last executing test programs: 13m24.108628962s ago: executing program 3 (id=1202): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8000000000000000, 0xdb, 0x100eb4, 0xffffffffffffffff, 0x4) r1 = socketpair$auto(0x1, 0x7, 0x8, 0x0) mmap$auto(0xfffffffffffffffe, 0x2020009, 0x3, 0x800000000000eb1, r1, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80003, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xd561, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) timer_create$auto(0x2, 0x0, 0x0) socket(0x29, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r2 = socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r3, r3, 0x0, 0x2) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x101, 0x20000000) setsockopt$auto(0x3, 0x9, 0x2f, 0x0, 0x9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x0, 0x83}}, 0x0) memfd_create$auto(0x0, 0x5) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r4, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) landlock_restrict_self$auto(r4, 0x1) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000080), r0) 13m22.874482349s ago: executing program 3 (id=1209): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0) write$auto(r2, &(0x7f0000000000)='7\x81=\xa2\xad\xff\x8d\xf9\xac\xa6\xad\xfbi\xa3^}\x91\xa3}\x85\xfaP\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb\x05\x00\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0x7fff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002cbd70000008000c0002000000"], 0x1c}, 0x1, 0x300000000000000, 0x0, 0x4081}, 0x8800) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2, 0x1, 0x106) connect$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x50) setsockopt$auto(r3, 0x6, 0xd, &(0x7f0000000280)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00', 0x4) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/irq/13/smp_affinity\x00', 0x20080, 0x0) pread64$auto(r4, 0x0, 0x201, 0xc000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptya1\x00', 0x20080, 0x0) ioctl$auto(r0, 0x5410, 0x38) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r5 = socket(0x2b, 0x1, 0x0) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/o2hb/quorum_regions\x00', 0x500, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @dev={0xac, 0x14, 0x14, 0x19}}, 0x2ee0) sendmmsg$auto(r5, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x4}, 0x6, 0x5) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd13/power/autosuspend_delay_ms\x00', 0x105401, 0x0) socket(0xa, 0x801, 0x84) getpid() sendto$auto(0x3, 0x0, 0x7, 0x101, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r6 = socket(0x11, 0x80003, 0x0) mmap$auto(0x100, 0x26, 0xdd, 0x9b72, 0x1000, 0x8000028000) setsockopt$auto(r6, 0x107, 0xd, 0x0, 0x8000) 13m22.635254189s ago: executing program 3 (id=1212): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x42, 0x0) fsopen$auto(0x0, 0x1) r0 = io_uring_setup$auto(0x3ff, 0x0) mmap$auto(0x0, 0x8004008, 0x2000000329, 0x2000000010011, r0, 0x8000) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/v4l-subdev3\x00', 0x80000, 0x0) ioctl$auto(r1, 0xc0585605, r1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x6, 0x0) write$auto(r2, 0x0, 0xfffffdf1) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x169000, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mprotect$auto(0x0, 0x8000000000000001, 0x8) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) open(0x0, 0x22240, 0x55) 13m22.0145039s ago: executing program 3 (id=1216): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8000000000000000, 0xdb, 0x100eb4, 0xffffffffffffffff, 0x4) r1 = socketpair$auto(0x1, 0x7, 0x8, 0x0) mmap$auto(0xfffffffffffffffe, 0x2020009, 0x3, 0x800000000000eb1, r1, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80003, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xd561, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) timer_create$auto(0x2, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r2 = socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r3, r3, 0x0, 0x2) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x101, 0x20000000) setsockopt$auto(0x3, 0x9, 0x2f, 0x0, 0x9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x0, 0x83}}, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0x5) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r4, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) landlock_restrict_self$auto(r4, 0x1) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000080), r0) 13m21.376266907s ago: executing program 3 (id=1222): close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x1, 0x6, 0x8, 0x7fffffff, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c47, 0x4, 0x100, 0x7ffffffb, 0x101, 0x800, 0x3}, {0x8, 0x1, 0x52, 0x5, 0x2, 0x40, 0x76c5, 0x8, 0x100000000}}) io_uring_enter$auto(0x3, 0x0, 0x1, 0x3, 0x0, 0x2) fsconfig$auto_SHMEM_HUGE_DENY(0xffffffffffffffff, 0x0, &(0x7f0000000140)='\\!:\x00', 0x0, 0xffffffffffffffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/1:0/min_ratio_fine\x00', 0x80081, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000001c0)="0c152c", 0x3) mremap$auto(0x0, 0xbfffffffffffffff, 0x7ffffffffffffffd, 0x0, 0x7fffffffb000) openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, 0x0, 0x169a02, 0x0) mmap$auto(0xde1, 0x2020009, 0x3, 0x50, r0, 0x8000) r1 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000840)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x40, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/kernel/watchdog_cpumask\x00', 0x141241, 0x0) readv$auto(r1, &(0x7f00000008c0)={&(0x7f0000000040)="cb97da4025155f1d6f2a77b0e5d0f5620aad51e938017feb2cbd691dec2b4c5fa2ba5b2a29354f7ebbc60b", 0x7}, 0x403) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram6/queue/max_hw_sectors_kb\x00', 0x80000, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/waiting_for_supplier\x00', 0x80800, 0x0) sendfile$auto(0x1, r3, 0x0, 0x400007ffff000) read$auto(r2, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, 0x0, 0x28400, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r5) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x805, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) setns(0xffffffffffffffff, 0x20000) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mprotect$auto(0x0, 0x806121, 0x8) vmsplice$auto(0x1, &(0x7f0000000000)={0x0, 0x5}, 0x6, 0x8) socket(0x18, 0x2, 0x0) 13m21.02248764s ago: executing program 3 (id=1224): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) mmap$auto(0x0, 0x8, 0x8, 0xeb1, 0xffffffffffffffff, 0xa800000000000000) r0 = syz_genetlink_get_family_id$auto_nfc(0x0, 0xffffffffffffffff) sendmsg$auto_NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000008", @ANYRES16=r0, @ANYRES32], 0x14}, 0x1, 0x0, 0x0, 0x24000010}, 0x20000800) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x6}, 0x8) prctl$auto(0x6, 0x80000000004, 0x0, 0x5, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ioctl$auto(0x4000000000000c8, 0x400454cc, 0x6f) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) write$auto(r1, 0x0, 0x4) write$auto(0x3, 0x0, 0xfffffdef) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/tty41\x00', 0x109401, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) ioctl$auto(r2, 0x540a, r2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, 0x0, 0x20002, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0x6b) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xb0ff0000, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100000000) 13m5.721265289s ago: executing program 32 (id=1224): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) mmap$auto(0x0, 0x8, 0x8, 0xeb1, 0xffffffffffffffff, 0xa800000000000000) r0 = syz_genetlink_get_family_id$auto_nfc(0x0, 0xffffffffffffffff) sendmsg$auto_NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000008", @ANYRES16=r0, @ANYRES32], 0x14}, 0x1, 0x0, 0x0, 0x24000010}, 0x20000800) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x6}, 0x8) prctl$auto(0x6, 0x80000000004, 0x0, 0x5, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ioctl$auto(0x4000000000000c8, 0x400454cc, 0x6f) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) write$auto(r1, 0x0, 0x4) write$auto(0x3, 0x0, 0xfffffdef) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/tty41\x00', 0x109401, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) ioctl$auto(r2, 0x540a, r2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, 0x0, 0x20002, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0x6b) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xb0ff0000, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100000000) 9.702129015s ago: executing program 2 (id=3982): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sg0\x00', 0x0, 0x0) ioctl$auto_SG_GET_VERSION_NUM2(r0, 0x2282, &(0x7f00000009c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x386, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x23, 0x0) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r3, 0x0, 0x4) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, 0x0, 0x2482, 0x0) select$auto(0x79c9, &(0x7f0000000200)={[0x0, 0x8, 0x4, 0x7f, 0x8, 0x7, 0x9, 0x7, 0x10000, 0x0, 0x7, 0x7, 0xdb, 0x8, 0x5ae, 0x6]}, 0x0, 0x0, &(0x7f0000000140)={0x401, 0x1}) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000340), r2) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x14, r4, 0x0, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x4008010) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) getsockopt$auto_SO_NETNS_COOKIE(0xffffffffffffffff, 0x7, 0x47, &(0x7f0000000380)='-\xc8\xa5\x83\x1c\xe0\x8a\xeb\xcc\xfb\xa8\xe3k\b/*\xa7dev/audio1\x00q>l. <\xb0', &(0x7f00000001c0)=0x9) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20040011) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000280)=""/175, 0xaf) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)={0x1110, r6, 0x403, 0x70bd2d, 0x25dbdbf9, {}, [@HWSIM_ATTR_PMSR_RESULT={0x10fc, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x10f8, 0x5, 0x0, 0x1, [{0x10f4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x1004, 0x1, "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"}, @NL80211_PMSR_PEER_ATTR_RESP={0x28, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x100000000}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x7}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x5}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x8, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x29, 0x1, "82e2ab66bd8d244da24b585066fc1229bb2dd36f0f668cabb6fa1d17b0de49e19484153036"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x90, 0x1, "608ed6acf1694fda8fa797edf747132110a9ca57f2ff95db014631f2c21b52daab6278613a6acb29b720512ad5e5f4107e9002f94609a02183e85d3f8430a6264ab698101597f7317680c614d30b91a8325fa0f6494aa4350b3eb3046b18ec7a57d58f660433ba366d9d45a85d9d4b8404b4b42d8e363434ac5e377aba6c983848654e5e8b67a9a66079a0e7"}]}]}]}]}, 0x1110}, 0x1, 0x0, 0x0, 0x80}, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket(0xa, 0x1, 0x84) getpid() 8.900131747s ago: executing program 2 (id=3980): timerfd_create$auto_CLOCK_MONOTONIC(0x1, 0x6) bpf$auto_BPF_LINK_GET_FD_BY_ID(0x1e, 0x0, 0x6) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8) r0 = socket(0xa, 0x4, 0x9000300) sendfile$auto(r0, r0, 0x0, 0x8001) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop2\x00', 0x4688c1, 0x0) preadv2$auto(r1, &(0x7f0000000040)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x8000000000000, 0x2f) fanotify_init$auto(0xf8, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r2 = getpid() rt_tgsigqueueinfo$auto(r2, 0x0, 0xb, &(0x7f0000000400)={@siginfo_0_0={0x1, 0x6, 0x81, @_sigpoll={0x2}}}) socket(0xa, 0x801, 0x84) unshare$auto(0x40000080) mmap$auto(0x1, 0x1, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0x921064a0, 0xffffffffffffffff) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x145b00, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0x20499d, 0x9) unshare$auto(0x7) prctl$auto(0x35, 0x3, 0x8, 0x0, 0x0) r3 = socket(0xa, 0x800, 0x4) connect$auto(r3, &(0x7f0000000000)=@phonet={0x23, 0x1, 0x3, 0x60}, 0x10) write$auto(0xffffffffffffffff, 0x0, 0x5) close_range$auto(0x2, 0x8, 0x0) getsockopt$auto_SO_TYPE(0xffffffffffffffff, 0xf, 0x3, &(0x7f0000000140)='$\x00', 0x0) r4 = socket(0x2b, 0x1, 0x0) getsockopt$auto(r4, 0x0, 0x80, 0x0, 0x0) 6.802056995s ago: executing program 1 (id=3985): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio1\x00', 0x0, 0x0) (async) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) (async) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) (async) keyctl$auto_KEYCTL_REJECT(0x13, 0xfffffffd, 0x7, 0x204, 0x10000) (async) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mtrr\x00', 0x0, 0x0) ioctl$auto(r0, 0x400c4d04, r0) mmap$auto(0x0, 0x5, 0x2, 0xeb1, r0, 0x8000) (async) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/hid_magicmouse/parameters/scroll_speed\x00', 0x101142, 0x0) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) (async) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="01002dbd7000f9dbdf2501000000060002000100000005000700570000000800090108000000050004000300000014001f00fe88000000000000000000000000000114002000ff0100000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$auto_SW_SYNC_IOC_INC(r2, 0x40045701, &(0x7f0000000100)=0x23) (async, rerun: 32) write$auto(r1, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) (async, rerun: 32) openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_marker\x00', 0x41, 0x0) (async) r3 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'geneve0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0xab7}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8, 0x2, r4}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @HSR_A_IFINDEX={0x8, 0x2, r4}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x5}, @HSR_A_IF2_AGE={0x8, 0x4, 0x4b3d}]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) (async) sendmsg$auto_HWSIM_CMD_GET_RADIO(0xffffffffffffffff, 0x0, 0x8020) (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x10) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r5 = fsopen$auto(0x0, 0x1) write$auto_uhid_fops_uhid(r5, 0x0, 0x0) (async, rerun: 32) read$auto_rb_simple_fops_trace(r5, &(0x7f0000000180)=""/197, 0xc5) (async, rerun: 32) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, 0x0) (async) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) 6.463209985s ago: executing program 1 (id=3986): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x80802, 0x0) r1 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r2, 0x0, 0x7, 0x4cbd5d) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000100)=""/184, 0xb8) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zram0\x00', 0x6e642, 0x0) write$auto(r5, &(0x7f0000000400)='odev/audio1\x00', 0x100000a3d9) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r6 = getpid() r7 = getpid() process_vm_readv$auto(r7, &(0x7f0000000000)={0x0, 0xfff}, 0x800000002, &(0x7f0000000400)={&(0x7f0000000040), 0x1ffffffff}, 0x6, 0x0) r8 = set_tid_address$auto(&(0x7f0000000200)=0x7) sendmsg$auto_NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f00000029c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002980)={&(0x7f0000001600)={0x1350, 0x0, 0x331, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_EMA_RNR_ELEMS={0x1333, 0x145, 0x0, 0x1, [@generic="4896f7e4552875d7aa817d", @nested={0x6a, 0x53, 0x0, 0x1, [@generic="d1b27883a49c11b70121441e9a73a945b85b964f8ff3f8530f635ec4393036", @generic="a31faa6851b93ef47521ea765aba2d49db8ca7b31d9564179d66e8ed3562e1761b8a761e8999e19e621510fdefd1567205075638bb124ddda6a7a7766826579fe534f0", @nested={0x4, 0x9a}]}, @nested={0x116, 0xb2, 0x0, 0x1, [@typed={0x8, 0x2c, 0x0, 0x0, @fd=r1}, @nested={0x4, 0xe9}, @typed={0x4, 0x39}, @nested={0x4, 0xa3}, @generic="15ecf678", @generic="6a6ba3a3d56ad67473ed6dc947f4ba7de7062ed19bdd37b96edbae0b6c8a46cc7a57e02df7da741fe3b635d8667cbef01339098236a0f7bd477d3962a7eeb7e4bfb10a310f13545da1eb07c29a15d33fbcb1e1cf43edd5bbf4ac1b7cec31a1981ecfc6f155b94c9a8db8410d1a6cd832148017ed85d100e3e82b360d19c3320cec8401f6dfeafd122c393773cf7ac1af594b61bbb2d38ac86924e05a521436fa990704a8915014991f79148439b49c5c40d845330ad145b090434f82e701fc4ad92a33293f966825fa1513a898348ace9f7ff4e95bf2b3f261ac35230f93f6f625d6de7c10f5b9c8d65d1684b7a6c3beb48cfab2068979dbebcb"]}, @typed={0x8, 0x87, 0x0, 0x0, @pid=r6}, @typed={0x8, 0x7f, 0x0, 0x0, @pid=r7}, @nested={0x118d, 0x160, 0x0, 0x1, [@generic="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", @generic="19dc8ec1c667cbce5f7cf6547271fffa0406ee039231ac6e40221af4869b7f0727768338180cce37efb0472559f739423fdb2df2d03e1cc600b9d67bee35b7af5d9a9b88b9df9fd4bd7a9382f17f9378bc7c854e445476f8dbde7c8d64affa55c4be2f73cb4bf321022a4864a97a9af936d1735ffaee1fb532c1d79437884384f8ff13c5ae76209e15219deb16451ef5d5cc51545c660cea420a7242e7b91fe2a812ed811e18d1714bb3a3ef6e2d3fad4f7faf50af2aa3851d5ca9d3effd3d21dd685f", @typed={0x8, 0x1d, 0x0, 0x0, @pid=r8}, @generic="3ab9f127bb44314b483ca2ef9d012a23a5fe02da0a685f8b52ac32c0e0e8840ce91bbc6d4668c7d3393e2a60f77bfd3543205cf02e68a1bbeb97b31cb20a0654a40c191b4f34441051e7fc39880a998e9d794741cc50973d462f731569fb9ecb1e65ff96acc66094b62e97ad7ed10c44af95313ccc42e9c293934142788c9d996dc1b69b032fc2dfbe4a6d271396be555f5f6dc0454edcc0c5a4af0cbb1be5c21e7433bfa80fb3beef321127356f5afb", @generic="18f21efd7e4a8204bcc69549669d"]}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x1350}, 0x1, 0x0, 0x0, 0x855}, 0x404009c) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) sendto$auto(0x3, 0x0, 0x7, 0x101, 0x0, 0x6) 6.409964061s ago: executing program 2 (id=3987): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sg0\x00', 0x0, 0x0) ioctl$auto_SG_GET_VERSION_NUM2(r0, 0x2282, &(0x7f00000009c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x386, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x23, 0x0) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r3, 0x0, 0x4) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, 0x0, 0x2482, 0x0) select$auto(0x79c9, &(0x7f0000000200)={[0x0, 0x8, 0x4, 0x7f, 0x8, 0x7, 0x9, 0x7, 0x10000, 0x0, 0x7, 0x7, 0xdb, 0x8, 0x5ae, 0x6]}, 0x0, 0x0, &(0x7f0000000140)={0x401, 0x1}) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000340), r2) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, r4, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_PMKR0_NAME={0x89, 0x102, "986e4bab8ad45d993651008aa1854d030da9e461cde2f3979d2417e3726a5d2bdbcfdcd92a7e28c242fc0be9469484cbc3bbb798423960672dd57964d6ce4fe7ba1255529d3b1e6ad124dcfaa1d78d01068afdfe54fcca1d2ecb2438fc587df3dbf722a8f3e7e0aac3d6b6047c1c9c6dad6f12e710223a0d349576911aa6b36d36e7ea45a6"}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4008010) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) getsockopt$auto_SO_NETNS_COOKIE(0xffffffffffffffff, 0x7, 0x47, 0x0, &(0x7f00000001c0)=0x9) r6 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0xd364, &(0x7f0000000000)={0x400, 0x10002, 0x7f, 0x7, 0x6, 0x5, r6, [], {0x2, 0x4, 0x6, 0x2, 0x40, 0x4, 0x7, 0x7, 0x80000000}, {0x7, 0x1ff, 0x80000001, 0x8, 0x6b, 0x9, 0x0, 0xfffffffa, 0xb1}}) sendmsg$auto_IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20040011) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000280)=""/175, 0xaf) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)={0x1110, r7, 0x403, 0x70bd2d, 0x25dbdbf9, {}, [@HWSIM_ATTR_PMSR_RESULT={0x10fc, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x10f8, 0x5, 0x0, 0x1, [{0x10f4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x1004, 0x1, "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"}, @NL80211_PMSR_PEER_ATTR_RESP={0x28, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x100000000}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x7}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x5}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x8, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x29, 0x1, "82e2ab66bd8d244da24b585066fc1229bb2dd36f0f668cabb6fa1d17b0de49e19484153036"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x90, 0x1, "608ed6acf1694fda8fa797edf747132110a9ca57f2ff95db014631f2c21b52daab6278613a6acb29b720512ad5e5f4107e9002f94609a02183e85d3f8430a6264ab698101597f7317680c614d30b91a8325fa0f6494aa4350b3eb3046b18ec7a57d58f660433ba366d9d45a85d9d4b8404b4b42d8e363434ac5e377aba6c983848654e5e8b67a9a66079a0e7"}]}]}]}]}, 0x1110}, 0x1, 0x0, 0x0, 0x80}, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket(0xa, 0x1, 0x84) getpid() 5.86216896s ago: executing program 4 (id=3990): r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) (async) socket(0x2, 0x6, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), r1) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="07031abd70250c00587b22"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40800) (async) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) (async, rerun: 32) r4 = socket(0xa, 0x5, 0x84) io_uring_setup$auto(0x5bb7, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80002, 0x73) (async, rerun: 64) socket(0x2, 0x1, 0x84) (async, rerun: 64) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) (async) setsockopt$auto(0x3, 0x84, 0x17, 0x0, 0x27) (async, rerun: 64) setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) setsockopt$auto(r4, 0x10000000084, 0x23, 0x0, 0x8) (async) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r7, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000340)=ANY=[@ANYBLOB="3100738539a5f4ae96aec20b2b001caa30380b00d7c9115dbf4da05fa861f3f842a7472aa4ec044c949fbcd375c79fd688257759bf8c8c1d287c315b191974a4711868dbe218ef5935041e46cfee5c0995bc183395503be6588c978e0f94eccc2effdc34ac299684c6d1ef6df1bbaac024ddad5ccd89b53e3f3d", @ANYRES16=r8, @ANYBLOB="010026bd7000fbdbdf2506000000"], 0xffffffffffffff3d}, 0x1, 0x0, 0x0, 0x20000001}, 0x48080) sendmsg$auto_NFSD_CMD_LISTENER_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x17, r8, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000884}, 0x50) (async) rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100)='./file1\x00') (async) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) 5.527875866s ago: executing program 4 (id=3991): socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/vkms/clients\x00', 0x2100, 0x0) ioctl$auto(r0, 0x80026f47, r1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x2, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x4140, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0xffffffffffffffff, 0xc0000001, 0x8}, 0x6f4) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x82002, 0x0) write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000003900)="fb", 0x1) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/nvme_core/parameters/iopolicy\x00', 0x2400, 