last executing test programs: 17m45.854904073s ago: executing program 2 (id=356): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x80000000000000, 0xa, 0xfffffffffffffff5, 0x7c, r0, 0x2000000000100) mmap$auto(0x0, 0x7, 0x0, 0x11, 0xffffffffffffffff, 0x8000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/timer_source\x00', 0x8002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r2) write$auto(r1, 0x0, 0xe) close_range$auto(0x2, 0x8, 0x0) setresgid$auto(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x22082, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, 0x0) r4 = socket(0x2c, 0x80003, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x468100, 0x0) read$auto(r4, 0x0, 0x401) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) ioctl$auto_FS_IOC_UNRESVSP64(r4, 0x4030582b, 0x3) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000003540)=ANY=[@ANYBLOB="30110000", @ANYRES16=0x0, @ANYRES8=r2, @ANYRES32=r6, @ANYBLOB="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"/292, @ANYRESHEX=r2, @ANYRES32=r1], 0x1130}, 0x1, 0x0, 0x0, 0x4}, 0x404c081) r7 = prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_ON(0x4, 0x1, 0xffffffffffffffff, 0x2d2f, 0x4141) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r7, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="010526bd340d79000000c3e6e3603756039d774da20572e2a17c3b3c72d9a34b67037e6be62dbe0f7c20b917f355ecf134ca5ccce3276037de756cce00000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x20000010) mmap$auto(0x6, 0x100000001, 0xb3, 0x9b72, r5, 0x8000000028002) close_range$auto(0x2, 0xa, 0x0) socket(0xf, 0xa, 0x1) setsockopt$auto(0xffffffffffffffff, 0x29, 0x4b, &(0x7f00000000c0)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5', 0x10000110) bind$auto(0x3, &(0x7f0000000040)=@generic={0xa, "02d0ac0c00e435826339c7328903"}, 0x6a) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x500, 0x0) 17m45.578515522s ago: executing program 2 (id=359): bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001}, 0x6f4) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x14, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) select$auto(0x8, &(0x7f00000000c0)={[0xeeda, 0x7, 0x6, 0x9, 0x34, 0x1ff, 0x6, 0x4, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8e, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f00000001c0)={0x6, 0xcb}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24008054}, 0x40) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00+'], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) shutdown$auto(0x200000003, 0x2) 17m44.327712134s ago: executing program 2 (id=363): r0 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x7, 0xeb0, r0, 0x8000) io_uring_setup$auto(0x9, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xffffffffffffffff, 0x8000) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x85) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) swapon$auto(0x0, 0x7057) setsockopt$auto(r0, 0x1, 0x9, 0x0, 0xeb66) close_range$auto(0x2, 0xa, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x8300, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/pagemap\x00', 0x280300, 0x0) select$auto(0xd, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x23, 0x4, 0x7fffffffefff, 0xffffffffffffffff, 0x0) 17m42.689020241s ago: executing program 2 (id=366): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = open(&(0x7f0000000100)='.