_64+0xcd/0x4c0 [ 661.026305][T14897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.026331][T14897] RIP: 0033:0x7fbd6bd8eec9 [ 661.026355][T14897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 661.026390][T14897] RSP: 002b:00007fbd6cc39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 661.026415][T14897] RAX: ffffffffffffffda RBX: 00007fbd6bfe5fa0 RCX: 00007fbd6bd8eec9 [ 661.026435][T14897] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 661.026451][T14897] RBP: 00007fbd6be11f91 R08: 0000000000000000 R09: 0000000000000000 [ 661.026467][T14897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 661.026484][T14897] R13: 00007fbd6bfe6038 R14: 00007fbd6bfe5fa0 R15: 00007fff06203078 [ 661.026520][T14897] [ 661.029240][T14889] zswap: compressor not available [ 661.535810][T14902] openvswitch: netlink: Missing valid actions attribute. [ 661.598868][T14904] FAULT_INJECTION: forcing a failure. [ 661.598868][T14904] name failslab, interval 1, probability 0, space 0, times 0 [ 661.613813][T14904] CPU: 1 UID: 0 PID: 14904 Comm: syz.6.1924 Not tainted syzkaller #0 PREEMPT(full) [ 661.613850][T14904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 661.613867][T14904] Call Trace: [ 661.613877][T14904] [ 661.613888][T14904] dump_stack_lvl+0x16c/0x1f0 [ 661.613924][T14904] should_fail_ex+0x512/0x640 [ 661.613953][T14904] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 661.613989][T14904] should_failslab+0xc2/0x120 [ 661.614021][T14904] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 661.614055][T14904] ? vm_area_dup+0x27/0x8d0 [ 661.614088][T14904] vm_area_dup+0x27/0x8d0 [ 661.614118][T14904] __split_vma+0x18e/0x1070 [ 661.614162][T14904] ? __pfx___split_vma+0x10/0x10 [ 661.614191][T14904] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 661.614241][T14904] vms_gather_munmap_vmas+0x3b1/0x1340 [ 661.614278][T14904] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 661.614330][T14904] do_vmi_align_munmap+0x27c/0x7d0 [ 661.614364][T14904] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 661.614448][T14904] do_vmi_munmap+0x204/0x3e0 [ 661.614483][T14904] move_vma+0xb67/0x1780 [ 661.614518][T14904] ? __pfx_move_vma+0x10/0x10 [ 661.614554][T14904] ? mm_get_unmapped_area_vmflags+0x97/0xe0 [ 661.614602][T14904] ? vrm_set_new_addr+0x208/0x290 [ 661.614635][T14904] mremap_to+0x1b7/0x450 [ 661.614667][T14904] do_mremap+0x13b0/0x2030 [ 661.614698][T14904] ? futex_private_hash_put+0xe0/0x300 [ 661.614739][T14904] ? __pfx_do_mremap+0x10/0x10 [ 661.614776][T14904] ? do_writev+0x218/0x340 [ 661.614814][T14904] __do_sys_mremap+0x119/0x170 [ 661.614843][T14904] ? __pfx___do_sys_mremap+0x10/0x10 [ 661.614883][T14904] ? __x64_sys_futex+0x1e0/0x4c0 [ 661.614938][T14904] do_syscall_64+0xcd/0x4c0 [ 661.614969][T14904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.614992][T14904] RIP: 0033:0x7fdd5e98eec9 [ 661.615012][T14904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 661.615037][T14904] RSP: 002b:00007fdd5f76a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 661.615063][T14904] RAX: ffffffffffffffda RBX: 00007fdd5ebe5fa0 RCX: 00007fdd5e98eec9 [ 661.615081][T14904] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 661.615098][T14904] RBP: 00007fdd5ea11f91 R08: 0000000100000000 R09: 0000000000000000 [ 661.615115][T14904] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 661.615132][T14904] R13: 00007fdd5ebe6038 R14: 00007fdd5ebe5fa0 R15: 00007fff61330288 [ 661.615177][T14904] [ 662.541101][T14921] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 664.114612][T14921] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 664.123251][T14921] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 664.131094][T14921] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 664.154342][T14921] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 664.241846][T14929] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 664.672902][T14953] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 664.750606][T14955] FAULT_INJECTION: forcing a failure. [ 664.750606][T14955] name failslab, interval 1, probability 0, space 0, times 0 [ 664.793732][T10831] Bluetooth: hci1: command 0x0c1a tx timeout [ 664.814439][T14955] CPU: 1 UID: 0 PID: 14955 Comm: syz.5.1932 Not tainted syzkaller #0 PREEMPT(full) [ 664.814477][T14955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 664.814494][T14955] Call Trace: [ 664.814503][T14955] [ 664.814514][T14955] dump_stack_lvl+0x16c/0x1f0 [ 664.814548][T14955] should_fail_ex+0x512/0x640 [ 664.814578][T14955] ? fs_reclaim_acquire+0xae/0x150 [ 664.814619][T14955] should_failslab+0xc2/0x120 [ 664.814665][T14955] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 664.814699][T14955] ? security_inode_alloc+0x3b/0x2b0 [ 664.814736][T14955] security_inode_alloc+0x3b/0x2b0 [ 664.814768][T14955] inode_init_always_gfp+0xce4/0x1030 [ 664.814803][T14955] alloc_inode+0x86/0x240 [ 664.814837][T14955] sock_alloc+0x40/0x280 [ 664.814868][T14955] __sock_create+0xc1/0x8d0 [ 664.814910][T14955] __sys_socket+0x14d/0x260 [ 664.814947][T14955] ? __pfx___sys_socket+0x10/0x10 [ 664.814982][T14955] ? xfd_validate_state+0x61/0x180 [ 664.815027][T14955] __x64_sys_socket+0x72/0xb0 [ 664.815058][T14955] ? lockdep_hardirqs_on+0x7c/0x110 [ 664.815090][T14955] do_syscall_64+0xcd/0x4c0 [ 664.815120][T14955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.815146][T14955] RIP: 0033:0x7f911ad8eec9 [ 664.815167][T14955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 664.815193][T14955] RSP: 002b:00007f911bccd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 664.815218][T14955] RAX: ffffffffffffffda RBX: 00007f911afe5fa0 RCX: 00007f911ad8eec9 [ 664.815236][T14955] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 664.815252][T14955] RBP: 00007f911ae11f91 R08: 0000000000000000 R09: 0000000000000000 [ 664.815268][T14955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 664.815285][T14955] R13: 00007f911afe6038 R14: 00007f911afe5fa0 R15: 00007ffcbd4c58d8 [ 664.815321][T14955] [ 664.815355][T14955] socket: no more sockets [ 664.965531][ C1] vkms_vblank_simulate: vblank timer overrun [ 666.154103][T10831] Bluetooth: hci3: command 0x0c1a tx timeout [ 666.155079][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 666.233728][ T51] Bluetooth: hci4: command 0x041b tx timeout [ 666.975123][T14978] serio: Serial port pty6 [ 667.449986][T14971] FAULT_INJECTION: forcing a failure. [ 667.449986][T14971] name failslab, interval 1, probability 0, space 0, times 0 [ 667.618831][T14971] CPU: 1 UID: 0 PID: 14971 Comm: syz.4.1936 Not tainted syzkaller #0 PREEMPT(full) [ 667.618867][T14971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 667.618882][T14971] Call Trace: [ 667.618891][T14971] [ 667.618910][T14971] dump_stack_lvl+0x16c/0x1f0 [ 667.618944][T14971] should_fail_ex+0x512/0x640 [ 667.618971][T14971] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 667.619003][T14971] should_failslab+0xc2/0x120 [ 667.619034][T14971] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 667.619064][T14971] ? vm_area_dup+0x27/0x8d0 [ 667.619093][T14971] vm_area_dup+0x27/0x8d0 [ 667.619120][T14971] __split_vma+0x18e/0x1070 [ 667.619151][T14971] ? __pfx___split_vma+0x10/0x10 [ 667.619175][T14971] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 667.619220][T14971] vms_gather_munmap_vmas+0x3b1/0x1340 [ 667.619254][T14971] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 667.619302][T14971] do_vmi_align_munmap+0x27c/0x7d0 [ 667.619335][T14971] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 667.619413][T14971] do_vmi_munmap+0x204/0x3e0 [ 667.619444][T14971] move_vma+0xb67/0x1780 [ 667.619477][T14971] ? __pfx_move_vma+0x10/0x10 [ 667.619505][T14971] ? mm_get_unmapped_area_vmflags+0x97/0xe0 [ 667.619549][T14971] ? vrm_set_new_addr+0x208/0x290 [ 667.619574][T14971] mremap_to+0x1b7/0x450 [ 667.619602][T14971] do_mremap+0x13b0/0x2030 [ 667.619661][T14971] ? __pfx_do_mremap+0x10/0x10 [ 667.619697][T14971] ? do_writev+0x218/0x340 [ 667.619730][T14971] __do_sys_mremap+0x119/0x170 [ 667.619758][T14971] ? __pfx___do_sys_mremap+0x10/0x10 [ 667.619790][T14971] ? __pfx___schedule+0x10/0x10 [ 667.619816][T14971] ? __x64_sys_futex+0x1e0/0x4c0 [ 667.619869][T14971] do_syscall_64+0xcd/0x4c0 [ 667.619908][T14971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.619937][T14971] RIP: 0033:0x7fbd6bd8eec9 [ 667.619959][T14971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 667.619986][T14971] RSP: 002b:00007fbd6cc39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 667.620014][T14971] RAX: ffffffffffffffda RBX: 00007fbd6bfe5fa0 RCX: 00007fbd6bd8eec9 [ 667.620032][T14971] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 667.620049][T14971] RBP: 00007fbd6be11f91 R08: 0000000100000000 R09: 0000000000000000 [ 667.620065][T14971] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 667.620081][T14971] R13: 00007fbd6bfe6038 R14: 00007fbd6bfe5fa0 R15: 00007fff06203078 [ 667.620117][T14971] [ 667.883994][ C1] vkms_vblank_simulate: vblank timer overrun [ 668.656197][T14994] zswap: compressor not available [ 668.713099][T15007] serio: Serial port pty6 [ 669.184180][T14997] zswap: compressor c not available [ 669.717891][T15023] FAULT_INJECTION: forcing a failure. [ 669.717891][T15023] name failslab, interval 1, probability 0, space 0, times 0 [ 669.797275][T15023] CPU: 0 UID: 0 PID: 15023 Comm: syz.4.1944 Not tainted syzkaller #0 PREEMPT(full) [ 669.797299][T15023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 669.797308][T15023] Call Trace: [ 669.797314][T15023] [ 669.797321][T15023] dump_stack_lvl+0x16c/0x1f0 [ 669.797342][T15023] should_fail_ex+0x512/0x640 [ 669.797360][T15023] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 669.797381][T15023] should_failslab+0xc2/0x120 [ 669.797401][T15023] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 669.797419][T15023] ? sock_alloc_inode+0x25/0x1c0 [ 669.797440][T15023] ? __pfx_sock_alloc_inode+0x10/0x10 [ 669.797457][T15023] sock_alloc_inode+0x25/0x1c0 [ 669.797475][T15023] alloc_inode+0x61/0x240 [ 669.797497][T15023] sock_alloc+0x40/0x280 [ 669.797514][T15023] __sock_create+0xc1/0x8d0 [ 669.797537][T15023] __sys_socket+0x14d/0x260 [ 669.797560][T15023] ? __pfx___sys_socket+0x10/0x10 [ 669.797580][T15023] ? xfd_validate_state+0x61/0x180 [ 669.797613][T15023] __x64_sys_socket+0x72/0xb0 [ 669.797636][T15023] ? lockdep_hardirqs_on+0x7c/0x110 [ 669.797652][T15023] do_syscall_64+0xcd/0x4c0 [ 669.797668][T15023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.797683][T15023] RIP: 0033:0x7fbd6bd8eec9 [ 669.797696][T15023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 669.797710][T15023] RSP: 002b:00007fbd6cc39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 669.797724][T15023] RAX: ffffffffffffffda RBX: 00007fbd6bfe5fa0 RCX: 00007fbd6bd8eec9 [ 669.797734][T15023] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 669.797742][T15023] RBP: 00007fbd6be11f91 R08: 0000000000000000 R09: 0000000000000000 [ 669.797751][T15023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 669.797760][T15023] R13: 00007fbd6bfe6038 R14: 00007fbd6bfe5fa0 R15: 00007fff06203078 [ 669.797778][T15023] [ 669.797794][T15023] socket: no more sockets [ 670.635799][T15030] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 