last executing test programs: 5.659823193s ago: executing program 0 (id=1845): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2b, 0x1, 0x1) r1 = getsockopt$auto(r0, 0x0, 0x80, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2082, 0x0) r2 = socket(0xa, 0x2, 0x0) socket(0xa, 0x80003, 0x3a) socket(0x2b, 0x1, 0x1) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x50100, 0x0) mmap$auto(0x800000, 0x400008, 0x10040000000009, 0x100000000000d256, 0x2, 0x7ffe) shmctl$auto_IPC_INFO(0x5, 0x3, 0x0) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop6\x00', 0x14f602, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r3, 0x8000) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) ioctl$auto_BLKRRPART(r3, 0x125f, 0x0) madvise$auto(0x0, 0x400053, 0x9) socket(0x11, 0x3, 0x9) r4 = ioctl$auto_TUNSETVNETBE2(0xffffffffffffffff, 0x400454de, &(0x7f00000000c0)=0xff) setsockopt$auto_SO_TIMESTAMPING_OLD(r4, 0x0, 0x25, &(0x7f0000000100)='/dev/tty12\x00', 0xfffffff9) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/fs/cifs/smbd_keep_alive_interval\x00', 0x88040, 0x0) pread64$auto(r5, 0x0, 0xcd5, 0x8) setsockopt$auto(0x400000000000003, 0x29, 0xd4, 0x0, 0x4) connect$auto(r2, &(0x7f0000000040)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x7) r6 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) ioctl$auto_EVIOCGRAB(r6, 0x40044590, &(0x7f0000000000)=0x2) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_NAPI_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x84}, 0x20000080) 5.632973991s ago: executing program 3 (id=1846): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x9, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x5, 0x0) openat$auto_stat_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) close_range$auto(0x2, 0x8, 0x0) timerfd_create$auto(0x9, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_KEY(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000880)=ANY=[@ANYRES64=r0, @ANYRES16=r1, @ANYBLOB="000129bd7000fddbdf250a00000008000d0001000000080026000800000008003500050000000800c400090000002c004f003e6294e2d5d71455bc4d54d2dfcec2d40aebfca49c0e5c0a08380d0df1105a95931d0809ac5cd0c508006900ffffff7fc8021d8014000080060005000200000004000400040004002400008005000600b4000000050009000300000005000a000600000005000800050000003c0000800c00030007d200000000000005000a0004000000060005000700000005000900020000000c000200000000001400000005000900400000002400008005000c00080000000500090009000000050009000400000006000500090000002c02008004000400060005000300000028000d80090001001dbf45f86e000000050007000400000005000700050000000500070001000000050007004b000000dc010d80e60003005fe6366daf23e28cd585f7a7169f9ee91652499601bee3f00de10d39f9d7ce5cf1f7854333b6d5df478e811ae2dff1d31173e9b7604e36d1cd687947500d6e4180a0cb1b9a502d1f39803c04f2477dbbe853447ad07e264078d7d8fd7829094a9e4f5eb78386af192b6baba0e2f0589b8e582dba4e140b27aafbd28e3bc7a08af084224a58438a4a6e32c385b35669cabef47c103c53d30f82c0eb2fc85ae00ec718df04ce5abb20ff424bec0544bbc69b1707c736ddb0f01ac50130c84009ff246d09de5869c30708c651b8d007d2e05cb1676593b6ec0e2193091b4eeeb8c471a50000050006000000000005000400030000001a00010027643babb49cc2f3a4d0597ba3421dd16a02273a456c0000bc00030066f8e4b58a5fa770e59be9f4abc57590f10e73ee4a0667c29cfdd31fdfc6f27e61249e711f853ef7305a33f5598434a66315d89f82f8e98f709670bc156db97fee631931cda62835658715e84f874092fd28a79be353e5cb98b9a60021f21cec8a78bc90beda81f28b073c73c2204d8902cf5bae807c33a0f3219c5bf1647556b2a80ab32b315346459c588fb6dc4217623867f0578062562af3a1d443e41bcd1e63f5c5f6daaf1a5deca2af10889409aa8511da050007000500000005000c008400000005000b00060000001e00060037d1e74dac801696d948e641f5721df0c4b55f5c6502c314b48f0000080035000000000000000000"], 0x358}, 0x1, 0x0, 0x0, 0x4004}, 0x41) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x20003b46, 0x7, 0x0, 0x0, 0x2) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)="bdcda609d0dd307ad1695e8740fefb7f2c", 0x11) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @local}, 0x54) socket(0xf, 0x2, 0x0) socket(0x15, 0xa, 0x84) read$auto(0xffffffffffffffff, 0x0, 0x4) r3 = socket(0x10, 0x2, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon35\x00', 0x18b902, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_REPORT_PMSR(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x24040851}, 0x4000000) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/tty57\x00', 0x105800, 0x0) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) ioctl$auto(0xffffffffffffffff, 0x8911, 0xffffffffffffffff) 4.808538155s ago: executing program 0 (id=1848): r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd13/trace/pid\x00', 0x62142, 0x0) write$auto(r1, &(0x7f0000000040)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r2 = socketpair$auto(0x1, 0x5, 0x0, 0x0) writev$auto(r0, &(0x7f00000001c0)={&(0x7f0000000180)="f6235fd08033dcb73d3416602a2ce055aa2816e61f30ec808e3cbb7179c0d49706045f05cfbb9fbac2f82a9f", 0x800}, 0x800) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), r2) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000002b80)="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", 0x1ffffffff}, 0x6, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r4, 0xc01070ce, r2) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) unshare$auto(0x2ee46) setsockopt$auto(0x3, 0x10000000084, 0x7c, 0x0, 0x7) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/net/softnet_stat\x00', 0x18b082, 0x0) pread64$auto(r5, 0x0, 0x400100000001, 0x1ff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000140), r0) sendmsg$auto_NL802154_CMD_ABORT_SCAN(r2, &(0x7f0000002a00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000029c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f4260000", @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="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"], 0x26f4}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r7 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mincore$auto(0x1000, 0x8001, 0x0) ioctl$auto_TIOCGPGRP2(r7, 0x540f, &(0x7f0000000000)="90c81bf9ce1d7d5abfd6d16fc4e6beaf4c3bd3a229def0434ae0d3de4b7538006a9b1f80316a29fd10204337c0299bd809a43a3f9780b2daa147819171cbcd65677a78a6b8cec2ce0090e64de3a37c3e7dde974243016ae4de4499c92da903fc9a144eb0ffe4c4e5c9103af8a4e8225fa4638118a0beed3ff21c8fda42dd033436f9826f45bc7ea3512240") mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r8 = socket(0x11, 0x1, 0x6) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r8, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) 4.737284664s ago: executing program 3 (id=1849): r0 = socket(0x2, 0x3, 0xa) mmap$auto(0x5, 0x4, 0xc00000072, 0x10, r0, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) (async, rerun: 32) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) (async, rerun: 32) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') (async) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x5, 0x3, 0x3fda, 0x8, 0x7fffffffb000) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 32) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/pci0000:00/0000:00:03.0/subsystem_vendor\x00', 0x28200, 0x0) (rerun: 32) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000001c0)=""/234, 0xea) (async) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r2, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) (async) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000100)=""/184, 0xb8) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) madvise$auto(0x0, 0x2003f2, 0x15) (async) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(r1, r1, 0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) (async) io_uring_setup$auto(0x5d, 0x0) (async) socket(0xa, 0x1, 0x84) (async) r5 = bpf$auto(0x0, &(0x7f00000001c0)=@link_create={@map_fd=r4, @target_fd=r2, 0x6, 0x99e, @perf_event={0x2}}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@bpf_attr_3={0xe620, 0xd386, 0x0, 0xe4, 0x2, 0x3, 0x29, 0x3, 0x1000, "371918b82a0525d63061724f95d67eef", 0x0, 0xf, r4, 0x1000, 0x2, 0x5, 0x6, 0x40, 0xfd, 0x5, @attach_btf_obj_fd=r2, 0x4, 0x2, 0x5, 0xfffffff9, 0x8000c5, r0, r5}, 0x92) (async, rerun: 32) bind$auto(0x3, &(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x7ffe}, 0x66) (async, rerun: 32) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) (async, rerun: 32) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @local}, 0x54) (rerun: 32) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) 4.356836699s ago: executing program 3 (id=1850): close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000000040), 0xa0e40, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) capset$auto(0x0, 0x0) capget$auto(0x0, &(0x7f00000000c0)={0x5, 0x3, 0x3}) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/arp\x00', 0x80, 0x0) pread64$auto(r0, 0x0, 0x204, 0xa1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/bus/usb/drivers/usbtest/remove_id\x00', 0x181102, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_register$auto_IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) r3 = io_uring_setup$auto(0x0, 0x0) r4 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r4, 0x0, 0x8fb5) dup2$auto(0x0, 0x3) ioctl$auto(0x3, 0x541b, 0x10000000000402) r5 = socket(0x11, 0x3, 0x9) write$auto(0xffffffffffffffff, &(0x7f00000001c0)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1dS\xf2~>\xb1\xc6\xd1\xee\xc8\x19e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}\xfcD', 0x100000002) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r5, &(0x7f00000006c0)={{&(0x7f0000000000), 0xe, &(0x7f0000000100)={&(0x7f0000000200)="4c03000000000000002f", 0x2000000000000049}, 0xd, &(0x7f0000000300)="000000000000000000000000dc36045ad00000390f664b1ac8a03e98057a3ee138198f38afe4321113392ca1ffac", 0x5, 0xfffffff9}, 0x8}, 0x2, 0x100100) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r6) r7 = ioctl$auto_KVM_CREATE_VM(r2, 0xae80, 0x0) r8 = syz_genetlink_get_family_id$auto_ila(&(0x7f00000000c0), r7) write$auto_tomoyo_self_operations_securityfs_if(r1, &(0x7f0000000240)="77f4255d0ed7bdbc4df64687afbc2c888f39190a8ffab89f8a29387342cb59f193d7f07e2767f757a602583c8742bb706f8a95e19c26ae6d3a7aa4c0f8121f57efe36373cc7250cf801bd1755893c48c17b0cf70ae52779df015936a0eac7467ff15b6945dea4c62a74f24ee07903adaea18cd800b86a4e967e8a00c026151cec62f4855901acaad018a9216f557c0514aec4f3ca767e0", 0x97) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$auto_ILA_CMD_GET(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000227bd7000fcdbdf25030000000c0003000900000000000000050008003f00000005000800ee00000008000400", @ANYRES32=r9, @ANYBLOB="05000800020000000c000300010001000000000005000700fbff00000c000300ff00000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x404c005) close_range$auto(0x2, 0x8, 0x0) 3.757645789s ago: executing program 3 (id=1853): r0 = openat$auto_ima_measurements_count_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x334c, 0xeb1, r0, 0x3) mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0xb, 0x0) r1 = socket(0x2, 0x5, 0x0) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x4e24, @private=0xa010101}, 0x631) sendmmsg$auto(r1, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) close_range$auto(0x0, 0xffffeffe, 0x2) r2 = openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, 0x0, 0x181441, 0x0) socket(0xa, 0x1, 0x84) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x480, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0xd) io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000280), 0x1) fcntl$auto_F_RDLCK(r2, 0x4, 0x0) io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x4, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000004000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x4000000) bpf$auto(0x8000000, &(0x7f00000001c0)=@test={r3, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac5, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x1c00000000000000, 0xffff, 0x6, 0x81, 0x68198}, 0x6) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x4080) rt_tgsigqueueinfo$auto(0x3, 0x96, 0x1, &(0x7f0000000180)={@siginfo_0_0={0x80000000, 0x4007, 0x8000}}) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r4 = open(&(0x7f0000000040)='./file0\x00', 0x2041, 0x32) write$auto(r4, 0x0, 0xfffffdf1) fsetxattr$auto(r4, &(0x7f0000000180)=':\xbf+<\x8a}\x00\xeb\xfa\xe6\x8d\x02\\VD\x04\x00\x00\x00*\x80\xa4\xf4vql\xa9\x05o\xf7\x9e\xfd\xf7\x00\x00\x00\x00H_/Z>n\xf5F\xbf\xd3\xefi\x91\x88\x1daIu7\xef!\xd0\x04\xdes\xfe`\xf5e;4\xbek\xf9\xec%\xbc\xd4\xfc`\xb9\n\xb5\xa5V\x98\x14]\x8a\x03\xd9', 0x0, 0x7bd, 0x1) ioctl$auto_FS_IOC_SETFLAGS2(r4, 0x40086602, 0x0) mprotect$auto(0x0, 0x8000000000000001, 0x8) 3.34910635s ago: executing program 0 (id=1855): socket(0xa, 0x3, 0x3a) preadv2$auto(0xffffffffffffffff, 0x0, 0x6, 0x3, 0x4, 0x2a) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r0, 0x8000) mmap$auto(0x0, 0x202000a, 0x5, 0xfffffffffffffffb, 0xfffffffffffffffa, 0x2) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x15, 0x5, 0x0) rt_sigsuspend$auto(0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r1, 0x29, 0x39, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x2010f) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r2, r3, 0x0, 0x1000200) close_range$auto(0x0, 0xfffffffffffff000, 0x2) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x3000, 0x8000006, 0x4, 0x7fffffff, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29f, 0x100, 0x77fffffb, 0x101, 0xb0d, 0x3}, {0x100, 0x1, 0x52, 0x5, 0x2, 0x40, 0x76c5, 0xb, 0x100000000}}) epoll_create$auto(0x3e) socket(0x10, 0x2, 0x9) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x7, &(0x7f00000002c0)={[0x3, 0x9, 0x4, 0xd0, 0x5, 0x400, 0x1192, 0x2, 0x9, 0x3, 0xa5, 0xb89, 0x80000000, 0x4000000000000, 0x1]}, &(0x7f0000000340)={[0x9, 0x8, 0x7fff, 0x40, 0xff, 0x0, 0x2, 0x7, 0xc27, 0xe, 0xed2, 0x5, 0x7, 0x9, 0x43b, 0xff]}, 0x0, 0x0) io_uring_setup$auto(0x56, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x400, 0x9, 0x4, 0x8, 0xffffffffffffffff, [0x3, 0x10000], {0x10006, 0x6, 0x2, 0x29f, 0x1, 0x84, 0x101, 0x17f, 0x2}, {0xff, 0x401, 0xfffffff9, 0x80005, 0x1, 0x7, 0x4, 0x7, 0x7}}) r4 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000180), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 3.256459538s ago: executing program 2 (id=1856): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp6\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0x100000000008, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000cfaec27eaf34170f2c64d6175b93", @ANYRES16=r2, @ANYBLOB="000500007000ffdbdf250e00000008001a000500000005002900000000000a000800aaaaaaaaaa1b00bed791c98880bac89622000400"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c000) 3.129266188s ago: executing program 1 (id=1857): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x3, 0x2020009, 0x3, 0x14, r0, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000380)="7a47301037954c081c9a0bb84bb7b04ef84993eab91abe1686f43e43d786e964e8f04455bd620de9f3fb6d65e6c078c1a672c549dbc7870faaa725e32cffe084bfc00dd4eef57cedc0cc4156ff6a5b0aa8ba9511fe2b07c6e7f4732fe36ba218aa5b0ff402f2e6adb8ea60886c1e52c60d7d87e4c0551386501763ad09826443b21d17d3c9bc59a82f9d4d8eb2b9602f83b2a643399f10dfdb0f4018bc01be4db675d06acf338cbe20fcb76439ca602a3c022f4463a8820f0000865d24e058af98f0c48bf552c3f6cc5620d5647789a2820a629f553e16390928c09d9054347db3c28701c67fa1e57d81b881638b518dd8e24969b7fd10406fcf6eb9bb66bf56ed756851") mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) socket(0x8, 0x2, 0x0) setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x4) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/audio\x00', 0x80000000) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) execve$auto(&(0x7f0000000040)='./file0\x00', &(0x7f00000004c0)=&(0x7f0000000340)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5', 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x1f40) read$auto(0x3, 0x0, 0x8080) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) madvise$auto(0x0, 0x2003f2, 0x15) openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x202, 0x0) syslog$auto(0x7fff, &(0x7f0000000280)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e0x0, 0xffffffffffffffff, 0x7f, 0x7, 0x7, 0x6}, 0xf) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@prog_fd, @target_ifindex=r1, 0x3, 0x81, @uprobe_multi={0x3, 0x1ff, 0x3d7e, 0x1000000000000000, 0x1, 0x4}}, 0x96) 2.928479614s ago: executing program 2 (id=1859): rt_sigqueueinfo$auto(0x0, 0x2, &(0x7f00000001c0)={@siginfo_0_0={0x4, 0x5, 0x2, @_timer={0xffffffffffffffff, 0xb, @sival_ptr=&(0x7f00000003c0)="65e736fc5462452c4ca7f30ea3902ea9724fc008ccc57c6672d20429564a741c188c25c14bd8eb1e52ccdcc906b3cdd7446b56027bf55ff34c9bf7eaa40ea04a8c896eda4a2a0ae7317a30b06eac843dc66f6dd81c8c1d5b34e0747a6167da1e26b840b45f1ae37b36c5c493d59329cf03e242cff57ee774f69776bea9be68544d9e67", 0x6}}}) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x2, 0xffffffffffff0005, 0x3) socket(0xa, 0x2, 0x3a) open_tree_attr$auto(0xffffffffffffffff, 0x0, 0xfffffffa, 0x0, 0xfff) mmap$auto(0x2000000000, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x11, 0x2, 0x9) ioctl$auto(r0, 0x18, 0x24) socket(0x29, 0x2, 0x0) unshare$auto(0x20000080) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid$auto_P_PGID(0x2, r1, 0x0, 0xfffffff9, 0x0) close_range$auto(0x2, r0, 0xc70) r2 = socket(0x2b, 0x2, 0xc) mmap$auto(0x80000000, 0x202, 0xa, 0x1000000000000eb1, r2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x2000, 0x0) mmap$auto(0x0, 0x20008, 0x4000000000e2, 0x19, 0x401, 0x408000) r4 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x6}, 0x9, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r5, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x2000000006, 0x2) landlock_restrict_self$auto(r4, 0xb) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002cbd7000fddbdf251800000018000180140002007663616e30000000000000000000000005000600000000001400018008000100", @ANYRES32=0x0, @ANYBLOB="18000300020012000500060041000000"], 0x50}, 0x1, 0x0, 0x0, 0x600c880}, 0x800) write$auto_proc_sys_file_operations_proc_sysctl(r4, &(0x7f0000000080)="41e25e72d5a7bb8e77e4d891422b37c462f088e18adce2ed278c35d2c7c25a3acacba26b35459d039ac645c278b1fbf2d3a9e8164d61bf9996a28bf11a52d793d60066b4ed1ec13b55183d9f2392b3c4e3aa188c699dbd6c21a3ae80b7c7887d9612ade171dbbadfbb021a176a4e9634f5dea3d2306403a41dfda4618758d99efbc28ea197de4aa050fffb563bcdb3c7cf562e", 0x93) pread64$auto(r3, &(0x7f0000000040)='/proc/scsi/sg/devices\x00', 0x10001, 0x3) sysfs$auto(0x2, 0x7, 0x100) 2.61851629s ago: executing program 3 (id=1860): openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000000080), 0x5cdd80, 0x0) mmap$auto(0x100000000000, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f0000000280)=""/40, 0x28) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/smaps_rollup\x00', 0x0, 0x0) lseek$auto(r0, 0x7fd, 0x1) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x8, 0xc00000072, 0x8b72, 0x1000000002, 0x0) r1 = openat$auto_proc_timers_operations_base(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) bpf$auto_BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)=@link_create={@prog_fd=r1, @target_ifindex, 0x5d, 0x8fa7, @kprobe_multi={0x6, 0x5, 0xff, 0x2, 0x200}}, 0x9) io_uring_setup$auto(0x86, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0xa0001, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) 2.220012429s ago: executing program 2 (id=1861): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = open(&(0x7f0000000040)='./file0\x00', 0x2041, 0x32) write$auto(r1, 0x0, 0xfffffdf1) rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00') io_uring_register$auto_IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000000c0)="5a288865e70f64b4dac9d25f206f9f7630b3745568e4ef16c82ed4c89d46586c48302c51cdf55c328117e16549071f1f5abc88aecbd1ef0f8c5f28b6f8f9a853104c78a535120ffb909a7a04130afb8ce8decdf2a40e992850f869e54eeb462de4eb850f81d9e0e9ca966f6bee93846015327a5c1840860a30bc3d977164fe635b85d4773f1cbd5fac3cf5bac102eb8738f4343ebe1c219d1fda2faf78234d48990d2e8f6d20c73f0d7d82c35c655ea27bbac8220587f43c8f7942ffe901d3b711e04f4749ab7f73b3a3d6032f281226544b1291b39b41e1c2e0057a7486dacf5cc8a50ee70c53d85cb4c4a92bd1588dd740aa791f287c535a6d5eff4efb82bfb836b678f552ed890e664dca3352c48b57abdd26eff5647e83e25b6fdf2eb539b2a9d3b3abaf20a0aba947da2f9498945969765ffa69c0e02bf2858661ca5d22e433d8f21957a93e39f5cc868094e3f1df8b032dc5036ad6e7e5af22ade937abfa57a9957fa711b88fb9a2b50507d2163c1088017afe291284673b455f9676f56431f3f4211f1ca9139661bb09a0e1020ff6ef365bf6443f3dc4456b4ff8a361a7992ee2f8ac2cd82aee09d16fc447cd2a47986cc5be070aee7d597b13874e584c50f5e8b620013001d5fb5a03d260580c9b8cd58ebbf4a22e4eddc4db2267fc3d327783323380297599a9f48bd27debb5e002deb6d770b0071273febf80bfe7ce8e71beb1886686d8525346e9566dd82d68feb9756101473e427e2cca75d2e6275c3f80b2fb27ceba556933fa088126543a63fd7a709ef84866554311bbb067f6874de1d0c793620f9eb873e60c7a16a293cba6bafc3487079ebc95b64b513e1a67f1eb3d2ab744a0ba44cf914c60685f6ead117a6fbedae664823ffc5d731a47686255f6d630ab2a66cd844c7eb6d1b1ecdfbfc5112fa8093c4c5ab4b2f3f24e889c25486af2d4d9b7c858754b858c3f758bd3f091d47cd194d358bcb5f12cb8af561a45a5a8d1a05de9470f98e7638ac7ac0e293d2a32ed3e6d6dbe0235bbdee012cbf24b1ba1df24089fc7c6a99ff07170369f54d19f03a5492217d91a17f8e3706fff7d177e2e89d5d0641e223ba197b17645a5c5f5ff1b523c47bc0e7eb97db04764f5d4b5ea1446ad55dd9c27313aedf21cf4ddeaaebfcfddbad4d8ddeff9484b0acd48faad0d1080156a4988a8a0016c0a4d1beecf6d9e076e68cb334c580bc1f9a78543ee5469f0e77ad6a9eaf78de0e0a2a83b26fc2a23fd46861212332258c19a0f69832e3eb1d394f1cc84bdc75cbfb7b75c9dafec2f4fa9a09a0489dff9166e50689ed5c3cdef98a3d27e52b56128b241d9b989d97642adf67fe3e90a0a7a024a64367349d9608fcc2d3d41b0d1196eb72d39dba248dd858d4c947dbbce2e45e73ec84ef9760da00445b2ce166dc1368a5865248f58986b2751391f5469e3cc2cfc8d0d76b8e65fa6455e914f352d078705fc8705e857b2766f8b977f679646d6c6cafb75550ea7151a1a45533e0259980303c8d921d0bcd9d959a9bd1f269c1d528457b45bb037c08dbef2d8ff237b7e500c200cd001d5511717195fb3f570d3f34123b3875edb41f99c4a118023faefc4866c813465ba61fd05297840dc08706290902f242c7e6dda4d76319dc95f9358d0d972506c84fce854d29f98245319c6fb5622d23bc9bf432dd03099f54bf657075b6b791840d6bd3a6f3ef38bdff7e194fe596bc2a21555ee90fb857938dc31c8b8b24636d3aa13969f96a7a74a19e193075feec794563f39743d81df5dedf07b15a9ad28009353cd4ef35fd8b30b640f2d7d04a31ef767c7c4f245fbb748fd906166336dd88c5ff4b5ac94dad6d92762e5cf14803f16013638a5a8a5c179c304376934574462f3fb2c10458a1efb77270c68a1e8795cc94bcae05d73f73b20f8cd7acb34cb4eb8702e61d87d3af9addae1f170ee2410f2aec88fa458bb65d30f9360fb446c5afa774c927676f8b0d9d9cd1ad61102e19337f21b9434b9f21e225f6eeaf9045c5dd495c13b6a125a4065e15987bab50da489563ea9e63f42e933995d903b07fd0c9c39922a417a8fe5ac704b52f4efe9c0b5c8501f95331b1edebf2156b148b5288911e9bc1f89a26060076986da28a02ed15dfc555e5ea6b7907f37af98672e5bc9186d53f02fc68bc63ee39845ccd311a683af1b12198dc5ede8a4bfb19a9ddb50d1cf6c47451c7e70da3ac6c33a06c9a0a586c50391031303052ead9a0e8bab7ff206d3ed8cff4112fdae76d55c8a14c11299d27c1476609bb664000d10cb95e89f34c329a0f4c92e6e85612bda10ad4abf638fdf0440f535dfca492365939c892e3026eb2f8130cf