\x00', 0x591083, 0x408) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) linkat$auto(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) mmap$auto(0x0, 0x6, 0xdb, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) memfd_create$auto(0x0, 0xe) socket(0x2, 0x1, 0x106) bind$auto(0x3, 0x0, 0x6a) setsockopt$auto(0x3, 0x6, 0x4, 0x0, 0xfb3) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0xffffffffffffffff, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) ioctl$auto_SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000300)="453229a80ff99beb2d9a0fc7ee5b342cc9ac94146571a898e3e1684bd89805a3cdad210d45ba0986c8d4fe5e7653bf74d4ee4672608652f4bb9b0b1a8289e1406e3596") pipe$auto(0x0) mmap$auto(0x0, 0x2, 0xfffffffffffffffe, 0xeb0, 0xfffffffffffffffa, 0x200000002) rt_sigaction$auto(0x1, &(0x7f00000001c0)={&(0x7f0000000080)=0x0, 0x7fffffffffffffff, 0x0, {0x5}}, 0x0, 0x8) rt_sigaction$auto(0x5, &(0x7f0000000140)={&(0x7f0000000040)=0x0, 0x9, 0x0, {0x81}}, 0x0, 0x8) bind$auto(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x9, "cc00000008f0ffffff000100"}, 0x6b) r1 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto_l2cap_debugfs_fops_(r1, &(0x7f0000000240)=""/170, 0xaa) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) r2 = gettid() r3 = getpid() rt_tgsigqueueinfo$auto(r3, r2, 0x1, 0x0) rt_sigsuspend$auto(0x0, 0x8) 17m42.430376948s ago: executing program 2 (id=369): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vivid.0/video4linux/video44/power/runtime_active_time\x00', 0x2062, 0x0) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) brk$auto(0x7b5900000000) write$auto(r0, &(0x7f00000001c0)='n\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) 17m42.22927112s ago: executing program 2 (id=370): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0x0) r1 = openat$auto_mgts_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) listen$auto(r1, 0xfffffffc) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) unshare$auto(0x40000080) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0xfffffffffffffffc, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x80000000008000) close_range$auto(0x2, 0x8, 0x0) r3 = pidfd_open$auto(0x1, 0x0) setns(r3, 0x60020000) write$auto_bm_entry_operations_binfmt_misc(r3, &(0x7f0000000180)="4a8c166e511e5b2a6842b7c54da51a118edec6", 0x13) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x80003, 0x10300) sendto$auto(0x3, 0x0, 0xfdef, 0xfffffff8, &(0x7f0000000440)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x3}}, 0x22) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/wlan1/forwarding\x00', 0x202, 0x0) sendfile$auto(r4, r4, 0x0, 0x7fffe000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_setup$auto(0x1, 0x0) io_pgetevents$auto(0x4, 0x8, 0xa31f, 0x0, 0x0, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0xffffffffffffffff, 0x100007f, r3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) write$auto(r2, 0x0, 0x400000000005) select$auto(0xd, 0x0, 0x0, 0x0, 0x0) io_uring_register$auto_IORING_REGISTER_CLOCK(r0, 0x1d, &(0x7f0000000080)="2343b6ca1547f402a1683f061ca21b1b6a627feae490a965fa5c4141d22ee839c1bcbdb18c47f27c22f9a0938b2240902414d11a454353f77f8a2e365191fbfd763de25873a274d10e53006352e8c4fe78f7fe1ad811fdd9bb1d9379835d7b6af68fc364827f81afea34462412aef73ce51a50182c8a764e6f3e38642092da9e1af86c841e3b5ba24977e1ddb1b33417ec411fc8003dca5b4c90cb35fdef6bee68b50f7e106d2a8bc6dc7eb2199743cec17ac0256b53f217829784c7301d9af6d72e4427b94cacae683103131472936fbc883fb67a530c9be5a5beaa22dd7f1641dff7aa6abad4e0e8cf7516998505cb7d4a9e75beaf", 