last executing test programs: 3m10.990385847s ago: executing program 2 (id=6): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nbd0\x00', 0x4800, 0x0) ioctl$auto(r2, 0xab05, 0xffffffffffffffff) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/module/hid_magicmouse/parameters/scroll_speed\x00', 0x101142, 0x0) r3 = openat$auto_page_owner_stack_operations_page_owner(0xffffffffffffff9c, &(0x7f0000004340), 0x0, 0x0) pread64$auto(r3, &(0x7f0000004380)='^{\x00', 0x3ff, 0x4c0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x40200, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638828712, 0x0) r4 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0p\x00', 0x1, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc2604110, &(0x7f0000000340)={0xfffffffc, [{[0xe99, 0x0, 0x1db, 0x3, 0x3bc, 0x9, 0x7fffffff, 0x6]}, {[0x6, 0x4, 0x38b0a2fb, 0x7, 0x7, 0xfffffff9, 0x6, 0x4]}, {[0x8001, 0x4, 0x0, 0xd7da, 0x1, 0x6f, 0x3, 0xffff2499]}], [{[0x9f99, 0xe, 0x101, 0x1, 0x14, 0xfffffffa, 0x1, 0x8]}, {[0x80, 0x7ff, 0xfffffffb, 0x5, 0x5, 0x0, 0x0, 0x3]}, {[0x7, 0x3, 0x5, 0x50, 0xff, 0x1, 0xff, 0x7fffffff]}, {[0x8, 0xc, 0xe1, 0x80, 0xaac, 0x5, 0x98, 0x2]}, {[0x415, 0x5, 0x7, 0x7, 0x8, 0x100, 0x3ff, 0x176]}], [{0x1, 0xfffffff6, 0x1, 0x0, 0x1, 0x1}, {0x692, 0xf00, 0x1, 0x0, 0x0, 0x1}, {0x738dfe04, 0xc4bf, 0x1, 0x0, 0x1}, {0x8, 0x80000001, 0x1, 0x0, 0x1}, {0x1, 0x90000000, 0x1}, {0xffffffd9, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x74, 0x4, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x2, 0x0, 0x1, 0x1, 0x1}, {0x6, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x3, 0x92a, 0x1, 0x0, 0x1}, {0x8, 0x0, 0x0, 0x1}], [{0x4, 0x7, 0x1}, {0x1, 0x1, 0x1}, {0xb3, 0x4, 0x1, 0x1, 0x1}, {0x6, 0xfa9, 0x1, 0x0, 0x1, 0x1}, {0x7fff, 0xfffffffb, 0x0, 0x1}, {0x19b, 0xd723, 0x1, 0x1, 0x1}, {0x1, 0x7, 0x1, 0x1, 0x1}, {0x3, 0xfb, 0x0, 0x0, 0x0, 0x1}, {0x8001, 0x1000, 0x1, 0x1, 0x1}], 0xe80a, 0x6, 0x3123, 0x8, 0x9, 0x6, 0x0, "26631fbae3bc2ffc6f98633e24a93eb5", "7fc5d3f0ec54a0351ec39a18476c5018fa8fee5c945b6bf7cf225361df504e1d6dbaa623d1d656a9a686bfd135ae44cb"}) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r5 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r5, 0x0, 0x80000000c3) 3m10.229650895s ago: executing program 2 (id=9): write$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8900, 0x0) sendfile$auto(r0, r0, 0x0, 0x2) ioctl$auto_EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) socket(0x8, 0x800, 0x2f) close_range$auto(r0, r0, 0xf) close_range$auto(0x2, 0xa, 0x0) read$auto(0x3, 0x0, 0xfdef) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) msync$auto(0x200000, 0x2000000005, 0x6) write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x2000000df, 0xfffffffffffffe10, 0x401, 0x8000) r1 = socket(0x2, 0x3, 0xa) getsockopt$auto(r1, 0x0, 0x30, 0x0, &(0x7f0000000040)=0xdbb) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/uevent_helper\x00', 0x80302, 0x0) remap_file_pages$auto(0x7fffffff, 0x513e42ea, 0x0, 0xfffffffffffffffe, 0x741a7957) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x7ffc) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x0) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7f, 0x9, 0x0) mq_timedsend$auto(r2, 0x0, 0x2, 0x9, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) 3m7.767649183s ago: executing program 2 (id=19): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nbd0\x00', 0x4800, 0x0) ioctl$auto(r2, 0xab05, 0xffffffffffffffff) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/module/hid_magicmouse/parameters/scroll_speed\x00', 0x101142, 0x0) r3 = openat$auto_page_owner_stack_operations_page_owner(0xffffffffffffff9c, &(0x7f0000004340), 0x0, 0x0) pread64$auto(r3, &(0x7f0000004380)='^{\x00', 0x3ff, 0x4c0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x40200, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638828712, 0x0) r4 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0p\x00', 0x1, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc2604110, &(0x7f0000000340)={0xfffffffc, [{[0xe99, 0x0, 0x1db, 0x3, 0x3bc, 0x9, 0x7fffffff, 0x6]}, {[0x6, 0x4, 0x38b0a2fb, 0x7, 0x7, 0xfffffff9, 0x6, 0x4]}, {[0x8001, 0x4, 0x0, 0xd7da, 0x1, 0x6f, 0x3, 0xffff2499]}], [{[0x9f99, 0xe, 0x101, 0x1, 0x14, 0xfffffffa, 0x1, 0x8]}, {[0x80, 0x7ff, 0xfffffffb, 0x5, 0x5, 0x0, 0x0, 0x3]}, {[0x7, 0x3, 0x5, 0x50, 0xff, 0x1, 0xff, 0x7fffffff]}, {[0x8, 0xc, 0xe1, 0x80, 0xaac, 0x5, 0x98, 0x2]}, {[0x415, 0x5, 0x7, 0x7, 0x8, 0x100, 0x3ff, 0x176]}], [{0x1, 0xfffffff6, 0x1, 0x0, 0x1, 0x1}, {0x692, 0xf00, 0x1, 0x0, 0x0, 0x1}, {0x738dfe04, 0xc4bf, 0x1, 0x0, 0x1}, {0x8, 0x80000001, 0x1, 0x0, 0x1}, {0x1, 0x90000000, 0x1}, {0xffffffd9, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x74, 0x4, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x2, 0x0, 0x1, 0x1, 0x1}, {0x6, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x3, 0x92a, 0x1, 0x0, 0x1}, {0x8, 0x0, 0x0, 0x1}], [{0x4, 0x7, 0x1}, {0x1, 0x1, 0x1}, {0xb3, 0x4, 0x1, 0x1, 0x1}, {0x6, 0xfa9, 0x1, 0x0, 0x1, 0x1}, {0x7fff, 0xfffffffb, 0x0, 0x1}, {0x19b, 0xd723, 0x1, 0x1, 0x1}, {0x1, 0x7, 0x1, 0x1, 0x1}, {0x3, 0xfb, 0x0, 0x0, 0x0, 0x1}, {0x8001, 0x1000, 0x1, 0x1, 0x1}], 0xe80a, 0x6, 0x3123, 0x8, 0x9, 0x6, 0x0, "26631fbae3bc2ffc6f98633e24a93eb5", "7fc5d3f0ec54a0351ec39a18476c5018fa8fee5c945b6bf7cf225361df504e1d6dbaa623d1d656a9a686bfd135ae44cb"}) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) write$auto(0xffffffffffffffff, 0x0, 0x80000000c3) 3m7.019477314s ago: executing program 2 (id=21): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, r0, 0x8000) madvise$auto(0x0, 0x400053, 0x9) write$auto_console_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) keyctl$auto_KEYCTL_SEARCH(0xa, 0x31, 0x200000000000, 0x0, 0x8001) r1 = ioctl$auto_SIOCSIFHWADDR2(0xffffffffffffffff, 0x8924, &(0x7f0000000080)="b71d285ef7cdfb2ee778f3b1eae0a2b70f4e3887a902e3754692b7df6db41df6004afd54d558961c2effd595f37231c2bc761194eb0c3d41cc806e0e0d525b83fea5e075b5d4a986598787c67769e2b256436edb998e77cf3d25cf2d21cec359e825b8f1fe956b48ea3721c8f333a95ea079af80c7d0499ba88ab59a3c1a3814eb687ef9ac0549ff8983d6b2a4006db508") r2 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/buffer_percent\x00', 0x400a40, 0x0) close_range$auto(r2, r1, 0x1) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="13002cbd7000dddbdf250200000008000300", @ANYRES32=r5, @ANYBLOB="08006100000000000800620000000000272694b9f46fc17ff85ee11f1bb535a4b617f5a37fd06138039b7753954cb9cb4eaa20aa78235c4c70a6ae24ef42f545d3127bb866a03406396efbd47bd890d03c40310544d572ef003b226a70c86e1cca204c006b3b78ade5e4583b000043ac915eb96cc5"], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) socket(0xa, 0x3, 0x3b) pread64$auto(0xffffffffffffffff, 0x0, 0xb, 0x18) r6 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r6, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xedKW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1\x1f\xf7uw\a\xd0\x83{_>/\xff', 0x100000001) r7 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r7, &(0x7f0000000000)="c80d1b5d399b3b", 0xfdef) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x890) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x20000820}, 0x40000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) close_range$auto(0x2, 0x8, 0x0) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$auto(0x3, 0xaec7, 0x38) 3m2.97571481s ago: executing program 2 (id=36): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) statx$auto(r0, 0x0, 0x401006, 0x4015, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2401, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) sendfile$auto(r1, r1, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x1c8300, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000000c0), r2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x4d, 0x0) fsopen$auto(0x0, 0x1) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto(r3, 0x540a, 0x0) socket(0xa, 0x5, 0x0) timer_create$auto(0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) 2m58.435904595s ago: executing program 2 (id=48): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x11, 0x2, 0x300) rt_sigqueueinfo$auto(0x0, 0x4, &(0x7f0000000000)={@siginfo_0_0={0xf5, 0x14, 0x7e73, @_timer={0x0, 0x80000001, @sival_int=0x81, 0x1}}}) r1 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f00000004c0)="5959e7488ae60100000000000000ea8a549f1ce466a26be8b0b50eff40c66d6bf0c981a0db5edba528b493edda4a033655e89e1afc06676facc65afab54cda45f2ad3924d156aefe5c4440066fd4ff81c0775ed28c48a9c3320b51e47130f5ee7876acc93e3cbc4466a3c59d17c14b673b133ed7f9d375d958b67da4f8a518498bcf707df76d56b5ccdaa094c3928143aece640a3da7a02e370ba93d245db9", 0xe7}, 0x8, &(0x7f0000000180), 0x5, 0x2}, 0x5}, 0x2, 0x100) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb) ioctl$auto_SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000240)) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) preadv$auto(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000001c0)="522e68880b66e736e04b92f674ada7760ea80e37bb469357500e017f29e7eb2c5ebfee7548efd523ae6199e3f6caa510b91366e1748c71e2d79dbbb4e58f96d122c3685ce6b3fda30b6a3d7de0adf1b3094034bd55236900b4729261d5600a6434b9ba8948be7ac19251ce944fc54c9f7ac11b4e82d8291daf1f9f58cd41df5c0530fbcfcb3b56df2bf719c93f18577a1173804afe51a9d1dcac", 0xff}, 0x5, 0x0, 0x4) r2 = socket(0x2, 0x1, 0x106) setsockopt$auto(r2, 0x6, 0x6, &(0x7f0000000700)='\b\x00\x00\x00\xe4\x15\rq\tW\x9d=\x1e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe7\x9b\xdd\x1cp\x19\xa0\x9dHN\xb4\x7f\x7f\xa0\xeaI\xa1\x0f/\xfc\x8e\xf9\xa6x\xa0\xdeo\t\x826Xe(\x0e\xffr\r\x8d\xefh\xdbG\x8b\xde\xfd$\'\a ]\x91YP\x94\xd0\xd0\x02\x10\xb1_z\xa2Ql\x8c\x91\xca4\x118\xcd\xc3\x97\x03J:\x1e\xe5f\xcaq\xdf`\x01;\xf9{D2\xc9WV)\xa3JH\xf5\xf9\x16\xac\xa4\x155\x80\x01I\xd9\xa5\xd0\xf1\xbd\xa0\xa4\xa5q\xc6F\x940\x00\xf8\xef\xa4\xfd\xd2z\xf5\x91z<\x9f\xf0\x8f.\x81\x84\xed J&\x8f\xd9\xab-\xf8\xd0\xd3\xcea\x91pM0\xcd\x18\xb4\xe0u\x99\b\x19I\x87\xbb/1\xf9\x84\xbf\xcc\x0e5\xba\x9a\xba\xfb\xde\x16kU\x97\xec\xc6\xe15u\xd5\x94D\xab\xec.K\xfbD\x0f\xc16g\xf3`\x03O\xae]B@\x0e!n\x8dy\x97\xaa\xa7\x12\xbbyD\xd3\x82\xb3\x9a\x88L\x1b\x8b\xfb\xe7\xc8\xa8\xf66\x16\xe1\x04T\'/8a\xeb\xe6\xe6+!\x97\b\xc8;P\f~\x88\x02\x91 \xd3\x93\xa7.xCNA\xcax)\xb4\xdf\xfe/\xe40\xc6y\x13\x8d\bfJ\x85\x05\xf5\x9f\xea\x15\xe9{3\xcc\xac\x94w.%\x11_\xd3\xe2\xe9\x8c\x9c\xb1\xfb\xf9o\xf4\xc9\x88\xbd\x90p\xae\x8ap\xb9\xa4\xb7\xadv&\x999\xdf\x83\xae\xff\xa5\xfc\xd3\xc0!\xdc\xc4\xa0\xce8:\xeb~\x9b_F\x8f\xcaY\xa9\x89@\x99)\x1c\x8b\xc5\xb7\x10\xd1\xc8`\xb6\x8f\x136\xc3\x1e\xbd\x8e$\"\xbfJ\n\xd6\x0f\x9d\xcbr\xb7\xa8\xed\r+$\x94\x9b\xfe8\x8ao\xf8\xba\'i\xf1\xd3\x9c7P\xe3\x14\xa2\x1b-\xbb\xae\xe3P#:$\xaf\aB\xd2\x95\x18\\r\xd1\x80\x9fD\xd5\xaba\xc8\xd4\xd1\xb6\xf5\xb9\x16\xbb\xbc\xd6\xb3+\xdf\xfc\x89\x1f\xe9M|\x0e?g\x18\v\"', 0x4000007) getsockopt$auto(r2, 0x6, 0x6, &(0x7f0000000000)='\b\x00\x00\x00\xe4\x15\rq\tW\x9d=\x1e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe7\x9b\xdd\x1cp\x19\xa0\x9dHN\xb4\x7f\x7f\xa0\xeaI\xa1\x0f/\xfc\x8e\xf9\xa6x\xa0\xdeo\t\x826Xe(\x0e\xffr\r\x8d\xefh\xdbG\x8b\xde\xfd$\'\a ]\x91YP\x94\xd0\xd0\x02\x10\xb1_z\xa2Ql\x8c\x91\xca4\x118\xcd\xc3\x97\xdaJ:\x1e\xe5f\xcaq\xdf`\x01;\xf9{D2\xc9WV)\xa3JH\xf5\xf9\x16\xac\xa4\x155\x80\x01I\xd9\xa5\xd0\xf1\xbd\xa0\xa4\xa5q\xc6F\x940\x00\xf8\xef\xa4\xfd\xd2z\xf5\x91z<\x9f\xf0\x8f/\x81\x84\xed J&\x8f\xd9\xab-\xf8\xd0\xd3\xcea\x91pM0\xcd\x18\xb4\xe0u\x99\b', &(0x7f00000000c0)=0x800) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) ioctl$auto(0xffffffffffffffff, 0x4008550d, 0xffffffffffffffff) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) r4 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r4, &(0x7f0000000000)=' ', 0x1) settimeofday$auto(&(0x7f0000000180)={0x6ddb8b07, 0x9}, &(0x7f0000002680)={0x1, 0x4}) write$auto(r3, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x9) r5 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev$auto(r5, &(0x7f0000000300)={0x0, 0x10001}, 0xc) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/arp\x00', 0x101000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x3, 0x9) 2m44.538467541s ago: executing program 3 (id=97): mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f0000000000)={0xe93, 0x9, 0x1, 0x0, 0x3, 0xffffffffffffffff}) r1 = socket(0xa, 0x801, 0x84) connect$auto(r1, &(0x7f0000000080)=@generic={0xa, "509235679a5532c63bacddae0710"}, 0x54) prctl$auto_PR_SCHED_CORE_SHARE_TO(0x0, 0x2, r0, 0x2, 0xbb5) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x5eba02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x323380, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000) clone$auto(0x20003b46, 0x1000000c, 0x0, 0x0, 0x5) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(0xffffffffffffffff, 0x0, 0x40) mincore$auto(0x1000, 0x8001, 0x0) r2 = timerfd_create$auto(0x9, 0x0) timerfd_gettime$auto(r2, &(0x7f00000000c0)={{0x1, 0xc8}, {0x7, 0x4}}) fcntl$auto(0x8000000000000001, 0x7, 0x8) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x42a81, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mincore$auto(0x66c, 0x1, &(0x7f0000000180)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00') r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000100)={'\x00', 0xffff, 0x6, 0x2, 0x9b4, 0x9, "ce7009002ce100", '\x00', "0201ccb7", '\x00', ["00000f0008b330ac007abfc1", "70d900001100", "0800000000000000000000ec", "00deff1000"]}) waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x6, 0x0) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) fcntl$auto(0x8000000000000001, 0x26, 0x8) close_range$auto(0x2, 0x8, 0x0) fcntl$auto(0x0, 0x407, 0x8100000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x20002, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x311c2, 0x0) 2m43.693489733s ago: executing program 3 (id=99): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x7ffffffffffffffc, 0x8) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000009000), 0x101181, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x5c, r1, 0x1, 0x70bd2b, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m43.155402256s ago: executing program 32 (id=48): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x11, 0x2, 0x300) rt_sigqueueinfo$auto(0x0, 0x4, &(0x7f0000000000)={@siginfo_0_0={0xf5, 0x14, 0x7e73, @_timer={0x0, 0x80000001, @sival_int=0x81, 0x1}}}) r1 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f00000004c0)="5959e7488ae60100000000000000ea8a549f1ce466a26be8b0b50eff40c66d6bf0c981a0db5edba528b493edda4a033655e89e1afc06676facc65afab54cda45f2ad3924d156aefe5c4440066fd4ff81c0775ed28c48a9c3320b51e47130f5ee7876acc93e3cbc4466a3c59d17c14b673b133ed7f9d375d958b67da4f8a518498bcf707df76d56b5ccdaa094c3928143aece640a3da7a02e370ba93d245db9", 0xe7}, 0x8, &(0x7f0000000180), 0x5, 0x2}, 0x5}, 0x2, 0x100) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb) ioctl$auto_SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000240)) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) preadv$auto(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000001c0)="522e68880b66e736e04b92f674ada7760ea80e37bb469357500e017f29e7eb2c5ebfee7548efd523ae6199e3f6caa510b91366e1748c71e2d79dbbb4e58f96d122c3685ce6b3fda30b6a3d7de0adf1b3094034bd55236900b4729261d5600a6434b9ba8948be7ac19251ce944fc54c9f7ac11b4e82d8291daf1f9f58cd41df5c0530fbcfcb3b56df2bf719c93f18577a1173804afe51a9d1dcac", 0xff}, 0x5, 0x0, 0x4) r2 = socket(0x2, 0x1, 0x106) setsockopt$auto(r2, 0x6, 0x6, &(0x7f0000000700)='\b\x00\x00\x00\xe4\x15\rq\tW\x9d=\x1e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe7\x9b\xdd\x1cp\x19\xa0\x9dHN\xb4\x7f\x7f\xa0\xeaI\xa1\x0f/\xfc\x8e\xf9\xa6x\xa0\xdeo\t\x826Xe(\x0e\xffr\r\x8d\xefh\xdbG\x8b\xde\xfd$\'\a ]\x91YP\x94\xd0\xd0\x02\x10\xb1_z\xa2Ql\x8c\x91\xca4\x118\xcd\xc3\x97\x03J:\x1e\xe5f\xcaq\xdf`\x01;\xf9{D2\xc9WV)\xa3JH\xf5\xf9\x16\xac\xa4\x155\x80\x01I\xd9\xa5\xd0\xf1\xbd\xa0\xa4\xa5q\xc6F\x940\x00\xf8\xef\xa4\xfd\xd2z\xf5\x91z<\x9f\xf0\x8f.\x81\x84\xed J&\x8f\xd9\xab-\xf8\xd0\xd3\xcea\x91pM0\xcd\x18\xb4\xe0u\x99\b\x19I\x87\xbb/1\xf9\x84\xbf\xcc\x0e5\xba\x9a\xba\xfb\xde\x16kU\x97\xec\xc6\xe15u\xd5\x94D\xab\xec.K\xfbD\x0f\xc16g\xf3`\x03O\xae]B@\x0e!n\x8dy\x97\xaa\xa7\x12\xbbyD\xd3\x82\xb3\x9a\x88L\x1b\x8b\xfb\xe7\xc8\xa8\xf66\x16\xe1\x04T\'/8a\xeb\xe6\xe6+!\x97\b\xc8;P\f~\x88\x02\x91 \xd3\x93\xa7.xCNA\xcax)\xb4\xdf\xfe/\xe40\xc6y\x13\x8d\bfJ\x85\x05\xf5\x9f\xea\x15\xe9{3\xcc\xac\x94w.%\x11_\xd3\xe2\xe9\x8c\x9c\xb1\xfb\xf9o\xf4\xc9\x88\xbd\x90p\xae\x8ap\xb9\xa4\xb7\xadv&\x999\xdf\x83\xae\xff\xa5\xfc\xd3\xc0!\xdc\xc4\xa0\xce8:\xeb~\x9b_F\x8f\xcaY\xa9\x89@\x99)\x1c\x8b\xc5\xb7\x10\xd1\xc8`\xb6\x8f\x136\xc3\x1e\xbd\x8e$\"\xbfJ\n\xd6\x0f\x9d\xcbr\xb7\xa8\xed\r+$\x94\x9b\xfe8\x8ao\xf8\xba\'i\xf1\xd3\x9c7P\xe3\x14\xa2\x1b-\xbb\xae\xe3P#:$\xaf\aB\xd2\x95\x18\\r\xd1\x80\x9fD\xd5\xaba\xc8\xd4\xd1\xb6\xf5\xb9\x16\xbb\xbc\xd6\xb3+\xdf\xfc\x89\x1f\xe9M|\x0e?g\x18\v\"', 0x4000007) getsockopt$auto(r2, 0x6, 0x6, &(0x7f0000000000)='\b\x00\x00\x00\xe4\x15\rq\tW\x9d=\x1e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe7\x9b\xdd\x1cp\x19\xa0\x9dHN\xb4\x7f\x7f\xa0\xeaI\xa1\x0f/\xfc\x8e\xf9\xa6x\xa0\xdeo\t\x826Xe(\x0e\xffr\r\x8d\xefh\xdbG\x8b\xde\xfd$\'\a ]\x91YP\x94\xd0\xd0\x02\x10\xb1_z\xa2Ql\x8c\x91\xca4\x118\xcd\xc3\x97\xdaJ:\x1e\xe5f\xcaq\xdf`\x01;\xf9{D2\xc9WV)\xa3JH\xf5\xf9\x16\xac\xa4\x155\x80\x01I\xd9\xa5\xd0\xf1\xbd\xa0\xa4\xa5q\xc6F\x940\x00\xf8\xef\xa4\xfd\xd2z\xf5\x91z<\x9f\xf0\x8f/\x81\x84\xed J&\x8f\xd9\xab-\xf8\xd0\xd3\xcea\x91pM0\xcd\x18\xb4\xe0u\x99\b', &(0x7f00000000c0)=0x800) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) ioctl$auto(0xffffffffffffffff, 0x4008550d, 0xffffffffffffffff) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) r4 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r4, &(0x7f0000000000)=' ', 0x1) settimeofday$auto(&(0x7f0000000180)={0x6ddb8b07, 0x9}, &(0x7f0000002680)={0x1, 0x4}) write$auto(r3, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x9) r5 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev$auto(r5, &(0x7f0000000300)={0x0, 0x10001}, 0xc) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/arp\x00', 0x101000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x3, 0x9) 2m42.05160194s ago: executing program 3 (id=102): pidfd_send_signal$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, 0x0, 0x0, 0x4) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/lockd/nlm_end_grace\x00', 0x8282, 0x0) write$auto(r1, &(0x7f0000000380)='1Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z\xa6!\xe8 \xf6$7\xa0\xdcF\xb95`\xa4m\xffb\x17\xbb\x7f\xea4.\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xd4\a\x18n\x8d\xf0\xfe\xceL\xbe8\xdc\xb9\xb6\'\xc4~\x18\xc4\x9e\x05=4\xdc\x96\x0e\xb1\x9bL\x918\x8f\x1by\x94C\x933`\x1a\x17\xe9\x12\xb5\xb8\xf7\xd8;', 0x4) syz_clone(0x2040000, &(0x7f00000000c0)="597fc11ed0d859669117fbdfcf83e1a05de6ae04eec9394df15f109e268adb6d532ab5d93ead0470674fb35818b7760e3a3b26aedf6963c0b43946b446d1f64dd176367fea76948f601e3e727f39812e95bcfe46f2a3f272e42b316478e97e73431c3f25f3541ea31268f0145efd85c2dd577ddd590c5f85af5f208e6ee233348eb5a51d296599488790a493d4d2a24b0002f8d5bc8f087d9009445751da292dda5c601faaccfd31d75afb18ad959e3ec4e9e0b94102d8587ff61b12fbbab29b2215", 0xc2, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="3d1371f0f197f3300893cc91334451a5a7662b2e26fe6db0366fafba3c94a0a8eb9bae01939de0643dced3953ff7928f5c4b5e5c9c8a9684f9b5") r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) sendfile$auto(r0, r2, 0x0, 0x1000200) 2m40.959519182s ago: executing program 3 (id=105): mmap$auto(0xffffffffffffffff, 0x37, 0xdd, 0xeb1, 0x401, 0x8000) socket(0x10, 0x80000, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001480)='/proc/sys/net/ipv6/conf/geneve0/disable_ipv6\x00', 0x40001, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000000c0), 0x50042, 0x0) sendmsg$auto_IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000180)=ANY=[], 0x264}, 0x1, 0x0, 0x0, 0x20000010}, 0x400c815) mmap$auto(0x0, 0x2020009, 0x100003, 0x12, 0xfffffffffffffffa, 0x0) close_range$auto(0x2, 0x8, 0x0) write$auto(0x3, 0x0, 0x7fffffff) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000a00000008000200", @ANYRES32=0x0, @ANYBLOB="080140"], 0x68}, 0x1, 0x0, 0x0, 0x18a64d47ddeca1f0}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) 2m39.457760321s ago: executing program 3 (id=108): mmap$auto(0x0, 0xe3b8, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x29, 0x2, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0xfffffffffffffda7, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x0, 0x3b, 0xeb57}, @BATADV_ATTR_TT_TTVN={0x5, 0x11, 0xee}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x4008800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' '], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) recvmmsg$auto(r1, &(0x7f0000000000)={{0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x200002, 0x8}, 0x801}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r0, 0x8931, 0x24) r2 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r2, 0x41015500, &(0x7f00000011c0)={"44cb9bf73ee4f7d17375d0a20200fc097204973ce5c568f45cf3a37f00073e797cd85f52c60300259f0f496b584d7480859a383753a492b262cd2e665fea37decc05000020000000001eee4def7500006344c1b5ba8cd74d78b58200000000001000000001000004000000004000", "780700e6cfac240fa640711402b4c630bc5601fb47fa2955a8f7ff3993c0f4f3a6e054fed14a933119c64d9d923ef32ce561acad10f499213cd61be3b68dcaf3e5f074ce961d6a33c481d540e5282df56757d500", 0x5}) ioctl$auto_USB_RAW_IOCTL_RUN(r2, 0x5501, 0x0) clone3$auto(&(0x7f0000000080)={0x0, 0x400, 0xc52, 0x6, 0x5, 0x4, 0x3, 0x8ec, 0xff, 0xdd, 0x3}, 0xb) 2m38.060792076s ago: executing program 3 (id=111): write$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8900, 0x0) sendfile$auto(r0, r0, 0x0, 0x2) ioctl$auto_EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) socket(0x8, 0x800, 0x2f) close_range$auto(0x2, 0xa, 0x0) read$auto(0x3, 0x0, 0xfdef) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900), 0x0) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) 2m22.879383835s ago: executing program 33 (id=111): write$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8900, 0x0) sendfile$auto(r0, r0, 0x0, 0x2) ioctl$auto_EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) socket(0x8, 0x800, 0x2f) close_range$auto(0x2, 0xa, 0x0) read$auto(0x3, 0x0, 0xfdef) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900), 0x0) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) 52.431606307s ago: executing program 4 (id=410): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x80202, 0x0) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000340), 0xffffffffffffffff) pread64$auto(r0, 0x0, 0x4, 0xc9) r1 = openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/setgroups\x00', 0x2, 0x0) epoll_pwait2$auto(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000100)={0x0, 0x7f}, &(0x7f0000000140), 0x8) readv$auto(0x3, &(0x7f0000003080)={&(0x7f0000003040), 0x4}, 0x9) mprotect$auto(0x110c230000, 0xa588, 0x6) mremap$auto(0x110c231000, 0x0, 0x101, 0x3, 0x0) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents64$auto(r2, 0x0, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="040006"], 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r3) r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000005c0), r3) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001d40)={0x14, r4, 0x8ff972b65c311bf5, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008090}, 0x4000) writev$auto(r1, &(0x7f0000003600)={0x0, 0x2}, 0x8) 52.06454045s ago: executing program 4 (id=413): socket(0x10, 0x3, 0x6) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r0, 0x401070cd, 0x5) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x280000, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0) socket(0x10, 0x3, 0xa) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x59, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101840, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r1 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r1, 0x0, 0xc3) 51.471249123s ago: executing program 4 (id=415): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) r1 = prctl$auto(0x80000001, 0x2, r0, 0x5, 0x9) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) uname$auto(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r2, &(0x7f0000006200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80200, 0x0) (async) mmap$auto(0x0, 0xffffffffffff8000, 0x4000000000e2, 0xeb1, 0x401, 0x8000) (async) fstatfs$auto(r1, &(0x7f0000000040)={0x0, 0x1, 0x101, 0x7fff, 0xbc60000000000000, 0x0, 0xbf31, {[0x7dbc, 0x8]}, 0x2000000, 0x8, 0x6, [0x6, 0xff, 0x4000001, 0x8000000000000001]}) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto(r3, 0x0, 0x20) r4 = getegid() setregid$auto(r4, r4) fsconfig$auto_FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f00000002c0)='/sys/\x97\x8b}.