84e96ea25987743fca8b94d00efbb4a2b3eeea92eadb3b3cf5124231510b7676d6bb1e22b9911b4fad95e4b6e962666071b15a5d0bcd24bde8093419ba33830ce621bb6c7c009956aebab524303f15512da4b00c55edefe92e082c270596abae0ee34ed51f23029ebaaeb21cb2e17339d257d60ad610f50070f620a97824a20eb352737858ab5c2cf9b2629fe687cde631b7fcd81b890d81e4763bfb09fb22c346546662c7f08c6c4b5648a52477e5372320709a6d4d9c68364d2e0f1d73961a62f4f541f14dc51fbc73e630db7c7a57bbabd77768b05763b57272868778858e18bb081e05789259dae52f7b729d842a94a2f339b73a0563f6543e65b92ca2db04f34a883967c9d42ed7d5e764f2866838b841b3054d83a14f0f15b3cc8522c00a54d764efb327061c5286396c720443f0a2efea71720249b086121eb0963c4852e1a07f6efe7cec4d8c61ef7e8d42176de16528c77777e5e82530add50a18e26b04b5b3eee825e205c33ce51a23b80b1cf8dc52327cf89860f519c476f34654935a118c177b994b3f19dc60eb61573b6b448e7a76644795be23f3dd2ecc343d3283abebc2dc3fd5d1040b6f1628d9e1e59d05af17ef799d550876d14884d7eca0a9fb983b9c1ffa648cac8cb6d5041552128c5d6f4d16dd8d106316f76643b93a54f0a34a7956db12d0848b134c666e32d86ca2bce0c86429472c7597f10e5e645b652d3f80daabeabb57cf69cc2fa809b18d5814e5e6bcda02c462e7a6058416af8d9d3d1a0f963b228c29292d20d8250b62e72f849bc73adf7c262e35a072c952cdcafa1ebcc1ad3f66175ea5cb1b139b0506120a88ab1d74779171af5dc701dc84bfb03cb641707df53ea889acccd15597a08e29251af447f48df1909a8fc63b1a96e44dcba52d44ac0227dd54b806eeb71d5a3c398154743396946f6e3e5d27b00b7a0fbbf54f7348231d441d62e2e39001d9b1c66dddfd2b1105c2d6e8c5337325d3198e334c072429b3bbbda94377b4d1a8309d8ff0853524b158e3b768c58be408cb791090efaf4a9dc44d7470362c0c2d57fb3b514ecc8e87360fadc2993a3492494c14bb72ed51ec7d28327ed5f5d37bdce911f918cb7543ffe7929cfef37fa6d905a22fc133a0de61fdc12fee26f54d957dc408ada813a2aebb39932e2a675fc2de76ac6a5aefc4b2603515bc8b84040082b216eba51f430181d00f5d233e6ddcdeb782f35cdc84f717967f428f8a0d34dd06518630c2c3ca4ab721a8b98653b52f416d7b8161fff5d48a31b5258b08e6977b2b3f635c996326a699a66d261bd628870db663b224d686db20c3507882f1f5a41b80211e2d3526896698967eeafe94cb3119e24634becdf2e0a286a6a1cbb1ee2965cc9b1cf91050035503cb4d427cdca9cce6218609944ffbf63f01495061383483cddd16d1027ff81c22efe96c2dcc3f5dbde3b66117f44bc84952240be7a21d314435d5c36ac9db7a6d306f9ad64d9da5a5824a471539a4285b62ccbcb792b293d72a06221a38152091716fa47090958d39bb60081cee1100d0e747282607bed8dff2e0d211c4907beacb05deab6d6e6ebb0eeb73aa8a829db638245398b9b947554382897b2e450de0cda51cca1928ddaf5aefe4a26fc28390e90bef7c6a21e9a1af97a0689ddcff801faac4a845bb9256c202657f39419eac7f30a38246fb8547d461819e88b8a58201b43833662210bec9a7da02f8dffd3824a80f18891325a6d4d7cf4e942dfb386af46c71df33d568f37870b1163ebb725d0886c3d150dd637a90f547f276ac01b9100446b1ac7da7ea213433e562881efba1afda0aca6b6ec3a58d49dc28beed1d6bb33f33a9425bf7f1936dae408f4c16610c2ac7d3d3ca57da2dfe7dfe300d642e45cd478262dd74ef54968b6e422dbec86ae0c1de611bc1f170b6df884b346330943de179ab2acc7009049099864e65a7eeefa48539e3fe0ed3064689751c5d1129f6c87aede734a5804bab1c6c032e6222e0d3c6d0f15208ab1d369dedeaefabe96628d47cd96562f7d57d5a6883841f2d77be3061b19ac484368f9665dd195c0f5a04395761cbcc78181dca47309035923e84ec52d28193f19123a199848cdad85186049486a6c9ab597f4a528740508be89d1e963202569e164bbdace18e34310ed187b48f875117d168b5c72483ab05a86131cd9bd52048bd9a7df80708f9357a0b24acb1a38273802a7fae658ee91da1689975dd77f002e47103435b9958dde9d493b9f450606f7cfa733e3156b4907e01cb5040f446f1d48ea89132162bf5371f1f9c44d222096401a7d29e596f17365a13bee00090dad3e00a07b6be007e3c8d4a2bbb2e45230cab6fe4d8e919c9bca85b5217ee56c0b861cbaddd72d2d2b27560008c515a25992e366ed43118d2f12401b46fb93873bc66f944348963cb9ae52dec6f9d0e6e0eb82c4d9d026df5c8144c8e9be45547a65d2aaa14d5ac00ab67629badc266366154a631828f7c57427370a5441d463249367eca723205f9d0a42f75593568d6d758ea6a2c1232b6770a56cf89f009ef9f890e38c8d9bbdf6bca72ef9642af22419c98b61db01812bf8e31ca818872d007ae25b71859fb5afcd53d026855e8a219232d75a063201cae3ab1f6338546a861f3a674f8415bfa412a7e723a62287ad73717c68cd3c50600018a8d5fe95f6ce68cc095ef090cae4be09d6eb5d294fd881370561e17cb2a4510611482965b44a10bdb7c48072ee7113f0b39c60742ec4b27a4f96ca6ddb29491d77cc17ec11005227a6bd204c655b46bcf2c80dfc33c0456ec48a9dc785370201f11ea7e7014b4972e49aaaf2c63bd430134c24064a0f3c2ca2ed877f78dd3723753edb56d836dff4190212e79e28016ef490aa7151cb0a49f024f925f7cb80105e1101db99e656ebdc88388218cbbb061b89b5569210d69d13ec8fe6cfa64571d45712a344145e2351c42f8886a98c322b7714b34cc505101adf869e4e4f81b6b7005bff4feeed6cf0f04d4952eed36ef407e859c171017bbcbf8a447045b72f719485babe61454301fce8609401124ae3c31e15ce096653a2523d927ad16e4557ae6a5d5786f8b57ccef76f5b5fed9c95665e206d83e144a0cd3fd97ace8dc8f4b2d0df8177bf3b8d60f979c15d2b32d1b4ee4872612acf518c4421cfdb0c829b02c11ba961d0e5da306a95ab5e0ba4bda3f30a17dbf247c0632c478e80c1895192218001c02bf70a7a0ab49aa033373c3a548db07b2a46e15c239006b0682ca5f03431ad183a9e8d38cb25efa62e5ed757e1e8bc85692bc5bcaf07deaa1073ffc9cf09d0f7e3814e61375fe1861c6f3ca07d7619695eb13b8abbe4fcbdd086967d5b87d7d03cf1b73dffd62b5892891c5a66d95cc57d840fb21368b0c38", 0x3) mprotect$auto(0x0, 0x8000000000000001, 0x8) 1.673201894s ago: executing program 1 (id=1862): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) socket(0x2, 0x1, 0x0) r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000380), r1) ioctl$auto_FS_IOC_SETFLAGS2(r0, 0x40086602, &(0x7f00000000c0)=0x9c) sendmsg$auto_MACSEC_CMD_UPD_OFFLOAD(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@MACSEC_ATTR_OFFLOAD={0x8, 0x9, 0x0, 0x1, [@typed={0x4, 0x1}]}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40400c1}, 0x40080) r3 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) ioctl$auto(r3, 0x80004504, r1) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) pipe2$auto(0x0, 0x80) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x10d000, 0x0) ioctl$auto_TIOCSTI2(r4, 0x5412, &(0x7f0000000840)="13") ioctl$auto_TIOCSTI2(r4, 0x5412, 0x0) 1.563418688s ago: executing program 1 (id=1863): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x2000, 0x0) pipe2$auto(0x0, 0x80) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x48, r2, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_ACTIONS={0x2c, 0x3, 0x0, 0x1, [@nested={0x28, 0x1, 0x0, 0x1, [@nested={0x24, 0x106, 0x0, 0x1, [@nested={0x1d, 0x74, 0x0, 0x1, [@nested={0xfffffffffffffe4c, 0x4d}, @typed={0xa888, 0xd0, 0x0, 0x0, @u32=0xa888}, @typed={0x4, 0x3}, @generic="2a9d272f66", @nested={0x4, 0x33}]}]}]}]}, @OVS_PACKET_ATTR_ACTIONS={0x4}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x8000fff5) 1.454954726s ago: executing program 1 (id=1864): socket(0xa, 0x3, 0xff) syz_clone3(&(0x7f0000000240)={0x201600, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0), {0xf}, &(0x7f0000000100)=""/121, 0x79, &(0x7f0000000180)=""/97, &(0x7f0000000200)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x3, 0x5, 0x4, 0xd, 0xfffffffffffffffc, 0x100000000, 0x2c2, 0x800002017d, 0x2, 0x40, 0xd, 0xd59, 0xfb, 0xff, 0x1d, 0x2]}, 0x0, 0x0) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0xdf) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) r2 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8955, 0x0) process_madvise$auto_MADV_WILLNEED(r0, &(0x7f0000000400)={&(0x7f00000002c0)="49ef8c99fd1432752ec9fb496e037f16d63fa861e11b6b9bc4c32f7deb85835d669b83f017db2664d1ac33d3b3767e548f29a0f2bf5d83d1ff78ec84698bbe6e881cc2057085b173152021095e4df19515fc1f2668b5fd0956fcfb8262a3ec80a30b3a61a954484114db62d4b947fa5027295ae52217b1412a3a7df7bbdfded3fc10439ec4103eca5c09e6aa00c52700e79a5ca29f0a7145e51a2c5132e2e312534a3ee0dedae74b3fdf857f1da1cb2b565ef66347b11067c3a4b653121fa7f937b8350dc0a97396ca2315c0b9b8f0145a154c1b434a25d6aecf060001b112a7030fe4f6448933", 0x3}, 0x3, 0x3, 0x10000) setsockopt$auto(0x400000000000003, 0x29, 0x38, 0x0, 0x20056b) r3 = socket(0x2, 0x1, 0x106) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="00042cbd7000fbdbdf25880000001a3d160686e3e005003d000300000004dd00140004006873723000000000d5f42b03f5f1b00391e0358d2517061f154717eb00757cc80b1858843c2efbec136598a595d300"/95], 0x3c}, 0x1, 0x0, 0x0, 0x4008084}, 0x4000) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) r4 = socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32, @ANYBLOB="060006000500000008002e"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x9}, 0x1, 0x0, 0x0, 0xa}, 0x7}, 0x3, 0xfffffffe) connect$auto(r4, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xff}}, 0x54) 1.324330089s ago: executing program 0 (id=1865): r0 = openat$auto_memtype_fops_memtype(0xffffffffffffff9c, &(0x7f0000000000), 0x400600, 0x0) getdents$auto(r0, &(0x7f0000000040)={0x9, 0x100000001, 0xe15, "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"}, 0x6e5979b4) r1 = socketcall$auto_SYS_SOCKETPAIR(0x8, &(0x7f0000001080)=0x378000) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_NEW_MPATH(r1, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x10004040}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x34, r2, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_AUTH_DATA={0x1d, 0x9c, "d3819ef61666c4bfe72b4a3ac86e2ca7b55f3384b8245ecf1c"}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000140}, 0x8000) sendmsg$auto_NL802154_CMD_ASSOCIATE(r1, &(0x7f00000013c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001240)={0x138, 0x0, 0x100, 0x70bd28, 0x3, {}, [@NL802154_ATTR_IFNAME={0x14, 0x4, 'netdevsim0\x00'}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x4}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0x6}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1}, @NL802154_ATTR_SUPPORTED_COMMANDS={0xf2, 0x19, 0x0, 0x1, [@generic="72eb8d1480bd4391284ce236c1e0c9e911db84841588a1180d6686862c378d656b1068b9b2590858ae448999958bd31f6df27f658f730da6b8fddf23565bc1dc9e7c791e5157ea2f046b9071f0500d836b8e58cce00dabd9664dbe51c7225edddd97da2e178e5fbd7fd8ae30201f9a68b274a24a1037bb5e32b07ff32d57a6ca96a3afbf7dc7afa966fbb79d1d189db97caea247b6be84e732d6095057956e3438357e528e7c34569d18a465c30a667be98bb4101ffc3ad548abfb4aa8e6ea81bb42f9f09ddeb8460394cddb7f79a6fda03ab3b849ec6c3e8465d0c7b8187509b3bbbab41442413a6b220cc9ee38"]}]}, 0x138}, 0x1, 0x0, 0x0, 0x801}, 0x20000004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001440), r1) sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x1c, r4, 0x4c3e204311ece0ee, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001580), r1) sendmsg$auto_TIPC_NL_SOCK_GET(r3, &(0x7f0000001880)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x9bb868dddc7a95f6}, 0xc, &(0x7f0000001840)={&(0x7f00000015c0)={0x250, r5, 0xc00, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x23c, 0x4, 0x0, 0x1, [@typed={0xc9, 0x14b, 0x0, 0x0, @binary="408f3b8c3e19038e509ad290d4c878e6dfd92a7633b8751473e84d9acc3ae7f4634a78a7699410b1d97ea666142ecef179e6f26df319d4190cb01824a7f55e49a0eb65a05ed175f553fb45f3b6a077783117b6794cd4fc6f6e77a88e6bdf198331220f104b7fde587dcdb5730a5311fa6018af708eff9b9bbaf8a8e076d0dbad5a7e88272e23c0cf48bd4b257494f87fe093e8f8a151d7369f9463501cc4675907a47f58403648031f523a334e68e3ae09811c19a7ff822196111f36d0edcee861af768090"}, @generic="448b3e22d5a36dd42a6be72e", @nested={0x72, 0xb9, 0x0, 0x1, [@typed={0xb, 0x110, 0x0, 0x0, @str='#\\*#\'.{'}, @typed={0x20, 0x14d, 0x0, 0x0, @binary="b00a549cd30661e9a1a98691b83f7834847f977350c6e475fa527653"}, @typed={0x14, 0xb8, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0x13d}, @generic="f94a526158fbef8e920c78f396fe5735fd184a8d829c2b92dea2b0de0cbe6d95b887c028b4b0", @nested={0x4, 0x5c}]}, @generic="a781863bb4ebda676eba66a0811cf409a23a75455d86d82ddde5ec1e174dc96909efaba8471e0ad0d9a99b420fa2650925816da2c5b0b93de3c88b1b0c4eca92d81ba261c54acb02405e138d8665b4f0931aee66f001b9713fb354497cfd95258338946cb71d1a2a5627db38b0a61c9f02b03d403c96c8ad370f2fdce90ee759fb6f2e3c44c1151efd2141ca7a1d11a895a5f292c397cb6b8c4be18df844144f12e28d58ae1330b1748ad6b4078dedb6aeacaaad6f9f7fb43c98710a169ae5a29d35c89889df2207cd97a8fbc2a0c1e95e31fc6cb154dbb2", @typed={0x8, 0x33, 0x0, 0x0, @u32=0xf}, @typed={0x8, 0xd0, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x4, 0x130}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x90}, 0x0) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001900), r1) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r3, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x1c, r6, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_FEC_AUTO={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8040) write$auto(r0, &(0x7f0000001a00)='^,\\\x00', 0x1ff) sendmsg$auto_NL80211_CMD_REMOVE_LINK_STA(r3, &(0x7f0000001d00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001a80)={0x224, r2, 0x1, 0x70bd2c, 0x7ff, {}, [@NL80211_ATTR_SUPPORT_MESH_AUTH={0x4}, @NL80211_ATTR_S1G_CAPABILITY_MASK={0xfb, 0x129, "32cd4c86381a059404107c74d5cfd850f3b979499603488b4a374197f76a9606814ce7dc2349dbf34184af25132fc687ee659475ef4ea1c302c58f24ef4010b3776b6a06f2ab8285c571f4ad5f9981672aadfdb9c50dc98e3abb6cb18b785c33c2535ea958f82d9adbdef79002aeadcf127e86a227482f1b014d58b71a173243716cb90c928dd3060a652d219b06643feb78d86d794197f773f5e7b5cec7361ca28961163c5eb8a9bd2baf352136c064927397dd3e5f8a0a88585b06cb1516c6a4ba2b1fa0dbfef7f901e60fc4c8282dc8e375e75c9d9ac023e5851df346983e18f0421aeb571d00faea807848b4008fc015a1957835b3"}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "f50b39fc3bdc2134db597b643fada6"}, @NL80211_ATTR_CNTDWN_OFFS_PRESP={0xe1, 0xbb, "7c622129eded007faab11a91ee6ff0daba1411215934e0dd332abb0261720d98c96a1b8df04253673c7ec242f63862f06a29f6dc8e7ab1713ad25fe09067b304dc100945672863a7bd46e978a46ff745a5b587ad8a7898ec681e3ccd37e6ef0714de2f89a8f5641e20f69ffc69ddf6b595cbb6c57513b2ecd2e258934c38233d9a3dc2b88fcb6c839587fad1d336f765cc941c940c3865a819552e231755539807e37d3ea713bb21e4ef5b4ae7b537839580d6c3acd061d0c25b01c815eaf8c5f8caf235203b5ba43432da972df700275623e838e725527899683581b3"}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "199642b135e9d1ba5302b9e3d149ef65"}]}, 0x224}}, 0x20004010) r7 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001d40)='/dev/bus/usb/026/001\x00', 0x2721c0, 0x0) r8 = pipe2$auto(&(0x7f0000001d80)=r3, 0xccd9) getsockopt$auto_SO_BUF_LOCK(r8, 0x0, 0x48, &(0x7f0000001dc0)='#\\*#\'.{', &(0x7f0000001e00)=0x6) sendmsg$auto_SMC_NETLINK_ENABLE_HS_LIMITATION(r1, &(0x7f0000001fc0)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001f80)={&(0x7f0000001e80)={0xcc, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, "a3293046bf477d01c019e22e0962fc8133b02ad95daacfc8a5163392b161e66bb4fcf1ff101719850a4c24939d2b5d663bdaabddb0f1c4f92818eada8e453981a40457869df94086687d403b961983a5cf6ea198badfacdc0d0846619e51243d46dfc77d6f4ac9d224efe78e7339ab0ad98e73485bc4db5b14ea9c5e062cd391b9dcfbe235a91eb9a52e4a0a4f47cda2e2e7070b6218d51ddd8684479063473114913a028f6016613f370a553390caedf148b586346f07"}, 0xcc}, 0x1, 0x0, 0x0, 0x77bdc6aec7fe2d2c}, 0x4000800) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000002040)={'bond_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000002080)={'bond_slave_1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_MODULE_SET(r1, &(0x7f0000002180)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002140)={&(0x7f00000020c0)={0x58, r6, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_MODULE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x400}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x4008804) write$auto_tracing_fops_trace(r9, &(0x7f00000021c0)="43d95befe28e6f0f4a0b07953c2bd7459e261b17cb56b1a6ed1856e47a5dd96125a27c3fcec9390bef444a3e279577eeb9c9444810bc3348dc0d35d6d12898eae06ec9d27c22da1a70da3628eb3af88ba094e007c7404e4d1ece327e6e28a0bdd831e1f9fb28a8f8f410575af4dcf846adc75fdf1face315b5084217059a401f5ba9ad6569996d1758c5a4dd0ab09ef677c57bbf9899347cfc6ffe18de905d40739207e127f7f8764fd6d69f13b8250a7e05140cba35a28263c580aadc9899e1e8b4ae6d16a19d25954354e6b208d67bffeb7ad67bc1bfb511dc6b60a84dc2", 0xdf) r12 = socket(0x6, 0x1, 0xe) close_range$auto(r7, r9, 0xfffffff9) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000002300)={'wg1\x00', 0x0}) sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r1, &(0x7f0000003440)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003400)={&(0x7f0000002340)={0x1098, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@NCSI_ATTR_MULTI_FLAG={0x4}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x80000000}, @NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0x400}, @NCSI_ATTR_IFINDEX={0x8, 0x1, r13}, @NCSI_ATTR_PACKAGE_LIST={0x1060, 0x2, 0x0, 0x1, [@nested={0x1051, 0xba, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x4}, @generic="f4b1e7e5a4161fa4563da59652eb749a56b14ff44cc7cd0c8ba6eb0400f2cf6006ae05def8bcbea075764f8963ff8e851b57935696526121966241bc288caf72445d8b8e4dbb0c584ac9f338b6fe6a0b89add7e3103fa9737a9511ca0eb34ac89558575b750cd1e50d85f6fe0471c1374d9fc1271129d09dd60226b8d4bd6efdb25c91e8fd488b6443ca5c2a19f81e4194234fe7d78c6a52409414dd2c83778bddfb629bf0e44247e7ba50591fae60bd5bfb12c87771ac06e64bfdd822618ea02caa3f28fe8be702ac728d515d43b36457deb1c96bcd845cfb04a05300ba09fd621b1ae12e7dcaf2bd141c757dade433c7724a2a4ad9ac6749fdfe984d895fce4e16ee1ff8a54c0d0aaf681a081b5a1f4c28f9c3f3d9ecf0ccef2885041cbef0bd31cbbfce82efb94683318c99e0fa97a155fb24ad2a3b2dc9153427bb45f88aadc4508866eead56fd8ea8ef83876cce1e2772409790d212f28be94ee26463d3a5f7c52fa8b41cb424198c898f8973e361c9d553ca7325b0766bc569900c52e82e461610fee8c8e456fc0da5bde8c9293254dff5ad7df367fcdcac45dfc76635e23249e52b2c721d5b160f14c8a659f24c9db074785c45ea95aac93ea7974080444a81142934a031cdd2770c752b4d11cc62209f90fb1aa42a662c9c27c9640ed91e2c85264069ed2e14a11cc2377c34ba9b68d91eff7f8847d3c5f058dd4aa00375aa8f11a3b6f95fe612f6d773aa6d0bb9e7b4eee9cc973de688f526f69de90ed0d8b1eacae1e7b1dc15869f1ef06afb545441f484142c8f1ddac3590152bb3bdd867eec9a165fca3dc04147bac9d56ddd78ab954c62e5d05ece7f0092186080060c1657b635294f98213b3956ffba85f4eb11f676c1a85b0f1e8c7c5fea799167a7cd1089149a27c5f528681f916e3fc29dac6360095e4698b835316c5a0e86bde22db0bad63e31ef15624349d3f0e3ba155a25d5a0edb26de01dc7136fee4aa3f825804941536f8ba8ceb068cf8d200572923dfad17733f48a4ccae428ff6e5d4a1ee81b5f5d6f86904595460af932290604119192aa8242f1cda039c3592f1c3758be60476642972ce59eb99ba69b163e2201bdaa9c455cbf34586514d7184be1e640d6eb780acb37e538d95bf5c7c09a447e6f26dceb51301641a81c5385153583bfbf76d240ac9357703d34192d8607d05799025f5dc8d60ecaa68917eb5cfc7051e15a6c953878d79b5ab265897ac9fff043a70218781d2558f747bceb51b4b994e62f082c8c9bb86d76f68bce8c8b54f74bb6deb05becb06d61a93f32904a039b10b606edef873cbd9e3b7935f9fe79bd83cdc9c91a3df8c7a71d78e7a8e9be0e4289c4063ff66fa73bf6d0b81ff7c399a5fab8bf34f439da0350fdd43616707a06de287341994834930d5a534d53f89cdc835b3a1bcb6f0dfb7cec2b7c0e323084afeec09256b974fa2c0ff7e090afb4044adc110cd6d37cde39dff01c2b6756a1ee786ebc693460a577e03a39ea71e15a7a15de36675fae9de83414f446c085e85c55f08c6ef24dbddcd6efeeef54823e47bea5069ceb34bbdd388fd81518740d93624670bead82751494d0d310eb591d7997531d2e9ecd3944c136622bb4cad12a58df2efebd44496243113f93a93da912bf260650f5b9bf313168550a78ef0eab811b719d346b3736161cab3ce050fdf68665bc6f88cfd5febc7f420f5530f2ad1d61ea56774ec661a26dd2bae034d0eae5d425cb72ce91b487385fec084cad40217db45d5c586c7290bf71e37ad1846425c02c76cbb58fa29418367a03b3721ab44b507e0fb9e0eb5fa741d63308d071625ba0af1ecce3e877b3ef0611f9f657ba67b9da873b4b6c5ae563af69612819226cf908331988a5e63e8558d38c41b8e99b6f7cfca6b9961a5d1af857521893de97e1590e2c10170cf32646adb4c9a58a56d2eb3ba4d061794fcefb16d61ea9d8bf05a51713974d2ddfb2ba50c1459584628a036678282e0c82d0a7aa23f1ae16aa0f443f66609ce85947c25268b47b536cb95ec132eed95fb770266111f26e084af18067daf44e2273181b8dc1aa6a8bbfdd930ae3813a873649420098d7f5c6957f10ae6f96834cf4218c4fc764d8177170dd39e9c51c8313c3b4e454038cf17d6a65cbbe01aba5200a757e8b878b521548683469f109d88d16af3887803ce3cf894845b6d658d2079000e475929478a152105759c3b4a196abb39fb7f4af17ef5bf2b58b8c494090fcd42a6f40508c6406423dc726e3f834917df4b00f9df20567de89f822a6c2966c4d28db01065370ee9bce0858200eec84d6fbb1ffa5b6962ca5681adeb052967a3551b8c5961895283a05bc8b778766ca239cab3c5a74bbcae9b203605d4200c8912c9380469fa2180192fd43378cd6489b4590b072215a08a5937c10266938cc899a6ea454b578089f02ddee891ff6840475aa3b41bda9ee7c6143284371ea61fd0dd1c32fd4f4943d54f7d1d9948c87cbcaf8da23ff1ec26596f91af685d91e3ca4f3ff84a7621a9fd102f518c7505ceac57c810ef00e84d1370a68ad891b9d6be02b359e9ecd2601970b1878c5a5c27134b56077699d6cc4dfe80e4aec0183b3ff4df7152dcb4cb84a21fd1c09b27376a5aed46611b8dad1f7cd69bbfb2eaf953167cac4e84283779769e3814d036ca055f94d6361f4200d68b1f1cfd4fef295cff209ba0c6f71b4e1b4863895b546e3977ad1e803129d5c538d6271b60cbf9eb0dd6326f6e337c78f6b9a7bbb5df920e344265fde81fc262da3144f2ab21cf5500e353ac8f346444963de89753733e35fb9187c13bb1e20b2992a1c68d2b0d5c5bb40bfa448ac54f58a7135c541910b20fe80d9d9e339d4a3b594b932db4fd9347e742d8fb87c839785d27aaef6ff7f4d966207ce99e28279c651178be06ce9ac6fe70dcecda28eb4b945f0e4d25d9d04b720fb331dded4712d8f646ce7321138998e78e9d97ba6aea505925eb0b5680703d9e893983118764bcda23c1427f2012d39267b59210f3be9d7414912dee71db2a3ad94728bc92d6ec1b689de035116e78dc504b40578672b6592667fb1924cc3a120a96861263f6dfec7c992897052d8cb5e4c0954db237a715aa5488ab34ec07a552b5ec2c0bfb2115d1227ab21fbe44b79cfcd1cca2f86c4233cae8918a750b4ecd0f599ae5e28133020f06d859b255030113cf523dc3e11b18233f64d800215b57a6f325f5855e7b4368dd2bd9ea0441f7bf2e5ccd1e6ed20907b77946ae4f09588985d0f00a7ab3cb27a7f9aeef2eb1780d738e560684f710e0fe5e294e7b1a5b6bd4a04d1ddfdb6da45cf6b6fc7e7f4efc75b33cc430723f1f3b3fc0a12bd8d96ab3e129fc89b8b6c7cec5a5c0688814bae37021a6b6395f398feec6f833c2a35002a5919a496605ce67ebe125250417bba7322d545e6875c4b4f3807765ef6637178e56076765293ea33b1e044d9ceecf621ac483d8a087a3d092e1f273fdc1627db4ba98c366c8955ddbb1b18856298afd55a2aa2335e617ec7001a4948ad6ef0da857b205598212f44590bb00ac15b42a97a63e561a9e566d304006d0e5342af9849b13eafc8be42d1a72ae3280c98b236c2caf3d1a3122fadb502c4ff23a078191370e63617d3ad70c7a39f1eb888cedda773de312174e65edf54066fffd29ef8eb7f8a84b843bfe5ab9dd5a756ed63113f8e4312c2f76b51f069f0a1c1d8299cfee860fd3aff40cde77a7e404d46132fd597724349816bfc39f0be0e571a2d31b0c96b83ef755f82aa5c56900af7d88edf125f957a32ba848276334d835f598ee45064aa536e8e5d88d295ee47cfde17268a6608d50249523ab4b92d6d661d0e97f815e0c61ca12f0a5c594dbb363836173480ce7f7e683cfb6dbec619d5237803c8eb59bc3c65d0dee8a80f4c61736942b1e1b3bc18d3c2911dadd1b329bd68e9e861ac2b3b6ed626ddcbcb5a5d978bbcc42299551048f51f67a439546a5b72f674dc50e3cabd51a99a4d3ecff0bd424899340a72c65cc51818578befad217d3cd0860e5111e16cfa04a437813bc8c2d529903c07eb390c65adb38a21c51fc26a9576f84850ca29f090ae0f1db3bef56de5d5818db576d537cb6b14c8e6a4222f7d43aef6c40006ea2bdbd58f2f5212911919dc91ff5a4117910dfb47c842dc60bd0f156fc00226f34a5d283d4bba8c5b2857889c47218b679a8f2385f30ef1b6ef26f17551eea3af413d3b781b9e2028035caad35f1a8e9e8d988383bb609150bbcbe02b65fd274f4dbe0042d348464d49af73b5088c9ed754479f72beda58c9b8273347a64c84a2d5f77bbda94a6ab12672692668449df54d1ca7e28238e23449fa8e23aaee031038ed07d2033fb59c99a73bb16192be6cf3e2faacc0ca42be69efcd2ca20ab6d1c92218e731579ce021312ff4b7e5e66c6712f87a30d4117314d959fb49bde03649d5bf22d3fce18d5e66190a78fe802bb590d1b095ccd166541bed543a263e79d7ea249c97c34b960eae6423dc23e05af19bdaa82e273e921c9ed12051e405dfec3863e8aad9816aa4cfd20ddb12f28fe3ec1e0166e7b975bc259287dd140906e6dbdd699822e48829326f72e14e28946d509455a64c4fea94864b2033e2c4eaf51ea37b5b4940a4af504612e6e97f9d839a42609b622d96b2f302e2446614706c438e6f51d601e330c1fc3690f987395c0264e2dbb8e262c6073985c8984ffa4f9bd7de1ab95017b517790d8be7e971cffe06dcf67c427e88f26477173271a615022f5c20290df39f1dabe6ff649bd37e9ad642a59a408542cd5c6b638e0cc438336d5511bc90d695ad2f69433fdc48db8229297e46f25569af49e4c8c9a81a79f360c16ed8156b9a5f8eb3b1003e57d063dad2be14ff1b1c1dff7604491de5ff281c1670f0fc672259a5bd5a5d4ab392765a29086d4416e19c1822d70402833df309d2bf5c559e4b3db247feb34cd471faa4c30dba5261cbd7283473e738547043e0c3a8b8de680371184b7b75f956f7f0656bbd37aafdb4c5c007140cddcafbabd78d1b28bd55ee3a904a04cfceaf008fc8817d428df00921364e2534a8c976977b7f81fce0e5be71da99a05637dd92d21e923eac090be39643de0ab337362fd040da253cca8b2dfba86d04b509c5edb475ed3679f3c51bd3645232830671caf958808d0f4b67f8acf4c5b0018359e0e016ef8ef4f1d9d024d1da5847501535e3552d6933e28cfda561ab7786369bfd74a0208cb0967e5a688b30be68d10879e94a0c295af5204d4c11b75cebb585f8f7a34ceb826410407c54ef7a3a94938851992e25eafba37dfba790215730b8130fa49e9e90c2aaba3992ec6d3d2c23bf96973b86595060102ffa0557534229ef4beb0eebe64bfa06d491692f8154e68f5bd910453ea24ecd86d29b19079cc1b61aac3e75d49e797a80c16d5e0dd5b48bddf960a461cbb6237994179c4dc816190aed21ccd0e6756c09920d7b65412cfb354d79dc7f50b95c29a92ac88a50bad17131dc3c53d37c7f30deecd3192576097c24c7c3375c23861809f54cbabd63732fdc33386f71126e3132bd5dfffbd2f5b8be31a8de0ca6f149325cc141b820133cc04ba9acb26b7e621c78dde82c4b9d2cd0c04a99a4369c064e8a95593b4fa3502cefa76ae038eeaab7754568afeeb8654db5097b59f9be70e5972f57837016b27b177518406552c6e0705ac972a9ab73d01276b3fb5d0948ec44ecac94fd869a68555086756d7d10a6ff4f", @generic="520b615cffe74e6d54ac92ebc77a34e65cea84e17e8a5583ebe5a9aaa01c8adab5c0ec6b9bcb72eab72dc7c020aae247af2fa0071bf6c3968e4cad08ffd5a23959", @nested={0x4, 