0x1d1) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) madvise$auto(0x110c230000, 0x1, 0x9) lseek$auto(0x3, 0x8, 0xb) 17m26.945339443s ago: executing program 32 (id=370): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0x0) r1 = openat$auto_mgts_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) listen$auto(r1, 0xfffffffc) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) unshare$auto(0x40000080) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0xfffffffffffffffc, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x80000000008000) close_range$auto(0x2, 0x8, 0x0) r3 = pidfd_open$auto(0x1, 0x0) setns(r3, 0x60020000) write$auto_bm_entry_operations_binfmt_misc(r3, &(0x7f0000000180)="4a8c166e511e5b2a6842b7c54da51a118edec6", 0x13) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x80003, 0x10300) sendto$auto(0x3, 0x0, 0xfdef, 0xfffffff8, &(0x7f0000000440)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x3}}, 0x22) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/wlan1/forwarding\x00', 0x202, 0x0) sendfile$auto(r4, r4, 0x0, 0x7fffe000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_setup$auto(0x1, 0x0) io_pgetevents$auto(0x4, 0x8, 0xa31f, 0x0, 0x0, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0xffffffffffffffff, 0x100007f, r3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) write$auto(r2, 0x0, 0x400000000005) select$auto(0xd, 0x0, 0x0, 0x0, 0x0) io_uring_register$auto_IORING_REGISTER_CLOCK(r0, 0x1d, &(0x7f0000000080)="2343b6ca1547f402a1683f061ca21b1b6a627feae490a965fa5c4141d22ee839c1bcbdb18c47f27c22f9a0938b2240902414d11a454353f77f8a2e365191fbfd763de25873a274d10e53006352e8c4fe78f7fe1ad811fdd9bb1d9379835d7b6af68fc364827f81afea34462412aef73ce51a50182c8a764e6f3e38642092da9e1af86c841e3b5ba24977e1ddb1b33417ec411fc8003dca5b4c90cb35fdef6bee68b50f7e106d2a8bc6dc7eb2199743cec17ac0256b53f217829784c7301d9af6d72e4427b94cacae683103131472936fbc883fb67a530c9be5a5beaa22dd7f1641dff7aa6abad4e0e8cf7516998505cb7d4a9e75beaf", 0x1d1) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) madvise$auto(0x110c230000, 0x1, 0x9) lseek$auto(0x3, 0x8, 0xb) 5.75365604s ago: executing program 4 (id=4400): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) modify_ldt$auto(0x3, 0x0, 0x4000010) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) io_uring_setup$auto(0x2008, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x403c6f2b, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) statmount$auto(0x0, 0x0, 0x7ffffffff001, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0xa, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, 0x0, 0x0, 0x5) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x8004) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/virtual/block/nbd12/queue/write_cache\x00', 0x80002, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x800, 0x0) ioctl$auto_PROCMAP_QUERY(r2, 0xc0686611, &(0x7f0000000080)={0x67, 0x0, 0x7fff, 0x5, 0x80000000003, 0xfffbffffffffff80, 0x80000001, 0xff, 0x6, 0x7, 0xfbfffffe, 0x5, 0x0, 0x7, 0x80000005}) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000540)={"ef13a5421a8765cadfca437c4d1316833843180bb151ed36e8ce6cb454168d6c", 0x3ff, 0xc9, 0x1000, 0xd, 0x9}) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) 4.15074388s ago: executing program 4 (id=4405): socket(0x1e, 0x80000, 0x1) r0 = socket(0xa, 0x3, 0x3c) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmsg$auto_CTRL_CMD_GETFAMILY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000380)={0x3c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@CTRL_ATTR_FAMILY_NAME={0x28, 