\xcf\xc9\xaa&.\xe2\x11V\xfe\xea\x98kernel/debug/netdevsim/ne\x93devsim3/max_vfs\x00', &(0x7f0000000340)="66c9764a767ee4de07cedf1852b3689e0507167fc200b03cb1178951982135474f19c2cdde9daad8958e545c6e6f35885869cfb8d3e40c0887599efc3747fd75", r4) (async) r5 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) statx$auto(0xffffffffffffff9c, 0x0, 0xbf, 0xfffffff9, &(0x7f00000001c0)={0x1, 0x8b65, 0xa, 0x0, 0x0, 0xee00, 0x9, 0x2, 0x67, 0x3e, 0xa, 0x2, {0x3, 0x6}, {0xf, 0x4200}, {0x4, 0x10001}, {0x0, 0x99f6}, 0x7, 0x7ff, 0x7df, 0x8001, 0x2, 0x0, 0x3, 0x8000000000000001, 0x7, 0x40, 0x1134000, 0x8, [0x5c7, 0x5, 0x28, 0x4000000000, 0x5, 0x0, 0x6, 0x3, 0x1]}) (async) write$auto(0xca, &(0x7f00000000c0)='\x04>\x00\x02\x18\x00\x00\xd3b\x01\xbd\x9b@\xb0\x00\x00\x00\x84\xa2\\\x15\xc4>\xa9\x82,\xf9y\xc7p\xf1w\xbe\xde\xe8\xc3\x01#\xcc\tF\xb6\x95\xeeH\xf8}v\xb3\xcb(\xa90Abe\xc3\x8c\xcc\xe7\xb8\x00F\x89#\xb4\xf0F\xa1\xd5\x1e\x8f\t\x9dZ~\xea\xa3\x93\xc2\x04\xe1;b\x99\x85\x00\x00\x00\xe2E\x00\x00-a\xb6n\xbc\xb4=\xf8\xce\x01\x1f]\x85|\xce\xd7\xff\xff\xd3lb\xc5\xee\xdb\xcb\xbb\xd8\x00\x80\x00\x00\xe9e\xe5\x80\x1c\x02\"\xa7&8U\xfd\xdc\x15\xae\xfa5\xb8}\x0e\xb4:\x91\xbb5\xd3{\xb2\xd0\xc0\x93=\xf8E\xceO\x1e\xd5\x8f\xdf\xaa\x1c\xfd\xb0h\xd8\xbc\xecA\xa6\xde\xd1=\xfd)d\x8f\vk\x1c+\xf7, \xf8]\xb3\xe9B\x02\f\'\xcf0\x06', 0x1ff) (async) write$auto(r5, 0x0, 0x1) (async) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x539083, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) pkey_free$auto(0x80000000) (async) socket(0x8, 0x1, 0x3) 49.299475615s ago: executing program 4 (id=426): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f0000001200)='/sys/kernel/tracing/trace_options\x00', 0x8102, 0x0) write$auto_tracing_iter_fops_trace(r0, &(0x7f0000001240)="a7e60900", 0x4) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), 0xffffffffffffffff) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000040)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000100)={0x0, 0x2132, 0x7}) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000240)=""/127, 0x7f) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/018/001\x00', 0x16d080, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0xa, 0x2, 0x73) sendto$auto(r4, 0x0, 0xfdef, 0xfe80, 0x0, 0x1c) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/vivid.0/video4linux/video63/dev_debug\x00', 0x62, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000380)=ANY=[@ANYBLOB="18002800", @ANYRES16=r5, @ANYBLOB="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"], 0x18}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) mmap$auto(0x0, 0x2020005, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) mmap$auto(0x27e, 0x20009, 0xe2, 0xeb1, 0xffffffffffffffff, 0x8000) r6 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x49402, 0x0) read$auto(r6, 0x0, 0x9a28) fanotify_mark$auto(0xffffffffffffffff, 0x80, 0x5e50ee86, 0xffffffffffffffff, 0x0) mremap$auto(0x200000001000, 0x8, 0x37, 0x3, 0x110c230000) 46.936105423s ago: executing program 4 (id=434): mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptyt8\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r0 = socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysinfo$auto(0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) setsockopt$auto(r0, 0x1, 0x208, 0x0, 0x800009) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) setsockopt$auto(0xffffffffffffffff, 0x1, 0x9, 0x0, 0xeb66) shutdown$auto(0x200000003, 0x2) semctl$auto(0x80000001, 0x86e5, 0x6, 0xfffffffffffffffb) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/sit0/ifindex\x00', 0x80000, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x202, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x40004}, 0x2) timer_create$auto_CLOCK_MONOTONIC(0x1, &(0x7f0000000080)={@sival_int=0x10, @inferred, 0x5}, 0x0) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0xfffffffffffffffe, 0x0) 45.702907429s ago: executing program 4 (id=439): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)="3290b800009c550d22350f737ca2dd0af0d849aec832ec49c034169af8fa9231c143b1a8dd292977588a83400445ddc508f3aef64488936413adba3a9cc99bdfd8e7000000", 0x45) fanotify_init$auto(0x4005, 0x1) mincore$auto(0x1000, 0x8001, 0x0) socket(0x25, 0x1, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x13e, 0x0, 0xfffffffffffffffd) ioctl$auto(0x4000000000000c8, 0x400454d1, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0xa, 0x801, 0x84) setsockopt$auto(r1, 0x10000000084, 0xb, 0x0, 0x409c) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) setregid$auto(0xee01, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) prlimit64$auto(0x0, 0x7, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) io_uring_setup$auto(0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$auto(0x3, &(0x7f0000000080)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4}, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 31.943340977s ago: executing program 0 (id=489): socket(0x10, 0x3, 0x6) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x280000, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0) socket(0x10, 0x3, 0xa) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x59, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101840, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r0, 0x0, 0xc3) 31.715013285s ago: executing program 0 (id=490): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0xb00e, 0x4000000000df, 0x40000000000eb1, r0, 0x56) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x10000000, 0xffffffff, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000000), r1) sendmsg$auto_NFSD_CMD_POOL_MODE_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r2, 0x1, 0x70bd38, 0x25dfdc00}, 0x14}, 0x1, 0x0, 0x0, 0x2004c804}, 0x40000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) getsockopt$auto_SO_RCVMARK(0xffffffffffffffff, 0x0, 0x4b, &(0x7f0000000000)='}\'.^\x00', &(0x7f00000000c0)=0x7) recvmmsg$auto(r0, 0x0, 0x10000, 0x6, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video54\x00', 0x42942, 0x0) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) getsockopt$auto_SO_RCVPRIORITY(r3, 0x6, 0x52, &(0x7f0000001500)='/dev/vidgo54\x008n\xde\xbd\xc1*\x80\x97\xed\x83M\xc1\x10-\xe6K\b;YC\n\xadFb\x9f\x02\x1f\xaa\x0e\r\x19$\'X\xc3\xcd\xedP\x99O\xf6\xc4\x1a\x9e\x91\xa3C\x126\x8f. \xf7\xcc\xd2\xb4\xa9\x8f\xa1`\x96\xa9\xf6\xd1Gg\x02\\\x8f\xb1\xa7X\xf9J\xd9yU\xf2\xb5\xe2\xe7\xdc\xf4\xc2\xd6M#\x06\xc1<$\x1b=\xec\x95\x81\xc6\x13Z\xb0\xed\xd0\xa7\x04~\xd9\xd3\x02\xce\xb2\x8ekg\xcdk\xab\x1d\xb2\xab\x1b\xb6\xad\xde\\s9(m\xd4\xaa{\xa4p6\xa6\x91\x03\xda\xb9\xcc\xe5\xea\x19\x9fT\x9e\x94D\xf9\xb3\xe2\x9bL\xdcn\n\xd1\'H\xafw\x9d\xb0\xd2\xe2\xb9?\xb2 4\xb0t\xd8b\x10\xc7/\t\xf5q\xda\xf8\x8c\rz\x9fF\xebcU\f\x8d\"M\x0e\xceR\x8d\x96\xde\xdd\xfd\xd3\xd7\xbc\x19\x01\x8c\xb9\xb5:\xb9l\xbdxySM\xad)\xb9\x88\xa8-\x7fL\x8f\xc5,\xa2m\x8a\xa5Sg\x11,\xb0\xbe\xe7\xa4s\xdb\x10u\x80\xac\xd4bRy\x13S\b\x90\x15\x1eM@wK\xea\xd2\xcd\xe93\nB|X\"\xecm\x83\xd77\x96\xd1\xa1\xdc\xc3\xf3\xad\xfe\xb8\xc7cx\xccS.\v\t3\xa6\x96\xe4M\x867\xc2cHh\xb5\x98tT \xdb\x18te\xb7J\xec5D\x98]\x17O\x19\xc1s\x10\x1f`\xfc\xeb\xc2\x15cW\x14\x9cw_l\xea\x83\xf5GO\xe1a9\xf5\x97\v\\\xef\x15\r', &(0x7f0000000080)=0x100) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000140), 0x7111}, 0x8) r4 = socket(0x3, 0xa, 0x0) bind$auto(r4, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000001a80), 0x1140, 0x0) ioctl$auto_PPPIOCATTACH(r5, 0x4004743d, 0xfffffffffffffffd) prctl$auto(0x23, 0x7, 0x7fffffffefff, 0x0, 0x4) socket(0x1a, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x1, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x44009, 0xdf, 0x9b72, 0x7, 0x28000) open(&(0x7f0000000040)='./file0\x00', 0x2041, 0xee) 30.59021034s ago: executing program 34 (id=439): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)="3290b800009c550d22350f737ca2dd0af0d849aec832ec49c034169af8fa9231c143b1a8dd292977588a83400445ddc508f3aef64488936413adba3a9cc99bdfd8e7000000", 0x45) fanotify_init$auto(0x4005, 0x1) mincore$auto(0x1000, 0x8001, 0x0) socket(0x25, 0x1, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x13e, 0x0, 0xfffffffffffffffd) ioctl$auto(0x4000000000000c8, 0x400454d1, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0xa, 0x801, 0x84) setsockopt$auto(r1, 0x10000000084, 0xb, 0x0, 0x409c) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) setregid$auto(0xee01, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) prlimit64$auto(0x0, 0x7, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) io_uring_setup$auto(0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$auto(0x3, &(0x7f0000000080)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4}, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 30.273300989s ago: executing program 0 (id=496): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x80202, 0x0) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000340), 0xffffffffffffffff) pread64$auto(r0, 0x0, 0x4, 0xc9) r1 = openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/setgroups\x00', 0x2, 0x0) epoll_pwait2$auto(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000100)={0x0, 0x7f}, &(0x7f0000000140), 0x8) readv$auto(0x3, &(0x7f0000003080)={&(0x7f0000003040), 0x4}, 0x9) mprotect$auto(0x110c230000, 0xa588, 0x6) mremap$auto(0x110c231000, 0x0, 0x101, 0x3, 0x0) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents64$auto(r2, 0x0, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000", @ANYBLOB="040006"], 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r3) r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000005c0), r3) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001d40)={0x14, r4, 0x8ff972b65c311bf5, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008090}, 0x4000) writev$auto(r1, &(0x7f0000003600)={0x0, 0x2}, 0x8) 29.915344439s ago: executing program 0 (id=497): r0 = bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0xe, 0x4, 0x4, 0x10001, 0x8, 0xc, 0xffffffffffffffff, 0x9, 0x7ff}, 0xee) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r0) sendmsg$auto_NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="01000000349257bac7b7ff25ba1916189446903f95aa85cc5e2fe3334b8bf2c8cd52ee75de7a1683c68f3475ff8e5f8efb2219a4f3e2f0096eece67a6acce22c60cd1697f287047164fc6d46", @ANYRES16=r3, @ANYBLOB="000128bd7000fedbdf25650000000800090009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$auto_MACSEC_CMD_ADD_TXSA(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001580)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000fddbdf25040000008c000380850004802d0d00007fd9dfc637a94c964a67169a44c71805af71f2d4cd1bb2b09c4a3a1d520ef6530152f3dd3f5c3c96f4f181c7fcb0a4fd622229c3db4c82eb3b227879092fe3325b8805670ba98f3135ce0d440b4bb72e2a49fb7d7272903bfbe3906a0ca0c96f9e9dc9fb8cc4f0683cd7e3d4587595c3dc8f8aee44777503ecbeb2ad9f00000008000100", @ANYRES32=0x0, @ANYBLOB], 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x40001, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/net/rpc/nfsd.fh/channel\x00', 0x88400, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000240)=""/213, 0xd5) r5 = pidfd_open$auto(0x1, 0x0) setns(r5, 0x60020000) mmap$auto(0x0, 0x2, 0xdf, 0xeb1, 0x401, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) mount_setattr$auto(0x5, 0x0, 0x0, &(0x7f0000000640)={0x1, 0x9, 0x80000}, 0x283) 29.248593102s ago: executing program 0 (id=499): socket(0x10, 0x3, 0x6) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x280000, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0) socket(0x10, 0x3, 0xa) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x59, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101840, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r0, 0x0, 0xc3) 28.784030655s ago: executing program 0 (id=501): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x18a64d47ddeca1f0}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) 4.552777772s ago: executing program 1 (id=596): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x5, 0x80805, 0x0) clone$auto(0x20003b4b, 0xa, 0x0, 0x0, 0x10) ioctl$auto(0x3, 0x80087601, r0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/memfd_noexec\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) write$auto(0x3, 0x0, 0xfdef) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x400053, 0x9) r1 = socket(0x2, 0x1, 0x106) madvise$auto(0x401, 0xa, 0x7) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/version\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x1, 0x100000000000032, 0xfffffffffffffffc) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x1557, 0xffffffffffffffff, 0x0) r2 = socket(0x2, 0x5, 0x0) getsockopt$auto(r2, 0x84, 0x85, 0x0, &(0x7f00000000c0)=0x1000c) timerfd_gettime$auto(r1, &(0x7f0000000000)={{0xfffffffffffff000, 0x82d7}, {0x380, 0x2}}) 3.420510528s ago: executing program 1 (id=597): mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptyt8\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r0 = socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysinfo$auto(0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) setsockopt$auto(r0, 0x1, 0x208, 0x0, 0x800009) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) setsockopt$auto(0xffffffffffffffff, 0x1, 0x9, 0x0, 0xeb66) shutdown$auto(0x200000003, 0x2) semctl$auto(0x80000001, 0x86e5, 0x6, 0xfffffffffffffffb) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/sit0/ifindex\x00', 0x80000, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x202, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x40004}, 0x2) timer_create$auto_CLOCK_MONOTONIC(0x1, &(0x7f0000000080)={@sival_int=0x10, @inferred, 0x5}, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer\x00', 0x80102, 0x0) madvise$auto(0x0, 0xfffffffffffffffe, 0x0) 2.720623804s ago: executing program 1 (id=600): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/module/hid_magicmouse/parameters/scroll_speed\x00', 0x101142, 0x0) openat$auto_page_owner_stack_operations_page_owner(0xffffffffffffff9c, &(0x7f0000004340), 0x0, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8100, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x40200, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638828712, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0p\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r0, 0x0, 0x80000000c3) 2.534303914s ago: executing program 1 (id=602): r0 = bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0xe, 0x4, 0x4, 0x10001, 0x8, 0xc, 0xffffffffffffffff, 0x9, 0x7ff}, 0xee) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r0) sendmsg$auto_NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="01000000349257bac7b7ff25ba1916189446903f95aa85cc5e2fe3334b8bf2c8cd52ee75de7a1683c68f3475ff8e5f8efb2219a4f3e2f0096eece67a6acce22c60cd1697f287047164fc6d46", @ANYRES16=r3, @ANYBLOB="000128bd7000fedbdf25650000000800090009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$auto_MACSEC_CMD_ADD_TXSA(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001580)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000fddbdf25040000008c000380850004802d0d00007fd9dfc637a94c964a67169a44c71805af71f2d4cd1bb2b09c4a3a1d520ef6530152f3dd3f5c3c96f4f181c7fcb0a4fd622229c3db4c82eb3b227879092fe3325b8805670ba98f3135ce0d440b4bb72e2a49fb7d7272903bfbe3906a0ca0c96f9e9dc9fb8cc4f0683cd7e3d4587595c3dc8f8aee44777503ecbeb2ad9f00000008000100", @ANYRES32=0x0, @ANYBLOB], 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x40001, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/net/rpc/nfsd.fh/channel\x00', 0x88400, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000240)=""/213, 0xd5) r5 = pidfd_open$auto(0x1, 0x0) setns(r5, 0x60020000) getcwd$auto(0x0, 0xffffffffffffffff) mount_setattr$auto(0x5, 0x0, 0x0, &(0x7f0000000640)={0x1, 0x9, 0x80000}, 0x283) 1.857857752s ago: executing program 1 (id=604): r0 = socket(0x27, 0x6, 0x4) bind$auto(r0, &(0x7f0000000080)=@llc={0x1a, 0x312, 0x3, 0x8, 0x81, 0x5, @random="d1a40220b9b3"}, 0x7fff) setsockopt$auto_SO_WIFI_STATUS(r0, 0x0, 0x30, 0x0, 0x1bb) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000000000000001) mmap$auto(0x0, 0x2020009, 0x7, 0xf8, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETVA(r1, 0x7a4, 0x0) socket$nl_generic(0x11, 0x3, 0x10) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) getsockname$auto(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r3, 0x107, 0x1, 0x0, 0x8004) close_range$auto(0x2, 0x8, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x8002, 0x0) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) io_uring_setup$auto(0x386, &(0x7f0000000000)={0x5, 0x1, 0x4c, 0x0, 0x1, 0x8, 0xffffffffffffffff, [0x10001, 0x8, 0xa], {0x8, 0x8, 0x3fc000, 0x4, 0xffffff7a, 0x751ea2a8, 0x9, 0xec5, 0xffff}, {0xd5, 0x80000000, 0x1bee, 0x5d, 0x400, 0x9, 0x5, 0x8000, 0x7f}}) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyxa/dev\x00', 0x80000, 0x0) 1.434036562s ago: executing program 5 (id=605): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) sendfile$auto(r0, r0, 0x0, 0x1) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, r0, 0xc) getcwd$auto(0x0, 0x8000044) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x4, 0x15, 0xfffffffffffffffa, 0x2) openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000002840)='/sys/kernel/tracing/trace_clock\x00', 0x8000, 0x0) fchmodat2$auto(0xffffffffffffff9c, 0x0, 0x61ed, 0x4) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x60800, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000840)={{@inferred, 0x7, 0xba28, 0x0, "708c58271a7985a7704331f78af8d149fc53d81fd4a7553c2ff48b48a8a57689adcc1ca6d2cbfa93b50590c9", @raw=0x6}, 0x0, @bytes=@data_ptr=0x0, "fa491e08108961dd5708680f1134935851612a52d629535f54f3832490fc4e7f79daef312b3df3307044713a4801d409aefe3f932f78fc311771094e769c0095f94ee6d74f2517f34a0bbbf502bf3392ac4d93bde5f733ba936c0890312cf035bc44117db9b683eedc5e02a703fc82750d8d6ebac0c3019ef8e6c1eecea33a59"}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) io_uring_setup$auto(0x3, 0x0) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/failslab/probability\x00', 0x0, 0x0) read$auto(0x3, 0x0, 0x80) r2 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x8002, 0x0) write$auto(r2, 0x0, 0x9) 1.200579512s ago: executing program 5 (id=606): mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptyt8\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r0 = socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysinfo$auto(0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) setsockopt$auto(r0, 0x1, 0x208, 0x0, 0x800009) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) setsockopt$auto(0xffffffffffffffff, 0x1, 0x9, 0x0, 0xeb66) shutdown$auto(0x200000003, 0x2) semctl$auto(0x80000001, 0x86e5, 0x6, 0xfffffffffffffffb) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/sit0/ifindex\x00', 0x80000, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x202, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x40004}, 0x2) timer_create$auto_CLOCK_MONOTONIC(0x1, &(0x7f0000000080)={@sival_int=0x10, @inferred, 0x5}, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer\x00', 0x80102, 0x0) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) 1.140332715s ago: executing program 1 (id=607): ioctl$auto_VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0xffffffff, 0xffffffffffffffff}) bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)=@iter_create={r0, 0xffffffff}, 0x2) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) timer_create$auto(0x9, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) socket(0xa, 0x1, 0x100) write$auto(0xffffffffffffffff, 0x0, 0x26e) shmctl$auto_IPC_SET(0x3, 0x1, &(0x7f0000000280)={{0x80, 0x0, 0xee00, 0xca6d, 0x8, 0x29, 0x5}, 0xed, 0x5, 0x8000000000000000, 0x1, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000340)="4f0d69309e979b514cce30f21c95e943b6bcd3c6b6a5443e6e78b43836af884bbeaa7fd80f0ff2d68a178d1fd8471c33ff", &(0x7f0000000200)="e3ac9b01ee8d985b677531eeeee5cb5bf774d2df4d9ae6dccbc98def20b72c7c2826a585ba3a8d67815abade214708a4ade77c6faa2f2889ca3e7989f32645dd597a3ae1b46e8d8c7e03ae6b8aaa49f6bf64"}) process_mrelease$auto(0xffffffffffffffff, 0xa) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) add_key$auto_KEY_SPEC_USER_KEYRING(&(0x7f0000001c80)='\\\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) mkdir$auto(0x0, 0xff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x4a42, 0x0) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec4\x00', 0x800, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x2, 0x9b7, 0x5, "0200000002000000997e763f222ce1", '\x00', "0801410c", '\x00', ['\x00', "704bf4215ca0f37f14001322", '\x00', "000400"]}) ioctl$auto_CEC_TRANSMIT(r3, 0xc0386105, &(0x7f0000000000)={0x6, 0x3, 0x7, 0x4, 0x2, 0x7ffffffe, "9b2189084142725dff0d933475a77466", 0xb, 0x4, 0x40, 0x33, 0x2, 0x4, 0x2}) syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f0000000080), r2) mmap$auto(0x1000000002, 0x100000400008, 0x1000000000000df, 