0xc4}]}, @nested={0x8, 0x20, 0x0, 0x1, [@nested={0x4, 0x126}]}]}, @NCSI_ATTR_PACKAGE_MASK={0x8, 0x7, 0x8}]}, 0x1098}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$auto_TIOCSTI2(r8, 0x5412, &(0x7f0000003480)="94dc8da5134bfdddb2eaef3c34283d0ff878e8f1") setsockopt$auto_SO_RXQ_OVFL(r12, 0x202c0, 0x28, &(0x7f00000034c0)='\x00', 0x343) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r1, &(0x7f0000003640)={&(0x7f0000003500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003600)={&(0x7f0000003580)={0x54, 0x0, 0xb03, 0x70bd28, 0x25dfdbfc, {}, [@IOAM6_ATTR_NS_ID={0x6, 0x1, 0x7}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x902}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x1ff}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x40}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x7fff}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x2}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x3}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x401}]}, 0x54}, 0x1, 0x0, 0x0, 0x840}, 0x805c) 1.198195726s ago: executing program 2 (id=1866): waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8d, 0x0) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0xfffe, 0xf2cf, 0x8, 0x80}, "6a034a07c7b8ad90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x3}) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) r1 = socket(0xa, 0x2, 0x0) setsockopt$auto(r1, 0x29, 0xb, 0x0, 0xca6) writev$auto(r0, &(0x7f0000000340)={0x0, 0xda7e}, 0x9) 1.073938257s ago: executing program 1 (id=1867): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) close_range$auto(0x2, 0xffffffffffffffff, 0x8002) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0x1b, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) io_uring_setup$auto(0x101, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x14010040) sysfs$auto(0x0, 0x5, 0x2a) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x1, {{0x43, 0x2}, 0x1}}, 0x6a) socket(0x2, 0x800, 0x7ff) r0 = socket(0x2, 0x2, 0x1) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xffeb}, 0x1, 0x0, 0x5, 0x7}, 0x8}, 0xffffffff, 0xb00) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, r0, 0x8000) unshare$auto(0x8000000) semget$auto(0x0, 0x2e4a, 0x8000) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x9, 0x36ec}, 0x1f4, 0x0) mkdir$auto(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x8cd) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f00000002c0)=@test={0xffffffffffffffff, 0x0, 0x852, 0x189, 0x8, 0x7fff, 0x7fff, 0x7fffffff, 0xc91a, 0x7, 0x5, 0x3, 0x3, 0x3, 0x6}, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x11, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x1) unshare$auto(0x40000080) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/smaps_rollup\x00', 0x840, 0x0) read$auto(r0, 0x0, 0x7) socket$nl_generic(0x10, 0x3, 0x10) 1.018953411s ago: executing program 0 (id=1868): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x1, 0x0) getsockopt$auto(r0, 0x6, 0x18, 0x0, 0x0) getsockopt$auto(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/pci0000:00/pci_bus/0000:00/cpulistaffinity\x00', 0xc0200, 0x0) r1 = setfsuid$auto(0xee00) setreuid$auto(r1, 0x0) sendmsg$auto_NET_SHAPER_CMD_DELETE(0xffffffffffffffff, 0x0, 0xc050) fsconfig$auto(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26d650e0000dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x7f, 0x7, 0x7, 0x6}, 0xf) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@prog_fd, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x3, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x96) 947.453933ms ago: executing program 2 (id=1869): mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x44eb2, 0xffffffffffffffff, 0x300000000000) semctl$auto_SEM_INFO(0x0, 0xfffffffd, 0x13, 0x1) r0 = socket(0x11, 0x80003, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fcntl$auto(r1, 0xa, 0x1) fcntl$auto(r1, 0x10, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000d186", @ANYRES32=r2, @ANYRESHEX=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000) mmap$auto(0xe774, 0x5, 0x1000000d8, 0xeb7, 0x401, 0x18003) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000200)={{@raw=0x3, 0x1, 0xffffbfff, 0x81, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d"}, 0x401, 0x4, 0x4, @raw=0x3, @integer={0x3, 0xf15d, 0x5}, "7a9fc199a16a2311eacf2fc7ae1d8778dc618090334fdd73340238d21000debe0eda71bdd709254592b67faab5adb17884a16f7ce8cbce0bb32791702b8d7c2d"}) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0x20000001005}, 0x1, &(0x7f0000000040)={&(0x7f0000000080), 0xffffffff}, 0x4, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000640)={0x0, 0x1d, 0x3800, 0x2, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7b, 0x0, 0x5, 0xfffffffffffffffd}, {0x100, 0x20001, 0x52, 0x85, 0x2, 0x0, 0x2072c2, 0xc, 0x100000000}}) io_uring_register$auto(0xffffffffffffffff, 0x1c, &(0x7f0000000180)="276a5e3d49fd985faea2c2a03e31bdaefb2f26df21bd98a4faba79eea70c5f805bf706871927d62ff909212ab1fd2c62a15d64a999092243ad30e8801c8282de9d4cb8b1d1afe55603312f3b673b009c2d160fb4af7c801430ec9e85e486040beaf6712e280b620b40523f71890999a55c47ecdc23f6c7202cca736f918eea97", 0x1) r5 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x10107, 0xf, 0x0, 0x6) sendmmsg$auto(r5, &(0x7f0000000140)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000280)={&(0x7f0000000200), 0x23ef2}, 0x5, 0x0, 0x5, 0x1}, 0x2000005}, 0x30000000, 0x100) syz_genetlink_get_family_id$auto_vdpa(&(0x7f0000000480), r5) sendmsg$auto_VDPA_CMD_DEV_ATTR_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000380)=ANY=[@ANYBLOB="21c6f200", @ANYRES8=r3, @ANYBLOB="010027bd7000fcdbdf2508000000060001005d0000001400020076657468305f6d616376746170000000140004007866726d3000000000000000000000000c001400cf83000000000000af000a001c457dc9ced228a54f57452872b022acfcca6f68f99df28fd76fcad27c5bbbb2c9aa4d627d9ed9a82a13aebaf6f7613163f55fc9a6a31ffb7c9f6614ef7909a47e573587e7ea3b630d8fdd86d97028e12982bf885d2c518b29a889de17bbd78110f4d7245d75063f7b7c523c0147188d42906825f50b567ac31e765d2282378bbbec3b12a75f6f5148e74236e25ea3ef02af410ee596226ac16fc909a9022726714c4493cbeb37c20e7b6400"], 0x100}, 0x1, 0x0, 0x0, 0x24008800}, 0x20008040) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) map_shadow_stack$auto(0x40, 0xb, 0x4) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x300c00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) msync$auto(0x200000, 0x2000000005, 0x6) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 474.922191ms ago: executing program 1 (id=1870): mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = open(&(0x7f0000000040)='./file0\x00', 0x2041, 0x32) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) r1 = socket(0x11, 0x3, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) add_key$auto_KEY_SPEC_SESSION_KEYRING(&(0x7f0000000440)='\x8deyri.\xfd\x00', 0x0, &(0x7f0000000480), 0xff, 0xfffffffffffffffd) prctl$auto_PR_SYS_DISPATCH_ON(0x1000, 0x1, 0x0, 0x80000000, 0x7) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_ima_measurements_count_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000002f40), 0x8040, 0x0) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r3, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = io_uring_setup$auto(0x12, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x22002, 0x0) readv$auto(r4, &(0x7f0000000a80)={0x0, 0x21}, 0x21) write$auto(0x3, 0x0, 0x70) prctl$auto(0x3c, 0x1, 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) bpf$auto(0x5, &(0x7f0000000000)=@link_create={@prog_fd=r1, @target_ifindex=r5, 0x0, 0x3f, @netfilter={0xb, 0x1, 0x3, 0x6}}, 0x7) sendmmsg$auto(r1, &(0x7f0000000100)={{&(0x7f0000000000), 0x5aa, &(0x7f00000000c0)={&(0x7f0000000040)='f', 0x49}, 0x1, &(0x7f0000000200), 0x5, 0x3}, 0x4}, 0x2, 0x100) mprotect$auto(0x0, 0x8000000000000001, 0x8) 206.926225ms ago: executing program 0 (id=1871): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x1, 0x4000000000df, 0x40000000000eb1, 0x401, 0xfff) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x9) connect$auto(0x3, 0x0, 0x50) unshare$auto(0x40000080) unshare$auto(0x40000080) prctl$auto(0x3e, 0xffffffffffffffff, 0x0, 0x8001, 0x0) socket(0x2c, 0x6, 0xffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x1ff000, 0x100002, 0x843, 0x83, 0x3) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyra\x00', 0x8e3c1, 0x0) read$auto(0x3, 0x0, 0x5) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r2, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xedKW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1\x1f\xf7uw\a\xd0\x83{_>/\xff', 0x100000001) ioctl$auto(0x3, 0x402c542b, 0x38) ioctl$auto_TIOCSTI2(r1, 0x5412, 0x0) r3 = socket(0x2b, 0x1, 0x1) openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f00000000c0), 0x22e200, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) r4 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x8000, 0x0) write$auto_fb_fops_fb_chrdev(r4, &(0x7f0000000380)="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", 0x223) getsockopt$auto(r3, 0x0, 0x80, 0x0, 0x0) mmap$auto(0x0, 0x6, 0x1, 0x9b72, 0x7, 0x28000) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) socket(0xa, 0x801, 0x84) 0s ago: executing program 3 (id=1872): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000080)={{@raw=0x7, 0x5, 0xfffff7bb, 0x2f, "984e784f697ebcc30053822c357eb55df43e9e037b650dfc7a3df9aa20e32749384f515111de5da4403cab68", @raw=0x7}, 0x200000, 0x7, 0x4, @raw=0x3, @integer64={0x9, 0xec, 0x340}, "b210e8ae72f3052d09004297cc39fbd4fe51f972eb62ed41cec2ea5c1e45264907d818e9711e2b57cd159b796ab9e6c81a2f47680e3d2a7f677dccfd260d82fe"}) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/zram0/io-timeout-fail\x00', 0x121201, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000200)='5', 0x1) r2 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x2000, 0x0) readv$auto(r2, &(0x7f0000000a80)={0x0, 0xffff}, 0x100) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x62000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000015c0), r4) sendmsg$auto_NL80211_CMD_GET_STATION(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000740)=ANY=[@ANYBLOB="3000b3f5", @ANYRES16=r5, @ANYBLOB="4d5f28bd7000fddbdf25110000000c0038800800008004009d00"], 0x20}, 0x1, 0x0, 0x0, 0x4001c005}, 0x800) read$auto_tracing_buffers_fops_trace(r3, &(0x7f00000002c0)=""/4096, 0x1000) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r7 = ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) ioctl$auto(0xffffffffffffffff, 0x800064c1, 0xffffffffffffffff) mknod$auto(0x0, 0x1001, 0x9) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, 0x0, 0x481, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1fe, 0xb9, 0x9, 0xfffffffffffffffd, 0x948d, 0x1ff, 0x1, 0x8, 0x8003, 0x65, 0x8000001f, 0x10000001005, 0x100000000006d41, 0x400, 0x1, 0x9]}, 0x0) select$auto(0x9, 0x0, 0x0, 0x0, 0x0) ioctl$auto_CEC_S_MODE(r7, 0x40046109, &(0x7f0000000040)=0x2) r8 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) ioctl$auto_SG_SET_COMMAND_Q(r8, 0x2271, &(0x7f0000000100)="192b66f2bae96d99e748077000b8d9157cfcca0b183d148c08b0360b4b3da922494d41eb9444c0f85acb110cd96ca87570062b2892f719b8bf045fcc90b733fc56c41b83bded85cd2d597d612bb70af0c3148165ebc2d25a2bfdad756cfbfd5d3943aeb7622e2a71b10627bb2e892c3ea181fd396acc909ac427f591adab3d6b99a261a1bbea16b08d0d03a6a04d8ba5708cb9410711d3441725e49002084fbef757eb31f649a69766cfc8ec9ea0df296e15") kernel console output (not intermixed with test programs): T7146] ? fput+0x79/0x100 [ 159.963146][ T7146] ? ksys_write+0x1ac/0x250 [ 159.963162][ T7146] ? __pfx_ksys_write+0x10/0x10 [ 159.963182][ T7146] __x64_sys_sendmmsg+0x9c/0x100 [ 159.963200][ T7146] ? lockdep_hardirqs_on+0x78/0x100 [ 159.963214][ T7146] do_syscall_64+0x10b/0x830 [ 159.963227][ T7146] ? clear_bhb_loop+0x40/0x90 [ 159.963246][ T7146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.963261][ T7146] RIP: 0033:0x7fb1aad9ce59 [ 159.963273][ T7146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.963286][ T7146] RSP: 002b:00007fb1abca5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 159.963300][ T7146] RAX: ffffffffffffffda RBX: 00007fb1ab015fa0 RCX: 00007fb1aad9ce59 [ 159.963310][ T7146] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000003 [ 159.963318][ T7146] RBP: 00007fb1abca5090 R08: 0000000000000000 R09: 0000000000000000 [ 159.963327][ T7146] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 159.963335][ T7146] R13: 00007fb1ab016038 R14: 00007fb1ab015fa0 R15: 00007ffec139a1b8 [ 159.963354][ T7146] [ 160.318009][ T7150] netlink: 334 bytes leftover after parsing attributes in process `syz.3.277'. [ 160.717053][ T7156] netlink: 334 bytes leftover after parsing attributes in process `syz.1.280'. [ 161.098035][ T7160] zswap: compressor not available [ 161.112843][ T7160] FAULT_INJECTION: forcing a failure. [ 161.112843][ T7160] name failslab, interval 1, probability 0, space 0, times 0 [ 161.113216][ T7160] CPU: 0 UID: 0 PID: 7160 Comm: syz.1.282 Not tainted syzkaller #0 PREEMPT(full) [ 161.113236][ T7160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 161.113245][ T7160] Call Trace: [ 161.113250][ T7160] [ 161.113256][ T7160] dump_stack_lvl+0x100/0x190 [ 161.113277][ T7160] should_fail_ex.cold+0x5/0xa [ 161.113296][ T7160] ? get_callchain_buffers+0x123/0x380 [ 161.113316][ T7160] should_failslab+0xc2/0x120 [ 161.113334][ T7160] __kmalloc_noprof+0xe0/0x850 [ 161.113348][ T7160] ? __pfx_rcu_is_watching+0x10/0x10 [ 161.113370][ T7160] get_callchain_buffers+0x123/0x380 [ 161.113391][ T7160] ? bpf_lsm_capable+0x9/0x10 [ 161.113408][ T7160] ? security_capable+0x80/0x260 [ 161.113431][ T7160] stack_map_alloc+0x316/0x610 [ 161.113450][ T7160] ? __pfx_stack_map_mem_usage+0x10/0x10 [ 161.113467][ T7160] map_create+0x84e/0x2bc0 [ 161.113488][ T7160] ? futex_unqueue+0x13d/0x2c0 [ 161.113504][ T7160] ? __futex_wait+0x256/0x300 [ 161.113528][ T7160] ? __pfx_map_create+0x10/0x10 [ 161.113548][ T7160] ? __might_fault+0xc5/0x140 [ 161.113576][ T7160] ? __might_fault+0xc5/0x140 [ 161.113606][ T7160] __sys_bpf+0x2091/0x4b90 [ 161.113625][ T7160] ? __pfx___sys_bpf+0x10/0x10 [ 161.113640][ T7160] ? __pfx_futex_wait+0x10/0x10 [ 161.113664][ T7160] ? ksys_write+0x190/0x250 [ 161.113687][ T7160] ? do_futex+0x192/0x350 [ 161.113713][ T7160] ? xfd_validate_state+0x129/0x190 [ 161.113734][ T7160] __x64_sys_bpf+0x7b/0xc0 [ 161.113749][ T7160] ? lockdep_hardirqs_on+0x78/0x100 [ 161.113764][ T7160] do_syscall_64+0x10b/0x830 [ 161.113777][ T7160] ? clear_bhb_loop+0x40/0x90 [ 161.113795][ T7160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.113810][ T7160] RIP: 0033:0x7fa3fb79ce59 [ 161.113823][ T7160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.113836][ T7160] RSP: 002b:00007fa3fc5cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 161.113850][ T7160] RAX: ffffffffffffffda RBX: 00007fa3fba15fa0 RCX: 00007fa3fb79ce59 [ 161.113860][ T7160] RDX: 00000000000006f4 RSI: 0000200000000580 RDI: 0000000000000000 [ 161.113869][ T7160] RBP: 00007fa3fb832d6f R08: 0000000000000000 R09: 0000000000000000 [ 161.113877][ T7160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.113886][ T7160] R13: 00007fa3fba16038 R14: 00007fa3fba15fa0 R15: 00007ffe89b00b08 [ 161.113906][ T7160] [ 161.341973][ T7168] netlink: 28 bytes leftover after parsing attributes in process `syz.3.283'. [ 161.707489][ T7180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.707802][ T7180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.736581][ T5637] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 162.723412][ T7185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.287'. [ 162.893537][ T7189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.288'. [ 165.040664][ T7205] zswap: compressor not available [ 165.218927][ T7217] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 166.303955][ T7239] blktrace: Concurrent blktraces are not allowed on loop2 [ 166.654682][ T7241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.301'. [ 166.990177][ T5637] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 167.858751][ T7269] FAULT_INJECTION: forcing a failure. [ 167.858751][ T7269] name failslab, interval 1, probability 0, space 0, times 0 [ 167.929967][ T7269] CPU: 0 UID: 0 PID: 7269 Comm: syz.2.308 Not tainted syzkaller #0 PREEMPT(full) [ 167.929990][ T7269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 167.929999][ T7269] Call Trace: [ 167.930011][ T7269] [ 167.930017][ T7269] dump_stack_lvl+0x100/0x190 [ 167.930039][ T7269] should_fail_ex.cold+0x5/0xa [ 167.930059][ T7269] should_failslab+0xc2/0x120 [ 167.930078][ T7269] __kmalloc_cache_noprof+0x7a/0x6f0 [ 167.930099][ T7269] ? init_srcu_struct_fields+0xa69/0xfa0 [ 167.930114][ T7269] ? __kasan_kmalloc+0xaa/0xb0 [ 167.930128][ T7269] ? lockdep_init_map_type+0x5c/0x250 [ 167.930146][ T7269] init_srcu_struct_fields+0xa69/0xfa0 [ 167.930164][ T7269] kvm_dev_ioctl+0x593/0x1a50 [ 167.930188][ T7269] ? find_held_lock+0x2b/0x80 [ 167.930206][ T7269] ? __fget_files+0x215/0x3d0 [ 167.930222][ T7269] ? hook_file_ioctl_common+0x149/0x410 [ 167.930240][ T7269] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 167.930262][ T7269] ? __fget_files+0x21f/0x3d0 [ 167.930282][ T7269] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 167.930303][ T7269] __x64_sys_ioctl+0x18e/0x210 [ 167.930320][ T7269] do_syscall_64+0x10b/0x830 [ 167.930334][ T7269] ? clear_bhb_loop+0x40/0x90 [ 167.930351][ T7269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.930366][ T7269] RIP: 0033:0x7fa0e7d9ce59 [ 167.930379][ T7269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.930393][ T7269] RSP: 002b:00007fa0e8d11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 167.930408][ T7269] RAX: ffffffffffffffda RBX: 00007fa0e8015fa0 RCX: 00007fa0e7d9ce59 [ 167.930417][ T7269] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000008 [ 167.930426][ T7269] RBP: 00007fa0e7e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 167.930434][ T7269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.930442][ T7269] R13: 00007fa0e8016038 R14: 00007fa0e8015fa0 R15: 00007ffe7ed510b8 [ 167.930462][ T7269] [ 169.059985][ T7282] FAULT_INJECTION: forcing a failure. [ 169.059985][ T7282] name failslab, interval 1, probability 0, space 0, times 0 [ 169.119785][ T7282] CPU: 0 UID: 0 PID: 7282 Comm: syz.0.309 Not tainted syzkaller #0 PREEMPT(full) [ 169.119807][ T7282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 169.119816][ T7282] Call Trace: [ 169.119821][ T7282] [ 169.119827][ T7282] dump_stack_lvl+0x100/0x190 [ 169.119847][ T7282] should_fail_ex.cold+0x5/0xa [ 169.119867][ T7282] should_failslab+0xc2/0x120 [ 169.119885][ T7282] __kvmalloc_node_noprof+0xfa/0xa00 [ 169.119901][ T7282] ? proc_sys_call_handler+0x2c7/0x5a0 [ 169.119919][ T7282] ? proc_sys_call_handler+0x169/0x5a0 [ 169.119942][ T7282] proc_sys_call_handler+0x2c7/0x5a0 [ 169.119967][ T7282] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 169.119992][ T7282] vfs_write+0x6ac/0x1070 [ 169.120010][ T7282] ? __pfx_proc_sys_write+0x10/0x10 [ 169.120030][ T7282] ? __pfx_vfs_write+0x10/0x10 [ 169.120059][ T7282] ksys_write+0x12a/0x250 [ 169.120077][ T7282] ? __pfx_ksys_write+0x10/0x10 [ 169.120095][ T7282] ? rcu_is_watching+0x12/0xc0 [ 169.120116][ T7282] do_syscall_64+0x10b/0x830 [ 169.120130][ T7282] ? clear_bhb_loop+0x40/0x90 [ 169.120148][ T7282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.120163][ T7282] RIP: 0033:0x7f52a459ce59 [ 169.120176][ T7282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.120189][ T7282] RSP: 002b:00007f52a538d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 169.120203][ T7282] RAX: ffffffffffffffda RBX: 00007f52a4815fa0 RCX: 00007f52a459ce59 [ 169.120212][ T7282] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 169.120220][ T7282] RBP: 00007f52a538d090 R08: 0000000000000000 R09: 0000000000000000 [ 169.120229][ T7282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.120237][ T7282] R13: 00007f52a4816038 R14: 00007f52a4815fa0 R15: 00007ffc4e3c50b8 [ 169.120256][ T7282] [ 169.615868][ T7299] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 169.623268][ T7299] FAULT_INJECTION: forcing a failure. [ 169.623268][ T7299] name failslab, interval 1, probability 0, space 0, times 0 [ 169.623302][ T7299] CPU: 0 UID: 0 PID: 7299 Comm: syz.2.313 Not tainted syzkaller #0 PREEMPT(full) [ 169.623319][ T7299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 169.623327][ T7299] Call Trace: [ 169.623332][ T7299] [ 169.623337][ T7299] dump_stack_lvl+0x100/0x190 [ 169.623357][ T7299] should_fail_ex.cold+0x5/0xa [ 169.623376][ T7299] ? tomoyo_encode2+0xfb/0x3c0 [ 169.623394][ T7299] should_failslab+0xc2/0x120 [ 169.623413][ T7299] __kmalloc_noprof+0xe0/0x850 [ 169.623426][ T7299] ? d_absolute_path+0x136/0x1b0 [ 169.623444][ T7299] tomoyo_encode2+0xfb/0x3c0 [ 169.623466][ T7299] tomoyo_encode+0x29/0x50 [ 169.623484][ T7299] tomoyo_realpath_from_path+0x18c/0x690 [ 169.623508][ T7299] tomoyo_path_number_perm+0x23c/0x580 [ 169.623524][ T7299] ? tomoyo_path_number_perm+0x22e/0x580 [ 169.623541][ T7299] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 169.623577][ T7299] ? find_held_lock+0x2b/0x80 [ 169.623595][ T7299] ? __fget_files+0x215/0x3d0 [ 169.623612][ T7299] ? hook_file_ioctl_common+0x149/0x410 [ 169.623628][ T7299] ? __fget_files+0x215/0x3d0 [ 169.623648][ T7299] ? __fget_files+0x21f/0x3d0 [ 169.623668][ T7299] security_file_ioctl+0xd3/0x230 [ 169.623686][ T7299] __x64_sys_ioctl+0xb7/0x210 [ 169.623703][ T7299] do_syscall_64+0x10b/0x830 [ 169.623717][ T7299] ? clear_bhb_loop+0x40/0x90 [ 169.623735][ T7299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.623750][ T7299] RIP: 0033:0x7fa0e7d9ce59 [ 169.623762][ T7299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.623776][ T7299] RSP: 002b:00007fa0e8cf0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.623790][ T7299] RAX: ffffffffffffffda RBX: 00007fa0e8016090 RCX: 00007fa0e7d9ce59 [ 169.623799][ T7299] RDX: 0000000000000000 RSI: 000000004008550d RDI: 0000000000000003 [ 169.623807][ T7299] RBP: 00007fa0e8cf0090 R08: 0000000000000000 R09: 0000000000000000 [ 169.623816][ T7299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.623824][ T7299] R13: 00007fa0e8016128 R14: 00007fa0e8016090 R15: 00007ffe7ed510b8 [ 169.623843][ T7299] [ 169.623855][ T7299] ERROR: Out of memory at tomoyo_realpath_from_path. [ 169.720848][ T7292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.311'. [ 170.568606][ T7313] blktrace: Concurrent blktraces are not allowed on loop2 [ 170.821357][ T7319] FAULT_INJECTION: forcing a failure. [ 170.821357][ T7319] name failslab, interval 1, probability 0, space 0, times 0 [ 170.821395][ T7319] CPU: 0 UID: 0 PID: 7319 Comm: syz.2.319 Not tainted syzkaller #0 PREEMPT(full) [ 170.821413][ T7319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 170.821422][ T7319] Call Trace: [ 170.821427][ T7319] [ 170.821432][ T7319] dump_stack_lvl+0x100/0x190 [ 170.821453][ T7319] should_fail_ex.cold+0x5/0xa [ 170.821470][ T7319] ? pcpu_alloc_noprof+0x960/0x1cc0 [ 170.821487][ T7319] should_failslab+0xc2/0x120 [ 170.821505][ T7319] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 170.821520][ T7319] ? radix_tree_node_alloc.constprop.0+0x66/0x340 [ 170.821540][ T7319] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 170.821559][ T7319] radix_tree_node_alloc.constprop.0+0x66/0x340 [ 170.821582][ T7319] idr_get_free+0x52e/0xa00 [ 170.821609][ T7319] idr_alloc_u32+0x1ac/0x320 [ 170.821633][ T7319] ? __pfx_idr_alloc_u32+0x10/0x10 [ 170.821658][ T7319] ? lock_acquire+0x1b1/0x370 [ 170.821675][ T7319] idr_alloc_cyclic+0x10b/0x230 [ 170.821698][ T7319] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 170.821720][ T7319] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 170.821741][ T7319] map_create+0x14d8/0x2bc0 [ 170.821770][ T7319] ? futex_unqueue+0x13d/0x2c0 [ 170.821787][ T7319] ? __futex_wait+0x256/0x300 [ 170.821810][ T7319] ? __pfx_map_create+0x10/0x10 [ 170.821832][ T7319] ? __might_fault+0xc5/0x140 [ 170.821854][ T7319] ? __might_fault+0xc5/0x140 [ 170.821884][ T7319] __sys_bpf+0x2091/0x4b90 [ 170.821901][ T7319] ? __pfx___sys_bpf+0x10/0x10 [ 170.821916][ T7319] ? __pfx_futex_wait+0x10/0x10 [ 170.821939][ T7319] ? ksys_write+0x190/0x250 [ 170.821955][ T7319] ? ksys_write+0x190/0x250 [ 170.821975][ T7319] ? do_futex+0x192/0x350 [ 170.822001][ T7319] ? xfd_validate_state+0x129/0x190 [ 170.822016][ T7319] ? ksys_write+0x1ac/0x250 [ 170.822037][ T7319] __x64_sys_bpf+0x7b/0xc0 [ 170.822052][ T7319] ? lockdep_hardirqs_on+0x78/0x100 [ 170.822066][ T7319] do_syscall_64+0x10b/0x830 [ 170.822079][ T7319] ? clear_bhb_loop+0x40/0x90 [ 170.822097][ T7319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.822111][ T7319] RIP: 0033:0x7fa0e7d9ce59 [ 170.822124][ T7319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.822138][ T7319] RSP: 002b:00007fa0e8d11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 170.822153][ T7319] RAX: ffffffffffffffda RBX: 00007fa0e8015fa0 RCX: 00007fa0e7d9ce59 [ 170.822163][ T7319] RDX: 000000000000000f RSI: 00002000000001c0 RDI: 0000000000000000 [ 170.822172][ T7319] RBP: 00007fa0e7e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 170.822182][ T7319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.822190][ T7319] R13: 00007fa0e8016038 R14: 00007fa0e8015fa0 R15: 00007ffe7ed510b8 [ 170.822210][ T7319] [ 171.191832][ T7324] FAULT_INJECTION: forcing a failure. [ 171.191832][ T7324] name failslab, interval 1, probability 0, space 0, times 0 [ 171.191856][ T7324] CPU: 0 UID: 0 PID: 7324 Comm: syz.3.320 Not tainted syzkaller #0 PREEMPT(full) [ 171.191877][ T7324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 171.191886][ T7324] Call Trace: [ 171.191891][ T7324] [ 171.191897][ T7324] dump_stack_lvl+0x100/0x190 [ 171.191917][ T7324] should_fail_ex.cold+0x5/0xa [ 171.191937][ T7324] should_failslab+0xc2/0x120 [ 171.191955][ T7324] __kmalloc_cache_noprof+0x7a/0x6f0 [ 171.191976][ T7324] ? kvm_dev_ioctl+0xa8d/0x1a50 [ 171.192000][ T7324] kvm_dev_ioctl+0xa8d/0x1a50 [ 171.192023][ T7324] ? find_held_lock+0x2b/0x80 [ 171.192042][ T7324] ? __fget_files+0x215/0x3d0 [ 171.192058][ T7324] ? hook_file_ioctl_common+0x149/0x410 [ 171.192076][ T7324] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 171.192098][ T7324] ? __fget_files+0x21f/0x3d0 [ 171.192117][ T7324] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 171.192139][ T7324] __x64_sys_ioctl+0x18e/0x210 [ 171.192155][ T7324] do_syscall_64+0x10b/0x830 [ 171.192169][ T7324] ? clear_bhb_loop+0x40/0x90 [ 171.192187][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.192202][ T7324] RIP: 0033:0x7fb1aad9ce59 [ 171.192214][ T7324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.192228][ T7324] RSP: 002b:00007fb1abca5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 171.192243][ T7324] RAX: ffffffffffffffda RBX: 00007fb1ab015fa0 RCX: 00007fb1aad9ce59 [ 171.192252][ T7324] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000008 [ 171.192261][ T7324] RBP: 00007fb1aae32d6f R08: 0000000000000000 R09: 0000000000000000 [ 171.192269][ T7324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.192277][ T7324] R13: 00007fb1ab016038 R14: 00007fb1ab015fa0 R15: 00007ffec139a1b8 [ 171.192296][ T7324] [ 171.391935][ T7326] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 171.392068][ T7326] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 171.418240][ T7326] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 171.437300][ T7326] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 171.437370][ T7326] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 171.452116][ T7326] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 171.459253][ T7326] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 171.463903][ T7326] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 171.463971][ T7326] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 171.470755][ T7326] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 171.472432][ T7326] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 171.472500][ T7326] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 171.490806][ T7326] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 171.953278][ T7333] netlink: set zone limit has 4 unknown bytes [ 172.120002][ T7335] FAULT_INJECTION: forcing a failure. [ 172.120002][ T7335] name failslab, interval 1, probability 0, space 0, times 0 [ 172.120029][ T7335] CPU: 0 UID: 0 PID: 7335 Comm: syz.1.324 Not tainted syzkaller #0 PREEMPT(full) [ 172.120046][ T7335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 172.120055][ T7335] Call Trace: [ 172.120060][ T7335] [ 172.120065][ T7335] dump_stack_lvl+0x100/0x190 [ 172.120085][ T7335] should_fail_ex.cold+0x5/0xa [ 172.120102][ T7335] ? pcpu_alloc_noprof+0x960/0x1cc0 [ 172.120120][ T7335] should_failslab+0xc2/0x120 [ 172.120138][ T7335] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 172.120152][ T7335] ? radix_tree_node_alloc.constprop.0+0x66/0x340 [ 172.120173][ T7335] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 172.120192][ T7335] radix_tree_node_alloc.constprop.0+0x66/0x340 [ 172.120215][ T7335] idr_get_free+0x52e/0xa00 [ 172.120244][ T7335] idr_alloc_u32+0x1ac/0x320 [ 172.120268][ T7335] ? __pfx_idr_alloc_u32+0x10/0x10 [ 172.120292][ T7335] ? lock_acquire+0x1b1/0x370 [ 172.120310][ T7335] idr_alloc_cyclic+0x10b/0x230 [ 172.120340][ T7335] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 172.120362][ T7335] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 172.120384][ T7335] map_create+0x14d8/0x2bc0 [ 172.120406][ T7335] ? futex_unqueue+0x13d/0x2c0 [ 172.120422][ T7335] ? __futex_wait+0x256/0x300 [ 172.120445][ T7335] ? __pfx_map_create+0x10/0x10 [ 172.120465][ T7335] ? __might_fault+0xc5/0x140 [ 172.120486][ T7335] ? __might_fault+0xc5/0x140 [ 172.120515][ T7335] __sys_bpf+0x2091/0x4b90 [ 172.120532][ T7335] ? __pfx___sys_bpf+0x10/0x10 [ 172.120547][ T7335] ? __pfx_futex_wait+0x10/0x10 [ 172.120569][ T7335] ? ksys_write+0x190/0x250 [ 172.120586][ T7335] ? ksys_write+0x190/0x250 [ 172.120606][ T7335] ? do_futex+0x192/0x350 [ 172.120632][ T7335] ? xfd_validate_state+0x129/0x190 [ 172.120647][ T7335] ? ksys_write+0x1ac/0x250 [ 172.120675][ T7335] __x64_sys_bpf+0x7b/0xc0 [ 172.120690][ T7335] ? lockdep_hardirqs_on+0x78/0x100 [ 172.120705][ T7335] do_syscall_64+0x10b/0x830 [ 172.120718][ T7335] ? clear_bhb_loop+0x40/0x90 [ 172.120736][ T7335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.120751][ T7335] RIP: 0033:0x7fa3fb79ce59 [ 172.120763][ T7335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.120777][ T7335] RSP: 002b:00007fa3fc5cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 172.120791][ T7335] RAX: ffffffffffffffda RBX: 00007fa3fba15fa0 RCX: 00007fa3fb79ce59 [ 172.120801][ T7335] RDX: 000000000000000f RSI: 00002000000001c0 RDI: 0000000000000000 [ 172.120810][ T7335] RBP: 00007fa3fb832d6f R08: 0000000000000000 R09: 0000000000000000 [ 172.120819][ T7335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.120827][ T7335] R13: 00007fa3fba16038 R14: 00007fa3fba15fa0 R15: 00007ffe89b00b08 [ 172.120847][ T7335] [ 172.948351][ T7351] netlink: 28 bytes leftover after parsing attributes in process `syz.3.329'. [ 173.385256][ T5637] Bluetooth: hci0: command 0x0c1a tx timeout [ 173.465140][ T5637] Bluetooth: hci2: command 0x0c1a tx timeout [ 173.465176][ T5637] Bluetooth: hci1: command 0x0c1a tx timeout [ 173.545139][ T5640] Bluetooth: hci3: command 0x0c1a tx timeout [ 174.750190][ T7374] netlink: 28 bytes leftover after parsing attributes in process `syz.1.335'. [ 174.796579][ T7374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.829397][ T7374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.865784][ T7374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.905058][ T7374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.180521][ T7387] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 175.193260][ T7378] netlink: 178 bytes leftover after parsing attributes in process `syz.3.337'. [ 175.256605][ T7378] netlink: 16 bytes leftover after parsing attributes in process `syz.3.337'. [ 175.465721][ T5640] Bluetooth: hci0: command 0x0c1a tx timeout [ 175.546245][ T5640] Bluetooth: hci1: command 0x0c1a tx timeout [ 175.552348][ T5640] Bluetooth: hci2: command 0x0c1a tx timeout [ 175.626146][ T5640] Bluetooth: hci3: command 0x0c1a tx timeout [ 176.016848][ T7380] kexec: Could not allocate control_code_buffer [ 176.631476][ T7409] futex_wake_op: syz.0.341 tries to shift op by -2048; fix this program [ 176.692780][ T7403] 0x000000000001-0x000000020000 : "" [ 176.730854][ T7403] ftl_cs: FTL header corrupt! [ 177.207949][ T7418] futex_wake_op: syz.1.344 tries to shift op by -2048; fix this program [ 177.258251][ T7418] 0x000000000001-0x000000020000 : "" [ 177.292960][ T7418] ftl_cs: FTL header corrupt! [ 177.545330][ T5640] Bluetooth: hci0: command 0x0c1a tx timeout [ 177.625591][ T5637] Bluetooth: hci1: command 0x0c1a tx timeout [ 177.632742][ T5640] Bluetooth: hci2: command 0x0c1a tx timeout [ 177.706678][ T5640] Bluetooth: hci3: command 0x0c1a tx timeout [ 177.755718][ T5640] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 178.325997][ T7436] futex_wake_op: syz.0.346 tries to shift op by -2048; fix this program [ 178.382051][ T7436] futex_wake_op: syz.0.346 tries to shift op by -2048; fix this program [ 178.438284][ T7437] 0x000000000001-0x000000020000 : "" [ 178.543382][ T7437] ftl_cs: FTL header corrupt! [ 179.058140][ T7394] Process accounting resumed [ 179.590997][ T7466] FAULT_INJECTION: forcing a failure. [ 179.590997][ T7466] name failslab, interval 1, probability 0, space 0, times 0 [ 179.708828][ T5640] Bluetooth: hci1: command 0x0c1a tx timeout [ 179.757862][ T7466] CPU: 0 UID: 0 PID: 7466 Comm: syz.2.352 Not tainted syzkaller #0 PREEMPT(full) [ 179.757885][ T7466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 179.757895][ T7466] Call Trace: [ 179.757900][ T7466] [ 179.757907][ T7466] dump_stack_lvl+0x100/0x190 [ 179.757929][ T7466] should_fail_ex.cold+0x5/0xa [ 179.757949][ T7466] should_failslab+0xc2/0x120 [ 179.757967][ T7466] __kmalloc_cache_noprof+0x7a/0x6f0 [ 179.757989][ T7466] ? init_srcu_struct_fields+0xa69/0xfa0 [ 179.758004][ T7466] ? __kasan_kmalloc+0xaa/0xb0 [ 179.758018][ T7466] ? lockdep_init_map_type+0x5c/0x250 [ 179.758040][ T7466] init_srcu_struct_fields+0xa69/0xfa0 [ 179.758058][ T7466] kvm_dev_ioctl+0x593/0x1a50 [ 179.758083][ T7466] ? find_held_lock+0x2b/0x80 [ 179.758101][ T7466] ? __fget_files+0x215/0x3d0 [ 179.758118][ T7466] ? hook_file_ioctl_common+0x149/0x410 [ 179.758136][ T7466] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 179.758159][ T7466] ? __fget_files+0x21f/0x3d0 [ 179.758178][ T7466] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 179.758200][ T7466] __x64_sys_ioctl+0x18e/0x210 [ 179.758216][ T7466] do_syscall_64+0x10b/0x830 [ 179.758230][ T7466] ? clear_bhb_loop+0x40/0x90 [ 179.758248][ T7466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.758263][ T7466] RIP: 0033:0x7fa0e7d9ce59 [ 179.758277][ T7466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.758291][ T7466] RSP: 002b:00007fa0e8d11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 179.758305][ T7466] RAX: ffffffffffffffda RBX: 00007fa0e8015fa0 RCX: 00007fa0e7d9ce59 [ 179.758314][ T7466] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000008 [ 179.758323][ T7466] RBP: 00007fa0e7e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 179.758332][ T7466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.758340][ T7466] R13: 00007fa0e8016038 R14: 00007fa0e8015fa0 R15: 00007ffe7ed510b8 [ 179.758360][ T7466] [ 180.661477][ T7479] netlink: 28 bytes leftover after parsing attributes in process `syz.2.356'. [ 180.672282][ T7474] vivid-008: ================= START STATUS ================= [ 180.724866][ T5640] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 180.781677][ T7474] vivid-008: ================== END STATUS ================== [ 181.060566][ T7487] kvm: vcpu 4: requested lapic timer restore with starting count register 0x390=4294967104 (137438947328 ns) > initial count (6624 ns). Using initial count to start timer. [ 182.747621][ T5640] Bluetooth: hci1: command 0x0c1a tx timeout [ 182.776481][ T5637] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 183.004407][ T7470] random: crng reseeded on system resumption [ 183.831414][ T7517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.361'. [ 184.017591][ T5637] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 184.214713][ T7517] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 184.227884][ T29] audit: type=1800 audit(1779723662.868:4): pid=7517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.361" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 184.328779][ T7517] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 184.437319][ T7517] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 184.827214][ T5637] Bluetooth: hci1: command 0x0c1a tx timeout [ 184.873358][ T7517] syz.0.361 (7517) used greatest stack depth: 19928 bytes left [ 185.958143][ T7548] blktrace: Concurrent blktraces are not allowed on loop2 [ 186.109011][ T5629] Bluetooth: hci3: command 0x0c1a tx timeout [ 187.682919][ T7592] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 188.185196][ T5640] Bluetooth: hci3: command 0x0c1a tx timeout [ 189.303426][ T7613] futex_wake_op: syz.1.381 tries to shift op by -2048; fix this program [ 189.369353][ T7612] 0x000000000001-0x000000020000 : "" [ 189.403772][ T7612] ftl_cs: FTL header corrupt! [ 191.284178][ T7646] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 192.865695][ T7674] futex_wake_op: syz.1.394 tries to shift op by -2048; fix this program [ 192.907369][ T7674] 0x000000000001-0x000000020000 : "" [ 192.943334][ T7674] ftl_cs: FTL header corrupt! [ 193.928161][ T7698] usb usb3: usbfs: process 7698 (syz.3.395) did not claim interface 0 before use [ 194.048796][ T7682] zswap: compressor 000 not available [ 194.277032][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.287449][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.860991][ T7711] futex_wake_op: syz.1.399 tries to shift op by -2048; fix this program [ 196.700818][ T7746] futex_wake_op: syz.1.405 tries to shift op by -2048; fix this program [ 196.782914][ T7741] 0x000000000001-0x000000020000 : "" [ 196.819586][ T7741] ftl_cs: FTL header corrupt! [ 197.329654][ T7756] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 197.426076][ T7758] netlink: 334 bytes leftover after parsing attributes in process `syz.3.410'. [ 199.816952][ T7829] input: jJǸ9%vlQ J86 as /devices/virtual/input/input5 [ 200.249466][ T7835] gre0: entered allmulticast mode [ 201.833592][ T7886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.446'. [ 202.067935][ T7873] nbd: socks must be embedded in a SOCK_ITEM attr [ 202.850004][ T7897] futex_wake_op: syz.2.448 tries to shift op by -2048; fix this program [ 202.902128][ T7897] 0x000000000001-0x000000020000 : "" [ 202.938804][ T7897] ftl_cs: FTL header corrupt! [ 203.095227][ T7891] ubi0: detaching mtd0 [ 203.208591][ T7891] ubi0: mtd0 is detached [ 203.378002][ T7884] ubi0: attaching mtd0 [ 203.526238][ T7884] ubi0: scanning is finished [ 203.872083][ T7884] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 204.010504][ T7884] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 204.188071][ T7884] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 204.414923][ T7884] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 204.523454][ T7924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.452'. [ 204.556697][ T7884] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 204.673605][ T7884] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 204.785484][ T7884] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 217261076 [ 204.935782][ T7884] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 205.084126][ T7938] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 205.115700][ T7920] ubi0: background thread "ubi_bgt0d" started, PID 7920 [ 206.389448][ T7964] futex_wake_op: syz.1.460 tries to shift op by -2048; fix this program [ 206.479455][ T7966] FAULT_INJECTION: forcing a failure. [ 206.479455][ T7966] name failslab, interval 1, probability 0, space 0, times 0 [ 206.557678][ T7966] CPU: 0 UID: 0 PID: 7966 Comm: syz.2.461 Not tainted syzkaller #0 PREEMPT(full) [ 206.557701][ T7966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 206.557710][ T7966] Call Trace: [ 206.557716][ T7966] [ 206.557722][ T7966] dump_stack_lvl+0x100/0x190 [ 206.557744][ T7966] should_fail_ex.cold+0x5/0xa [ 206.557763][ T7966] ? tomoyo_encode2+0xfb/0x3c0 [ 206.557782][ T7966] should_failslab+0xc2/0x120 [ 206.557800][ T7966] __kmalloc_noprof+0xe0/0x850 [ 206.557814][ T7966] ? d_absolute_path+0x136/0x1b0 [ 206.557832][ T7966] tomoyo_encode2+0xfb/0x3c0 [ 206.557862][ T7966] tomoyo_encode+0x29/0x50 [ 206.557881][ T7966] tomoyo_realpath_from_path+0x18c/0x690 [ 206.557906][ T7966] tomoyo_check_open_permission+0x2af/0x3c0 [ 206.557925][ T7966] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 206.557949][ T7966] ? hook_file_open+0x24e/0x7a0 [ 206.557980][ T7966] ? path_get+0x61/0x80 [ 206.558001][ T7966] tomoyo_file_open+0x6b/0x90 [ 206.558024][ T7966] security_file_open+0xb5/0x1e0 [ 206.558043][ T7966] do_dentry_open+0x5aa/0x1660 [ 206.558062][ T7966] ? security_inode_permission+0xbf/0x250 [ 206.558082][ T7966] vfs_open+0x82/0x3f0 [ 206.558106][ T7966] path_openat+0x208c/0x31a0 [ 206.558131][ T7966] ? __pfx_path_openat+0x10/0x10 [ 206.558156][ T7966] do_file_open+0x20e/0x430 [ 206.558176][ T7966] ? __pfx_do_file_open+0x10/0x10 [ 206.558208][ T7966] ? alloc_fd+0x476/0x790 [ 206.558227][ T7966] ? do_getname+0x191/0x390 [ 206.558250][ T7966] do_sys_openat2+0x10d/0x1e0 [ 206.558272][ T7966] ? __pfx_do_sys_openat2+0x10/0x10 [ 206.558301][ T7966] __x64_sys_openat+0x12d/0x210 [ 206.558315][ T7966] ? __pfx___x64_sys_openat+0x10/0x10 [ 206.558341][ T7966] ? rcu_is_watching+0x12/0xc0 [ 206.558362][ T7966] do_syscall_64+0x10b/0x830 [ 206.558376][ T7966] ? clear_bhb_loop+0x40/0x90 [ 206.558394][ T7966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.558411][ T7966] RIP: 0033:0x7fa0e7d9ce59 [ 206.558425][ T7966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.558439][ T7966] RSP: 002b:00007fa0e8d11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 206.558454][ T7966] RAX: ffffffffffffffda RBX: 00007fa0e8015fa0 RCX: 00007fa0e7d9ce59 [ 206.558463][ T7966] RDX: 000000000006ab82 RSI: 00002000000011c0 RDI: ffffffffffffff9c [ 206.558473][ T7966] RBP: 00007fa0e7e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 206.558482][ T7966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.558491][ T7966] R13: 00007fa0e8016038 R14: 00007fa0e8015fa0 R15: 00007ffe7ed510b8 [ 206.558511][ T7966] [ 206.558537][ T7966] ERROR: Out of memory at tomoyo_realpath_from_path. [ 206.841044][ T7961] 0x000000000001-0x000000020000 : "" [ 206.963635][ T7961] ftl_cs: FTL header corrupt! [ 207.754163][ T7956] kexec: Could not allocate control_code_buffer [ 208.509278][ T7998] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 209.237807][ T8011] random: crng reseeded on system resumption [ 209.916775][ T5629] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 210.808979][ T8014] hub 1-0:1.0: USB hub found [ 210.903560][ T8014] hub 1-0:1.0: 1 port detected [ 211.248528][ T8069] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 211.768966][ T8078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.483'. [ 211.782721][ T8008] kexec: Could not allocate control_code_buffer [ 211.934296][ T8008] Process accounting paused [ 212.019634][ T8082] input: jJǸ9%vlQ J86 as /devices/virtual/input/input6 [ 212.703543][ T5629] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 212.993402][ T8108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.491'. [ 213.433116][ T8116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.493'. [ 213.910602][ T8134] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 213.934270][ T8132] FAULT_INJECTION: forcing a failure. [ 213.934270][ T8132] name