0x2, '/proc/sys/net/gore/rps_defaur\xc4B+\x96\x06\xc3\xa3'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x48050) write$auto(r0, &(0x7f0000000080)='+&\x00I\xaar\x1c\xbb\xde\ah\x15,\xeb|\x85\xe8\x97Z\xc30\xae}\xa1\x17K(\x80]]\x8d\xb5\xeb-\x9d\xc1\xceU\xbb_\xcf\xe8#U\xd0_|\x15f\x92\xaa\x9f\xa0l}7z#u\xf6\xd1\xe1\x8d\x05=w\xf1\xb9K\xf4\\\a\xdf\x87\xbb\x03d6\xe1\x14\xb1|\x98\x82$\xf3\xb2\xcf\xb7\x7f\xf8f*/\xc2\x82\x8c2\x8d^\x10\xc6\x1cs', 0x263f) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.0/usb1/power/autosuspend_delay_ms\x00', 0x20461, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000000)='-7', 0xfffffc49) listen$auto(0x3, 0x81) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0x3, 0x5, 0x3, 0x5, 0x2000000000200002, 0x9, 0x8, 0x400000000ff, 0xa, 0x4, 0xaab, 0x8, 0x7]}, 0x0, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) ioctl$auto_BLKGETDISKSEQ(r2, 0x80081280, &(0x7f0000000480)=0x302) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4085}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0xf, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x401, 0x1003, 0xfffffffffffffffd, 0x7ffffffb, 0x9, 0xffffffff7ffffffc, 0x8009, 0xb, 0x200000100106}) ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, &(0x7f0000000240)={0xff, 0x1, 0x7, 0xba0, 0x1, 0xffffffffffffffff}) setgroups$auto(0xa1, &(0x7f0000000000)=0x8005ea) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x80001, 0x0) pselect6$auto(0x9, &(0x7f0000000280)={[0xd8b3, 0x1, 0x2, 0x790, 0xe, 0x7, 0x4, 0x9, 0x4, 0x100000000, 0x1000, 0x3, 0x6, 0x7, 0x1, 0x5]}, &(0x7f0000000300)={[0x9, 0x101, 0x4, 0x0, 0x6, 0x0, 0x6, 0xf470, 0x0, 0x8, 0xfffffffffffffbff, 0x7, 0x39, 0x6, 0x8, 0x2]}, &(0x7f00000003c0)={[0xa6, 0x4, 0x4969b372, 0x4, 0x1, 0x101, 0x2, 0x9, 0x81, 0xf8, 0x0, 0x5, 0x7fffffffffffffff, 0x6, 0x62, 0xc]}, &(0x7f0000000440)={0x6, 0x3a}, &(0x7f00000004c0)="caac2cf3e15be4a705caff8c721d71875c8e83d6650707fe65b06e") openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) write$auto(0x3, 0x0, 0xfffffdef) 3.9570258s ago: executing program 4 (id=4406): mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket(0xa, 0x5, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x541c, r1) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100c, 0x1100000000, 0x0, 0x6, 0x2) 3.78319757s ago: executing program 4 (id=4409): write$auto(0xffffffffffffffff, 0x0, 0x45c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYRES16=r1, @ANYBLOB="01002dbd70007ddbdf250c000000040003800c00018008000100", @ANYRES32=r2, @ANYBLOB="b28105536b9d33621a171931e1b68974c8f14f83174ba0e4f099"], 0x24}, 0x1, 0x0, 0x0, 0x24004840}, 0x0) 3.754479449s ago: executing program 3 (id=4410): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000) 3.680402002s ago: executing program 4 (id=4411): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82400, 0x0) socket(0x2, 0x3, 0xc) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x8000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x622340, 0x0) openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto_PR_SET_MM_END_DATA(0x8, 0x4, 0x0, 0x1e12, 0x6) sendmsg$auto_NFC_CMD_ACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001440)={&(0x7f00000003c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0xc80) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/tty12\x00', 