670.696747][T15032] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 671.288264][T15032] netlink: 186 bytes leftover after parsing attributes in process `syz.6.1946'. [ 671.894085][T15051] netlink: 334 bytes leftover after parsing attributes in process `syz.6.1949'. [ 672.873794][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 672.887522][T15057] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 672.897548][T15030] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 673.357697][T15057] FAULT_INJECTION: forcing a failure. [ 673.357697][T15057] name failslab, interval 1, probability 0, space 0, times 0 [ 673.383842][T15057] CPU: 1 UID: 0 PID: 15057 Comm: syz.6.1951 Not tainted syzkaller #0 PREEMPT(full) [ 673.383879][T15057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 673.383895][T15057] Call Trace: [ 673.383905][T15057] [ 673.383915][T15057] dump_stack_lvl+0x16c/0x1f0 [ 673.383949][T15057] should_fail_ex+0x512/0x640 [ 673.383977][T15057] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 673.384007][T15057] should_failslab+0xc2/0x120 [ 673.384041][T15057] __kmalloc_cache_noprof+0x6a/0x3e0 [ 673.384069][T15057] ? sctp_auth_init+0x30d/0x570 [ 673.384102][T15057] sctp_auth_init+0x30d/0x570 [ 673.384133][T15057] sctp_setsockopt+0xa371/0xb870 [ 673.384173][T15057] ? __pfx_sctp_setsockopt+0x10/0x10 [ 673.384205][T15057] ? find_held_lock+0x2b/0x80 [ 673.384233][T15057] ? aa_sock_opt_perm+0xfd/0x1c0 [ 673.384255][T15057] ? sock_common_setsockopt+0x2e/0xf0 [ 673.384275][T15057] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 673.384305][T15057] do_sock_setsockopt+0xf0/0x1d0 [ 673.384329][T15057] __sys_setsockopt+0x120/0x1a0 [ 673.384350][T15057] __x64_sys_setsockopt+0xbd/0x160 [ 673.384371][T15057] ? do_syscall_64+0x91/0x4c0 [ 673.384396][T15057] ? lockdep_hardirqs_on+0x7c/0x110 [ 673.384419][T15057] do_syscall_64+0xcd/0x4c0 [ 673.384448][T15057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.384474][T15057] RIP: 0033:0x7fdd5e98eec9 [ 673.384496][T15057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 673.384520][T15057] RSP: 002b:00007fdd5f76a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 673.384545][T15057] RAX: ffffffffffffffda RBX: 00007fdd5ebe5fa0 RCX: 00007fdd5e98eec9 [ 673.384562][T15057] RDX: 0000000000000081 RSI: 0000010000000084 RDI: 0000000000000003 [ 673.384578][T15057] RBP: 00007fdd5ea11f91 R08: 0000000000000008 R09: 0000000000000000 [ 673.384593][T15057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 673.384608][T15057] R13: 00007fdd5ebe6038 R14: 00007fdd5ebe5fa0 R15: 00007fff61330288 [ 673.384644][T15057] [ 673.595399][ C1] vkms_vblank_simulate: vblank timer overrun [ 674.069466][T15030] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 674.076816][T15030] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 674.083565][T15030] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 674.102314][T15037] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 674.824783][T15071] FAULT_INJECTION: forcing a failure. [ 674.824783][T15071] name failslab, interval 1, probability 0, space 0, times 0 [ 674.965193][T15071] CPU: 1 UID: 0 PID: 15071 Comm: syz.4.1954 Not tainted syzkaller #0 PREEMPT(full) [ 674.965238][T15071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 674.965255][T15071] Call Trace: [ 674.965264][T15071] [ 674.965275][T15071] dump_stack_lvl+0x16c/0x1f0 [ 674.965310][T15071] should_fail_ex+0x512/0x640 [ 674.965340][T15071] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 674.965378][T15071] should_failslab+0xc2/0x120 [ 674.965419][T15071] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 674.965453][T15071] ? sock_alloc_inode+0x25/0x1c0 [ 674.965491][T15071] ? __pfx_sock_alloc_inode+0x10/0x10 [ 674.965522][T15071] sock_alloc_inode+0x25/0x1c0 [ 674.965555][T15071] alloc_inode+0x61/0x240 [ 674.965593][T15071] sock_alloc+0x40/0x280 [ 674.965624][T15071] __sock_create+0xc1/0x8d0 [ 674.965668][T15071] __sys_socket+0x14d/0x260 [ 674.965706][T15071] ? __pfx___sys_socket+0x10/0x10 [ 674.965742][T15071] ? xfd_validate_state+0x61/0x180 [ 674.965788][T15071] __x64_sys_socket+0x72/0xb0 [ 674.965823][T15071] ? lockdep_hardirqs_on+0x7c/0x110 [ 674.965850][T15071] do_syscall_64+0xcd/0x4c0 [ 674.965879][T15071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.965904][T15071] RIP: 0033:0x7fbd6bd8eec9 [ 674.965925][T15071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 674.965950][T15071] RSP: 002b:00007fbd6cc39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 674.965976][T15071] RAX: ffffffffffffffda RBX: 00007fbd6bfe5fa0 RCX: 00007fbd6bd8eec9 [ 674.965992][T15071] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 674.966006][T15071] RBP: 00007fbd6be11f91 R08: 0000000000000000 R09: 0000000000000000 [ 674.966021][T15071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 674.966036][T15071] R13: 00007fbd6bfe6038 R14: 00007fbd6bfe5fa0 R15: 00007fff06203078 [ 674.966069][T15071] [ 675.004590][T15071] socket: no more sockets [ 675.183839][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 675.433345][T15080] netlink: 334 bytes leftover after parsing attributes in process `syz.6.1955'. [ 676.154975][ T51] Bluetooth: hci4: command 0x041b tx timeout [ 676.156057][T10831] Bluetooth: hci3: command 0x0c1a tx timeout [ 676.390551][T15082] nbd: failed to add new device [ 676.913103][T15101] serio: Serial port pty6 [ 677.781598][T15105] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1960'. [ 678.534806][T15116] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1963'. [ 678.830636][T15120] FAULT_INJECTION: forcing a failure. [ 678.830636][T15120] name failslab, interval 1, probability 0, space 0, times 0 [ 679.033687][T15120] CPU: 1 UID: 0 PID: 15120 Comm: syz.4.1964 Not tainted syzkaller #0 PREEMPT(full) [ 679.033724][T15120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 679.033738][T15120] Call Trace: [ 679.033746][T15120] [ 679.033757][T15120] dump_stack_lvl+0x16c/0x1f0 [ 679.033792][T15120] should_fail_ex+0x512/0x640 [ 679.033821][T15120] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 679.033856][T15120] should_failslab+0xc2/0x120 [ 679.033890][T15120] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 679.033921][T15120] ? vm_area_dup+0x27/0x8d0 [ 679.033951][T15120] vm_area_dup+0x27/0x8d0 [ 679.033977][T15120] __split_vma+0x18e/0x1070 [ 679.034005][T15120] ? __pfx___split_vma+0x10/0x10 [ 679.034030][T15120] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 679.034078][T15120] vms_gather_munmap_vmas+0x3b1/0x1340 [ 679.034111][T15120] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 679.034166][T15120] do_vmi_align_munmap+0x27c/0x7d0 [ 679.034203][T15120] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 679.034284][T15120] do_vmi_munmap+0x204/0x3e0 [ 679.034319][T15120] move_vma+0xb67/0x1780 [ 679.034355][T15120] ? __pfx_move_vma+0x10/0x10 [ 679.034390][T15120] ? mm_get_unmapped_area_vmflags+0x97/0xe0 [ 679.034438][T15120] ? vrm_set_new_addr+0x208/0x290 [ 679.034467][T15120] mremap_to+0x1b7/0x450 [ 679.034494][T15120] do_mremap+0x13b0/0x2030 [ 679.034523][T15120] ? futex_private_hash_put+0xe0/0x300 [ 679.034565][T15120] ? __pfx_do_mremap+0x10/0x10 [ 679.034601][T15120] ? do_writev+0x218/0x340 [ 679.034640][T15120] __do_sys_mremap+0x119/0x170 [ 679.034670][T15120] ? __pfx___do_sys_mremap+0x10/0x10 [ 679.034711][T15120] ? __x64_sys_futex+0x1e0/0x4c0 [ 679.034766][T15120] do_syscall_64+0xcd/0x4c0 [ 679.034798][T15120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.034825][T15120] RIP: 0033:0x7fbd6bd8eec9 [ 679.034846][T15120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 679.034871][T15120] RSP: 002b:00007fbd6cc39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 679.034897][T15120] RAX: ffffffffffffffda RBX: 00007fbd6bfe5fa0 RCX: 00007fbd6bd8eec9 [ 679.034914][T15120] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 679.034931][T15120] RBP: 00007fbd6be11f91 R08: 0000000100000000 R09: 0000000000000000 [ 679.034947][T15120] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 679.034963][T15120] R13: 00007fbd6bfe6038 R14: 00007fbd6bfe5fa0 R15: 00007fff06203078 [ 679.034999][T15120] [ 680.748301][T15134] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1967'. [ 680.883752][T15134] veth0_vlan: entered allmulticast mode [ 681.229687][T15141] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 681.328732][T15143] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 682.074013][T15141] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 682.146394][T15141] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 682.152578][T15141] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 682.304909][T15141] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 682.396378][T15148] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 682.431977][T15143] nbd: socks must be embedded in a SOCK_ITEM attr [ 682.946119][T15167] FAULT_INJECTION: forcing a failure. [ 682.946119][T15167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 682.960896][T15167] CPU: 1 UID: 0 PID: 15167 Comm: syz.5.1971 Not tainted syzkaller #0 PREEMPT(full) [ 682.960929][T15167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 682.960943][T15167] Call Trace: [ 682.960952][T15167] [ 682.960962][T15167] dump_stack_lvl+0x16c/0x1f0 [ 682.960994][T15167] should_fail_ex+0x512/0x640 [ 682.961028][T15167] _copy_from_user+0x2e/0xd0 [ 682.961058][T15167] snd_seq_oss_write+0x397/0x7d0 [ 682.961101][T15167] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 682.961139][T15167] ? common_file_perm+0x1a9/0x340 [ 682.961173][T15167] ? bpf_lsm_file_permission+0x9/0x10 [ 682.961211][T15167] ? __pfx_odev_write+0x10/0x10 [ 682.961238][T15167] odev_write+0x51/0xa0 [ 682.961267][T15167] vfs_write+0x29d/0x11d0 [ 682.961304][T15167] ? __pfx_vfs_write+0x10/0x10 [ 682.961329][T15167] ? find_held_lock+0x2b/0x80 [ 682.961356][T15167] ? __fget_files+0x204/0x3c0 [ 682.961388][T15167] ? __fget_files+0x20e/0x3c0 [ 682.961424][T15167] ksys_write+0x12a/0x250 [ 682.961451][T15167] ? __pfx_ksys_write+0x10/0x10 [ 682.961499][T15167] do_syscall_64+0xcd/0x4c0 [ 682.961529][T15167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.961560][T15167] RIP: 0033:0x7f911ad8eec9 [ 682.961580][T15167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 682.961603][T15167] RSP: 002b:00007f911bcac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 682.961627][T15167] RAX: ffffffffffffffda RBX: 00007f911afe6090 RCX: 00007f911ad8eec9 [ 682.961644][T15167] RDX: 0000000000000180 RSI: 0000200000000c80 RDI: 0000000000000003 [ 682.961659][T15167] RBP: 00007f911bcac090 R08: 0000000000000000 R09: 0000000000000000 [ 682.961675][T15167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 682.961690][T15167] R13: 00007f911afe6128 R14: 00007f911afe6090 R15: 00007ffcbd4c58d8 [ 682.961725][T15167] [ 683.445242][T15168] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 683.684698][T10831] Bluetooth: hci1: command 0x0c1a tx timeout [ 684.233855][T10831] Bluetooth: hci3: command 0x0c1a tx timeout [ 684.240363][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 684.275261][T15177] FAULT_INJECTION: forcing a failure. [ 684.275261][T15177] name failslab, interval 1, probability 0, space 0, times 0 [ 