failslab, interval 1, probability 0, space 0, times 0 [ 214.084277][ T8132] CPU: 0 UID: 0 PID: 8132 Comm: syz.2.497 Not tainted syzkaller #0 PREEMPT(full) [ 214.084300][ T8132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 214.084309][ T8132] Call Trace: [ 214.084315][ T8132] [ 214.084321][ T8132] dump_stack_lvl+0x100/0x190 [ 214.084344][ T8132] should_fail_ex.cold+0x5/0xa [ 214.084363][ T8132] ? tomoyo_encode2+0xfb/0x3c0 [ 214.084382][ T8132] should_failslab+0xc2/0x120 [ 214.084400][ T8132] __kmalloc_noprof+0xe0/0x850 [ 214.084413][ T8132] ? d_absolute_path+0x136/0x1b0 [ 214.084432][ T8132] tomoyo_encode2+0xfb/0x3c0 [ 214.084453][ T8132] tomoyo_encode+0x29/0x50 [ 214.084471][ T8132] tomoyo_realpath_from_path+0x18c/0x690 [ 214.084495][ T8132] tomoyo_check_open_permission+0x2af/0x3c0 [ 214.084513][ T8132] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 214.084538][ T8132] ? hook_file_open+0x24e/0x7a0 [ 214.084569][ T8132] ? path_get+0x61/0x80 [ 214.084591][ T8132] tomoyo_file_open+0x6b/0x90 [ 214.084613][ T8132] security_file_open+0xb5/0x1e0 [ 214.084631][ T8132] do_dentry_open+0x5aa/0x1660 [ 214.084651][ T8132] ? security_inode_permission+0xbf/0x250 [ 214.084671][ T8132] vfs_open+0x82/0x3f0 [ 214.084695][ T8132] path_openat+0x208c/0x31a0 [ 214.084720][ T8132] ? __pfx_path_openat+0x10/0x10 [ 214.084745][ T8132] do_file_open+0x20e/0x430 [ 214.084765][ T8132] ? __pfx_do_file_open+0x10/0x10 [ 214.084798][ T8132] ? alloc_fd+0x476/0x790 [ 214.084817][ T8132] ? do_getname+0x191/0x390 [ 214.084840][ T8132] do_sys_openat2+0x10d/0x1e0 [ 214.084862][ T8132] ? __pfx_do_sys_openat2+0x10/0x10 [ 214.084891][ T8132] __x64_sys_openat+0x12d/0x210 [ 214.084906][ T8132] ? __pfx___x64_sys_openat+0x10/0x10 [ 214.084932][ T8132] ? rcu_is_watching+0x12/0xc0 [ 214.084952][ T8132] do_syscall_64+0x10b/0x830 [ 214.084971][ T8132] ? clear_bhb_loop+0x40/0x90 [ 214.084990][ T8132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.085005][ T8132] RIP: 0033:0x7fa0e7d9ce59 [ 214.085019][ T8132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.085032][ T8132] RSP: 002b:00007fa0e8d11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 214.085047][ T8132] RAX: ffffffffffffffda RBX: 00007fa0e8015fa0 RCX: 00007fa0e7d9ce59 [ 214.085056][ T8132] RDX: 000000000006ab82 RSI: 00002000000011c0 RDI: ffffffffffffff9c [ 214.085066][ T8132] RBP: 00007fa0e7e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 214.085074][ T8132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.085083][ T8132] R13: 00007fa0e8016038 R14: 00007fa0e8015fa0 R15: 00007ffe7ed510b8 [ 214.085103][ T8132] [ 215.447159][ T5629] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 215.839480][ T5629] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 216.683433][ T8167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.505'. [ 216.861233][ T8132] ERROR: Out of memory at tomoyo_realpath_from_path. [ 217.903699][ T5629] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 220.391148][ T8231] input: jJǸ9%vlQ J86 as /devices/virtual/input/input7 [ 221.829378][ T8237] syz.3.521 (8237) used greatest stack depth: 19528 bytes left [ 223.259664][ T5629] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 224.701006][ T8290] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 224.724667][ T8290] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 224.755563][ T8290] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 224.800066][ T8290] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 225.435507][ T8334] FAULT_INJECTION: forcing a failure. [ 225.435507][ T8334] name failslab, interval 1, probability 0, space 0, times 0 [ 225.482326][ T8313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.534'. [ 225.503618][ T8334] CPU: 0 UID: 0 PID: 8334 Comm: syz.2.540 Not tainted syzkaller #0 PREEMPT(full) [ 225.503641][ T8334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 225.503653][ T8334] Call Trace: [ 225.503659][ T8334] [ 225.503665][ T8334] dump_stack_lvl+0x100/0x190 [ 225.503688][ T8334] should_fail_ex.cold+0x5/0xa [ 225.503708][ T8334] ? tomoyo_encode2+0xfb/0x3c0 [ 225.503727][ T8334] should_failslab+0xc2/0x120 [ 225.503745][ T8334] __kmalloc_noprof+0xe0/0x850 [ 225.503758][ T8334] ? d_absolute_path+0x136/0x1b0 [ 225.503776][ T8334] tomoyo_encode2+0xfb/0x3c0 [ 225.503798][ T8334] tomoyo_encode+0x29/0x50 [ 225.503816][ T8334] tomoyo_realpath_from_path+0x18c/0x690 [ 225.503840][ T8334] tomoyo_check_open_permission+0x2af/0x3c0 [ 225.503859][ T8334] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 225.503883][ T8334] ? hook_file_open+0x24e/0x7a0 [ 225.503913][ T8334] ? path_get+0x61/0x80 [ 225.503935][ T8334] tomoyo_file_open+0x6b/0x90 [ 225.503957][ T8334] security_file_open+0xb5/0x1e0 [ 225.503987][ T8334] do_dentry_open+0x5aa/0x1660 [ 225.504008][ T8334] ? security_inode_permission+0xbf/0x250 [ 225.504030][ T8334] vfs_open+0x82/0x3f0 [ 225.504055][ T8334] path_openat+0x208c/0x31a0 [ 225.504080][ T8334] ? __pfx_path_openat+0x10/0x10 [ 225.504106][ T8334] do_file_open+0x20e/0x430 [ 225.504126][ T8334] ? __pfx_do_file_open+0x10/0x10 [ 225.504158][ T8334] ? alloc_fd+0x476/0x790 [ 225.504178][ T8334] ? do_getname+0x191/0x390 [ 225.504200][ T8334] do_sys_openat2+0x10d/0x1e0 [ 225.504222][ T8334] ? __pfx_do_sys_openat2+0x10/0x10 [ 225.504251][ T8334] __x64_sys_openat+0x12d/0x210 [ 225.504266][ T8334] ? __pfx___x64_sys_openat+0x10/0x10 [ 225.504299][ T8334] ? rcu_is_watching+0x12/0xc0 [ 225.504321][ T8334] do_syscall_64+0x10b/0x830 [ 225.504335][ T8334] ? clear_bhb_loop+0x40/0x90 [ 225.504353][ T8334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.504367][ T8334] RIP: 0033:0x7fa0e7d9ce59 [ 225.504381][ T8334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.504395][ T8334] RSP: 002b:00007fa0e8d11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 225.504410][ T8334] RAX: ffffffffffffffda RBX: 00007fa0e8015fa0 RCX: 00007fa0e7d9ce59 [ 225.504420][ T8334] RDX: 000000000006ab82 RSI: 00002000000011c0 RDI: ffffffffffffff9c [ 225.504430][ T8334] RBP: 00007fa0e7e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 225.504438][ T8334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.504447][ T8334] R13: 00007fa0e8016038 R14: 00007fa0e8015fa0 R15: 00007ffe7ed510b8 [ 225.504467][ T8334] [ 225.504503][ T8334] ERROR: Out of memory at tomoyo_realpath_from_path. [ 225.929493][ T8307] Process accounting resumed [ 226.008090][ T5629] Bluetooth: hci0: command 0x0c1a tx timeout [ 226.235538][ T8345] FAULT_INJECTION: forcing a failure. [ 226.235538][ T8345] name failslab, interval 1, probability 0, space 0, times 0 [ 226.322304][ T8345] CPU: 0 UID: 0 PID: 8345 Comm: syz.0.541 Not tainted syzkaller #0 PREEMPT(full) [ 226.322326][ T8345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 226.322336][ T8345] Call Trace: [ 226.322342][ T8345] [ 226.322348][ T8345] dump_stack_lvl+0x100/0x190 [ 226.322370][ T8345] should_fail_ex.cold+0x5/0xa [ 226.322390][ T8345] ? tomoyo_encode2+0xfb/0x3c0 [ 226.322410][ T8345] should_failslab+0xc2/0x120 [ 226.322428][ T8345] __kmalloc_noprof+0xe0/0x850 [ 226.322442][ T8345] ? d_absolute_path+0x136/0x1b0 [ 226.322461][ T8345] tomoyo_encode2+0xfb/0x3c0 [ 226.322484][ T8345] tomoyo_encode+0x29/0x50 [ 226.322502][ T8345] tomoyo_realpath_from_path+0x18c/0x690 [ 226.322526][ T8345] tomoyo_path_number_perm+0x23c/0x580 [ 226.322542][ T8345] ? tomoyo_path_number_perm+0x22e/0x580 [ 226.322560][ T8345] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 226.322575][ T8345] ? futex_wake+0x1ad/0x530 [ 226.322612][ T8345] ? find_held_lock+0x2b/0x80 [ 226.322630][ T8345] ? __fget_files+0x215/0x3d0 [ 226.322646][ T8345] ? hook_file_ioctl_common+0x149/0x410 [ 226.322662][ T8345] ? __fget_files+0x215/0x3d0 [ 226.322682][ T8345] ? __fget_files+0x21f/0x3d0 [ 226.322703][ T8345] security_file_ioctl+0xd3/0x230 [ 226.322720][ T8345] __x64_sys_ioctl+0xb7/0x210 [ 226.322737][ T8345] do_syscall_64+0x10b/0x830 [ 226.322751][ T8345] ? clear_bhb_loop+0x40/0x90 [ 226.322769][ T8345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.322784][ T8345] RIP: 0033:0x7f52a459ce59 [ 226.322798][ T8345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.322812][ T8345] RSP: 002b:00007f52a538d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 226.322826][ T8345] RAX: ffffffffffffffda RBX: 00007f52a4815fa0 RCX: 00007f52a459ce59 [ 226.322836][ T8345] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000008 [ 226.322844][ T8345] RBP: 00007f52a4632d6f R08: 0000000000000000 R09: 0000000000000000 [ 226.322853][ T8345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.322861][ T8345] R13: 00007f52a4816038 R14: 00007f52a4815fa0 R15: 00007ffc4e3c50b8 [ 226.322880][ T8345] [ 226.322895][ T8345] ERROR: Out of memory at tomoyo_realpath_from_path. [ 226.627683][ T8348] blktrace: Concurrent blktraces are not allowed on loop2 [ 226.772033][ T5629] Bluetooth: hci1: command 0x0c1a tx timeout [ 226.852245][ T5629] Bluetooth: hci3: command 0x0c1a tx timeout [ 226.859890][ T5629] Bluetooth: hci2: command 0x0c1a tx timeout [ 227.621622][ T8357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.545'. [ 228.179626][ T8372] zswap: compressor not available [ 228.527760][ T8376] sd 0:0:1:0: PR command failed: 1026 [ 228.544891][ T8376] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 228.577280][ T8376] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 229.483915][ T8396] FAULT_INJECTION: forcing a failure. [ 229.483915][ T8396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.627850][ T8396] CPU: 0 UID: 0 PID: 8396 Comm: syz.0.551 Not tainted syzkaller #0 PREEMPT(full) [ 229.627870][ T8396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 229.627879][ T8396] Call Trace: [ 229.627884][ T8396] [ 229.627890][ T8396] dump_stack_lvl+0x100/0x190 [ 229.627920][ T8396] should_fail_ex.cold+0x5/0xa [ 229.627939][ T8396] _copy_to_user+0x32/0xd0 [ 229.627958][ T8396] simple_read_from_buffer+0xcb/0x170 [ 229.627978][ T8396] proc_fail_nth_read+0x1af/0x230 [ 229.628002][ T8396] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 229.628026][ T8396] ? rw_verify_area+0xce/0x6d0 [ 229.628042][ T8396] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 229.628065][ T8396] vfs_read+0x1e4/0xb30 [ 229.628084][ T8396] ? __pfx_vfs_read+0x10/0x10 [ 229.628099][ T8396] ? __fget_files+0x215/0x3d0 [ 229.628122][ T8396] ? __fget_files+0x21f/0x3d0 [ 229.628144][ T8396] ksys_read+0x12a/0x250 [ 229.628160][ T8396] ? __pfx_ksys_read+0x10/0x10 [ 229.628179][ T8396] ? rcu_is_watching+0x12/0xc0 [ 229.628199][ T8396] do_syscall_64+0x10b/0x830 [ 229.628213][ T8396] ? clear_bhb_loop+0x40/0x90 [ 229.628232][ T8396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.628247][ T8396] RIP: 0033:0x7f52a455d68e [ 229.628259][ T8396] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 229.628272][ T8396] RSP: 002b:00007f52a538cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 229.628286][ T8396] RAX: ffffffffffffffda RBX: 00007f52a538d6c0 RCX: 00007f52a455d68e [ 229.628296][ T8396] RDX: 000000000000000f RSI: 00007f52a538d0a0 RDI: 0000000000000004 [ 229.628304][ T8396] RBP: 00007f52a538d090 R08: 0000000000000000 R09: 0000000000000000 [ 229.628313][ T8396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.628321][ T8396] R13: 00007f52a4816038 R14: 00007f52a4815fa0 R15: 00007ffc4e3c50b8 [ 229.628340][ T8396] [ 230.270549][ T8404] FAULT_INJECTION: forcing a failure. [ 230.270549][ T8404] name failslab, interval 1, probability 0, space 0, times 0 [ 230.341346][ T8404] CPU: 0 UID: 0 PID: 8404 Comm: syz.0.553 Not tainted syzkaller #0 PREEMPT(full) [ 230.341369][ T8404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 230.341378][ T8404] Call Trace: [ 230.341384][ T8404] [ 230.341390][ T8404] dump_stack_lvl+0x100/0x190 [ 230.341411][ T8404] should_fail_ex.cold+0x5/0xa [ 230.341431][ T8404] ? tomoyo_realpath_from_path+0xb6/0x690 [ 230.341453][ T8404] should_failslab+0xc2/0x120 [ 230.341470][ T8404] __kmalloc_noprof+0xe0/0x850 [ 230.341484][ T8404] ? kfree+0x1dd/0x6c0 [ 230.341507][ T8404] tomoyo_realpath_from_path+0xb6/0x690 [ 230.341532][ T8404] tomoyo_path_number_perm+0x23c/0x580 [ 230.341548][ T8404] ? tomoyo_path_number_perm+0x22e/0x580 [ 230.341566][ T8404] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 230.341582][ T8404] ? futex_wait+0x11e/0x370 [ 230.341619][ T8404] ? find_held_lock+0x2b/0x80 [ 230.341637][ T8404] ? __fget_files+0x215/0x3d0 [ 230.341653][ T8404] ? hook_file_ioctl_common+0x149/0x410 [ 230.341669][ T8404] ? __fget_files+0x215/0x3d0 [ 230.341689][ T8404] ? __fget_files+0x21f/0x3d0 [ 230.341710][ T8404] security_file_ioctl+0xd3/0x230 [ 230.341727][ T8404] __x64_sys_ioctl+0xb7/0x210 [ 230.341744][ T8404] do_syscall_64+0x10b/0x830 [ 230.341758][ T8404] ? clear_bhb_loop+0x40/0x90 [ 230.341776][ T8404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.341791][ T8404] RIP: 0033:0x7f52a459ce59 [ 230.341804][ T8404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.341818][ T8404] RSP: 002b:00007f52a538d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 230.341832][ T8404] RAX: ffffffffffffffda RBX: 00007f52a4815fa0 RCX: 00007f52a459ce59 [ 230.341842][ T8404] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000008 [ 230.341851][ T8404] RBP: 00007f52a4632d6f R08: 0000000000000000 R09: 0000000000000000 [ 230.341859][ T8404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.341868][ T8404] R13: 00007f52a4816038 R14: 00007f52a4815fa0 R15: 00007ffc4e3c50b8 [ 230.341887][ T8404] [ 230.341894][ T8404] ERROR: Out of memory at tomoyo_realpath_from_path. [ 230.712154][ T5640] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 231.187013][ T29] audit: type=1804 audit(1779723709.838:5): pid=8417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.558" name="/newroot/sys/kernel/debug/tracing/saved_tgids" dev="tracefs" ino=3340 res=1 errno=0 [ 232.168351][ T8442] futex_wake_op: syz.0.564 tries to shift op by -2048; fix this program [ 232.204131][ T8442] futex_wake_op: syz.0.564 tries to shift op by -2048; fix this program [ 232.638805][ T8440] blktrace: Concurrent blktraces are not allowed on loop2 [ 232.948629][ T8463] netlink: 'syz.0.569': attribute type 3 has an invalid length. [ 232.987534][ T8463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.569'. [ 234.423389][ T8488] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 235.572870][ T8504] netlink: get zone limit has 4 unknown bytes [ 235.828290][ T8514] futex_wake_op: syz.0.580 tries to shift op by -2048; fix this program [ 235.899797][ T8514] futex_wake_op: syz.0.580 tries to shift op by -2048; fix this program [ 235.964359][ T8518] 0x000000000001-0x000000020000 : "" [ 236.013978][ T8518] ftl_cs: FTL header corrupt! [ 236.871585][ T8520] blktrace: Concurrent blktraces are not allowed on loop2 [ 236.887263][ T8537] input: jJǸ9%vlQ J86 as /devices/virtual/input/input8 [ 238.975539][ T8570] capability: warning: `syz.1.587' uses deprecated v2 capabilities in a way that may be insecure [ 239.341288][ T8575] can: request_module (can-proto-3) failed. [ 240.414073][ T8567] kexec: Could not allocate control_code_buffer [ 240.921350][ T8598] input: jJǸ9%vlQ J86 as /devices/virtual/input/input9 [ 241.680695][ T8606] netlink: 'syz.1.596': attribute type 1 has an invalid length. [ 241.754422][ T8606] netlink: 9 bytes leftover after parsing attributes in process `syz.1.596'. [ 242.192831][ T8610] Process accounting resumed [ 242.388264][ T8623] FAULT_INJECTION: forcing a failure. [ 242.388264][ T8623] name failslab, interval 1, probability 0, space 0, times 0 [ 242.620876][ T8623] CPU: 0 UID: 0 PID: 8623 Comm: syz.0.600 Not tainted syzkaller #0 PREEMPT(full) [ 242.620899][ T8623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 242.620916][ T8623] Call Trace: [ 242.620922][ T8623] [ 242.620928][ T8623] dump_stack_lvl+0x100/0x190 [ 242.620950][ T8623] should_fail_ex.cold+0x5/0xa [ 242.620970][ T8623] ? tomoyo_realpath_from_path+0xb6/0x690 [ 242.620991][ T8623] should_failslab+0xc2/0x120 [ 242.621009][ T8623] __kmalloc_noprof+0xe0/0x850 [ 242.621023][ T8623] ? kfree+0x1dd/0x6c0 [ 242.621046][ T8623] tomoyo_realpath_from_path+0xb6/0x690 [ 242.621070][ T8623] tomoyo_check_open_permission+0x2af/0x3c0 [ 242.621089][ T8623] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 242.621113][ T8623] ? hook_file_open+0x24e/0x7a0 [ 242.621143][ T8623] ? path_get+0x61/0x80 [ 242.621165][ T8623] tomoyo_file_open+0x6b/0x90 [ 242.621187][ T8623] security_file_open+0xb5/0x1e0 [ 242.621206][ T8623] do_dentry_open+0x5aa/0x1660 [ 242.621225][ T8623] ? security_inode_permission+0xbf/0x250 [ 242.621245][ T8623] vfs_open+0x82/0x3f0 [ 242.621269][ T8623] path_openat+0x208c/0x31a0 [ 242.621294][ T8623] ? __pfx_path_openat+0x10/0x10 [ 242.621319][ T8623] do_file_open+0x20e/0x430 [ 242.621339][ T8623] ? __pfx_do_file_open+0x10/0x10 [ 242.621371][ T8623] ? alloc_fd+0x476/0x790 [ 242.621391][ T8623] ? do_getname+0x191/0x390 [ 242.621414][ T8623] do_sys_openat2+0x10d/0x1e0 [ 242.621436][ T8623] ? __pfx_do_sys_openat2+0x10/0x10 [ 242.621465][ T8623] __x64_sys_openat+0x12d/0x210 [ 242.621479][ T8623] ? __pfx___x64_sys_openat+0x10/0x10 [ 242.621505][ T8623] ? rcu_is_watching+0x12/0xc0 [ 242.621525][ T8623] do_syscall_64+0x10b/0x830 [ 242.621540][ T8623] ? clear_bhb_loop+0x40/0x90 [ 242.621558][ T8623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.621574][ T8623] RIP: 0033:0x7f52a459ce59 [ 242.621588][ T8623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.621602][ T8623] RSP: 002b:00007f52a538d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 242.621617][ T8623] RAX: ffffffffffffffda RBX: 00007f52a4815fa0 RCX: 00007f52a459ce59 [ 242.621627][ T8623] RDX: 000000000006ab82 RSI: 00002000000011c0 RDI: ffffffffffffff9c [ 242.621636][ T8623] RBP: 00007f52a4632d6f R08: 0000000000000000 R09: 0000000000000000 [ 242.621645][ T8623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.621653][ T8623] R13: 00007f52a4816038 R14: 00007f52a4815fa0 R15: 00007ffc4e3c50b8 [ 242.621673][ T8623] [ 242.621680][ T8623] ERROR: Out of memory at tomoyo_realpath_from_path. [ 243.433035][ T8625] netlink: 28 bytes leftover after parsing attributes in process `syz.2.601'. [ 243.677545][ T8625] hsr_slave_0 (unregistering): left promiscuous mode [ 245.451328][ T8672] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 245.477832][ T8660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.606'. [ 247.099822][ T8699] input: jJǸ9%vlQ J86 as /devices/virtual/input/input11 [ 247.875316][ T8709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.617'. [ 249.073013][ T8720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.619'. [ 249.823786][ T8742] input: jJǸ9%vlQ J86 as /devices/virtual/input/input12 [ 251.070630][ T8754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.627'. [ 251.364305][ T8764] blktrace: Concurrent blktraces are not allowed on loop2 [ 252.821353][ T8796] ptp ptp0: only physical clock in use now [ 254.930427][ T5640] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 255.706529][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.717482][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.699186][ T8849] kexec: Could not allocate control_code_buffer [ 257.051864][ T8852] Process accounting paused [ 258.975066][ T5640] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 259.074440][ T8900] process 'syz.0.660' launched './file0' with NULL argv: empty string added [ 259.111472][ T8902] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 259.359850][ T8907] input: jJǸ9%vlQ J86 as /devices/virtual/input/input14 [ 259.663030][ T8913] netlink: 25 bytes leftover after parsing attributes in process `syz.3.664'. [ 262.500028][ T5640] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 263.023264][ T8968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.677'. [ 263.632358][ T8985] netlink: 28 bytes leftover after parsing attributes in process `syz.2.680'. [ 263.788028][ T8980] netlink: 206 bytes leftover after parsing attributes in process `syz.0.679'. [ 263.797256][ T8985] veth1_macvtap: left promiscuous mode [ 263.835011][ T8985] macsec0: entered promiscuous mode [ 263.870423][ T8985] macsec0: entered allmulticast mode [ 264.592566][ T9002] netlink: 146 bytes leftover after parsing attributes in process `syz.3.682'. [ 264.680090][ T9004] FAULT_INJECTION: forcing a failure. [ 264.680090][ T9004] name failslab, interval 1, probability 0, space 0, times 0 [ 264.750046][ T9004] CPU: 0 UID: 0 PID: 9004 Comm: syz.0.685 Not tainted syzkaller #0 PREEMPT(full) [ 264.750068][ T9004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 264.750082][ T9004] Call Trace: [ 264.750088][ T9004] [ 264.750093][ T9004] dump_stack_lvl+0x100/0x190 [ 264.750116][ T9004] should_fail_ex.cold+0x5/0xa [ 264.750136][ T9004] should_failslab+0xc2/0x120 [ 264.750154][ T9004] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 264.750169][ T9004] ? ptlock_alloc+0x1f/0x70 [ 264.750194][ T9004] ptlock_alloc+0x1f/0x70 [ 264.750215][ T9004] pte_alloc_one+0x82/0x3d0 [ 264.750235][ T9004] __pte_alloc+0x6d/0x3e0 [ 264.750252][ T9004] ? __pfx___pte_alloc+0x10/0x10 [ 264.750268][ T9004] ? __lock_acquire+0x4a5/0x2630 [ 264.750287][ T9004] do_anonymous_page+0x13c6/0x2050 [ 264.750310][ T9004] ? __pfx_pgd_none+0x10/0x10 [ 264.750335][ T9004] __handle_mm_fault+0x1d2c/0x2a00 [ 264.750359][ T9004] ? mt_find+0x45e/0x8e0 [ 264.750375][ T9004] ? __pfx___handle_mm_fault+0x10/0x10 [ 264.750396][ T9004] ? __pfx_mt_find+0x10/0x10 [ 264.750426][ T9004] handle_mm_fault+0x36d/0xa20 [ 264.750451][ T9004] __get_user_pages+0x1178/0x32a0 [ 264.750477][ T9004] ? __pfx___get_user_pages+0x10/0x10 [ 264.750501][ T9004] populate_vma_page_range+0x267/0x3f0 [ 264.750523][ T9004] ? __pfx_populate_vma_page_range+0x10/0x10 [ 264.750541][ T9004] ? __pfx_find_vma_intersection+0x10/0x10 [ 264.750560][ T9004] ? do_mmap+0x93f/0x12f0 [ 264.750579][ T9004] __mm_populate+0x107/0x3a0 [ 264.750599][ T9004] ? __pfx___mm_populate+0x10/0x10 [ 264.750620][ T9004] ? up_write+0x28c/0x4f0 [ 264.750638][ T9004] vm_mmap_pgoff+0x37f/0x470 [ 264.750659][ T9004] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 264.750678][ T9004] ? do_futex+0x192/0x350 [ 264.750695][ T9004] ? __pfx_do_futex+0x10/0x10 [ 264.750714][ T9004] ksys_mmap_pgoff+0xe4/0x610 [ 264.750732][ T9004] ? __x64_sys_futex+0x358/0x4d0 [ 264.750749][ T9004] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 264.750766][ T9004] ? xfd_validate_state+0x129/0x190 [ 264.750788][ T9004] __x64_sys_mmap+0x125/0x190 [ 264.750807][ T9004] do_syscall_64+0x10b/0x830 [ 264.750821][ T9004] ? clear_bhb_loop+0x40/0x90 [ 264.750840][ T9004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.750856][ T9004] RIP: 0033:0x7f52a459ce59 [ 264.750869][ T9004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.750883][ T9004] RSP: 002b:00007f52a538d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 264.750898][ T9004] RAX: ffffffffffffffda RBX: 