0x4000009b73, r2, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x40080, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x3, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket(0x1e, 0x4, 0x0) socket(0x1d, 0x2, 0x7) 854.695195ms ago: executing program 5 (id=608): mmap$auto(0x0, 0x800, 0x1, 0x800000000000eb1, 0xffffffffffffffff, 0x8007) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x2a082, 0x0) socket(0xa, 0x3, 0x3b) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x103281, 0x0) mmap$auto(0x0, 0x20009, 0x4000000001df, 0xeb1, 0x401, 0x8000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socketpair$auto(0x1e, 0x4, 0x266, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.7/usb8/authorized_default\x00', 0x20582, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x5, 0x2, 0x0, 0x0, 0x2) open(0x0, 0x261c2, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r1 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x149c83, 0x0) write$auto(r1, 0x0, 0xc3) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) gettid() r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) ioctl$auto(r2, 0x2285, 0x1cfc4b42) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x80000000008000) close_range$auto(0x2, 0xa, 0x0) 337.545282ms ago: executing program 5 (id=609): socket(0x11, 0x80003, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000300)={0x0, 0xa6, &(0x7f0000000100)={&(0x7f0000000840)={0x14, r1, 0x305, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x9effffff, 0x4004010}, 0x4040008) 162.880729ms ago: executing program 5 (id=610): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/module/hid_magicmouse/parameters/scroll_speed\x00', 0x101142, 0x0) openat$auto_page_owner_stack_operations_page_owner(0xffffffffffffff9c, &(0x7f0000004340), 0x0, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8100, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x40200, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638828712, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0p\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r0, 0x0, 0x80000000c3) 0s ago: executing program 5 (id=611): ioctl$auto_VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0xffffffff, 0xffffffffffffffff}) bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)=@iter_create={r0, 0xffffffff}, 0x2) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) timer_create$auto(0x9, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) socket(0xa, 0x1, 0x100) write$auto(0xffffffffffffffff, 0x0, 0x26e) shmctl$auto_IPC_SET(0x3, 0x1, &(0x7f0000000280)={{0x80, 0x0, 0xee00, 0xca6d, 0x8, 0x29, 0x5}, 0xed, 0x5, 0x8000000000000000, 0x1, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000340)="4f0d69309e979b514cce30f21c95e943b6bcd3c6b6a5443e6e78b43836af884bbeaa7fd80f0ff2d68a178d1fd8471c33ff", &(0x7f0000000200)="e3ac9b01ee8d985b677531eeeee5cb5bf774d2df4d9ae6dccbc98def20b72c7c2826a585ba3a8d67815abade214708a4ade77c6faa2f2889ca3e7989f32645dd597a3ae1b46e8d8c7e03ae6b8aaa49f6bf64"}) process_mrelease$auto(0xffffffffffffffff, 0xa) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) add_key$auto_KEY_SPEC_USER_KEYRING(&(0x7f0000001c80)='\\\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) mkdir$auto(0x0, 0xff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x4a42, 0x0) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec4\x00', 0x800, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x2, 0x9b7, 0x5, "0200000002000000997e763f222ce1", '\x00', "0801410c", '\x00', ['\x00', "704bf4215ca0f37f14001322", '\x00', "000400"]}) ioctl$auto_CEC_TRANSMIT(r3, 0xc0386105, &(0x7f0000000000)={0x6, 0x3, 0x7, 0x4, 0x2, 0x7ffffffe, "9b2189084142725dff0d933475a77466", 0xb, 0x4, 0x40, 0x33, 0x2, 0x4, 0x2}) syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f0000000080), r2) mmap$auto(0x1000000002, 0x100000400008, 0x1000000000000df, 0x4000009b73, r2, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x40080, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x3, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) socket(0x2, 0x80002, 0x73) socket(0x1e, 0x4, 0x0) socket(0x1d, 0x2, 0x7) kernel console output (not intermixed with test programs): using preconfigured BSSID 50:50:50:50:50:50 [ 91.004671][ T624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.004668][ T3375] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.004734][ T3375] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.061530][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.077278][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.111504][ T3375] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.131060][ T3375] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.308531][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.318730][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.356226][ T5623] Bluetooth: hci0: command tx timeout [ 91.397798][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.411072][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.437799][ T5626] Bluetooth: hci2: command tx timeout [ 91.443667][ T5631] Bluetooth: hci1: command tx timeout [ 91.449930][ T5623] Bluetooth: hci3: command tx timeout [ 91.827296][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.854448][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.935224][ T5794] sd 0:0:1:0: PR command failed: 1026 [ 91.942402][ T5794] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 91.962006][ T5794] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 92.101523][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.151857][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.168631][ T24] cfg80211: failed to load regulatory.db [ 92.443619][ T5799] FAULT_INJECTION: forcing a failure. [ 92.443619][ T5799] name failslab, interval 1, probability 0, space 0, times 1 [ 92.481902][ T5799] CPU: 0 UID: 0 PID: 5799 Comm: syz.2.6 Not tainted syzkaller #0 PREEMPT(full) [ 92.481943][ T5799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 92.481960][ T5799] Call Trace: [ 92.481970][ T5799] [ 92.481982][ T5799] dump_stack_lvl+0x100/0x190 [ 92.482020][ T5799] should_fail_ex.cold+0x5/0xa [ 92.482057][ T5799] should_failslab+0xc2/0x120 [ 92.482095][ T5799] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 92.482142][ T5799] ? __d_alloc+0x34/0xa40 [ 92.482190][ T5799] __d_alloc+0x34/0xa40 [ 92.482234][ T5799] d_alloc_pseudo+0x1c/0xc0 [ 92.482262][ T5799] alloc_file_pseudo+0xcf/0x230 [ 92.482313][ T5799] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 92.482358][ T5799] ? hugetlbfs_get_inode+0x3f5/0x700 [ 92.482406][ T5799] hugetlb_file_setup+0x2a8/0x5b0 [ 92.482454][ T5799] ksys_mmap_pgoff+0x242/0x610 [ 92.482496][ T5799] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 92.482532][ T5799] ? xfd_validate_state+0x129/0x190 [ 92.482570][ T5799] __x64_sys_mmap+0x125/0x190 [ 92.482619][ T5799] do_syscall_64+0x10b/0xf80 [ 92.482654][ T5799] ? clear_bhb_loop+0x40/0x90 [ 92.482692][ T5799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.482723][ T5799] RIP: 0033:0x7fb0b719cdd9 [ 92.482749][ T5799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.482776][ T5799] RSP: 002b:00007fb0b80a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 92.482807][ T5799] RAX: ffffffffffffffda RBX: 00007fb0b7415fa0 RCX: 00007fb0b719cdd9 [ 92.482826][ T5799] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 92.482844][ T5799] RBP: 00007fb0b7232d69 R08: 0000000000000401 R09: 0000300000000000 [ 92.482860][ T5799] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 92.482877][ T5799] R13: 00007fb0b7416038 R14: 00007fb0b7415fa0 R15: 00007ffda680ee58 [ 92.482916][ T5799] [ 93.049531][ T5809] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8'. [ 93.466517][ T5821] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 93.583345][ T5819] mmap: syz.2.9 (5819) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 93.602606][ T5821] netlink: 330 bytes leftover after parsing attributes in process `syz.3.10'. [ 94.147183][ T5830] netlink: 326 bytes leftover after parsing attributes in process `syz.3.11'. [ 94.199918][ T5830] Zero length message leads to an empty skb [ 94.903447][ T5846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.953787][ T5846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.367141][ T5856] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 95.388493][ T5856] random: crng reseeded on system resumption [ 95.604636][ T5859] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.702320][ T5864] FAULT_INJECTION: forcing a failure. [ 95.702320][ T5864] name failslab, interval 1, probability 0, space 0, times 0 [ 95.758066][ T5864] CPU: 1 UID: 0 PID: 5864 Comm: syz.2.19 Not tainted syzkaller #0 PREEMPT(full) [ 95.758107][ T5864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 95.758123][ T5864] Call Trace: [ 95.758133][ T5864] [ 95.758145][ T5864] dump_stack_lvl+0x100/0x190 [ 95.758183][ T5864] should_fail_ex.cold+0x5/0xa [ 95.758222][ T5864] ? memcg_list_lru_alloc+0x4ec/0x740 [ 95.758251][ T5864] should_failslab+0xc2/0x120 [ 95.758287][ T5864] __kmalloc_noprof+0xe0/0x850 [ 95.758343][ T5864] ? __lock_acquire+0x4a5/0x2630 [ 95.758376][ T5864] memcg_list_lru_alloc+0x4ec/0x740 [ 95.758414][ T5864] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 95.758462][ T5864] __memcg_slab_post_alloc_hook+0x27e/0xff0 [ 95.758512][ T5864] ? kasan_save_track+0x14/0x30 [ 95.758544][ T5864] kmem_cache_alloc_lru_noprof+0x592/0x6e0 [ 95.758588][ T5864] ? __d_alloc+0x34/0xa40 [ 95.758636][ T5864] __d_alloc+0x34/0xa40 [ 95.758679][ T5864] d_alloc_pseudo+0x1c/0xc0 [ 95.758708][ T5864] alloc_file_pseudo+0xcf/0x230 [ 95.758755][ T5864] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 95.758802][ T5864] ? hugetlbfs_get_inode+0x3f5/0x700 [ 95.758850][ T5864] hugetlb_file_setup+0x2a8/0x5b0 [ 95.758898][ T5864] ksys_mmap_pgoff+0x242/0x610 [ 95.758938][ T5864] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 95.758973][ T5864] ? __pfx___x64_sys_futex+0x10/0x10 [ 95.759007][ T5864] ? __pfx_do_writev+0x10/0x10 [ 95.759041][ T5864] __x64_sys_mmap+0x125/0x190 [ 95.759080][ T5864] do_syscall_64+0x10b/0xf80 [ 95.759112][ T5864] ? clear_bhb_loop+0x40/0x90 [ 95.759150][ T5864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.759181][ T5864] RIP: 0033:0x7fb0b719cdd9 [ 95.759206][ T5864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.759234][ T5864] RSP: 002b:00007fb0b80a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 95.759263][ T5864] RAX: ffffffffffffffda RBX: 00007fb0b7415fa0 RCX: 00007fb0b719cdd9 [ 95.759283][ T5864] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 95.759300][ T5864] RBP: 00007fb0b7232d69 R08: 0000000000000401 R09: 0000300000000000 [ 95.759328][ T5864] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 95.759346][ T5864] R13: 00007fb0b7416038 R14: 00007fb0b7415fa0 R15: 00007ffda680ee58 [ 95.759385][ T5864] [ 100.186500][ T5920] zram0: detected capacity change from 0 to 16 [ 100.871640][ T5932] random: crng reseeded on system resumption [ 101.082176][ T5934] HfR: entered promiscuous mode [ 103.069673][ T5978] syz.0.42(5978): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 103.468344][ T5956] ptrace attach of "./syz-executor exec"[5619] was attempted by "./syz-executor exec"[5956] [ 103.509191][ T5956] syz.3.43 uses obsolete (PF_INET,SOCK_PACKET) [ 103.988534][ T5993] netlink: 'syz.3.45': attribute type 64 has an invalid length. [ 104.029324][ T5993] netlink: 74 bytes leftover after parsing attributes in process `syz.3.45'. [ 104.113902][ T5993] netlink: 'syz.3.45': attribute type 64 has an invalid length. [ 104.217684][ T5993] netlink: 74 bytes leftover after parsing attributes in process `syz.3.45'. [ 106.377541][ T6035] random: crng reseeded on system resumption [ 106.380677][ T6037] misc userio: Invalid payload size [ 106.844635][ T6045] FAULT_INJECTION: forcing a failure. [ 106.844635][ T6045] name failslab, interval 1, probability 0, space 0, times 0 [ 106.844687][ T6045] CPU: 1 UID: 0 PID: 6045 Comm: syz.3.52 Not tainted syzkaller #0 PREEMPT(full) [ 106.844721][ T6045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 106.844738][ T6045] Call Trace: [ 106.844748][ T6045] [ 106.844759][ T6045] dump_stack_lvl+0x100/0x190 [ 106.844798][ T6045] should_fail_ex.cold+0x5/0xa [ 106.844836][ T6045] should_failslab+0xc2/0x120 [ 106.844873][ T6045] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 106.844914][ T6045] ? security_file_alloc+0x34/0x2c0 [ 106.844947][ T6045] ? trace_kmem_cache_alloc+0xd5/0x100 [ 106.844985][ T6045] security_file_alloc+0x34/0x2c0 [ 106.845018][ T6045] init_file+0x95/0x480 [ 106.845061][ T6045] alloc_empty_file+0x79/0x1c0 [ 106.845105][ T6045] alloc_file_pseudo+0x13a/0x230 [ 106.845149][ T6045] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 106.845202][ T6045] ? hugetlbfs_get_inode+0x3f5/0x700 [ 106.845252][ T6045] hugetlb_file_setup+0x2a8/0x5b0 [ 106.845299][ T6045] ksys_mmap_pgoff+0x242/0x610 [ 106.845340][ T6045] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 106.845375][ T6045] ? xfd_validate_state+0x129/0x190 [ 106.845414][ T6045] __x64_sys_mmap+0x125/0x190 [ 106.845450][ T6045] do_syscall_64+0x10b/0xf80 [ 106.845485][ T6045] ? clear_bhb_loop+0x40/0x90 [ 106.845523][ T6045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.845553][ T6045] RIP: 0033:0x7f78f659cdd9 [ 106.845577][ T6045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.845610][ T6045] RSP: 002b:00007f78f7376028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 106.845637][ T6045] RAX: ffffffffffffffda RBX: 00007f78f6815fa0 RCX: 00007f78f659cdd9 [ 106.845656][ T6045] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 syzkaller syzkaller login: [ 106.845672][ T6045] RBP: 00007f78f6632d69 R08: 0000000000000401 R09: 0000300000000000 [ 106.845690][ T6045] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 106.845708][ T6045] R13: 00007f78f6816038 R14: 00007f78f6815fa0 R15: 00007fffa97cce68 [ 106.845748][ T6045] [ 107.373219][ T6054] FAULT_INJECTION: forcing a failure. [ 107.373219][ T6054] name failslab, interval 1, probability 0, space 0, times 0 [ 107.373309][ T6054] CPU: 0 UID: 0 PID: 6054 Comm: syz.3.55 Not tainted syzkaller #0 PREEMPT(full) [ 107.373329][ T6054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 107.373339][ T6054] Call Trace: [ 107.373344][ T6054] [ 107.373351][ T6054] dump_stack_lvl+0x100/0x190 [ 107.373374][ T6054] should_fail_ex.cold+0x5/0xa [ 107.373397][ T6054] should_failslab+0xc2/0x120 [ 107.373426][ T6054] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 107.373453][ T6054] ? mas_preallocate+0x1105/0x14a0 [ 107.373483][ T6054] mas_preallocate+0x1105/0x14a0 [ 107.373511][ T6054] ? __pfx_mas_preallocate+0x10/0x10 [ 107.373546][ T6054] ? vm_area_alloc+0x1f/0x160 [ 107.373572][ T6054] ? lockdep_init_map_type+0x5c/0x250 [ 107.373594][ T6054] __mmap_region+0x124a/0x2da0 [ 107.373644][ T6054] ? __pfx___mmap_region+0x10/0x10 [ 107.373674][ T6054] ? __pfx___might_resched+0x10/0x10 [ 107.373694][ T6054] ? find_held_lock+0x2b/0x80 [ 107.373715][ T6054] ? process_measurement+0x4c8/0x2350 [ 107.373740][ T6054] ? process_measurement+0x4c8/0x2350 [ 107.373773][ T6054] ? process_measurement+0x1f4/0x2350 [ 107.373800][ T6054] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 107.373818][ T6054] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 107.373847][ T6054] ? __lock_acquire+0x4a5/0x2630 [ 107.373874][ T6054] ? find_held_lock+0x2b/0x80 [ 107.373896][ T6054] ? is_bpf_text_address+0x8a/0x1a0 [ 107.373954][ T6054] mmap_region+0x527/0x620 [ 107.373972][ T6054] ? __pfx_mmap_region+0x10/0x10 [ 107.373989][ T6054] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 107.374011][ T6054] ? cap_mmap_addr+0x4b/0x120 [ 107.374035][ T6054] ? bpf_lsm_mmap_addr+0x9/0x30 [ 107.374051][ T6054] ? security_mmap_addr+0x71/0x1e0 [ 107.374070][ T6054] ? __get_unmapped_area+0x255/0x3e0 [ 107.374094][ T6054] do_mmap+0xc63/0x12f0 [ 107.374119][ T6054] ? __pfx_do_mmap+0x10/0x10 [ 107.374140][ T6054] ? __pfx_down_write_killable+0x10/0x10 [ 107.374168][ T6054] vm_mmap_pgoff+0x29e/0x470 [ 107.374194][ T6054] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 107.374214][ T6054] ? __fget_files+0x215/0x3d0 [ 107.374238][ T6054] ? __fget_files+0x21f/0x3d0 [ 107.374261][ T6054] ksys_mmap_pgoff+0x3cb/0x610 [ 107.374284][ T6054] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 107.374303][ T6054] ? fput+0x79/0x100 [ 107.374326][ T6054] ? ksys_write+0x1ac/0x250 [ 107.374345][ T6054] ? __pfx_ksys_write+0x10/0x10 [ 107.374367][ T6054] __x64_sys_mmap+0x125/0x190 [ 107.374388][ T6054] do_syscall_64+0x10b/0xf80 [ 107.374414][ T6054] ? clear_bhb_loop+0x40/0x90 [ 107.374435][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.374453][ T6054] RIP: 0033:0x7f78f659cdd9 [ 107.374468][ T6054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.374485][ T6054] RSP: 002b:00007f78f7376028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 107.374502][ T6054] RAX: ffffffffffffffda RBX: 00007f78f6815fa0 RCX: 00007f78f659cdd9 [ 107.374513][ T6054] RDX: 0000000000000ffb RSI: 00000000000007ff RDI: 0000020000000000 [ 107.374523][ T6054] RBP: 00007f78f7376090 R08: 0000000000000003 R09: 0000000000000000 [ 107.374533][ T6054] R10: 0008000000008011 R11: 0000000000000246 R12: 0000000000000001 [ 107.374543][ T6054] R13: 00007f78f6816038 R14: 00007f78f6815fa0 R15: 00007fffa97cce68 [ 107.374565][ T6054] [ 107.377577][ T6059] sd 0:0:1:0: PR command failed: 1026 [ 107.377612][ T6059] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 107.377641][ T6059] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 107.670024][ T6061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.55'. [ 107.976713][ T5623] Bluetooth: hci1: unexpected event 0x3e length: 508 > 260 [ 107.976745][ T5623] Bluetooth: hci1: unexpected subevent 0x02 length: 507 > 260 [ 107.976771][ T5623] Bluetooth: hci1: Dropping invalid advertising data [ 107.976858][ T5623] Bluetooth: hci1: Dropping invalid advertising data [ 107.976891][ T5623] Bluetooth: hci1: Malformed LE Event: 0x02 [ 108.097065][ T5623] Bluetooth: hci1: unexpected event 0x3e length: 508 > 260 [ 108.097103][ T5623] Bluetooth: hci1: unexpected subevent 0x02 length: 507 > 260 [ 108.097134][ T5623] Bluetooth: hci1: Dropping invalid advertising data [ 108.097309][ T5623] Bluetooth: hci1: unknown advertising packet type: 0xe9 [ 108.097341][ T5623] Bluetooth: hci1: unknown advertising packet type: 0x8b [ 108.097365][ T5623] Bluetooth: hci1: unknown advertising packet type: 0xee [ 109.674077][ T6096] netlink: 'syz.1.63': attribute type 64 has an invalid length. [ 109.674101][ T6096] netlink: 74 bytes leftover after parsing attributes in process `syz.1.63'. [ 109.681302][ T6096] netlink: 'syz.1.63': attribute type 64 has an invalid length. [ 109.681322][ T6096] netlink: 74 bytes leftover after parsing attributes in process `syz.1.63'. [ 109.960587][ T6101] FAULT_INJECTION: forcing a failure. [ 109.960587][ T6101] name failslab, interval 1, probability 0, space 0, times 0 [ 109.960679][ T6101] CPU: 0 UID: 0 PID: 6101 Comm: syz.1.65 Not tainted syzkaller #0 PREEMPT(full) [ 109.960714][ T6101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 109.960731][ T6101] Call Trace: [ 109.960741][ T6101] [ 109.960753][ T6101] dump_stack_lvl+0x100/0x190 [ 109.960793][ T6101] should_fail_ex.cold+0x5/0xa [ 109.960833][ T6101] should_failslab+0xc2/0x120 [ 109.960869][ T6101] __kmalloc_cache_noprof+0x7a/0x6f0 [ 109.960913][ T6101] ? ima_calc_file_hash_tfm+0x236/0x350 [ 109.960961][ T6101] ? sha256_init+0xd/0xc0 [ 109.960994][ T6101] ima_calc_file_hash_tfm+0x236/0x350 [ 109.961043][ T6101] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10 [ 109.961136][ T6101] ? look_up_lock_class+0x55/0x120 [ 109.961176][ T6101] ? ima_alloc_tfm+0x21a/0x2e0 [ 109.961228][ T6101] ima_calc_file_hash+0x1e3/0x380 [ 109.961283][ T6101] ima_collect_measurement+0x94f/0xb30 [ 109.961343][ T6101] ? __pfx_ima_collect_measurement+0x10/0x10 [ 109.961426][ T6101] ? process_measurement+0x5ab/0x2350 [ 109.961471][ T6101] ? is_bad_inode+0xd/0x40 [ 109.961501][ T6101] ? xattr_resolve_name+0x27d/0x3f0 [ 109.961543][ T6101] ? vfs_getxattr_alloc+0xec/0x350 [ 109.961590][ T6101] ? ima_get_hash_algo+0x22d/0x400 [ 109.961629][ T6101] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 109.961678][ T6101] ? process_measurement+0xdfe/0x2350 [ 109.961722][ T6101] process_measurement+0xdfe/0x2350 [ 109.961778][ T6101] ? stack_trace_save+0x8e/0xc0 [ 109.961821][ T6101] ? __pfx_process_measurement+0x10/0x10 [ 109.961863][ T6101] ? __lock_acquire+0x4a5/0x2630 [ 109.961890][ T6101] ? __kasan_slab_alloc+0x89/0x90 [ 109.961919][ T6101] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 109.961964][ T6101] ? init_file+0x95/0x480 [ 109.962002][ T6101] ? alloc_empty_file+0x79/0x1c0 [ 109.962044][ T6101] ? alloc_file_pseudo+0x13a/0x230 [ 109.962088][ T6101] ? ksys_mmap_pgoff+0x242/0x610 [ 109.962121][ T6101] ? __x64_sys_mmap+0x125/0x190 [ 109.962153][ T6101] ? do_syscall_64+0x10b/0xf80 [ 109.962229][ T6101] ? __pfx_aa_file_perm+0x10/0x10 [ 109.962281][ T6101] ima_file_mmap+0x1c4/0x1f0 [ 109.962328][ T6101] ? __pfx_ima_file_mmap+0x10/0x10 [ 109.962393][ T6101] security_mmap_file+0x278/0x9b0 [ 109.962431][ T6101] vm_mmap_pgoff+0xec/0x470 [ 109.962476][ T6101] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 109.962512][ T6101] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 109.962560][ T6101] ? hugetlbfs_get_inode+0x3f5/0x700 [ 109.962603][ T6101] ? hugetlb_file_setup+0xc0/0x5b0 [ 109.962659][ T6101] ksys_mmap_pgoff+0x285/0x610 [ 109.962701][ T6101] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 109.962736][ T6101] ? xfd_validate_state+0x129/0x190 [ 109.962777][ T6101] __x64_sys_mmap+0x125/0x190 [ 109.962816][ T6101] do_syscall_64+0x10b/0xf80 [ 109.962852][ T6101] ? clear_bhb_loop+0x40/0x90 [ 109.962890][ T6101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.962922][ T6101] RIP: 0033:0x7fe22f19cdd9 [ 109.962948][ T6101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.962977][ T6101] RSP: 002b:00007fe22ffc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 109.963007][ T6101] RAX: ffffffffffffffda RBX: 00007fe22f415fa0 RCX: 00007fe22f19cdd9 [ 109.963027][ T6101] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 109.963045][ T6101] RBP: 00007fe22f232d69 R08: 0000000000000401 R09: 0000300000000000 [ 109.963064][ T6101] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 109.963082][ T6101] R13: 00007fe22f416038 R14: 00007fe22f415fa0 R15: 00007ffdaab18028 [ 109.963122][ T6101] [ 109.979109][ T29] audit: type=1800 audit(1843104522.650:2): pid=6101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.65" name="anon_hugepage" dev="hugetlbfs" ino=8725 res=0 errno=0 [ 110.487783][ T6109] sd 0:0:1:0: PR command failed: 1026 [ 110.487847][ T6109] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 110.487905][ T6109] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 