0x0) write$auto_ecryptfs_miscdev_fops_miscdev(r2, &(0x7f0000000000)="2bdb669d761725d90713eeffbbdee4d9ba5770d27f413569c89a", 0x1a) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000000c0)=""/7, 0x7) 5.399904203s ago: executing program 2 (id=3994): mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x0, 0x4, 0x2, &(0x7f0000000500)=0x3, 0xa, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_fd=0x5, 0x7f, 0x9c, 0x7b2, 0x1, @relative_fd=0x2, 0x80}, 0x96) bpf$auto(0x18, &(0x7f00000002c0)=@bpf_attr_0={0x0, 0x10, 0x1, 0x6, 0x8, r0, 0x400, "432a8091dac3bd4a0411088194f19cb8", 0x0, r2, 0x400, 0x400, 0xff, 0x64, r1, r2}, 0x9) r3 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x1) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001140), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfb, {0x2, 0x0, 0x14}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x80005}]}, 0x24}, 0x1, 0x1400, 0x0, 0x80}, 0x20000084) sendmsg$auto_NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000fc0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000540)={0xa34, r4, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x80}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x97, 0xbd, "ebeb45619933ba6db863ff02adc22fee24cf7213d9cfec45aa62b942dc5dc3d279e95282e9a05b37655e54ff937cffdb6cd1a30e3e305383926c7a146ec1a4e0a3e7f2009749bb94702472549bea21f7ae4a30866bb517b4270ace78c31a93c4e588fdd97079c14d199499401faee8986908fe2f8fb5244880af58c2f2e686a4d6e7fedb490d8b9e2390531b5c5124723eb80a"}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x9}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0xaae}, @NL80211_ATTR_REKEY_DATA={0x121, 0x7a, 0x0, 0x1, [@generic="2812781906e1404798e3334ac0ca7f99c7c0c0485ff3c559562d82ca6e4d6d3bfaedd0b0874dd43306759da23bc3f1bfc044c821991ab0def93f8a3d0062f98c45bd1393748464ac54f8db70183aff33cdff522db1aa86e6c000fd71012963bb33521d061fd5c577bcc971aef3aaabf12856fecbc2c0c6b36c", @typed={0xa4, 0x159, 0x0, 0x0, @binary="fbeb6f4ffd695492b5a89d2495fe8f2c89b7cb7767632dc9838717aad81bd0cc257f795625c51328086e79729c7cc935221865c6b838b07add976ecd16a96737c035aaffd77b7a9b66b4a7f012932ec3846932be16502669257dec6a06e32dc5889f4cb4fe25b6cecfcfa6f7e8deb897eaf3426c9aa720643cefe8f8e018d63f21bde76e0d20244f460f3bb842de48c4cc3933c8f25110940158f8b5f32a4657"}]}, @NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0x840, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x521, 0x2, "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"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x1}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x305, 0x2, "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"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x6}]}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x7}]}, 0xa34}, 0x1, 0x0, 0x0, 0x40000}, 0x1) futex_wake$auto(0x0, 0x9, 0xffffffff, 0xa) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c72da808bf9779d790fb28"], 0x2c}, 0x1, 0x0, 0x0, 0x4000014}, 0x400c000) r7 = socket(0x3e, 0x7818cad34ebf015d, 0x800004) write$auto(r7, &(0x7f0000000000)='-\x00', 0x2fb) write$auto_force_wakeup_fops_hci_vhci(r3, &(0x7f0000000000)="4dceb5e4a889afe3db73e91e6bb8851fc7e9584568639797b0c65ab54164af8f0c2d39fb8024546c1035b00441d1f303dca47733956a944517f1f49ec687737c30fd17d00a8f3ee47626c6442fd8a31ddaf5ef1602e349d7333be79c354caa2879d7e0c44373d34705251381f30f2540ed69090f62bd638ae1be4053ae51d205a9fc26f725e6e23a93a0a659c658af866f3790814266a55345e6f36c91f79441d7565c017abb0d99b4c84a8d09be4a4cb4d45a9b4d103df79e6bb7f41ce9a6c8a5ebcaeafdc79db1cf51f65cecc5", 0xce) 4.860428067s ago: executing program 0 (id=3995): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sg0\x00', 0x0, 0x0) ioctl$auto_SG_GET_VERSION_NUM2(r0, 0x2282, &(0x7f00000009c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x386, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x23, 0x0) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r3, 0x0, 0x4) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, 0x0, 0x2482, 0x0) select$auto(0x79c9, &(0x7f0000000200)={[0x0, 0x8, 0x4, 0x7f, 0x8, 0x7, 0x9, 0x7, 0x10000, 0x0, 0x7, 0x7, 0xdb, 0x8, 0x5ae, 0x6]}, 0x0, 0x0, &(0x7f0000000140)={0x401, 0x1}) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000340), r2) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x14, r4, 0x0, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x4008010) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) getsockopt$auto_SO_NETNS_COOKIE(0xffffffffffffffff, 0x7, 0x47, &(0x7f0000000380)='-\xc8\xa5\x83\x1c\xe0\x8a\xeb\xcc\xfb\xa8\xe3k\b/*\xa7dev/audio1\x00q>l. <\xb0', &(0x7f00000001c0)=0x9) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20040011) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000280)=""/175, 0xaf) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)={0x1110, r6, 0x403, 0x70bd2d, 0x25dbdbf9, {}, [@HWSIM_ATTR_PMSR_RESULT={0x10fc, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x10f8, 0x5, 0x0, 0x1, [{0x10f4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x1004, 0x1, "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"}, @NL80211_PMSR_PEER_ATTR_RESP={0x28, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x100000000}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x7}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x5}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x8, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x29, 0x1, "82e2ab66bd8d244da24b585066fc1229bb2dd36f0f668cabb6fa1d17b0de49e19484153036"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x90, 0x1, "608ed6acf1694fda8fa797edf747132110a9ca57f2ff95db014631f2c21b52daab6278613a6acb29b720512ad5e5f4107e9002f94609a02183e85d3f8430a6264ab698101597f7317680c614d30b91a8325fa0f6494aa4350b3eb3046b18ec7a57d58f660433ba366d9d45a85d9d4b8404b4b42d8e363434ac5e377aba6c983848654e5e8b67a9a66079a0e7"}]}]}]}]}, 0x1110}, 0x1, 0x0, 0x0, 0x80}, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket(0xa, 0x1, 0x84) getpid() 4.741505728s ago: executing program 4 (id=3996): mmap$auto(0xe80c, 0x2020089, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/kexec_crash_size\x00', 0x102, 0x0) write$auto(r0, &(0x7f0000000480)='7\x00\\\xa0\x04\x9c\"\xa9Nd_\xff\xa0k\xd8\xc9\xba\x00\xb5\x89\x8cg\xa84\xd8D)\xfdcR8\xdb\x98\xc5\xd7\x94\x94\xda\xc0r\x8f)\xbb_r\xac\x98\xa2k\x9bu=>\xce\x8d\xa2\fZ\xfa\x0f\x87R\xf7\x05OA\xfak\xba0\xab\xe1\xffm\xf9t\x012A\xc8%H\x88\xaej\xda\xae\x1dO\xd7\x88?\x19\xf3\x068\xb4e\xb5\x93\x9a\xb9|Kh\xc2d\xda\xb7\xe5\x1fb~8\xf2q\x0e\x98A[\xbb\xa9\xdc[8\xfc\xc6\x9f\xa3\xb5\xdf\x1a', 0x84) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x1c, r3, 0xb01, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000050}, 0x240088e4) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) r5 = openat$auto_ht40allow_map_ops_debugfs(0xffffffffffffff9c, 0x0, 0x181000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000cf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r6 = open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) read$auto(r5, 0x0, 0x10) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000380)={0x5, [0x53, 0xf, 0x659], [{0x7, 0xffffff01, 0x1, 0x1}, {0xab6, 0x4, 0x1, 0x0, 0x0, 0x1}, {0x8, 0x6}, {0x4, 0x10, 0x1, 0x1}, {0x0, 0x2, 0x1, 0x1, 0x1}, {0x5, 0x1, 0x1, 0x1, 0x1}, {0x4, 0x0, 0x0, 0x1, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1}, {0x5, 0x7ff, 0x0, 0x1, 0x0, 0x1}, {0x6, 0x6, 0x1, 0x0, 0x1}, {0x4, 0x40, 0x0, 0x1, 0x0, 0x1}, {0x3, 0x401, 0x1, 0x0, 0x1, 0x1}], 0x4, 0x9, 0x10, 0x9b1, 0x0, 0x1, 0x9, "3d60f1799d5517614cb5db232a171fe794feb32c6fa42fb100e50cfc95618db7f4466f2e7d6b4e383e01de0564711212835f5ea4b55685c9784003f654a77a10"}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x4040, 0x0) unshare$auto(0x40000080) r7 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x1, 0x9, 0x0, 0xeb66) connect$auto(0x3, 0x0, 0x51) write$auto(r7, 0x0, 0x800000006) r8 = fcntl$auto_F_GETOWN(r6, 0x9, 0x5) prctl$auto_PR_SET_MM_START_BRK(0x400, 0x6, r8, 0x4, 0x7) ioctl$auto_SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000180)="dd06d1") socket(0x29, 0x2, 0x0) 4.263177663s ago: executing program 0 (id=3997): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000800), r0) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x4800) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000900), r0) r2 = mq_open$auto(0x0, 0x7e, 0x9, 0x0) mq_notify$auto(r2, &(0x7f0000000180)={@sival_ptr=0x0, @inferred=r2, 0x0, @_sigev_thread={0x0, 0x0}}) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x401, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xc, 0x800008000) writev$auto(0x4, 0x0, 0x1) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) copy_file_range$auto(0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffff9, 0xffffffffffffffff, 0x0, 0x8000000000000002, 0x0) ioctl$auto_BLKPG2(r4, 0x1269, 0x0) prctl$auto(0x4, 0x1, 0x0, 0xfffffffffffffffd, 0x0) mmap$auto(0x7, 0x400000000020009, 0x4000000000df, 0xeb1, r3, 0x7dfd) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nbd7\x00', 0x771402, 0x0) r5 = socket(0x11, 0x80003, 0x300) pipe2$auto(&(0x7f00000000c0)=r5, 0x100003) writev$auto(0xca, &(0x7f0000000080)={&(0x7f00000000c0), 0x2}, 0x2000000000000003) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(r6, 0x1276, 0x0) r7 = openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x782, 0x0) read$auto_transaction_log_fops_(r7, &(0x7f0000000100)=""/3, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x23, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) 4.055009887s ago: executing program 2 (id=3998): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) prctl$auto(0x35, 0x2, 0x0, 0x0, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x40f4, 0x1, 0x8e051, r0, 0x4000) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x480, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) mmap$auto(0x9, 0x7fffffff, 0x80000000c1, 0x1fffff, r0, 0xffffffffffff8001) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000180)=""/179, 0xb3) madvise$auto(0x0, 0x1010001, 0x100000003) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/shrink_underused\x00', 0x1a1842, 0x0) r1 = io_uring_setup$auto(0x406, 0x0) io_uring_enter$auto(r1, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) pread64$auto(r1, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/shrink_underused\x00', 0x1, 0x1) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000100)=@xdp={0x2c, 0x1, 0x0, 0x1a}, 0x54) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) socket(0x10, 0x2, 0x4) r2 = socket(0xa, 0x0, 0x4e) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) r4 = ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto_CEC_DQEVENT(r4, 0xc0506107, &(0x7f0000000300)={0x7, 0x3ff, 0x0, @state_change={0x554, 0x7f}}) ioctl$auto(0x3, 0xae41, r2) ioctl$auto(0x3, 0x4008ae48, 0x38) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x400c890}, 0x800) openat$auto_l2cap_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 3.473807652s ago: executing program 4 (id=3999): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) r0 = socket(0x21, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, r0) r1 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, 0x0, 0x101102, 0x0) write$auto_proc_pid_attr_operations_base(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000180)=ANY=[@ANYBLOB="015f8eb0a69c0f0000000092436d70b0bd1500c0", @ANYRES16=r1, @ANYRES32=0x0, @ANYRES32=r5, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x40400d0}, 0x4000000) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), r2) syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(0xffffffffffffffff, 0x0, 0x20000000) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) ioctl$auto_SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, 0x0) r6 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000003b80)='/dev/snd/pcmC0D0c\x00', 0x8100, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x1, 0x4000010, 0x100, 0x6, 0x1, 0x80a, 0xffffffffffffffff, [0x0, 0x3ff, 0x8], {0x4, 0x10001, 0x3, 0x2de, 0x8e, 0x1, 0x101, 0x8, 0x200000d}, {0x6, 0x3, 0x52, 0x1a4, 0x10001, 0x9, 0x76c5, 0x8, 0x400}}) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfffffffffffffffe}, 0x800000001, 0x0, 0x9, 0x2) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE2(r6, 0xc2604110, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd7\x00', 0x400000, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x88800, 0x0) bpf$auto(0x0, 0x0, 0xee) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x100000000, 0x66) mincore$auto(0x1000, 0x8001, 0x0) openat$auto_generic(0xffffffffffffff9c, 0x0, 0x301483, 0x0) close_range$auto(0x2, 0x8, 0x0) 2.785960264s ago: executing program 1 (id=4000): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='./file1\x00', 0x40880, 0x528) write$auto(r0, 0x0, 0xfffffdf1) mmap$auto(0x0, 0x99, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x0, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) fsopen$auto(0x0, 0x1) r2 = getpid() r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x88800, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r3, 0xc0405519, &(0x7f0000000040)={@inferred=r2, 0x555c, 0xffff, 0x1, "8f9638544ae4bbdf48e497dbb5a3760f9b6b2c854e493a712fcbb4034dde3ba72adae5bfa41dba811bf5488f", @inferred=r2}) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x100, 0x0) r4 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x20080, 0x0) poll$auto(&(0x7f0000000040)={r4, 0x1000, 0x1c9}, 0x2, 0x7) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x82, 0x0) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/bridge/bridge-nf-pass-vlan-input-dev\x00', 0x202, 0x0) sendfile$auto(r5, r5, 0x0, 0x200) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x800, 0x0) mmap$auto(0x0, 0xe883, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0xfffffffffffffffc, 0x40000a, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) madvise$auto(0x110c230000, 0x8031ca, 0x9) madvise$auto(0x110d230000, 0x1, 0x9) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x0, 0x0) sendfile$auto(r6, r7, 0x0, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/audit\x00', 0x2, 0x0) 2.452595623s ago: executing program 4 (id=4001): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/unprivileged_bpf_disabled\x00', 0x121a01, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) fsopen$auto(0x0, 0x1) madvise$auto(0x100000001, 0xfffffffffffffffa, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media1\x00', 0x22001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01032cb57000fbdbdf250a0000000500020000000000050002000000000008000a000f000000060001002200000006e7000002000000060001000400000008000a00faffffff"], 0x4c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x102, 0x0) ioctl$auto_SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r3, 0x0, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x2000c840) madvise$auto(0x110c230000, 0x1, 0x9) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000000000008000) r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, r4, 0x8000) select$auto(0x8, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/usb_storage/parameters/delay_use\x00', 0x181942, 0x0) sendfile$auto(r4, r3, 0x0, 0x400100000016) capget$auto(&(0x7f0000000040)={0x7, 0xffffffffffffffff}, 0x0) 1.947063746s ago: executing program 0 (id=4002): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) capset$auto(&(0x7f00000003c0)={0x20080522}, 0x0) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x109801, 0x0) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socket(0x15, 0x5, 0x0) getsockopt$auto(r1, 0x114, 0x271b, 0xfffffffffffffffc, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) socket(0x29, 0x2, 0x0) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:R\xcc\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) io_uring_setup$auto(0x6, 0x0) bpf$auto(0x1, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x8000, 0xf9c, 0x466, 0x9, 0x3, 0x4, 0x2, 0x4, 0x200, 0x3, 0xb6, 0x4, 0x6, 0x9}, 0xa3) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x7e) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) ioctl$auto(r0, 0x92106410, 0xffffffffffffffff) 1.712281859s ago: executing program 0 (id=4003): close_range$auto(0x2, 0x8, 0x0) r0 = memfd_secret$auto(0xffffffff) setsockopt$auto_SO_PREFER_BUSY_POLL(r0, 0x10001, 0x45, &(0x7f0000000000)='}/!^}/\x00', 0x4) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000040)={0x0, 0x318f, 0x4, 0x0, 0xff, "50cfeeca8e00"}) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x80000002, 0x1d, 0x3000, 0xfffffff8, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x6, 0x29c, 0x1, 0x7f, 0x0, 0x6, 0x1}, {0x10100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) socket(0xa, 0x1, 0x7) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0x5}, 0x5, 0x80000000) close_range$auto(0x2, 0x8, 0x0) mknod$auto(0x0, 0x1081, 0x3) mknod$auto(0x0, 0xcb, 0xfffffffa) r1 = waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x7, 0x0) timerfd_gettime$auto(0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) 1.488310204s ago: executing program 2 (id=4004): openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mprotect$auto(0x1000, 0x84a5, 0xfffffffffe) ioctl$auto(0xc8, 0x801054db, 0xffffffffffffffff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/amidi2\x00', 0x2841, 0x0) pkey_free$auto(0x20001) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x4, 0x40, 0xd2d2, 0x0, 0xb, "000001004e050d08000800"}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x200000000eb1, 0x401, 0x8000) unshare$auto(0x40000080) setfsuid$auto(0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kallsyms\x00', 0x20100, 0x0) pread64$auto(r1, 0x0, 0x8, 0x8000) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x0, 0x4, 0x0, 0x0, 0x0, 0x400000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r3, &(0x7f0000000080)={0x0, 0x1000}, 0x3) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x7, 0x28000) r4 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket(0x10, 0x2, 0x9) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="e8f304a8b751da49beda9f3451e67b327c5b22175892efd64e02e2707c8ae13d129f20ea6654be0f5534c62e8fe22033db984543eed27bd2024ac7491ff39b8c27e7dd4537779567096c987abb943fbeb2277949140e18f2d1eeb8cda2bf05cfc3ea56597d47a1e3b5bbe6c91d02ce0bda3f5d73f3eb6f87241fc56d627a26af6b54eacaa08dd27afd98d690676e19e440f975ec730e7df74c67ba32321069466cfe5ca22f015589a3daa7d50623ccf5a57ebd", @ANYRES16=0x0, @ANYBLOB="040028bd7000fbdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000000) poll$auto(&(0x7f0000000180)={r4, 0xfff7, 0x9816}, 0x7f, 0x9) ioctl$auto_VHOST_SET_OWNER(r6, 0xaf01, 0x0) syz_genetlink_get_family_id$auto_smbd_genl(0x0, 0xffffffffffffffff) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r3, 0x0, 0x100408c0) 1.346425284s ago: executing program 0 (id=4005): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sg0\x00', 0x0, 0x0) ioctl$auto_SG_GET_VERSION_NUM2(r0, 0x2282, &(0x7f00000009c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x386, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x23, 0x0) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r3, 0x0, 0x4) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, 0x0, 0x2482, 0x0) select$auto(0x79c9, &(0x7f0000000200)={[0x0, 0x8, 0x4, 0x7f, 0x8, 0x7, 0x9, 0x7, 0x10000, 0x0, 0x7, 0x7, 0xdb, 0x8, 0x5ae, 0x6]}, 0x0, 0x0, &(0x7f0000000140)={0x401, 0x1}) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000340), r2) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x14, r4, 0x0, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x4008010) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) getsockopt$auto_SO_NETNS_COOKIE(0xffffffffffffffff, 0x7, 0x47, &(0x7f0000000380)='-\xc8\xa5\x83\x1c\xe0\x8a\xeb\xcc\xfb\xa8\xe3k\b/*\xa7dev/audio1\x00q>l. <\xb0', &(0x7f00000001c0)=0x9) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20040011) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000280)=""/175, 0xaf) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)={0x1110, r6, 0x403, 0x70bd2d, 0x25dbdbf9, {}, [@HWSIM_ATTR_PMSR_RESULT={0x10fc, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x10f8, 0x5, 0x0, 0x1, [{0x10f4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x1004, 0x1, "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"}, @NL80211_PMSR_PEER_ATTR_RESP={0x28, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x100000000}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x7}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x5}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x8, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x29, 0x1, "82e2ab66bd8d244da24b585066fc1229bb2dd36f0f668cabb6fa1d17b0de49e19484153036"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x90, 0x1, "608ed6acf1694fda8fa797edf747132110a9ca57f2ff95db014631f2c21b52daab6278613a6acb29b720512ad5e5f4107e9002f94609a02183e85d3f8430a6264ab698101597f7317680c614d30b91a8325fa0f6494aa4350b3eb3046b18ec7a57d58f660433ba366d9d45a85d9d4b8404b4b42d8e363434ac5e377aba6c983848654e5e8b67a9a66079a0e7"}]}]}]}]}, 0x1110}, 0x1, 0x0, 0x0, 0x80}, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket(0xa, 0x1, 0x84) getpid() 1.293119838s ago: executing program 1 (id=4006): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/auth.unix.ip/channel\x00', 0x8f3b7a51b80ebd01, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) ioctl$auto(0x3, 0x40081271, 0x38) (async) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000040)="205c2020207e5cc0023af10e9bfa1babfa203753ca9a20370a", 0x19) (async) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa100, 0x0) 1.093503125s ago: executing program 1 (id=4007): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/mac80211_hwsim/hwsim0/net/wlan0/flags\x00', 0x189082, 0x0) sendfile$auto(r0, r0, 0x0, 0x1) bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000000)=@link_detach={r0}, 0x90) futex$auto(0x0, 0x8, 0x3d, 0x0, 0x0, 0x0) futex$auto(0x0, 0xb, 0x1, 0x0, 0x0, 0xfffffffa) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="13002cbd7000dddbdf250200000008000300", @ANYRES32=r3, @ANYBLOB="0800610001000000"], 0x24}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000400), r2) sendmsg$auto_ETHTOOL_MSG_MM_SET(r2, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYRES16=r4, @ANYRES16=r4, @ANYBLOB="04002cbd7000fddbdf252b0000000500070000000000050002000100000008000900fffffeff0500030000000000080005000600000008000900fffeffff"], 0x4c}, 0x1, 0x0, 0x0, 0x24000055}, 0x200408c1) sendmsg$auto_NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000ffdbdf250a0000000500ee007b0000000500d200f80000000400dd0008009e05000000000c0058000900000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x640c5}, 