684.333654][ T51] Bluetooth: hci4: command 0x041b tx timeout [ 684.373839][T15177] CPU: 1 UID: 0 PID: 15177 Comm: syz.5.1974 Not tainted syzkaller #0 PREEMPT(full) [ 684.373863][T15177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 684.373872][T15177] Call Trace: [ 684.373879][T15177] [ 684.373885][T15177] dump_stack_lvl+0x16c/0x1f0 [ 684.373907][T15177] should_fail_ex+0x512/0x640 [ 684.373925][T15177] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 684.373946][T15177] should_failslab+0xc2/0x120 [ 684.373967][T15177] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 684.373985][T15177] ? vm_area_dup+0x27/0x8d0 [ 684.374003][T15177] vm_area_dup+0x27/0x8d0 [ 684.374019][T15177] __split_vma+0x18e/0x1070 [ 684.374038][T15177] ? __pfx___split_vma+0x10/0x10 [ 684.374053][T15177] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 684.374079][T15177] vms_gather_munmap_vmas+0x3b1/0x1340 [ 684.374099][T15177] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 684.374127][T15177] do_vmi_align_munmap+0x27c/0x7d0 [ 684.374147][T15177] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 684.374190][T15177] do_vmi_munmap+0x204/0x3e0 [ 684.374208][T15177] move_vma+0xb67/0x1780 [ 684.374229][T15177] ? __pfx_move_vma+0x10/0x10 [ 684.374248][T15177] ? mm_get_unmapped_area_vmflags+0x97/0xe0 [ 684.374275][T15177] ? vrm_set_new_addr+0x208/0x290 [ 684.374293][T15177] mremap_to+0x1b7/0x450 [ 684.374310][T15177] do_mremap+0x13b0/0x2030 [ 684.374328][T15177] ? futex_private_hash_put+0xe0/0x300 [ 684.374351][T15177] ? __pfx_do_mremap+0x10/0x10 [ 684.374371][T15177] ? do_writev+0x218/0x340 [ 684.374392][T15177] __do_sys_mremap+0x119/0x170 [ 684.374408][T15177] ? __pfx___do_sys_mremap+0x10/0x10 [ 684.374430][T15177] ? __x64_sys_futex+0x1e0/0x4c0 [ 684.374459][T15177] do_syscall_64+0xcd/0x4c0 [ 684.374476][T15177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.374492][T15177] RIP: 0033:0x7f911ad8eec9 [ 684.374505][T15177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 684.374518][T15177] RSP: 002b:00007f911bccd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 684.374533][T15177] RAX: ffffffffffffffda RBX: 00007f911afe5fa0 RCX: 00007f911ad8eec9 [ 684.374542][T15177] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 684.374551][T15177] RBP: 00007f911ae11f91 R08: 0000000100000000 R09: 0000000000000000 [ 684.374560][T15177] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 684.374568][T15177] R13: 00007f911afe6038 R14: 00007f911afe5fa0 R15: 00007ffcbd4c58d8 [ 684.374588][T15177] syzkaller syzkaller login: [ 685.776357][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.794511][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.213380][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 686.483181][T15168] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 686.765396][T15168] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 686.772278][T15168] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 687.005392][T15168] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 687.023252][T15173] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 687.502063][T15224] openvswitch: HfR: Dropping previously announced user features [ 687.528306][T15224] FAULT_INJECTION: forcing a failure. [ 687.528306][T15224] name fail_futex, interval 1, probability 0, space 0, times 0 [ 687.541314][T15224] CPU: 0 UID: 0 PID: 15224 Comm: syz.6.1983 Not tainted syzkaller #0 PREEMPT(full) [ 687.541350][T15224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 687.541364][T15224] Call Trace: [ 687.541372][T15224] [ 687.541382][T15224] dump_stack_lvl+0x16c/0x1f0 [ 687.541415][T15224] should_fail_ex+0x512/0x640 [ 687.541449][T15224] get_futex_key+0x1d0/0x1560 [ 687.541486][T15224] ? __pfx_get_futex_key+0x10/0x10 [ 687.541519][T15224] ? __pfx____sys_sendmsg+0x10/0x10 [ 687.541559][T15224] futex_wake+0xea/0x530 [ 687.541601][T15224] ? __pfx_futex_wake+0x10/0x10 [ 687.541655][T15224] do_futex+0x1e3/0x350 [ 687.541683][T15224] ? __pfx_do_futex+0x10/0x10 [ 687.541713][T15224] ? fput+0x9b/0xd0 [ 687.541744][T15224] ? __sys_sendmsg+0x18c/0x220 [ 687.541772][T15224] __x64_sys_futex+0x1e0/0x4c0 [ 687.541806][T15224] ? __pfx___x64_sys_futex+0x10/0x10 [ 687.541836][T15224] ? xfd_validate_state+0x61/0x180 [ 687.541882][T15224] do_syscall_64+0xcd/0x4c0 [ 687.541914][T15224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.541939][T15224] RIP: 0033:0x7fdd5e98eec9 [ 687.541960][T15224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 687.541981][T15224] RSP: 002b:00007fdd5c7d30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 687.542005][T15224] RAX: ffffffffffffffda RBX: 00007fdd5ebe6278 RCX: 00007fdd5e98eec9 [ 687.542022][T15224] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fdd5ebe627c [ 687.542037][T15224] RBP: 00007fdd5ebe6270 R08: 00007fdd5f76b000 R09: 0000000000000000 [ 687.542053][T15224] R10: 0000000000000034 R11: 0000000000000246 R12: 0000000000000000 [ 687.542069][T15224] R13: 00007fdd5ebe6308 R14: 00007fff613301a0 R15: 00007fff61330288 [ 687.542104][T15224] [ 688.713843][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 688.793850][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 689.034659][ T51] Bluetooth: hci4: command 0x041b tx timeout [ 689.581457][T15243] FAULT_INJECTION: forcing a failure. [ 689.581457][T15243] name failslab, interval 1, probability 0, space 0, times 0 [ 689.637717][T15246] netlink: 'syz.6.1989': attribute type 1 has an invalid length. [ 689.646431][T15246] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 689.688445][T15242] serio: Serial port pty6 [ 689.709065][T15243] CPU: 0 UID: 0 PID: 15243 Comm: syz.4.1985 Not tainted syzkaller #0 PREEMPT(full) [ 689.709099][T15243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 689.709114][T15243] Call Trace: [ 689.709123][T15243] [ 689.709134][T15243] dump_stack_lvl+0x16c/0x1f0 [ 689.709170][T15243] should_fail_ex+0x512/0x640 [ 689.709203][T15243] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 689.709238][T15243] should_failslab+0xc2/0x120 [ 689.709271][T15243] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 689.709302][T15243] ? vm_area_dup+0x27/0x8d0 [ 689.709335][T15243] vm_area_dup+0x27/0x8d0 [ 689.709363][T15243] __split_vma+0x18e/0x1070 [ 689.709406][T15243] ? __pfx___split_vma+0x10/0x10 [ 689.709435][T15243] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 689.709481][T15243] vms_gather_munmap_vmas+0x3b1/0x1340 [ 689.709517][T15243] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 689.709565][T15243] do_vmi_align_munmap+0x27c/0x7d0 [ 689.709598][T15243] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 689.709672][T15243] do_vmi_munmap+0x204/0x3e0 [ 689.709706][T15243] move_vma+0xb67/0x1780 [ 689.709742][T15243] ? __pfx_move_vma+0x10/0x10 [ 689.709775][T15243] ? mm_get_unmapped_area_vmflags+0x97/0xe0 [ 689.709823][T15243] ? vrm_set_new_addr+0x208/0x290 [ 689.709856][T15243] mremap_to+0x1b7/0x450 [ 689.709888][T15243] do_mremap+0x13b0/0x2030 [ 689.709919][T15243] ? futex_private_hash_put+0xe0/0x300 [ 689.709957][T15243] ? __pfx_do_mremap+0x10/0x10 [ 689.709994][T15243] ? do_writev+0x218/0x340 [ 689.710032][T15243] __do_sys_mremap+0x119/0x170 [ 689.710063][T15243] ? __pfx___do_sys_mremap+0x10/0x10 [ 689.710103][T15243] ? __x64_sys_futex+0x1e0/0x4c0 [ 689.710156][T15243] do_syscall_64+0xcd/0x4c0 [ 689.710186][T15243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.710213][T15243] RIP: 0033:0x7fbd6bd8eec9 [ 689.710235][T15243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 689.710259][T15243] RSP: 002b:00007fbd6cc39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 689.710285][T15243] RAX: ffffffffffffffda RBX: 00007fbd6bfe5fa0 RCX: 00007fbd6bd8eec9 [ 689.710303][T15243] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 689.710319][T15243] RBP: 00007fbd6be11f91 R08: 0000000100000000 R09: 0000000000000000 [ 689.710336][T15243] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 689.710359][T15243] R13: 00007fbd6bfe6038 R14: 00007fbd6bfe5fa0 R15: 00007fff06203078 [ 689.710403][T15243] [ 689.958371][ C0] vkms_vblank_simulate: vblank timer overrun [ 690.285393][T15251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1990'. [ 691.668580][T15276] netlink: 'syz.5.1996': attribute type 5 has an invalid length. [ 694.277414][T15306] FAULT_INJECTION: forcing a failure. [ 694.277414][T15306] name failslab, interval 1, probability 0, space 0, times 0 [ 694.361736][T15306] CPU: 1 UID: 0 PID: 15306 Comm: syz.6.2002 Not tainted syzkaller #0 PREEMPT(full) [ 694.361775][T15306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 694.361796][T15306] Call Trace: [ 694.361806][T15306] [ 694.361815][T15306] dump_stack_lvl+0x16c/0x1f0 [ 694.361847][T15306] should_fail_ex+0x512/0x640 [ 694.361874][T15306] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 694.361906][T15306] should_failslab+0xc2/0x120 [ 694.361936][T15306] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 694.361965][T15306] ? security_file_alloc+0x34/0x2b0 [ 694.362011][T15306] security_file_alloc+0x34/0x2b0 [ 694.362045][T15306] init_file+0x93/0x4c0 [ 694.362077][T15306] alloc_empty_file+0x73/0x1e0 [ 694.362114][T15306] alloc_file_pseudo+0x13a/0x230 [ 694.362152][T15306] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 694.362185][T15306] ? alloc_fd+0x471/0x7d0 [ 694.362214][T15306] sock_alloc_file+0x50/0x210 [ 694.362251][T15306] __sys_socket+0x1c0/0x260 [ 694.362286][T15306] ? __pfx___sys_socket+0x10/0x10 [ 694.362320][T15306] ? xfd_validate_state+0x61/0x180 [ 694.362363][T15306] __x64_sys_socket+0x72/0xb0 [ 694.362393][T15306] ? lockdep_hardirqs_on+0x7c/0x110 [ 694.362416][T15306] do_syscall_64+0xcd/0x4c0 [ 694.362439][T15306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.362461][T15306] RIP: 0033:0x7fdd5e98eec9 [ 694.362480][T15306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 694.362500][T15306] RSP: 002b:00007fdd5f76a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 694.362520][T15306] RAX: ffffffffffffffda RBX: 00007fdd5ebe5fa0 RCX: 00007fdd5e98eec9 [ 694.362534][T15306] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 694.362546][T15306] RBP: 00007fdd5ea11f91 R08: 0000000000000000 R09: 0000000000000000 [ 694.362560][T15306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 694.362573][T15306] R13: 00007fdd5ebe6038 R14: 00007fdd5ebe5fa0 R15: 00007fff61330288 [ 694.362602][T15306] [ 694.970405][T15310] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 696.179610][T15331] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 696.419848][T15310] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 696.483965][T15310] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 696.490486][T15310] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 696.496800][T15310] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 696.503409][T15320] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 696.543405][T15340] FAULT_INJECTION: forcing a failure. [ 696.543405][T15340] name failslab, interval 1, probability 0, space 0, times 0 [ 696.584931][T15340] CPU: 0 UID: 0 PID: 15340 Comm: syz.4.2009 Not tainted syzkaller #0 PREEMPT(full) [ 696.584965][T15340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 696.584980][T15340] Call Trace: [ 