0x101840, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/midiC2D0\x00', 0x64640, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_setup$auto(0x7ffe, 0x0) io_setup$auto(0x2000000a, &(0x7f00000000c0)=0xefe2) io_setup$auto(0x7ffe, &(0x7f0000000000)) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0xa40, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r3 = openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x80000, 0x0) sendmmsg$auto(r3, &(0x7f0000000300)={{&(0x7f00000014c0)="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", 0xff, &(0x7f0000000080)={&(0x7f0000000440)="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", 0x1}, 0x1, &(0x7f0000000100)="4f18626f74df0cf5b3e6c91aa11b074b007c090d6d9a20d0f7a0b7", 0x6, 0x3}, 0x9}, 0x400, 0xf52f) ioctl$auto(r0, 0x4b67, r2) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/fail-nth\x00', 0x84100, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/mounts\x00', 0x48101, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x0, 0x0) mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000) mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) 3.58006188s ago: executing program 1 (id=4413): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/gre0/accept_ra_defrtr\x00', 0x4080, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000040), 0x480000, 0x0) (async) getsockopt$auto_SO_ERROR(r0, 0x1, 0x4, &(0x7f0000000080)='[\x00', &(0x7f00000000c0)=0x6) (async) r1 = waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000002c0)={@siginfo_0_0={0x8000, 0x3, 0x1, @_sigpoll={0xb7, r0}}}, 0x8, &(0x7f0000000340)={{0x18bb68c0, 0x371}, {0x10001, 0x8}, 0xc09a, 0x4, 0x10001, 0x7, 0x8000000000000000, 0x47, 0xbc8, 0x6, 0x2, 0x997, 0x6, 0x1, 0x2, 0x31}) (async) r3 = getpgid$auto(0xffffffffffffffff) r4 = clone3$auto(&(0x7f0000000400)={0x7fff, 0x5, 0xfffffffffffffff9, 0x7fff, 0x4, 0x5, 0x0, 0x7, 0x3ef, 0x1a5, 0x41}, 0x7) (async) syz_clone3(&(0x7f0000000640)={0x124002100, &(0x7f0000000480)=0xffffffffffffffff, &(0x7f00000004c0)=0x0, &(0x7f0000000500), {0x6}, &(0x7f0000000540)=""/89, 0x59, &(0x7f00000005c0)=""/16, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x4}, 0x58) (async) r7 = getpid() (async) r8 = getsid$auto(0x0) r9 = eventfd$auto(0x8) r10 = syz_clone3(&(0x7f0000000700)={0x4006000, &(0x7f0000000100)=0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180), {0x38}, &(0x7f00000001c0)=""/164, 0xa4, &(0x7f0000000280), &(0x7f00000006c0)=[r1, r3, r4, r6, r7, r8], 0x6, {r9}}, 0x58) (async) r12 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000007c0), 0xffffffffffffffff) (async) ioctl$auto_BLKTRACESETUP32(r2, 0xc0401273, &(0x7f0000000800)={"626b1915112a585771c849078347813f8d5ac30a54aeaa9fd92c6d76fc95a638", 0x8, 0x9, 0x0, 0x7, 0x2, r1}) sendmsg$auto_NL80211_CMD_STOP_P2P_DEVICE(r2, &(0x7f0000000dc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d80)={&(0x7f0000000880)={0x4f4, r12, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_FLAGS2={0x98, 0x43, "4a14b710ee6ba6a48e92ccbdaf9ba7630b819d7bd495acb019926faa7a283eb37b106b6b35456b6bfb2dcec94961f59e67d74d5f5992825c3c2a36cabdae85c27dc289b547c2e429b62327e59a753a6970001af9e050a53f33ae8c69ded18bc4b4b358c043fd124b937e4761a3fab9aeaa1aa3dc6933f330839c27642fcec404fc6ed79e5fe14cd5352afbf04078deadd8bd7da9"}, @NL80211_ATTR_REKEY_DATA={0x344, 0x7a, 0x0, 0x1, [@typed={0x8, 0x13a, 0x0, 0x0, @fd=r5}, @nested={0x112, 0x1e, 0x0, 0x1, [@typed={0x8, 0x105, 0x0, 0x0, @pid=r13}, @nested={0x4, 0x80}, @nested={0x4, 