111.168852][ T6121] ptrace attach of "./syz-executor exec"[5620] was attempted by "./syz-executor exec"[6121] [ 112.677652][ T6138] FAULT_INJECTION: forcing a failure. [ 112.677652][ T6138] name failslab, interval 1, probability 0, space 0, times 0 [ 112.677775][ T6138] CPU: 0 UID: 0 PID: 6138 Comm: syz.1.76 Not tainted syzkaller #0 PREEMPT(full) [ 112.677812][ T6138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 112.677828][ T6138] Call Trace: [ 112.677839][ T6138] [ 112.677850][ T6138] dump_stack_lvl+0x100/0x190 [ 112.677888][ T6138] should_fail_ex.cold+0x5/0xa [ 112.677928][ T6138] should_failslab+0xc2/0x120 [ 112.677963][ T6138] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 112.678007][ T6138] ? ima_inode_get+0x11f/0x580 [ 112.678062][ T6138] ima_inode_get+0x11f/0x580 [ 112.678109][ T6138] process_measurement+0x1213/0x2350 [ 112.678160][ T6138] ? stack_depot_save_flags+0x27/0x9d0 [ 112.678190][ T6138] ? stack_trace_save+0x8e/0xc0 [ 112.678232][ T6138] ? __pfx_process_measurement+0x10/0x10 [ 112.678276][ T6138] ? __lock_acquire+0x4a5/0x2630 [ 112.678303][ T6138] ? __kasan_slab_alloc+0x89/0x90 [ 112.678331][ T6138] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 112.678373][ T6138] ? init_file+0x95/0x480 [ 112.678417][ T6138] ? alloc_empty_file+0x79/0x1c0 [ 112.678452][ T6138] ? alloc_file_pseudo+0x13a/0x230 [ 112.678489][ T6138] ? ksys_mmap_pgoff+0x242/0x610 [ 112.678519][ T6138] ? __x64_sys_mmap+0x125/0x190 [ 112.678546][ T6138] ? do_syscall_64+0x10b/0xf80 [ 112.678611][ T6138] ? __pfx_aa_file_perm+0x10/0x10 [ 112.678654][ T6138] ima_file_mmap+0x1c4/0x1f0 [ 112.678693][ T6138] ? __pfx_ima_file_mmap+0x10/0x10 [ 112.678741][ T6138] security_mmap_file+0x278/0x9b0 [ 112.678773][ T6138] vm_mmap_pgoff+0xec/0x470 [ 112.678812][ T6138] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 112.678841][ T6138] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 112.678879][ T6138] ? hugetlbfs_get_inode+0x3f5/0x700 [ 112.678928][ T6138] ksys_mmap_pgoff+0x285/0x610 [ 112.678963][ T6138] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 112.678993][ T6138] ? xfd_validate_state+0x129/0x190 [ 112.679028][ T6138] __x64_sys_mmap+0x125/0x190 [ 112.679059][ T6138] do_syscall_64+0x10b/0xf80 [ 112.679088][ T6138] ? clear_bhb_loop+0x40/0x90 [ 112.679121][ T6138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.679147][ T6138] RIP: 0033:0x7fe22f19cdd9 [ 112.679170][ T6138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.679195][ T6138] RSP: 002b:00007fe22ffc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 112.679220][ T6138] RAX: ffffffffffffffda RBX: 00007fe22f415fa0 RCX: 00007fe22f19cdd9 [ 112.679237][ T6138] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 112.679252][ T6138] RBP: 00007fe22f232d69 R08: 0000000000000401 R09: 0000300000000000 [ 112.679268][ T6138] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 112.679283][ T6138] R13: 00007fe22f416038 R14: 00007fe22f415fa0 R15: 00007ffdaab18028 [ 112.679319][ T6138] [ 113.274068][ T6146] sd 0:0:1:0: PR command failed: 1026 [ 113.274137][ T6146] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 113.274195][ T6146] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 116.373521][ T6178] FAULT_INJECTION: forcing a failure. [ 116.373521][ T6178] name failslab, interval 1, probability 0, space 0, times 0 [ 116.373572][ T6178] CPU: 0 UID: 0 PID: 6178 Comm: syz.0.88 Not tainted syzkaller #0 PREEMPT(full) [ 116.373608][ T6178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 116.373627][ T6178] Call Trace: [ 116.373637][ T6178] [ 116.373648][ T6178] dump_stack_lvl+0x100/0x190 [ 116.373688][ T6178] should_fail_ex.cold+0x5/0xa [ 116.373728][ T6178] should_failslab+0xc2/0x120 [ 116.373764][ T6178] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 116.373812][ T6178] ? alloc_empty_file+0x5b/0x1c0 [ 116.373873][ T6178] alloc_empty_file+0x5b/0x1c0 [ 116.373920][ T6178] alloc_file_pseudo+0x13a/0x230 [ 116.373967][ T6178] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 116.374016][ T6178] ? hugetlbfs_get_inode+0x3f5/0x700 [ 116.374066][ T6178] hugetlb_file_setup+0x2a8/0x5b0 [ 116.374125][ T6178] ksys_mmap_pgoff+0x242/0x610 [ 116.374168][ T6178] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 116.374204][ T6178] ? xfd_validate_state+0x129/0x190 [ 116.374246][ T6178] __x64_sys_mmap+0x125/0x190 [ 116.374286][ T6178] do_syscall_64+0x10b/0xf80 [ 116.374322][ T6178] ? clear_bhb_loop+0x40/0x90 [ 116.374359][ T6178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.374391][ T6178] RIP: 0033:0x7ff6e019cdd9 [ 116.374418][ T6178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.374447][ T6178] RSP: 002b:00007ff6e0fda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 116.374480][ T6178] RAX: ffffffffffffffda RBX: 00007ff6e0415fa0 RCX: 00007ff6e019cdd9 [ 116.374500][ T6178] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 116.374518][ T6178] RBP: 00007ff6e0232d69 R08: 0000000000000401 R09: 0000300000000000 [ 116.374538][ T6178] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 116.374557][ T6178] R13: 00007ff6e0416038 R14: 00007ff6e0415fa0 R15: 00007ffd5aeaad28 [ 116.374598][ T6178] [ 117.331183][ T6192] sd 0:0:1:0: PR command failed: 1026 [ 117.331221][ T6192] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 117.331254][ T6192] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 120.602198][ T5626] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 120.611543][ T5626] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 120.614457][ T5626] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 120.627534][ T5626] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 120.628415][ T5626] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 120.882764][ T6225] FAULT_INJECTION: forcing a failure. [ 120.882764][ T6225] name failslab, interval 1, probability 0, space 0, times 0 [ 120.882801][ T6225] CPU: 1 UID: 0 PID: 6225 Comm: syz.1.100 Not tainted syzkaller #0 PREEMPT(full) [ 120.882823][ T6225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 120.882834][ T6225] Call Trace: [ 120.882840][ T6225] [ 120.882847][ T6225] dump_stack_lvl+0x100/0x190 [ 120.882871][ T6225] should_fail_ex.cold+0x5/0xa [ 120.882894][ T6225] should_failslab+0xc2/0x120 [ 120.882915][ T6225] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 120.882943][ T6225] ? ima_inode_get+0x11f/0x580 [ 120.882973][ T6225] ima_inode_get+0x11f/0x580 [ 120.883000][ T6225] process_measurement+0x1213/0x2350 [ 120.883030][ T6225] ? stack_depot_save_flags+0x27/0x9d0 [ 120.883049][ T6225] ? stack_trace_save+0x8e/0xc0 [ 120.883073][ T6225] ? __pfx_process_measurement+0x10/0x10 [ 120.883099][ T6225] ? __lock_acquire+0x4a5/0x2630 [ 120.883121][ T6225] ? __kasan_slab_alloc+0x89/0x90 [ 120.883138][ T6225] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 120.883165][ T6225] ? init_file+0x95/0x480 [ 120.883187][ T6225] ? alloc_empty_file+0x79/0x1c0 [ 120.883211][ T6225] ? alloc_file_pseudo+0x13a/0x230 [ 120.883236][ T6225] ? ksys_mmap_pgoff+0x242/0x610 [ 120.883255][ T6225] ? __x64_sys_mmap+0x125/0x190 [ 120.883273][ T6225] ? do_syscall_64+0x10b/0xf80 [ 120.883321][ T6225] ? __pfx_aa_file_perm+0x10/0x10 [ 120.883350][ T6225] ima_file_mmap+0x1c4/0x1f0 [ 120.883376][ T6225] ? __pfx_ima_file_mmap+0x10/0x10 [ 120.883408][ T6225] security_mmap_file+0x278/0x9b0 [ 120.883429][ T6225] vm_mmap_pgoff+0xec/0x470 [ 120.883454][ T6225] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 120.883475][ T6225] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 120.883502][ T6225] ? hugetlbfs_get_inode+0x3f5/0x700 [ 120.883536][ T6225] ksys_mmap_pgoff+0x285/0x610 [ 120.883559][ T6225] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 120.883580][ T6225] ? xfd_validate_state+0x129/0x190 [ 120.883603][ T6225] __x64_sys_mmap+0x125/0x190 [ 120.883624][ T6225] do_syscall_64+0x10b/0xf80 [ 120.883644][ T6225] ? clear_bhb_loop+0x40/0x90 [ 120.883665][ T6225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.883684][ T6225] RIP: 0033:0x7fe22f19cdd9 [ 120.883699][ T6225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.883716][ T6225] RSP: 002b:00007fe22ffc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 120.883733][ T6225] RAX: ffffffffffffffda RBX: 00007fe22f415fa0 RCX: 00007fe22f19cdd9 [ 120.883744][ T6225] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 120.883755][ T6225] RBP: 00007fe22f232d69 R08: 0000000000000401 R09: 0000300000000000 [ 120.883765][ T6225] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 120.883775][ T6225] R13: 00007fe22f416038 R14: 00007fe22f415fa0 R15: 00007ffdaab18028 [ 120.883798][ T6225] [ 122.182654][ T6242] sd 0:0:1:0: PR command failed: 1026 [ 122.182717][ T6242] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 122.182772][ T6242] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 122.635782][ T5623] Bluetooth: hci4: command tx timeout [ 123.571930][ T6221] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.598660][ T6221] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.613407][ T6221] bridge_slave_0: entered allmulticast mode [ 123.647566][ T6221] bridge_slave_0: entered promiscuous mode [ 123.672237][ T6221] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.704645][ T6221] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.734568][ T6221] bridge_slave_1: entered allmulticast mode [ 123.782154][ T6221] bridge_slave_1: entered promiscuous mode [ 124.028738][ T6221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.055048][ T6221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.180030][ T6221] team0: Port device team_slave_0 added [ 124.221453][ T6221] team0: Port device team_slave_1 added [ 124.508698][ T6266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.519372][ T6221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.540802][ T6221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.627308][ T6221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.678803][ T6266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.689627][ T6221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.718162][ T6221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.791567][ T6221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.035880][ T5623] Bluetooth: hci4: command tx timeout [ 125.037641][ T6221] hsr_slave_0: entered promiscuous mode [ 125.070858][ T6221] hsr_slave_1: entered promiscuous mode [ 125.098854][ T6221] debugfs: 'hsr0' already exists in 'hsr' [ 125.129873][ T6221] Cannot create hsr debugfs directory [ 125.688622][ T6275] FAULT_INJECTION: forcing a failure. [ 125.688622][ T6275] name failslab, interval 1, probability 0, space 0, times 0 [ 125.800719][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.865746][ T6275] CPU: 0 UID: 0 PID: 6275 Comm: syz.0.110 Not tainted syzkaller #0 PREEMPT(full) [ 125.865787][ T6275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 125.865805][ T6275] Call Trace: [ 125.865815][ T6275] [ 125.865827][ T6275] dump_stack_lvl+0x100/0x190 [ 125.865869][ T6275] should_fail_ex.cold+0x5/0xa [ 125.865910][ T6275] should_failslab+0xc2/0x120 [ 125.865958][ T6275] __kmalloc_cache_noprof+0x7a/0x6f0 [ 125.866002][ T6275] ? ima_calc_file_hash_tfm+0x236/0x350 [ 125.866051][ T6275] ? sha256_init+0xd/0xc0 [ 125.866090][ T6275] ima_calc_file_hash_tfm+0x236/0x350 [ 125.866139][ T6275] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10 [ 125.866232][ T6275] ? look_up_lock_class+0x55/0x120 [ 125.866273][ T6275] ? ima_alloc_tfm+0x21a/0x2e0 [ 125.866326][ T6275] ima_calc_file_hash+0x1e3/0x380 [ 125.866376][ T6275] ima_collect_measurement+0x94f/0xb30 [ 125.866435][ T6275] ? __pfx_ima_collect_measurement+0x10/0x10 [ 125.866509][ T6275] ? process_measurement+0x5ab/0x2350 [ 125.866556][ T6275] ? is_bad_inode+0xd/0x40 [ 125.866588][ T6275] ? xattr_resolve_name+0x27d/0x3f0 [ 125.866630][ T6275] ? vfs_getxattr_alloc+0xec/0x350 [ 125.866677][ T6275] ? ima_get_hash_algo+0x22d/0x400 [ 125.866718][ T6275] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 125.866767][ T6275] ? process_measurement+0xdfe/0x2350 [ 125.866808][ T6275] process_measurement+0xdfe/0x2350 [ 125.866863][ T6275] ? stack_trace_save+0x8e/0xc0 [ 125.866907][ T6275] ? __pfx_process_measurement+0x10/0x10 [ 125.866962][ T6275] ? __lock_acquire+0x4a5/0x2630 [ 125.866991][ T6275] ? __kasan_slab_alloc+0x89/0x90 [ 125.867022][ T6275] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 125.867072][ T6275] ? init_file+0x95/0x480 [ 125.867110][ T6275] ? alloc_empty_file+0x79/0x1c0 [ 125.867152][ T6275] ? alloc_file_pseudo+0x13a/0x230 [ 125.867194][ T6275] ? ksys_mmap_pgoff+0x242/0x610 [ 125.867228][ T6275] ? __x64_sys_mmap+0x125/0x190 [ 125.867260][ T6275] ? do_syscall_64+0x10b/0xf80 [ 125.867333][ T6275] ? __pfx_aa_file_perm+0x10/0x10 [ 125.867379][ T6275] ima_file_mmap+0x1c4/0x1f0 [ 125.867419][ T6275] ? __pfx_ima_file_mmap+0x10/0x10 [ 125.867468][ T6275] security_mmap_file+0x278/0x9b0 [ 125.867504][ T6275] vm_mmap_pgoff+0xec/0x470 [ 125.867546][ T6275] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 125.867583][ T6275] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 125.867630][ T6275] ? hugetlbfs_get_inode+0x3f5/0x700 [ 125.867688][ T6275] ksys_mmap_pgoff+0x285/0x610 [ 125.867731][ T6275] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 125.867768][ T6275] ? xfd_validate_state+0x129/0x190 [ 125.867809][ T6275] __x64_sys_mmap+0x125/0x190 [ 125.867848][ T6275] do_syscall_64+0x10b/0xf80 [ 125.867883][ T6275] ? clear_bhb_loop+0x40/0x90 [ 125.867920][ T6275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.867968][ T6275] RIP: 0033:0x7ff6e019cdd9 [ 125.867997][ T6275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.868027][ T6275] RSP: 002b:00007ff6e0fda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 125.868057][ T6275] RAX: ffffffffffffffda RBX: 00007ff6e0415fa0 RCX: 00007ff6e019cdd9 [ 125.868077][ T6275] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 125.868094][ T6275] RBP: 00007ff6e0232d69 R08: 0000000000000401 R09: 0000300000000000 [ 125.868112][ T6275] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 125.868130][ T6275] R13: 00007ff6e0416038 R14: 00007ff6e0415fa0 R15: 00007ffd5aeaad28 [ 125.868171][ T6275] [ 126.394471][ T29] audit: type=1800 audit(1843104539.060:3): pid=6275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.110" name="anon_hugepage" dev="hugetlbfs" ino=9026 res=0 errno=0 [ 126.886643][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.114230][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.115753][ T5623] Bluetooth: hci4: command tx timeout [ 127.447286][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.833329][ T6221] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 127.890667][ T6221] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 127.909023][ T6221] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 127.914208][ T6287] sd 0:0:1:0: PR command failed: 1026 [ 127.980669][ T6221] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 127.999676][ T6221] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 128.005831][ T6287] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 128.041559][ T6221] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 128.064551][ T6221] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 128.112009][ T6287] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 128.113397][ T6221] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 128.538842][ T6221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.610757][ T6221] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.649670][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.656915][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.722689][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.729970][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.196254][ T5623] Bluetooth: hci4: command tx timeout [ 130.176154][ T6221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.015446][ T6221] veth0_vlan: entered promiscuous mode [ 131.074355][ T6221] veth1_vlan: entered promiscuous mode [ 131.248280][ T6221] veth0_macvtap: entered promiscuous mode [ 131.388684][ T6221] veth1_macvtap: entered promiscuous mode [ 131.517480][ T6221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.565317][ T6221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.651416][ T56] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.684064][ T56] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.717431][ T56] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.734439][ T56] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.068533][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.102117][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.214042][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.234546][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.642974][ T6336] FAULT_INJECTION: forcing a failure. [ 132.642974][ T6336] name failslab, interval 1, probability 0, space 0, times 0 [ 132.732353][ T6336] CPU: 0 UID: 0 PID: 6336 Comm: syz.1.122 Not tainted syzkaller #0 PREEMPT(full) [ 132.732394][ T6336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 132.732411][ T6336] Call Trace: [ 132.732421][ T6336] [ 132.732432][ T6336] dump_stack_lvl+0x100/0x190 [ 132.732469][ T6336] should_fail_ex.cold+0x5/0xa [ 132.732506][ T6336] should_failslab+0xc2/0x120 [ 132.732540][ T6336] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 132.732585][ T6336] ? ima_inode_get+0x11f/0x580 [ 132.732630][ T6336] ima_inode_get+0x11f/0x580 [ 132.732675][ T6336] process_measurement+0x1213/0x2350 [ 132.732726][ T6336] ? stack_depot_save_flags+0x27/0x9d0 [ 132.732758][ T6336] ? stack_trace_save+0x8e/0xc0 [ 132.732797][ T6336] ? __pfx_process_measurement+0x10/0x10 [ 132.732840][ T6336] ? __lock_acquire+0x4a5/0x2630 [ 132.732872][ T6336] ? __kasan_slab_alloc+0x89/0x90 [ 132.732901][ T6336] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 132.732955][ T6336] ? init_file+0x95/0x480 [ 132.732994][ T6336] ? alloc_empty_file+0x79/0x1c0 [ 132.733033][ T6336] ? alloc_file_pseudo+0x13a/0x230 [ 132.733076][ T6336] ? ksys_mmap_pgoff+0x242/0x610 [ 132.733109][ T6336] ? __x64_sys_mmap+0x125/0x190 [ 132.733140][ T6336] ? do_syscall_64+0x10b/0xf80 [ 132.733213][ T6336] ? __pfx_aa_file_perm+0x10/0x10 [ 132.733265][ T6336] ima_file_mmap+0x1c4/0x1f0 [ 132.733311][ T6336] ? __pfx_ima_file_mmap+0x10/0x10 [ 132.733366][ T6336] security_mmap_file+0x278/0x9b0 [ 132.733402][ T6336] vm_mmap_pgoff+0xec/0x470 [ 132.733447][ T6336] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 132.733480][ T6336] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 132.733521][ T6336] ? hugetlbfs_get_inode+0x3f5/0x700 [ 132.733571][ T6336] ksys_mmap_pgoff+0x285/0x610 [ 132.733615][ T6336] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 132.733646][ T6336] ? xfd_validate_state+0x129/0x190 [ 132.733685][ T6336] __x64_sys_mmap+0x125/0x190 [ 132.733721][ T6336] do_syscall_64+0x10b/0xf80 [ 132.733756][ T6336] ? clear_bhb_loop+0x40/0x90 [ 132.733793][ T6336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.733825][ T6336] RIP: 0033:0x7fe22f19cdd9 [ 132.733853][ T6336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.733881][ T6336] RSP: 002b:00007fe22ffc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 132.733911][ T6336] RAX: ffffffffffffffda RBX: 00007fe22f415fa0 RCX: 00007fe22f19cdd9 [ 132.733939][ T6336] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 132.733958][ T6336] RBP: 00007fe22f232d69 R08: 0000000000000401 R09: 0000300000000000 [ 132.733977][ T6336] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 132.733994][ T6336] R13: 00007fe22f416038 R14: 00007fe22f415fa0 R15: 00007ffdaab18028 [ 132.734034][ T6336] [ 133.146963][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.197549][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.970522][ T6351] sd 0:0:1:0: PR command failed: 1026 [ 134.015551][ T6351] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 134.092091][ T6351] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 134.931819][ T6368] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 135.302153][ T6373] FAULT_INJECTION: forcing a failure. [ 135.302153][ T6373] name failslab, interval 1, probability 0, space 0, times 0 [ 135.438734][ T6373] CPU: 0 UID: 0 PID: 6373 Comm: syz.0.134 Not tainted syzkaller #0 PREEMPT(full) [ 135.438777][ T6373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 135.438793][ T6373] Call Trace: [ 135.438803][ T6373] [ 135.438814][ T6373] dump_stack_lvl+0x100/0x190 [ 135.438855][ T6373] should_fail_ex.cold+0x5/0xa [ 135.438893][ T6373] should_failslab+0xc2/0x120 [ 135.438927][ T6373] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 135.438974][ T6373] ? ima_inode_get+0x11f/0x580 [ 135.439022][ T6373] ima_inode_get+0x11f/0x580 [ 135.439066][ T6373] process_measurement+0x1213/0x2350 [ 135.439117][ T6373] ? stack_depot_save_flags+0x27/0x9d0 [ 135.439148][ T6373] ? stack_trace_save+0x8e/0xc0 [ 135.439196][ T6373] ? __pfx_process_measurement+0x10/0x10 [ 135.439240][ T6373] ? __lock_acquire+0x4a5/0x2630 [ 135.439266][ T6373] ? __kasan_slab_alloc+0x89/0x90 [ 135.439295][ T6373] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 135.439341][ T6373] ? init_file+0x95/0x480 [ 135.439377][ T6373] ? alloc_empty_file+0x79/0x1c0 [ 135.439414][ T6373] ? alloc_file_pseudo+0x13a/0x230 [ 135.439455][ T6373] ? ksys_mmap_pgoff+0x242/0x610 [ 135.439488][ T6373] ? __x64_sys_mmap+0x125/0x190 [ 135.439519][ T6373] ? do_syscall_64+0x10b/0xf80 [ 135.439591][ T6373] ? __pfx_aa_file_perm+0x10/0x10 [ 135.439638][ T6373] ima_file_mmap+0x1c4/0x1f0 [ 135.439682][ T6373] ? __pfx_ima_file_mmap+0x10/0x10 [ 135.439734][ T6373] security_mmap_file+0x278/0x9b0 [ 135.439769][ T6373] vm_mmap_pgoff+0xec/0x470 [ 135.439811][ T6373] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 135.439845][ T6373] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 135.439889][ T6373] ? hugetlbfs_get_inode+0x3f5/0x700 [ 135.439942][ T6373] ksys_mmap_pgoff+0x285/0x610 [ 135.439981][ T6373] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 135.440016][ T6373] ? xfd_validate_state+0x129/0x190 [ 135.440056][ T6373] __x64_sys_mmap+0x125/0x190 [ 135.440092][ T6373] do_syscall_64+0x10b/0xf80 [ 135.440131][ T6373] ? clear_bhb_loop+0x40/0x90 [ 135.440173][ T6373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.440203][ T6373] RIP: 0033:0x7ff6e019cdd9 [ 135.440229][ T6373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.440257][ T6373] RSP: 002b:00007ff6e0fda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 135.440286][ T6373] RAX: ffffffffffffffda RBX: 00007ff6e0415fa0 RCX: 00007ff6e019cdd9 [ 135.440304][ T6373] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 135.440322][ T6373] RBP: 00007ff6e0232d69 R08: 0000000000000401 R09: 