696.584988][T15340] [ 696.584999][T15340] dump_stack_lvl+0x16c/0x1f0 [ 696.585034][T15340] should_fail_ex+0x512/0x640 [ 696.585060][T15340] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 696.585095][T15340] should_failslab+0xc2/0x120 [ 696.585127][T15340] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 696.585158][T15340] ? mas_alloc_nodes+0x18b/0x8b0 [ 696.585187][T15340] mas_alloc_nodes+0x18b/0x8b0 [ 696.585220][T15340] mas_node_count_gfp+0x105/0x130 [ 696.585248][T15340] mas_preallocate+0x7e0/0xde0 [ 696.585276][T15340] ? __memcg_slab_post_alloc_hook+0x492/0x960 [ 696.585313][T15340] ? __pfx_mas_preallocate+0x10/0x10 [ 696.585352][T15340] ? anon_vma_name+0x81/0x2f0 [ 696.585392][T15340] __split_vma+0x34a/0x1070 [ 696.585426][T15340] ? __pfx___split_vma+0x10/0x10 [ 696.585454][T15340] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 696.585499][T15340] vms_gather_munmap_vmas+0x3b1/0x1340 [ 696.585533][T15340] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 696.585597][T15340] do_vmi_align_munmap+0x27c/0x7d0 [ 696.585631][T15340] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 696.585717][T15340] do_vmi_munmap+0x204/0x3e0 [ 696.585754][T15340] move_vma+0xb67/0x1780 [ 696.585791][T15340] ? __pfx_move_vma+0x10/0x10 [ 696.585826][T15340] ? mm_get_unmapped_area_vmflags+0x97/0xe0 [ 696.585871][T15340] ? vrm_set_new_addr+0x208/0x290 [ 696.585902][T15340] mremap_to+0x1b7/0x450 [ 696.585934][T15340] do_mremap+0x13b0/0x2030 [ 696.585965][T15340] ? futex_private_hash_put+0xe0/0x300 [ 696.586005][T15340] ? __pfx_do_mremap+0x10/0x10 [ 696.586030][T15340] ? __pfx_futex_wake+0x10/0x10 [ 696.586072][T15340] ? do_writev+0x218/0x340 [ 696.586111][T15340] __do_sys_mremap+0x119/0x170 [ 696.586139][T15340] ? __pfx___do_sys_mremap+0x10/0x10 [ 696.586179][T15340] ? __x64_sys_futex+0x1e0/0x4c0 [ 696.586233][T15340] do_syscall_64+0xcd/0x4c0 [ 696.586265][T15340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.586292][T15340] RIP: 0033:0x7fbd6bd8eec9 [ 696.586317][T15340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 696.586341][T15340] RSP: 002b:00007fbd6cc39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 696.586370][T15340] RAX: ffffffffffffffda RBX: 00007fbd6bfe5fa0 RCX: 00007fbd6bd8eec9 [ 696.586387][T15340] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 696.586403][T15340] RBP: 00007fbd6be11f91 R08: 0000000100000000 R09: 0000000000000000 [ 696.586417][T15340] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 696.586431][T15340] R13: 00007fbd6bfe6038 R14: 00007fbd6bfe5fa0 R15: 00007fff06203078 [ 696.586461][T15340] [ 696.867678][ C0] vkms_vblank_simulate: vblank timer overrun [ 697.031934][T15345] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 697.348765][T15353] MTRR 1 not used [ 698.273896][T15349] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 698.286689][T15349] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 698.296565][T15349] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 698.345729][T15349] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 698.385399][T15359] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 698.519349][T15381] FAULT_INJECTION: forcing a failure. [ 698.519349][T15381] name fail_futex, interval 1, probability 0, space 0, times 0 [ 698.542774][T15381] CPU: 0 UID: 0 PID: 15381 Comm: syz.4.2017 Not tainted syzkaller #0 PREEMPT(full) [ 698.542795][T15381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 698.542805][T15381] Call Trace: [ 698.542810][T15381] [ 698.542815][T15381] dump_stack_lvl+0x16c/0x1f0 [ 698.542836][T15381] should_fail_ex+0x512/0x640 [ 698.542856][T15381] get_futex_key+0x1d0/0x1560 [ 698.542877][T15381] ? __pfx_get_futex_key+0x10/0x10 [ 698.542900][T15381] futex_wake+0xea/0x530 [ 698.542920][T15381] ? kasan_quarantine_put+0x10a/0x240 [ 698.542939][T15381] ? __pfx_futex_wake+0x10/0x10 [ 698.542965][T15381] ? kfree_skbmem+0x1a4/0x1f0 [ 698.542987][T15381] do_futex+0x1e3/0x350 [ 698.543006][T15381] ? __pfx_do_futex+0x10/0x10 [ 698.543024][T15381] ? __pfx_do_mq_notify+0x10/0x10 [ 698.543044][T15381] __x64_sys_futex+0x1e0/0x4c0 [ 698.543065][T15381] ? __pfx___x64_sys_futex+0x10/0x10 [ 698.543091][T15381] do_syscall_64+0xcd/0x4c0 [ 698.543108][T15381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.543124][T15381] RIP: 0033:0x7fbd6bd8eec9 [ 698.543136][T15381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 698.543150][T15381] RSP: 002b:00007fbd6cc390e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 698.543165][T15381] RAX: ffffffffffffffda RBX: 00007fbd6bfe5fa8 RCX: 00007fbd6bd8eec9 [ 698.543175][T15381] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbd6bfe5fac [ 698.543184][T15381] RBP: 00007fbd6bfe5fa0 R08: 00007fbd6cc3a000 R09: 0000000000000000 [ 698.543193][T15381] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 698.543202][T15381] R13: 00007fbd6bfe6038 R14: 00007fff06202f90 R15: 00007fff06203078 [ 698.543220][T15381] [ 698.925886][T15383] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input47 [ 699.278638][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 699.301302][T15392] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 700.325596][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 700.325616][T10831] Bluetooth: hci2: command 0x0c1a tx timeout [ 700.398776][ T51] Bluetooth: hci4: command 0x041b tx timeout syzkaller syzkaller login: [ 703.060125][T15447] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 703.236771][T15450] FAULT_INJECTION: forcing a failure. [ 703.236771][T15450] name failslab, interval 1, probability 0, space 0, times 0 [ 703.249569][T15450] CPU: 1 UID: 0 PID: 15450 Comm: syz.6.2034 Not tainted syzkaller #0 PREEMPT(full) [ 703.249590][T15450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 703.249600][T15450] Call Trace: [ 703.249606][T15450] [ 703.249613][T15450] dump_stack_lvl+0x16c/0x1f0 [ 703.249635][T15450] should_fail_ex+0x512/0x640 [ 703.249664][T15450] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 703.249699][T15450] should_failslab+0xc2/0x120 [ 703.249732][T15450] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 703.249758][T15450] ? __pfx_do_futex+0x10/0x10 [ 703.249786][T15450] ? copy_fs_struct+0x49/0x340 [ 703.249818][T15450] copy_fs_struct+0x49/0x340 [ 703.249841][T15450] ksys_unshare+0x356/0xa40 [ 703.249860][T15450] ? __pfx_ksys_unshare+0x10/0x10 [ 703.249879][T15450] ? xfd_validate_state+0x61/0x180 [ 703.249906][T15450] __x64_sys_unshare+0x31/0x40 [ 703.249924][T15450] do_syscall_64+0xcd/0x4c0 [ 703.249942][T15450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.249957][T15450] RIP: 0033:0x7fdd5e98eec9 [ 703.249969][T15450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 703.249982][T15450] RSP: 002b:00007fdd5f76a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 703.249997][T15450] RAX: ffffffffffffffda RBX: 00007fdd5ebe5fa0 RCX: 00007fdd5e98eec9 [ 703.250007][T15450] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 703.250015][T15450] RBP: 00007fdd5ea11f91 R08: 0000000000000000 R09: 0000000000000000 [ 703.250024][T15450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 703.250033][T15450] R13: 00007fdd5ebe6038 R14: 00007fdd5ebe5fa0 R15: 00007fff61330288 [ 703.250051][T15450] syzkaller syzkaller login: [ 704.611366][T15447] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 704.617573][T15447] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 704.623865][T15447] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 704.630518][T15447] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 704.714373][T15461] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 705.144101][T15474] serio: Serial port pty6 [ 705.246257][T15484] FAULT_INJECTION: forcing a failure. [ 705.246257][T15484] name failslab, interval 1, probability 0, space 0, times 0 [ 705.358385][T15484] CPU: 0 UID: 0 PID: 15484 Comm: syz.5.2041 Not tainted syzkaller #0 PREEMPT(full) [ 705.358406][T15484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 705.358416][T15484] Call Trace: [ 705.358421][T15484] [ 705.358427][T15484] dump_stack_lvl+0x16c/0x1f0 [ 705.358448][T15484] should_fail_ex+0x512/0x640 [ 705.358465][T15484] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 705.358486][T15484] should_failslab+0xc2/0x120 [ 705.358505][T15484] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 705.358522][T15484] ? security_file_alloc+0x34/0x2b0 [ 705.358547][T15484] security_file_alloc+0x34/0x2b0 [ 705.358567][T15484] init_file+0x93/0x4c0 [ 705.358587][T15484] alloc_empty_file+0x73/0x1e0 [ 705.358608][T15484] alloc_file_pseudo+0x13a/0x230 [ 705.358630][T15484] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 705.358651][T15484] ? alloc_fd+0x471/0x7d0 [ 705.358670][T15484] sock_alloc_file+0x50/0x210 [ 705.358688][T15484] __sys_socket+0x1c0/0x260 [ 705.358708][T15484] ? __pfx___sys_socket+0x10/0x10 [ 705.358728][T15484] ? xfd_validate_state+0x61/0x180 [ 705.358754][T15484] __x64_sys_socket+0x72/0xb0 [ 705.358773][T15484] ? lockdep_hardirqs_on+0x7c/0x110 [ 705.358787][T15484] do_syscall_64+0xcd/0x4c0 [ 705.358804][T15484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.358818][T15484] RIP: 0033:0x7f911ad8eec9 [ 705.358831][T15484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 705.358845][T15484] RSP: 002b:00007f911bccd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 705.358859][T15484] RAX: ffffffffffffffda RBX: 00007f911afe5fa0 RCX: 00007f911ad8eec9 [ 705.358869][T15484] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 705.358878][T15484] RBP: 00007f911ae11f91 R08: 0000000000000000 R09: 0000000000000000 [ 705.358886][T15484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 705.358895][T15484] R13: 00007f911afe6038 R14: 00007f911afe5fa0 R15: 00007ffcbd4c58d8 [ 705.358913][T15484] [ 705.727583][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 706.642239][ T51] Bluetooth: hci4: command 0x041b tx timeout [ 706.648313][T10831] Bluetooth: hci3: command 0x0c1a tx timeout [ 706.654712][T10831] Bluetooth: hci2: command 0x0c1a tx timeout [ 706.980837][T15502] serio: Serial port pty6 [ 707.251865][T15505] netlink: 334 bytes leftover after parsing attributes in process `syz.4.2044'. syzkaller syzkaller login: [ 710.119692][T15536] FAULT_INJECTION: forcing a failure. [ 710.119692][T15536] name failslab, interval 1, probability 0, space 0, times 0 [ 710.183283][T15536] CPU: 0 UID: 0 PID: 15536 Comm: syz.5.2053 Not tainted syzkaller #0 PREEMPT(full) [ 710.183316][T15536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 710.183330][T15536] Call Trace: [ 710.183337][T15536] [ 710.183347][T15536] dump_stack_lvl+0x16c/0x1f0 [ 710.183380][T15536] should_fail_ex+0x512/0x640 [ 710.183411][T15536] should_failslab+0xc2/0x120 [ 710.183439][T15536] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 710.183463][T15536] ? find_held_lock+0x2b/0x80 [ 710.183483][T15536] ? dst_alloc+0x99/0x1a0 [ 710.183505][T15536] dst_alloc+0x99/0x1a0 [ 710.183526][T15536] rt_dst_alloc+0x35/0x3a0 [ 710.183552][T15536] ip_route_output_key_hash_rcu+0x87a/0x28e0 [ 710.183610][T15536] ip_route_output_key_hash+0x137/0x2e0 [ 710.183640][T15536] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 710.183678][T15536] ? find_held_lock+0x2b/0x80 [ 710.183701][T15536] ip_route_output_flow+0x27/0x150 [ 710.183732][T15536] raw_sendmsg+0xd5b/0x37e0 [ 710.183771][T15536] ? __pfx_raw_sendmsg+0x10/0x10 [ 710.183799][T15536] ? __lock_acquire+0x62e/0x1ce0 [ 710.183833][T15536] ? __lock_acquire+0x62e/0x1ce0 [ 710.183898][T15536] ? __pfx_raw_sendmsg+0x10/0x10 [ 710.183928][T15536] inet_sendmsg+0x11c/0x140 [ 710.183958][T15536] ____sys_sendmsg+0x973/0xc70 [ 710.183987][T15536] ? copy_msghdr_from_user+0x10a/0x160 [ 710.184009][T15536] ? __pfx_____sys_sendmsg+0x10/0x10 [ 710.184040][T15536] ? kfree+0x24f/0x4d0 [ 710.184057][T15536] ? __pfx__kstrtoull+0x10/0x10 [ 710.184092][T15536] ___sys_sendmsg+0x134/0x1d0 [ 710.184116][T15536] ? __pfx____sys_sendmsg+0x10/0x10 [ 710.184164][T15536] ? __pfx___might_resched+0x10/0x10 [ 710.184191][T15536] __sys_sendmmsg+0x200/0x420 [ 710.184216][T15536] ? __pfx___sys_sendmmsg+0x10/0x10 [ 710.184248][T15536] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 710.184282][T15536] ? fput+0x9b/0xd0 [ 710.184310][T15536] ? ksys_write+0x1ac/0x250 [ 710.184332][T15536] ? __pfx_ksys_write+0x10/0x10 [ 710.184360][T15536] __x64_sys_sendmmsg+0x9c/0x100 [ 710.184381][T15536] ? lockdep_hardirqs_on+0x7c/0x110 [ 710.184401][T15536] do_syscall_64+0xcd/0x4c0 [ 710.184425][T15536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.184445][T15536] RIP: 0033:0x7f911ad8eec9 [ 710.184462][T15536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 710.184481][T15536] RSP: 002b:00007f911bccd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 710.184500][T15536] RAX: ffffffffffffffda RBX: 00007f911afe5fa0 RCX: 00007f911ad8eec9 [ 710.184513][T15536] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 710.184525][T15536] RBP: 00007f911bccd090 R08: 0000000000000000 R09: 0000000000000000 [ 710.184537][T15536] R10: 000000000000e000 R11: 0000000000000246 R12: 0000000000000002 [ 710.184550][T15536] R13: 00007f911afe6038 R14: 00007f911afe5fa0 R15: 00007ffcbd4c58d8 [ 710.184578][T15536] [ 710.475384][ C0] vkms_vblank_simulate: vblank timer overrun [ 711.063821][T15533] netlink: 334 bytes leftover after parsing attributes in process `syz.6.2051'. [ 712.391414][T15555] netlink: 334 bytes leftover after parsing attributes in process `syz.0.2058'. [ 713.093117][T15561] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 713.751906][T15569] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 714.616210][T15569] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 714.629269][T15569] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 714.635311][T15569] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 714.664274][T15569] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 714.679580][T15576] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 715.084747][T15592] netlink: 334 bytes leftover after parsing attributes in process `syz.0.2064'. [ 715.935631][ T51] Bluetooth: hci1: command 0x0c1a tx timeout syzkaller syzkaller login: [ 716.649186][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 716.655346][T10831] Bluetooth: hci2: command 0x0c1a tx timeout [ 716.726503][ T51] Bluetooth: hci4: command 0x041b tx timeout [ 718.326066][T15658] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2074'. [ 718.362563][T15658] IPv6: NLM_F_CREATE should be specified when creating new route [ 718.379485][T15658] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 syzkaller syzkaller login: [ 720.684178][T15658] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 720.692058][T15658] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 720.702417][T15658] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 720.710345][T15658] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 720.808861][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 720.820609][T15666] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 721.146895][T15685] i2c i2c-0: delete_device: Extra parameters [ 721.294082][T15701] netlink: 334 bytes leftover after parsing attributes in process `syz.0.2078'. [ 721.823890][T15704] program syz.5.2081 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 721.880773][T15706] netlink: 302 bytes leftover after parsing attributes in process `syz.4.2082'. [ 722.226935][T15711] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2084'. [ 722.733140][ T51] Bluetooth: hci4: command 0x041b tx timeout [ 722.739562][T10831] Bluetooth: hci3: command 0x0c1a tx timeout [ 722.742189][ T5163] Bluetooth: hci2: command 0x0c1a tx timeout [ 723.106445][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 723.112911][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 723.123345][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 723.129939][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 723.153159][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 723.174636][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 723.203646][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 723.219889][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 723.630266][T15728] random: crng reseeded on system resumption [ 724.385529][T15746] FAULT_INJECTION: forcing a failure. [ 724.385529][T15746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 724.472629][T15746] CPU: 1 UID: 0 PID: 15746 Comm: syz.0.2090 Not tainted syzkaller #0 PREEMPT(full) [ 724.472651][T15746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 724.472662][T15746] Call Trace: [ 724.472667][T15746] [ 724.472673][T15746] dump_stack_lvl+0x16c/0x1f0 [ 724.472695][T15746] should_fail_ex+0x512/0x640 [ 724.472715][T15746] _copy_from_user+0x2e/0xd0 [ 724.472733][T15746] core_sys_select+0x2c8/0xc10 [ 724.472754][T15746] ? __pfx_core_sys_select+0x10/0x10 [ 724.472773][T15746] ? proc_fail_nth_write+0x9f/0x220 [ 724.472807][T15746] ? find_held_lock+0x2b/0x80 [ 724.472825][T15746] kern_select+0x15d/0x1e0 [ 724.472840][T15746] ? __pfx_kern_select+0x10/0x10 [ 724.472863][T15746] ? __pfx_ksys_write+0x10/0x10 [ 724.472884][T15746] __x64_sys_select+0xbd/0x160 [ 724.472898][T15746] ? do_syscall_64+0x91/0x4c0 [ 724.472914][T15746] ? lockdep_hardirqs_on+0x7c/0x110 [ 724.472928][T15746] do_syscall_64+0xcd/0x4c0 [ 724.472945][T15746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.472960][T15746] RIP: 0033:0x7f16b8f8eec9 [ 724.472973][T15746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 724.472987][T15746] RSP: 002b:00007f16b9dec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 724.473002][T15746] RAX: ffffffffffffffda RBX: 00007f16b91e5fa0 RCX: 00007f16b8f8eec9 [ 724.473012][T15746] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 724.473021][T15746] RBP: 00007f16b9dec090 R08: 0000000000000000 R09: 0000000000000000 [ 724.473030][T15746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 724.473038][T15746] R13: 00007f16b91e6038 R14: 00007f16b91e5fa0 R15: 00007fff7bcdc3e8 [ 724.473056][T15746] [ 724.654343][ C1] vkms_vblank_simulate: vblank timer overrun [ 725.534750][T15758] netlink: 334 bytes leftover after parsing attributes in process `syz.4.2094'. [ 727.731247][T15780] serio: Serial port pty6 [ 729.061306][T15806] netlink: 334 bytes leftover after parsing attributes in process `syz.0.2105'. [ 730.187031][T15817] FAULT_INJECTION: forcing a failure. [ 730.187031][T15817] name fail_futex, interval 1, probability 0, space 0, times 0 [ 730.200421][T15817] CPU: 0 UID: 0 PID: 15817 Comm: syz.5.2109 Not tainted syzkaller #0 PREEMPT(full) [ 730.200464][T15817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 730.200481][T15817] Call Trace: [ 730.200490][T15817] [ 730.200500][T15817] dump_stack_lvl+0x16c/0x1f0 [ 730.200536][T15817] should_fail_ex+0x512/0x640 [ 730.200571][T15817] should_fail_futex+0x4c/0x60 [ 730.200603][T15817] futex_lock_pi_atomic+0x148/0xd50 [ 730.200649][T15817] futex_lock_pi+0x23f/0x7c0 [ 730.200692][T15817] ? __pfx_futex_lock_pi+0x10/0x10 [ 730.200728][T15817] ? __futex_wait+0x24c/0x2f0 [ 730.200768][T15817] ? lockdep_hardirqs_on+0x7c/0x110 [ 730.200818][T15817] ? futex_private_hash_put+0x18a/0x300 [ 730.200855][T15817] ? __pfx_futex_wake_mark+0x10/0x10 [ 730.200903][T15817] ? ksys_write+0x190/0x250 [ 730.200939][T15817] do_futex+0x11a/0x350 [ 730.200970][T15817] ? __pfx_do_futex+0x10/0x10 [ 730.201017][T15817] __x64_sys_futex+0x1e0/0x4c0 [ 730.201049][T15817] ? fput+0x9b/0xd0 [ 730.201082][T15817] ? __pfx___x64_sys_futex+0x10/0x10 [ 730.201114][T15817] ? xfd_validate_state+0x61/0x180 [ 730.201149][T15817] ? __pfx_ksys_write+0x10/0x10 [ 730.201190][T15817] do_syscall_64+0xcd/0x4c0 [ 730.201220][T15817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.201245][T15817] RIP: 0033:0x7f911ad8eec9 [ 730.201267][T15817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 730.201292][T15817] RSP: 002b:00007f911bc8b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 730.201317][T15817] RAX: ffffffffffffffda RBX: 00007f911afe6180 RCX: 00007f911ad8eec9 [ 730.201335][T15817] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 730.201351][T15817] RBP: 00007f911ae11f91 R08: 0000000000000000 R09: 000000008000fff5 [ 730.201367][T15817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 730.201383][T15817] R13: 00007f911afe6218 R14: 00007f911afe6180 R15: 00007ffcbd4c58d8 [ 730.201420][T15817] [ 730.589464][ T5163] Bluetooth: hci1: Malformed Event: 0x02 [ 730.765504][T15825] FAULT_INJECTION: forcing a failure. [ 730.765504][T15825] name fail_futex, interval 1, probability 0, space 0, times 0 [ 731.023718][T15825] CPU: 1 UID: 0 PID: 15825 Comm: syz.6.2112 Not tainted syzkaller #0 PREEMPT(full) [ 731.023756][T15825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 731.023773][T15825] Call Trace: [ 731.023783][T15825] [ 731.023795][T15825] dump_stack_lvl+0x16c/0x1f0 [ 731.023831][T15825] should_fail_ex+0x512/0x640 [ 731.023867][T15825] get_futex_key+0x1d0/0x1560 [ 731.023905][T15825] ? __pfx_get_futex_key+0x10/0x10 [ 731.023943][T15825] ? stack_trace_save+0x8e/0xc0 [ 731.023976][T15825] futex_wait_setup+0x9d/0x550 [ 731.024023][T15825] __futex_wait+0x194/0x2f0 [ 731.024062][T15825] ? __pfx___futex_wait+0x10/0x10 [ 731.024105][T15825] ? __pfx_futex_wake_mark+0x10/0x10 [ 731.024158][T15825] ? futex_private_hash_put+0x176/0x300 [ 731.024195][T15825] ? futex_private_hash_put+0x18a/0x300 [ 731.024230][T15825] futex_wait+0xe8/0x380 [ 731.024269][T15825] ? __pfx_futex_wait+0x10/0x10 [ 731.024325][T15825] do_futex+0x229/0x350 [ 731.024358][T15825] ? __pfx_do_futex+0x10/0x10 [ 731.024393][T15825] ? __pfx___might_resched+0x10/0x10 [ 731.024426][T15825] __x64_sys_futex+0x1e0/0x4c0 [ 731.024460][T15825] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 731.024499][T15825] ? __pfx___x64_sys_futex+0x10/0x10 [ 731.024538][T15825] ? __pfx___do_sys_close_range+0x10/0x10 [ 731.024583][T15825] do_syscall_64+0xcd/0x4c0 [ 731.024616][T15825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.024643][T15825] RIP: 0033:0x7fdd5e98eec9 [ 731.024665][T15825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 731.024691][T15825] RSP: 002b:00007fdd5f76a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 731.024717][T15825] RAX: ffffffffffffffda RBX: 00007fdd5ebe5fa8 RCX: 00007fdd5e98eec9 [ 731.024739][T15825] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdd5ebe5fa8 [ 731.024756][T15825] RBP: 00007fdd5ebe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 