0x11f}, @generic="49bb8c62be0890f4cde0d381cc83e576e832fdf983cc9bef053e9c346d31d71a39a2a4170213403e91f5d3dff220dbccadeedd233db6ff8ed148a3cd4d14b8f44c2fff6bd6e80022e0a305e691afbd5be9ebb4e694eb80c72905340cb5a6010d058731a4a367428dbddbd9e2c1f48eb379099abcf330e592c556569f0ea74103d2a47cd712050742f2d4f0c1c2391c9713932b95d2e17ba77d1dc056ef086bd49c48c12a8cb7cedb60c8d4e1cbe5038ea3c1c5b69fb78ac72f34789ef5227e8b686b7b80d0cef796db409ed5717f2bbbe72c4a2d8e6a68e74e7679b3a62253b12d1e570f4424f23cee098a8d4d77c73d93422dd9ce1b", @nested={0x4, 0x56}, @nested={0x4, 0x8d}]}, @typed={0x14, 0x76, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @typed={0x32, 0x77, 0x0, 0x0, @str='/proc/sys/net/ipv6/conf/gre0/accept_ra_defrtr\x00'}, @nested={0x1dc, 0x1c, 0x0, 0x1, [@generic="db0a8af0e18c82713b81a9e0ed52a7f2ddca414921a965a565c26e1651113ed65cb37052c6f529c7e41883afde4d766690dd826c0e38836a42b2676e6016c8503a9e639808b773dc302dc1a18ea620fc36567199eef7e64306520941f1d69307a688498206362fe2a61173f676dc355627376432583b5f0520e4e88fbb8593e05d36ab802ac64f64d9ecc1a7e02f687407f2f648f7245f3f2157f6daadc0cd568f0624808953da01feecc1e5c59c55bac5b9f988a01bff9b770f025aafe9d771f6d0f9d3e7746aa9933a748d1d79f3108c55a1", @typed={0x8, 0xb9, 0x0, 0x0, @uid=0xee01}, @typed={0x14, 0xfb, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0x74, 0x0, 0x0, @pid}, @generic="69f56180a9fe023ddd4c6d42f84205c4ba79ebf9d2d493265aac8d18f32032c78077a745de1fa9dd80f4383dde5bc4dd9c4f4bcd52b403c54ab4442872260f5ab47aae9fa7bd241a908373d56462ba536a78a11c77699f04a38551e34416427229f24213b6360d8d19f93f621f1a968da65e763e053b8b34ed0a346641e636c4884fd249436eba40f8a00edd3f59ff95dff28c72f5bfcaa7009e8afbf703bbf96afbe2f0b2a24650c95d9d21676e2d94bfa3616d19727a1ba802f375b7485ca29bb9288a4aa045d89cded676182b6e49d92b17e4a8", @typed={0x8, 0x11b, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x10b}]}]}, @NL80211_ATTR_QOS_MAP={0xe9, 0xc7, "6d6f6181bf8a045bcd547e6947249e37e5dde6bbfdb76aa485740fa1e58b4176e591b5b33ebff3b2d0dacc5cff186d80d39ba9e9a095b5b4cd42cbb48fcfe830717348ed2c77f5695556ff36f7446c2f1381548ab91918b7ab97627382c8ae0b7210f546a0e3633458ca480e5533e04dc52fb689a9d8b1887a0380e913ea7ee0e0ef68290333193d84aceca596180ea1fc42b8d083999e33e9659a9a7d0c1dd8015782b97086c1366d98ad6e2b153c40ef96713efd56c53a5bd176f7592a8fd2cf93cc030e80a08a367f96c441aade4e013e537bd82d4431563fbb6ba8d7f058c6a526dbf1"}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x17, 0x13, "af19807442e82f2fea5f2b940c13372302e731"}]}, 0x4f4}}, 0x4008854) mmap$auto(0xd1, 0xff, 0x2, 0x50, r11, 0xff) (async) r14 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000e00)='/sys/kernel/tracing/available_events\x00', 0x44a101, 0x0) write$auto(r14, &(0x7f0000000e40)='\x00', 0x7) read$auto_proc_pid_smaps_operations_internal(r9, &(0x7f0000000e80)=""/35, 0x23) mmap$auto(0xf, 0x1, 0x7, 0xffffffffffffffff, r11, 0xf8) (async) getsockopt$auto_SO_PEERNAME(r9, 0x10001, 0x1c, &(0x7f0000000ec0)=' \x01\x00', &(0x7f0000000f00)=0x1737) (async) madvise$auto(0x8000000000000001, 0xa6c, 0x81) (async) madvise$auto(0xd, 0x2, 0x89d) r15 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000f40), 0x400000, 0x0) mq_unlink$auto(&(0x7f0000000f80)=':.