00007f52a4815fa0 RCX: 00007f52a459ce59 [ 264.750908][ T9004] RDX: 00000000000000e2 RSI: 0000000000400008 RDI: 0000000000000000 [ 264.750916][ T9004] RBP: 00007f52a4632d6f R08: 0000000000000002 R09: 0000000000008000 [ 264.750925][ T9004] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 264.750935][ T9004] R13: 00007f52a4816038 R14: 00007f52a4815fa0 R15: 00007ffc4e3c50b8 [ 264.750954][ T9004] [ 266.171439][ T5640] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 267.658475][ T9038] kvm: vcpu 4: requested lapic timer restore with starting count register 0x390=4294967104 (137438947328 ns) > initial count (6624 ns). Using initial count to start timer. [ 268.083317][ T9049] random: crng reseeded on system resumption [ 268.203683][ T9051] hub 1-0:1.0: USB hub found [ 268.263033][ T9051] hub 1-0:1.0: 1 port detected [ 270.103818][ T9070] blktrace: Concurrent blktraces are not allowed on loop2 [ 271.469540][ T9109] FAULT_INJECTION: forcing a failure. [ 271.469540][ T9109] name failslab, interval 1, probability 0, space 0, times 0 [ 271.525250][ T9109] CPU: 0 UID: 0 PID: 9109 Comm: syz.0.707 Not tainted syzkaller #0 PREEMPT(full) [ 271.525274][ T9109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 271.525283][ T9109] Call Trace: [ 271.525289][ T9109] [ 271.525295][ T9109] dump_stack_lvl+0x100/0x190 [ 271.525317][ T9109] should_fail_ex.cold+0x5/0xa [ 271.525338][ T9109] should_failslab+0xc2/0x120 [ 271.525356][ T9109] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 271.525371][ T9109] ? vm_area_alloc+0x1f/0x160 [ 271.525396][ T9109] vm_area_alloc+0x1f/0x160 [ 271.525417][ T9109] __mmap_region+0x104d/0x2da0 [ 271.525442][ T9109] ? __css_rstat_updated+0x1ce/0x5a0 [ 271.525484][ T9109] ? __pfx___mmap_region+0x10/0x10 [ 271.525512][ T9109] ? rcu_is_watching+0x12/0xc0 [ 271.525530][ T9109] ? trace_pelt_se_tp+0x13b/0x190 [ 271.525551][ T9109] ? find_held_lock+0x2b/0x80 [ 271.525570][ T9109] ? debug_object_activate+0x331/0x490 [ 271.525585][ T9109] ? debug_object_activate+0x331/0x490 [ 271.525601][ T9109] ? do_raw_spin_unlock+0x145/0x1e0 [ 271.525619][ T9109] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 271.525661][ T9109] ? rcu_is_watching+0x12/0xc0 [ 271.525679][ T9109] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 271.525698][ T9109] ? lockdep_hardirqs_on+0x78/0x100 [ 271.525734][ T9109] ? futex_unqueue+0x133/0x2c0 [ 271.525754][ T9109] mmap_region+0x35d/0x620 [ 271.525769][ T9109] ? rcu_is_watching+0x12/0xc0 [ 271.525786][ T9109] ? __pfx_mmap_region+0x10/0x10 [ 271.525803][ T9109] ? cap_mmap_addr+0x4b/0x120 [ 271.525824][ T9109] ? bpf_lsm_mmap_addr+0x9/0x30 [ 271.525839][ T9109] ? security_mmap_addr+0x71/0x1e0 [ 271.525857][ T9109] ? __get_unmapped_area+0x255/0x3e0 [ 271.525877][ T9109] do_mmap+0xc63/0x12f0 [ 271.525899][ T9109] ? __pfx_do_mmap+0x10/0x10 [ 271.525917][ T9109] ? __pfx_down_write_killable+0x10/0x10 [ 271.525937][ T9109] vm_mmap_pgoff+0x29e/0x470 [ 271.525959][ T9109] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 271.525979][ T9109] ? do_futex+0x192/0x350 [ 271.525995][ T9109] ? __pfx_do_futex+0x10/0x10 [ 271.526015][ T9109] ksys_mmap_pgoff+0xe4/0x610 [ 271.526033][ T9109] ? __x64_sys_futex+0x358/0x4d0 [ 271.526049][ T9109] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 271.526066][ T9109] ? xfd_validate_state+0x129/0x190 [ 271.526086][ T9109] __x64_sys_mmap+0x125/0x190 [ 271.526104][ T9109] do_syscall_64+0x10b/0x830 [ 271.526118][ T9109] ? clear_bhb_loop+0x40/0x90 [ 271.526135][ T9109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.526150][ T9109] RIP: 0033:0x7f52a459ce59 [ 271.526164][ T9109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.526178][ T9109] RSP: 002b:00007f52a538d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 271.526193][ T9109] RAX: ffffffffffffffda RBX: 00007f52a4815fa0 RCX: 00007f52a459ce59 [ 271.526204][ T9109] RDX: 00000000000000e2 RSI: 0000000000400008 RDI: 0000000000000000 [ 271.526213][ T9109] RBP: 00007f52a4632d6f R08: 0000000000000002 R09: 0000000000008000 [ 271.526223][ T9109] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 271.526232][ T9109] R13: 00007f52a4816038 R14: 00007f52a4815fa0 R15: 00007ffc4e3c50b8 [ 271.526251][ T9109] [ 272.578310][ T9120] Process accounting paused [ 272.761837][ T9134] netlink: 12 bytes leftover after parsing attributes in process `syz.2.712'. [ 273.474202][ T9145] blktrace: Concurrent blktraces are not allowed on loop2 [ 273.889303][ T9150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.716'. [ 274.586742][ T9174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.628157][ T9157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.717'. [ 274.696126][ T9174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.870128][ T9178] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 275.548172][ T9183] cougar: G6 mapped to space [ 275.797477][ T5640] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 275.990717][ T9189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.727'. [ 277.463794][ T9203] kexec: Could not allocate control_code_buffer [ 280.528647][ T9286] sg_write: data in/out 1102526172/15 bytes for SCSI command 0x2e-- guessing data in; [ 280.528647][ T9286] program syz.3.749 not setting count and/or reply_len properly [ 281.325591][ T9304] cougar: G6 mapped to space [ 282.068865][ T9316] ubi: mtd0 is already attached to ubi0 [ 282.102836][ T9318] ubi: mtd0 is already attached to ubi0 [ 282.197497][ T9316] ubi0: detaching mtd0 [ 282.246429][ T9316] ubi0: mtd0 is detached [ 282.601123][ T9293] kexec: Could not allocate control_code_buffer [ 282.611535][ T9325] futex_wake_op: syz.2.755 tries to shift op by -2048; fix this program [ 282.665468][ T9325] futex_wake_op: syz.2.755 tries to shift op by -2048; fix this program [ 284.485961][ T9344] netlink: 28 bytes leftover after parsing attributes in process `syz.2.760'. [ 285.216996][ T9365] FAULT_INJECTION: forcing a failure. [ 285.216996][ T9365] name failslab, interval 1, probability 0, space 0, times 0 [ 285.231041][ T9368] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 285.269266][ T9365] CPU: 0 UID: 0 PID: 9365 Comm: syz.0.765 Not tainted syzkaller #0 PREEMPT(full) [ 285.269288][ T9365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 285.269298][ T9365] Call Trace: [ 285.269304][ T9365] [ 285.269310][ T9365] dump_stack_lvl+0x100/0x190 [ 285.269332][ T9365] should_fail_ex.cold+0x5/0xa [ 285.269361][ T9365] ? tomoyo_encode2+0xfb/0x3c0 [ 285.269380][ T9365] should_failslab+0xc2/0x120 [ 285.269400][ T9365] __kmalloc_noprof+0xe0/0x850 [ 285.269413][ T9365] ? d_absolute_path+0x136/0x1b0 [ 285.269432][ T9365] tomoyo_encode2+0xfb/0x3c0 [ 285.269457][ T9365] tomoyo_encode+0x29/0x50 [ 285.269475][ T9365] tomoyo_realpath_from_path+0x18c/0x690 [ 285.269500][ T9365] tomoyo_path_number_perm+0x23c/0x580 [ 285.269517][ T9365] ? tomoyo_path_number_perm+0x22e/0x580 [ 285.269535][ T9365] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 285.269551][ T9365] ? futex_wait+0x11e/0x370 [ 285.269588][ T9365] ? find_held_lock+0x2b/0x80 [ 285.269607][ T9365] ? __fget_files+0x215/0x3d0 [ 285.269623][ T9365] ? hook_file_ioctl_common+0x149/0x410 [ 285.269639][ T9365] ? __fget_files+0x215/0x3d0 [ 285.269660][ T9365] ? __fget_files+0x21f/0x3d0 [ 285.269680][ T9365] security_file_ioctl+0xd3/0x230 [ 285.269698][ T9365] __x64_sys_ioctl+0xb7/0x210 [ 285.269718][ T9365] do_syscall_64+0x10b/0x830 [ 285.269733][ T9365] ? clear_bhb_loop+0x40/0x90 [ 285.269751][ T9365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.269767][ T9365] RIP: 0033:0x7f52a459ce59 [ 285.269780][ T9365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.269795][ T9365] RSP: 002b:00007f52a538d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 285.269810][ T9365] RAX: ffffffffffffffda RBX: 00007f52a4815fa0 RCX: 00007f52a459ce59 [ 285.269819][ T9365] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000008 [ 285.269828][ T9365] RBP: 00007f52a4632d6f R08: 0000000000000000 R09: 0000000000000000 [ 285.269837][ T9365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.269845][ T9365] R13: 00007f52a4816038 R14: 00007f52a4815fa0 R15: 00007ffc4e3c50b8 [ 285.269866][ T9365] [ 285.269889][ T9365] ERROR: Out of memory at tomoyo_realpath_from_path. [ 286.920022][ T9399] sysfs_service_op_store: Client not running :-5: [ 287.077886][ T9340] Process accounting resumed [ 287.482265][ T9405] netlink: 16 bytes leftover after parsing attributes in process `syz.2.775'. [ 288.210772][ T9427] netlink: 28 bytes leftover after parsing attributes in process `syz.1.780'. [ 288.467183][ T9427] hsr_slave_0 (unregistering): left promiscuous mode [ 289.147249][ T9457] input: jJǸ9%vlQ J86 as /devices/virtual/input/input15 [ 289.401144][ T9462] netlink: 62 bytes leftover after parsing attributes in process `syz.0.787'. [ 289.988866][ T9465] netlink: 28 bytes leftover after parsing attributes in process `syz.3.788'. [ 290.132753][ T9465] hsr_slave_0 (unregistering): left promiscuous mode [ 291.125025][ T9515] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 292.608917][ T9542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.802'. [ 292.911492][ T9560] FAULT_INJECTION: forcing a failure. [ 292.911492][ T9560] name failslab, interval 1, probability 0, space 0, times 0 [ 292.974532][ T9560] CPU: 0 UID: 0 PID: 9560 Comm: syz.0.805 Not tainted syzkaller #0 PREEMPT(full) [ 292.974555][ T9560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 292.974565][ T9560] Call Trace: [ 292.974571][ T9560] [ 292.974577][ T9560] dump_stack_lvl+0x100/0x190 [ 292.974599][ T9560] should_fail_ex.cold+0x5/0xa [ 292.974621][ T9560] should_failslab+0xc2/0x120 [ 292.974639][ T9560] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 292.974654][ T9560] ? __pmd_alloc+0xbf/0x950 [ 292.974677][ T9560] __pmd_alloc+0xbf/0x950 [ 292.974732][ T9560] __handle_mm_fault+0xa9c/0x2a00 [ 292.974758][ T9560] ? mt_find+0x45e/0x8e0 [ 292.974775][ T9560] ? __pfx___handle_mm_fault+0x10/0x10 [ 292.974796][ T9560] ? __pfx_mt_find+0x10/0x10 [ 292.974821][ T9560] ? find_vma+0xbf/0x140 [ 292.974838][ T9560] ? __pfx_find_vma+0x10/0x10 [ 292.974857][ T9560] handle_mm_fault+0x36d/0xa20 [ 292.974884][ T9560] do_user_addr_fault+0x74c/0x12f0 [ 292.974904][ T9560] ? trace_page_fault_kernel+0x7a/0x200 [ 292.974924][ T9560] exc_page_fault+0x6f/0xd0 [ 292.974954][ T9560] asm_exc_page_fault+0x26/0x30 [ 292.974969][ T9560] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 292.974989][ T9560] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 9b 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 292.975003][ T9560] RSP: 0018:ffffc90004087bf8 EFLAGS: 00050202 [ 292.975016][ T9560] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000000000f [ 292.975025][ T9560] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90004087d90 [ 292.975034][ T9560] RBP: 000000000000000f R08: 0000000000000001 R09: fffff52000810fb3 [ 292.975043][ T9560] R10: ffffc90004087d9e R11: 0000000000000000 R12: 0000000000000000 [ 292.975051][ T9560] R13: ffffc90004087d90 R14: 000000000000000f R15: ffffc90004087d90 [ 292.975071][ T9560] _copy_from_user+0x98/0xd0 [ 292.975092][ T9560] __sys_bpf+0x243/0x4b90 [ 292.975116][ T9560] ? __pfx___sys_bpf+0x10/0x10 [ 292.975131][ T9560] ? __pfx_futex_wait+0x10/0x10 [ 292.975155][ T9560] ? ksys_write+0x190/0x250 [ 292.975173][ T9560] ? ksys_write+0x190/0x250 [ 292.975194][ T9560] ? do_futex+0x192/0x350 [ 292.975221][ T9560] ? xfd_validate_state+0x129/0x190 [ 292.975236][ T9560] ? ksys_write+0x1ac/0x250 [ 292.975257][ T9560] __x64_sys_bpf+0x7b/0xc0 [ 292.975272][ T9560] ? lockdep_hardirqs_on+0x78/0x100 [ 292.975286][ T9560] do_syscall_64+0x10b/0x830 [ 292.975299][ T9560] ? clear_bhb_loop+0x40/0x90 [ 292.975317][ T9560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.975332][ T9560] RIP: 0033:0x7f52a459ce59 [ 292.975345][ T9560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.975358][ T9560] RSP: 002b:00007f52a538d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 292.975372][ T9560] RAX: ffffffffffffffda RBX: 00007f52a4815fa0 RCX: 00007f52a459ce59 [ 292.975382][ T9560] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 292.975390][ T9560] RBP: 00007f52a4632d6f R08: 0000000000000000 R09: 0000000000000000 [ 292.975399][ T9560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.975407][ T9560] R13: 00007f52a4816038 R14: 00007f52a4815fa0 R15: 00007ffc4e3c50b8 [ 292.975426][ T9560] [ 293.422112][ T9558] netlink: 28 bytes leftover after parsing attributes in process `syz.1.804'. [ 294.584342][ T9588] netlink: 28 bytes leftover after parsing attributes in process `syz.2.812'. [ 294.630871][ T9586] blktrace: Concurrent blktraces are not allowed on loop2 [ 295.084489][ T9590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.813'. [ 295.171663][ T9598] futex_wake_op: syz.0.816 tries to shift op by -2048; fix this program [ 295.402763][ T9606] input: jJǸ9%vlQ J86 as /devices/virtual/input/input16 [ 295.448984][ T9609] FAULT_INJECTION: forcing a failure. [ 295.448984][ T9609] name failslab, interval 1, probability 0, space 0, times 0 [ 295.525151][ T9609] CPU: 0 UID: 0 PID: 9609 Comm: syz.0.818 Not tainted syzkaller #0 PREEMPT(full) [ 295.525172][ T9609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 295.525181][ T9609] Call Trace: [ 295.525187][ T9609] [ 295.525192][ T9609] dump_stack_lvl+0x100/0x190 [ 295.525213][ T9609] should_fail_ex.cold+0x5/0xa [ 295.525232][ T9609] ? iovec_from_user+0x8d/0x140 [ 295.525249][ T9609] should_failslab+0xc2/0x120 [ 295.525267][ T9609] __kmalloc_noprof+0xe0/0x850 [ 295.525285][ T9609] iovec_from_user+0x8d/0x140 [ 295.525304][ T9609] __import_iovec+0x81/0x640 [ 295.525324][ T9609] import_iovec+0x82/0xb0 [ 295.525342][ T9609] vfs_writev+0x197/0xe10 [ 295.525364][ T9609] ? __pfx_vfs_writev+0x10/0x10 [ 295.525381][ T9609] ? find_held_lock+0x2b/0x80 [ 295.525399][ T9609] ? ksys_write+0x190/0x250 [ 295.525426][ T9609] ? __fget_files+0x21f/0x3d0 [ 295.525449][ T9609] ? do_writev+0x28a/0x340 [ 295.525463][ T9609] do_writev+0x28a/0x340 [ 295.525479][ T9609] ? __pfx_do_writev+0x10/0x10 [ 295.525496][ T9609] ? rcu_is_watching+0x12/0xc0 [ 295.525523][ T9609] do_syscall_64+0x10b/0x830 [ 295.525537][ T9609] ? clear_bhb_loop+0x40/0x90 [ 295.525555][ T9609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.525570][ T9609] RIP: 0033:0x7f52a459ce59 [ 295.525582][ T9609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.525597][ T9609] RSP: 002b:00007f52a27f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 295.525611][ T9609] RAX: ffffffffffffffda RBX: 00007f52a4816090 RCX: 00007f52a459ce59 [ 295.525621][ T9609] RDX: 0000000000000009 RSI: 0000200000000340 RDI: 0000000000000003 [ 295.525630][ T9609] RBP: 00007f52a27f6090 R08: 0000000000000000 R09: 0000000000000000 [ 295.525639][ T9609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.525648][ T9609] R13: 00007f52a4816128 R14: 00007f52a4816090 R15: 00007ffc4e3c50b8 [ 295.525667][ T9609] [ 295.892712][ T9623] batman_adv: Routing algorithm '' is not supported [ 296.403666][ T9610] netlink: 28 bytes leftover after parsing attributes in process `syz.2.817'. [ 296.441920][ T9633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.826'. [ 296.516547][ T9641] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 296.748442][ T9647] block2mtd: illegal erase size [ 296.956695][ T9645] blktrace: Concurrent blktraces are not allowed on loop2 [ 297.609047][ T9661] netlink: 28 bytes leftover after parsing attributes in process `syz.2.834'. [ 297.762020][ T5640] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 297.818920][ T9673] random: crng reseeded on system resumption [ 299.188422][ T9692] cougar: G6 mapped to space [ 299.785494][ T5629] Bluetooth: hci1: command 0x0c1a tx timeout [ 301.732438][ T9769] netlink: 25 bytes leftover after parsing attributes in process `syz.3.858'. [ 301.866296][ T5640] Bluetooth: hci1: command 0x0c1a tx timeout [ 301.933087][ T9772] vivid-008: ================= START STATUS ================= [ 302.020087][ T9772] vivid-008: ================== END STATUS ================== [ 302.031095][ T9770] FAULT_INJECTION: forcing a failure. [ 302.031095][ T9770] name failslab, interval 1, probability 0, space 0, times 0 [ 302.090565][ T9770] CPU: 0 UID: 0 PID: 9770 Comm: syz.0.857 Not tainted syzkaller #0 PREEMPT(full) [ 302.090588][ T9770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 302.090601][ T9770] Call Trace: [ 302.090607][ T9770] [ 302.090612][ T9770] dump_stack_lvl+0x100/0x190 [ 302.090634][ T9770] should_fail_ex.cold+0x5/0xa [ 302.090654][ T9770] should_failslab+0xc2/0x120 [ 302.090673][ T9770] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 302.090687][ T9770] ? __khugepaged_enter+0xc8/0x380 [ 302.090706][ T9770] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 302.090729][ T9770] __khugepaged_enter+0xc8/0x380 [ 302.090750][ T9770] khugepaged_enter_vma+0x137/0x2c0 [ 302.090772][ T9770] hugepage_madvise+0xa8/0xd0 [ 302.090791][ T9770] madvise_vma_behavior+0x110f/0x2200 [ 302.090814][ T9770] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 302.090839][ T9770] ? find_vma_prev+0xd8/0x150 [ 302.090857][ T9770] ? futex_unqueue+0x133/0x2c0 [ 302.090872][ T9770] ? __pfx_find_vma_prev+0x10/0x10 [ 302.090895][ T9770] ? __futex_wait+0x256/0x300 [ 302.090918][ T9770] madvise_walk_vmas+0x2fe/0xa90 [ 302.090941][ T9770] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 302.090975][ T9770] madvise_do_behavior+0x1ea/0x510 [ 302.090998][ T9770] ? __pfx_madvise_do_behavior+0x10/0x10 [ 302.091025][ T9770] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 302.091050][ T9770] do_madvise+0x195/0x240 [ 302.091070][ T9770] ? __pfx_do_madvise+0x10/0x10 [ 302.091089][ T9770] ? do_futex+0x192/0x350 [ 302.091109][ T9770] ? __sys_sendmsg+0x18f/0x220 [ 302.091140][ T9770] __x64_sys_madvise+0xa9/0x110 [ 302.091159][ T9770] ? lockdep_hardirqs_on+0x78/0x100 [ 302.091174][ T9770] do_syscall_64+0x10b/0x830 [ 302.091187][ T9770] ? clear_bhb_loop+0x40/0x90 [ 302.091206][ T9770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.091225][ T9770] RIP: 0033:0x7f52a459ce59 [ 302.091238][ T9770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.091254][ T9770] RSP: 002b:00007f52a23b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 302.091273][ T9770] RAX: ffffffffffffffda RBX: 00007f52a4816270 RCX: 00007f52a459ce59 [ 302.091284][ T9770] RDX: 000000000000000e RSI: 0000000000004081 RDI: 0000000000000000 [ 302.091293][ T9770] RBP: 00007f52a4632d6f R08: 0000000000000000 R09: 0000000000000000 [ 302.091301][ T9770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.091310][ T9770] R13: 00007f52a4816308 R14: 00007f52a4816270 R15: 00007ffc4e3c50b8 [ 302.091329][ T9770] [ 302.791029][ T9779] Process accounting resumed [ 304.624039][ T29] audit: type=1800 audit(1779723783.278:6): pid=9812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.868" name="dbroot" dev="configfs" ino=33258 res=0 errno=0 [ 304.733537][ T9816] cougar: G6 mapped to space [ 304.829004][ T5629] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 305.032545][ T9819] blktrace: Concurrent blktraces are not allowed on loop2 [ 305.178114][ T9825] syz.3.871 uses obsolete (PF_INET,SOCK_PACKET) [ 306.463413][ T9857] netlink: 28 bytes leftover after parsing attributes in process `syz.3.879'. [ 306.910982][ T9860] netlink: 28 bytes leftover after parsing attributes in process `syz.2.880'. [ 306.954210][ T9866] FAULT_INJECTION: forcing a failure. [ 306.954210][ T9866] name failslab, interval 1, probability 0, space 0, times 0 [ 306.954258][ T9866] CPU: 0 UID: 0 PID: 9866 Comm: syz.0.881 Not tainted syzkaller #0 PREEMPT(full) [ 306.954277][ T9866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 306.954287][ T9866] Call Trace: [ 306.954292][ T9866] [ 306.954298][ T9866] dump_stack_lvl+0x100/0x190 [ 306.954321][ T9866] should_fail_ex.cold+0x5/0xa [ 306.954342][ T9866] should_failslab+0xc2/0x120 [ 306.954362][ T9866] __kmalloc_cache_noprof+0x7a/0x6f0 [ 306.954383][ T9866] ? vidtv_psi_service_desc_init+0x93/0x4c0 [ 306.954410][ T9866] vidtv_psi_service_desc_init+0x93/0x4c0 [ 306.954434][ T9866] vidtv_psi_desc_clone+0x496/0x5d0 [ 306.954458][ T9866] vidtv_channel_si_init+0x4b7/0x18f0 [ 306.954480][ T9866] vidtv_mux_init+0x526/0xbf0 [ 306.954499][ T9866] vidtv_start_feed+0x34e/0x500 [ 306.954520][ T9866] ? __pfx_vidtv_start_feed+0x10/0x10 [ 306.954540][ T9866] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 306.954577][ T9866] dmx_section_feed_start_filtering+0x3a8/0x660 [ 306.954607][ T9866] dvb_dmxdev_filter_start+0x767/0xdd0 [ 306.954632][ T9866] dvb_demux_do_ioctl+0xe64/0x1200 [ 306.954658][ T9866] dvb_usercopy+0x167/0x340 [ 306.954674][ T9866] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 306.954695][ T9866] ? __pfx_dvb_usercopy+0x10/0x10 [ 306.954719][ T9866] ? __fget_files+0x21f/0x3d0 [ 306.954741][ T9866] dvb_demux_ioctl+0x29/0x40 [ 306.954757][ T9866] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 306.954775][ T9866] __x64_sys_ioctl+0x18e/0x210 [ 306.954792][ T9866] do_syscall_64+0x10b/0x830 [ 306.954805][ T9866] ? clear_bhb_loop+0x40/0x90 [ 306.954824][ T9866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.954839][ T9866] RIP: 0033:0x7f52a459ce59 [ 306.954853][ T9866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.954868][ T9866] RSP: 002b:00007f52a27f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 306.954883][ T9866] RAX: ffffffffffffffda RBX: 00007f52a4816090 RCX: 00007f52a459ce59 [ 306.954893][ T9866] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000008 [ 306.954903][ T9866] RBP: 00007f52a4632d6f R08: 0000000000000000 R09: 0000000000000000 [ 306.954912][ T9866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 306.954921][ T9866] R13: 00007f52a4816128 R14: 00007f52a4816090 R15: 00007ffc4e3c50b8 [ 306.954941][ T9866] [ 308.470535][ T9878] kexec: Could not allocate control_code_buffer [ 311.863120][ T9954] netlink: 28 bytes leftover after parsing attributes in process `syz.1.891'. [ 312.672032][ T9935] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.216832][ T9988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.893'. [ 314.422724][T10013] netlink: 28 bytes leftover after parsing attributes in process `syz.0.898'. [ 317.151504][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.160202][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.438373][T10054] netlink: 28 bytes leftover after parsing attributes in process `syz.3.908'. [ 317.754756][T10048] Process accounting paused [ 317.783910][T10060] ACPI: Can not change Invalid GPE/Fixed Event status [ 317.880076][T10062] cougar: G6 mapped to space [ 318.118034][T10067] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 318.859317][T10081] ubi0: attaching mtd0 [ 318.951295][T10081] ubi0: scanning is finished [ 319.016695][T10081] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 319.370093][T10081] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 320.363820][T10103] netlink: 28 bytes leftover after parsing attributes in process `syz.1.921'. [ 320.463590][T10122] cougar: G6 mapped to space [ 320.550223][ T29] audit: type=1800 audit(1779723799.208:7): pid=10117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.924" name="trace_pipe" dev="tracefs" ino=3280 res=0 errno=0 [ 323.459589][T10156] Process accounting resumed [ 324.069206][T10198] futex_wake_op: syz.2.941 tries to shift op by -2048; fix this program [ 324.177714][T10198] futex_wake_op: syz.2.941 tries to shift op by -2048; fix this program [ 324.375293][T10202] futex_wake_op: syz.1.942 tries to shift op by -2048; fix this program [ 324.511223][T10202] futex_wake_op: syz.1.942 tries to shift op by -2048; fix this program [ 324.560674][T10204] 0x000000000001-0x000000020000 : "" [ 324.653939][T10209] netlink: 'syz.0.943': attribute type 22 has an invalid length. [ 324.739180][T10204] ftl_cs: FTL header corrupt! [ 324.776989][T10209] netlink: 330 bytes leftover after parsing attributes in process `syz.0.943'. [ 325.187013][T10209] netlink: 28 bytes leftover after parsing attributes in process `syz.0.943'. [ 325.321560][T10209] macvlan0: entered promiscuous mode [ 325.400946][T10209] macvlan0: entered allmulticast mode [ 325.498738][T10209] veth1_vlan: entered allmulticast mode [ 326.115271][T10224] futex_wake_op: syz.3.946 tries to shift op by -2048; fix this program [ 326.158569][T10224] 0x000000000001-0x000000020000 : "" [ 326.225575][T10224] ftl_cs: FTL header corrupt! [ 328.478900][T10238] kexec: Could not allocate control_code_buffer [ 329.289533][T10274] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5636] was attempted by "aVQD4= .