731.024773][T15825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 731.024789][T15825] R13: 00007fdd5ebe6038 R14: 00007fff613301a0 R15: 00007fff61330288 [ 731.024825][T15825] [ 731.730477][T15849] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input49 [ 732.159640][T15858] netlink: 334 bytes leftover after parsing attributes in process `syz.0.2119'. [ 732.845774][T15868] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2123'. [ 732.933771][T15871] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 733.386586][T15879] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 734.102709][T15871] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 734.117201][T15871] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 734.117623][T15871] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 734.128616][T15871] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 735.296025][ T5163] Bluetooth: hci1: command 0x0c1a tx timeout [ 736.176318][ T5163] Bluetooth: hci4: command 0x041b tx timeout [ 736.176335][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 736.176375][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 736.382830][T15923] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 738.120720][T15923] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 738.153477][T15923] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 738.197437][T15923] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 738.209153][T15923] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 738.219666][T15930] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 739.067640][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 740.178400][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 740.268372][ T51] Bluetooth: hci4: command 0x041b tx timeout [ 740.268523][T10831] Bluetooth: hci3: command 0x0c1a tx timeout [ 742.039505][T15977] netlink: 334 bytes leftover after parsing attributes in process `syz.6.2149'. [ 742.679073][T15983] netlink: 268 bytes leftover after parsing attributes in process `syz.5.2150'. [ 742.738819][T15961] kexec: Could not allocate control_code_buffer [ 743.016994][T15988] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 743.860131][ C1] sl0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 20730 ms [ 743.868653][ C1] sl0: transmit timed out, bad line quality? [ 743.925743][T15995] bond0: option all_slaves_active: invalid value () [ 745.094563][T16008] FAULT_INJECTION: forcing a failure. [ 745.094563][T16008] name failslab, interval 1, probability 0, space 0, times 0 [ 745.142057][T16008] CPU: 1 UID: 0 PID: 16008 Comm: syz.6.2156 Not tainted syzkaller #0 PREEMPT(full) [ 745.142092][T16008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 745.142107][T16008] Call Trace: [ 745.142116][T16008] [ 745.142126][T16008] dump_stack_lvl+0x16c/0x1f0 [ 745.142159][T16008] should_fail_ex+0x512/0x640 [ 745.142187][T16008] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 745.142218][T16008] should_failslab+0xc2/0x120 [ 745.142250][T16008] __kmalloc_cache_noprof+0x6a/0x3e0 [ 745.142278][T16008] ? nl80211_dump_station+0x26f/0xa80 [ 745.142310][T16008] nl80211_dump_station+0x26f/0xa80 [ 745.142348][T16008] ? __pfx_nl80211_dump_station+0x10/0x10 [ 745.142434][T16008] ? __alloc_skb+0x200/0x380 [ 745.142473][T16008] genl_dumpit+0x122/0x230 [ 745.142507][T16008] netlink_dump+0x539/0xd30 [ 745.142538][T16008] ? __pfx_netlink_dump+0x10/0x10 [ 745.142581][T16008] ? __asan_memset+0x23/0x50 [ 745.142607][T16008] ? genl_start+0x67f/0x980 [ 745.142642][T16008] __netlink_dump_start+0x6d6/0x990 [ 745.142675][T16008] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 745.142711][T16008] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 745.142742][T16008] ? genl_op_from_small+0x25/0x440 [ 745.142780][T16008] ? __pfx_genl_get_cmd+0x10/0x10 [ 745.142806][T16008] ? __pfx_genl_start+0x10/0x10 [ 745.142833][T16008] ? __pfx_genl_dumpit+0x10/0x10 [ 745.142861][T16008] ? __pfx_genl_done+0x10/0x10 [ 745.142896][T16008] ? __radix_tree_lookup+0x21f/0x2c0 [ 745.142943][T16008] genl_rcv_msg+0x46e/0x800 [ 745.142979][T16008] ? __pfx_genl_rcv_msg+0x10/0x10 [ 745.143011][T16008] ? __pfx_nl80211_dump_station+0x10/0x10 [ 745.143052][T16008] netlink_rcv_skb+0x158/0x420 [ 745.143080][T16008] ? __pfx_genl_rcv_msg+0x10/0x10 [ 745.143113][T16008] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 745.143156][T16008] ? netlink_deliver_tap+0x1ae/0xd30 [ 745.143189][T16008] genl_rcv+0x28/0x40 [ 745.143217][T16008] netlink_unicast+0x5a7/0x870 [ 745.143249][T16008] ? __pfx_netlink_unicast+0x10/0x10 [ 745.143277][T16008] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 745.143300][T16008] ? __lock_acquire+0xb97/0x1ce0 [ 745.143342][T16008] netlink_sendmsg+0x8d1/0xdd0 [ 745.143377][T16008] ? __pfx_netlink_sendmsg+0x10/0x10 [ 745.143417][T16008] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 745.143454][T16008] ____sys_sendmsg+0xa98/0xc70 [ 745.143489][T16008] ? copy_msghdr_from_user+0x10a/0x160 [ 745.143516][T16008] ? __pfx_____sys_sendmsg+0x10/0x10 [ 745.143567][T16008] ___sys_sendmsg+0x134/0x1d0 [ 745.143598][T16008] ? __pfx____sys_sendmsg+0x10/0x10 [ 745.143673][T16008] __sys_sendmsg+0x16d/0x220 [ 745.143701][T16008] ? __pfx___sys_sendmsg+0x10/0x10 [ 745.143755][T16008] do_syscall_64+0xcd/0x4c0 [ 745.143785][T16008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.143811][T16008] RIP: 0033:0x7fdd5e98eec9 [ 745.143832][T16008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 745.143855][T16008] RSP: 002b:00007fdd5f76a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 745.143879][T16008] RAX: ffffffffffffffda RBX: 00007fdd5ebe5fa0 RCX: 00007fdd5e98eec9 [ 745.143897][T16008] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 745.143912][T16008] RBP: 00007fdd5f76a090 R08: 0000000000000000 R09: 0000000000000000 [ 745.143928][T16008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 745.143942][T16008] R13: 00007fdd5ebe6038 R14: 00007fdd5ebe5fa0 R15: 00007fff61330288 [ 745.143973][T16008] [ 745.653900][T15982] bond0: option all_slaves_active: invalid value () [ 747.272304][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.278648][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.935815][T16050] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input50 [ 748.006729][T16053] FAULT_INJECTION: forcing a failure. [ 748.006729][T16053] name failslab, interval 1, probability 0, space 0, times 0 [ 748.006938][T16052] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2166'. [ 748.084076][T16053] CPU: 0 UID: 0 PID: 16053 Comm: syz.0.2165 Not tainted syzkaller #0 PREEMPT(full) [ 748.084109][T16053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 748.084124][T16053] Call Trace: [ 748.084132][T16053] [ 748.084142][T16053] dump_stack_lvl+0x16c/0x1f0 [ 748.084171][T16053] should_fail_ex+0x512/0x640 [ 748.084197][T16053] ? __kvmalloc_node_noprof+0x124/0x620 [ 748.084229][T16053] should_failslab+0xc2/0x120 [ 748.084268][T16053] __kvmalloc_node_noprof+0x137/0x620 [ 748.084298][T16053] ? seq_read_iter+0x826/0x12c0 [ 748.084330][T16053] ? seq_read_iter+0x826/0x12c0 [ 748.084351][T16053] seq_read_iter+0x826/0x12c0 [ 748.084390][T16053] seq_read+0x3a3/0x570 [ 748.084414][T16053] ? __pfx_seq_read+0x10/0x10 [ 748.084444][T16053] ? import_ubuf+0x1b6/0x220 [ 748.084483][T16053] ? __pfx_seq_read+0x10/0x10 [ 748.084506][T16053] proc_reg_read+0x23d/0x330 [ 748.084542][T16053] ? __pfx_proc_reg_read+0x10/0x10 [ 748.084573][T16053] vfs_readv+0x5be/0x8b0 [ 748.084606][T16053] ? __pfx_vfs_readv+0x10/0x10 [ 748.084628][T16053] ? __mutex_lock+0x1c5/0x1060 [ 748.084664][T16053] ? __pfx___mutex_lock+0x10/0x10 [ 748.084702][T16053] ? __fget_files+0x20e/0x3c0 [ 748.084727][T16053] ? __fget_files+0x200/0x3c0 [ 748.084760][T16053] ? do_readv+0x132/0x340 [ 748.084787][T16053] do_readv+0x132/0x340 [ 748.084811][T16053] ? __pfx_do_readv+0x10/0x10 [ 748.084845][T16053] do_syscall_64+0xcd/0x4c0 [ 748.084877][T16053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.084903][T16053] RIP: 0033:0x7f16b8f8eec9 [ 748.084923][T16053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 748.084946][T16053] RSP: 002b:00007f16b9dcb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 748.084968][T16053] RAX: ffffffffffffffda RBX: 00007f16b91e6090 RCX: 00007f16b8f8eec9 [ 748.084984][T16053] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003 [ 748.084998][T16053] RBP: 00007f16b9dcb090 R08: 0000000000000000 R09: 0000000000000000 [ 748.085012][T16053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 748.085026][T16053] R13: 00007f16b91e6128 R14: 00007f16b91e6090 R15: 00007fff7bcdc3e8 [ 748.085059][T16053] [ 748.085151][T16054] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 748.971829][T16058] netlink: 334 bytes leftover after parsing attributes in process `syz.0.2168'. [ 749.250406][T16066] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2170'. [ 749.305152][T16066] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 750.095800][T16075] FAULT_INJECTION: forcing a failure. [ 750.095800][T16075] name failslab, interval 1, probability 0, space 0, times 0 [ 750.119860][T16075] CPU: 1 UID: 0 PID: 16075 Comm: syz.5.2172 Not tainted syzkaller #0 PREEMPT(full) [ 750.119886][T16075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 750.119896][T16075] Call Trace: [ 750.119902][T16075] [ 750.119908][T16075] dump_stack_lvl+0x16c/0x1f0 [ 750.119928][T16075] should_fail_ex+0x512/0x640 [ 750.119946][T16075] ? fs_reclaim_acquire+0xae/0x150 [ 750.119969][T16075] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 750.119991][T16075] should_failslab+0xc2/0x120 [ 750.120011][T16075] __kmalloc_noprof+0xd2/0x510 [ 750.120045][T16075] tomoyo_realpath_from_path+0xc2/0x6e0 [ 750.120069][T16075] ? tomoyo_profile+0x47/0x60 [ 750.120085][T16075] tomoyo_path_number_perm+0x245/0x580 [ 750.120103][T16075] ? tomoyo_path_number_perm+0x237/0x580 [ 750.120125][T16075] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 750.120145][T16075] ? find_held_lock+0x2b/0x80 [ 750.120177][T16075] ? find_held_lock+0x2b/0x80 [ 750.120190][T16075] ? hook_file_ioctl_common+0x145/0x410 [ 750.120215][T16075] ? __fget_files+0x20e/0x3c0 [ 750.120234][T16075] security_file_ioctl+0x9b/0x240 [ 750.120255][T16075] __x64_sys_ioctl+0xb7/0x210 [ 750.120279][T16075] do_syscall_64+0xcd/0x4c0 [ 750.120297][T16075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.120312][T16075] RIP: 0033:0x7f911ad8eec9 [ 750.120324][T16075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 750.120339][T16075] RSP: 002b:00007f911bccd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 750.120354][T16075] RAX: ffffffffffffffda RBX: 00007f911afe5fa0 RCX: 00007f911ad8eec9 [ 750.120363][T16075] RDX: 0000000000000004 RSI: 0000000000005411 RDI: 0000000000000005 [ 750.120371][T16075] RBP: 00007f911bccd090 R08: 0000000000000000 R09: 0000000000000000 [ 750.120380][T16075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 750.120388][T16075] R13: 00007f911afe6038 R14: 00007f911afe5fa0 R15: 00007ffcbd4c58d8 [ 750.120407][T16075] [ 750.120413][T16075] ERROR: Out of memory at tomoyo_realpath_from_path. [ 750.426478][T16052] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 750.443895][T16052] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 