0x20040000) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c00000058323b6bb1cdcf057ae877aa515d9bbd468d66097d3a659e5027d88a356ed3435d1792572009ee2703441cce6a6284a60b09e3d22711c847724110742f21d9475417669e0aa44b6f57990c4d0fd424e202909aee368224b3534a9460428b669393a915cf7a04e8d1ff9e97257f3ff0c9db21", @ANYRES16=r5, @ANYBLOB="00012cbd7000fcdbdf251100000008002a0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x804) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40000, 0x84) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/devices/pci0000:00/0000:00:01.1/ata1/host0/target0:0:0/0:0:0:0/block/sda/queue/zoned\x00', 0x1cbb01, 0x0) write$auto(r6, &(0x7f0000000040)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0x6) write$auto_proc_clear_refs_operations_internal(0xffffffffffffffff, &(0x7f0000000280)="20056e823adee8a5e350c13bf4491ef375b91e644326f5ffc7cc83860dad119d80f3347b454248bf7f89a33ca43b41b079767a671b1a055fc51818d9c83ccf97c0e36277608c8f0955d6ed35cf4c5aaaaa0dec6be2054519d65eaa8ce553d7f69307bbaed6339ae1252c614f61186bdda715016f965293e9db6f1f273994b7ca195592a5355e1998cc8fc2b4e5ebd8b904ae10e519c7fa5ffe3feeab611ebf9faaebef662bb7f78c37e5d8a28c4537", 0xaf) madvise$auto(0x0, 0x2003f2, 0x15) ioctl$auto_BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0) madvise$auto(0x0, 0x1010001, 0x100000003) madvise$auto(0x1000, 0x400050, 0x9) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/error_log\x00', 0xb01, 0x0) write$auto(0x1, 0x0, 0x80000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 907.758017ms ago: executing program 0 (id=4008): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x1, 0x84) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x2, 0x0) unshare$auto(0x40000080) setitimer$auto(0x2, &(0x7f0000000040)={{0x0, 0x5}, {0x0, 0x8}}, 0x0) r0 = socket(0xa, 0x1, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x48, r2, 0x1b, 0x70bd25, 0x25dfdbf9, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x14, 0x3, 0x0, 0x1, [@nested={0x10, 0xc, 0x0, 0x1, [@nested={0xc, 0x5, 0x0, 0x1, [@typed={0x8, 0x3b, 0x0, 0x0, @fd=r1}]}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}, @OVS_PACKET_ATTR_PROBE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x400c880) bind$auto(r0, &(0x7f0000000180)=@l2={0x1f, 0x0, @any, 0x10, 0x2}, 0x2) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), r0) r3 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmmsg$auto(r3, &(0x7f00000000c0)={{&(0x7f0000000000), 0x5aa, 0x0, 0x8, &(0x7f0000000040)="523ed1e026", 0x8, 0x1}, 0x5}, 0x2, 0x101) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x12, 0x93f, 0x1fee1, 0x3, 0x6, 0xfffffffffffffffe, 0x9, 0x5, 0x8005, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x8, 0x4, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x1000000000000, 0xfffffffffffffffc, 0x0, 0x7fffffffffff, 0x9, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0x82) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x2000000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r5 = socket$nl_generic(0x10, 0x3, 0x10) landlock_create_ruleset$auto(&(0x7f0000000140)={0x388, 0x71d6b3d2, 0x3}, 0x6000000000, 0x6) r6 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r5) sendmsg$auto_NFSD_CMD_LISTENER_SET(r5, &(0x7f00000050c0)={0x0, 0x5c1e, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r6, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r7, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) setpriority$auto(0x2, 0x0, 0x80000) 198.769709ms ago: executing program 4 (id=4009): sendmmsg$auto(0x3, 0x0, 0x3, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/conf/wlan0/route_localnet\x00', 0xd7a185e906c5fc10, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x8, 0x1ff, 0x7c9, 0x2a, 0x4909b6f5, 0x1ffe0, 0x7, 0x3, 0x20000009, 0x9, 0x3, 0x4, 0xffffffffffffffff, 0x68d, 0x9, 0x8000, 0x7fffffff, 0x80, 0x3, 0xb5d, 0xa, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x8000000000000000, 0x101, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff7fffffffffffe, 0xffffffffffffffff, 0x6, 0xfffffffffffffff5, 0x0, 0x0, 0x80000, 0x20000000000002, 0xffff, 0x10, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x40090, 0x6, 0xbdcc, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20000008}, 0x40000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/dummy0/flags\x00', 0x2c62, 0x0) write$auto(r0, &(0x7f0000000580)='0\x00\xa6\xcc\r\x91QU\x9d\x15\x84\xab`\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04\x7f\x00\x00\x00\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18K\xb0D\x91OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfdFq\xe7\x03\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10)kcsZ^3H\xf1\xdf\x96\xfd)\xf3\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xaeO\x03\x91p6\xa0\xb9g.\xde\xd4`\xfa\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\x88\xd8\'\xe4\xf8\xe9f{\xf7gl\r\xdf\xc8n)J\xa2\xfa\x03\xbe%\xf6\xd1\xfb\xbcg\"\a\x03\xdef\x10K\xa1\x80z\xd1Z{\xb0\x91\ft\xf5\xaf:\xc9\x02~`\x11\x15\xa3\xd9y\xb3)~\xb6\xaaB\x16O\x1c\xdeY2\x8f*R\xf6\xb5m\xc6\x91+\x14\x04\xf7*9\x9e\x04\xe3\x03\b\x02kud\xf8j\x95I.\x04\\\x80S\xa5\n\x14\x05\x12\n^\xc9|\xf8.>\x8b\xb1y\xe7\x96\x9asW\x10}(\x9c\xc9\x84\xec\xf68\xb7\xd7\xec\xc9F\xe1v\x9aD\t\xc6f\ay\xafX\x96\xcc\xa8\xae\xcb\xac\xd5\xd4\xee1\"L\xacC\t\x81\x8b3\xc6\x1e\xbbwlK\xd2\x9e\xc8\xde\xed\xb6\xbeX\xe4`s\xec\xec]\xb3\xfa\xd8\x86\x1bP\xa3\xc4\xb4\x84\xd2\x94Z\xbeA\x1f,a\a\xf7\x7f\x12\xa9E\xfb\xcd\xa2@\x83<\xe0\xaf\xc5\'\xcf\xa3\xf2KD\x80\x8c\xac\xb1\xd6\r\xf4+\x9cSx\xa3\xf3mE\xbbD\xd3\x1bK\xdc\xc7\x9c\xa6M3\x1f\xac{\xc1\x036\xd16\b\x00\xa7\xc9&\x92\x0e~\x05LM \xb8\xf6.,\xf8\xa8\a\xa5)\x91\xc4\xe9P\xa6\xda\xef\xe1\xbdu\xa2\xb7\xa3\x0eZ\xdf\xaf\x87\xa10\xa0\xc8\xa4\xa0O\x96\xeb\xb9\x10\xf3]\\8\v\xcc\x16\xca\xadm\xd3\xcc\xa4\\\x192\xc6\xb1i/\x90$\x05Y>soi)\x12\x05@\a\xe9c\x17\x818\x1e\x8fn\\)\x1a\x96\xc0\xf6\xa4\xf1]\xfe\xa7\x1e\x02\xd3\x1f\x97MT\xd5g\x1e\x04sD\x92+', 0x9) (async) write$auto(r0, &(0x7f0000000580)='0\x00\xa6\xcc\r\x91QU\x9d\x15\x84\xab`\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04\x7f\x00\x00\x00\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18K\xb0D\x91OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfdFq\xe7\x03\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10)kcsZ^3H\xf1\xdf\x96\xfd)\xf3\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xaeO\x03\x91p6\xa0\xb9g.\xde\xd4`\xfa\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\x88\xd8\'\xe4\xf8\xe9f{\xf7gl\r\xdf\xc8n)J\xa2\xfa\x03\xbe%\xf6\xd1\xfb\xbcg\"\a\x03\xdef\x10K\xa1\x80z\xd1Z{\xb0\x91\ft\xf5\xaf:\xc9\x02~`\x11\x15\xa3\xd9y\xb3)~\xb6\xaaB\x16O\x1c\xdeY2\x8f*R\xf6\xb5m\xc6\x91+\x14\x04\xf7*9\x9e\x04\xe3\x03\b\x02kud\xf8j\x95I.\x04\\\x80S\xa5\n\x14\x05\x12\n^\xc9|\xf8.>\x8b\xb1y\xe7\x96\x9asW\x10}(\x9c\xc9\x84\xec\xf68\xb7\xd7\xec\xc9F\xe1v\x9aD\t\xc6f\ay\xafX\x96\xcc\xa8\xae\xcb\xac\xd5\xd4\xee1\"L\xacC\t\x81\x8b3\xc6\x1e\xbbwlK\xd2\x9e\xc8\xde\xed\xb6\xbeX\xe4`s\xec\xec]\xb3\xfa\xd8\x86\x1bP\xa3\xc4\xb4\x84\xd2\x94Z\xbeA\x1f,a\a\xf7\x7f\x12\xa9E\xfb\xcd\xa2@\x83<\xe0\xaf\xc5\'\xcf\xa3\xf2KD\x80\x8c\xac\xb1\xd6\r\xf4+\x9cSx\xa3\xf3mE\xbbD\xd3\x1bK\xdc\xc7\x9c\xa6M3\x1f\xac{\xc1\x036\xd16\b\x00\xa7\xc9&\x92\x0e~\x05LM \xb8\xf6.,\xf8\xa8\a\xa5)\x91\xc4\xe9P\xa6\xda\xef\xe1\xbdu\xa2\xb7\xa3\x0eZ\xdf\xaf\x87\xa10\xa0\xc8\xa4\xa0O\x96\xeb\xb9\x10\xf3]\\8\v\xcc\x16\xca\xadm\xd3\xcc\xa4\\\x192\xc6\xb1i/\x90$\x05Y>soi)\x12\x05@\a\xe9c\x17\x818\x1e\x8fn\\)\x1a\x96\xc0\xf6\xa4\xf1]\xfe\xa7\x1e\x02\xd3\x1f\x97MT\xd5g\x1e\x04sD\x92+', 0x9) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x8502, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) (async) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) (async) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x700fdef) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x89b0, &(0x7f0000000140)={'macvlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x89b0, &(0x7f0000000140)={'macvlan1\x00'}) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_plb_idle_rehash_rounds\x00', 0x0, 0x0) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_plb_idle_rehash_rounds\x00', 0x0, 0x0) fsconfig$auto_XFS_DAX_NEVER(r2, 0x4, &(0x7f0000000040)='^\x00', &(0x7f0000000380)="c270ed66e6ca5cf9c9b9b0073c9a98c3bf082a3d378acd37678093d0b0b83d1b51bf7be9b4be1cc2f81e955e6ff377e878414106a9855934152d28191773d695d0443f7cf7a7ff271fc096bda619ca801f0bd643a4018a516c1b3a8cb347cd57e129e62d7352a2c00f2eeefd259d2ffc19f1206deefde46c280aa50f6ecad4cd5171032e41b627bfe755ec28416984952b700a12cb51a0e030b6460207c3f8443d3cd1d402de8af1dac1038f89dcd3850491610ac72fff966390efa2b4c68664445ffad4c5cb216e43d148a44ac95e1f546810f6881a391c93d76dc71926ddeb8b0d02bb3bc045540fc42eac48b5d2d5aed97c2ee55309fe6eb3434665", 0x2) writev$auto(r2, &(0x7f00000000c0)={0x0, 0x710c}, 0x6) (async) writev$auto(r2, &(0x7f00000000c0)={0x0, 0x710c}, 0x6) write$auto(r2, &(0x7f0000000640)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x14\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\x00\x00\x00\x00[r4G\xc5\x8d\xcb\x10\xae\x88\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C\xf8B^`\xf8\xc2\x0e\xfc>\xa1\xc5\x1dc\xb5S\xb0eX\xba\xe2\xb8\x17\xd1?\xec\xa3Rc2U\xc2OD\x1cl\xc6\xf0,4\x84A\x8f\xa0\xecJ\xb7\xfcnDO\n[^\xfc\xee\xf4\x98\xb3:K\x05\xd6ElP\xb1\xdc\xa2cg\xafENM\xb2\x1e\xfe\x0f}\xba\x83\x00\x81\x1at\xbf\x9ezF+x\xec\xe1`Qfm:\xfd\xeek\xa6#\xde\x16\x8f\xe9\xe9\xccbP\xb2z\xe1\xed\x97\x11\xaa\xea@\xee:\r\xb8\xe5\xd9CNG\x94\xe5\xcf\xfc3\xc7Z8\x03\x00\x00\x00\xc9\xe2ny\xa7\xd4\xb5A\x8e\xe2\x87\xf0\x17\x90%c\x1dE\xb1j2\x13\x10\xc2\x98\xeak\xa8\x10\xa0\x0f\xe8\x828\"9\xc1\xf2\xb6\x18\x9atD\xf13\xb2+$\x06q\xd6\x8e\xc18\x85\xd2\xd2\x1f\x97\x1d\xd7\x88\"\x01w\xaa\\\f\x98\xbf\xff\xeb\xceg\xa7\x8e\x84B\x7fn\xddu\xe0i\xd3\xf8\x8e\xf4\x111\x86\xfd\xcb\xa1\xd41\x8cI\xe0\xfa\xb3/(s\xd6\xd8\xcdCr\xf5MZ\xb8\xd4\x97\xae1\xc23ph\x84-@\xd4N_\n\xef\x86\x93T\\x\xf2\xce \xfe\v2E\xcatr\x00\xe5\xd7\xb2\x13\xe6\xd8@\x00|f\xaa\xadX@!\xc2]\xf9\x80\x9a\x1d\xcbt;\xfew\x14\x92\xc27\xbf\xad\x10\xa4\x93\xcd\xdc\x89\xa15\xe7r\x85\xcc\xd2p?\xf2\x0f`+\xb2\xcb\xf1\xddXw\xd2}Is%x\xbbJx\xebo{\x80\xc6o\x9e\xb2\"\x1c\vzL\"\x880|\v\xe0N\x8f\xd6\x8a\xaf\xf5\x9a\xfd\xdeA\x9dZ\x1e\xdb\x1b\x1b\xb02\x03\x87c^\x85\xa9\x1dD$\xd4\xe4\x86\x95=\xf1\x19w$1yL>\xcd\x94W>xzP\x17\x93\x9alN\x9f\xfa\\\x84\xa8\x92\xbfG\x18s\x01\xc2\xe1\xed\xb3\"\xeb\x9d\x8b\x04\xc3\xda\xe4L\x9c\x8d\v\x96o\x14\xf7\x9c?\xf2\r>\xc3\xad\xaeQA\x05\xe6\n\x9el\x85]\xed\xf0\xa2T\xbc:\xefD\f[C\xb0:\x0f\xafqgl\x02R\x01\x16\x81S\xbdk\xd8\x9dZ%W\xbc~J\xd7\xf4?\xa2\xbd\x00\xa2\x7f\x11\x81\xce\xe55X38\xac\xd4\x15\x97\x83\"g\x15|\xf3t\x93ymYi\x1b\xdf\xd3>nS\xad\xa6/\xe7\x88\x8a\xc3\x00\xb7\xb8\xf24\x11\xe6\x15\xea\x16\xec\xaf?\xe0Y\xf30\x9a\xf5\x02\x9a0\x97\x1d\x11wL|\xde\xff\xbc\xa7\x03%i\xdc\x92\n\xb9U{m2\xba\\B\xb7U\f-r\xef\"\xbc\xa8\xcbc\x11z\x88\x9f\xa7\x06\xe2\xe8\x9c\x87ZL\xfeju\x15\xbeL 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 891.504137][T19932] RSP: 002b:00007fb04da27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 891.504156][T19932] RAX: ffffffffffffffda RBX: 00007fb04ce16090 RCX: 00007fb04cb9ce59 [ 891.504168][T19932] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 891.504179][T19932] RBP: 00007fb04cc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 891.504190][T19932] R10: 0000400000000006 R11: 0000000000000246 R12: 0000000000000000 [ 891.504201][T19932] R13: 00007fb04ce16128 R14: 00007fb04ce16090 R15: 00007fff0b8e05e8 [ 891.504225][T19932] [ 892.158069][T19941] FAULT_INJECTION: forcing a failure. [ 892.158069][T19941] name failslab, interval 1, probability 0, space 0, times 0 [ 892.171032][T19941] CPU: 0 UID: 0 PID: 19941 Comm: syz.0.2948 Tainted: G U L syzkaller #0 PREEMPT(full) [ 892.171067][T19941] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 892.171075][T19941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 892.171087][T19941] Call Trace: [ 892.171096][T19941] [ 892.171105][T19941] dump_stack_lvl+0x100/0x190 [ 892.171140][T19941] should_fail_ex.cold+0x5/0xa [ 892.171163][T19941] ? tomoyo_realpath_from_path+0xb6/0x690 [ 892.171191][T19941] should_failslab+0xc2/0x120 [ 892.171214][T19941] __kmalloc_noprof+0xe0/0x850 [ 892.171241][T19941] ? kfree+0x1dd/0x6c0 [ 892.171269][T19941] tomoyo_realpath_from_path+0xb6/0x690 [ 892.171300][T19941] tomoyo_check_open_permission+0x2af/0x3c0 [ 892.171325][T19941] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 892.171359][T19941] ? hook_file_open+0x24e/0x7a0 [ 892.171392][T19941] ? lock_acquire+0x1b1/0x370 [ 892.171427][T19941] tomoyo_file_open+0x6b/0x90 [ 892.171446][T19941] security_file_open+0xb5/0x1e0 [ 892.171471][T19941] do_dentry_open+0x588/0x14d0 [ 892.171499][T19941] vfs_open+0x82/0x3f0 [ 892.171528][T19941] path_openat+0x208c/0x31a0 [ 892.171559][T19941] ? __pfx_path_openat+0x10/0x10 [ 892.171590][T19941] do_file_open+0x20e/0x430 [ 892.171615][T19941] ? __pfx_do_file_open+0x10/0x10 [ 892.171652][T19941] ? alloc_fd+0x476/0x790 [ 892.171677][T19941] ? do_getname+0x191/0x390 [ 892.171705][T19941] do_sys_openat2+0x10d/0x1e0 [ 892.171733][T19941] ? __pfx_do_sys_openat2+0x10/0x10 [ 892.171769][T19941] __x64_sys_openat+0x12d/0x210 [ 892.171797][T19941] ? __pfx___x64_sys_openat+0x10/0x10 [ 892.171824][T19941] ? ksys_write+0x1ac/0x250 [ 892.171856][T19941] ? rcu_is_watching+0x12/0xc0 [ 892.171880][T19941] do_syscall_64+0x115/0x840 [ 892.171907][T19941] ? clear_bhb_loop+0x40/0x90 [ 892.171929][T19941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.171949][T19941] RIP: 0033:0x7f9623f9ce59 [ 892.171967][T19941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 892.171985][T19941] RSP: 002b:00007f9624ea2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 892.172003][T19941] RAX: ffffffffffffffda RBX: 00007f9624215fa0 RCX: 00007f9623f9ce59 [ 892.172016][T19941] RDX: 0000000000008001 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 892.172027][T19941] RBP: 00007f9624032d6f R08: 0000000000000000 R09: 0000000000000000 [ 892.172038][T19941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 892.172049][T19941] R13: 00007f9624216038 R14: 00007f9624215fa0 R15: 00007ffef5901bc8 [ 892.172072][T19941] [ 892.172081][T19941] ERROR: Out of memory at tomoyo_realpath_from_path. [ 892.947615][T15997] Bluetooth: hci2: unexpected subevent 0x03 length: 253 > 9 [ 894.561191][T19976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2956'. [ 896.075027][T20017] netlink: 4332 bytes leftover after parsing attributes in process `syz.4.2963'. [ 896.138594][T20024] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2966'. [ 896.198890][T20024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 896.283091][T20024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 896.564595][T19986] FAULT_INJECTION: forcing a failure. [ 896.564595][T19986] name failslab, interval 1, probability 0, space 0, times 0 [ 896.653480][T19986] CPU: 0 UID: 0 PID: 19986 Comm: syz.0.2958 Tainted: G U L syzkaller #0 PREEMPT(full) [ 896.653513][T19986] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 896.653520][T19986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 896.653530][T19986] Call Trace: [ 896.653537][T19986] [ 896.653545][T19986] dump_stack_lvl+0x100/0x190 [ 896.653579][T19986] should_fail_ex.cold+0x5/0xa [ 896.653602][T19986] should_failslab+0xc2/0x120 [ 896.653623][T19986] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 896.653654][T19986] ? security_file_alloc+0x34/0x2c0 [ 896.653678][T19986] ? trace_kmem_cache_alloc+0xd5/0x100 [ 896.653703][T19986] security_file_alloc+0x34/0x2c0 [ 896.653727][T19986] init_file+0x95/0x480 [ 896.653752][T19986] alloc_empty_file+0x79/0x1c0 [ 896.653779][T19986] path_openat+0xe8/0x31a0 [ 896.653811][T19986] ? trace_kmem_cache_alloc+0xd5/0x100 [ 896.653832][T19986] ? __kasan_slab_alloc+0x89/0x90 [ 896.653853][T19986] ? __pfx_path_openat+0x10/0x10 [ 896.653877][T19986] ? __asan_memcpy+0x3c/0x60 [ 896.653904][T19986] ? do_getname_kernel+0x1be/0x250 [ 896.653930][T19986] do_file_open_root+0x2f6/0x5a0 [ 896.653955][T19986] ? __pfx_do_file_open_root+0x10/0x10 [ 896.653978][T19986] ? __pfx_widen_string+0x10/0x10 [ 896.654065][T19986] ? __lock_acquire+0x4a5/0x2630 [ 896.654097][T19986] ? vsnprintf+0x4ee/0x1240 [ 896.654124][T19986] file_open_root+0x19b/0x3b0 [ 896.654147][T19986] ? __pfx_file_open_root+0x10/0x10 [ 896.654168][T19986] ? find_held_lock+0x2b/0x80 [ 896.654190][T19986] ? kernel_read_file_from_path_initns+0x17a/0x260 [ 896.654210][T19986] ? kernel_read_file_from_path_initns+0x17a/0x260 [ 896.654234][T19986] kernel_read_file_from_path_initns+0x189/0x260 [ 896.654256][T19986] ? __pfx_kernel_read_file_from_path_initns+0x10/0x10 [ 896.654283][T19986] _request_firmware+0x733/0x13c0 [ 896.654318][T19986] ? __pfx__request_firmware+0x10/0x10 [ 896.654345][T19986] ? _request_firmware+0x274/0x13c0 [ 896.654374][T19986] request_firmware+0x35/0x50 [ 896.654400][T19986] valid_regdb+0x184/0x590 [ 896.654448][T19986] ? __pfx_valid_regdb+0x10/0x10 [ 896.654473][T19986] reg_reload_regdb+0x11a/0x460 [ 896.654496][T19986] ? __pfx_reg_reload_regdb+0x10/0x10 [ 896.654520][T19986] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 896.654573][T19986] ? nl80211_pre_doit+0x19a/0xae0 [ 896.654602][T19986] genl_family_rcv_msg_doit+0x214/0x300 [ 896.654633][T19986] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 896.654660][T19986] ? genl_get_cmd+0x3e7/0x760 [ 896.654690][T19986] ? bpf_lsm_capable+0x9/0x10 [ 896.654710][T19986] ? security_capable+0x80/0x260 [ 896.654732][T19986] genl_rcv_msg+0x560/0x800 [ 896.654760][T19986] ? __pfx_genl_rcv_msg+0x10/0x10 [ 896.654786][T19986] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 896.654818][T19986] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 896.654852][T19986] ? __pfx_nl80211_post_doit+0x10/0x10 [ 896.654887][T19986] netlink_rcv_skb+0x159/0x420 [ 896.654910][T19986] ? __pfx_genl_rcv_msg+0x10/0x10 [ 896.654938][T19986] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 896.654971][T19986] ? netlink_deliver_tap+0x1ae/0xcc0 [ 896.654997][T19986] genl_rcv+0x28/0x40 [ 896.655020][T19986] netlink_unicast+0x585/0x850 [ 896.655047][T19986] ? __pfx_netlink_unicast+0x10/0x10 [ 896.655077][T19986] netlink_sendmsg+0x8b0/0xda0 [ 896.655104][T19986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 896.655127][T19986] ? __import_iovec+0x1d2/0x640 [ 896.655156][T19986] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 896.655179][T19986] ____sys_sendmsg+0x9e1/0xb70 [ 896.655202][T19986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 896.655227][T19986] ? __pfx_____sys_sendmsg+0x10/0x10 [ 896.655255][T19986] ? __pfx_futex_wake_mark+0x10/0x10 [ 896.655280][T19986] ___sys_sendmsg+0x190/0x1e0 [ 896.655307][T19986] ? __pfx____sys_sendmsg+0x10/0x10 [ 896.655358][T19986] __sys_sendmsg+0x170/0x220 [ 896.655377][T19986] ? __pfx___sys_sendmsg+0x10/0x10 [ 896.655395][T19986] ? __x64_sys_futex+0x34f/0x4d0 [ 896.655423][T19986] ? rcu_is_watching+0x12/0xc0 [ 896.655446][T19986] do_syscall_64+0x115/0x840 [ 896.655470][T19986] ? clear_bhb_loop+0x40/0x90 [ 896.655492][T19986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.655510][T19986] RIP: 0033:0x7f9623f9ce59 [ 896.655526][T19986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 896.655544][T19986] RSP: 002b:00007f9624e81028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 896.655562][T19986] RAX: ffffffffffffffda RBX: 00007f9624216090 RCX: 00007f9623f9ce59 [ 896.655574][T19986] RDX: 000000000400c000 RSI: 0000200000000140 RDI: 0000000000000006 [ 896.655585][T19986] RBP: 00007f9624032d6f R08: 0000000000000000 R09: 0000000000000000 [ 896.655596][T19986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 896.655606][T19986] R13: 00007f9624216128 R14: 00007f9624216090 R15: 00007ffef5901bc8 [ 896.655629][T19986] [ 897.576368][T19986] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db.p7s failed with error -12 [ 897.587495][T19986] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 897.598096][T19986] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 897.608688][T19986] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 900.005566][T20081] netlink: 4332 bytes leftover after parsing attributes in process `syz.0.2977'. [ 902.317569][T20124] netlink: 4332 bytes leftover after parsing attributes in process `syz.2.2987'. [ 906.547224][T20179] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3002'. [ 906.585065][T20179] IPv6: NLM_F_CREATE should be specified when creating new route [ 906.622200][T20179] IPv6: Can't replace route, no match found [ 906.662774][T20181] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3002'. [ 906.705944][T20181] IPv6: Can't replace route, no match found [ 907.563142][T20195] input: f as /devices/virtual/input/input22 [ 909.319358][T20215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3012'. [ 910.645129][T20242] netlink: 4332 bytes leftover after parsing attributes in process `syz.2.3019'. [ 910.794349][T20246] Process accounting paused [ 911.608290][T20263] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input23 [ 915.818480][T20346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3044'. [ 915.887079][T20346] netlink: 25 bytes leftover after parsing attributes in process `syz.0.3044'. [ 918.904641][T15997] Bluetooth: hci4: unexpected event for opcode 0x7c89 [ 919.924882][T20441] can: request_module (can-proto-0) failed. [ 920.568633][T20456] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3074'. [ 920.603912][T20453] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3073'. [ 921.786907][T20479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3079'. [ 922.476561][T20504] netlink: 330 bytes leftover after parsing attributes in process `syz.0.3087'. [ 922.504668][T20504] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3087'. [ 925.868337][T20559] random: crng reseeded on system resumption [ 926.783322][T20578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3107'. [ 927.163504][T20579] FAULT_INJECTION: forcing a failure. [ 927.163504][T20579] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 927.197855][T20579] CPU: 0 UID: 0 PID: 20579 Comm: syz.4.3106 Tainted: G U L syzkaller #0 PREEMPT(full) [ 927.197889][T20579] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 927.197896][T20579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 927.197906][T20579] Call Trace: [ 927.197914][T20579] [ 927.197922][T20579] dump_stack_lvl+0x100/0x190 [ 927.197957][T20579] should_fail_ex.cold+0x5/0xa [ 927.197977][T20579] ? prepare_alloc_pages+0x16d/0x5f0 [ 927.198002][T20579] should_fail_alloc_page+0xeb/0x140 [ 927.198026][T20579] prepare_alloc_pages+0x1f0/0x5f0 [ 927.198053][T20579] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 927.198087][T20579] ? rcu_is_watching+0x12/0xc0 [ 927.198109][T20579] ? trace_mm_page_alloc+0x163/0x1d0 [ 927.198132][T20579] ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0 [ 927.198163][T20579] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 927.198196][T20579] ? __pfx_stack_trace_save+0x10/0x10 [ 927.198221][T20579] ? stack_depot_save_flags+0x27/0x9d0 [ 927.198250][T20579] ? is_bpf_text_address+0x8a/0x1a0 [ 927.198274][T20579] ? is_bpf_text_address+0x8a/0x1a0 [ 927.198299][T20579] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 927.198327][T20579] ? kasan_save_stack+0x3f/0x50 [ 927.198344][T20579] ? kasan_save_stack+0x30/0x50 [ 927.198361][T20579] ? kasan_save_track+0x14/0x30 [ 927.198378][T20579] ? kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 927.198407][T20579] ? __get_vm_area_node+0x1ca/0x330 [ 927.198428][T20579] ? __vmalloc_node_range_noprof+0x228/0x1630 [ 927.198460][T20579] ? __kvmalloc_node_noprof+0x3de/0xa00 [ 927.198477][T20579] ? __do_sys_listmount+0x289/0xee0 [ 927.198497][T20579] ? do_syscall_64+0x115/0x840 [ 927.198521][T20579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.198551][T20579] alloc_pages_bulk_noprof+0x649/0x1360 [ 927.198587][T20579] ? policy_nodemask+0xed/0x4f0 [ 927.198610][T20579] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 927.198653][T20579] __kasan_populate_vmalloc+0xf0/0x210 [ 927.198688][T20579] alloc_vmap_area+0x95d/0x2b70 [ 927.198717][T20579] ? __pfx_alloc_vmap_area+0x10/0x10 [ 927.198745][T20579] __get_vm_area_node+0x1ca/0x330 [ 927.198772][T20579] __vmalloc_node_range_noprof+0x228/0x1630 [ 927.198797][T20579] ? __do_sys_listmount+0x289/0xee0 [ 927.198815][T20579] ? get_pid_task+0xfc/0x250 [ 927.198847][T20579] ? __do_sys_listmount+0x289/0xee0 [ 927.198869][T20579] ? alloc_pages_mpol+0x25a/0x540 [ 927.198892][T20579] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 927.198921][T20579] ? rcu_is_watching+0x12/0xc0 [ 927.198946][T20579] __kvmalloc_node_noprof+0x3de/0xa00 [ 927.198965][T20579] ? __do_sys_listmount+0x289/0xee0 [ 927.198984][T20579] ? __do_sys_listmount+0x289/0xee0 [ 927.199001][T20579] ? _copy_from_user+0x59/0xd0 [ 927.199027][T20579] ? copy_mnt_id_req+0x1b1/0x350 [ 927.199056][T20579] __do_sys_listmount+0x289/0xee0 [ 927.199075][T20579] ? __pfx_do_futex+0x10/0x10 [ 927.199096][T20579] ? __fget_files+0x21f/0x3d0 [ 927.199118][T20579] ? __pfx___do_sys_listmount+0x10/0x10 [ 927.199148][T20579] ? rcu_is_watching+0x12/0xc0 [ 927.199171][T20579] do_syscall_64+0x115/0x840 [ 927.199195][T20579] ? clear_bhb_loop+0x40/0x90 [ 927.199217][T20579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.199236][T20579] RIP: 0033:0x7f632e99ce59 [ 927.199252][T20579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 927.199270][T20579] RSP: 002b:00007f632f77c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 927.199289][T20579] RAX: ffffffffffffffda RBX: 00007f632ec16090 RCX: 00007f632e99ce59 [ 927.199301][T20579] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000080 [ 927.199312][T20579] RBP: 00007f632ea32d6f R08: 0000000000000000 R09: 0000000000000000 [ 927.199323][T20579] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 927.199334][T20579] R13: 00007f632ec16128 R14: 00007f632ec16090 R15: 00007ffddbdac698 [ 927.199357][T20579] [ 927.202478][T20579] syz.4.3106: vmalloc error: size 8000000, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 927.948719][T20579] CPU: 0 UID: 0 PID: 20579 Comm: syz.4.3106 Tainted: G U L syzkaller #0 PREEMPT(full) [ 927.948752][T20579] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 927.948759][T20579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 927.948770][T20579] Call Trace: [ 927.948777][T20579] [ 927.948784][T20579] dump_stack_lvl+0x100/0x190 [ 927.948819][T20579] warn_alloc.cold+0x95/0x1c1 [ 927.948839][T20579] ? __pfx_warn_alloc+0x10/0x10 [ 927.948867][T20579] ? lockdep_hardirqs_on+0x78/0x100 [ 927.948895][T20579] ? __get_vm_area_node+0x2cd/0x330 [ 927.948922][T20579] ? __get_vm_area_node+0x208/0x330 [ 927.948948][T20579] __vmalloc_node_range_noprof+0xccd/0x1630 [ 927.948973][T20579] ? get_pid_task+0xfc/0x250 [ 927.949007][T20579] ? __do_sys_listmount+0x289/0xee0 [ 927.949030][T20579] ? alloc_pages_mpol+0x25a/0x540 [ 927.949054][T20579] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 927.949083][T20579] ? rcu_is_watching+0x12/0xc0 [ 927.949109][T20579] __kvmalloc_node_noprof+0x3de/0xa00 [ 927.949128][T20579] ? __do_sys_listmount+0x289/0xee0 [ 927.949146][T20579] ? __do_sys_listmount+0x289/0xee0 [ 927.949164][T20579] ? _copy_from_user+0x59/0xd0 [ 927.949190][T20579] ? copy_mnt_id_req+0x1b1/0x350 [ 927.949220][T20579] __do_sys_listmount+0x289/0xee0 [ 927.949240][T20579] ? __pfx_do_futex+0x10/0x10 [ 927.949260][T20579] ? __fget_files+0x21f/0x3d0 [ 927.949282][T20579] ? __pfx___do_sys_listmount+0x10/0x10 [ 927.949312][T20579] ? rcu_is_watching+0x12/0xc0 [ 927.949336][T20579] do_syscall_64+0x115/0x840 [ 927.949360][T20579] ? clear_bhb_loop+0x40/0x90 [ 927.949382][T20579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.949401][T20579] RIP: 0033:0x7f632e99ce59 [ 927.949417][T20579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 927.949434][T20579] RSP: 002b:00007f632f77c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 927.949452][T20579] RAX: ffffffffffffffda RBX: 00007f632ec16090 RCX: 00007f632e99ce59 [ 927.949464][T20579] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000080 [ 927.949483][T20579] RBP: 00007f632ea32d6f R08: 0000000000000000 R09: 0000000000000000 [ 927.949493][T20579] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 927.949504][T20579] R13: 00007f632ec16128 R14: 00007f632ec16090 R15: 00007ffddbdac698 [ 927.949527][T20579] [ 928.268252][T20602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3112'. [ 928.334420][T20602] FAULT_INJECTION: forcing a failure. [ 928.334420][T20602] name failslab, interval 1, probability 0, space 0, times 0 [ 928.347326][T20602] CPU: 0 UID: 0 PID: 20602 Comm: syz.2.3112 Tainted: G U L syzkaller #0 PREEMPT(full) [ 928.347359][T20602] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 928.347366][T20602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 928.347377][T20602] Call Trace: [ 928.347385][T20602] [ 928.347393][T20602] dump_stack_lvl+0x100/0x190 [ 928.347429][T20602] should_fail_ex.cold+0x5/0xa [ 928.347453][T20602] should_failslab+0xc2/0x120 [ 928.347490][T20602] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 928.347520][T20602] ? __d_alloc+0x34/0xa40 [ 928.347550][T20602] __d_alloc+0x34/0xa40 [ 928.347577][T20602] d_alloc+0x4a/0x1e0 [ 928.347602][T20602] lookup_one_qstr_excl+0x171/0x250 [ 928.347633][T20602] start_dirop+0x59/0xb0 [ 928.347655][T20602] simple_start_creating+0xf9/0x110 [ 928.347678][T20602] ? __pfx_simple_start_creating+0x10/0x10 [ 928.347700][T20602] ? mntput+0x70/0xa0 [ 928.347719][T20602] ? simple_pin_fs+0xa3/0x190 [ 928.347738][T20602] debugfs_start_creating.part.0+0x82/0x170 [ 928.347780][T20602] __debugfs_create_file+0xb3/0x4f0 [ 928.347802][T20602] debugfs_create_file_full+0x41/0x60 [ 928.347824][T20602] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 928.347844][T20602] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 928.347862][T20602] ? ida_alloc_range+0x70d/0x830 [ 928.347945][T20602] ? lockdep_init_map_type+0x5c/0x250 [ 928.347978][T20602] preinit_net.part.0+0x252/0x920 [ 928.348002][T20602] copy_net_ns+0x339/0x7c0 [ 928.348025][T20602] create_new_namespaces+0x3ea/0xac0 [ 928.348053][T20602] unshare_nsproxy_namespaces+0xf2/0x220 [ 928.348078][T20602] ksys_unshare+0x438/0xab0 [ 928.348105][T20602] ? __pfx_ksys_unshare+0x10/0x10 [ 928.348129][T20602] ? xfd_validate_state+0x129/0x190 [ 928.348149][T20602] ? ksys_write+0x1ac/0x250 [ 928.348176][T20602] __x64_sys_unshare+0x31/0x40 [ 928.348201][T20602] do_syscall_64+0x115/0x840 [ 928.348227][T20602] ? clear_bhb_loop+0x40/0x90 [ 928.348250][T20602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.348269][T20602] RIP: 0033:0x7fb04cb9ce59 [ 928.348285][T20602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 928.348303][T20602] RSP: 002b:00007fb04da48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 928.348321][T20602] RAX: ffffffffffffffda RBX: 00007fb04ce15fa0 RCX: 00007fb04cb9ce59 [ 928.348333][T20602] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 928.348345][T20602] RBP: 00007fb04cc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 928.348356][T20602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 928.348367][T20602] R13: 00007fb04ce16038 R14: 00007fb04ce15fa0 R15: 00007fff0b8e05e8 [ 928.348390][T20602] [ 928.843923][T15997] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 928.964778][T15967] Bluetooth: hci1: unexpected subevent 0x03 length: 253 > 9 [ 928.973398][T20579] Mem-Info: [ 928.994235][T20579] active_anon:15369 inactive_anon:2 isolated_anon:0 [ 928.994235][T20579] active_file:14722 inactive_file:45066 isolated_file:0 [ 928.994235][T20579] unevictable:768 dirty:946 writeback:0 [ 928.994235][T20579] slab_reclaimable:12591 slab_unreclaimable:101395 [ 928.994235][T20579] mapped:28708 shmem:2046 pagetables:1573 [ 928.994235][T20579] sec_pagetables:0 bounce:0 [ 928.994235][T20579] kernel_misc_reclaimable:0 [ 928.994235][T20579] free:1284457 free_pcp:24018 free_cma:0 [ 929.168752][T20579] Node 0 active_anon:59448kB inactive_anon:8kB active_file:58888kB inactive_file:180128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114832kB dirty:3780kB writeback:0kB shmem:6648kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12128kB pagetables:6144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 929.413354][T20579] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 929.626131][T20579] Node 0 DMA free:15104kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:256kB local_pcp:256kB free_cma:0kB [ 929.812661][T20579] lowmem_reserve[]: 0 2478 2479 2479 2479 [ 929.843335][T20579] Node 0 DMA32 free:1254600kB boost:0kB min:34060kB low:42572kB high:51084kB reserved_highatomic:0KB free_highatomic:0KB active_anon:56900kB inactive_anon:8kB active_file:58888kB inactive_file:180128kB unevictable:1536kB writepending:3780kB zspages:76kB present:3129332kB managed:2537492kB mlocked:0kB bounce:0kB free_pcp:43116kB local_pcp:43116kB free_cma:0kB [ 930.026626][T20579] lowmem_reserve[]: 0 0 1 1 1 [ 930.055890][T20579] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1112kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 930.199709][T20579] lowmem_reserve[]: 0 0 0 0 0 [ 930.216578][T20579] Node 1 Normal free:3868212kB boost:0kB min:55824kB low:69780kB high:83736kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:136kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:67484kB local_pcp:67484kB free_cma:0kB [ 930.406462][T20579] lowmem_reserve[]: 0 0 0 0 0 [ 930.426189][T20579] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 15104kB [ 930.481977][T20579] Node 0 DMA32: 10177*4kB (UME) 7363*8kB (UME) 4829*16kB (UME) 1499*32kB (UME) 1481*64kB (UME) 1022*128kB (UM) 705*256kB (UME) 403*512kB (UM) 268*1024kB (UM) 28*2048kB (UE) 22*4096kB (UM) = 1259148kB [ 930.608697][T20579] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 930.687336][T20579] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 0*16kB 1*32kB (M) 2*64kB (UM) 1*128kB (M) 1*256kB (U) 2*512kB (UM) 0*1024kB 2*2048kB (UM) 943*4096kB (UM) = 3868212kB [ 930.718076][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.725081][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 930.776724][T20579] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 930.850220][T15997] Bluetooth: hci3: command 0x2016 tx timeout [ 930.864609][T20579] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 930.945029][T20579] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 930.999790][T20579] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 931.050701][T20579] 61520 total pagecache pages [ 931.073655][T20579] 16 pages in swap cache [ 931.094777][T20579] Free swap = 123272kB [ 931.117401][T20579] Total swap = 124996kB [ 931.136452][T20579] 2097051 pages RAM [ 931.154932][T20579] 0 pages HighMem/MovableOnly [ 931.179979][T20579] 430785 pages reserved [ 931.202400][T20579] 0 pages cma reserved [ 932.220729][T20662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3125'. [ 932.921160][T15967] Bluetooth: hci3: command 0x2016 tx timeout [ 933.809268][ T5642] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 933.935784][T20675] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 933.972044][T20675] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 934.004893][T20675] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 934.039275][T20675] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 935.547479][T15997] Bluetooth: hci4: command 0x0c1a tx timeout [ 936.025106][T15967] Bluetooth: hci2: command 0x0406 tx timeout [ 936.031221][T15997] Bluetooth: hci3: command 0x2016 tx timeout [ 936.104532][T15997] Bluetooth: hci1: command 0x2016 tx timeout [ 937.446438][T20751] FAULT_INJECTION: forcing a failure. [ 937.446438][T20751] name failslab, interval 1, probability 0, space 0, times 0 [ 937.531271][T20751] CPU: 0 UID: 0 PID: 20751 Comm: syz.2.3147 Tainted: G U L syzkaller #0 PREEMPT(full) [ 937.531306][T20751] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 937.531314][T20751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 937.531325][T20751] Call Trace: [ 937.531332][T20751] [ 937.531340][T20751] dump_stack_lvl+0x100/0x190 [ 937.531376][T20751] should_fail_ex.cold+0x5/0xa [ 937.531400][T20751] should_failslab+0xc2/0x120 [ 937.531424][T20751] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 937.531453][T20751] ? __kernfs_new_node+0xd2/0x9f0 [ 937.531478][T20751] __kernfs_new_node+0xd2/0x9f0 [ 937.531501][T20751] ? __pfx___kernfs_new_node+0x10/0x10 [ 937.531526][T20751] ? find_held_lock+0x2b/0x80 [ 937.531548][T20751] ? kernfs_root+0xee/0x2a0 [ 937.531566][T20751] ? kernfs_root+0xee/0x2a0 [ 937.531590][T20751] kernfs_new_node+0x11b/0x1a0 [ 937.531617][T20751] __kernfs_create_file+0x53/0x350 [ 937.531647][T20751] sysfs_add_file_mode_ns+0x207/0x3c0 [ 937.531671][T20751] internal_create_group+0x593/0xfb0 [ 937.531697][T20751] ? __pfx_internal_create_group+0x10/0x10 [ 937.531722][T20751] ? kernfs_create_link+0x1bd/0x240 [ 937.531753][T20751] internal_create_groups+0x9d/0x150 [ 937.531777][T20751] device_add+0x71a/0x1950 [ 937.531798][T20751] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 937.531824][T20751] ? __pfx_device_add+0x10/0x10 [ 937.531844][T20751] ? lockdep_init_map_type+0x5c/0x250 [ 937.531874][T20751] ? __init_waitqueue_head+0xca/0x150 [ 937.531900][T20751] netdev_register_kobject+0x1a9/0x3d0 [ 937.531995][T20751] register_netdevice+0x151c/0x24b0 [ 937.532054][T20751] ? __pfx_register_netdevice+0x10/0x10 [ 937.532080][T20751] ? __pfx_loopback_net_init+0x10/0x10 [ 937.532119][T20751] register_netdev+0x34/0x50 [ 937.532143][T20751] loopback_net_init+0x7a/0x170 [ 937.532172][T20751] ? __pfx_loopback_net_init+0x10/0x10 [ 937.532199][T20751] ops_init+0x1e2/0x5f0 [ 937.532229][T20751] setup_net+0x118/0x3a0 [ 937.532250][T20751] ? __pfx_setup_net+0x10/0x10 [ 937.532270][T20751] ? mutex_init_lockdep+0xf1/0x120 [ 937.532292][T20751] copy_net_ns+0x46f/0x7c0 [ 937.532316][T20751] create_new_namespaces+0x3ea/0xac0 [ 937.532345][T20751] unshare_nsproxy_namespaces+0xf2/0x220 [ 937.532370][T20751] ksys_unshare+0x438/0xab0 [ 937.532398][T20751] ? __pfx_ksys_unshare+0x10/0x10 [ 937.532423][T20751] ? xfd_validate_state+0x129/0x190 [ 937.532450][T20751] __x64_sys_unshare+0x31/0x40 [ 937.532475][T20751] do_syscall_64+0x115/0x840 [ 937.532500][T20751] ? clear_bhb_loop+0x40/0x90 [ 937.532522][T20751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.532541][T20751] RIP: 0033:0x7fb04cb9ce59 [ 937.532557][T20751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 937.532576][T20751] RSP: 002b:00007fb04da48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 937.532596][T20751] RAX: ffffffffffffffda RBX: 00007fb04ce15fa0 RCX: 00007fb04cb9ce59 [ 937.532608][T20751] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 937.532619][T20751] RBP: 00007fb04cc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 937.532629][T20751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 937.532640][T20751] R13: 00007fb04ce16038 R14: 00007fb04ce15fa0 R15: 00007fff0b8e05e8 [ 937.532664][T20751] [ 941.013975][T20778] Process accounting resumed [ 941.759351][T20799] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 941.916318][ T30] audit: type=1807 audit(2147485759.635:28): UNKNOWN=nl80211 res=0 [ 942.118197][ T30] audit: type=1802 audit(2147485759.846:29): pid=20801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.3158" res=0 errno=0 [ 942.291475][T20797] ima: policy update failed [ 942.362069][ T30] audit: type=1802 audit(2147485760.077:30): pid=20797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.3158" res=0 errno=0 [ 943.028037][T20828] netlink: 4332 bytes leftover after parsing attributes in process `syz.2.3165'. [ 945.004954][T20865] netlink: 4332 bytes leftover after parsing attributes in process `syz.1.3173'. [ 945.769855][T20884] netlink: 4332 bytes leftover after parsing attributes in process `syz.1.3179'. [ 950.050999][T20962] Process accounting resumed [ 950.212480][T20977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3201'. [ 950.265121][T20980] blktrace: Concurrent blktraces are not allowed on nbd5 [ 950.305789][T20980] blktrace: Concurrent blktraces are not allowed on ram10 [ 951.718271][T21016] zswap: compressor not available [ 953.330313][T21054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3220'. [ 953.376124][T21054] netlink: 25 bytes leftover after parsing attributes in process `syz.4.3220'. [ 955.008334][T21099] netlink: 'syz.1.3231': attribute type 11 has an invalid length. [ 955.051148][T21099] netlink: 'syz.1.3231': attribute type 11 has an invalid length. [ 955.105401][T21099] netlink: 'syz.1.3231': attribute type 11 has an invalid length. [ 955.767935][T21102] netlink: 330 bytes leftover after parsing attributes in process `syz.1.3232'. [ 956.302790][T21127] FAULT_INJECTION: forcing a failure. [ 956.302790][T21127] name failslab, interval 1, probability 0, space 0, times 0 [ 956.366176][T21127] CPU: 0 UID: 0 PID: 21127 Comm: syz.2.3237 Tainted: G U L syzkaller #0 PREEMPT(full) [ 956.366209][T21127] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 956.366216][T21127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 956.366226][T21127] Call Trace: [ 956.366234][T21127] [ 956.366242][T21127] dump_stack_lvl+0x100/0x190 [ 956.366279][T21127] should_fail_ex.cold+0x5/0xa [ 956.366303][T21127] should_failslab+0xc2/0x120 [ 956.366326][T21127] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 956.366346][T21127] ? kstrdup_const+0x63/0x80 [ 956.366364][T21127] ? netdev_register_kobject+0x290/0x3d0 [ 956.366388][T21127] ? register_netdevice+0x151c/0x24b0 [ 956.366408][T21127] ? ppp_dev_configure+0x986/0xcb0 [ 956.366430][T21127] kstrdup+0x51/0xe0 [ 956.366450][T21127] kstrdup_const+0x63/0x80 [ 956.366469][T21127] __kernfs_new_node+0x9b/0x9f0 [ 956.366493][T21127] ? __pfx___kernfs_new_node+0x10/0x10 [ 956.366519][T21127] ? find_held_lock+0x2b/0x80 [ 956.366541][T21127] ? kernfs_root+0xee/0x2a0 [ 956.366560][T21127] ? kernfs_root+0xee/0x2a0 [ 956.366584][T21127] kernfs_new_node+0x11b/0x1a0 [ 956.366612][T21127] kernfs_create_dir_ns+0x4c/0x1a0 [ 956.366639][T21127] sysfs_create_dir_ns+0x13a/0x2b0 [ 956.366659][T21127] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 956.366677][T21127] ? find_held_lock+0x2b/0x80 [ 956.366708][T21127] ? kobject_add_internal+0x25f/0x930 [ 956.366728][T21127] ? kobject_add_internal+0x25f/0x930 [ 956.366747][T21127] ? do_raw_spin_unlock+0x145/0x1e0 [ 956.366770][T21127] kobject_add_internal+0x2c8/0x930 [ 956.366792][T21127] kobject_init_and_add+0x121/0x180 [ 956.366812][T21127] ? __pfx_kobject_init_and_add+0x10/0x10 [ 956.366831][T21127] ? __x64_sys_ioctl+0x18e/0x210 [ 956.366852][T21127] ? dev_uevent_filter+0x3e/0xd0 [ 956.366899][T21127] ? kobject_uevent_env+0x2e7/0x18b0 [ 956.366923][T21127] net_rx_queue_update_kobjects+0x37e/0x760 [ 956.366951][T21127] ? kset_register+0x1bb/0x290 [ 956.366972][T21127] netdev_register_kobject+0x290/0x3d0 [ 956.367004][T21127] register_netdevice+0x151c/0x24b0 [ 956.367030][T21127] ? __pfx_register_netdevice+0x10/0x10 [ 956.367049][T21127] ? net_generic+0xea/0x2a0 [ 956.367072][T21127] ppp_dev_configure+0x986/0xcb0 [ 956.367100][T21127] ppp_ioctl+0x9d7/0x27c0 [ 956.367121][T21127] ? find_held_lock+0x2b/0x80 [ 956.367142][T21127] ? __pfx_ppp_ioctl+0x10/0x10 [ 956.367165][T21127] ? __fget_files+0x21f/0x3d0 [ 956.367190][T21127] ? __pfx_ppp_ioctl+0x10/0x10 [ 956.367210][T21127] __x64_sys_ioctl+0x18e/0x210 [ 956.367230][T21127] do_syscall_64+0x115/0x840 [ 956.367255][T21127] ? clear_bhb_loop+0x40/0x90 [ 956.367280][T21127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.367299][T21127] RIP: 0033:0x7fb04cb9ce59 [ 956.367315][T21127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 956.367333][T21127] RSP: 002b:00007fb04da48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 956.367351][T21127] RAX: ffffffffffffffda RBX: 00007fb04ce15fa0 RCX: 00007fb04cb9ce59 [ 956.367363][T21127] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000005 [ 956.367374][T21127] RBP: 00007fb04cc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 956.367385][T21127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 956.367396][T21127] R13: 00007fb04ce16038 R14: 00007fb04ce15fa0 R15: 00007fff0b8e05e8 [ 956.367420][T21127] [ 956.718537][T21127] kobject: kobject_add_internal failed for rx-0 (error: -12 parent: queues) [ 958.298332][T21143] futex_wake_op: syz.1.3248 tries to shift op by -2048; fix this program [ 962.484465][T21200] futex_wake_op: syz.4.3254 tries to shift op by -2048; fix this program [ 962.521350][T21200] futex_wake_op: syz.4.3254 tries to shift op by -2048; fix this program [ 967.010831][T21244] netlink: 'syz.1.3259': attribute type 1 has an invalid length. [ 968.105352][T21274] vivid-008: ================= START STATUS ================= [ 968.263631][T21274] vivid-008: ================== END STATUS ================== [ 971.565938][T21302] Process accounting resumed [ 972.384362][T21326] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.934388][T21326] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.224803][T21326] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.445787][T21326] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.861325][T21354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3283'. [ 974.252660][T21358] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3286'. [ 