$ٲKJ;PgwY#?Jlh\x09-_k()vb)^95N8\x07 G+dR0ƭ'`\x1b]HI$)H^q<[mejKֈF\x5cjWyLY׹3I̶\x0ar=z8=4%v>=_bwfn&\x5cNTT)*~*-*Ķ}/~e2ЈH\x22gP%r;G[Nxa?ܸ!<==]3@^lL(IߍB\x09O)ӾԆᳶ\x5c\x0ceܰ́ngHõڌc?ǿ=\x5c~˜Ѹ:R)K=XB?P \x0a90i\x0bBĹG:g!È\x0b+=o\x09FMoω}՞n9/+4YDsC.|\x0aѪ1C(}?y'C7Fd+SFX`K~yzB>n|ݪ3ul 5?4P]8ILwţwNpC-ktTm|L3A֐ֺqʼ0}\x5cܓ#AIAICD\x0bJ.\x09\x0bqbۘC\x0a:Q\x1b;yL}:!\x092!.`\x07iSif֒QA\x5cQ.OLv誆8'Mn6U6yTlݮ o7xi|Kz1tu]\x0azz5˩i=q\x0a_\x0cPIͭ ʵ oD [ 330.545848][T10300] netlink: 28 bytes leftover after parsing attributes in process `syz.2.962'. [ 332.055748][T10319] netlink: 28 bytes leftover after parsing attributes in process `syz.2.965'. [ 332.151270][T10323] cougar: G6 mapped to space [ 332.971086][T10330] Process accounting paused [ 333.656317][T10355] ubi0: attaching mtd0 [ 333.701924][T10357] netlink: 28 bytes leftover after parsing attributes in process `syz.3.973'. [ 333.734166][T10355] ubi0: scanning is finished [ 333.831978][T10355] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 334.218819][T10355] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 335.728232][T10394] kafs: addr_prefs: Invalid Command [ 336.191844][T10392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.981'. [ 336.438819][T10404] netlink: 'syz.3.983': attribute type 11 has an invalid length. [ 336.526440][T10404] netlink: 'syz.3.983': attribute type 11 has an invalid length. [ 338.181142][T10428] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 338.401561][T10428] File: /dev/nullb0 PID: 10428 Comm: syz.2.989 [ 338.770451][T10442] ima: policy update failed [ 338.814351][ T29] audit: type=1802 audit(1779723817.468:8): pid=10442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.993" res=0 errno=0 [ 339.347460][T10456] zswap: compressor not available [ 340.833979][T10482] usb usb39: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 341.353031][T10493] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81b0eeaa (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 341.368627][T10493] Call Trace: [ 341.371894][T10493] [ 341.374807][T10493] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 341.381480][T10493] mce_cpu_restart+0xd5/0x1f0 [ 341.386146][T10493] ? __pfx_mce_cpu_restart+0x10/0x10 [ 341.391413][T10493] smp_call_function_many_cond+0x13d4/0x1700 [ 341.397472][T10493] ? __pfx_mce_cpu_restart+0x10/0x10 [ 341.402749][T10493] ? mark_held_locks+0x40/0x70 [ 341.407503][T10493] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 341.413299][T10493] ? lockdep_hardirqs_on+0x78/0x100 [ 341.418479][T10493] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 341.424275][T10493] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 341.430609][T10493] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 341.436584][T10493] ? __timer_delete_sync+0x151/0x1c0 [ 341.441857][T10493] ? __pfx_mce_cpu_restart+0x10/0x10 [ 341.447131][T10493] on_each_cpu_cond_mask+0x40/0x90 [ 341.452236][T10493] set_bank+0x240/0x3a0 [ 341.456412][T10493] ? __pfx_set_bank+0x10/0x10 [ 341.461109][T10493] ? find_held_lock+0x2b/0x80 [ 341.465808][T10493] ? sysfs_file_kobj+0xe4/0x290 [ 341.470677][T10493] ? sysfs_file_kobj+0xe4/0x290 [ 341.475516][T10493] ? __pfx_set_bank+0x10/0x10 [ 341.480181][T10493] dev_attr_store+0x58/0x80 [ 341.484680][T10493] ? __pfx_dev_attr_store+0x10/0x10 [ 341.489871][T10493] sysfs_kf_write+0xf2/0x150 [ 341.494451][T10493] kernfs_fop_write_iter+0x3e0/0x5f0 [ 341.499731][T10493] ? __pfx_sysfs_kf_write+0x10/0x10 [ 341.504943][T10493] vfs_write+0x6ac/0x1070 [ 341.509272][T10493] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 341.515071][T10493] ? __pfx_vfs_write+0x10/0x10 [ 341.519854][T10493] ksys_write+0x12a/0x250 [ 341.524189][T10493] ? __pfx_ksys_write+0x10/0x10 [ 341.529028][T10493] ? rcu_is_watching+0x12/0xc0 [ 341.533802][T10493] do_syscall_64+0x10b/0x830 [ 341.538378][T10493] ? clear_bhb_loop+0x40/0x90 [ 341.543048][T10493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.548926][T10493] RIP: 0033:0x7f52a459ce59 [ 341.553330][T10493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.572922][T10493] RSP: 002b:00007f52a538d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 341.581319][T10493] RAX: ffffffffffffffda RBX: 00007f52a4815fa0 RCX: 00007f52a459ce59 [ 341.589272][T10493] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000002 [ 341.597224][T10493] RBP: 00007f52a4632d6f R08: 0000000000000000 R09: 0000000000000000 [ 341.605178][T10493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 341.613135][T10493] R13: 00007f52a4816038 R14: 00007f52a4815fa0 R15: 00007ffc4e3c50b8 [ 341.621099][T10493] [ 341.926468][T10494] blktrace: Concurrent blktraces are not allowed on loop2 [ 343.647922][T10535] FAULT_INJECTION: forcing a failure. [ 343.647922][T10535] name failslab, interval 1, probability 0, space 0, times 0 [ 343.720723][T10535] CPU: 0 UID: 0 PID: 10535 Comm: syz.0.1013 Tainted: G L syzkaller #0 PREEMPT(full) [ 343.720750][T10535] Tainted: [L]=SOFTLOCKUP [ 343.720756][T10535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 343.720765][T10535] Call Trace: [ 343.720771][T10535] [ 343.720777][T10535] dump_stack_lvl+0x100/0x190 [ 343.720804][T10535] should_fail_ex.cold+0x5/0xa [ 343.720823][T10535] should_failslab+0xc2/0x120 [ 343.720842][T10535] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 343.720860][T10535] ? __d_alloc+0x34/0xa40 [ 343.720880][T10535] ? lockdep_init_map_type+0x5c/0x250 [ 343.720899][T10535] __d_alloc+0x34/0xa40 [ 343.720920][T10535] d_alloc_pseudo+0x1c/0xc0 [ 343.720935][T10535] alloc_file_pseudo+0xcf/0x230 [ 343.720957][T10535] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 343.720979][T10535] ? alloc_fd+0x476/0x790 [ 343.721000][T10535] sock_alloc_file+0x50/0x210 [ 343.721020][T10535] __sys_socket+0x1c0/0x260 [ 343.721034][T10535] ? __pfx___sys_socket+0x10/0x10 [ 343.721047][T10535] ? ksys_write+0x1ac/0x250 [ 343.721068][T10535] __x64_sys_socket+0x72/0xb0 [ 343.721083][T10535] ? lockdep_hardirqs_on+0x78/0x100 [ 343.721097][T10535] do_syscall_64+0x10b/0x830 [ 343.721110][T10535] ? clear_bhb_loop+0x40/0x90 [ 343.721128][T10535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.721143][T10535] RIP: 0033:0x7f52a459e6c7 [ 343.721156][T10535] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.721170][T10535] RSP: 002b:00007f52a27f4f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 343.721185][T10535] RAX: ffffffffffffffda RBX: 00007f52a4816090 RCX: 00007f52a459e6c7 [ 343.721195][T10535] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 343.721204][T10535] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 343.721212][T10535] R10: 0000200000000000 R11: 0000000000000286 R12: 0000000000000000 [ 343.721222][T10535] R13: 00007f52a4816128 R14: 00007f52a4816090 R15: 00007ffc4e3c50b8 [ 343.721242][T10535] [ 347.141121][T10582] futex_wake_op: syz.0.1021 tries to shift op by -2048; fix this program [ 347.271266][T10582] futex_wake_op: syz.0.1021 tries to shift op by -2048; fix this program [ 349.506946][T10603] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1025'. [ 349.523216][T10625] cougar: G6 mapped to space [ 349.738694][T10603] hsr_slave_0 (unregistering): left promiscuous mode [ 350.930460][T10639] netlink: 354 bytes leftover after parsing attributes in process `syz.2.1033'. [ 351.919243][T10663] input: jJǸ9%vlQ J86 as /devices/virtual/input/input19 [ 352.090021][T10656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1038'. [ 352.229660][ T5629] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 352.453547][T10674] sg_write: data in/out 262108/1 bytes for SCSI command 0x7f-- guessing data in; [ 352.453547][T10674] program syz.3.1043 not setting count and/or reply_len properly [ 353.082017][T10687] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1047'. [ 353.742988][T10682] Process accounting paused [ 353.839566][T10699] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1051'. [ 354.379242][ T5629] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 354.842022][T10723] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1055'. [ 354.948339][T10723] mac80211_hwsim hwsim2 : renamed from wlan0 (while UP) [ 359.550084][T10801] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 359.668016][T10801] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub [ 359.897389][T10804] zswap: compressor not available [ 360.931447][T10827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1077'. [ 361.160740][T10828] blktrace: Concurrent blktraces are not allowed on loop2 [ 362.237940][T10854] netlink: 'syz.1.1084': attribute type 2 has an invalid length. [ 362.273618][T10854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1084'. [ 362.836731][T10873] futex_wake_op: syz.0.1089 tries to shift op by -2048; fix this program [ 362.924941][T10873] futex_wake_op: syz.0.1089 tries to shift op by -2048; fix this program [ 363.033226][T10867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1088'. [ 363.285913][ T5629] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 363.323538][T10866] Process accounting resumed [ 365.591140][T10946] syz.3.1102(10946): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 365.873168][T10946] can0: slcan on ttyS2. [ 366.187837][T10953] can0 (unregistered): slcan off ttyS2. [ 366.521953][T10910] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 366.563820][T10962] cougar: G6 mapped to space [ 368.993806][T10979] kexec: Could not allocate control_code_buffer [ 369.681013][T11038] cougar: G6 mapped to space [ 369.929147][T11017] blktrace: Concurrent blktraces are not allowed on loop2 [ 370.589117][T11052] __vm_enough_memory: pid: 11052, comm: syz.1.1121, bytes: 4398046457856 not enough memory for the allocation [ 371.074650][T11068] input: jJǸ9%vlQ J86 as /devices/virtual/input/input20 [ 371.323856][T10910] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 371.820483][T11083] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 371.974235][T11083] kvm: vcpu 4: requested lapic timer restore with starting count register 0x390=4294967104 (137438947328 ns) > initial count (6624 ns). Using initial count to start timer. [ 373.165470][T11110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1135'. [ 373.404256][T11123] kvm: vcpu 4: requested lapic timer restore with starting count register 0x390=4294967104 (137438947328 ns) > initial count (6624 ns). Using initial count to start timer. [ 374.825497][ T29] audit: type=1800 audit(1779723853.478:9): pid=11164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1145" name="dbroot" dev="configfs" ino=40111 res=0 errno=0 [ 376.045889][T11180] netlink: 'syz.2.1148': attribute type 1 has an invalid length. [ 376.690768][T11191] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1151'. [ 378.593125][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.593177][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.986497][T11228] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1160'. [ 380.591413][T11260] hub 1-0:1.0: USB hub found [ 380.650892][T11260] hub 1-0:1.0: 1 port detected [ 380.721380][T11263] netlink: 4394 bytes leftover after parsing attributes in process `syz.0.1166'. [ 380.897213][T11262] hub 1-0:1.0: USB hub found [ 380.924014][T11262] hub 1-0:1.0: 1 port detected [ 382.170158][T11294] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1175'. [ 382.222001][T10910] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 382.678362][T11302] zswap: compressor not available [ 382.990491][T11320] batadv_slave_1: entered promiscuous mode [ 383.033377][T11320] batadv_slave_1: left promiscuous mode [ 384.211224][T11331] Process accounting resumed [ 384.230730][T11341] cougar: G6 mapped to space [ 384.692682][T10910] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 384.915806][T11365] futex_wake_op: syz.1.1192 tries to shift op by -2048; fix this program [ 384.943322][T11365] futex_wake_op: syz.1.1192 tries to shift op by -2048; fix this program [ 384.966563][T11365] 0x000000000001-0x000000020000 : "" [ 385.001079][T11365] ftl_cs: FTL header corrupt! [ 387.231369][T11421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1203'. [ 387.996223][T10910] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 390.104832][T11479] cougar: G6 mapped to space [ 392.266940][T11463] kexec: Could not allocate control_code_buffer [ 392.694742][T11496] cougar: G6 mapped to space [ 393.544173][T11498] Process accounting paused [ 395.299919][T10910] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 395.627684][T10910] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 395.691125][T11544] futex_wake_op: syz.2.1231 tries to shift op by -2048; fix this program [ 396.861792][ T29] audit: type=1804 audit(1779723875.518:10): pid=11563 uid=2 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1236" name="/newroot/282/file0" dev="tmpfs" ino=1512 res=1 errno=0 [ 397.006261][ T29] audit: type=1804 audit(1779723875.588:11): pid=11568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1236" name="/newroot/282/file0" dev="tmpfs" ino=1512 res=1 errno=0 [ 397.367850][T10910] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 398.032465][T10910] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 399.819953][T11628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1247'. [ 400.690977][T11642] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 405.398648][T11722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1264'. [ 405.440425][T11722] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1264'. [ 407.717023][ T29] audit: type=1804 audit(1779723886.378:12): pid=11769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1277" name="/newroot/sys/kernel/debug/tracing/saved_tgids" dev="tracefs" ino=3340 res=1 errno=0 [ 407.835340][T11769] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1277'. [ 408.852851][T11782] blktrace: Concurrent blktraces are not allowed on loop2 [ 410.423657][T10910] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 410.442734][T10895] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 411.107339][T11812] blktrace: Concurrent blktraces are not allowed on loop2 [ 411.720409][T11803] random: crng reseeded on system resumption [ 412.298685][T11809] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 412.349455][T11809] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 412.507682][T10910] Bluetooth: hci0: command 0x0c1a tx timeout [ 412.513755][T11809] Bluetooth: hci1: command 0x0c1a tx timeout [ 413.403525][T11855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1296'. [ 413.428054][T11857] cougar: G6 mapped to space [ 413.951137][T11870] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 414.585195][T11840] Bluetooth: hci0: command 0x0c1a tx timeout [ 414.591372][T11806] Bluetooth: hci1: command 0x0c1a tx timeout [ 414.817105][T11867] Process accounting paused [ 416.434229][T10895] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 416.758672][T11885] kexec: Could not allocate control_code_buffer [ 418.588223][T11934] blktrace: Concurrent blktraces are not allowed on loop2 [ 419.179707][T11948] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1314'. [ 419.928632][T11954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1315'. [ 420.070490][T11962] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1317'. [ 420.310276][T11963] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1316'. [ 422.985731][T12011] futex_wake_op: syz.0.1326 tries to shift op by -2048; fix this program [ 423.756240][T12019] device-mapper: ioctl: Unable to rename non-existent device, to [ 424.320712][T11922] Process accounting resumed [ 424.723477][T12044] cougar: G6 mapped to space [ 425.021122][T12055] usbcore.quirks: string doesn't fit in 127 chars. [ 425.759530][T12072] FAULT_INJECTION: forcing a failure. [ 425.759530][T12072] name failslab, interval 1, probability 0, space 0, times 0 [ 425.818259][T12072] CPU: 0 UID: 8 PID: 12072 Comm: syz.0.1342 Tainted: G L syzkaller #0 PREEMPT(full) [ 425.818287][T12072] Tainted: [L]=SOFTLOCKUP [ 425.818292][T12072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 425.818303][T12072] Call Trace: [ 425.818308][T12072] [ 425.818314][T12072] dump_stack_lvl+0x100/0x190 [ 425.818337][T12072] should_fail_ex.cold+0x5/0xa [ 425.818358][T12072] should_failslab+0xc2/0x120 [ 425.818377][T12072] __kmalloc_cache_noprof+0x7a/0x6f0 [ 425.818398][T12072] ? key_user_lookup+0x1a3/0x5a0 [ 425.818421][T12072] key_user_lookup+0x1a3/0x5a0 [ 425.818439][T12072] ? __pfx_key_user_lookup+0x10/0x10 [ 425.818460][T12072] ? security_key_permission+0x7b/0x230 [ 425.818481][T12072] key_alloc+0x18b/0x1310 [ 425.818504][T12072] ? __pfx_keyring_search+0x10/0x10 [ 425.818526][T12072] ? __pfx_key_alloc+0x10/0x10 [ 425.818544][T12072] ? __pfx_key_default_cmp+0x10/0x10 [ 425.818564][T12072] ? __pfx_keyring_search_iterator+0x10/0x10 [ 425.818586][T12072] keyring_alloc+0x44/0xc0 [ 425.818608][T12072] look_up_user_keyrings+0x465/0x790 [ 425.818628][T12072] ? __pfx_look_up_user_keyrings+0x10/0x10 [ 425.818643][T12072] ? futex_wait+0x11e/0x370 [ 425.818663][T12072] ? __pfx_futex_wait+0x10/0x10 [ 425.818686][T12072] lookup_user_key+0xbb1/0x1300 [ 425.818705][T12072] ? __pfx_lookup_user_key+0x10/0x10 [ 425.818727][T12072] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 425.818747][T12072] ? __x64_sys_futex+0x34f/0x4d0 [ 425.818762][T12072] ? __x64_sys_futex+0x358/0x4d0 [ 425.818782][T12072] keyctl_session_to_parent+0x28/0xae0 [ 425.818801][T12072] __do_sys_keyctl+0x2b1/0x5a0 [ 425.818825][T12072] do_syscall_64+0x10b/0x830 [ 425.818840][T12072] ? clear_bhb_loop+0x40/0x90 [ 425.818859][T12072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.818875][T12072] RIP: 0033:0x7f52a459ce59 [ 425.818890][T12072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.818904][T12072] RSP: 002b:00007f52a538d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 425.818921][T12072] RAX: ffffffffffffffda RBX: 00007f52a4815fa0 RCX: 00007f52a459ce59 [ 425.818931][T12072] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000012 [ 425.818941][T12072] RBP: 00007f52a4632d6f R08: 0000000000000001 R09: 0000000000000000 [ 425.818951][T12072] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 425.818961][T12072] R13: 00007f52a4816038 R14: 00007f52a4815fa0 R15: 00007ffc4e3c50b8 [ 425.818980][T12072] [ 427.187890][T12086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1346'. [ 428.439725][T10895] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 429.308269][T12113] random: crng reseeded on system resumption [ 430.307534][T10895] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 431.074245][T12171] netlink: zone id is out of range [ 431.170342][T12171] netlink: zone id is out of range [ 431.300962][T12171] netlink: set zone limit has 8 unknown bytes [ 433.001319][T10895] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 433.347957][T12210] cougar: G6 mapped to space [ 433.448092][T12212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1374'. [ 433.906629][T12226] random: crng reseeded on system resumption [ 434.543487][T12243] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1380'. [ 434.591197][T12243] mac80211_hwsim hwsim8 : renamed from wlan0 (while UP) [ 436.415968][T12277] cougar: G6 mapped to space [ 437.677977][T12301] blktrace: Concurrent blktraces are not allowed on loop2 [ 438.732740][T12311] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 438.751547][T12314] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5634] was attempted by ""[12314] [ 440.029505][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.036019][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.590099][T12360] blktrace: Concurrent blktraces are not allowed on loop2 [ 441.531224][T12375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.584576][T12375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.652309][T12382] cougar: G6 mapped to space [ 441.922682][T10895] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 443.370018][T12417] blktrace: Concurrent blktraces are not allowed on loop2 [ 445.679788][T12423] kexec: Could not allocate control_code_buffer [ 447.354466][T12437] Process accounting resumed [ 447.565813][T10895] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 448.049183][T12476] FAULT_INJECTION: forcing a failure. [ 448.049183][T12476] name fail_futex, interval 1, probability 0, space 0, times 0 [ 448.089511][T12476] CPU: 0 UID: 0 PID: 12476 Comm: syz.0.1429 Tainted: G L syzkaller #0 PREEMPT(full) [ 448.089539][T12476] Tainted: [L]=SOFTLOCKUP [ 448.089545][T12476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 448.089555][T12476] Call Trace: [ 448.089560][T12476] [ 448.089566][T12476] dump_stack_lvl+0x100/0x190 [ 448.089588][T12476] should_fail_ex.cold+0x5/0xa [ 448.089609][T12476] get_futex_key+0x1d2/0x1510 [ 448.089630][T12476] ? __pfx_get_futex_key+0x10/0x10 [ 448.089644][T12476] ? futex_hash+0x2ad/0x370 [ 448.089661][T12476] ? futex_hash+0x141/0x370 [ 448.089677][T12476] futex_wake+0xea/0x530 [ 448.089697][T12476] ? __pfx_futex_wait+0x10/0x10 [ 448.089715][T12476] ? tty_ioctl+0x11f4/0x1640 [ 448.089728][T12476] ? __pfx_futex_wake+0x10/0x10 [ 448.089751][T12476] ? is_valid_madvise+0x34/0xd0 [ 