750.459651][T16052] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 750.466035][T16052] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 750.472867][T16064] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 750.475334][T16076] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 750.930391][T16096] FAULT_INJECTION: forcing a failure. [ 750.930391][T16096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 750.993691][T16096] CPU: 1 UID: 0 PID: 16096 Comm: syz.5.2177 Not tainted syzkaller #0 PREEMPT(full) [ 750.993725][T16096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 750.993741][T16096] Call Trace: [ 750.993749][T16096] [ 750.993760][T16096] dump_stack_lvl+0x16c/0x1f0 [ 750.993793][T16096] should_fail_ex+0x512/0x640 [ 750.993826][T16096] _copy_to_user+0x32/0xd0 [ 750.993857][T16096] simple_read_from_buffer+0xcb/0x170 [ 750.993886][T16096] proc_fail_nth_read+0x197/0x240 [ 750.993920][T16096] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 750.993950][T16096] ? rw_verify_area+0xcf/0x6c0 [ 750.993983][T16096] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 750.994011][T16096] vfs_read+0x1e1/0xcf0 [ 750.994042][T16096] ? __pfx___mutex_lock+0x10/0x10 [ 750.994075][T16096] ? __pfx_vfs_read+0x10/0x10 [ 750.994110][T16096] ? __fget_files+0x20e/0x3c0 [ 750.994149][T16096] ksys_read+0x12a/0x250 [ 750.994176][T16096] ? __pfx_ksys_read+0x10/0x10 [ 750.994215][T16096] do_syscall_64+0xcd/0x4c0 [ 750.994245][T16096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.994270][T16096] RIP: 0033:0x7f911ad8d8dc [ 750.994291][T16096] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 750.994315][T16096] RSP: 002b:00007f911bccd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 750.994338][T16096] RAX: ffffffffffffffda RBX: 00007f911afe5fa0 RCX: 00007f911ad8d8dc [ 750.994355][T16096] RDX: 000000000000000f RSI: 00007f911bccd0a0 RDI: 0000000000000004 [ 750.994370][T16096] RBP: 00007f911bccd090 R08: 0000000000000000 R09: 0000000000000000 [ 750.994386][T16096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 750.994401][T16096] R13: 00007f911afe6038 R14: 00007f911afe5fa0 R15: 00007ffcbd4c58d8 [ 750.994437][T16096] [ 751.423852][T10831] Bluetooth: hci1: command 0x0c1a tx timeout [ 751.820987][T16113] openvswitch: netlink: Missing valid actions attribute. [ 752.019103][T16121] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2183'. [ 752.049525][T16121] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 752.504841][ T5163] Bluetooth: hci2: command 0x0c1a tx timeout [ 752.510934][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 752.517482][T10831] Bluetooth: hci4: command 0x041b tx timeout [ 752.547956][T16136] netlink: 334 bytes leftover after parsing attributes in process `syz.0.2186'. [ 753.816444][T16121] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 753.828305][T16121] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 753.842289][T16121] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 753.906507][T16121] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 754.013352][T16128] sp0: Synchronizing with TNC [ 754.355295][T10831] Bluetooth: hci1: command 0x0c1a tx timeout [ 755.532610][T16186] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2196'. [ 755.649311][T16188] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 755.866615][T10831] Bluetooth: hci3: command 0x0c1a tx timeout [ 755.872679][T10831] Bluetooth: hci2: command 0x0c1a tx timeout [ 756.026267][T10831] Bluetooth: hci4: command 0x041b tx timeout [ 756.197094][T16199] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2198'. [ 756.854797][T16205] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 758.107243][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 758.125917][T16186] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 758.167838][T16186] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 758.174099][T16186] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 758.180515][T16186] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 758.202822][T16188] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 758.340287][T10831] Bluetooth: hci1: unexpected event 0x01 length: 5 > 1 [ 758.903057][T16222] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2203'. [ 759.046367][T16225] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 759.370730][T16215] tipc: can't start tipc send workqueue [ 759.759588][T16235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2205'. [ 759.895185][T16235] FAULT_INJECTION: forcing a failure. [ 759.895185][T16235] name failslab, interval 1, probability 0, space 0, times 0 [ 759.991223][T16235] CPU: 1 UID: 0 PID: 16235 Comm: syz.4.2205 Not tainted syzkaller #0 PREEMPT(full) [ 759.991259][T16235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 759.991274][T16235] Call Trace: [ 759.991283][T16235] [ 759.991292][T16235] dump_stack_lvl+0x16c/0x1f0 [ 759.991317][T16235] should_fail_ex+0x512/0x640 [ 759.991335][T16235] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 759.991363][T16235] should_failslab+0xc2/0x120 [ 759.991384][T16235] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 759.991402][T16235] ? acpi_ut_create_thread_state+0x63/0x170 [ 759.991430][T16235] acpi_ut_create_thread_state+0x63/0x170 [ 759.991453][T16235] acpi_ps_parse_aml+0x79/0xcb0 [ 759.991471][T16235] acpi_ps_execute_method+0x55a/0xb30 [ 759.991489][T16235] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 759.991509][T16235] acpi_ns_evaluate+0x76c/0xca0 [ 759.991526][T16235] ? kasan_save_track+0x14/0x30 [ 759.991545][T16235] acpi_evaluate_object+0x1fa/0xa90 [ 759.991568][T16235] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.991585][T16235] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 759.991606][T16235] ? __mutex_trylock_common+0xe9/0x250 [ 759.991631][T16235] acpi_evaluate_integer+0xdd/0x200 [ 759.991651][T16235] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 759.991679][T16235] ? __pfx_status_show+0x10/0x10 [ 759.991693][T16235] status_show+0xa0/0x120 [ 759.991706][T16235] ? __pfx_status_show+0x10/0x10 [ 759.991725][T16235] dev_attr_show+0x53/0xe0 [ 759.991744][T16235] ? __pfx_dev_attr_show+0x10/0x10 [ 759.991760][T16235] sysfs_kf_seq_show+0x213/0x3e0 [ 759.991782][T16235] seq_read_iter+0x509/0x12c0 [ 759.991810][T16235] kernfs_fop_read_iter+0x46c/0x610 [ 759.991826][T16235] ? rw_verify_area+0xcf/0x6c0 [ 759.991843][T16235] vfs_read+0x8bf/0xcf0 [ 759.991869][T16235] ? __pfx___mutex_lock+0x10/0x10 [ 759.991886][T16235] ? __pfx_vfs_read+0x10/0x10 [ 759.991917][T16235] ksys_read+0x12a/0x250 [ 759.991933][T16235] ? __pfx_ksys_read+0x10/0x10 [ 759.991957][T16235] do_syscall_64+0xcd/0x4c0 [ 759.991974][T16235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.991989][T16235] RIP: 0033:0x7fbd6bd8eec9 [ 759.992002][T16235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 759.992016][T16235] RSP: 002b:00007fbd6cbf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 759.992030][T16235] RAX: ffffffffffffffda RBX: 00007fbd6bfe6180 RCX: 00007fbd6bd8eec9 [ 759.992040][T16235] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000006 [ 759.992049][T16235] RBP: 00007fbd6be11f91 R08: 0000000000000000 R09: 0000000000000000 [ 759.992058][T16235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 759.992066][T16235] R13: 00007fbd6bfe6218 R14: 00007fbd6bfe6180 R15: 00007fff06203078 [ 759.992087][T16235] [ 759.992832][T16235] ACPI Error: [ 760.188432][T10831] Bluetooth: hci4: command 0x041b tx timeout [ 760.217545][ C0] vkms_vblank_simulate: vblank timer overrun [ 760.285404][T10831] Bluetooth: hci3: command 0x0c1a tx timeout [ 760.291530][T10831] Bluetooth: hci2: command 0x0c1a tx timeout [ 760.488382][T16235] ffff88805fada000 walk still has a scope list (20250404/dswstate-694) [ 760.612338][T16232] netlink: zone id is out of range [ 760.617479][T16232] netlink: zone id is out of range [ 760.624455][T16232] netlink: zone id is out of range [ 760.658751][T16232] netlink: zone id is out of range [ 760.693907][T16232] netlink: zone id is out of range [ 760.728994][T16232] netlink: zone id is out of range [ 760.803717][T16232] netlink: zone id is out of range [ 760.885615][T16232] netlink: zone id is out of range [ 761.018816][T16232] netlink: zone id is out of range [ 761.023999][T16232] netlink: zone id is out of range [ 761.189703][T16222] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 761.242300][T16222] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 761.259570][T16245] [ 761.261930][T16245] ====================================================== [ 761.268929][T16245] WARNING: possible circular locking dependency detected [ 761.275927][T16245] syzkaller #0 Not tainted [ 761.280331][T16245] ------------------------------------------------------ [ 761.287411][T16245] syz.6.2206/16245 is trying to acquire lock: [ 761.293457][T16245] ffff888025d7b6f8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x17d/0x580 [ 761.302839][T16245] [ 761.302839][T16245] but task is already holding lock: [ 761.310191][T16245] ffff888025d7b1b8 (&q->q_usage_counter(io)#62){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 761.321421][T16245] [ 761.321421][T16245] which lock already depends on the new lock. [ 761.321421][T16245] [ 761.332072][T16245] [ 761.332072][T16245] the existing dependency chain (in reverse order) is: [ 761.341072][T16245] [ 761.341072][T16245] -> #6 (&q->q_usage_counter(io)#62){++++}-{0:0}: [ 761.349687][T16245] blk_alloc_queue+0x619/0x760 [ 761.354966][T16245] blk_mq_alloc_queue+0x172/0x280 [ 761.360526][T16245] __blk_mq_alloc_disk+0x29/0x120 [ 761.366059][T16245] nbd_dev_add+0x492/0xbb0 [ 761.371013][T16245] nbd_init+0x181/0x320 [ 761.375684][T16245] do_one_initcall+0x120/0x6e0 [ 761.380960][T16245] kernel_init_freeable+0x5c2/0x910 [ 761.386667][T16245] kernel_init+0x1c/0x2b0 [ 761.391506][T16245] ret_from_fork+0x56d/0x730 [ 761.396599][T16245] ret_from_fork_asm+0x1a/0x30 [ 761.401896][T16245] [ 761.401896][T16245] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 761.409095][T16245] fs_reclaim_acquire+0x102/0x150 [ 761.412172][T16222] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 761.414663][T16245] kmem_cache_alloc_node_noprof+0x57/0x3b0 [ 761.427058][T16245] __alloc_skb+0x2b2/0x380 [ 761.432015][T16245] __ip6_append_data+0x2b74/0x4750 [ 761.437673][T16245] ip6_append_data+0x1bd/0x4c0 [ 761.443008][T16245] rawv6_sendmsg+0x163d/0x4820 [ 761.448309][T16245] inet_sendmsg+0x11c/0x140 [ 761.453339][T16245] ____sys_sendmsg+0x973/0xc70 [ 761.458624][T16245] ___sys_sendmsg+0x134/0x1d0 [ 761.463818][T16245] __sys_sendmsg+0x16d/0x220 [ 761.468923][T16245] do_syscall_64+0xcd/0x4c0 [ 761.473957][T16245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.480356][T16245] [ 761.480356][T16245] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 761.488108][T16245] lock_sock_nested+0x41/0xf0 [ 761.493314][T16245] inet_autobind+0x1a/0x1a0 [ 761.498329][T16245] inet_send_prepare+0x31b/0x530 [ 761.503779][T16245] inet_sendmsg+0x43/0x140 [ 761.508707][T16245] sock_sendmsg+0x37f/0x470 [ 761.513733][T16245] __sock_xmit+0x1e7/0x4f0 [ 761.518668][T16245] nbd_send_cmd+0x8e4/0x1c90 [ 761.523767][T16245] nbd_queue_rq+0x940/0x12d0 [ 761.528867][T16245] blk_mq_dispatch_rq_list+0x416/0x1e20 [ 