977.677317][T21421] netlink: 'syz.4.3295': attribute type 11 has an invalid length. [ 977.710667][T21421] netlink: 'syz.4.3295': attribute type 11 has an invalid length. [ 977.766457][T21421] netlink: 'syz.4.3295': attribute type 11 has an invalid length. [ 977.863794][T21427] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 978.706046][T21448] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3302'. [ 979.018585][T21448] veth1_macvtap: left promiscuous mode [ 979.575508][T21463] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 979.616081][T21463] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 979.995327][T21456] Process accounting paused [ 981.062008][T21493] FAULT_INJECTION: forcing a failure. [ 981.062008][T21493] name failslab, interval 1, probability 0, space 0, times 0 [ 981.144239][T21493] CPU: 0 UID: 0 PID: 21493 Comm: syz.2.3312 Tainted: G U L syzkaller #0 PREEMPT(full) [ 981.144273][T21493] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 981.144281][T21493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 981.144292][T21493] Call Trace: [ 981.144299][T21493] [ 981.144307][T21493] dump_stack_lvl+0x100/0x190 [ 981.144344][T21493] should_fail_ex.cold+0x5/0xa [ 981.144368][T21493] ? lsm_blob_alloc+0x68/0x90 [ 981.144394][T21493] should_failslab+0xc2/0x120 [ 981.144416][T21493] __kmalloc_noprof+0xe0/0x850 [ 981.144444][T21493] ? audit_alloc+0xa2/0x7b0 [ 981.144475][T21493] lsm_blob_alloc+0x68/0x90 [ 981.144510][T21493] security_task_alloc+0x2a/0x260 [ 981.144538][T21493] copy_process+0x2865/0x7ed0 [ 981.144574][T21493] ? __pfx_copy_process+0x10/0x10 [ 981.144601][T21493] ? lockdep_init_map_type+0x5c/0x250 [ 981.144632][T21493] ? lockdep_init_map_type+0x5c/0x250 [ 981.144663][T21493] ? __pfx_vhost_run_work_list+0x10/0x10 [ 981.144767][T21493] ? __pfx_vhost_worker_killed+0x10/0x10 [ 981.144812][T21493] vhost_task_create+0x1db/0x370 [ 981.144835][T21493] ? __pfx_vhost_task_create+0x10/0x10 [ 981.144859][T21493] ? __pfx_vhost_task_fn+0x10/0x10 [ 981.144883][T21493] ? snprintf+0xc7/0x100 [ 981.144910][T21493] vhost_task_worker_create+0x8d/0x260 [ 981.144930][T21493] ? __pfx_vhost_task_worker_create+0x10/0x10 [ 981.144948][T21493] ? lockdep_init_map_type+0x5c/0x250 [ 981.144977][T21493] ? lockdep_init_map_type+0x5c/0x250 [ 981.145010][T21493] vhost_worker_create+0x243/0x310 [ 981.145043][T21493] ? __pfx_vhost_worker_create+0x10/0x10 [ 981.145078][T21493] vhost_dev_set_owner+0x719/0xa30 [ 981.145104][T21493] vhost_net_ioctl+0xfa3/0x1910 [ 981.145122][T21493] ? do_vfs_ioctl+0x226/0x13e0 [ 981.145141][T21493] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 981.145158][T21493] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 981.145183][T21493] ? find_held_lock+0x2b/0x80 [ 981.145204][T21493] ? __fget_files+0x215/0x3d0 [ 981.145224][T21493] ? hook_file_ioctl_common+0x149/0x410 [ 981.145251][T21493] ? __fget_files+0x21f/0x3d0 [ 981.145275][T21493] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 981.145296][T21493] __x64_sys_ioctl+0x18e/0x210 [ 981.145316][T21493] do_syscall_64+0x115/0x840 [ 981.145341][T21493] ? clear_bhb_loop+0x40/0x90 [ 981.145363][T21493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.145382][T21493] RIP: 0033:0x7fb04cb9ce59 [ 981.145399][T21493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 981.145417][T21493] RSP: 002b:00007fb04da48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 981.145435][T21493] RAX: ffffffffffffffda RBX: 00007fb04ce15fa0 RCX: 00007fb04cb9ce59 [ 981.145447][T21493] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000009 [ 981.145458][T21493] RBP: 00007fb04cc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 981.145469][T21493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 981.145479][T21493] R13: 00007fb04ce16038 R14: 00007fb04ce15fa0 R15: 00007fff0b8e05e8 [ 981.145527][T21493] [ 982.982409][T21521] [U] [ 982.982463][T21521] [U] [ 982.982489][T21521] [U] [ 982.982514][T21521] [U] [ 982.982630][T21521] [U] [ 982.982656][T21521] [U] [ 982.982682][T21521] [U] [ 982.982708][T21521] [U] [ 982.982823][T21521] [U] [ 982.982849][T21521] [U] [ 982.982875][T21521] [U] [ 982.982901][T21521] [U] [ 982.983025][T21521] [U] [ 982.983050][T21521] [U] [ 982.983075][T21521] [U] [ 982.983099][T21521] [U] [ 982.983236][T21521] [U] [ 982.983262][T21521] [U] [ 982.983286][T21521] [U] [ 982.983311][T21521] [U] [ 982.983425][T21521] [U] [ 982.983453][T21521] [U] [ 982.983478][T21521] [U] [ 982.983503][T21521] [U] [ 983.001841][T21521] [U] [ 983.001876][T21521] [U] [ 983.001901][T21521] [U] [ 983.001926][T21521] [U] [ 983.002050][T21521] [U] [ 983.002075][T21521] [U] [ 983.002100][T21521] [U] [ 983.002125][T21521] [U] [ 983.002241][T21521] [U] [ 983.002266][T21521] [U] [ 983.002290][T21521] [U] [ 983.002319][T21521] [U] [ 983.110331][T21521] [U] [ 983.110366][T21521] [U] [ 983.110392][T21521] [U] [ 983.110416][T21521] [U] [ 983.110578][T21521] [U] [ 983.110605][T21521] [U] [ 983.110630][T21521] [U] [ 983.110654][T21521] [U] [ 983.110770][T21521] [U] [ 983.110794][T21521] [U] [ 983.110819][T21521] [U] [ 983.110844][T21521] [U] [ 983.111022][T21521] [U] [ 983.111049][T21521] [U] [ 983.111074][T21521] [U] [ 983.111099][T21521] [U] [ 983.111240][T21521] [U] [ 983.111267][T21521] [U] [ 983.111291][T21521] [U] [ 983.111317][T21521] [U] [ 983.111477][T21521] [U] [ 983.111504][T21521] [U] [ 983.111529][T21521] [U] [ 983.111554][T21521] [U] [ 983.127284][T21521] [U] [ 983.127316][T21521] [U] [ 983.127341][T21521] [U] [ 983.127367][T21521] [U] [ 983.127557][T21521] [U] [ 983.127584][T21521] [U] [ 983.127609][T21521] [U] [ 983.127635][T21521] [U] [ 983.127750][T21521] [U] [ 983.127776][T21521] [U] [ 983.127801][T21521] [U] [ 983.127826][T21521] [U] [ 983.130605][T21521] [U] [ 983.130636][T21521] [U] [ 983.130661][T21521] [U] [ 983.130686][T21521] [U] [ 983.130806][T21521] [U] [ 983.130832][T21521] [U] [ 983.130857][T21521] [U] [ 983.130882][T21521] [U] [ 983.131064][T21521] [U] [ 983.131091][T21521] [U] [ 983.131117][T21521] [U] [ 983.131142][T21521] [U] [ 983.151622][T21521] [U] [ 983.151654][T21521] [U] [ 983.151679][T21521] [U] [ 983.151704][T21521] [U] [ 983.151890][T21521] [U] [ 983.151917][T21521] [U] [ 983.151942][T21521] [U] [ 983.151979][T21521] [U] [ 983.152093][T21521] [U] [ 983.152118][T21521] [U] [ 983.152143][T21521] [U] [ 983.152168][T21521] [U] [ 983.152329][T21521] [U] [ 983.152355][T21521] [U] [ 983.152381][T21521] [U] [ 983.152406][T21521] [U] [ 983.152521][T21521] [U] [ 983.152547][T21521] [U] [ 983.152572][T21521] [U] [ 983.152597][T21521] [U] [ 983.153067][T21521] [U] [ 983.153095][T21521] [U] [ 983.153119][T21521] [U] [ 983.153144][T21521] [U] [ 983.158244][T21521] [U] [ 983.158276][T21521] [U] [ 983.158301][T21521] [U] [ 983.158326][T21521] [U] [ 983.158506][T21521] [U] [ 983.158534][T21521] [U] [ 983.158559][T21521] [U] [ 983.158585][T21521] [U] [ 983.158700][T21521] [U] [ 983.158725][T21521] [U] [ 983.158750][T21521] [U] [ 983.158778][T21521] [U] [ 983.158989][T21521] [U] [ 983.159016][T21521] [U] [ 983.159041][T21521] [U] [ 983.159066][T21521] [U] [ 983.159160][T21521] [U] [ 983.159185][T21521] [U] [ 983.159210][T21521] [U] [ 983.159262][T21521] [U] [ 987.500344][T21599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3334'. [ 987.552523][T21599] netlink: 354 bytes leftover after parsing attributes in process `syz.1.3334'. [ 988.972120][T21622] netlink: 4332 bytes leftover after parsing attributes in process `syz.4.3340'. [ 989.466638][T21616] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 989.891644][T21633] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 989.936741][T21633] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 990.117319][T21643] netlink: 326 bytes leftover after parsing attributes in process `syz.1.3346'. [ 990.295404][T21643] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.303225][T21643] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.490642][T21643] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3346'. [ 991.849920][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 991.856488][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.331634][T21687] openvswitch: netlink: Duplicate key (type 15). [ 995.800860][T21718] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 997.630036][T15997] Bluetooth: hci4: unexpected event 0x3c length: 124 > 7 [ 999.789857][T21782] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3378'. [ 1000.000229][T21782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1000.116189][T21782] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1001.579150][T21816] Process accounting paused [ 1006.347999][T21887] FAULT_INJECTION: forcing a failure. [ 1006.347999][T21887] name failslab, interval 1, probability 0, space 0, times 0 [ 1006.388079][T21887] CPU: 0 UID: 0 PID: 21887 Comm: syz.4.3399 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1006.388113][T21887] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1006.388121][T21887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1006.388132][T21887] Call Trace: [ 1006.388139][T21887] [ 1006.388147][T21887] dump_stack_lvl+0x100/0x190 [ 1006.388186][T21887] should_fail_ex.cold+0x5/0xa [ 1006.388211][T21887] should_failslab+0xc2/0x120 [ 1006.388236][T21887] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1006.388266][T21887] ? ptlock_alloc+0x1f/0x70 [ 1006.388291][T21887] ? do_raw_spin_lock+0x128/0x260 [ 1006.388316][T21887] ptlock_alloc+0x1f/0x70 [ 1006.388341][T21887] pte_alloc_one+0x82/0x3d0 [ 1006.388370][T21887] do_fault+0x86c/0x1750 [ 1006.388392][T21887] ? __pmd_alloc+0x3fb/0x950 [ 1006.388427][T21887] __handle_mm_fault+0x187d/0x2a00 [ 1006.388457][T21887] ? mt_find+0x45e/0x8e0 [ 1006.388487][T21887] ? __pfx___handle_mm_fault+0x10/0x10 [ 1006.388514][T21887] ? __pfx_mt_find+0x10/0x10 [ 1006.388553][T21887] ? find_vma+0xbf/0x140 [ 1006.388573][T21887] ? __pfx_find_vma+0x10/0x10 [ 1006.388595][T21887] handle_mm_fault+0x37b/0xa30 [ 1006.388627][T21887] do_user_addr_fault+0x74c/0x12f0 [ 1006.388651][T21887] ? trace_page_fault_kernel+0x7a/0x200 [ 1006.388680][T21887] exc_page_fault+0x6f/0xd0 [ 1006.388708][T21887] asm_exc_page_fault+0x26/0x30 [ 1006.388726][T21887] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 1006.388748][T21887] Code: c4 10 e9 04 9d 04 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 cd 9c 04 00 66 66 [ 1006.388766][T21887] RSP: 0018:ffffc9000439fbd0 EFLAGS: 00050202 [ 1006.388783][T21887] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000004 [ 1006.388794][T21887] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc9000439fcf0 [ 1006.388806][T21887] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff52000873f9e [ 1006.388818][T21887] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 1006.388829][T21887] R13: ffffc9000439fcf0 R14: 0000000000000000 R15: 000000000000010e [ 1006.388852][T21887] _copy_from_user+0x98/0xd0 [ 1006.388882][T21887] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 1006.388916][T21887] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 1006.388949][T21887] do_sock_getsockopt+0x530/0x6e0 [ 1006.388971][T21887] ? __lock_acquire+0x4a5/0x2630 [ 1006.389003][T21887] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1006.389027][T21887] ? ksys_write+0x190/0x250 [ 1006.389054][T21887] ? find_held_lock+0x2b/0x80 [ 1006.389082][T21887] ? __fget_files+0x21f/0x3d0 [ 1006.389109][T21887] __sys_getsockopt+0x133/0x1d0 [ 1006.389134][T21887] ? __x64_sys_getsockopt+0xbd/0x160 [ 1006.389151][T21887] __x64_sys_getsockopt+0xbd/0x160 [ 1006.389168][T21887] ? do_syscall_64+0x90/0x840 [ 1006.389192][T21887] ? lockdep_hardirqs_on+0x78/0x100 [ 1006.389217][T21887] do_syscall_64+0x115/0x840 [ 1006.389240][T21887] ? clear_bhb_loop+0x40/0x90 [ 1006.389262][T21887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.389281][T21887] RIP: 0033:0x7f632e99ce59 [ 1006.389296][T21887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1006.389313][T21887] RSP: 002b:00007f632f79d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1006.389330][T21887] RAX: ffffffffffffffda RBX: 00007f632ec15fa0 RCX: 00007f632e99ce59 [ 1006.389342][T21887] RDX: 0000000000000009 RSI: 000000000000010e RDI: 0000000000000003 [ 1006.389356][T21887] RBP: 00007f632ea32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1006.389367][T21887] R10: 9999999999999999 R11: 0000000000000246 R12: 0000000000000000 [ 1006.389377][T21887] R13: 00007f632ec16038 R14: 00007f632ec15fa0 R15: 00007ffddbdac698 [ 1006.389401][T21887] [ 1008.497727][T21909] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3405'. [ 1008.651902][T21909] ptp ptp0: only physical clock in use now [ 1008.915904][T21915] netlink: 330 bytes leftover after parsing attributes in process `syz.2.3406'. [ 1010.356983][T21920] Process accounting resumed [ 1012.807806][T21990] netlink: 4332 bytes leftover after parsing attributes in process `syz.1.3418'. [ 1016.226205][T22053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3430'. [ 1016.789852][T22065] netlink: 330 bytes leftover after parsing attributes in process `syz.1.3434'. [ 1016.971501][T22063] FAULT_INJECTION: forcing a failure. [ 1016.971501][T22063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1017.087777][T22066] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input24 [ 1017.122010][T22070] random: crng reseeded on system resumption [ 1017.208159][T22063] CPU: 0 UID: 0 PID: 22063 Comm: syz.0.3433 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1017.208193][T22063] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1017.208200][T22063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1017.208211][T22063] Call Trace: [ 1017.208217][T22063] [ 1017.208225][T22063] dump_stack_lvl+0x100/0x190 [ 1017.208260][T22063] should_fail_ex.cold+0x5/0xa [ 1017.208283][T22063] _copy_from_user+0x2e/0xd0 [ 1017.208310][T22063] copy_msghdr_from_user+0x9f/0x4f0 [ 1017.208336][T22063] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1017.208366][T22063] ? rcu_is_watching+0x12/0xc0 [ 1017.208387][T22063] ? ___sys_sendmsg+0x19d/0x1e0 [ 1017.208410][T22063] ? kfree+0x1dd/0x6c0 [ 1017.208440][T22063] ___sys_sendmsg+0x106/0x1e0 [ 1017.208466][T22063] ? __pfx____sys_sendmsg+0x10/0x10 [ 1017.208509][T22063] ? __pfx___might_resched+0x10/0x10 [ 1017.208533][T22063] __sys_sendmmsg+0x205/0x430 [ 1017.208554][T22063] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1017.208579][T22063] ? __pfx_do_futex+0x10/0x10 [ 1017.208608][T22063] ? xfd_validate_state+0x129/0x190 [ 1017.208630][T22063] ? ksys_write+0x1ac/0x250 [ 1017.208656][T22063] __x64_sys_sendmmsg+0x9c/0x100 [ 1017.208675][T22063] ? lockdep_hardirqs_on+0x78/0x100 [ 1017.208701][T22063] do_syscall_64+0x115/0x840 [ 1017.208725][T22063] ? clear_bhb_loop+0x40/0x90 [ 1017.208748][T22063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.208767][T22063] RIP: 0033:0x7f9623f9ce59 [ 1017.208782][T22063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1017.208800][T22063] RSP: 002b:00007f9624e81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1017.208819][T22063] RAX: ffffffffffffffda RBX: 00007f9624216090 RCX: 00007f9623f9ce59 [ 1017.208831][T22063] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000003 [ 1017.208842][T22063] RBP: 00007f9624032d6f R08: 0000000000000000 R09: 0000000000000000 [ 1017.208853][T22063] R10: 0000000000001f00 R11: 0000000000000246 R12: 0000000000000000 [ 1017.208865][T22063] R13: 00007f9624216128 R14: 00007f9624216090 R15: 00007ffef5901bc8 [ 1017.208889][T22063] [ 1019.314001][T22123] ubi0: attaching mtd6 [ 1019.346404][T22123] ubi0 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65) [ 1022.512294][T22174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3459'. [ 1022.936044][T22194] input: f as /devices/virtual/input/input25 [ 1027.567337][T22295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3480'. [ 1028.427044][T22311] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input26 [ 1030.883908][T22350] FAULT_INJECTION: forcing a failure. [ 1030.883908][T22350] name failslab, interval 1, probability 0, space 0, times 0 [ 1030.915513][T22352] input: f as /devices/virtual/input/input27 [ 1031.104388][T22350] CPU: 0 UID: 0 PID: 22350 Comm: syz.2.3492 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1031.104424][T22350] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1031.104432][T22350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1031.104443][T22350] Call Trace: [ 1031.104450][T22350] [ 1031.104458][T22350] dump_stack_lvl+0x100/0x190 [ 1031.104495][T22350] should_fail_ex.cold+0x5/0xa [ 1031.104519][T22350] should_failslab+0xc2/0x120 [ 1031.104541][T22350] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1031.104568][T22350] ? alloc_tty_struct+0x96/0x8c0 [ 1031.104636][T22350] alloc_tty_struct+0x96/0x8c0 [ 1031.104663][T22350] ? __pfx_alloc_tty_struct+0x10/0x10 [ 1031.104695][T22350] tty_init_dev.part.0+0x20/0x470 [ 1031.104723][T22350] tty_open+0xa63/0xfa0 [ 1031.104751][T22350] ? __pfx_tty_open+0x10/0x10 [ 1031.104775][T22350] ? chrdev_open+0x10b/0x6a0 [ 1031.104797][T22350] ? chrdev_open+0x10b/0x6a0 [ 1031.104823][T22350] ? __pfx_tty_open+0x10/0x10 [ 1031.104847][T22350] chrdev_open+0x234/0x6a0 [ 1031.104868][T22350] ? __pfx_apparmor_file_open+0x10/0x10 [ 1031.104891][T22350] ? __pfx_chrdev_open+0x10/0x10 [ 1031.104915][T22350] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1031.104945][T22350] do_dentry_open+0x6ab/0x14d0 [ 1031.104966][T22350] ? __pfx_chrdev_open+0x10/0x10 [ 1031.104994][T22350] vfs_open+0x82/0x3f0 [ 1031.105030][T22350] path_openat+0x208c/0x31a0 [ 1031.105061][T22350] ? __pfx_path_openat+0x10/0x10 [ 1031.105093][T22350] do_file_open+0x20e/0x430 [ 1031.105119][T22350] ? __pfx_do_file_open+0x10/0x10 [ 1031.105158][T22350] ? alloc_fd+0x476/0x790 [ 1031.105184][T22350] ? do_getname+0x191/0x390 [ 1031.105212][T22350] do_sys_openat2+0x10d/0x1e0 [ 1031.105241][T22350] ? __pfx_do_sys_openat2+0x10/0x10 [ 1031.105282][T22350] ? __fget_files+0x21f/0x3d0 [ 1031.105309][T22350] __x64_sys_openat+0x12d/0x210 [ 1031.105337][T22350] ? __pfx___x64_sys_openat+0x10/0x10 [ 1031.105369][T22350] ? rcu_is_watching+0x12/0xc0 [ 1031.105393][T22350] do_syscall_64+0x115/0x840 [ 1031.105419][T22350] ? clear_bhb_loop+0x40/0x90 [ 1031.105441][T22350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.105460][T22350] RIP: 0033:0x7fb04cb9ce59 [ 1031.105476][T22350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1031.105495][T22350] RSP: 002b:00007fb04da27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1031.105514][T22350] RAX: ffffffffffffffda RBX: 00007fb04ce16090 RCX: 00007fb04cb9ce59 [ 1031.105527][T22350] RDX: 0000000000000800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1031.105538][T22350] RBP: 00007fb04cc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1031.105549][T22350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1031.105560][T22350] R13: 00007fb04ce16128 R14: 00007fb04ce16090 R15: 00007fff0b8e05e8 [ 1031.105584][T22350] [ 1031.517691][T22361] Process accounting resumed [ 1031.694638][T22358] netlink: 4332 bytes leftover after parsing attributes in process `syz.1.3494'. [ 1032.912647][T22370] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1032.926722][T22370] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1032.952739][T22370] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1032.976441][T22370] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1034.202981][T15997] Bluetooth: hci4: command 0x0c1a tx timeout [ 1034.398800][T22410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3505'. [ 1034.919906][T15997] Bluetooth: hci2: command 0x0406 tx timeout [ 1035.000092][T15997] Bluetooth: hci1: command 0x2016 tx timeout [ 1035.006641][T15997] Bluetooth: hci3: command 0x2016 tx timeout [ 1036.596453][T22446] netlink: 4332 bytes leftover after parsing attributes in process `syz.0.3513'. [ 1037.797816][T22475] FAULT_INJECTION: forcing a failure. [ 1037.797816][T22475] name failslab, interval 1, probability 0, space 0, times 0 [ 1037.905251][T22475] CPU: 0 UID: 0 PID: 22475 Comm: syz.4.3519 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1037.905293][T22475] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1037.905300][T22475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1037.905312][T22475] Call Trace: [ 1037.905319][T22475] [ 1037.905327][T22475] dump_stack_lvl+0x100/0x190 [ 1037.905365][T22475] should_fail_ex.cold+0x5/0xa [ 1037.905388][T22475] should_failslab+0xc2/0x120 [ 1037.905411][T22475] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1037.905437][T22475] ? shrinker_alloc+0xf5/0xc30 [ 1037.905462][T22475] shrinker_alloc+0xf5/0xc30 [ 1037.905483][T22475] ? mark_held_locks+0x40/0x70 [ 1037.905511][T22475] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1037.905537][T22475] ? rcu_is_watching+0x12/0xc0 [ 1037.905559][T22475] ? __pfx_shrinker_alloc+0x10/0x10 [ 1037.905581][T22475] ? lockdep_init_map_type+0x5c/0x250 [ 1037.905609][T22475] ? lockdep_init_map_type+0x5c/0x250 [ 1037.905639][T22475] ? __raw_spin_lock_init+0x3a/0x110 [ 1037.905659][T22475] ? __init_rwsem+0x10e/0x180 [ 1037.905680][T22475] alloc_super+0x7c7/0xd20 [ 1037.905702][T22475] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1037.905732][T22475] sget_fc+0x117/0xc70 [ 1037.905751][T22475] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1037.905771][T22475] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1037.905798][T22475] get_tree_nodev+0x28/0x190 [ 1037.905819][T22475] mqueue_get_tree+0xf1/0x130 [ 1037.905848][T22475] vfs_get_tree+0x92/0x320 [ 1037.905865][T22475] fc_mount_longterm+0x1a/0x270 [ 1037.905886][T22475] mq_init_ns+0x482/0x820 [ 1037.905907][T22475] copy_ipcs+0x3dd/0x7e0 [ 1037.905930][T22475] create_new_namespaces+0x20a/0xac0 [ 1037.905953][T22475] ? security_capable+0x80/0x260 [ 1037.905974][T22475] unshare_nsproxy_namespaces+0xf2/0x220 [ 1037.905999][T22475] ksys_unshare+0x438/0xab0 [ 1037.906026][T22475] ? __pfx_ksys_unshare+0x10/0x10 [ 1037.906051][T22475] ? xfd_validate_state+0x129/0x190 [ 1037.906078][T22475] __x64_sys_unshare+0x31/0x40 [ 1037.906103][T22475] do_syscall_64+0x115/0x840 [ 1037.906127][T22475] ? clear_bhb_loop+0x40/0x90 [ 1037.906150][T22475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.906169][T22475] RIP: 0033:0x7f632e99ce59 [ 1037.906185][T22475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1037.906203][T22475] RSP: 002b:00007f632cbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1037.906222][T22475] RAX: ffffffffffffffda RBX: 00007f632ec16180 RCX: 00007f632e99ce59 [ 1037.906234][T22475] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 