0000300000000000 [ 135.440338][ T6373] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 135.440356][ T6373] R13: 00007ff6e0416038 R14: 00007ff6e0415fa0 R15: 00007ffd5aeaad28 [ 135.440395][ T6373] [ 137.035093][ T6390] sd 0:0:1:0: PR command failed: 1026 [ 137.053004][ T6390] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 137.081951][ T6390] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 138.809196][ T6403] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 138.841807][ T6403] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 138.974806][ T6403] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 139.121413][ T6403] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 139.148654][ T6403] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 139.224286][ T6403] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 139.320163][ T6403] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 139.367549][ T6403] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 139.442867][ T6403] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 139.510407][ T6403] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 139.586316][ T6403] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 139.613159][ T6403] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 139.682023][ T6403] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 140.395947][ T5623] Bluetooth: hci0: command 0x0c1a tx timeout [ 140.465982][ T6420] FAULT_INJECTION: forcing a failure. [ 140.465982][ T6420] name failslab, interval 1, probability 0, space 0, times 0 [ 140.524182][ T6420] CPU: 0 UID: 0 PID: 6420 Comm: syz.1.147 Not tainted syzkaller #0 PREEMPT(full) [ 140.524223][ T6420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 140.524241][ T6420] Call Trace: [ 140.524251][ T6420] [ 140.524263][ T6420] dump_stack_lvl+0x100/0x190 [ 140.524304][ T6420] should_fail_ex.cold+0x5/0xa [ 140.524344][ T6420] should_failslab+0xc2/0x120 [ 140.524382][ T6420] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 140.524431][ T6420] ? ima_inode_get+0x11f/0x580 [ 140.524484][ T6420] ima_inode_get+0x11f/0x580 [ 140.524532][ T6420] process_measurement+0x1213/0x2350 [ 140.524587][ T6420] ? stack_depot_save_flags+0x27/0x9d0 [ 140.524622][ T6420] ? stack_trace_save+0x8e/0xc0 [ 140.524665][ T6420] ? __pfx_process_measurement+0x10/0x10 [ 140.524712][ T6420] ? __lock_acquire+0x4a5/0x2630 [ 140.524742][ T6420] ? __kasan_slab_alloc+0x89/0x90 [ 140.524773][ T6420] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 140.524818][ T6420] ? init_file+0x95/0x480 [ 140.524856][ T6420] ? alloc_empty_file+0x79/0x1c0 [ 140.524897][ T6420] ? alloc_file_pseudo+0x13a/0x230 [ 140.524941][ T6420] ? ksys_mmap_pgoff+0x242/0x610 [ 140.524975][ T6420] ? __x64_sys_mmap+0x125/0x190 [ 140.525006][ T6420] ? do_syscall_64+0x10b/0xf80 [ 140.525094][ T6420] ? __pfx_aa_file_perm+0x10/0x10 [ 140.525145][ T6420] ima_file_mmap+0x1c4/0x1f0 [ 140.525192][ T6420] ? __pfx_ima_file_mmap+0x10/0x10 [ 140.525249][ T6420] security_mmap_file+0x278/0x9b0 [ 140.525287][ T6420] vm_mmap_pgoff+0xec/0x470 [ 140.525331][ T6420] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 140.525367][ T6420] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 140.525420][ T6420] ? hugetlbfs_get_inode+0x3f5/0x700 [ 140.525477][ T6420] ksys_mmap_pgoff+0x285/0x610 [ 140.525520][ T6420] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 140.525557][ T6420] ? xfd_validate_state+0x129/0x190 [ 140.525596][ T6420] __x64_sys_mmap+0x125/0x190 [ 140.525631][ T6420] do_syscall_64+0x10b/0xf80 [ 140.525663][ T6420] ? clear_bhb_loop+0x40/0x90 [ 140.525699][ T6420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.525729][ T6420] RIP: 0033:0x7fe22f19cdd9 [ 140.525756][ T6420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.525783][ T6420] RSP: 002b:00007fe22ffc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 140.525813][ T6420] RAX: ffffffffffffffda RBX: 00007fe22f415fa0 RCX: 00007fe22f19cdd9 [ 140.525832][ T6420] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 140.525850][ T6420] RBP: 00007fe22f232d69 R08: 0000000000000401 R09: 0000300000000000 [ 140.525868][ T6420] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 140.525885][ T6420] R13: 00007fe22f416038 R14: 00007fe22f415fa0 R15: 00007ffdaab18028 [ 140.525926][ T6420] [ 141.196518][ T5626] Bluetooth: hci3: command 0x0c1a tx timeout [ 141.217063][ T5626] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 141.233714][ T5626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 141.241961][ T5626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 141.255900][ T5626] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 141.269230][ T5626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 141.355859][ T5626] Bluetooth: hci1: command 0x0c1a tx timeout [ 141.416972][ T6432] netlink: 16 bytes leftover after parsing attributes in process `syz.4.151'. [ 141.595774][ T5626] Bluetooth: hci4: command 0x0c1a tx timeout [ 142.476080][ T5626] Bluetooth: hci0: command 0x0c1a tx timeout [ 143.275924][ T5626] Bluetooth: hci3: command 0x0c1a tx timeout [ 143.362095][ T5626] Bluetooth: hci2: command tx timeout [ 143.445737][ T5623] Bluetooth: hci1: command 0x0c1a tx timeout [ 143.675758][ T5623] Bluetooth: hci4: command 0x0c1a tx timeout [ 143.831071][ T6425] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.860356][ T6425] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.893150][ T6425] bridge_slave_0: entered allmulticast mode [ 143.915460][ T6425] bridge_slave_0: entered promiscuous mode [ 143.938270][ T6425] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.957442][ T6425] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.975983][ T6425] bridge_slave_1: entered allmulticast mode [ 143.986648][ T6425] bridge_slave_1: entered promiscuous mode [ 144.078190][ T6425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.103757][ T6425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.215501][ T6425] team0: Port device team_slave_0 added [ 144.243557][ T6425] team0: Port device team_slave_1 added [ 144.348550][ T6425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.368758][ T6425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.421668][ T6425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.451048][ T6425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.480915][ T6425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.537390][ T6425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.558063][ T5623] Bluetooth: hci0: command 0x0c1a tx timeout [ 144.659885][ T6425] hsr_slave_0: entered promiscuous mode [ 144.669291][ T6425] hsr_slave_1: entered promiscuous mode [ 144.676579][ T6425] debugfs: 'hsr0' already exists in 'hsr' [ 144.683453][ T6425] Cannot create hsr debugfs directory [ 145.010879][ T6480] FAULT_INJECTION: forcing a failure. [ 145.010879][ T6480] name failslab, interval 1, probability 0, space 0, times 0 [ 145.059047][ T6480] CPU: 0 UID: 0 PID: 6480 Comm: syz.4.159 Not tainted syzkaller #0 PREEMPT(full) [ 145.059089][ T6480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 145.059107][ T6480] Call Trace: [ 145.059117][ T6480] [ 145.059129][ T6480] dump_stack_lvl+0x100/0x190 [ 145.059167][ T6480] should_fail_ex.cold+0x5/0xa [ 145.059206][ T6480] should_failslab+0xc2/0x120 [ 145.059241][ T6480] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 145.059287][ T6480] ? alloc_empty_file+0x5b/0x1c0 [ 145.059338][ T6480] alloc_empty_file+0x5b/0x1c0 [ 145.059382][ T6480] alloc_file_pseudo+0x13a/0x230 [ 145.059428][ T6480] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 145.059473][ T6480] ? hugetlbfs_get_inode+0x3f5/0x700 [ 145.059520][ T6480] hugetlb_file_setup+0x2a8/0x5b0 [ 145.059567][ T6480] ksys_mmap_pgoff+0x242/0x610 [ 145.059607][ T6480] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 145.059642][ T6480] ? __pfx___x64_sys_futex+0x10/0x10 [ 145.059674][ T6480] ? __pfx_do_writev+0x10/0x10 [ 145.059705][ T6480] __x64_sys_mmap+0x125/0x190 [ 145.059749][ T6480] do_syscall_64+0x10b/0xf80 [ 145.059788][ T6480] ? clear_bhb_loop+0x40/0x90 [ 145.059823][ T6480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.059853][ T6480] RIP: 0033:0x7f624b59cdd9 [ 145.059878][ T6480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.059906][ T6480] RSP: 002b:00007f624c4f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 145.059936][ T6480] RAX: ffffffffffffffda RBX: 00007f624b815fa0 RCX: 00007f624b59cdd9 [ 145.059956][ T6480] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 145.059973][ T6480] RBP: 00007f624b632d69 R08: 0000000000000401 R09: 0000300000000000 [ 145.059991][ T6480] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 145.060007][ T6480] R13: 00007f624b816038 R14: 00007f624b815fa0 R15: 00007ffc9e3254b8 [ 145.060047][ T6480] [ 145.355951][ T5623] Bluetooth: hci3: command 0x0c1a tx timeout [ 145.445811][ T5623] Bluetooth: hci2: command tx timeout [ 145.524591][ T5623] Bluetooth: hci1: command 0x0c1a tx timeout [ 145.755916][ T5623] Bluetooth: hci4: command 0x0c1a tx timeout [ 146.072979][ T6425] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 146.128589][ T6425] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 146.153427][ T6425] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 146.212180][ T6425] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 146.237517][ T6425] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 146.321398][ T6425] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 146.338110][ T6425] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 146.380884][ T6425] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 146.592637][ T5623] Bluetooth: hci3: unexpected event 0x31 length: 19 > 6 [ 146.686457][ T6425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.777313][ T6425] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.817103][ T3375] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.824361][ T3375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.880138][ T1022] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.887445][ T1022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.515884][ T5623] Bluetooth: hci2: command tx timeout [ 147.597210][ T5623] Bluetooth: hci1: command 0x0c1a tx timeout [ 147.634776][ T6513] block2mtd: error: cannot open device çinX‘©¼Ëò¨±ÂÚjFBçB>U»;߸³Ilk¬ [ 148.324982][ T6425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.514386][ T6528] FAULT_INJECTION: forcing a failure. [ 148.514386][ T6528] name failslab, interval 1, probability 0, space 0, times 0 [ 148.618230][ T6528] CPU: 0 UID: 0 PID: 6528 Comm: syz.4.169 Not tainted syzkaller #0 PREEMPT(full) [ 148.618273][ T6528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 148.618292][ T6528] Call Trace: [ 148.618303][ T6528] [ 148.618316][ T6528] dump_stack_lvl+0x100/0x190 [ 148.618356][ T6528] should_fail_ex.cold+0x5/0xa [ 148.618397][ T6528] should_failslab+0xc2/0x120 [ 148.618432][ T6528] __kmalloc_cache_noprof+0x7a/0x6f0 [ 148.618473][ T6528] ? ima_calc_file_hash_tfm+0x236/0x350 [ 148.618521][ T6528] ? sha256_init+0xd/0xc0 [ 148.618551][ T6528] ima_calc_file_hash_tfm+0x236/0x350 [ 148.618596][ T6528] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10 [ 148.618686][ T6528] ? look_up_lock_class+0x55/0x120 [ 148.618729][ T6528] ? ima_alloc_tfm+0x21a/0x2e0 [ 148.618779][ T6528] ima_calc_file_hash+0x1e3/0x380 [ 148.618830][ T6528] ima_collect_measurement+0x94f/0xb30 [ 148.618890][ T6528] ? __pfx_ima_collect_measurement+0x10/0x10 [ 148.618966][ T6528] ? process_measurement+0x5ab/0x2350 [ 148.619023][ T6528] ? is_bad_inode+0xd/0x40 [ 148.619053][ T6528] ? xattr_resolve_name+0x27d/0x3f0 [ 148.619096][ T6528] ? vfs_getxattr_alloc+0xec/0x350 [ 148.619144][ T6528] ? ima_get_hash_algo+0x22d/0x400 [ 148.619184][ T6528] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 148.619234][ T6528] ? process_measurement+0xdfe/0x2350 [ 148.619277][ T6528] process_measurement+0xdfe/0x2350 [ 148.619319][ T6528] ? stack_trace_save+0x8e/0xc0 [ 148.619352][ T6528] ? __pfx_process_measurement+0x10/0x10 [ 148.619386][ T6528] ? __lock_acquire+0x4a5/0x2630 [ 148.619407][ T6528] ? __kasan_slab_alloc+0x89/0x90 [ 148.619430][ T6528] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 148.619466][ T6528] ? init_file+0x95/0x480 [ 148.619495][ T6528] ? alloc_empty_file+0x79/0x1c0 [ 148.619525][ T6528] ? alloc_file_pseudo+0x13a/0x230 [ 148.619557][ T6528] ? ksys_mmap_pgoff+0x242/0x610 [ 148.619588][ T6528] ? __x64_sys_mmap+0x125/0x190 [ 148.619612][ T6528] ? do_syscall_64+0x10b/0xf80 [ 148.619668][ T6528] ? __pfx_aa_file_perm+0x10/0x10 [ 148.619706][ T6528] ima_file_mmap+0x1c4/0x1f0 [ 148.619742][ T6528] ? __pfx_ima_file_mmap+0x10/0x10 [ 148.619783][ T6528] security_mmap_file+0x278/0x9b0 [ 148.619811][ T6528] vm_mmap_pgoff+0xec/0x470 [ 148.619843][ T6528] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 148.619870][ T6528] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 148.619904][ T6528] ? hugetlbfs_get_inode+0x3f5/0x700 [ 148.619948][ T6528] ksys_mmap_pgoff+0x285/0x610 [ 148.619979][ T6528] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 148.620013][ T6528] ? xfd_validate_state+0x129/0x190 [ 148.620043][ T6528] __x64_sys_mmap+0x125/0x190 [ 148.620072][ T6528] do_syscall_64+0x10b/0xf80 [ 148.620099][ T6528] ? clear_bhb_loop+0x40/0x90 [ 148.620131][ T6528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.620154][ T6528] RIP: 0033:0x7f624b59cdd9 [ 148.620175][ T6528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.620197][ T6528] RSP: 002b:00007f624c4f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 148.620222][ T6528] RAX: ffffffffffffffda RBX: 00007f624b815fa0 RCX: 00007f624b59cdd9 [ 148.620237][ T6528] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 148.620250][ T6528] RBP: 00007f624b632d69 R08: 0000000000000401 R09: 0000300000000000 [ 148.620264][ T6528] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 148.620278][ T6528] R13: 00007f624b816038 R14: 00007f624b815fa0 R15: 00007ffc9e3254b8 [ 148.620309][ T6528] [ 149.004281][ T29] audit: type=1800 audit(1843104561.670:4): pid=6528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.169" name="anon_hugepage" dev="hugetlbfs" ino=11834 res=0 errno=0 [ 149.607854][ T5623] Bluetooth: hci2: command tx timeout [ 149.675332][ T6425] veth0_vlan: entered promiscuous mode [ 149.727308][ T6425] veth1_vlan: entered promiscuous mode [ 149.840705][ T6425] veth0_macvtap: entered promiscuous mode [ 149.885536][ T6425] veth1_macvtap: entered promiscuous mode [ 149.943830][ T6425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.988921][ T6425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.033761][ T56] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.059059][ T29] audit: type=1804 audit(1843104562.720:5): pid=6539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.167" name="/newroot/51/file0" dev="tmpfs" ino=288 res=1 errno=0 [ 150.082960][ T1022] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.110984][ T1022] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.123114][ T29] audit: type=1804 audit(1843104562.770:6): pid=6543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.167" name="/newroot/51/file0" dev="tmpfs" ino=288 res=1 errno=0 [ 150.163150][ T1022] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.415058][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.456805][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.559357][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.593831][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.924442][ T6560] sd 0:0:1:0: PR command failed: 1026 [ 150.950018][ T6560] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 150.975908][ T6560] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 152.010089][ T6575] binder: 6574:6575 ioctl 400c620e 2000000003c0 returned -22 [ 153.040017][ T6592] FAULT_INJECTION: forcing a failure. [ 153.040017][ T6592] name failslab, interval 1, probability 0, space 0, times 0 [ 153.140475][ T6592] CPU: 0 UID: 0 PID: 6592 Comm: syz.0.181 Not tainted syzkaller #0 PREEMPT(full) [ 153.140518][ T6592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 153.140536][ T6592] Call Trace: [ 153.140547][ T6592] [ 153.140558][ T6592] dump_stack_lvl+0x100/0x190 [ 153.140598][ T6592] should_fail_ex.cold+0x5/0xa [ 153.140640][ T6592] should_failslab+0xc2/0x120 [ 153.140685][ T6592] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 153.140729][ T6592] ? ima_inode_get+0x11f/0x580 [ 153.140780][ T6592] ima_inode_get+0x11f/0x580 [ 153.140824][ T6592] process_measurement+0x1213/0x2350 [ 153.140877][ T6592] ? stack_depot_save_flags+0x27/0x9d0 [ 153.140908][ T6592] ? stack_trace_save+0x8e/0xc0 [ 153.140948][ T6592] ? __pfx_process_measurement+0x10/0x10 [ 153.140992][ T6592] ? __lock_acquire+0x4a5/0x2630 [ 153.141021][ T6592] ? __kasan_slab_alloc+0x89/0x90 [ 153.141049][ T6592] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 153.141095][ T6592] ? init_file+0x95/0x480 [ 153.141134][ T6592] ? alloc_empty_file+0x79/0x1c0 [ 153.141175][ T6592] ? alloc_file_pseudo+0x13a/0x230 [ 153.141217][ T6592] ? ksys_mmap_pgoff+0x242/0x610 [ 153.141250][ T6592] ? __x64_sys_mmap+0x125/0x190 [ 153.141279][ T6592] ? do_syscall_64+0x10b/0xf80 [ 153.141359][ T6592] ? __pfx_aa_file_perm+0x10/0x10 [ 153.141406][ T6592] ima_file_mmap+0x1c4/0x1f0 [ 153.141448][ T6592] ? __pfx_ima_file_mmap+0x10/0x10 [ 153.141499][ T6592] security_mmap_file+0x278/0x9b0 [ 153.141534][ T6592] vm_mmap_pgoff+0xec/0x470 [ 153.141576][ T6592] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 153.141611][ T6592] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 153.141660][ T6592] ? hugetlbfs_get_inode+0x3f5/0x700 [ 153.141710][ T6592] ksys_mmap_pgoff+0x285/0x610 [ 153.141750][ T6592] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 153.141783][ T6592] ? xfd_validate_state+0x129/0x190 [ 153.141822][ T6592] __x64_sys_mmap+0x125/0x190 [ 153.141861][ T6592] do_syscall_64+0x10b/0xf80 [ 153.141896][ T6592] ? clear_bhb_loop+0x40/0x90 [ 153.141933][ T6592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.141966][ T6592] RIP: 0033:0x7ff6e019cdd9 [ 153.141992][ T6592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.142021][ T6592] RSP: 002b:00007ff6e0fda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 153.142051][ T6592] RAX: ffffffffffffffda RBX: 00007ff6e0415fa0 RCX: 00007ff6e019cdd9 [ 153.142071][ T6592] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 153.142088][ T6592] RBP: 00007ff6e0232d69 R08: 0000000000000401 R09: 0000300000000000 [ 153.142107][ T6592] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 153.142125][ T6592] R13: 00007ff6e0416038 R14: 00007ff6e0415fa0 R15: 00007ffd5aeaad28 [ 153.142166][ T6592] [ 156.201599][ T6642] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 158.693487][ T6671] sd 0:0:1:0: PR command failed: 1026 [ 158.731044][ T6671] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 158.773163][ T6671] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 160.425898][ T6330] syz.0.121 (6330) used greatest stack depth: 17824 bytes left [ 161.045834][ T6700] sd 0:0:1:0: PR command failed: 1026 [ 161.064354][ T6700] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 161.081261][ T6700] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 163.519275][ T6722] random: crng reseeded on system resumption [ 164.127215][ T6738] sd 0:0:1:0: PR command failed: 1026 [ 164.195114][ T6738] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 164.253556][ T6738] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 164.434302][ T6743] netlink: 'syz.4.216': attribute type 64 has an invalid length. [ 164.520912][ T6743] netlink: 74 bytes leftover after parsing attributes in process `syz.4.216'. [ 164.617191][ T6743] netlink: 'syz.4.216': attribute type 64 has an invalid length. [ 164.665810][ T6743] netlink: 74 bytes leftover after parsing attributes in process `syz.4.216'. [ 164.838430][ T6750] FAULT_INJECTION: forcing a failure. [ 164.838430][ T6750] name failslab, interval 1, probability 0, space 0, times 0 [ 164.903863][ T6750] CPU: 1 UID: 0 PID: 6750 Comm: syz.5.217 Not tainted syzkaller #0 PREEMPT(full) [ 164.903901][ T6750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 164.903916][ T6750] Call Trace: [ 164.903925][ T6750] [ 164.903935][ T6750] dump_stack_lvl+0x100/0x190 [ 164.903972][ T6750] should_fail_ex.cold+0x5/0xa [ 164.904007][ T6750] ? do_sys_poll+0x273/0xe90 [ 164.904037][ T6750] should_failslab+0xc2/0x120 [ 164.904071][ T6750] __kmalloc_noprof+0xe0/0x850 [ 164.904125][ T6750] do_sys_poll+0x273/0xe90 [ 164.904156][ T6750] ? bpf_ksym_find+0x124/0x1c0 [ 164.904188][ T6750] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 164.904231][ T6750] ? is_bpf_text_address+0x94/0x1a0 [ 164.904275][ T6750] ? __pfx_do_sys_poll+0x10/0x10 [ 164.904307][ T6750] ? arch_stack_walk+0xa6/0xf0 [ 164.904445][ T6750] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 164.904482][ T6750] ? kernel_write+0x5f3/0x6c0 [ 164.904514][ T6750] ? __fget_files+0x215/0x3d0 [ 164.904555][ T6750] ? set_user_sigmask+0x1e1/0x270 [ 164.904588][ T6750] ? __pfx_set_user_sigmask+0x10/0x10 [ 164.904632][ T6750] __x64_sys_ppoll+0x2b5/0x350 [ 164.904671][ T6750] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 164.904703][ T6750] ? ksys_write+0x1ac/0x250 [ 164.904735][ T6750] ? __pfx_ksys_write+0x10/0x10 [ 164.904771][ T6750] ? rcu_is_watching+0x12/0xc0 [ 164.904811][ T6750] do_syscall_64+0x10b/0xf80 [ 164.904844][ T6750] ? clear_bhb_loop+0x40/0x90 [ 164.904886][ T6750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.904916][ T6750] RIP: 0033:0x7fdd0199cdd9 [ 164.904941][ T6750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.904968][ T6750] RSP: 002b:00007fdcffbd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 164.904996][ T6750] RAX: ffffffffffffffda RBX: 00007fdd01c16090 RCX: 00007fdd0199cdd9 [ 164.905015][ T6750] RDX: 0000000000000000 RSI: 0000000000000069 RDI: 0000000000000000 [ 164.905031][ T6750] RBP: 00007fdcffbd5090 R08: 0000000000000008 R09: 0000000000000000 [ 164.905048][ T6750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.905065][ T6750] R13: 00007fdd01c16128 R14: 00007fdd01c16090 R15: 00007ffcc073b4c8 [ 164.905103][ T6750] [ 167.518906][ T6779] zswap: compressor Zºu¾å~“ÍÎ^´§8·¯î”¯a®Þcu0ÙóÏ|” ,a’âú¢RrðqP“þø˜¸÷'¹À)Œ¤Þ±`Ù*ë]¿­T]èXãžé؃(Û‚ŽTN>Ñ_áËr$º“º¾¾ñzúÙ&[+x[DPx¥e?