448.089772][T12476] do_futex+0x32b/0x350 [ 448.089789][T12476] ? __pfx_do_futex+0x10/0x10 [ 448.089807][T12476] ? find_held_lock+0x2b/0x80 [ 448.089828][T12476] __x64_sys_futex+0x34f/0x4d0 [ 448.089847][T12476] ? __pfx___x64_sys_futex+0x10/0x10 [ 448.089867][T12476] ? rcu_is_watching+0x12/0xc0 [ 448.089887][T12476] do_syscall_64+0x10b/0x830 [ 448.089901][T12476] ? clear_bhb_loop+0x40/0x90 [ 448.089918][T12476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.089934][T12476] RIP: 0033:0x7f52a459ce59 [ 448.089954][T12476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.089969][T12476] RSP: 002b:00007f52a538d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 448.089984][T12476] RAX: ffffffffffffffda RBX: 00007f52a4815fa8 RCX: 00007f52a459ce59 [ 448.089995][T12476] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f52a4815fac [ 448.090004][T12476] RBP: 00007f52a4815fa0 R08: 0000000000000001 R09: 0000000000000000 [ 448.090013][T12476] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 448.090023][T12476] R13: 00007f52a4816038 R14: 00007ffc4e3c4fd0 R15: 00007ffc4e3c50b8 [ 448.090043][T12476] [ 448.338893][T12478] cougar: G6 mapped to space [ 449.978836][T12515] futex_wake_op: syz.0.1437 tries to shift op by -2048; fix this program [ 450.014711][T12515] futex_wake_op: syz.0.1437 tries to shift op by -2048; fix this program [ 452.033097][T12542] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1444'. [ 453.044271][ T29] audit: type=1800 audit(1779723931.698:13): pid=12553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1445" name="trace_pipe" dev="tracefs" ino=3318 res=0 errno=0 [ 454.345983][T12614] syz_tun: tun_chr_ioctl cmd 1074025675 [ 454.425891][T12614] syz_tun: persist enabled [ 455.260132][T12611] Process accounting paused [ 457.614758][T12680] kvm: vcpu 4: requested lapic timer restore with starting count register 0x390=4294967104 (137438947328 ns) > initial count (6624 ns). Using initial count to start timer. [ 458.649502][T12697] futex_wake_op: syz.0.1471 tries to shift op by -2048; fix this program [ 458.689067][T12697] 0x000000000001-0x000000020000 : "" [ 458.743071][T12697] ftl_cs: FTL header corrupt! [ 460.648902][T12742] hub 1-0:1.0: USB hub found [ 460.664162][T12742] hub 1-0:1.0: 1 port detected [ 460.741736][T12743] hub 1-0:1.0: USB hub found [ 460.771285][T12743] hub 1-0:1.0: 1 port detected [ 464.576050][T12832] random: crng reseeded on system resumption [ 464.649858][T12835] device-mapper: ioctl: Unable to rename non-existent device, to uuid [ 465.928858][T12855] blktrace: Concurrent blktraces are not allowed on loop2 [ 466.028948][T12860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.070625][T12860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.450229][T12871] kvm: vcpu 4: requested lapic timer restore with starting count register 0x390=4294967104 (137438947328 ns) > initial count (6624 ns). Using initial count to start timer. [ 469.206019][ T29] audit: type=1804 audit(1779723947.868:14): pid=12920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1528" name="/newroot/sys/kernel/tracing/set_event_notrace_pid" dev="tracefs" ino=1049 res=1 errno=0 [ 469.988421][T10895] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 470.102016][T12950] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1534'. [ 472.071647][T12991] cougar: G6 mapped to space [ 472.296099][T13000] cougar: G6 mapped to space [ 473.465033][T13023] netlink: 504 bytes leftover after parsing attributes in process `syz.0.1548'. [ 476.298179][ T29] audit: type=1804 audit(1779723954.958:15): pid=13101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1570" name="/newroot/sys/kernel/debug/tracing/saved_tgids" dev="tracefs" ino=3340 res=1 errno=0 [ 478.053560][T13107] Process accounting paused [ 478.124407][T13148] FAULT_INJECTION: forcing a failure. [ 478.124407][T13148] name failslab, interval 1, probability 0, space 0, times 0 [ 478.202048][T13148] CPU: 0 UID: 0 PID: 13148 Comm: syz.0.1579 Tainted: G L syzkaller #0 PREEMPT(full) [ 478.202074][T13148] Tainted: [L]=SOFTLOCKUP [ 478.202080][T13148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 478.202091][T13148] Call Trace: [ 478.202096][T13148] [ 478.202102][T13148] dump_stack_lvl+0x100/0x190 [ 478.202125][T13148] should_fail_ex.cold+0x5/0xa [ 478.202146][T13148] should_failslab+0xc2/0x120 [ 478.202165][T13148] __kvmalloc_node_noprof+0xfa/0xa00 [ 478.202180][T13148] ? file_tty_write.isra.0+0x64e/0x890 [ 478.202209][T13148] file_tty_write.isra.0+0x64e/0x890 [ 478.202232][T13148] ? security_file_permission+0x76/0x210 [ 478.202252][T13148] ? rw_verify_area+0xce/0x6d0 [ 478.202269][T13148] vfs_write+0x6ac/0x1070 [ 478.202287][T13148] ? __pfx_tty_write+0x10/0x10 [ 478.202302][T13148] ? __pfx_vfs_write+0x10/0x10 [ 478.202318][T13148] ? find_held_lock+0x2b/0x80 [ 478.202351][T13148] ksys_write+0x12a/0x250 [ 478.202368][T13148] ? __pfx_ksys_write+0x10/0x10 [ 478.202387][T13148] ? rcu_is_watching+0x12/0xc0 [ 478.202407][T13148] do_syscall_64+0x10b/0x830 [ 478.202422][T13148] ? clear_bhb_loop+0x40/0x90 [ 478.202440][T13148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.202455][T13148] RIP: 0033:0x7f52a459ce59 [ 478.202469][T13148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.202491][T13148] RSP: 002b:00007f52a538d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 478.202507][T13148] RAX: ffffffffffffffda RBX: 00007f52a4815fa0 RCX: 00007f52a459ce59 [ 478.202517][T13148] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 478.202527][T13148] RBP: 00007f52a4632d6f R08: 0000000000000000 R09: 0000000000000000 [ 478.202537][T13148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 478.202545][T13148] R13: 00007f52a4816038 R14: 00007f52a4815fa0 R15: 00007ffc4e3c50b8 [ 478.202566][T13148] [ 479.395016][T13159] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.690610][T13170] futex_wake_op: syz.1.1585 tries to shift op by -2048; fix this program [ 480.044108][T13159] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.272007][T13159] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.286763][T13164] ICMPv6: process `syz.0.1582' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 480.476005][T13159] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.877004][T13180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1589'. [ 481.286653][T13194] Unable to find swap-space signature [ 481.328677][T13194] Unable to find swap-space signature [ 484.113520][ T29] audit: type=1800 audit(1779723962.768:16): pid=13238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1604" name="file0" dev="tmpfs" ino=2135 res=0 errno=0 [ 484.137225][T13242] cougar: G6 mapped to space [ 484.502310][T13247] zswap: compressor 000 not available [ 484.549318][T13252] random: crng reseeded on system resumption [ 484.584950][T13252] Unrecognized hibernate image header format! [ 484.602764][T13252] PM: hibernation: Image mismatch: architecture specific data [ 485.527452][T10895] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 485.817520][T13272] Process accounting resumed [ 487.093659][T10895] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 487.479379][T13330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1624'. [ 491.612451][T13421] can0: slcan on ptm0. [ 491.847353][T13420] can0 (unregistered): slcan off ptm0. [ 492.458380][T13441] cougar: G6 mapped to space [ 492.645629][T13449] netlink: 146 bytes leftover after parsing attributes in process `syz.0.1645'. [ 493.458835][T13479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1654'. [ 494.253722][T13474] zram: Removed device: zram0 [ 494.928481][T13468] kexec: Could not allocate control_code_buffer [ 495.282038][T13520] queue_state_write: operation too long [ 495.320908][T13520] queue_state_write: use 'run', 'start' or 'kick' [ 496.043470][T13538] cougar: G6 mapped to space [ 498.566295][T13590] nvme_fabrics: unknown parameter or missing value '@' in ctrl creation request [ 498.840862][T13596] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1674'. [ 500.021663][T13624] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5627] was attempted by "`9;N\x07^\x07)8@J3[ $#Nǒ \x0bMKa;&U8\x0a{N^}w=8K\x0aFnʕM|ZЎ?Y]'dFXR\x22Lmu$̫&2fn\x0c0ckmEC(6dsc,T\x0bZKJGSmM[&[SUI%ۊP,S \x0bK4|W{Sp,g/]v2pڶa4t>mpKH\x5ctui@6_Up\x0d*\x1bTFXXBne2>GChh\x22뱡!m/P\x0b$o}'\x1b'd 11 [ 508.749923][T13819] Process accounting resumed [ 509.042207][T13848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1728'. [ 509.621827][T13866] block2mtd: illegal erase size [ 512.689279][T13925] cougar: G6 mapped to space [ 516.008011][T13999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1760'. [ 516.436939][T14005] cougar: G6 mapped to space [ 517.604958][T13999] Process accounting paused [ 517.804803][T14028] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1766'. [ 518.184726][T14045] futex_wake_op: syz.3.1771 tries to shift op by -2048; fix this program [ 518.237350][T14045] futex_wake_op: syz.3.1771 tries to shift op by -2048; fix this program [ 519.065681][T14060] cougar: G6 mapped to space [ 519.772186][T14069] syz_tun: tun_chr_ioctl cmd 2147767521 [ 522.058209][T14113] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1784'. [ 525.841358][T14174] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1798'. [ 527.660356][T14204] FAULT_INJECTION: forcing a failure. [ 527.660356][T14204] name failslab, interval 1, probability 0, space 0, times 0 [ 527.739236][T14204] CPU: 0 UID: 0 PID: 14204 Comm: syz.0.1803 Tainted: G L syzkaller #0 PREEMPT(full) [ 527.739263][T14204] Tainted: [L]=SOFTLOCKUP [ 527.739268][T14204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 527.739278][T14204] Call Trace: [ 527.739284][T14204] [ 527.739290][T14204] dump_stack_lvl+0x100/0x190 [ 527.739312][T14204] should_fail_ex.cold+0x5/0xa [ 527.739333][T14204] should_failslab+0xc2/0x120 [ 527.739351][T14204] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 527.739366][T14204] ? alloc_empty_file_noaccount+0x2b/0xd0 [ 527.739401][T14204] alloc_empty_file_noaccount+0x2b/0xd0 [ 527.739424][T14204] alloc_file_pseudo_noaccount+0x13a/0x230 [ 527.739450][T14204] ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10 [ 527.739475][T14204] ? iput+0x3a/0x40 [ 527.739499][T14204] bdev_file_open_by_dev+0x13a/0x210 [ 527.739519][T14204] blkdev_bszset+0x170/0x240 [ 527.739537][T14204] ? __pfx_blkdev_bszset+0x10/0x10 [ 527.739555][T14204] ? find_held_lock+0x2b/0x80 [ 527.739574][T14204] ? __fget_files+0x215/0x3d0 [ 527.739591][T14204] ? hook_file_ioctl_common+0x149/0x410 [ 527.739610][T14204] blkdev_ioctl+0x513/0x6f0 [ 527.739628][T14204] ? __pfx_blkdev_ioctl+0x10/0x10 [ 527.739648][T14204] ? __pfx_blkdev_ioctl+0x10/0x10 [ 527.739667][T14204] __x64_sys_ioctl+0x18e/0x210 [ 527.739684][T14204] do_syscall_64+0x10b/0x830 [ 527.739698][T14204] ? clear_bhb_loop+0x40/0x90 [ 527.739716][T14204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.739732][T14204] RIP: 0033:0x7f52a459ce59 [ 527.739746][T14204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.739761][T14204] RSP: 002b:00007f52a538d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 527.739776][T14204] RAX: ffffffffffffffda RBX: 00007f52a4815fa0 RCX: 00007f52a459ce59 [ 527.739786][T14204] RDX: 00002000000000c0 RSI: 0000000040081271 RDI: 0000000000000002 [ 527.739795][T14204] RBP: 00007f52a4632d6f R08: 0000000000000000 R09: 0000000000000000 [ 527.739804][T14204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 527.739813][T14204] R13: 00007f52a4816038 R14: 00007f52a4815fa0 R15: 00007ffc4e3c50b8 [ 527.739831][T14204] [ 528.426061][T14209] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1805'. [ 528.765219][T14214] Invalid ELF header magic: != ELF [ 530.968037][T14251] cougar: G6 mapped to space [ 531.554398][T14262] futex_wake_op: syz.2.1814 tries to shift op by -2048; fix this program [ 531.588685][T14262] futex_wake_op: syz.2.1814 tries to shift op by -2048; fix this program [ 532.449137][T10895] Bluetooth: hci1: unexpected event 0x3e length: 508 > 260 [ 532.449163][T10895] Bluetooth: hci1: unexpected subevent 0x02 length: 507 > 260 [ 532.464243][T10895] Bluetooth: hci1: Dropping invalid advertising data [ 532.473205][T10895] Bluetooth: hci1: Dropping invalid advertising data [ 532.480317][T10895] Bluetooth: hci1: unknown advertising packet type: 0x05 [ 532.480340][T10895] Bluetooth: hci1: Malformed LE Event: 0x02 [ 533.171633][T14294] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1821'. [ 533.609075][T14297] futex_wake_op: syz.3.1822 tries to shift op by -2048; fix this program [ 533.691188][T14296] 0x000000000001-0x000000020000 : "" [ 533.734407][T14296] ftl_cs: FTL header corrupt! [ 534.837094][T14306] FAULT_INJECTION: forcing a failure. [ 534.837094][T14306] name fail_futex, interval 1, probability 0, space 0, times 0 [ 534.953500][T14306] CPU: 0 UID: 0 PID: 14306 Comm: syz.0.1824 Tainted: G L syzkaller #0 PREEMPT(full) [ 534.953528][T14306] Tainted: [L]=SOFTLOCKUP [ 534.953533][T14306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 534.953543][T14306] Call Trace: [ 534.953549][T14306] [ 534.953556][T14306] dump_stack_lvl+0x100/0x190 [ 534.953578][T14306] should_fail_ex.cold+0x5/0xa [ 534.953601][T14306] get_futex_key+0x295/0x1510 [ 534.953620][T14306] ? __pfx_get_futex_key+0x10/0x10 [ 534.953637][T14306] ? kasan_save_track+0x14/0x30 [ 534.953653][T14306] ? __kasan_kmalloc+0xaa/0xb0 [ 534.953671][T14306] futex_lock_pi+0x1d2/0x7a0 [ 534.953693][T14306] ? __pfx_futex_lock_pi+0x10/0x10 [ 534.953731][T14306] ? __pfx_futex_wake_mark+0x10/0x10 [ 534.953755][T14306] ? __fget_files+0x215/0x3d0 [ 534.953785][T14306] do_futex+0x18a/0x350 [ 534.953802][T14306] ? __pfx_do_futex+0x10/0x10 [ 534.953819][T14306] ? fput+0x79/0x100 [ 534.953839][T14306] ? __sys_sendmsg+0x18f/0x220 [ 534.953860][T14306] __x64_sys_futex+0x34f/0x4d0 [ 534.953879][T14306] ? __pfx___x64_sys_futex+0x10/0x10 [ 534.953898][T14306] ? rcu_is_watching+0x12/0xc0 [ 534.953920][T14306] do_syscall_64+0x10b/0x830 [ 534.953934][T14306] ? clear_bhb_loop+0x40/0x90 [ 534.953952][T14306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.953967][T14306] RIP: 0033:0x7f52a459ce59 [ 534.953981][T14306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.953995][T14306] RSP: 002b:00007f52a538d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 534.954010][T14306] RAX: ffffffffffffffda RBX: 00007f52a4815fa0 RCX: 00007f52a459ce59 [ 534.954021][T14306] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 534.954029][T14306] RBP: 00007f52a4632d6f R08: 0000000000000000 R09: 000000008000fff5 [ 534.954039][T14306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 534.954048][T14306] R13: 00007f52a4816038 R14: 00007f52a4815fa0 R15: 00007ffc4e3c50b8 [ 534.954068][T14306] [ 538.768181][T14365] can0: slcan on pty238. [ 539.055354][T14364] can0 (unregistered): slcan off pty238. [ 539.223147][T14364] Process accounting paused [ 541.003515][T14408] random: crng reseeded on system resumption [ 544.573690][T14495] netlink: 'syz.1.1862': attribute type 1 has an invalid length. [ 545.091955][T14507] input: jJǸ9%vlQ J86 as /devices/virtual/input/input23 [ 546.417549][T14532] ================================================================== [ 546.425639][T14532] BUG: KASAN: use-after-free in ring_buffer_read_page+0xd51/0x15a0 [ 546.433619][T14532] Write of size 16308 at addr ffff88805ceb404c by task syz.3.1872/14532 [ 546.441924][T14532] [ 546.444234][T14532] CPU: 0 UID: 0 PID: 14532 Comm: syz.3.1872 Tainted: G L syzkaller #0 PREEMPT(full) [ 546.444261][T14532] Tainted: [L]=SOFTLOCKUP [ 546.444266][T14532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 546.444276][T14532] Call Trace: [ 546.444283][T14532] [ 546.444289][T14532] dump_stack_lvl+0x100/0x190 [ 546.444311][T14532] print_report+0x13d/0x4b0 [ 546.444332][T14532] ? __virt_addr_valid+0x239/0x430 [ 546.444357][T14532] ? ring_buffer_read_page+0xd51/0x15a0 [ 546.444376][T14532] kasan_report+0xdf/0x1d0 [ 546.444394][T14532] ? ring_buffer_read_page+0xd51/0x15a0 [ 546.444415][T14532] kasan_check_range+0x10f/0x1e0 [ 546.444434][T14532] __asan_memset+0x23/0x50 [ 546.444455][T14532] ring_buffer_read_page+0xd51/0x15a0 [ 546.444478][T14532] ? __pfx_ring_buffer_read_page+0x10/0x10 [ 546.444500][T14532] tracing_buffers_read+0x2bf/0xaf0 [ 546.444516][T14532] ? rw_verify_area+0xce/0x6d0 [ 546.444531][T14532] ? __pfx_tracing_buffers_read+0x10/0x10 [ 546.444547][T14532] vfs_read+0x1e4/0xb30 [ 546.444564][T14532] ? __pfx_vfs_read+0x10/0x10 [ 546.444580][T14532] ? __fget_files+0x215/0x3d0 [ 546.444599][T14532] ? __fget_files+0x21f/0x3d0 [ 546.444617][T14532] ksys_read+0x12a/0x250 [ 546.444633][T14532] ? __pfx_ksys_read+0x10/0x10 [ 546.444650][T14532] ? rcu_is_watching+0x12/0xc0 [ 546.444668][T14532] do_syscall_64+0x10b/0x830 [ 546.444682][T14532] ? clear_bhb_loop+0x40/0x90 [ 546.444698][T14532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.444714][T14532] RIP: 0033:0x7fb1aad9ce59 [ 546.444728][T14532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.444743][T14532] RSP: 002b:00007fb1abca5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 546.444758][T14532] RAX: ffffffffffffffda RBX: 00007fb1ab015fa0 RCX: 00007fb1aad9ce59 [ 546.444769][T14532] RDX: 0000000000001000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 546.444779][T14532] RBP: 00007fb1aae32d6f R08: 0000000000000000 R09: 0000000000000000 [ 546.444788][T14532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 546.444798][T14532] R13: 00007fb1ab016038 R14: 00007fb1ab015fa0 R15: 00007ffec139a1b8 [ 546.444812][T14532] [ 546.444845][T14532] [ 546.666450][T14532] The buggy address belongs to the physical page: [ 546.672844][T14532] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5ceb4 [ 546.681583][T14532] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 546.688673][T14532] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 546.697242][T14532] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 546.705811][T14532] page dumped because: kasan: bad access detected [ 546.712205][T14532] page_owner tracks the page as allocated [ 546.717906][T14532] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x44dc0(GFP_KERNEL|__GFP_ZERO|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 5959, tgid 5958 (syz.1.37), ts 95924498456, free_ts 95918916027 [ 546.737189][T14532] post_alloc_hook+0xfd/0x120 [ 546.741865][T14532] get_page_from_freelist+0x11a6/0x33b0 [ 546.747396][T14532] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 546.753265][T14532] __alloc_pages_noprof+0xb/0x110 [ 546.758265][T14532] alloc_cpu_data+0x60/0x130 [ 546.762835][T14532] ring_buffer_alloc_read_page+0x430/0x560 [ 546.768625][T14532] tracing_buffers_read+0x603/0xaf0 [ 546.773800][T14532] vfs_read+0x1e4/0xb30 [ 546.777943][T14532] ksys_read+0x12a/0x250 [ 546.782165][T14532] do_syscall_64+0x10b/0x830 [ 546.786734][T14532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.792607][T14532] page last free pid 5946 tgid 5945 stack trace: [ 546.798903][T14532] __free_frozen_pages+0x747/0x1040 [ 546.804089][T14532] tlb_finish_mmu+0x27d/0x810 [ 546.808751][T14532] exit_mmap+0x454/0xa10 [ 546.812987][T14532] __mmput+0x12a/0x410 [ 546.817049][T14532] mmput+0x67/0x80 [ 546.820761][T14532] do_exit+0x8b2/0x2af0 [ 546.824914][T14532] do_group_exit+0xd5/0x2a0 [ 546.829412][T14532] get_signal+0x20ff/0x2210 [ 546.833914][T14532] arch_do_signal_or_restart+0x91/0x7a0 [ 546.839450][T14532] exit_to_user_mode_loop+0x8b/0x4f0 [ 546.844721][T14532] do_syscall_64+0x6f2/0x830 [ 546.849303][T14532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.855195][T14532] [ 546.857502][T14532] Memory state around the buggy address: [ 546.863112][T14532] ffff88805ceb4f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 546.871154][T14532] ffff88805ceb4f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 546.879199][T14532] >ffff88805ceb5000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 546.887250][T14532] ^ [ 546.891304][T14532] ffff88805ceb5080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 546.899351][T14532] ffff88805ceb5100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 546.907392][T14532] ================================================================== [ 546.915452][T14532] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 546.922641][T14532] CPU: 0 UID: 0 PID: 14532 Comm: syz.3.1872 Tainted: G L syzkaller #0 PREEMPT(full) [ 546.933567][T14532] Tainted: [L]=SOFTLOCKUP [ 546.937874][T14532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 546.947999][T14532] Call Trace: [ 546.951261][T14532] [ 546.954175][T14532] dump_stack_lvl+0x100/0x190 [ 546.958843][T14532] vpanic+0x552/0x970 [ 546.962822][T14532] ? __pfx_vpanic+0x10/0x10 [ 546.967307][T14532] ? __pfx_vprintk_emit+0x10/0x10 [ 546.972320][T14532] ? ring_buffer_read_page+0xd51/0x15a0 [ 546.977852][T14532] panic+0xd1/0xe0 [ 546.981553][T14532] ? __pfx_panic+0x10/0x10 [ 546.985950][T14532] ? end_report.part.0+0x23/0x90 [ 546.990873][T14532] ? rcu_is_watching+0x12/0xc0 [ 546.995627][T14532] ? end_report.part.0+0x23/0x90 [ 547.000551][T14532] check_panic_on_warn.cold+0x19/0x34 [ 547.005908][T14532] end_report.part.0+0x3a/0x90 [ 547.010660][T14532] kasan_report.cold+0xe/0x18 [ 547.015325][T14532] ? ring_buffer_read_page+0xd51/0x15a0 [ 547.020860][T14532] kasan_check_range+0x10f/0x1e0 [ 547.025785][T14532] __asan_memset+0x23/0x50 [ 547.030190][T14532] ring_buffer_read_page+0xd51/0x15a0 [ 547.035558][T14532] ? __pfx_ring_buffer_read_page+0x10/0x10 [ 547.041352][T14532] tracing_buffers_read+0x2bf/0xaf0 [ 547.046543][T14532] ? rw_verify_area+0xce/0x6d0 [ 547.051288][T14532] ? __pfx_tracing_buffers_read+0x10/0x10 [ 547.056989][T14532] vfs_read+0x1e4/0xb30 [ 547.061131][T14532] ? __pfx_vfs_read+0x10/0x10 [ 547.065791][T14532] ? __fget_files+0x215/0x3d0 [ 547.070455][T14532] ? __fget_files+0x21f/0x3d0 [ 547.075117][T14532] ksys_read+0x12a/0x250 [ 547.079346][T14532] ? __pfx_ksys_read+0x10/0x10 [ 547.084094][T14532] ? rcu_is_watching+0x12/0xc0 [ 547.088843][T14532] do_syscall_64+0x10b/0x830 [ 547.093413][T14532] ? clear_bhb_loop+0x40/0x90 [ 547.098088][T14532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.103966][T14532] RIP: 0033:0x7fb1aad9ce59 [ 547.108365][T14532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.127968][T14532] RSP: 002b:00007fb1abca5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 547.136375][T14532] RAX: ffffffffffffffda RBX: 00007fb1ab015fa0 RCX: 00007fb1aad9ce59 [ 547.144329][T14532] RDX: 0000000000001000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 547.152282][T14532] RBP: 00007fb1aae32d6f R08: 0000000000000000 R09: 0000000000000000 [ 547.160238][T14532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 547.168188][T14532] R13: 00007fb1ab016038 R14: 00007fb1ab015fa0 R15: 00007ffec139a1b8 [ 547.176147][T14532] [ 547.179205][T14532] Kernel Offset: disabled [ 547.183515][T14532] Rebooting in 86400 seconds..