1037.906245][T22475] RBP: 00007f632ea32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1037.906256][T22475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1037.906273][T22475] R13: 00007f632ec16218 R14: 00007f632ec16180 R15: 00007ffddbdac698 [ 1037.906297][T22475] [ 1039.633061][T22421] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 1039.724674][T22491] FAULT_INJECTION: forcing a failure. [ 1039.724674][T22491] name failslab, interval 1, probability 0, space 0, times 0 [ 1039.780058][T22492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3522'. [ 1039.838634][T22491] CPU: 0 UID: 0 PID: 22491 Comm: syz.4.3522 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1039.838667][T22491] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1039.838675][T22491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1039.838686][T22491] Call Trace: [ 1039.838693][T22491] [ 1039.838700][T22491] dump_stack_lvl+0x100/0x190 [ 1039.838736][T22491] should_fail_ex.cold+0x5/0xa [ 1039.838760][T22491] should_failslab+0xc2/0x120 [ 1039.838783][T22491] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1039.838809][T22491] ? fib6_net_init+0x26a/0xb20 [ 1039.838884][T22491] ? lockdep_init_map_type+0x5c/0x250 [ 1039.838918][T22491] fib6_net_init+0x26a/0xb20 [ 1039.838942][T22491] ? __pfx_fib6_net_init+0x10/0x10 [ 1039.838965][T22491] ops_init+0x1e2/0x5f0 [ 1039.838988][T22491] setup_net+0x118/0x3a0 [ 1039.839009][T22491] ? __pfx_setup_net+0x10/0x10 [ 1039.839030][T22491] ? mutex_init_lockdep+0xf1/0x120 [ 1039.839051][T22491] copy_net_ns+0x46f/0x7c0 [ 1039.839075][T22491] create_new_namespaces+0x3ea/0xac0 [ 1039.839103][T22491] unshare_nsproxy_namespaces+0xf2/0x220 [ 1039.839127][T22491] ksys_unshare+0x438/0xab0 [ 1039.839154][T22491] ? __pfx_ksys_unshare+0x10/0x10 [ 1039.839178][T22491] ? xfd_validate_state+0x129/0x190 [ 1039.839196][T22491] ? ksys_write+0x1ac/0x250 [ 1039.839223][T22491] __x64_sys_unshare+0x31/0x40 [ 1039.839249][T22491] do_syscall_64+0x115/0x840 [ 1039.839274][T22491] ? clear_bhb_loop+0x40/0x90 [ 1039.839296][T22491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.839315][T22491] RIP: 0033:0x7f632e99ce59 [ 1039.839331][T22491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1039.839350][T22491] RSP: 002b:00007f632f79d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1039.839369][T22491] RAX: ffffffffffffffda RBX: 00007f632ec15fa0 RCX: 00007f632e99ce59 [ 1039.839388][T22491] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1039.839400][T22491] RBP: 00007f632ea32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1039.839411][T22491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1039.839421][T22491] R13: 00007f632ec16038 R14: 00007f632ec15fa0 R15: 00007ffddbdac698 [ 1039.839444][T22491] [ 1040.731434][T22491] Process accounting paused [ 1041.089677][T22421] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1041.183752][T22514] overlayfs: missing 'lowerdir' [ 1041.507892][T22531] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3528'. [ 1041.688408][T15967] Bluetooth: hci4: command 0x0c1a tx timeout [ 1043.123014][T22421] Bluetooth: hci2: command 0x0406 tx timeout [ 1043.577154][T22562] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3537'. [ 1043.760990][T22421] Bluetooth: hci4: command 0x0c1a tx timeout [ 1044.542708][T15967] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 1044.658634][T22583] overlayfs: missing 'lowerdir' [ 1045.195046][T15967] Bluetooth: hci2: command 0x0406 tx timeout [ 1045.467730][T22609] futex_wake_op: syz.2.3545 tries to shift op by -2048; fix this program [ 1046.401896][T22628] sctp: [Deprecated]: syz.2.3548 (pid 22628) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1046.401896][T22628] Use struct sctp_sack_info instead [ 1046.545601][T22421] Bluetooth: hci1: command 0x2016 tx timeout [ 1048.615889][T22515] Bluetooth: hci1: command 0x2016 tx timeout [ 1048.822270][T22648] FAULT_INJECTION: forcing a failure. [ 1048.822270][T22648] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1048.966437][T22648] CPU: 0 UID: 0 PID: 22648 Comm: syz.2.3551 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1048.966472][T22648] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1048.966480][T22648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1048.966492][T22648] Call Trace: [ 1048.966499][T22648] [ 1048.966507][T22648] dump_stack_lvl+0x100/0x190 [ 1048.966544][T22648] should_fail_ex.cold+0x5/0xa [ 1048.966567][T22648] _copy_from_user+0x2e/0xd0 [ 1048.966594][T22648] copy_mount_options+0x76/0x190 [ 1048.966624][T22648] __x64_sys_mount+0x1ab/0x310 [ 1048.966658][T22648] ? __pfx___x64_sys_mount+0x10/0x10 [ 1048.966686][T22648] ? rcu_is_watching+0x12/0xc0 [ 1048.966709][T22648] do_syscall_64+0x115/0x840 [ 1048.966735][T22648] ? clear_bhb_loop+0x40/0x90 [ 1048.966758][T22648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.966777][T22648] RIP: 0033:0x7fb04cb9ce59 [ 1048.966793][T22648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1048.966811][T22648] RSP: 002b:00007fb04da27028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1048.966829][T22648] RAX: ffffffffffffffda RBX: 00007fb04ce16090 RCX: 00007fb04cb9ce59 [ 1048.966841][T22648] RDX: 0000200000000140 RSI: 0000000000000000 RDI: 0000200000000080 [ 1048.966853][T22648] RBP: 00007fb04cc32d6f R08: 00002000000002c0 R09: 0000000000000000 [ 1048.966864][T22648] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1048.966875][T22648] R13: 00007fb04ce16128 R14: 00007fb04ce16090 R15: 00007fff0b8e05e8 [ 1048.966897][T22648] [ 1050.411996][T22664] netlink: 4332 bytes leftover after parsing attributes in process `syz.2.3556'. [ 1053.000567][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.007192][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1053.216556][T22719] futex_wake_op: syz.1.3568 tries to shift op by -2048; fix this program [ 1053.863724][T22737] random: crng reseeded on system resumption [ 1053.882941][T22741] FAULT_INJECTION: forcing a failure. [ 1053.882941][T22741] name failslab, interval 1, probability 0, space 0, times 0 [ 1053.939832][T22741] CPU: 0 UID: 0 PID: 22741 Comm: syz.0.3573 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1053.939866][T22741] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1053.939874][T22741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1053.939884][T22741] Call Trace: [ 1053.939891][T22741] [ 1053.939899][T22741] dump_stack_lvl+0x100/0x190 [ 1053.939939][T22741] should_fail_ex.cold+0x5/0xa [ 1053.939964][T22741] should_failslab+0xc2/0x120 [ 1053.939988][T22741] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1053.940018][T22741] ? shmem_alloc_inode+0x25/0x50 [ 1053.940043][T22741] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1053.940067][T22741] shmem_alloc_inode+0x25/0x50 [ 1053.940089][T22741] alloc_inode+0x68/0x250 [ 1053.940117][T22741] new_inode+0x22/0x1c0 [ 1053.940154][T22741] shmem_get_inode+0x1e3/0xfb0 [ 1053.940181][T22741] ? __pfx_shmem_get_inode+0x10/0x10 [ 1053.940207][T22741] ? do_raw_spin_unlock+0x145/0x1e0 [ 1053.940232][T22741] shmem_mknod+0x217/0x480 [ 1053.940259][T22741] ? __pfx_shmem_mknod+0x10/0x10 [ 1053.940282][T22741] ? bpf_lsm_inode_create+0x9/0x10 [ 1053.940312][T22741] ? __pfx_shmem_create+0x10/0x10 [ 1053.940337][T22741] lookup_open.isra.0+0xc47/0x11b0 [ 1053.940362][T22741] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1053.940387][T22741] ? __pfx___might_resched+0x10/0x10 [ 1053.940406][T22741] ? mnt_get_write_access+0x52/0x2f0 [ 1053.940439][T22741] ? __pfx_down_write+0x10/0x10 [ 1053.940468][T22741] ? mnt_get_write_access+0x1e9/0x2f0 [ 1053.940499][T22741] path_openat+0x2291/0x31a0 [ 1053.940530][T22741] ? __pfx_path_openat+0x10/0x10 [ 1053.940562][T22741] do_file_open+0x20e/0x430 [ 1053.940586][T22741] ? __pfx_do_file_open+0x10/0x10 [ 1053.940626][T22741] ? alloc_fd+0x476/0x790 [ 1053.940650][T22741] ? do_getname+0x191/0x390 [ 1053.940679][T22741] do_sys_openat2+0x10d/0x1e0 [ 1053.940707][T22741] ? __pfx_do_sys_openat2+0x10/0x10 [ 1053.940744][T22741] __x64_sys_openat+0x12d/0x210 [ 1053.940772][T22741] ? __pfx___x64_sys_openat+0x10/0x10 [ 1053.940805][T22741] ? rcu_is_watching+0x12/0xc0 [ 1053.940829][T22741] do_syscall_64+0x115/0x840 [ 1053.940854][T22741] ? clear_bhb_loop+0x40/0x90 [ 1053.940876][T22741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.940894][T22741] RIP: 0033:0x7f9623f9ce59 [ 1053.940911][T22741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1053.940928][T22741] RSP: 002b:00007f9624e81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1053.940947][T22741] RAX: ffffffffffffffda RBX: 00007f9624216090 RCX: 00007f9623f9ce59 [ 1053.940958][T22741] RDX: 0000000000141440 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 1053.940970][T22741] RBP: 00007f9624032d6f R08: 0000000000000000 R09: 0000000000000000 [ 1053.940981][T22741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1053.940992][T22741] R13: 00007f9624216128 R14: 00007f9624216090 R15: 00007ffef5901bc8 [ 1053.941016][T22741] [ 1056.996832][T22772] FAULT_INJECTION: forcing a failure. [ 1056.996832][T22772] name failslab, interval 1, probability 0, space 0, times 0 [ 1057.089304][T22772] CPU: 0 UID: 0 PID: 22772 Comm: syz.4.3578 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1057.089339][T22772] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1057.089347][T22772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1057.089358][T22772] Call Trace: [ 1057.089365][T22772] [ 1057.089373][T22772] dump_stack_lvl+0x100/0x190 [ 1057.089408][T22772] should_fail_ex.cold+0x5/0xa [ 1057.089431][T22772] ? __register_sysctl_table+0xbe4/0x1650 [ 1057.089456][T22772] should_failslab+0xc2/0x120 [ 1057.089478][T22772] __kmalloc_noprof+0xe0/0x850 [ 1057.089512][T22772] __register_sysctl_table+0xbe4/0x1650 [ 1057.089541][T22772] ? __pfx___register_sysctl_table+0x10/0x10 [ 1057.089564][T22772] ? is_module_address+0x69/0xf0 [ 1057.089582][T22772] ? register_net_sysctl_sz+0x222/0x430 [ 1057.089701][T22772] ? __asan_memcpy+0x3c/0x60 [ 1057.089729][T22772] ? __pfx_nf_lwtunnel_net_init+0x10/0x10 [ 1057.089756][T22772] nf_lwtunnel_net_init+0x60/0xf0 [ 1057.089783][T22772] ops_init+0x1e2/0x5f0 [ 1057.089809][T22772] setup_net+0x118/0x3a0 [ 1057.089829][T22772] ? __pfx_setup_net+0x10/0x10 [ 1057.089849][T22772] ? mutex_init_lockdep+0xf1/0x120 [ 1057.089872][T22772] copy_net_ns+0x46f/0x7c0 [ 1057.089897][T22772] create_new_namespaces+0x3ea/0xac0 [ 1057.089925][T22772] unshare_nsproxy_namespaces+0xf2/0x220 [ 1057.089950][T22772] ksys_unshare+0x438/0xab0 [ 1057.089977][T22772] ? __pfx_ksys_unshare+0x10/0x10 [ 1057.090000][T22772] ? xfd_validate_state+0x129/0x190 [ 1057.090018][T22772] ? exit_to_user_mode_loop+0xf3/0x670 [ 1057.090053][T22772] __x64_sys_unshare+0x31/0x40 [ 1057.090078][T22772] do_syscall_64+0x115/0x840 [ 1057.090103][T22772] ? clear_bhb_loop+0x40/0x90 [ 1057.090125][T22772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.090143][T22772] RIP: 0033:0x7f632e99ce59 [ 1057.090159][T22772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1057.090177][T22772] RSP: 002b:00007f632f77c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1057.090195][T22772] RAX: ffffffffffffffda RBX: 00007f632ec16090 RCX: 00007f632e99ce59 [ 1057.090207][T22772] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1057.090218][T22772] RBP: 00007f632ea32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1057.090229][T22772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1057.090239][T22772] R13: 00007f632ec16128 R14: 00007f632ec16090 R15: 00007ffddbdac698 [ 1057.090263][T22772] [ 1057.340698][T22772] sysctl could not get directory: /net -12 [ 1059.218555][T22813] netlink: 4332 bytes leftover after parsing attributes in process `syz.4.3587'. [ 1059.393202][T22817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3588'. [ 1060.149614][T22829] FAULT_INJECTION: forcing a failure. [ 1060.149614][T22829] name failslab, interval 1, probability 0, space 0, times 0 [ 1060.195175][T22829] CPU: 0 UID: 0 PID: 22829 Comm: syz.0.3591 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1060.195209][T22829] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1060.195218][T22829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1060.195229][T22829] Call Trace: [ 1060.195238][T22829] [ 1060.195246][T22829] dump_stack_lvl+0x100/0x190 [ 1060.195281][T22829] should_fail_ex.cold+0x5/0xa [ 1060.195305][T22829] ? __register_sysctl_table+0xac/0x1650 [ 1060.195329][T22829] should_failslab+0xc2/0x120 [ 1060.195351][T22829] __kmalloc_noprof+0xe0/0x850 [ 1060.195384][T22829] ? __pfx_nf_lwtunnel_net_init+0x10/0x10 [ 1060.195410][T22829] __register_sysctl_table+0xac/0x1650 [ 1060.195433][T22829] ? is_module_address+0x5f/0xf0 [ 1060.195454][T22829] ? __pfx___register_sysctl_table+0x10/0x10 [ 1060.195477][T22829] ? is_module_address+0x69/0xf0 [ 1060.195493][T22829] ? register_net_sysctl_sz+0x222/0x430 [ 1060.195522][T22829] ? __asan_memcpy+0x3c/0x60 [ 1060.195549][T22829] ? __pfx_nf_lwtunnel_net_init+0x10/0x10 [ 1060.195578][T22829] nf_lwtunnel_net_init+0x60/0xf0 [ 1060.195607][T22829] ops_init+0x1e2/0x5f0 [ 1060.195628][T22829] setup_net+0x118/0x3a0 [ 1060.195652][T22829] ? __pfx_setup_net+0x10/0x10 [ 1060.195672][T22829] ? mutex_init_lockdep+0xf1/0x120 [ 1060.195694][T22829] copy_net_ns+0x46f/0x7c0 [ 1060.195721][T22829] create_new_namespaces+0x3ea/0xac0 [ 1060.195749][T22829] unshare_nsproxy_namespaces+0xf2/0x220 [ 1060.195773][T22829] ksys_unshare+0x438/0xab0 [ 1060.195800][T22829] ? __pfx_ksys_unshare+0x10/0x10 [ 1060.195824][T22829] ? xfd_validate_state+0x129/0x190 [ 1060.195842][T22829] ? exit_to_user_mode_loop+0xf3/0x670 [ 1060.195877][T22829] __x64_sys_unshare+0x31/0x40 [ 1060.195903][T22829] do_syscall_64+0x115/0x840 [ 1060.195927][T22829] ? clear_bhb_loop+0x40/0x90 [ 1060.195949][T22829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.195968][T22829] RIP: 0033:0x7f9623f9ce59 [ 1060.195984][T22829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1060.196002][T22829] RSP: 002b:00007f9624e81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1060.196020][T22829] RAX: ffffffffffffffda RBX: 00007f9624216090 RCX: 00007f9623f9ce59 [ 1060.196033][T22829] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1060.196044][T22829] RBP: 00007f9624032d6f R08: 0000000000000000 R09: 0000000000000000 [ 1060.196055][T22829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1060.196065][T22829] R13: 00007f9624216128 R14: 00007f9624216090 R15: 00007ffef5901bc8 [ 1060.196089][T22829] [ 1061.450587][T22839] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 1062.024867][T22421] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 1062.032603][T22421] Bluetooth: hci4: Invalid handle: 0x3a4a > 0x0eff [ 1062.116856][T22832] Process accounting paused [ 1062.287721][T22853] netlink: 4332 bytes leftover after parsing attributes in process `syz.1.3597'. [ 1064.502473][ T5365] Process accounting resumed [ 1064.567153][ T5365] Process accounting resumed [ 1064.722929][T22844] Process accounting resumed [ 1065.610644][T22893] FAULT_INJECTION: forcing a failure. [ 1065.610644][T22893] name failslab, interval 1, probability 0, space 0, times 0 [ 1065.755342][T22893] CPU: 0 UID: 0 PID: 22893 Comm: syz.2.3604 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1065.755376][T22893] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1065.755384][T22893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1065.755395][T22893] Call Trace: [ 1065.755401][T22893] [ 1065.755409][T22893] dump_stack_lvl+0x100/0x190 [ 1065.755445][T22893] should_fail_ex.cold+0x5/0xa [ 1065.755469][T22893] should_failslab+0xc2/0x120 [ 1065.755500][T22893] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 1065.755520][T22893] ? nf_lwtunnel_net_init+0x38/0xf0 [ 1065.755545][T22893] ? __pfx__proc_mkdir+0x10/0x10 [ 1065.755568][T22893] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 1065.755600][T22893] ? __pfx_nf_lwtunnel_net_init+0x10/0x10 [ 1065.755625][T22893] kmemdup_noprof+0x29/0x60 [ 1065.755644][T22893] nf_lwtunnel_net_init+0x38/0xf0 [ 1065.755670][T22893] ops_init+0x1e2/0x5f0 [ 1065.755691][T22893] setup_net+0x118/0x3a0 [ 1065.755711][T22893] ? __pfx_setup_net+0x10/0x10 [ 1065.755731][T22893] ? mutex_init_lockdep+0xf1/0x120 [ 1065.755753][T22893] copy_net_ns+0x46f/0x7c0 [ 1065.755777][T22893] create_new_namespaces+0x3ea/0xac0 [ 1065.755805][T22893] unshare_nsproxy_namespaces+0xf2/0x220 [ 1065.755829][T22893] ksys_unshare+0x438/0xab0 [ 1065.755857][T22893] ? __pfx_ksys_unshare+0x10/0x10 [ 1065.755880][T22893] ? xfd_validate_state+0x129/0x190 [ 1065.755898][T22893] ? exit_to_user_mode_loop+0xf3/0x670 [ 1065.755935][T22893] __x64_sys_unshare+0x31/0x40 [ 1065.755960][T22893] do_syscall_64+0x115/0x840 [ 1065.755986][T22893] ? clear_bhb_loop+0x40/0x90 [ 1065.756009][T22893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.756028][T22893] RIP: 0033:0x7fb04cb9ce59 [ 1065.756043][T22893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1065.756061][T22893] RSP: 002b:00007fb04da27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1065.756080][T22893] RAX: ffffffffffffffda RBX: 00007fb04ce16090 RCX: 00007fb04cb9ce59 [ 1065.756092][T22893] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1065.756103][T22893] RBP: 00007fb04cc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1065.756114][T22893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1065.756125][T22893] R13: 00007fb04ce16128 R14: 00007fb04ce16090 R15: 00007fff0b8e05e8 [ 1065.756147][T22893] [ 1068.356689][T22924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3611'. [ 1069.344442][T16579] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 1348 with max blocks 10 with error 74 [ 1069.433463][T16579] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1069.433463][T16579] [ 1071.613723][T22948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3616'. [ 1075.930769][T23047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3638'. [ 1076.252581][T23036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3635'. [ 1079.478684][T23096] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1079.508246][T23096] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1079.523559][T23096] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1079.543685][T23096] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1080.145134][T22521] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.671816][T22521] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.889347][T22421] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1080.908427][T22421] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1080.921528][T22421] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1080.932636][T22421] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1080.948891][T22421] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1081.086735][T22521] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.350735][T22521] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.505708][T22421] Bluetooth: hci2: command 0x0406 tx timeout [ 1081.582114][T22515] Bluetooth: hci3: command 0x2016 tx timeout [ 1081.588331][T22421] Bluetooth: hci1: command 0x2016 tx timeout [ 1082.743096][T23152] binder: 23148:23152 ioctl 541b 0 returned -22 [ 1082.893032][T23156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3660'. [ 1082.927316][T22521] bridge_slave_1: left allmulticast mode [ 1082.964958][T22521] bridge_slave_1: left promiscuous mode [ 1082.986315][T22521] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.016239][T22421] Bluetooth: hci0: command tx timeout [ 1083.059867][T22521] bridge_slave_0: left allmulticast mode [ 1083.088284][T22521] bridge_slave_0: left promiscuous mode [ 1083.114845][T22521] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.344248][ T30] audit: type=1800 audit(4294967381.177:31): pid=23164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3661" name="SYSV000006a2" dev="tmpfs" ino=0 res=0 errno=0 [ 1083.695270][ T30] audit: type=1800 audit(4294967381.539:32): pid=23172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3663" name="lu_gp_id" dev="configfs" ino=117685 res=0 errno=0 [ 1083.717080][T23172] kstrtoul() returned -22 for lu_gp_id [ 1083.986177][T22521] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1084.061254][T22521] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1084.107485][T22521] bond0 (unregistering): Released all slaves [ 1084.387881][T22521] ovs_: left promiscuous mode [ 1084.697648][ T5294] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1085.084771][T22421] Bluetooth: hci0: command tx timeout [ 1086.407558][T23126] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.433940][T23126] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.466913][T23126] bridge_slave_0: entered allmulticast mode [ 1086.502938][T23126] bridge_slave_0: entered promiscuous mode [ 1086.603040][T23126] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.631851][T23126] bridge0: port 2(bridge_slave_1) entered disabled state [ 1086.655991][T23126] bridge_slave_1: entered allmulticast mode [ 1086.681914][T23126] bridge_slave_1: entered promiscuous mode [ 1086.828972][ T5294] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1086.866144][T23126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1086.931651][T23126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1087.154164][T22421] Bluetooth: hci0: command tx timeout [ 1087.311709][T23126] team0: Port device team_slave_0 added [ 1087.338917][T23126] team0: Port device team_slave_1 added [ 1087.633120][T23126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1087.677376][T23126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1087.787482][T23126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1087.953417][T23126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1087.985975][T23126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1088.118397][T23126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1088.465190][T23126] hsr_slave_0: entered promiscuous mode [ 1088.502083][T23126] hsr_slave_1: entered promiscuous mode [ 1088.528993][T23126] debugfs: 'hsr0' already exists in 'hsr' [ 1088.557739][T23126] Cannot create hsr debugfs directory [ 1088.781561][T23250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3670'. [ 1089.165870][ T5294] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1089.224329][T22421] Bluetooth: hci0: command tx timeout [ 1089.293686][ T30] audit: type=1800 audit(4294967387.155:33): pid=23263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3672" name="features" dev="configfs" ino=118046 res=0 errno=0 [ 