–ôm¢µ3QÂz not available [ 168.372794][ T6788] sd 0:0:1:0: PR command failed: 1026 [ 168.378615][ T6788] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 168.385503][ T6788] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 168.821388][ T6793] FAULT_INJECTION: forcing a failure. [ 168.821388][ T6793] name failslab, interval 1, probability 0, space 0, times 0 [ 168.979436][ T6793] CPU: 0 UID: 0 PID: 6793 Comm: syz.5.228 Not tainted syzkaller #0 PREEMPT(full) [ 168.979467][ T6793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 168.979478][ T6793] Call Trace: [ 168.979484][ T6793] [ 168.979492][ T6793] dump_stack_lvl+0x100/0x190 [ 168.979516][ T6793] should_fail_ex.cold+0x5/0xa [ 168.979541][ T6793] should_failslab+0xc2/0x120 [ 168.979563][ T6793] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 168.979592][ T6793] ? security_file_alloc+0x34/0x2c0 [ 168.979612][ T6793] ? trace_kmem_cache_alloc+0xd5/0x100 [ 168.979637][ T6793] security_file_alloc+0x34/0x2c0 [ 168.979657][ T6793] init_file+0x95/0x480 [ 168.979682][ T6793] alloc_empty_file+0x79/0x1c0 [ 168.979716][ T6793] alloc_file_pseudo+0x13a/0x230 [ 168.979750][ T6793] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 168.979777][ T6793] ? hugetlbfs_get_inode+0x3f5/0x700 [ 168.979806][ T6793] hugetlb_file_setup+0x2a8/0x5b0 [ 168.979834][ T6793] ksys_mmap_pgoff+0x242/0x610 [ 168.979859][ T6793] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 168.979881][ T6793] ? xfd_validate_state+0x129/0x190 [ 168.979903][ T6793] __x64_sys_mmap+0x125/0x190 [ 168.979931][ T6793] do_syscall_64+0x10b/0xf80 [ 168.979952][ T6793] ? clear_bhb_loop+0x40/0x90 [ 168.979974][ T6793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.979993][ T6793] RIP: 0033:0x7fdd0199cdd9 [ 168.980009][ T6793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.980026][ T6793] RSP: 002b:00007fdcffbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 168.980044][ T6793] RAX: ffffffffffffffda RBX: 00007fdd01c15fa0 RCX: 00007fdd0199cdd9 [ 168.980056][ T6793] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 168.980067][ T6793] RBP: 00007fdd01a32d69 R08: 0000000000000401 R09: 0000300000000000 [ 168.980077][ T6793] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 168.980087][ T6793] R13: 00007fdd01c16038 R14: 00007fdd01c15fa0 R15: 00007ffcc073b4c8 [ 168.980109][ T6793] [ 172.005840][ T6830] sd 0:0:1:0: PR command failed: 1026 [ 172.037343][ T6830] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 172.096304][ T6830] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 172.253549][ T6826] batadv_slave_1: entered promiscuous mode [ 172.700067][ T6825] batadv_slave_1: left promiscuous mode [ 173.883647][ T6853] netlink: 'syz.4.243': attribute type 64 has an invalid length. [ 173.942891][ T6853] netlink: 74 bytes leftover after parsing attributes in process `syz.4.243'. [ 173.990720][ T6853] netlink: 'syz.4.243': attribute type 64 has an invalid length. [ 174.023552][ T6853] netlink: 74 bytes leftover after parsing attributes in process `syz.4.243'. [ 174.330375][ T6861] FAULT_INJECTION: forcing a failure. [ 174.330375][ T6861] name failslab, interval 1, probability 0, space 0, times 0 [ 174.413664][ T6861] CPU: 0 UID: 0 PID: 6861 Comm: syz.4.246 Not tainted syzkaller #0 PREEMPT(full) [ 174.413705][ T6861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 174.413722][ T6861] Call Trace: [ 174.413733][ T6861] [ 174.413746][ T6861] dump_stack_lvl+0x100/0x190 [ 174.413793][ T6861] should_fail_ex.cold+0x5/0xa [ 174.413833][ T6861] should_failslab+0xc2/0x120 [ 174.413869][ T6861] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 174.413917][ T6861] ? ima_inode_get+0x11f/0x580 [ 174.413965][ T6861] ima_inode_get+0x11f/0x580 [ 174.414011][ T6861] process_measurement+0x1213/0x2350 [ 174.414064][ T6861] ? stack_depot_save_flags+0x27/0x9d0 [ 174.414095][ T6861] ? stack_trace_save+0x8e/0xc0 [ 174.414134][ T6861] ? __pfx_process_measurement+0x10/0x10 [ 174.414178][ T6861] ? __lock_acquire+0x4a5/0x2630 [ 174.414204][ T6861] ? __kasan_slab_alloc+0x89/0x90 [ 174.414234][ T6861] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 174.414298][ T6861] ? init_file+0x95/0x480 [ 174.414336][ T6861] ? alloc_empty_file+0x79/0x1c0 [ 174.414375][ T6861] ? alloc_file_pseudo+0x13a/0x230 [ 174.414418][ T6861] ? ksys_mmap_pgoff+0x242/0x610 [ 174.414459][ T6861] ? __x64_sys_mmap+0x125/0x190 [ 174.414490][ T6861] ? do_syscall_64+0x10b/0xf80 [ 174.414566][ T6861] ? __pfx_aa_file_perm+0x10/0x10 [ 174.414615][ T6861] ima_file_mmap+0x1c4/0x1f0 [ 174.414661][ T6861] ? __pfx_ima_file_mmap+0x10/0x10 [ 174.414713][ T6861] security_mmap_file+0x278/0x9b0 [ 174.414749][ T6861] vm_mmap_pgoff+0xec/0x470 [ 174.414793][ T6861] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 174.414828][ T6861] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 174.414874][ T6861] ? hugetlbfs_get_inode+0x3f5/0x700 [ 174.414925][ T6861] ksys_mmap_pgoff+0x285/0x610 [ 174.414965][ T6861] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 174.414996][ T6861] ? xfd_validate_state+0x129/0x190 [ 174.415033][ T6861] __x64_sys_mmap+0x125/0x190 [ 174.415071][ T6861] do_syscall_64+0x10b/0xf80 [ 174.415105][ T6861] ? clear_bhb_loop+0x40/0x90 [ 174.415142][ T6861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.415172][ T6861] RIP: 0033:0x7f624b59cdd9 [ 174.415199][ T6861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.415227][ T6861] RSP: 002b:00007f624c4f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 174.415257][ T6861] RAX: ffffffffffffffda RBX: 00007f624b815fa0 RCX: 00007f624b59cdd9 [ 174.415277][ T6861] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 174.415294][ T6861] RBP: 00007f624b632d69 R08: 0000000000000401 R09: 0000300000000000 [ 174.415312][ T6861] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 174.415330][ T6861] R13: 00007f624b816038 R14: 00007f624b815fa0 R15: 00007ffc9e3254b8 [ 174.415370][ T6861] [ 175.183547][ T6867] sd 0:0:1:0: PR command failed: 1026 [ 175.221528][ T6867] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 175.292435][ T6867] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 177.063862][ T6878] batadv_slave_1: entered promiscuous mode [ 177.118622][ T6878] batadv_slave_1: left promiscuous mode [ 178.305843][ T6894] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 178.882586][ T6905] FAULT_INJECTION: forcing a failure. [ 178.882586][ T6905] name failslab, interval 1, probability 0, space 0, times 0 [ 178.941450][ T6905] CPU: 1 UID: 0 PID: 6905 Comm: syz.4.257 Not tainted syzkaller #0 PREEMPT(full) [ 178.941502][ T6905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 178.941520][ T6905] Call Trace: [ 178.941530][ T6905] [ 178.941542][ T6905] dump_stack_lvl+0x100/0x190 [ 178.941588][ T6905] should_fail_ex.cold+0x5/0xa [ 178.941628][ T6905] should_failslab+0xc2/0x120 [ 178.941665][ T6905] __kmalloc_cache_noprof+0x7a/0x6f0 [ 178.941708][ T6905] ? ima_calc_file_hash_tfm+0x236/0x350 [ 178.941755][ T6905] ? sha256_init+0xd/0xc0 [ 178.941789][ T6905] ima_calc_file_hash_tfm+0x236/0x350 [ 178.941832][ T6905] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10 [ 178.941919][ T6905] ? look_up_lock_class+0x55/0x120 [ 178.941960][ T6905] ? ima_alloc_tfm+0x21a/0x2e0 [ 178.942013][ T6905] ima_calc_file_hash+0x1e3/0x380 [ 178.942063][ T6905] ima_collect_measurement+0x94f/0xb30 [ 178.942123][ T6905] ? __pfx_ima_collect_measurement+0x10/0x10 [ 178.942197][ T6905] ? process_measurement+0x5ab/0x2350 [ 178.942243][ T6905] ? is_bad_inode+0xd/0x40 [ 178.942274][ T6905] ? xattr_resolve_name+0x27d/0x3f0 [ 178.942316][ T6905] ? vfs_getxattr_alloc+0xec/0x350 [ 178.942362][ T6905] ? ima_get_hash_algo+0x22d/0x400 [ 178.942403][ T6905] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 178.942451][ T6905] ? process_measurement+0xdfe/0x2350 [ 178.942504][ T6905] process_measurement+0xdfe/0x2350 [ 178.942559][ T6905] ? stack_trace_save+0x8e/0xc0 [ 178.942604][ T6905] ? __pfx_process_measurement+0x10/0x10 [ 178.942651][ T6905] ? __lock_acquire+0x4a5/0x2630 [ 178.942682][ T6905] ? __kasan_slab_alloc+0x89/0x90 [ 178.942713][ T6905] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 178.942762][ T6905] ? init_file+0x95/0x480 [ 178.942801][ T6905] ? alloc_empty_file+0x79/0x1c0 [ 178.942842][ T6905] ? alloc_file_pseudo+0x13a/0x230 [ 178.942878][ T6905] ? ksys_mmap_pgoff+0x242/0x610 [ 178.942912][ T6905] ? __x64_sys_mmap+0x125/0x190 [ 178.942944][ T6905] ? do_syscall_64+0x10b/0xf80 [ 178.943019][ T6905] ? __pfx_aa_file_perm+0x10/0x10 [ 178.943070][ T6905] ima_file_mmap+0x1c4/0x1f0 [ 178.943117][ T6905] ? __pfx_ima_file_mmap+0x10/0x10 [ 178.943174][ T6905] security_mmap_file+0x278/0x9b0 [ 178.943211][ T6905] vm_mmap_pgoff+0xec/0x470 [ 178.943256][ T6905] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 178.943289][ T6905] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 178.943330][ T6905] ? hugetlbfs_get_inode+0x3f5/0x700 [ 178.943380][ T6905] ksys_mmap_pgoff+0x285/0x610 [ 178.943418][ T6905] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 178.943450][ T6905] ? xfd_validate_state+0x129/0x190 [ 178.943499][ T6905] __x64_sys_mmap+0x125/0x190 [ 178.943536][ T6905] do_syscall_64+0x10b/0xf80 [ 178.943570][ T6905] ? clear_bhb_loop+0x40/0x90 [ 178.943606][ T6905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.943642][ T6905] RIP: 0033:0x7f624b59cdd9 [ 178.943668][ T6905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.943696][ T6905] RSP: 002b:00007f624c4f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 178.943725][ T6905] RAX: ffffffffffffffda RBX: 00007f624b815fa0 RCX: 00007f624b59cdd9 [ 178.943745][ T6905] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 178.943762][ T6905] RBP: 00007f624b632d69 R08: 0000000000000401 R09: 0000300000000000 [ 178.943780][ T6905] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 178.943798][ T6905] R13: 00007f624b816038 R14: 00007f624b815fa0 R15: 00007ffc9e3254b8 [ 178.943840][ T6905] [ 179.694907][ T29] audit: type=1800 audit(1843104592.360:7): pid=6905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.257" name="anon_hugepage" dev="hugetlbfs" ino=12648 res=0 errno=0 [ 183.835023][ T6942] batadv_slave_1: entered promiscuous mode [ 184.046157][ T6941] batadv_slave_1: left promiscuous mode [ 185.407628][ T6963] netlink: 'syz.1.267': attribute type 64 has an invalid length. [ 185.459351][ T6963] netlink: 74 bytes leftover after parsing attributes in process `syz.1.267'. [ 185.470803][ T6958] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 185.918959][ T6973] netlink: 'syz.5.269': attribute type 64 has an invalid length. [ 185.953074][ T6973] netlink: 74 bytes leftover after parsing attributes in process `syz.5.269'. [ 185.986848][ T6976] FAULT_INJECTION: forcing a failure. [ 185.986848][ T6976] name failslab, interval 1, probability 0, space 0, times 0 [ 186.012754][ T6973] netlink: 'syz.5.269': attribute type 64 has an invalid length. [ 186.047302][ T6976] CPU: 0 UID: 0 PID: 6976 Comm: syz.4.271 Not tainted syzkaller #0 PREEMPT(full) [ 186.047346][ T6976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 186.047372][ T6976] Call Trace: [ 186.047383][ T6976] [ 186.047394][ T6976] dump_stack_lvl+0x100/0x190 [ 186.047435][ T6976] should_fail_ex.cold+0x5/0xa [ 186.047475][ T6976] should_failslab+0xc2/0x120 [ 186.047512][ T6976] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 186.047561][ T6976] ? ima_inode_get+0x11f/0x580 [ 186.047611][ T6976] ima_inode_get+0x11f/0x580 [ 186.047658][ T6976] process_measurement+0x1213/0x2350 [ 186.047712][ T6976] ? stack_depot_save_flags+0x27/0x9d0 [ 186.047746][ T6976] ? stack_trace_save+0x8e/0xc0 [ 186.047789][ T6976] ? __pfx_process_measurement+0x10/0x10 [ 186.047836][ T6976] ? __lock_acquire+0x4a5/0x2630 [ 186.047865][ T6976] ? __kasan_slab_alloc+0x89/0x90 [ 186.047896][ T6976] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 186.047940][ T6976] ? init_file+0x95/0x480 [ 186.047977][ T6976] ? alloc_empty_file+0x79/0x1c0 [ 186.048018][ T6976] ? alloc_file_pseudo+0x13a/0x230 [ 186.048061][ T6976] ? ksys_mmap_pgoff+0x242/0x610 [ 186.048094][ T6976] ? __x64_sys_mmap+0x125/0x190 [ 186.048124][ T6976] ? do_syscall_64+0x10b/0xf80 [ 186.048199][ T6976] ? __pfx_aa_file_perm+0x10/0x10 [ 186.048250][ T6976] ima_file_mmap+0x1c4/0x1f0 [ 186.048295][ T6976] ? __pfx_ima_file_mmap+0x10/0x10 [ 186.048357][ T6976] security_mmap_file+0x278/0x9b0 [ 186.048401][ T6976] vm_mmap_pgoff+0xec/0x470 [ 186.048444][ T6976] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 186.048479][ T6976] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 186.048523][ T6976] ? hugetlbfs_get_inode+0x3f5/0x700 [ 186.048581][ T6976] ksys_mmap_pgoff+0x285/0x610 [ 186.048622][ T6976] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 186.048659][ T6976] ? xfd_validate_state+0x129/0x190 [ 186.048701][ T6976] __x64_sys_mmap+0x125/0x190 [ 186.048740][ T6976] do_syscall_64+0x10b/0xf80 [ 186.048775][ T6976] ? clear_bhb_loop+0x40/0x90 [ 186.048814][ T6976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.048846][ T6976] RIP: 0033:0x7f624b59cdd9 [ 186.048871][ T6976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.048900][ T6976] RSP: 002b:00007f624c4f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 186.048930][ T6976] RAX: ffffffffffffffda RBX: 00007f624b815fa0 RCX: 00007f624b59cdd9 [ 186.048950][ T6976] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 186.048968][ T6976] RBP: 00007f624b632d69 R08: 0000000000000401 R09: 0000300000000000 [ 186.048986][ T6976] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 186.049005][ T6976] R13: 00007f624b816038 R14: 00007f624b815fa0 R15: 00007ffc9e3254b8 [ 186.049047][ T6976] [ 186.050442][ T6973] netlink: 74 bytes leftover after parsing attributes in process `syz.5.269'. [ 187.154629][ T6984] batadv_slave_1: entered promiscuous mode [ 187.640916][ T6980] batadv_slave_1: left promiscuous mode [ 188.529580][ T7012] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 190.292209][ T7037] openvswitch: netlink: IP tunnel attribute has 24 unknown bytes. [ 190.737115][ T7043] sd 0:0:1:0: PR command failed: 1026 [ 190.760848][ T7043] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 190.829381][ T7043] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 191.708346][ T7048] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 192.274970][ T7062] netlink: 'syz.5.294': attribute type 64 has an invalid length. [ 192.350232][ T7062] netlink: 74 bytes leftover after parsing attributes in process `syz.5.294'. [ 192.586709][ T7064] FAULT_INJECTION: forcing a failure. [ 192.586709][ T7064] name failslab, interval 1, probability 0, space 0, times 0 [ 192.655714][ T7064] CPU: 0 UID: 0 PID: 7064 Comm: syz.0.296 Not tainted syzkaller #0 PREEMPT(full) [ 192.655757][ T7064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 192.655775][ T7064] Call Trace: [ 192.655785][ T7064] [ 192.655796][ T7064] dump_stack_lvl+0x100/0x190 [ 192.655837][ T7064] should_fail_ex.cold+0x5/0xa [ 192.655877][ T7064] should_failslab+0xc2/0x120 [ 192.655913][ T7064] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 192.655958][ T7064] ? security_file_alloc+0x34/0x2c0 [ 192.655990][ T7064] ? trace_kmem_cache_alloc+0xd5/0x100 [ 192.656033][ T7064] security_file_alloc+0x34/0x2c0 [ 192.656067][ T7064] init_file+0x95/0x480 [ 192.656110][ T7064] alloc_empty_file+0x79/0x1c0 [ 192.656156][ T7064] alloc_file_pseudo+0x13a/0x230 [ 192.656202][ T7064] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 192.656264][ T7064] ? hugetlbfs_get_inode+0x3f5/0x700 [ 192.656310][ T7064] hugetlb_file_setup+0x2a8/0x5b0 [ 192.656354][ T7064] ksys_mmap_pgoff+0x242/0x610 [ 192.656395][ T7064] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 192.656430][ T7064] ? xfd_validate_state+0x129/0x190 [ 192.656469][ T7064] __x64_sys_mmap+0x125/0x190 [ 192.656504][ T7064] do_syscall_64+0x10b/0xf80 [ 192.656539][ T7064] ? clear_bhb_loop+0x40/0x90 [ 192.656576][ T7064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.656606][ T7064] RIP: 0033:0x7ff6e019cdd9 [ 192.656631][ T7064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.656659][ T7064] RSP: 002b:00007ff6e0fda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 192.656688][ T7064] RAX: ffffffffffffffda RBX: 00007ff6e0415fa0 RCX: 00007ff6e019cdd9 [ 192.656707][ T7064] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 192.656725][ T7064] RBP: 00007ff6e0232d69 R08: 0000000000000401 R09: 0000300000000000 [ 192.656742][ T7064] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 192.656759][ T7064] R13: 00007ff6e0416038 R14: 00007ff6e0415fa0 R15: 00007ffd5aeaad28 [ 192.656797][ T7064] [ 194.558564][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.565012][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.172290][ T7094] netlink: 'syz.0.305': attribute type 64 has an invalid length. [ 195.196223][ T7094] netlink: 74 bytes leftover after parsing attributes in process `syz.0.305'. [ 195.368460][ T7095] batadv_slave_1: entered promiscuous mode [ 195.799056][ T7089] batadv_slave_1: left promiscuous mode [ 196.064128][ T7092] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 196.278653][ T7107] FAULT_INJECTION: forcing a failure. [ 196.278653][ T7107] name failslab, interval 1, probability 0, space 0, times 0 [ 196.368061][ T7107] CPU: 1 UID: 0 PID: 7107 Comm: syz.0.308 Not tainted syzkaller #0 PREEMPT(full) [ 196.368107][ T7107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 196.368125][ T7107] Call Trace: [ 196.368135][ T7107] [ 196.368147][ T7107] dump_stack_lvl+0x100/0x190 [ 196.368197][ T7107] should_fail_ex.cold+0x5/0xa [ 196.368237][ T7107] should_failslab+0xc2/0x120 [ 196.368274][ T7107] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 196.368323][ T7107] ? ima_inode_get+0x11f/0x580 [ 196.368373][ T7107] ima_inode_get+0x11f/0x580 [ 196.368419][ T7107] process_measurement+0x1213/0x2350 [ 196.368469][ T7107] ? __lock_acquire+0x4a5/0x2630 [ 196.368498][ T7107] ? stack_depot_save_flags+0x27/0x9d0 [ 196.368532][ T7107] ? stack_trace_save+0x8e/0xc0 [ 196.368573][ T7107] ? __pfx_process_measurement+0x10/0x10 [ 196.368619][ T7107] ? __lock_acquire+0x4a5/0x2630 [ 196.368647][ T7107] ? __kasan_slab_alloc+0x89/0x90 [ 196.368678][ T7107] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 196.368727][ T7107] ? init_file+0x95/0x480 [ 196.368764][ T7107] ? alloc_empty_file+0x79/0x1c0 [ 196.368805][ T7107] ? alloc_file_pseudo+0x13a/0x230 [ 196.368847][ T7107] ? ksys_mmap_pgoff+0x242/0x610 [ 196.368880][ T7107] ? __x64_sys_mmap+0x125/0x190 [ 196.368910][ T7107] ? do_syscall_64+0x10b/0xf80 [ 196.368984][ T7107] ? __pfx_aa_file_perm+0x10/0x10 [ 196.369034][ T7107] ima_file_mmap+0x1c4/0x1f0 [ 196.369076][ T7107] ? __pfx_ima_file_mmap+0x10/0x10 [ 196.369131][ T7107] security_mmap_file+0x278/0x9b0 [ 196.369173][ T7107] vm_mmap_pgoff+0xec/0x470 [ 196.369217][ T7107] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 196.369253][ T7107] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 196.369300][ T7107] ? hugetlbfs_get_inode+0x3f5/0x700 [ 196.369356][ T7107] ksys_mmap_pgoff+0x285/0x610 [ 196.369398][ T7107] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 196.369434][ T7107] ? __pfx___x64_sys_futex+0x10/0x10 [ 196.369473][ T7107] ? __pfx_do_writev+0x10/0x10 [ 196.369507][ T7107] __x64_sys_mmap+0x125/0x190 [ 196.369545][ T7107] do_syscall_64+0x10b/0xf80 [ 196.369579][ T7107] ? clear_bhb_loop+0x40/0x90 [ 196.369616][ T7107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.369647][ T7107] RIP: 0033:0x7ff6e019cdd9 [ 196.369674][ T7107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.369702][ T7107] RSP: 002b:00007ff6e0fda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 196.369733][ T7107] RAX: ffffffffffffffda RBX: 00007ff6e0415fa0 RCX: 00007ff6e019cdd9 [ 196.369752][ T7107] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 196.369770][ T7107] RBP: 00007ff6e0232d69 R08: 0000000000000401 R09: 0000300000000000 [ 196.369788][ T7107] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 196.369806][ T7107] R13: 00007ff6e0416038 R14: 00007ff6e0415fa0 R15: 00007ffd5aeaad28 [ 196.369848][ T7107] [ 197.468056][ T7126] sd 0:0:1:0: PR command failed: 1026 [ 197.493889][ T7126] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 197.543107][ T7126] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 197.940833][ T7131] batadv_slave_1: entered promiscuous mode [ 198.206144][ T7129] batadv_slave_1: left promiscuous mode [ 198.778860][ T7146] FAULT_INJECTION: forcing a failure. [ 198.778860][ T7146] name failslab, interval 1, probability 0, space 0, times 0 [ 198.833303][ T7146] CPU: 0 UID: 0 PID: 7146 Comm: syz.5.319 Not tainted syzkaller #0 PREEMPT(full) [ 198.833344][ T7146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 198.833360][ T7146] Call Trace: [ 198.833370][ T7146] [ 198.833381][ T7146] dump_stack_lvl+0x100/0x190 [ 198.833419][ T7146] should_fail_ex.cold+0x5/0xa [ 198.833457][ T7146] should_failslab+0xc2/0x120 [ 198.833491][ T7146] __kmalloc_cache_noprof+0x7a/0x6f0 [ 198.833533][ T7146] ? usbdev_mmap+0x1f2/0xa20 [ 198.833563][ T7146] ? mark_held_locks+0x40/0x70 [ 198.833616][ T7146] usbdev_mmap+0x1f2/0xa20 [ 198.833652][ T7146] ? __pfx_usbdev_mmap+0x10/0x10 [ 198.833683][ T7146] ? vm_area_alloc+0x1f/0x160 [ 198.833727][ T7146] ? lockdep_init_map_type+0x5c/0x250 [ 198.833761][ T7146] __mmap_region+0x13e1/0x2da0 [ 198.833813][ T7146] ? __pfx___mmap_region+0x10/0x10 [ 198.833866][ T7146] ? __pfx___might_resched+0x10/0x10 [ 198.833900][ T7146] ? find_held_lock+0x2b/0x80 [ 198.833936][ T7146] ? process_measurement+0x4c8/0x2350 [ 198.833976][ T7146] ? process_measurement+0x4c8/0x2350 [ 198.834053][ T7146] ? __lock_acquire+0x4a5/0x2630 [ 198.834109][ T7146] ? lock_acquire+0x1b1/0x370 [ 198.834154][ T7146] ? kernel_text_address+0x8d/0x100 [ 198.834192][ T7146] ? __kernel_text_address+0xd/0x30 [ 198.834221][ T7146] ? unwind_get_return_address+0x59/0xa0 [ 198.834319][ T7146] mmap_region+0x527/0x620 [ 198.834351][ T7146] ? __pfx_mmap_region+0x10/0x10 [ 198.834380][ T7146] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 198.834417][ T7146] ? cap_mmap_addr+0x4b/0x120 [ 198.834456][ T7146] ? bpf_lsm_mmap_addr+0x9/0x30 [ 198.834483][ T7146] ? security_mmap_addr+0x71/0x1e0 [ 198.834515][ T7146] ? __get_unmapped_area+0x255/0x3e0 [ 198.834555][ T7146] do_mmap+0xc63/0x12f0 [ 198.834599][ T7146] ? __pfx_do_mmap+0x10/0x10 [ 198.834634][ T7146] ? __pfx_down_write_killable+0x10/0x10 [ 198.834684][ T7146] vm_mmap_pgoff+0x29e/0x470 [ 198.834729][ T7146] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 198.834762][ T7146] ? __fget_files+0x215/0x3d0 [ 198.834800][ T7146] ? __fget_files+0x21f/0x3d0 [ 198.834838][ T7146] ksys_mmap_pgoff+0x3cb/0x610 [ 198.834872][ T7146] ? irqentry_exit+0x246/0x790 [ 198.834904][ T7146] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 198.834939][ T7146] ? xfd_validate_state+0x129/0x190 [ 198.834977][ T7146] __x64_sys_mmap+0x125/0x190 [ 198.835013][ T7146] do_syscall_64+0x10b/0xf80 [ 198.835045][ T7146] ? clear_bhb_loop+0x40/0x90 [ 198.835081][ T7146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.835111][ T7146] RIP: 0033:0x7fdd0199cdd9 [ 198.835136][ T7146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.835162][ T7146] RSP: 002b:00007fdcffbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 