761.534939][T16245] __blk_mq_sched_dispatch_requests+0xcb7/0x15f0 [ 761.541786][T16245] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 761.548287][T16245] blk_mq_run_hw_queue+0x239/0x670 [ 761.553920][T16245] blk_mq_dispatch_list+0x514/0x1310 [ 761.559726][T16245] blk_mq_flush_plug_list+0x130/0x600 [ 761.565626][T16245] __blk_flush_plug+0x2c4/0x4b0 [ 761.570994][T16245] __submit_bio+0x545/0x690 [ 761.576027][T16245] submit_bio_noacct_nocheck+0x660/0xd30 [ 761.582179][T16245] submit_bio_noacct+0xb49/0x1ed0 [ 761.587729][T16245] block_read_full_folio+0x4db/0x850 [ 761.593532][T16245] filemap_read_folio+0xc5/0x2a0 [ 761.599001][T16245] do_read_cache_folio+0x263/0x5c0 [ 761.604641][T16245] read_part_sector+0xd4/0x370 [ 761.609923][T16245] adfspart_check_ICS+0x93/0x940 [ 761.615416][T16245] bdev_disk_changed+0x720/0x1520 [ 761.620963][T16245] blkdev_get_whole+0x187/0x290 [ 761.626340][T16245] bdev_open+0x2c7/0xe40 [ 761.631173][T16245] blkdev_open+0x34e/0x4f0 [ 761.636184][T16245] do_dentry_open+0x97f/0x1530 [ 761.641463][T16245] vfs_open+0x82/0x3f0 [ 761.646045][T16245] path_openat+0x1de4/0x2cb0 [ 761.651146][T16245] do_filp_open+0x20b/0x470 [ 761.656159][T16245] do_sys_openat2+0x11b/0x1d0 [ 761.661351][T16245] __x64_sys_openat+0x174/0x210 [ 761.666710][T16245] do_syscall_64+0xcd/0x4c0 [ 761.671728][T16245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.678142][T16245] [ 761.678142][T16245] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 761.685783][T16245] __mutex_lock+0x193/0x1060 [ 761.690886][T16245] nbd_queue_rq+0x423/0x12d0 [ 761.695988][T16245] blk_mq_dispatch_rq_list+0x416/0x1e20 [ 761.702051][T16245] __blk_mq_sched_dispatch_requests+0xcb7/0x15f0 [ 761.708914][T16245] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 761.715444][T16245] blk_mq_run_hw_queue+0x239/0x670 [ 761.721099][T16245] blk_mq_dispatch_list+0x514/0x1310 [ 761.726912][T16245] blk_mq_flush_plug_list+0x130/0x600 [ 761.732842][T16245] __blk_flush_plug+0x2c4/0x4b0 [ 761.738206][T16245] __submit_bio+0x545/0x690 [ 761.743218][T16245] submit_bio_noacct_nocheck+0x660/0xd30 [ 761.749452][T16245] submit_bio_noacct+0xb49/0x1ed0 [ 761.754997][T16245] block_read_full_folio+0x4db/0x850 [ 761.760800][T16245] filemap_read_folio+0xc5/0x2a0 [ 761.766249][T16245] do_read_cache_folio+0x263/0x5c0 [ 761.771874][T16245] read_part_sector+0xd4/0x370 [ 761.777160][T16245] adfspart_check_ICS+0x93/0x940 [ 761.782630][T16245] bdev_disk_changed+0x720/0x1520 [ 761.788191][T16245] blkdev_get_whole+0x187/0x290 [ 761.793553][T16245] bdev_open+0x2c7/0xe40 [ 761.798319][T16245] blkdev_open+0x34e/0x4f0 [ 761.803250][T16245] do_dentry_open+0x97f/0x1530 [ 761.808524][T16245] vfs_open+0x82/0x3f0 [ 761.813100][T16245] path_openat+0x1de4/0x2cb0 [ 761.818198][T16245] do_filp_open+0x20b/0x470 [ 761.823211][T16245] do_sys_openat2+0x11b/0x1d0 [ 761.828395][T16245] __x64_sys_openat+0x174/0x210 [ 761.833744][T16245] do_syscall_64+0xcd/0x4c0 [ 761.838756][T16245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.845158][T16245] [ 761.845158][T16245] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 761.852371][T16245] __mutex_lock+0x193/0x1060 [ 761.857536][T16245] nbd_queue_rq+0xbd/0x12d0 [ 761.862557][T16245] blk_mq_dispatch_rq_list+0x416/0x1e20 [ 761.868621][T16245] __blk_mq_sched_dispatch_requests+0xcb7/0x15f0 [ 761.875456][T16245] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 761.881947][T16245] blk_mq_run_hw_queue+0x239/0x670 [ 761.887565][T16245] blk_mq_dispatch_list+0x514/0x1310 [ 761.893356][T16245] blk_mq_flush_plug_list+0x130/0x600 [ 761.899236][T16245] __blk_flush_plug+0x2c4/0x4b0 [ 761.904596][T16245] __submit_bio+0x545/0x690 [ 761.909612][T16245] submit_bio_noacct_nocheck+0x660/0xd30 [ 761.915757][T16245] submit_bio_noacct+0xb49/0x1ed0 [ 761.921292][T16245] block_read_full_folio+0x4db/0x850 [ 761.927091][T16245] filemap_read_folio+0xc5/0x2a0 [ 761.932534][T16245] do_read_cache_folio+0x263/0x5c0 [ 761.938173][T16245] read_part_sector+0xd4/0x370 [ 761.943458][T16245] adfspart_check_ICS+0x93/0x940 [ 761.948900][T16245] bdev_disk_changed+0x720/0x1520 [ 761.954423][T16245] blkdev_get_whole+0x187/0x290 [ 761.959778][T16245] bdev_open+0x2c7/0xe40 [ 761.964528][T16245] blkdev_open+0x34e/0x4f0 [ 761.969449][T16245] do_dentry_open+0x97f/0x1530 [ 761.974723][T16245] vfs_open+0x82/0x3f0 [ 761.979310][T16245] path_openat+0x1de4/0x2cb0 [ 761.984428][T16245] do_filp_open+0x20b/0x470 [ 761.989438][T16245] do_sys_openat2+0x11b/0x1d0 [ 761.994621][T16245] __x64_sys_openat+0x174/0x210 [ 761.999971][T16245] do_syscall_64+0xcd/0x4c0 [ 762.004983][T16245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.011382][T16245] [ 762.011382][T16245] -> #1 (set->srcu){.+.+}-{0:0}: [ 762.018505][T16245] __synchronize_srcu+0xa1/0x290 [ 762.023956][T16245] blk_mq_quiesce_queue+0x149/0x1b0 [ 762.029705][T16245] elevator_switch+0x17d/0x810 [ 762.034972][T16245] elevator_change+0x391/0x580 [ 762.040265][T16245] elevator_set_default+0x2e9/0x380 [ 762.045979][T16245] blk_register_queue+0x384/0x4e0 [ 762.051512][T16245] __add_disk+0x74a/0xf00 [ 762.056351][T16245] add_disk_fwnode+0x13f/0x5d0 [ 762.061648][T16245] nbd_dev_add+0x783/0xbb0 [ 762.066593][T16245] nbd_init+0x181/0x320 [ 762.071262][T16245] do_one_initcall+0x120/0x6e0 [ 762.076563][T16245] kernel_init_freeable+0x5c2/0x910 [ 762.082275][T16245] kernel_init+0x1c/0x2b0 [ 762.087119][T16245] ret_from_fork+0x56d/0x730 [ 762.092214][T16245] ret_from_fork_asm+0x1a/0x30 [ 762.097492][T16245] [ 762.097492][T16245] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 762.105308][T16245] __lock_acquire+0x12a6/0x1ce0 [ 762.110682][T16245] lock_acquire+0x179/0x350 [ 762.115715][T16245] __mutex_lock+0x193/0x1060 [ 762.120814][T16245] elevator_change+0x17d/0x580 [ 762.126086][T16245] elv_iosched_store+0x315/0x3c0 [ 762.131540][T16245] queue_attr_store+0x26b/0x310 [ 762.136901][T16245] sysfs_kf_write+0xef/0x150 [ 762.142013][T16245] kernfs_fop_write_iter+0x3ac/0x570 [ 762.147811][T16245] vfs_write+0x7d3/0x11d0 [ 762.152650][T16245] ksys_write+0x12a/0x250 [ 762.157485][T16245] do_syscall_64+0xcd/0x4c0 [ 762.162496][T16245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.170152][T16245] [ 762.170152][T16245] other info that might help us debug this: [ 762.170152][T16245] [ 762.180496][T16245] Chain exists of: [ 762.180496][T16245] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#62 [ 762.180496][T16245] [ 762.194242][T16245] Possible unsafe locking scenario: [ 762.194242][T16245] [ 762.201680][T16245] CPU0 CPU1 [ 762.207026][T16245] ---- ---- [ 762.212371][T16245] lock(&q->q_usage_counter(io)#62); [ 762.217735][T16245] lock(fs_reclaim); [ 762.224233][T16245] lock(&q->q_usage_counter(io)#62); [ 762.232128][T16245] lock(&q->elevator_lock); [ 762.236716][T16245] [ 762.236716][T16245] *** DEADLOCK *** [ 762.236716][T16245] [ 762.244836][T16245] 7 locks held by syz.6.2206/16245: [ 762.250013][T16245] #0: ffff8880787de478 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 762.259046][T16245] #1: ffff88802418a428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 762.268018][T16245] #2: ffff8880844f4488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 762.277745][T16245] #3: ffff888026478f08 (kn->active#251){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 762.287840][T16245] #4: ffff8880264d0188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: elv_iosched_store+0x35f/0x3c0 [ 762.298483][T16245] #5: ffff888025d7b1b8 (&q->q_usage_counter(io)#62){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 762.310141][T16245] #6: ffff888025d7b1f0 (&q->q_usage_counter(queue)#46){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 762.322089][T16245] [ 762.322089][T16245] stack backtrace: [ 762.327960][T16245] CPU: 0 UID: 0 PID: 16245 Comm: syz.6.2206 Not tainted syzkaller #0 PREEMPT(full) [ 762.327979][T16245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 762.327989][T16245] Call Trace: [ 762.327996][T16245] [ 762.328004][T16245] dump_stack_lvl+0x116/0x1f0 [ 762.328023][T16245] print_circular_bug+0x275/0x350 [ 762.328043][T16245] check_noncircular+0x14c/0x170 [ 762.328063][T16245] __lock_acquire+0x12a6/0x1ce0 [ 762.328085][T16245] lock_acquire+0x179/0x350 [ 762.328103][T16245] ? elevator_change+0x17d/0x580 [ 762.328121][T16245] ? __pfx___might_resched+0x10/0x10 [ 762.328138][T16245] ? elevator_change+0x17d/0x580 [ 762.328153][T16245] __mutex_lock+0x193/0x1060 [ 762.328169][T16245] ? elevator_change+0x17d/0x580 [ 762.328185][T16245] ? enable_work+0x245/0x340 [ 762.328198][T16245] ? __pfx_xa_find_after+0x10/0x10 [ 762.328221][T16245] ? __pfx___mutex_lock+0x10/0x10 [ 762.328238][T16245] ? blk_mq_cancel_work_sync+0xd8/0x110 [ 762.328252][T16245] ? __pfx_blk_mq_cancel_work_sync+0x10/0x10 [ 762.328268][T16245] ? elevator_change+0x17d/0x580 [ 762.328283][T16245] elevator_change+0x17d/0x580 [ 762.328301][T16245] elv_iosched_store+0x315/0x3c0 [ 762.328320][T16245] ? __pfx_elv_iosched_store+0x10/0x10 [ 762.328341][T16245] ? __mutex_trylock_common+0xe9/0x250 [ 762.328362][T16245] ? __pfx_elv_iosched_store+0x10/0x10 [ 762.328380][T16245] queue_attr_store+0x26b/0x310 [ 762.328395][T16245] ? __pfx_queue_attr_store+0x10/0x10 [ 762.328413][T16245] ? find_held_lock+0x2b/0x80 [ 762.328426][T16245] ? sysfs_file_kobj+0xe4/0x290 [ 762.328444][T16245] ? __pfx_queue_attr_store+0x10/0x10 [ 762.328458][T16245] sysfs_kf_write+0xef/0x150 [ 762.328474][T16245] kernfs_fop_write_iter+0x3ac/0x570 [ 762.328488][T16245] ? __pfx_sysfs_kf_write+0x10/0x10 [ 762.328505][T16245] vfs_write+0x7d3/0x11d0 [ 762.328522][T16245] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 762.328537][T16245] ? __pfx___mutex_lock+0x10/0x10 [ 762.328552][T16245] ? __pfx_vfs_write+0x10/0x10 [ 762.328573][T16245] ksys_write+0x12a/0x250 [ 762.328589][T16245] ? __pfx_ksys_write+0x10/0x10 [ 762.328607][T16245] do_syscall_64+0xcd/0x4c0 [ 762.328623][T16245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.328638][T16245] RIP: 0033:0x7fdd5e98eec9 [ 762.328652][T16245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 762.328666][T16245] RSP: 002b:00007fdd5f76a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 762.328680][T16245] RAX: ffffffffffffffda RBX: 00007fdd5ebe5fa0 RCX: 00007fdd5e98eec9 [ 762.328690][T16245] RDX: 00000000000098c7 RSI: 0000200000000440 RDI: 0000000000000003 [ 762.328699][T16245] RBP: 00007fdd5ea11f91 R08: 0000000000000000 R09: 0000000000000000 [ 762.328708][T16245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 762.328716][T16245] R13: 00007fdd5ebe6038 R14: 00007fdd5ebe5fa0 R15: 00007fff61330288 [ 762.328730][T16245] [ 762.328746][ C0] vkms_vblank_simulate: vblank timer overrun [ 762.620567][ C0] vkms_vblank_simulate: vblank timer overrun [ 762.626914][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 762.661527][T16222] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 762.669063][T16236] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 763.321237][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 763.469859][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 763.909977][ C1] sl0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 20020 ms [ 763.918080][ C1] sl0: transmit timed out, bad line quality? [ 764.670600][ T51] Bluetooth: hci4: command 0x041b tx timeout