1089.325955][T23263] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[15011] was attempted by ""[23263] [ 1089.440700][T23257] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3672'. [ 1090.501556][T23274] [U] 0 [ 1090.525694][T23273] [U] QUI [ 1090.694155][T22521] hsr_slave_0: left promiscuous mode [ 1090.724904][T22521] hsr_slave_1: left promiscuous mode [ 1090.749669][T22521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1090.780772][T22521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1090.821906][T22521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1090.866220][T22521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1090.949402][T22521] veth1_macvtap: left promiscuous mode [ 1090.976677][T22521] veth0_macvtap: left promiscuous mode [ 1090.989502][T23281] cougar: G6 mapped to space [ 1091.005063][T22521] veth0_vlan: left promiscuous mode [ 1091.899199][T22521] team0 (unregistering): Port device team_slave_1 removed [ 1091.962845][T22521] team0 (unregistering): Port device team_slave_0 removed [ 1096.920769][T23304] Process accounting resumed [ 1098.724160][T23126] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1098.801689][T23126] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1099.039594][T23126] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1099.091005][T23126] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1099.122384][T23126] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1099.181689][T23126] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1099.292726][T23126] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1099.366017][T23126] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1100.847884][T23126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1101.015073][T23126] 8021q: adding VLAN 0 to HW filter on device team0 [ 1101.086979][T22521] bridge0: port 1(bridge_slave_0) entered blocking state [ 1101.094218][T22521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1101.207000][T22521] bridge0: port 2(bridge_slave_1) entered blocking state [ 1101.214296][T22521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1103.608660][T23464] binder: BINDER_SET_CONTEXT_MGR already set [ 1103.679600][T23464] binder: 23462:23464 ioctl 40046207 0 returned -16 [ 1103.773238][T23126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1104.782121][T23126] veth0_vlan: entered promiscuous mode [ 1104.830697][T23126] veth1_vlan: entered promiscuous mode [ 1105.271096][T23495] netlink: 4332 bytes leftover after parsing attributes in process `syz.0.3701'. [ 1105.538312][T23126] veth0_macvtap: entered promiscuous mode [ 1105.599473][T23126] veth1_macvtap: entered promiscuous mode [ 1106.027095][T23126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1106.107640][T23126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1106.204849][T17316] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.313184][T17316] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.352300][T17316] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.401852][T17316] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.279733][T23508] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3704'. [ 1107.306999][T16569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1107.364756][T16569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1107.532236][T16579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1107.575138][T16579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1113.239314][T23563] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3718'. [ 1113.434333][T23563] bond0: (slave bond_slave_0): Releasing backup interface [ 1114.141869][T23580] FAULT_INJECTION: forcing a failure. [ 1114.141869][T23580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1114.165586][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1114.178423][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1114.258114][T23580] CPU: 0 UID: 0 PID: 23580 Comm: syz.4.3721 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1114.258148][T23580] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1114.258155][T23580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1114.258166][T23580] Call Trace: [ 1114.258173][T23580] [ 1114.258181][T23580] dump_stack_lvl+0x100/0x190 [ 1114.258220][T23580] should_fail_ex.cold+0x5/0xa [ 1114.258244][T23580] _copy_from_user+0x2e/0xd0 [ 1114.258273][T23580] copy_msghdr_from_user+0x9f/0x4f0 [ 1114.258301][T23580] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1114.258330][T23580] ? __pfx__kstrtoull+0x10/0x10 [ 1114.258356][T23580] ___sys_sendmsg+0x106/0x1e0 [ 1114.258381][T23580] ? __pfx____sys_sendmsg+0x10/0x10 [ 1114.258417][T23580] ? find_held_lock+0x2b/0x80 [ 1114.258456][T23580] __sys_sendmmsg+0x205/0x430 [ 1114.258479][T23580] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1114.258506][T23580] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1114.258545][T23580] ? fput+0x79/0x100 [ 1114.258570][T23580] ? ksys_write+0x1ac/0x250 [ 1114.258590][T23580] ? __pfx_ksys_write+0x10/0x10 [ 1114.258621][T23580] __x64_sys_sendmmsg+0x9c/0x100 [ 1114.258639][T23580] ? lockdep_hardirqs_on+0x78/0x100 [ 1114.258665][T23580] do_syscall_64+0x115/0x840 [ 1114.258689][T23580] ? clear_bhb_loop+0x40/0x90 [ 1114.258711][T23580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.258730][T23580] RIP: 0033:0x7f4f77f9ce59 [ 1114.258746][T23580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1114.258764][T23580] RSP: 002b:00007f4f78dfe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1114.258782][T23580] RAX: ffffffffffffffda RBX: 00007f4f78216180 RCX: 00007f4f77f9ce59 [ 1114.258794][T23580] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 1114.258804][T23580] RBP: 00007f4f78dfe090 R08: 0000000000000000 R09: 0000000000000000 [ 1114.258815][T23580] R10: 0000000007000000 R11: 0000000000000246 R12: 0000000000000001 [ 1114.258825][T23580] R13: 00007f4f78216218 R14: 00007f4f78216180 R15: 00007ffe0c95a8f8 [ 1114.258848][T23580] [ 1115.187130][T23588] FAULT_INJECTION: forcing a failure. [ 1115.187130][T23588] name failslab, interval 1, probability 0, space 0, times 0 [ 1115.229545][T23588] CPU: 0 UID: 0 PID: 23588 Comm: syz.0.3724 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1115.229580][T23588] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1115.229587][T23588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1115.229598][T23588] Call Trace: [ 1115.229604][T23588] [ 1115.229612][T23588] dump_stack_lvl+0x100/0x190 [ 1115.229649][T23588] should_fail_ex.cold+0x5/0xa [ 1115.229677][T23588] should_failslab+0xc2/0x120 [ 1115.229701][T23588] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1115.229727][T23588] ? kvm_create_lapic+0xa9/0x440 [ 1115.229759][T23588] kvm_create_lapic+0xa9/0x440 [ 1115.229785][T23588] kvm_arch_vcpu_create+0x286/0xac0 [ 1115.229812][T23588] kvm_vm_ioctl+0x756/0x4050 [ 1115.229845][T23588] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1115.229884][T23588] ? kasan_quarantine_put+0x104/0x240 [ 1115.229902][T23588] ? lockdep_hardirqs_on+0x78/0x100 [ 1115.229928][T23588] ? find_held_lock+0x2b/0x80 [ 1115.229950][T23588] ? tomoyo_path_number_perm+0x28f/0x580 [ 1115.229975][T23588] ? tomoyo_path_number_perm+0x28f/0x580 [ 1115.230000][T23588] ? tomoyo_path_number_perm+0x188/0x580 [ 1115.230024][T23588] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1115.230046][T23588] ? futex_wait+0x11e/0x370 [ 1115.230075][T23588] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1115.230111][T23588] ? do_vfs_ioctl+0x226/0x13e0 [ 1115.230130][T23588] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1115.230154][T23588] ? find_held_lock+0x2b/0x80 [ 1115.230175][T23588] ? __fget_files+0x215/0x3d0 [ 1115.230195][T23588] ? hook_file_ioctl_common+0x149/0x410 [ 1115.230223][T23588] ? __fget_files+0x21f/0x3d0 [ 1115.230247][T23588] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1115.230271][T23588] __x64_sys_ioctl+0x18e/0x210 [ 1115.230291][T23588] do_syscall_64+0x115/0x840 [ 1115.230317][T23588] ? clear_bhb_loop+0x40/0x90 [ 1115.230339][T23588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.230359][T23588] RIP: 0033:0x7f9623f9ce59 [ 1115.230375][T23588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1115.230393][T23588] RSP: 002b:00007f9624ea2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1115.230412][T23588] RAX: ffffffffffffffda RBX: 00007f9624215fa0 RCX: 00007f9623f9ce59 [ 1115.230424][T23588] RDX: 0000000000000004 RSI: 000000000000ae41 RDI: 0000000000000003 [ 1115.230434][T23588] RBP: 00007f9624032d6f R08: 0000000000000000 R09: 0000000000000000 [ 1115.230445][T23588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1115.230456][T23588] R13: 00007f9624216038 R14: 00007f9624215fa0 R15: 00007ffef5901bc8 [ 1115.230478][T23588] [ 1115.800120][T23586] netlink: 4332 bytes leftover after parsing attributes in process `syz.4.3723'. [ 1116.382809][T23602] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3729'. [ 1116.969027][T23615] FAULT_INJECTION: forcing a failure. [ 1116.969027][T23615] name failslab, interval 1, probability 0, space 0, times 0 [ 1117.037679][T23620] futex_wake_op: syz.4.3732 tries to shift op by -2048; fix this program [ 1117.060472][T23615] CPU: 0 UID: 0 PID: 23615 Comm: syz.2.3731 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1117.060506][T23615] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1117.060513][T23615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1117.060523][T23615] Call Trace: [ 1117.060530][T23615] [ 1117.060538][T23615] dump_stack_lvl+0x100/0x190 [ 1117.060582][T23615] should_fail_ex.cold+0x5/0xa [ 1117.060605][T23615] should_failslab+0xc2/0x120 [ 1117.060628][T23615] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1117.060658][T23615] ? __alloc_skb+0x140/0x710 [ 1117.060674][T23615] ? __alloc_skb+0x5b7/0x710 [ 1117.060693][T23615] __alloc_skb+0x140/0x710 [ 1117.060708][T23615] ? __alloc_skb+0x5b7/0x710 [ 1117.060724][T23615] ? __pfx___alloc_skb+0x10/0x10 [ 1117.060742][T23615] ? __lock_acquire+0x4a5/0x2630 [ 1117.060773][T23615] alloc_skb_with_frags+0xdd/0x760 [ 1117.060799][T23615] sock_alloc_send_pskb+0x801/0x980 [ 1117.060829][T23615] ? is_bpf_text_address+0x8a/0x1a0 [ 1117.060858][T23615] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1117.060893][T23615] ? kernel_text_address+0x8d/0x100 [ 1117.060913][T23615] ? __kernel_text_address+0xd/0x30 [ 1117.060934][T23615] ? __lock_acquire+0x4a5/0x2630 [ 1117.060962][T23615] ? __lock_acquire+0x4a5/0x2630 [ 1117.060991][T23615] __ip_append_data+0x20c9/0x44c0 [ 1117.061023][T23615] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1117.061050][T23615] ? find_held_lock+0x2b/0x80 [ 1117.061081][T23615] ? ip_dst_mtu_maybe_forward.constprop.0+0x3e9/0x750 [ 1117.061112][T23615] ? __pfx___ip_append_data+0x10/0x10 [ 1117.061143][T23615] ip_make_skb+0x28b/0x310 [ 1117.061171][T23615] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1117.061198][T23615] ? __pfx_ip_make_skb+0x10/0x10 [ 1117.061236][T23615] ? udp_sendmsg+0x171c/0x2720 [ 1117.061259][T23615] udp_sendmsg+0x171c/0x2720 [ 1117.061290][T23615] ? __pfx_udp_sendmsg+0x10/0x10 [ 1117.061338][T23615] ? __import_iovec+0x1d2/0x640 [ 1117.061366][T23615] ? __pfx_udp_sendmsg+0x10/0x10 [ 1117.061390][T23615] inet_sendmsg+0x105/0x140 [ 1117.061418][T23615] ____sys_sendmsg+0x98d/0xb70 [ 1117.061440][T23615] ? __pfx_inet_sendmsg+0x10/0x10 [ 1117.061469][T23615] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1117.061496][T23615] ? __pfx__kstrtoull+0x10/0x10 [ 1117.061518][T23615] ___sys_sendmsg+0x190/0x1e0 [ 1117.061544][T23615] ? __pfx____sys_sendmsg+0x10/0x10 [ 1117.061586][T23615] ? find_held_lock+0x2b/0x80 [ 1117.061622][T23615] __sys_sendmmsg+0x205/0x430 [ 1117.061643][T23615] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1117.061668][T23615] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1117.061704][T23615] ? fput+0x79/0x100 [ 1117.061728][T23615] ? ksys_write+0x1ac/0x250 [ 1117.061748][T23615] ? __pfx_ksys_write+0x10/0x10 [ 1117.061772][T23615] __x64_sys_sendmmsg+0x9c/0x100 [ 1117.061790][T23615] ? lockdep_hardirqs_on+0x78/0x100 [ 1117.061815][T23615] do_syscall_64+0x115/0x840 [ 1117.061839][T23615] ? clear_bhb_loop+0x40/0x90 [ 1117.061860][T23615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.061879][T23615] RIP: 0033:0x7fb04cb9ce59 [ 1117.061895][T23615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1117.061912][T23615] RSP: 002b:00007fb04da06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1117.061930][T23615] RAX: ffffffffffffffda RBX: 00007fb04ce16180 RCX: 00007fb04cb9ce59 [ 1117.061942][T23615] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 1117.061952][T23615] RBP: 00007fb04da06090 R08: 0000000000000000 R09: 0000000000000000 [ 1117.061963][T23615] R10: 0000000007000000 R11: 0000000000000246 R12: 0000000000000001 [ 1117.061974][T23615] R13: 00007fb04ce16218 R14: 00007fb04ce16180 R15: 00007fff0b8e05e8 [ 1117.061997][T23615] [ 1117.604312][T23619] netlink: 4332 bytes leftover after parsing attributes in process `syz.1.3734'. [ 1117.637084][T23620] futex_wake_op: syz.4.3732 tries to shift op by -2048; fix this program [ 1118.687027][T23647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3740'. [ 1118.976882][T23658] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1123.406327][T23741] ubi31: attaching mtd0 [ 1123.447446][T23741] ubi31 error: validate_ec_hdr: bad VID header offset 64, expected 514 [ 1123.528353][T23741] ubi31 error: validate_ec_hdr: bad EC header [ 1123.580700][T23741] Erase counter header dump: [ 1123.619984][T23741] magic 0x55424923 [ 1123.655197][T23741] version 1 [ 1123.684654][T23741] ec 1 [ 1123.705260][T23741] vid_hdr_offset 64 [ 1123.728569][T23741] data_offset 128 [ 1123.746488][T23741] image_seq 1527257108 [ 1123.777211][T23741] hdr_crc 0xb3c1df [ 1123.803796][T23741] erase counter header hexdump: [ 1123.829737][T23741] CPU: 0 UID: 0 PID: 23741 Comm: syz.4.3754 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1123.829764][T23741] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1123.829772][T23741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1123.829783][T23741] Call Trace: [ 1123.829790][T23741] [ 1123.829797][T23741] dump_stack_lvl+0x100/0x190 [ 1123.829832][T23741] validate_ec_hdr+0x2d0/0x330 [ 1123.829855][T23741] ubi_io_read_ec_hdr+0x656/0x6d0 [ 1123.829879][T23741] ubi_attach+0x601/0x4d30 [ 1123.829912][T23741] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1123.829939][T23741] ? ubi_msg+0x114/0x159 [ 1123.829990][T23741] ? __pfx_ubi_msg+0x10/0x10 [ 1123.830010][T23741] ? __pfx_ubi_attach+0x10/0x10 [ 1123.830035][T23741] ? lockdep_init_map_type+0x5c/0x250 [ 1123.830066][T23741] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 1123.830094][T23741] ? __vmalloc_node_noprof+0xad/0xf0 [ 1123.830117][T23741] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 1123.830147][T23741] ubi_attach_mtd_dev+0x139f/0x32a0 [ 1123.830183][T23741] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 1123.830210][T23741] ? __pfx_get_mtd_device+0x10/0x10 [ 1123.830237][T23741] ctrl_cdev_ioctl+0x36a/0x400 [ 1123.830265][T23741] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 1123.830297][T23741] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 1123.830324][T23741] __x64_sys_ioctl+0x18e/0x210 [ 1123.830345][T23741] do_syscall_64+0x115/0x840 [ 1123.830371][T23741] ? clear_bhb_loop+0x40/0x90 [ 1123.830392][T23741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1123.830411][T23741] RIP: 0033:0x7f4f77f9ce59 [ 1123.830427][T23741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1123.830445][T23741] RSP: 002b:00007f4f78e1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1123.830463][T23741] RAX: ffffffffffffffda RBX: 00007f4f78216090 RCX: 00007f4f77f9ce59 [ 1123.830475][T23741] RDX: 0000200000000000 RSI: 0000000040186f40 RDI: 0000000000000004 [ 1123.830487][T23741] RBP: 00007f4f78032d6f R08: 0000000000000000 R09: 0000000000000000 [ 1123.830498][T23741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1123.830516][T23741] R13: 00007f4f78216128 R14: 00007f4f78216090 R15: 00007ffe0c95a8f8 [ 1123.830540][T23741] [ 1123.830547][T23741] ubi31 error: ubi_io_read_ec_hdr: validation failed for PEB 0 [ 1124.678752][T23741] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1124.695234][T23761] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3758'. [ 1125.763624][ T30] audit: type=1800 audit(4294967423.797:34): pid=23777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3770" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 1126.700986][T23800] Invalid input. Must be >= 4608 [ 1127.101468][T23807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3767'. [ 1127.350689][T23790] Process accounting paused [ 1127.692047][T22421] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 1127.709307][T22515] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 1127.717322][T22515] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 1127.728675][T22515] CPU: 0 UID: 0 PID: 22515 Comm: kworker/u11:3 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1127.728710][T22515] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1127.728718][T22515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1127.728730][T22515] Workqueue: hci1 hci_rx_work [ 1127.728826][T22515] Call Trace: [ 1127.728834][T22515] [ 1127.728842][T22515] dump_stack_lvl+0x100/0x190 [ 1127.728875][T22515] sysfs_warn_dup.cold+0x1c/0x28 [ 1127.728902][T22515] sysfs_create_dir_ns+0x24b/0x2b0 [ 1127.728923][T22515] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1127.728941][T22515] ? find_held_lock+0x2b/0x80 [ 1127.728963][T22515] ? kobject_add_internal+0x25f/0x930 [ 1127.728983][T22515] ? kobject_add_internal+0x25f/0x930 [ 1127.729003][T22515] ? do_raw_spin_unlock+0x145/0x1e0 [ 1127.729025][T22515] kobject_add_internal+0x2c8/0x930 [ 1127.729047][T22515] kobject_add+0x16a/0x1e0 [ 1127.729066][T22515] ? __pfx_kobject_add+0x10/0x10 [ 1127.729083][T22515] ? class_to_subsys+0x10f/0x150 [ 1127.729110][T22515] ? kobject_put+0xb9/0x640 [ 1127.729125][T22515] ? _raw_spin_unlock+0x28/0x50 [ 1127.729153][T22515] device_add+0x294/0x1950 [ 1127.729173][T22515] ? __pfx_dev_set_name+0x10/0x10 [ 1127.729196][T22515] ? __pfx_device_add+0x10/0x10 [ 1127.729219][T22515] ? mgmt_send_event_skb+0x2fb/0x460 [ 1127.729276][T22515] hci_conn_add_sysfs+0x1a3/0x260 [ 1127.729345][T22515] le_conn_complete_evt+0x11eb/0x1f60 [ 1127.729404][T22515] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1127.729426][T22515] ? __pfx_bt_warn+0x10/0x10 [ 1127.729468][T22515] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1127.729493][T22515] ? skb_pull_data+0x15f/0x1e0 [ 1127.729519][T22515] hci_le_meta_evt+0x34a/0x5f0 [ 1127.729560][T22515] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1127.729587][T22515] hci_event_packet+0x51c/0xcd0 [ 1127.729611][T22515] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1127.729636][T22515] ? __pfx_hci_event_packet+0x10/0x10 [ 1127.729669][T22515] ? kcov_remote_start+0x374/0x660 [ 1127.729693][T22515] ? lockdep_hardirqs_on+0x78/0x100 [ 1127.729725][T22515] hci_rx_work+0x451/0xfc0 [ 1127.729752][T22515] process_one_work+0xa0e/0x1980 [ 1127.729781][T22515] ? __pfx_process_one_work+0x10/0x10 [ 1127.729805][T22515] ? __pfx_hci_rx_work+0x10/0x10 [ 1127.729829][T22515] worker_thread+0x5ef/0xe50 [ 1127.729853][T22515] ? __pfx_worker_thread+0x10/0x10 [ 1127.729871][T22515] ? kthread+0x13a/0x450 [ 1127.729896][T22515] ? __pfx_worker_thread+0x10/0x10 [ 1127.729912][T22515] kthread+0x370/0x450 [ 1127.729937][T22515] ? __pfx_kthread+0x10/0x10 [ 1127.729964][T22515] ret_from_fork+0x72b/0xd50 [ 1127.729985][T22515] ? __pfx_ret_from_fork+0x10/0x10 [ 1127.730003][T22515] ? rcu_is_watching+0x12/0xc0 [ 1127.730024][T22515] ? __switch_to+0x800/0x1100 [ 1127.730054][T22515] ? __switch_to_asm+0x39/0x70 [ 1127.730076][T22515] ? __pfx_kthread+0x10/0x10 [ 1127.730104][T22515] ret_from_fork_asm+0x1a/0x30 [ 1127.730140][T22515] [ 1127.730247][T22515] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1128.055145][T22515] Bluetooth: hci1: failed to register connection device [ 1128.240647][T23816] can: request_module (can-proto-3) failed. [ 1129.141006][T23827] netlink: 4332 bytes leftover after parsing attributes in process `syz.0.3772'. [ 1129.753770][T22515] Bluetooth: hci1: command 0x2016 tx timeout [ 1131.693338][T23874] netlink: 4332 bytes leftover after parsing attributes in process `syz.1.3784'. [ 1131.824325][T22515] Bluetooth: hci1: command 0x2016 tx timeout [ 1131.882121][T23875] netlink: 4332 bytes leftover after parsing attributes in process `syz.4.3785'. [ 1133.434506][T23906] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1133.441103][T23906] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1133.799280][T23918] Invalid input. Must be >= 4608 [ 1133.895606][T22515] Bluetooth: hci1: command 0x2016 tx timeout [ 1135.964620][T22421] Bluetooth: hci1: command 0x2016 tx timeout [ 1136.092974][T23952] netlink: 4332 bytes leftover after parsing attributes in process `syz.1.3800'. [ 1137.083576][T23978] netlink: 4332 bytes leftover after parsing attributes in process `syz.0.3805'. [ 1137.151270][T23971] kexec: Could not allocate control_code_buffer [ 1137.428649][T23987] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3809'. [ 1137.505395][T23987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1137.568001][T23987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1137.615967][T23987] bond0 (unregistering): Released all slaves [ 1138.378359][T24003] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1138.429367][T24008] FAULT_INJECTION: forcing a failure. [ 1138.429367][T24008] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1138.509883][T24008] CPU: 0 UID: 0 PID: 24008 Comm: syz.2.3812 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1138.509922][T24008] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1138.509930][T24008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1138.509940][T24008] Call Trace: [ 1138.509947][T24008] [ 1138.509954][T24008] dump_stack_lvl+0x100/0x190 [ 1138.509989][T24008] should_fail_ex.cold+0x5/0xa [ 1138.510011][T24008] get_futex_key+0x1d2/0x1510 [ 1138.510042][T24008] ? __pfx_get_futex_key+0x10/0x10 [ 1138.510070][T24008] ? rcu_is_watching+0x12/0xc0 [ 1138.510090][T24008] ? rds_bind+0xeac/0x2420 [ 1138.510223][T24008] ? __local_bh_enable_ip+0x9e/0x120 [ 1138.510245][T24008] ? lockdep_hardirqs_on+0x78/0x100 [ 1138.510270][T24008] ? rds_bind+0xeac/0x2420 [ 1138.510295][T24008] futex_wake+0xea/0x530 [ 1138.510319][T24008] ? __pfx_futex_wake+0x10/0x10 [ 1138.510349][T24008] do_futex+0x32b/0x350 [ 