198.835199][ T7146] RAX: ffffffffffffffda RBX: 00007fdd01c15fa0 RCX: 00007fdd0199cdd9 [ 198.835218][ T7146] RDX: 0000000000000ffb RSI: 00000000000007ff RDI: 0000020000000000 [ 198.835235][ T7146] RBP: 00007fdcffbf6090 R08: 0000000000000003 R09: 0000000000000000 [ 198.835252][ T7146] R10: 0008000000008011 R11: 0000000000000246 R12: 0000000000000001 [ 198.835269][ T7146] R13: 00007fdd01c16038 R14: 00007fdd01c15fa0 R15: 00007ffcc073b4c8 [ 198.835309][ T7146] [ 199.708533][ T7155] FAULT_INJECTION: forcing a failure. [ 199.708533][ T7155] name failslab, interval 1, probability 0, space 0, times 0 [ 199.748973][ T7155] CPU: 0 UID: 0 PID: 7155 Comm: syz.1.322 Not tainted syzkaller #0 PREEMPT(full) [ 199.749019][ T7155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 199.749037][ T7155] Call Trace: [ 199.749047][ T7155] [ 199.749059][ T7155] dump_stack_lvl+0x100/0x190 [ 199.749100][ T7155] should_fail_ex.cold+0x5/0xa [ 199.749141][ T7155] should_failslab+0xc2/0x120 [ 199.749186][ T7155] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 199.749234][ T7155] ? ima_inode_get+0x11f/0x580 [ 199.749287][ T7155] ima_inode_get+0x11f/0x580 [ 199.749336][ T7155] process_measurement+0x1213/0x2350 [ 199.749390][ T7155] ? stack_depot_save_flags+0x27/0x9d0 [ 199.749423][ T7155] ? stack_trace_save+0x8e/0xc0 [ 199.749466][ T7155] ? __pfx_process_measurement+0x10/0x10 [ 199.749512][ T7155] ? __lock_acquire+0x4a5/0x2630 [ 199.749539][ T7155] ? __kasan_slab_alloc+0x89/0x90 [ 199.749570][ T7155] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 199.749618][ T7155] ? init_file+0x95/0x480 [ 199.749656][ T7155] ? alloc_empty_file+0x79/0x1c0 [ 199.749697][ T7155] ? alloc_file_pseudo+0x13a/0x230 [ 199.749740][ T7155] ? ksys_mmap_pgoff+0x242/0x610 [ 199.749773][ T7155] ? __x64_sys_mmap+0x125/0x190 [ 199.749805][ T7155] ? do_syscall_64+0x10b/0xf80 [ 199.749882][ T7155] ? __pfx_aa_file_perm+0x10/0x10 [ 199.749933][ T7155] ima_file_mmap+0x1c4/0x1f0 [ 199.749980][ T7155] ? __pfx_ima_file_mmap+0x10/0x10 [ 199.750037][ T7155] security_mmap_file+0x278/0x9b0 [ 199.750074][ T7155] vm_mmap_pgoff+0xec/0x470 [ 199.750118][ T7155] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 199.750163][ T7155] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 199.750210][ T7155] ? hugetlbfs_get_inode+0x3f5/0x700 [ 199.750269][ T7155] ksys_mmap_pgoff+0x285/0x610 [ 199.750312][ T7155] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 199.750349][ T7155] ? xfd_validate_state+0x129/0x190 [ 199.750394][ T7155] __x64_sys_mmap+0x125/0x190 [ 199.750431][ T7155] do_syscall_64+0x10b/0xf80 [ 199.750465][ T7155] ? clear_bhb_loop+0x40/0x90 [ 199.750504][ T7155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.750535][ T7155] RIP: 0033:0x7fe22f19cdd9 [ 199.750563][ T7155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.750594][ T7155] RSP: 002b:00007fe22ffc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 199.750625][ T7155] RAX: ffffffffffffffda RBX: 00007fe22f415fa0 RCX: 00007fe22f19cdd9 [ 199.750646][ T7155] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 199.750664][ T7155] RBP: 00007fe22f232d69 R08: 0000000000000401 R09: 0000300000000000 [ 199.750682][ T7155] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 199.750700][ T7155] R13: 00007fe22f416038 R14: 00007fe22f415fa0 R15: 00007ffdaab18028 [ 199.750742][ T7155] [ 199.762727][ T7146] netlink: 8 bytes leftover after parsing attributes in process `syz.5.319'. [ 201.357999][ T7170] batadv_slave_1: entered promiscuous mode [ 201.553286][ T7169] batadv_slave_1: left promiscuous mode [ 202.273249][ T7190] FAULT_INJECTION: forcing a failure. [ 202.273249][ T7190] name failslab, interval 1, probability 0, space 0, times 0 [ 202.308241][ T7190] CPU: 0 UID: 0 PID: 7190 Comm: syz.5.333 Not tainted syzkaller #0 PREEMPT(full) [ 202.308288][ T7190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 202.308305][ T7190] Call Trace: [ 202.308316][ T7190] [ 202.308347][ T7190] dump_stack_lvl+0x100/0x190 [ 202.308406][ T7190] should_fail_ex.cold+0x5/0xa [ 202.308447][ T7190] should_failslab+0xc2/0x120 [ 202.308483][ T7190] __kmalloc_cache_noprof+0x7a/0x6f0 [ 202.308529][ T7190] ? ima_calc_file_hash_tfm+0x236/0x350 [ 202.308579][ T7190] ? sha256_init+0xd/0xc0 [ 202.308628][ T7190] ima_calc_file_hash_tfm+0x236/0x350 [ 202.308678][ T7190] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10 [ 202.308782][ T7190] ? look_up_lock_class+0x55/0x120 [ 202.308825][ T7190] ? ima_alloc_tfm+0x21a/0x2e0 [ 202.308877][ T7190] ima_calc_file_hash+0x1e3/0x380 [ 202.308927][ T7190] ima_collect_measurement+0x94f/0xb30 [ 202.308987][ T7190] ? __pfx_ima_collect_measurement+0x10/0x10 [ 202.309061][ T7190] ? process_measurement+0x5ab/0x2350 [ 202.309108][ T7190] ? is_bad_inode+0xd/0x40 [ 202.309137][ T7190] ? xattr_resolve_name+0x27d/0x3f0 [ 202.309176][ T7190] ? vfs_getxattr_alloc+0xec/0x350 [ 202.309223][ T7190] ? ima_get_hash_algo+0x22d/0x400 [ 202.309258][ T7190] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 202.309305][ T7190] ? process_measurement+0xdfe/0x2350 [ 202.309348][ T7190] process_measurement+0xdfe/0x2350 [ 202.309417][ T7190] ? stack_trace_save+0x8e/0xc0 [ 202.309461][ T7190] ? __pfx_process_measurement+0x10/0x10 [ 202.309509][ T7190] ? __lock_acquire+0x4a5/0x2630 [ 202.309539][ T7190] ? __kasan_slab_alloc+0x89/0x90 [ 202.309572][ T7190] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 202.309621][ T7190] ? init_file+0x95/0x480 [ 202.309660][ T7190] ? alloc_empty_file+0x79/0x1c0 [ 202.309699][ T7190] ? alloc_file_pseudo+0x13a/0x230 [ 202.309742][ T7190] ? ksys_mmap_pgoff+0x242/0x610 [ 202.309776][ T7190] ? __x64_sys_mmap+0x125/0x190 [ 202.309809][ T7190] ? do_syscall_64+0x10b/0xf80 [ 202.309884][ T7190] ? __pfx_aa_file_perm+0x10/0x10 [ 202.309936][ T7190] ima_file_mmap+0x1c4/0x1f0 [ 202.309983][ T7190] ? __pfx_ima_file_mmap+0x10/0x10 [ 202.310039][ T7190] security_mmap_file+0x278/0x9b0 [ 202.310077][ T7190] vm_mmap_pgoff+0xec/0x470 [ 202.310120][ T7190] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 202.310156][ T7190] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 202.310203][ T7190] ? hugetlbfs_get_inode+0x3f5/0x700 [ 202.310260][ T7190] ksys_mmap_pgoff+0x285/0x610 [ 202.310302][ T7190] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 202.310338][ T7190] ? xfd_validate_state+0x129/0x190 [ 202.310387][ T7190] __x64_sys_mmap+0x125/0x190 [ 202.310426][ T7190] do_syscall_64+0x10b/0xf80 [ 202.310461][ T7190] ? clear_bhb_loop+0x40/0x90 [ 202.310500][ T7190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.310533][ T7190] RIP: 0033:0x7fdd0199cdd9 [ 202.310560][ T7190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.310590][ T7190] RSP: 002b:00007fdcffbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 202.310621][ T7190] RAX: ffffffffffffffda RBX: 00007fdd01c15fa0 RCX: 00007fdd0199cdd9 [ 202.310640][ T7190] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 202.310658][ T7190] RBP: 00007fdd01a32d69 R08: 0000000000000401 R09: 0000300000000000 [ 202.310676][ T7190] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 202.310694][ T7190] R13: 00007fdd01c16038 R14: 00007fdd01c15fa0 R15: 00007ffcc073b4c8 [ 202.310732][ T7190] [ 202.784759][ T29] audit: type=1800 audit(1843104615.450:8): pid=7190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.333" name="anon_hugepage" dev="hugetlbfs" ino=13263 res=0 errno=0 [ 203.355359][ T7199] sd 0:0:1:0: PR command failed: 1026 [ 203.394502][ T7199] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 203.415797][ T7199] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 204.677439][ T7218] netlink: 'syz.5.338': attribute type 64 has an invalid length. [ 204.755288][ T7218] netlink: 74 bytes leftover after parsing attributes in process `syz.5.338'. [ 206.318344][ T7228] batadv_slave_1: entered promiscuous mode [ 206.625244][ T7223] batadv_slave_1: left promiscuous mode [ 207.313121][ T7237] sd 0:0:1:0: PR command failed: 1026 [ 207.408441][ T7237] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 207.466235][ T7237] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 213.184364][ T7287] sd 0:0:1:0: PR command failed: 1026 [ 213.224321][ T7287] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 213.259745][ T7287] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 214.165351][ T7300] FAULT_INJECTION: forcing a failure. [ 214.165351][ T7300] name failslab, interval 1, probability 0, space 0, times 0 [ 214.319698][ T7300] CPU: 0 UID: 0 PID: 7300 Comm: syz.0.360 Not tainted syzkaller #0 PREEMPT(full) [ 214.319743][ T7300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 214.319760][ T7300] Call Trace: [ 214.319771][ T7300] [ 214.319783][ T7300] dump_stack_lvl+0x100/0x190 [ 214.319824][ T7300] should_fail_ex.cold+0x5/0xa [ 214.319864][ T7300] should_failslab+0xc2/0x120 [ 214.319902][ T7300] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 214.319950][ T7300] ? ima_inode_get+0x11f/0x580 [ 214.320002][ T7300] ima_inode_get+0x11f/0x580 [ 214.320061][ T7300] process_measurement+0x1213/0x2350 [ 214.320115][ T7300] ? stack_depot_save_flags+0x27/0x9d0 [ 214.320150][ T7300] ? stack_trace_save+0x8e/0xc0 [ 214.320192][ T7300] ? __pfx_process_measurement+0x10/0x10 [ 214.320237][ T7300] ? __lock_acquire+0x4a5/0x2630 [ 214.320266][ T7300] ? __kasan_slab_alloc+0x89/0x90 [ 214.320295][ T7300] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 214.320344][ T7300] ? init_file+0x95/0x480 [ 214.320381][ T7300] ? alloc_empty_file+0x79/0x1c0 [ 214.320422][ T7300] ? alloc_file_pseudo+0x13a/0x230 [ 214.320464][ T7300] ? ksys_mmap_pgoff+0x242/0x610 [ 214.320504][ T7300] ? __x64_sys_mmap+0x125/0x190 [ 214.320537][ T7300] ? do_syscall_64+0x10b/0xf80 [ 214.320613][ T7300] ? __pfx_aa_file_perm+0x10/0x10 [ 214.320666][ T7300] ima_file_mmap+0x1c4/0x1f0 [ 214.320713][ T7300] ? __pfx_ima_file_mmap+0x10/0x10 [ 214.320770][ T7300] security_mmap_file+0x278/0x9b0 [ 214.320805][ T7300] vm_mmap_pgoff+0xec/0x470 [ 214.320844][ T7300] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 214.320877][ T7300] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 214.320923][ T7300] ? hugetlbfs_get_inode+0x3f5/0x700 [ 214.320973][ T7300] ksys_mmap_pgoff+0x285/0x610 [ 214.321021][ T7300] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 214.321058][ T7300] ? xfd_validate_state+0x129/0x190 [ 214.321101][ T7300] __x64_sys_mmap+0x125/0x190 [ 214.321140][ T7300] do_syscall_64+0x10b/0xf80 [ 214.321176][ T7300] ? clear_bhb_loop+0x40/0x90 [ 214.321215][ T7300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.321247][ T7300] RIP: 0033:0x7ff6e019cdd9 [ 214.321273][ T7300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.321302][ T7300] RSP: 002b:00007ff6e0fda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 214.321333][ T7300] RAX: ffffffffffffffda RBX: 00007ff6e0415fa0 RCX: 00007ff6e019cdd9 [ 214.321353][ T7300] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 214.321371][ T7300] RBP: 00007ff6e0232d69 R08: 0000000000000401 R09: 0000300000000000 [ 214.321390][ T7300] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 214.321408][ T7300] R13: 00007ff6e0416038 R14: 00007ff6e0415fa0 R15: 00007ffd5aeaad28 [ 214.321449][ T7300] [ 219.445227][ T7336] sd 0:0:1:0: PR command failed: 1026 [ 219.482629][ T7336] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 219.532978][ T7336] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 222.574012][ T7368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.376'. [ 223.093973][ T7379] sd 0:0:1:0: PR command failed: 1026 [ 223.127313][ T7379] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 223.196079][ T7379] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 224.271540][ T7367] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 224.531320][ T7397] FAULT_INJECTION: forcing a failure. [ 224.531320][ T7397] name failslab, interval 1, probability 0, space 0, times 0 [ 224.611552][ T7397] CPU: 1 UID: 0 PID: 7397 Comm: syz.4.383 Not tainted syzkaller #0 PREEMPT(full) [ 224.611597][ T7397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 224.611614][ T7397] Call Trace: [ 224.611625][ T7397] [ 224.611636][ T7397] dump_stack_lvl+0x100/0x190 [ 224.611675][ T7397] should_fail_ex.cold+0x5/0xa [ 224.611714][ T7397] should_failslab+0xc2/0x120 [ 224.611749][ T7397] __kmalloc_cache_noprof+0x7a/0x6f0 [ 224.611791][ T7397] ? __do_sys_fanotify_init+0x608/0xe80 [ 224.611833][ T7397] __do_sys_fanotify_init+0x608/0xe80 [ 224.611884][ T7397] do_syscall_64+0x10b/0xf80 [ 224.611920][ T7397] ? clear_bhb_loop+0x40/0x90 [ 224.611958][ T7397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.611989][ T7397] RIP: 0033:0x7f624b59cdd9 [ 224.612015][ T7397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.612044][ T7397] RSP: 002b:00007f624c4f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 224.612074][ T7397] RAX: ffffffffffffffda RBX: 00007f624b815fa0 RCX: 00007f624b59cdd9 [ 224.612090][ T7397] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 224.612106][ T7397] RBP: 00007f624b632d69 R08: 0000000000000000 R09: 0000000000000000 [ 224.612121][ T7397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.612137][ T7397] R13: 00007f624b816038 R14: 00007f624b815fa0 R15: 00007ffc9e3254b8 [ 224.612176][ T7397] [ 225.346667][ T7408] batadv_slave_1: entered promiscuous mode [ 225.512955][ T7417] batadv_slave_1: entered promiscuous mode [ 225.564977][ T7407] batadv_slave_1: left promiscuous mode [ 226.209237][ T7441] sd 0:0:1:0: PR command failed: 1026 [ 226.240528][ T7441] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 226.288255][ T7441] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 226.368738][ T7412] batadv_slave_1: left promiscuous mode [ 226.744060][ T7456] FAULT_INJECTION: forcing a failure. [ 226.744060][ T7456] name failslab, interval 1, probability 0, space 0, times 0 [ 226.790265][ T7456] CPU: 1 UID: 0 PID: 7456 Comm: syz.4.392 Not tainted syzkaller #0 PREEMPT(full) [ 226.790308][ T7456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 226.790331][ T7456] Call Trace: [ 226.790341][ T7456] [ 226.790352][ T7456] dump_stack_lvl+0x100/0x190 [ 226.790393][ T7456] should_fail_ex.cold+0x5/0xa [ 226.790433][ T7456] ? lsm_blob_alloc+0x68/0x90 [ 226.790470][ T7456] should_failslab+0xc2/0x120 [ 226.790506][ T7456] __kmalloc_noprof+0xe0/0x850 [ 226.790554][ T7456] ? trace_kmem_cache_alloc+0xd5/0x100 [ 226.790599][ T7456] lsm_blob_alloc+0x68/0x90 [ 226.790639][ T7456] security_sk_alloc+0x2d/0x290 [ 226.790687][ T7456] sk_prot_alloc+0x1d1/0x2a0 [ 226.790728][ T7456] sk_alloc+0x36/0xe80 [ 226.790777][ T7456] inet6_create+0x385/0x12b0 [ 226.790815][ T7456] ? inet6_create+0x7f/0x12b0 [ 226.790853][ T7456] __sock_create+0x339/0x860 [ 226.790899][ T7456] __sys_socket+0x14d/0x260 [ 226.790949][ T7456] ? __pfx___sys_socket+0x10/0x10 [ 226.791002][ T7456] __x64_sys_socket+0x72/0xb0 [ 226.791041][ T7456] ? lockdep_hardirqs_on+0x78/0x100 [ 226.791079][ T7456] do_syscall_64+0x10b/0xf80 [ 226.791114][ T7456] ? clear_bhb_loop+0x40/0x90 [ 226.791152][ T7456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.791183][ T7456] RIP: 0033:0x7f624b59cdd9 [ 226.791208][ T7456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.791237][ T7456] RSP: 002b:00007f624c4f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 226.791268][ T7456] RAX: ffffffffffffffda RBX: 00007f624b815fa0 RCX: 00007f624b59cdd9 [ 226.791288][ T7456] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000000a [ 226.791305][ T7456] RBP: 00007f624b632d69 R08: 0000000000000000 R09: 0000000000000000 [ 226.791323][ T7456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.791341][ T7456] R13: 00007f624b816038 R14: 00007f624b815fa0 R15: 00007ffc9e3254b8 [ 226.791382][ T7456] [ 228.839754][ T7506] sd 0:0:1:0: PR command failed: 1026 [ 228.873609][ T7506] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 228.923065][ T7506] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 229.673010][ T7523] netlink: 28 bytes leftover after parsing attributes in process `syz.0.404'. [ 230.861675][ T7573] netlink: 28 bytes leftover after parsing attributes in process `syz.1.409'. [ 231.498613][ T7593] sd 0:0:1:0: PR command failed: 1026 [ 231.507246][ T7593] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 231.531700][ T7593] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 232.259683][ T7616] binder: 7614:7616 ioctl 400c620e 2000000003c0 returned -22 [ 232.290920][ T7592] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 233.777223][ T7691] sd 0:0:1:0: PR command failed: 1026 [ 233.818025][ T7691] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 233.872663][ T7691] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 235.049785][ T7708] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 235.681573][ T7765] FAULT_INJECTION: forcing a failure. [ 235.681573][ T7765] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 235.695316][ T7765] CPU: 1 UID: 0 PID: 7765 Comm: syz.0.431 Not tainted syzkaller #0 PREEMPT(full) [ 235.695346][ T7765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 235.695363][ T7765] Call Trace: [ 235.695372][ T7765] [ 235.695382][ T7765] dump_stack_lvl+0x100/0x190 [ 235.695409][ T7765] should_fail_ex.cold+0x5/0xa [ 235.695432][ T7765] _copy_to_user+0x32/0xd0 [ 235.695462][ T7765] simple_read_from_buffer+0xcb/0x170 [ 235.695483][ T7765] proc_fail_nth_read+0x1af/0x230 [ 235.695512][ T7765] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 235.695549][ T7765] ? rw_verify_area+0xce/0x6d0 [ 235.695577][ T7765] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 235.695619][ T7765] vfs_read+0x1e4/0xb30 [ 235.695657][ T7765] ? __pfx_vfs_read+0x10/0x10 [ 235.695687][ T7765] ? __fget_files+0x215/0x3d0 [ 235.695730][ T7765] ? __fget_files+0x21f/0x3d0 [ 235.695774][ T7765] ksys_read+0x12a/0x250 [ 235.695813][ T7765] ? __pfx_ksys_read+0x10/0x10 [ 235.695846][ T7765] ? rcu_is_watching+0x12/0xc0 [ 235.695885][ T7765] do_syscall_64+0x10b/0xf80 [ 235.695918][ T7765] ? clear_bhb_loop+0x40/0x90 [ 235.695952][ T7765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.695981][ T7765] RIP: 0033:0x7ff6e015d60e [ 235.696006][ T7765] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 235.696033][ T7765] RSP: 002b:00007ff6e0fd9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 235.696059][ T7765] RAX: ffffffffffffffda RBX: 00007ff6e0fda6c0 RCX: 00007ff6e015d60e [ 235.696079][ T7765] RDX: 000000000000000f RSI: 00007ff6e0fda0a0 RDI: 0000000000000003 [ 235.696096][ T7765] RBP: 00007ff6e0fda090 R08: 0000000000000000 R09: 0000000000000000 [ 235.696113][ T7765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.696130][ T7765] R13: 00007ff6e0416038 R14: 00007ff6e0415fa0 R15: 00007ffd5aeaad28 [ 235.696170][ T7765] [ 236.816755][ T7794] random: crng reseeded on system resumption [ 237.901893][ T7810] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 242.612154][ T7992] sd 0:0:1:0: PR command failed: 1026 [ 242.645663][ T7992] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 242.705898][ T7992] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 243.599977][ T8009] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 244.004007][ T8035] sd 0:0:1:0: PR command failed: 1026 [ 244.044424][ T8035] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 244.074867][ T8035] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 244.540659][ T8057] sd 0:0:1:0: PR command failed: 1026 [ 244.566754][ T8057] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 244.604123][ T8057] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 245.226509][ T8083] FAULT_INJECTION: forcing a failure. [ 245.226509][ T8083] name failslab, interval 1, probability 0, space 0, times 0 [ 245.265292][ T8083] CPU: 0 UID: 0 PID: 8083 Comm: syz.5.469 Not tainted syzkaller #0 PREEMPT(full) [ 245.265338][ T8083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 245.265356][ T8083] Call Trace: [ 245.265366][ T8083] [ 245.265379][ T8083] dump_stack_lvl+0x100/0x190 [ 245.265420][ T8083] should_fail_ex.cold+0x5/0xa [ 245.265460][ T8083] ? drm_atomic_state_init+0x190/0x490 [ 245.265500][ T8083] should_failslab+0xc2/0x120 [ 245.265540][ T8083] __kmalloc_noprof+0xe0/0x850 [ 245.265592][ T8083] drm_atomic_state_init+0x190/0x490 [ 245.265632][ T8083] ? kasan_save_track+0x14/0x30 [ 245.265665][ T8083] drm_atomic_state_alloc+0xd3/0x120 [ 245.265710][ T8083] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 245.265769][ T8083] ? rcu_is_watching+0x12/0xc0 [ 245.265809][ T8083] ? trace_contention_end+0x122/0x170 [ 245.265847][ T8083] ? __mutex_lock+0x26d/0x1b10 [ 245.265890][ T8083] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 245.265941][ T8083] ? drm_master_internal_acquire+0x21/0x80 [ 245.266029][ T8083] drm_client_modeset_commit_locked+0x14d/0x580 [ 245.266086][ T8083] drm_client_modeset_commit+0x4f/0x80 [ 245.266134][ T8083] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 245.266186][ T8083] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 245.266234][ T8083] drm_fbdev_client_restore+0x1b/0x30 [ 245.266268][ T8083] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 245.266302][ T8083] drm_client_dev_restore+0x205/0x2a0 [ 245.266354][ T8083] drm_release+0x2c6/0x360 [ 245.266399][ T8083] ? __pfx_drm_release+0x10/0x10 [ 245.266442][ T8083] __fput+0x3ff/0xb50 [ 245.266495][ T8083] task_work_run+0x150/0x240 [ 245.266530][ T8083] ? __pfx_task_work_run+0x10/0x10 [ 245.266567][ T8083] ? rcu_is_watching+0x12/0xc0 [ 245.266611][ T8083] exit_to_user_mode_loop+0x100/0x4a0 [ 245.266642][ T8083] ? do_syscall_64+0x519/0xf80 [ 245.266682][ T8083] do_syscall_64+0x6f2/0xf80 [ 245.266725][ T8083] ? clear_bhb_loop+0x40/0x90 [ 245.266766][ T8083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.266799][ T8083] RIP: 0033:0x7fdd0199cdd9 [ 245.266825][ T8083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.266853][ T8083] RSP: 002b:00007fdcffbd5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 245.266882][ T8083] RAX: 0000000000000000 RBX: 00007fdd01c16090 RCX: 00007fdd0199cdd9 [ 245.266901][ T8083] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 245.266918][ T8083] RBP: 00007fdd01a32d69 R08: 0000000000000000 R09: 0000000000000000 [ 245.266937][ T8083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.266954][ T8083] R13: 00007fdd01c16128 R14: 00007fdd01c16090 R15: 00007ffcc073b4c8 [ 245.266997][ T8083] [ 247.112518][ T8131] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 249.835250][ T8219] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 252.109001][ T8256] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 253.171342][ T5626] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 253.183684][ T5626] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 253.193909][ T5626] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 253.204697][ T5626] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 253.212670][ T5626] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 253.821980][ T8281] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 254.813613][ T8272] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.821668][ T8272] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.830646][ T8272] bridge_slave_0: entered allmulticast mode [ 254.841074][ T8272] bridge_slave_0: entered promiscuous mode [ 254.850748][ T8272] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.858933][ T8272] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.866801][ T8272] bridge_slave_1: entered allmulticast mode [ 254.875154][ T8272] bridge_slave_1: entered promiscuous mode [ 254.940705][ T8272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.961681][ T8272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.071909][ T8272] team0: Port device team_slave_0 added [ 255.097323][ T8272] team0: Port device team_slave_1 added [ 255.207134][ T8272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.223607][ T8272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.275884][ T5623] Bluetooth: hci5: command tx timeout [ 255.289738][ T8272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.315861][ T8272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.322864][ T8272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.365225][ T8272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.584673][ T8272] hsr_slave_0: entered promiscuous mode [ 255.606524][ T8272] hsr_slave_1: entered promiscuous mode [ 255.625151][ T8272] debugfs: 'hsr0' already exists in 'hsr' [ 255.644986][ T8272] Cannot create hsr debugfs directory [ 255.695498][ T5626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 255.709649][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 255.719134][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 255.728377][ T5626] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 255.739320][ T5626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 256.001795][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.008292][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.183167][ T8517] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.190624][ T8517] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.199430][ T8517] bridge_slave_0: entered allmulticast mode [ 257.212512][ T8517] bridge_slave_0: entered promiscuous mode [ 257.222132][ T8517] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.229937][ T8517] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.237896][ T8517] bridge_slave_1: entered allmulticast mode [ 257.246634][ T8517] bridge_slave_1: entered promiscuous mode [ 257.301945][ T8517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.319949][ T8517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.357061][ T5623] Bluetooth: hci5: command tx timeout [ 257.392158][ T8517] team0: Port device team_slave_0 added [ 257.403742][ T8517] team0: Port device team_slave_1 added [ 257.454424][ T8517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.465003][ T8517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.495742][ T8517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.531467][ T8517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.545017][ T8517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.605682][ T8517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.660521][ T8617] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 257.715448][ T8517] hsr_slave_0: entered promiscuous mode [ 257.729155][ T8517] hsr_slave_1: entered promiscuous mode [ 257.741299][ T8517] debugfs: 'hsr0' already exists in 'hsr' [ 257.749417][ T8517] Cannot create hsr debugfs directory [ 257.835689][ T5623] Bluetooth: hci3: command tx timeout [ 258.006152][ T5623] Bluetooth: hci2: unexpected event 0x31 length: 19 > 6 [ 259.294120][ T8897] netlink: 16 bytes leftover after parsing attributes in process `syz.1.510'. [ 259.436274][ T5623] Bluetooth: hci5: command tx timeout [ 259.536241][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.5.512'. [ 259.916408][ T5623] Bluetooth: hci3: command tx timeout [ 261.515823][ T5623] Bluetooth: hci5: command tx timeout [ 261.995798][ T5623] Bluetooth: hci3: command tx timeout [ 263.473575][ T8987] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 264.075688][ T5623] Bluetooth: hci3: command tx timeout [ 264.621561][ T9023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.663301][ T9023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.107465][ T9034] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 268.315925][ T5626] Bluetooth: hci2: command 0x0406 tx timeout [ 272.850564][ T9295] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 272.885519][ T9295] netlink: 330 bytes leftover after parsing attributes in process `syz.1.574'. [ 275.739760][ T9376] batadv_slave_1: entered promiscuous mode [ 275.837884][ T9373] batadv_slave_1: left promiscuous mode [ 278.354373][ T9440] FAULT_INJECTION: forcing a failure. [ 278.354373][ T9440] name failslab, interval 1, probability 0, space 0, times 0 [ 278.372054][ T9440] CPU: 1 UID: 0 PID: 9440 Comm: syz.1.594 Not tainted syzkaller #0 PREEMPT(full) [ 278.372096][ T9440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 278.372114][ T9440] Call Trace: [ 278.372123][ T9440] [ 278.372134][ T9440] dump_stack_lvl+0x100/0x190 [ 278.372179][ T9440] should_fail_ex.cold+0x5/0xa [ 278.372224][ T9440] should_failslab+0xc2/0x120 [ 278.372261][ T9440] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 278.372311][ T9440] ? ima_inode_get+0x11f/0x580 [ 278.372374][ T9440] ima_inode_get+0x11f/0x580 [ 278.372423][ T9440] process_measurement+0x1213/0x2350 [ 278.372476][ T9440] ? stack_depot_save_flags+0x27/0x9d0 [ 278.372509][ T9440] ? stack_trace_save+0x8e/0xc0 [ 278.372551][ T9440] ? __pfx_process_measurement+0x10/0x10 [ 278.372596][ T9440] ? __lock_acquire+0x4a5/0x2630 [ 278.372625][ T9440] ? __kasan_slab_alloc+0x89/0x90 [ 278.372656][ T9440] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 278.372714][ T9440] ? init_file+0x95/0x480 [ 278.372753][ T9440] ? alloc_empty_file+0x79/0x1c0 [ 278.372792][ T9440] ? alloc_file_pseudo+0x13a/0x230 [ 278.372833][ T9440] ? ksys_mmap_pgoff+0x242/0x610 [ 278.372867][ T9440] ? __x64_sys_mmap+0x125/0x190 [ 278.372897][ T9440] ? do_syscall_64+0x10b/0xf80 [ 278.372972][ T9440] ? __pfx_aa_file_perm+0x10/0x10 [ 278.373024][ T9440] ima_file_mmap+0x1c4/0x1f0 [ 278.373069][ T9440] ? __pfx_ima_file_mmap+0x10/0x10 [ 278.373124][ T9440] security_mmap_file+0x278/0x9b0 [ 278.373183][ T9440] vm_mmap_pgoff+0xec/0x470 [ 278.373226][ T9440] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 278.373261][ T9440] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 278.373309][ T9440] ? hugetlbfs_get_inode+0x3f5/0x700 [ 278.373373][ T9440] ksys_mmap_pgoff+0x285/0x610 [ 278.373415][ T9440] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 278.373452][ T9440] ? xfd_validate_state+0x129/0x190 [ 278.373493][ T9440] __x64_sys_mmap+0x125/0x190 [ 278.373532][ T9440] do_syscall_64+0x10b/0xf80 [ 278.373567][ T9440] ? clear_bhb_loop+0x40/0x90 [ 278.373605][ T9440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.373636][ T9440] RIP: 0033:0x7fe22f19cdd9 [ 278.373663][ T9440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.373698][ T9440] RSP: 002b:00007fe22ffc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 278.373728][ T9440] RAX: ffffffffffffffda RBX: 00007fe22f415fa0 RCX: 00007fe22f19cdd9 [ 278.373748][ T9440] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 278.373767][ T9440] RBP: 00007fe22f232d69 R08: 0000000000000401 R09: 0000300000000000 [ 278.373786][ T9440] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 278.373805][ T9440] R13: 00007fe22f416038 R14: 00007fe22f415fa0 R15: 00007ffdaab18028 [ 278.373846][ T9440] [ 283.515896][ T30] INFO: task kworker/u8:5:59 blocked for more than 143 seconds. [ 283.537504][ T30] Not tainted syzkaller #0 [ 283.550450][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 283.569508][ T30] task:kworker/u8:5 state:D stack:23288 pid:59 tgid:59 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 283.591374][ T30] Workqueue: netns cleanup_net [ 283.597947][ T30] Call Trace: [ 283.602805][ T30] [ 283.608294][ T30] __schedule+0x10e9/0x6820 [ 283.615870][ T30] ? __pfx___schedule+0x10/0x10 [ 283.625260][ T30] ? find_held_lock+0x2b/0x80 [ 283.633944][ T30] ? schedule+0x2bf/0x390 [ 283.643574][ T30] schedule+0xdd/0x390 [ 283.651207][ T30] schedule_timeout+0x1b2/0x280 [ 283.660039][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 283.673820][ T30] ? mark_held_locks+0x40/0x70 [ 283.683516][ T30] __wait_for_common+0x2e7/0x4c0 [ 283.691956][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 283.702186][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 283.713138][ T30] remove_one+0x312/0x420 [ 283.721527][ T30] ? find_next_child+0x18f/0x280 [ 283.731503][ T30] __simple_recursive_removal+0x148/0x5c0 [ 283.744137][ T30] ? __pfx_remove_one+0x10/0x10 [ 283.754483][ T30] debugfs_remove+0x5d/0x80 [ 283.774884][ T30] nsim_dev_health_exit+0x3b/0xe0 [ 283.789536][ T30] nsim_dev_reload_destroy+0x144/0x4a0 [ 283.804479][ T30] nsim_dev_reload_down+0x66/0xd0 [ 283.820142][ T30] devlink_reload+0x1ae/0x7a0 [ 283.832864][ T30] ? __pfx_devlink_reload+0x10/0x10 [ 283.850026][ T30] devlink_pernet_pre_exit+0x247/0x370 [ 283.864998][ T30] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 283.884138][ T30] ? kobject_put+0xb9/0x640 [ 283.897274][ T30] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 283.914601][ T30] ops_undo_list+0x187/0xab0 [ 283.928783][ T30] ? __pfx_ops_undo_list+0x10/0x10 [ 283.942442][ T30] ? cleanup_net+0x332/0x920 [ 283.956366][ T30] ? cleanup_net+0x332/0x920 [ 283.968555][ T30] ? idr_destroy+0x62/0x2e0 [ 283.982266][ T30] cleanup_net+0x499/0x920 [ 283.993754][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 284.010295][ T30] ? rcu_is_watching+0x12/0xc0 [ 284.030118][ T30] process_one_work+0xa0e/0x1980 [ 284.044471][ T30] ? __pfx_process_one_work+0x10/0x10 [ 284.055510][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 284.066359][ T30] worker_thread+0x5ef/0xe50 [ 284.078911][ T30] ? kthread+0x13a/0x450 [ 284.092173][ T30] ? __pfx_worker_thread+0x10/0x10 [ 284.106835][ T30] kthread+0x370/0x450 [ 284.119672][ T30] ? __pfx_kthread+0x10/0x10 [ 284.133388][ T30] ret_from_fork+0x72b/0xd50 [ 284.148872][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 284.168925][ T30] ? __switch_to+0x800/0x1100 [ 284.184573][ T30] ? __switch_to_asm+0x39/0x70 [ 284.197447][ T30] ? __pfx_kthread+0x10/0x10 [ 284.210640][ T30] ret_from_fork_asm+0x1a/0x30 [ 284.234250][ T30] [ 284.241528][ T30] INFO: task syz.3.111:6276 blocked for more than 144 seconds. [ 284.274292][ T30] Not tainted syzkaller #0 [ 284.289365][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 284.302965][ T30] task:syz.3.111 state:D stack:28544 pid:6276 tgid:6274 ppid:5619 task_flags:0x400140 flags:0x00080002 [ 284.326141][ T30] Call Trace: [ 284.332923][ T30] [ 284.338550][ T30] __schedule+0x10e9/0x6820 [ 284.345838][ T30] ? __pfx___schedule+0x10/0x10 [ 284.357915][ T30] ? find_held_lock+0x2b/0x80 [ 284.376135][ T30] ? schedule+0x2bf/0x390 [ 284.397625][ T30] schedule+0xdd/0x390 [ 284.410816][ T30] schedule_preempt_disabled+0x13/0x30 [ 284.427842][ T30] __mutex_lock+0xced/0x1b10 [ 284.435936][ T30] ? devlink_health_report+0x66c/0xb20 [ 284.444640][ T30] ? __pfx_devlink_nl_notify_filter+0x10/0x10 [ 284.460631][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 284.471493][ T30] ? devlink_recover_notify.constprop.0+0x443/0x540 [ 284.485259][ T30] ? devlink_recover_notify.constprop.0+0x1e3/0x540 [ 284.496244][ T30] ? devlink_health_report+0x66c/0xb20 [ 284.501893][ T30] devlink_health_report+0x66c/0xb20 [ 284.512209][ T30] ? __pfx_devlink_health_report+0x10/0x10 [ 284.521509][ T30] ? _copy_from_user+0x59/0xd0 [ 284.529424][ T30] nsim_dev_health_break_write+0x166/0x210 [ 284.535465][ T30] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 284.542977][ T30] full_proxy_write+0x135/0x1a0 [ 284.548380][ T30] vfs_write+0x2aa/0x1070 [ 284.552856][ T30] ? __pfx_full_proxy_write+0x10/0x10 [ 284.559432][ T30] ? __pfx_vfs_write+0x10/0x10 [ 284.564732][ T30] ? __fget_files+0x215/0x3d0 [ 284.571304][ T30] ? __fget_files+0x21f/0x3d0 [ 284.576387][ T30] ksys_write+0x12a/0x250 [ 284.580859][ T30] ? __pfx_ksys_write+0x10/0x10 [ 284.589777][ T30] ? rcu_is_watching+0x12/0xc0 [ 284.597375][ T30] do_syscall_64+0x10b/0xf80 [ 284.602113][ T30] ? clear_bhb_loop+0x40/0x90 [ 284.607447][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.613492][ T30] RIP: 0033:0x7f78f659cdd9 [ 284.619729][ T30] RSP: 002b:00007f78f7376028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 284.628689][ T30] RAX: ffffffffffffffda RBX: 00007f78f6815fa0 RCX: 00007f78f659cdd9 [ 284.637218][ T30] RDX: 00000000000001e1 RSI: 0000200000000080 RDI: 0000000000000004 [ 284.645376][ T30] RBP: 00007f78f6632d69 R08: 0000000000000000 R09: 0000000000000000 [ 284.654713][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.663134][ T30] R13: 00007f78f6816038 R14: 00007f78f6815fa0 R15: 00007fffa97cce68 [ 284.672284][ T30] [ 284.675517][ T30] [ 284.675517][ T30] Showing all locks held in the system: [ 284.688118][ T30] 1 lock held by khungtaskd/30: [ 284.693178][ T30] #0: ffffffff8e7e52e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 284.721015][ T30] 6 locks held by kworker/u8:5/59: [ 284.729901][ T30] #0: ffff88801c6ae140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 284.745234][ T30] #1: ffffc9000201fd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 284.759255][ T30] #2: ffffffff905f47e8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 284.772804][ T30] #3: ffff88802a97a128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x19e/0x370 [ 284.783352][ T30] #4: ffff88802a97d258 (&devlink->lock_key#3){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x1b4/0x370 [ 284.794782][ T30] #5: ffff888077242cd8 (&sb->s_type->i_mutex_key#9/2){+.+.}-{4:4}, at: __simple_recursive_removal+0xe0/0x5c0 [ 284.812384][ T30] 2 locks held by getty/6089: [ 284.821454][ T30] #0: ffff8880374980a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 284.831815][ T30] #1: ffffc900054732e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 284.843711][ T30] 3 locks held by syz.3.111/6276: [ 284.855872][ T30] #0: ffff8880371709b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 284.865127][ T30] #1: ffff8880202d2410 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 284.877848][ T30] #2: ffff88802a97d258 (&devlink->lock_key#3){+.+.}-{4:4}, at: devlink_health_report+0x66c/0xb20 [ 284.894220][ T30] 6 locks held by syz.4.439/7823: [ 284.902847][ T30] #0: ffff888034e10ef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 284.915755][ T30] #1: ffff888035e90410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 284.928876][ T30] #2: ffff88805b5c1c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 284.942584][ T30] #3: ffff888029377f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 284.958211][ T30] #4: ffffffff8fb7ee00 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 284.975943][ T30] #5: ffff88802a97a128 (&dev->mutex){....}-{4:4}, at: device_del+0xa0/0x9b0 [ 284.984945][ T30] 4 locks held by syz-executor/8272: [ 284.992365][ T30] #0: ffff888035e90410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 285.005872][ T30] #1: ffff88805baf4080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 285.019686][ T30] #2: ffff888029377f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 285.034827][ T30] #3: ffffffff8fb7ee00 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 285.055805][ T30] 4 locks held by syz-executor/8517: [ 285.062834][ T30] #0: ffff888035e90410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 285.076267][ T30] #1: ffff88802d08b480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 285.090076][ T30] #2: ffff888029377f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 285.116097][ T30] #3: ffffffff8fb7ee00 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 285.126926][ T30] 1 lock held by syz.1.594/9445: [ 285.135383][ T30] 1 lock held by syz.1.596/9454: [ 285.143917][ T30] 3 locks held by syz.1.600/9475: [ 285.153602][ T30] 2 locks held by syz.5.608/9531: [ 285.162330][ T30] [ 285.166326][ T30] ============================================= [ 285.166326][ T30] [ 285.186057][ T30] NMI backtrace for cpu 1 [ 285.186077][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 285.186110][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 285.186127][ T30] Call Trace: [ 285.186136][ T30] [ 285.186147][ T30] dump_stack_lvl+0x100/0x190 [ 285.186184][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 285.186221][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 285.186265][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 285.186315][ T30] sys_info+0x141/0x190 [ 285.186354][ T30] watchdog+0xcb1/0x1030 [ 285.186404][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 285.186438][ T30] ? __pfx_watchdog+0x10/0x10 [ 285.186481][ T30] ? __kthread_parkme+0x18c/0x230 [ 285.186524][ T30] ? kthread+0x13a/0x450 [ 285.186547][ T30] ? __pfx_watchdog+0x10/0x10 [ 285.186586][ T30] kthread+0x370/0x450 [ 285.186611][ T30] ? __pfx_kthread+0x10/0x10 [ 285.186640][ T30] ret_from_fork+0x72b/0xd50 [ 285.186674][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 285.186709][ T30] ? __switch_to+0x800/0x1100 [ 285.186756][ T30] ? __switch_to_asm+0x39/0x70 [ 285.186794][ T30] ? __pfx_kthread+0x10/0x10 [ 285.186824][ T30] ret_from_fork_asm+0x1a/0x30 [ 285.186883][ T30] [ 285.186921][ T30] Sending NMI from CPU 1 to CPUs 0: [ 285.320997][ C0] NMI backtrace for cpu 0 [ 285.321019][ C0] CPU: 0 UID: 0 PID: 56 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 285.321046][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 285.321061][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 285.321106][ C0] RIP: 0010:check_preemption_disabled+0x1a/0xe0 [ 285.321139][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 54 55 53 48 83 ec 08 65 8b 1d 65 08 83 08 65 f7 05 56 08 83 08 ff ff ff 7f <74> 0f 48 83 c4 08 89 d8 5b 5d 41 5c c3 cc cc cc cc 9c 58 f6 c4 02 [ 285.321161][ C0] RSP: 0018:ffffc900015d7680 EFLAGS: 00000046 [ 285.321179][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff91852c01 [ 285.321194][ C0] RDX: 0000000000000000 RSI: ffffffff8e00ab8e RDI: ffffffff8c1c2100 [ 285.321208][ C0] RBP: ffffffff81b761ae R08: 0000000000000001 R09: 0000000000000007 [ 285.321222][ C0] R10: 0000000000000200 R11: 000000000001749d R12: ffff88801db2dc40 [ 285.321237][ C0] R13: ffffc900015d7760 R14: 0000000000000202 R15: ffffc900015d7794 [ 285.321253][ C0] FS: 0000000000000000(0000) GS:ffff888124380000(0000) knlGS:0000000000000000 [ 285.321276][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 285.321292][ C0] CR2: 00005555669e8a28 CR3: 000000005a64e000 CR4: 00000000003526f0 [ 285.321307][ C0] Call Trace: [ 285.321314][ C0] [ 285.321323][ C0] ? unwind_next_frame+0x3be/0x2090 [ 285.321353][ C0] lock_release+0x9a/0x310 [ 285.321376][ C0] unwind_next_frame+0x3c3/0x2090 [ 285.321403][ C0] ? kasan_save_free_info+0x3b/0x70 [ 285.321436][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 285.321467][ C0] arch_stack_walk+0x94/0xf0 [ 285.321505][ C0] ? __kasan_slab_free+0x5f/0x80 [ 285.321529][ C0] ? kfree_skbmem+0x19a/0x210 [ 285.321557][ C0] stack_trace_save+0x8e/0xc0 [ 285.321585][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 285.321615][ C0] ? __lock_acquire+0x4a5/0x2630 [ 285.321635][ C0] ? consume_skb+0xc4/0x110 [ 285.321657][ C0] ? ieee80211_iface_work+0x468/0x13e0 [ 285.321691][ C0] ? cfg80211_wiphy_work+0x410/0x570 [ 285.321722][ C0] kasan_save_stack+0x30/0x50 [ 285.321745][ C0] ? kasan_save_stack+0x30/0x50 [ 285.321766][ C0] ? kasan_save_track+0x14/0x30 [ 285.321786][ C0] ? kasan_save_free_info+0x3b/0x70 [ 285.321838][ C0] kasan_save_track+0x14/0x30 [ 285.321859][ C0] kasan_save_free_info+0x3b/0x70 [ 285.321888][ C0] __kasan_slab_free+0x5f/0x80 [ 285.321911][ C0] kmem_cache_free+0x127/0x6c0 [ 285.321941][ C0] ? skb_release_data+0x6ca/0x8e0 [ 285.321964][ C0] kfree_skbmem+0x19a/0x210 [ 285.321992][ C0] consume_skb+0xd1/0x110 [ 285.322014][ C0] ieee80211_iface_work+0x468/0x13e0 [ 285.322051][ C0] cfg80211_wiphy_work+0x410/0x570 [ 285.322085][ C0] process_one_work+0xa0e/0x1980 [ 285.322116][ C0] ? __pfx_process_one_work+0x10/0x10 [ 285.322143][ C0] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 285.322179][ C0] worker_thread+0x5ef/0xe50 [ 285.322206][ C0] ? __pfx_worker_thread+0x10/0x10 [ 285.322229][ C0] ? kthread+0x13a/0x450 [ 285.322248][ C0] ? __pfx_worker_thread+0x10/0x10 [ 285.322269][ C0] kthread+0x370/0x450 [ 285.322288][ C0] ? __pfx_kthread+0x10/0x10 [ 285.322309][ C0] ret_from_fork+0x72b/0xd50 [ 285.322333][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 285.322358][ C0] ? __switch_to+0x800/0x1100 [ 285.322387][ C0] ? __switch_to_asm+0x39/0x70 [ 285.322416][ C0] ? __pfx_kthread+0x10/0x10 [ 285.322437][ C0] ret_from_fork_asm+0x1a/0x30 [ 285.322473][ C0] [ 285.670637][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 285.677537][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 285.686692][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 285.696778][ T30] Call Trace: [ 285.700079][ T30] [ 285.703027][ T30] dump_stack_lvl+0x100/0x190 [ 285.707735][ T30] vpanic+0x552/0x970 [ 285.711734][ T30] ? __pfx_vpanic+0x10/0x10 [ 285.716252][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 285.722446][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 285.728634][ T30] panic+0xd1/0xe0 [ 285.732375][ T30] ? __pfx_panic+0x10/0x10 [ 285.736812][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 285.742996][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 285.749174][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 285.755356][ T30] ? watchdog.cold+0x1ec/0x234 [ 285.760136][ T30] ? watchdog+0xcc1/0x1030 [ 285.764596][ T30] watchdog.cold+0x1fd/0x234 [ 285.769212][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 285.775048][ T30] ? __pfx_watchdog+0x10/0x10 [ 285.779756][ T30] ? __kthread_parkme+0x18c/0x230 [ 285.784826][ T30] ? kthread+0x13a/0x450 [ 285.789103][ T30] ? __pfx_watchdog+0x10/0x10 [ 285.793845][ T30] kthread+0x370/0x450 [ 285.797959][ T30] ? __pfx_kthread+0x10/0x10 [ 285.802591][ T30] ret_from_fork+0x72b/0xd50 [ 285.807218][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 285.812362][ T30] ? __switch_to+0x800/0x1100 [ 285.817078][ T30] ? __switch_to_asm+0x39/0x70 [ 285.821872][ T30] ? __pfx_kthread+0x10/0x10 [ 285.826484][ T30] ret_from_fork_asm+0x1a/0x30 [ 285.831289][ T30] [ 285.834718][ T30] Kernel Offset: disabled [ 285.839061][ T30] Rebooting in 86400 seconds..