1138.510368][T24008] ? __pfx_do_futex+0x10/0x10 [ 1138.510386][T24008] ? __sys_bind+0x1c7/0x260 [ 1138.510416][T24008] __x64_sys_futex+0x34f/0x4d0 [ 1138.510437][T24008] ? __pfx___x64_sys_futex+0x10/0x10 [ 1138.510460][T24008] ? rcu_is_watching+0x12/0xc0 [ 1138.510482][T24008] do_syscall_64+0x115/0x840 [ 1138.510506][T24008] ? clear_bhb_loop+0x40/0x90 [ 1138.510528][T24008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1138.510547][T24008] RIP: 0033:0x7fb04cb9ce59 [ 1138.510562][T24008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1138.510580][T24008] RSP: 002b:00007fb04da270e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1138.510598][T24008] RAX: ffffffffffffffda RBX: 00007fb04ce16098 RCX: 00007fb04cb9ce59 [ 1138.510609][T24008] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb04ce1609c [ 1138.510620][T24008] RBP: 00007fb04ce16090 R08: 0000000000000001 R09: 0000000000000000 [ 1138.510631][T24008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1138.510641][T24008] R13: 00007fb04ce16128 R14: 00007fff0b8e0500 R15: 00007fff0b8e05e8 [ 1138.510663][T24008] [ 1141.664346][T24061] netlink: 4332 bytes leftover after parsing attributes in process `syz.0.3821'. [ 1144.698857][T24096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3828'. [ 1145.685258][T24108] Process accounting resumed [ 1145.913446][T24098] kexec: Could not allocate control_code_buffer [ 1146.812971][T24135] can0: slcan on ttyS2. [ 1147.300192][T24136] can0 (unregistered): slcan off ttyS2. [ 1148.377261][T24163] netlink: 4332 bytes leftover after parsing attributes in process `syz.1.3841'. [ 1149.223429][T24188] netlink: 4332 bytes leftover after parsing attributes in process `syz.1.3846'. [ 1149.532660][T24196] netlink: 4332 bytes leftover after parsing attributes in process `syz.1.3847'. [ 1151.220970][T22421] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 1151.297779][T24226] FAULT_INJECTION: forcing a failure. [ 1151.297779][T24226] name failslab, interval 1, probability 0, space 0, times 0 [ 1151.343129][T24226] CPU: 0 UID: 0 PID: 24226 Comm: syz.0.3853 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1151.343170][T24226] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1151.343178][T24226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1151.343189][T24226] Call Trace: [ 1151.343196][T24226] [ 1151.343204][T24226] dump_stack_lvl+0x100/0x190 [ 1151.343240][T24226] should_fail_ex.cold+0x5/0xa [ 1151.343263][T24226] should_failslab+0xc2/0x120 [ 1151.343287][T24226] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1151.343315][T24226] ? __proc_create+0x2cb/0x8c0 [ 1151.343342][T24226] __proc_create+0x2cb/0x8c0 [ 1151.343366][T24226] ? __pfx___proc_create+0x10/0x10 [ 1151.343392][T24226] ? _raw_write_unlock+0x28/0x50 [ 1151.343417][T24226] ? proc_register+0x559/0x8a0 [ 1151.343443][T24226] proc_create_reg+0x75/0x170 [ 1151.343467][T24226] ? __pfx_rt6_stats_seq_show+0x10/0x10 [ 1151.343540][T24226] proc_create_net_single+0x86/0x180 [ 1151.343566][T24226] ? __pfx_proc_create_net_single+0x10/0x10 [ 1151.343594][T24226] ? fib_default_rule_add+0x341/0x420 [ 1151.343636][T24226] ? __pfx_ip6_route_net_init_late+0x10/0x10 [ 1151.343661][T24226] ip6_route_net_init_late+0x9c/0x110 [ 1151.343682][T24226] ops_init+0x1e2/0x5f0 [ 1151.343705][T24226] setup_net+0x118/0x3a0 [ 1151.343726][T24226] ? __pfx_setup_net+0x10/0x10 [ 1151.343746][T24226] ? mutex_init_lockdep+0xf1/0x120 [ 1151.343769][T24226] copy_net_ns+0x46f/0x7c0 [ 1151.343797][T24226] create_new_namespaces+0x3ea/0xac0 [ 1151.343824][T24226] unshare_nsproxy_namespaces+0xf2/0x220 [ 1151.343850][T24226] ksys_unshare+0x438/0xab0 [ 1151.343877][T24226] ? __pfx_ksys_unshare+0x10/0x10 [ 1151.343902][T24226] ? xfd_validate_state+0x129/0x190 [ 1151.343919][T24226] ? ksys_write+0x1ac/0x250 [ 1151.343946][T24226] __x64_sys_unshare+0x31/0x40 [ 1151.343971][T24226] do_syscall_64+0x115/0x840 [ 1151.343996][T24226] ? clear_bhb_loop+0x40/0x90 [ 1151.344018][T24226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.344038][T24226] RIP: 0033:0x7f9623f9ce59 [ 1151.344054][T24226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1151.344072][T24226] RSP: 002b:00007f9624ea2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1151.344091][T24226] RAX: ffffffffffffffda RBX: 00007f9624215fa0 RCX: 00007f9623f9ce59 [ 1151.344103][T24226] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1151.344114][T24226] RBP: 00007f9624032d6f R08: 0000000000000000 R09: 0000000000000000 [ 1151.344125][T24226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1151.344135][T24226] R13: 00007f9624216038 R14: 00007f9624215fa0 R15: 00007ffef5901bc8 [ 1151.344166][T24226] [ 1152.877592][T24248] can0: slcan on ttyS2. [ 1153.026056][T24250] can0 (unregistered): slcan off ttyS2. [ 1153.045883][T24253] FAULT_INJECTION: forcing a failure. [ 1153.045883][T24253] name failslab, interval 1, probability 0, space 0, times 0 [ 1153.108350][T24253] CPU: 0 UID: 0 PID: 24253 Comm: syz.0.3860 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1153.108384][T24253] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1153.108391][T24253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1153.108402][T24253] Call Trace: [ 1153.108408][T24253] [ 1153.108416][T24253] dump_stack_lvl+0x100/0x190 [ 1153.108452][T24253] should_fail_ex.cold+0x5/0xa [ 1153.108475][T24253] should_failslab+0xc2/0x120 [ 1153.108497][T24253] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1153.108526][T24253] ? __d_alloc+0x34/0xa40 [ 1153.108555][T24253] __d_alloc+0x34/0xa40 [ 1153.108581][T24253] d_alloc+0x4a/0x1e0 [ 1153.108606][T24253] lookup_one_qstr_excl+0x171/0x250 [ 1153.108636][T24253] start_dirop+0x59/0xb0 [ 1153.108657][T24253] simple_start_creating+0xf9/0x110 [ 1153.108679][T24253] ? __pfx_simple_start_creating+0x10/0x10 [ 1153.108701][T24253] ? mntput+0x70/0xa0 [ 1153.108720][T24253] ? simple_pin_fs+0xa3/0x190 [ 1153.108739][T24253] debugfs_start_creating.part.0+0x82/0x170 [ 1153.108762][T24253] __debugfs_create_file+0xb3/0x4f0 [ 1153.108784][T24253] debugfs_create_file_full+0x41/0x60 [ 1153.108805][T24253] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 1153.108824][T24253] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1153.108840][T24253] ? ida_alloc_range+0x70d/0x830 [ 1153.108884][T24253] ? lockdep_init_map_type+0x5c/0x250 [ 1153.108920][T24253] preinit_net.part.0+0x252/0x920 [ 1153.108943][T24253] copy_net_ns+0x339/0x7c0 [ 1153.108967][T24253] create_new_namespaces+0x3ea/0xac0 [ 1153.108995][T24253] unshare_nsproxy_namespaces+0xf2/0x220 [ 1153.109020][T24253] ksys_unshare+0x438/0xab0 [ 1153.109047][T24253] ? __pfx_ksys_unshare+0x10/0x10 [ 1153.109071][T24253] ? xfd_validate_state+0x129/0x190 [ 1153.109088][T24253] ? ksys_write+0x1ac/0x250 [ 1153.109115][T24253] __x64_sys_unshare+0x31/0x40 [ 1153.109140][T24253] do_syscall_64+0x115/0x840 [ 1153.109172][T24253] ? clear_bhb_loop+0x40/0x90 [ 1153.109194][T24253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.109212][T24253] RIP: 0033:0x7f9623f9ce59 [ 1153.109229][T24253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1153.109247][T24253] RSP: 002b:00007f9624e81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1153.109265][T24253] RAX: ffffffffffffffda RBX: 00007f9624216090 RCX: 00007f9623f9ce59 [ 1153.109277][T24253] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1153.109288][T24253] RBP: 00007f9624032d6f R08: 0000000000000000 R09: 0000000000000000 [ 1153.109299][T24253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1153.109309][T24253] R13: 00007f9624216128 R14: 00007f9624216090 R15: 00007ffef5901bc8 [ 1153.109333][T24253] [ 1153.634718][T22515] Bluetooth: hci1: command 0x2016 tx timeout [ 1153.857401][T24265] netlink: 4332 bytes leftover after parsing attributes in process `syz.1.3869'. [ 1154.813274][T24280] netlink: 4332 bytes leftover after parsing attributes in process `syz.4.3862'. [ 1155.235827][T24296] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3864'. [ 1155.715195][T22421] Bluetooth: hci1: command 0x2016 tx timeout [ 1155.777970][T24300] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3863'. [ 1159.048961][T22519] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 1316 with max blocks 42 with error 117 [ 1159.134539][T22519] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1159.134539][T22519] [ 1165.243860][T24483] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3897'. [ 1166.651503][T24502] netlink: 4332 bytes leftover after parsing attributes in process `syz.2.3901'. [ 1169.584521][T24532] program syz.2.3907 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1170.418643][T24538] binder: 24537:24538 unknown command 0 [ 1170.458412][T24538] binder: 24537:24538 ioctl c0306201 0 returned -22 [ 1171.444009][T24567] netlink: 'syz.4.3912': attribute type 3 has an invalid length. [ 1171.473977][T24567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3912'. [ 1173.613962][T24590] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3916'. [ 1173.884351][T24590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3916'. [ 1174.121904][T24590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3916'. [ 1174.295611][T24590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3916'. [ 1174.401132][T24602] netlink: 4332 bytes leftover after parsing attributes in process `syz.0.3920'. [ 1174.794675][T24596] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1175.039098][T24617] FAULT_INJECTION: forcing a failure. [ 1175.039098][T24617] name failslab, interval 1, probability 0, space 0, times 0 [ 1175.122460][T24617] CPU: 0 UID: 0 PID: 24617 Comm: syz.2.3924 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1175.122503][T24617] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1175.122511][T24617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1175.122522][T24617] Call Trace: [ 1175.122529][T24617] [ 1175.122537][T24617] dump_stack_lvl+0x100/0x190 [ 1175.122572][T24617] should_fail_ex.cold+0x5/0xa [ 1175.122596][T24617] should_failslab+0xc2/0x120 [ 1175.122618][T24617] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1175.122643][T24617] ? kvm_create_lapic+0xa9/0x440 [ 1175.122673][T24617] kvm_create_lapic+0xa9/0x440 [ 1175.122699][T24617] kvm_arch_vcpu_create+0x286/0xac0 [ 1175.122725][T24617] kvm_vm_ioctl+0x756/0x4050 [ 1175.122756][T24617] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1175.122793][T24617] ? kasan_quarantine_put+0x104/0x240 [ 1175.122831][T24617] ? lockdep_hardirqs_on+0x78/0x100 [ 1175.122859][T24617] ? find_held_lock+0x2b/0x80 [ 1175.122881][T24617] ? tomoyo_path_number_perm+0x28f/0x580 [ 1175.122904][T24617] ? tomoyo_path_number_perm+0x28f/0x580 [ 1175.122931][T24617] ? tomoyo_path_number_perm+0x188/0x580 [ 1175.122954][T24617] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1175.122976][T24617] ? futex_wait+0x11e/0x370 [ 1175.123005][T24617] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1175.123031][T24617] ? do_vfs_ioctl+0x226/0x13e0 [ 1175.123050][T24617] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1175.123074][T24617] ? find_held_lock+0x2b/0x80 [ 1175.123095][T24617] ? __fget_files+0x215/0x3d0 [ 1175.123114][T24617] ? hook_file_ioctl_common+0x149/0x410 [ 1175.123140][T24617] ? __fget_files+0x21f/0x3d0 [ 1175.123163][T24617] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1175.123187][T24617] __x64_sys_ioctl+0x18e/0x210 [ 1175.123207][T24617] do_syscall_64+0x115/0x840 [ 1175.123231][T24617] ? clear_bhb_loop+0x40/0x90 [ 1175.123253][T24617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1175.123271][T24617] RIP: 0033:0x7fb04cb9ce59 [ 1175.123287][T24617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1175.123308][T24617] RSP: 002b:00007fb04da27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1175.123326][T24617] RAX: ffffffffffffffda RBX: 00007fb04ce16090 RCX: 00007fb04cb9ce59 [ 1175.123341][T24617] RDX: 0000000000000004 RSI: 000000000000ae41 RDI: 0000000000000003 [ 1175.123352][T24617] RBP: 00007fb04cc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1175.123363][T24617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1175.123374][T24617] R13: 00007fb04ce16128 R14: 00007fb04ce16090 R15: 00007fff0b8e05e8 [ 1175.123396][T24617] [ 1175.759517][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1175.765958][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1176.238086][T24626] raw_sendmsg: syz.1.3925 forgot to set AF_INET. Fix it! [ 1176.490798][T24615] Process accounting paused [ 1176.773852][T24631] netlink: 4332 bytes leftover after parsing attributes in process `syz.2.3927'. [ 1177.803880][T24664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3935'. [ 1178.473896][T24678] netlink: 4332 bytes leftover after parsing attributes in process `syz.0.3940'. [ 1178.572166][T22515] Bluetooth: hci3: unexpected subevent 0x0c length: 118 > 5 [ 1178.683565][ T30] audit: type=1804 audit(8277292072.977:35): pid=24679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3936" name="/newroot/513/file0" dev="tmpfs" ino=2672 res=1 errno=0 [ 1178.751196][ T30] audit: type=1804 audit(8277292073.018:36): pid=24688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3936" name="/newroot/513/file0" dev="tmpfs" ino=2672 res=1 errno=0 [ 1178.821558][ T30] audit: type=1800 audit(8277292073.018:37): pid=24679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3936" name="file0" dev="tmpfs" ino=2672 res=0 errno=0 [ 1180.126712][T24720] netlink: 4332 bytes leftover after parsing attributes in process `syz.4.3948'. [ 1181.314878][T24752] QAT: Stopping all acceleration devices. [ 1182.202324][T24768] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 1182.818316][T24773] netlink: 4332 bytes leftover after parsing attributes in process `syz.2.3960'. [ 1184.297440][T24818] netlink: 4332 bytes leftover after parsing attributes in process `syz.1.3969'. [ 1184.619544][T24832] netlink: 4332 bytes leftover after parsing attributes in process `syz.2.3970'. [ 1184.726322][T24835] netlink: 4332 bytes leftover after parsing attributes in process `syz.1.3971'. [ 1185.216441][T24841] netlink: 330 bytes leftover after parsing attributes in process `syz.0.3972'. [ 1185.563667][T24863] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3976'. [ 1185.785861][T24857] netlink: 4332 bytes leftover after parsing attributes in process `syz.2.3982'. [ 1186.277283][T24877] netlink: 4332 bytes leftover after parsing attributes in process `syz.4.3979'. [ 1187.018488][T24888] ubi0: attaching mtd0 [ 1187.049103][T24888] ubi0 warning: ubi_attach: valid VID header but corrupted EC header at PEB 8 [ 1187.071200][T24892] netlink: 4332 bytes leftover after parsing attributes in process `syz.0.3983'. [ 1187.105480][T24888] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 1187.147939][T24888] eraseblock attaching information dump: [ 1187.194996][T24888] ec 1 [ 1187.285283][T24888] pnum 0 [ 1187.343074][T24888] lnum 0 [ 1187.382564][T24888] scrub 0 [ 1187.403501][T24888] sqnum 1 [ 1187.444035][T24888] Volume identifier header dump: [ 1187.483659][T24888] magic 55424921 [ 1187.511901][T24888] version 1 [ 1187.533715][T24888] vol_type 1 [ 1187.558305][T24888] copy_flag 0 [ 1187.574555][T24888] compat 5 [ 1187.596089][T24888] vol_id 2147479551 [ 1187.616213][T24888] lnum 0 [ 1187.629865][T24888] data_size 0 [ 1187.643955][T24888] used_ebs 0 [ 1187.654021][T24888] data_pad 0 [ 1187.666816][T24888] sqnum 1 [ 1187.679903][T24888] hdr_crc 65b3bd2d [ 1187.704491][T24888] Volume identifier header hexdump: [ 1187.832936][T24888] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1189.239982][T24931] netlink: 4332 bytes leftover after parsing attributes in process `syz.2.3987'. [ 1189.827590][T24953] netlink: 186 bytes leftover after parsing attributes in process `syz.0.3993'. [ 1190.104596][T24949] zswap: compressor not available [ 1190.581358][T24960] netlink: 4332 bytes leftover after parsing attributes in process `syz.0.3995'. [ 1190.939130][T24968] nbd: must specify at least one socket [ 1191.199075][T24971] futex_wake_op: syz.0.3997 tries to shift op by -2048; fix this program [ 1191.516379][T24968] 0x000000000001-0x000000020000 : "" [ 1191.610839][T24968] ftl_cs: FTL header corrupt! [ 1193.208540][T22515] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 1193.240176][T22421] Bluetooth: hci1: unexpected event 0x08 length: 51 > 4 [ 1193.968931][T25010] netlink: 4332 bytes leftover after parsing attributes in process `syz.0.4005'. [ 1194.822135][T25024] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4008'. [ 1195.084718][T25034] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4009'. [ 1195.234534][T25034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1195.289522][T22515] ------------[ cut here ]------------ [ 1195.296479][T22515] refcnt < 0 [ 1195.296493][T22515] WARNING: net/bluetooth/hci_conn.c:634 at hci_conn_timeout+0x16a/0x230, CPU#0: kworker/u11:3/22515 [ 1195.310970][T22515] Modules linked in: [ 1195.315560][T22515] CPU: 0 UID: 0 PID: 22515 Comm: kworker/u11:3 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1195.326952][T22515] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1195.332186][T22515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1195.342463][T22515] Workqueue: hci1 hci_conn_timeout [ 1195.348352][T22515] RIP: 0010:hci_conn_timeout+0x16a/0x230 [ 1195.354081][T22515] Code: 44 0f b6 2d eb 06 53 06 31 ff 41 83 e5 40 44 89 ee e8 5a 12 88 f7 45 84 ed 0f 84 02 ff ff ff e9 b6 4c f1 f6 e8 f7 17 88 f7 90 <0f> 0b 90 e8 ee 17 88 f7 48 8d bb fd f5 ff ff 48 b8 00 00 00 00 00 [ 1195.374329][T22515] RSP: 0000:ffffc900050ffc10 EFLAGS: 00010293 [ 1195.380735][T22515] RAX: 0000000000000000 RBX: ffff88807ac58a40 RCX: ffffffff8a7fe46f [ 1195.388786][T22515] RDX: ffff88802dc6dd00 RSI: ffffffff8a7fe569 RDI: ffff88802dc6dd00 [ 1195.397145][T22515] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 1195.405323][T22515] R10: 00000000ffffffff R11: 0000000000000000 R12: ffff88807ac58000 [ 1195.413443][T22515] R13: 0000000000000000 R14: ffff88802dc6e1c4 R15: ffff88805a927c00 [ 1195.421748][T22515] FS: 0000000000000000(0000) GS:ffff88812438e000(0000) knlGS:0000000000000000 [ 1195.430784][T22515] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1195.437420][T22515] CR2: 0000200000663000 CR3: 000000000e596000 CR4: 00000000003526f0 [ 1195.445550][T22515] Call Trace: [ 1195.448830][T22515] [ 1195.451774][T22515] process_one_work+0xa0e/0x1980 [ 1195.456765][T22515] ? __pfx_process_one_work+0x10/0x10 [ 1195.462504][T22515] ? __pfx_hci_conn_timeout+0x10/0x10 [ 1195.468153][T22515] worker_thread+0x5ef/0xe50 [ 1195.472771][T22515] ? __pfx_worker_thread+0x10/0x10 [ 1195.478002][T22515] ? kthread+0x13a/0x450 [ 1195.482275][T22515] ? __pfx_worker_thread+0x10/0x10 [ 1195.487442][T22515] kthread+0x370/0x450 [ 1195.491528][T22515] ? __pfx_kthread+0x10/0x10 [ 1195.496181][T22515] ret_from_fork+0x72b/0xd50 [ 1195.500792][T22515] ? __pfx_ret_from_fork+0x10/0x10 [ 1195.506089][T22515] ? rcu_is_watching+0x12/0xc0 [ 1195.511001][T22515] ? __switch_to+0x800/0x1100 [ 1195.515841][T22515] ? __switch_to_asm+0x39/0x70 [ 1195.520620][T22515] ? __pfx_kthread+0x10/0x10 [ 1195.525771][T22515] ret_from_fork_asm+0x1a/0x30 [ 1195.530569][T22515] [ 1195.533690][T22515] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1195.541075][T22515] CPU: 0 UID: 0 PID: 22515 Comm: kworker/u11:3 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1195.552277][T22515] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1195.557552][T22515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1195.567709][T22515] Workqueue: hci1 hci_conn_timeout [ 1195.572851][T22515] Call Trace: [ 1195.576246][T22515] [ 1195.579187][T22515] dump_stack_lvl+0x100/0x190 [ 1195.583900][T22515] vpanic+0x552/0x970 [ 1195.587920][T22515] ? __pfx_vpanic+0x10/0x10 [ 1195.592537][T22515] panic+0xd1/0xe0 [ 1195.596456][T22515] ? __pfx_panic+0x10/0x10 [ 1195.600906][T22515] ? check_panic_on_warn+0x1f/0x90 [ 1195.606045][T22515] check_panic_on_warn.cold+0x19/0x34 [ 1195.611421][T22515] ? hci_conn_timeout+0x16a/0x230 [ 1195.616461][T22515] __warn.cold+0x191/0x328 [ 1195.620968][T22515] __report_bug+0x296/0x3d0 [ 1195.625555][T22515] ? hci_conn_timeout+0x16a/0x230 [ 1195.630593][T22515] ? __pfx___report_bug+0x10/0x10 [ 1195.635626][T22515] ? __mutex_lock+0x26d/0x1b10 [ 1195.640484][T22515] ? find_held_lock+0x2b/0x80 [ 1195.645161][T22515] ? look_up_lock_class+0x64/0x120 [ 1195.650301][T22515] ? register_lock_class+0x40/0x560 [ 1195.655607][T22515] ? do_raw_spin_lock+0x128/0x260 [ 1195.660640][T22515] ? hci_conn_timeout+0x16a/0x230 [ 1195.665675][T22515] report_bug+0xb2/0x220 [ 1195.669920][T22515] ? hci_conn_timeout+0x16a/0x230 [ 1195.675058][T22515] handle_bug+0x16a/0x2a0 [ 1195.679393][T22515] exc_invalid_op+0x17/0x50 [ 1195.683906][T22515] asm_exc_invalid_op+0x1a/0x20 [ 1195.688755][T22515] RIP: 0010:hci_conn_timeout+0x16a/0x230 [ 1195.694402][T22515] Code: 44 0f b6 2d eb 06 53 06 31 ff 41 83 e5 40 44 89 ee e8 5a 12 88 f7 45 84 ed 0f 84 02 ff ff ff e9 b6 4c f1 f6 e8 f7 17 88 f7 90 <0f> 0b 90 e8 ee 17 88 f7 48 8d bb fd f5 ff ff 48 b8 00 00 00 00 00 [ 1195.714132][T22515] RSP: 0000:ffffc900050ffc10 EFLAGS: 00010293 [ 1195.720214][T22515] RAX: 0000000000000000 RBX: ffff88807ac58a40 RCX: ffffffff8a7fe46f [ 1195.728205][T22515] RDX: ffff88802dc6dd00 RSI: ffffffff8a7fe569 RDI: ffff88802dc6dd00 [ 1195.736189][T22515] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 1195.744168][T22515] R10: 00000000ffffffff R11: 0000000000000000 R12: ffff88807ac58000 [ 1195.752235][T22515] R13: 0000000000000000 R14: ffff88802dc6e1c4 R15: ffff88805a927c00 [ 1195.760227][T22515] ? hci_conn_timeout+0x6f/0x230 [ 1195.765215][T22515] ? hci_conn_timeout+0x169/0x230 [ 1195.770286][T22515] process_one_work+0xa0e/0x1980 [ 1195.775247][T22515] ? __pfx_process_one_work+0x10/0x10 [ 1195.780821][T22515] ? __pfx_hci_conn_timeout+0x10/0x10 [ 1195.786224][T22515] worker_thread+0x5ef/0xe50 [ 1195.790845][T22515] ? __pfx_worker_thread+0x10/0x10 [ 1195.795961][T22515] ? kthread+0x13a/0x450 [ 1195.800222][T22515] ? __pfx_worker_thread+0x10/0x10 [ 1195.805381][T22515] kthread+0x370/0x450 [ 1195.809502][T22515] ? __pfx_kthread+0x10/0x10 [ 1195.814130][T22515] ret_from_fork+0x72b/0xd50 [ 1195.818751][T22515] ? __pfx_ret_from_fork+0x10/0x10 [ 1195.823896][T22515] ? rcu_is_watching+0x12/0xc0 [ 1195.828667][T22515] ? __switch_to+0x800/0x1100 [ 1195.833363][T22515] ? __switch_to_asm+0x39/0x70 [ 1195.838154][T22515] ? __pfx_kthread+0x10/0x10 [ 1195.842913][T22515] ret_from_fork_asm+0x1a/0x30 [ 1195.847732][T22515] [ 1195.850857][T22515] Kernel Offset: disabled [ 1195.855205][T22515] Rebooting in 86400 seconds..