}\xeb\x00') (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001080)={'pimreg1\x00', 0x0}) sendto$auto(0xffffffffffffffff, &(0x7f0000000fc0)="0d89a2f39d67a471dc0baf9d23dc1e96fb40b7589b6a46879501cd3538b4fc49957273fd9711560fa7a68faa5986f163ca0f35a4a72b95cfb4da5b47af5336f34d01e5df1364d61c9e03bf9635b387734046d405e89eeeac293adcbfe7189760bef639958633078329cd26ecb7368a8c2e6847f73f166fb7ecaf9c350ffb612984c7c46c7125266bfb7571707a21dce6610bf93ce34b26c08889f5e5158b77433aaf6df8f895f9b045fc8f206ca30fb142", 0x1000, 0x9, &(0x7f00000010c0)=@xdp={0x2c, 0x1, r16, 0xb}, 0x0) write$auto_dvb_dvr_fops_dmxdev(r2, &(0x7f0000001100)="5d55069bbd64ba2a9b7b54609609b46f7ddd89b01e25f7ecf41f03f92581227e11972294289d2408a04d597c71dd5ce97618e49dcdc1854301aaa425917aa27071638b2d88cbb1900056a82acdc9da92fafa95cf3b38a806d7dc4378c3405827140b8de123d3c859c10af2b2d73910e23d3fa39147a9a6d8199af4dd5a37f1a94d4571c17ef505ea4afb61194a11d0ba9d56133aa5fed63227ca8d9caa85585324af7feda55be7b06f903f8a7e01a2fadcef3c5d3bf7f75423d1d7979863b27f18cbfc7a07af25f0a6724fc5681cc4ba7a68c066b4199ca13c3be0d87c585c141f18f5b95c28ba9c9eeb", 0xea) (async) r17 = clone$auto(0xd, 0x3ff, &(0x7f0000001200)=0xd3b, &(0x7f0000001240)=0x40, 0x800) ioctl$auto_BLKTRACESETUP32(r9, 0xc0401273, &(0x7f0000001280)={"4e20fdb9e01a18e12069b32807f6f898d2e30da6a3ced119f7d595eeca41a9aa", 0x0, 0x6, 0xfffffff9, 0xc6, 0x9c2a, r17}) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r2, &(0x7f0000002740)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002700)={&(0x7f0000001380)={0x1354, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x11d3, 0x1, 0x0, 0x1, [@generic="74b2b08e6f79e1d39dd25a3903c2e4c4c1f9ea6f06c5f312f142e8cee1d7db4be7203130e2b9ef2ef922a9b9ae512f828ad8f21792298650f54b2d0171a7d6d66b064b3e714adc39a5dc23d88c891adfc8232f0d0e65afdedb424d3f7c2ce411ddea87a074d802c56438684e1211761a19f8249716653ce2944fc3ff97a81241d9b587308b98278d13713913573246032298ec1b317dce6cfbb40e8d80600bf440182cc4c54ddc8591307ddff67886382c709c07a36853449ee37bdcf6e6a8e70930937c248543ccfe3c84984f95fc", @nested={0x10ff, 0x43, 0x0, 0x1, [@nested={0x4, 0x1}, @generic="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", @typed={0xc1, 0x109, 0x0, 0x0, @binary="edf6130618477a99d89a0559bb977a8e8e8e5ed0555fd1cee87183ed27efb8142ba8436a200232e95c847f374fcff313307c9e5e7aa5391c6a7776711b16a9f67457b114b380ceb046579613ae08829232a3b09aa26dd26e720e678722abfaf0bd6329adf9ed91d2d63b108c4ae70f087da816bf1690fc96b1c34793022c7fe56b6e5663c008bc7e6b39557549e45a39e267b319a41bf4c04e497ce3220a3b9c815b3ccce63925c35a15ecbfc76ad3583919ab48574a72c67aa011da8b"}, @nested={0x4, 0x3b}, @nested={0x4, 0x146}, @generic="b87169e1f42a4a19b84d43e11728ad98be1a068180bb2314be43e7f403484d3b0380bd", @typed={0x4, 0xca}, @nested={0x4, 0x1a}]}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x7d, 0x1, 0x0, 0x1, [@generic='L', @nested={0x75, 0xba, 0x0, 0x1, [@nested={0x4, 0x3}, @nested={0x4, 0x92}, @generic="fd890b9dd8752312df974bfb41e55502f26fb05d21bd098fdd7105443881ae3dcac9236438613ee653a530890a032adcd12af4ca32e3daf14d18a102d8af31437e814ce26174844901a3eb3a55403a6bcd170d7cc7d283bc6b28c451afde50808ec11f6d6e2821c7e2"]}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0x60, 0x0, 0x0, @fd=r15}, @typed={0x8, 0x142, 0x0, 0x0, @pid=r10}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0xd8, 0x1, 0x0, 0x1, [@nested={0xd2, 0x115, 0x0, 0x1, [@generic="5a1c956810cd934c8234f4fb1e5f3c13df7fa567075a281c3d328ac62251", @nested={0x4, 0xc0}, @generic="bd19132efc1ec8c06d6ef3043a2eb1648512e6dd1eb509ffef8aa3880456a7d03d7d79e03c6871d50e182d0c75e6d8ad4c7c897d8464802c2bed0fc099d49602a0e530769d85410f47fe9c7c8c474b637a78a00a6cff93a209d70d0f99b195e825882e9e67d0d9cd75232c0fba86784a6a32a9e560491da13729d67c9aecc458d28f9bf3f81843ec69f4ba397e5d6512da818c3efe5a68024980be52fc342dd4", @generic, @typed={0x8, 0x4e, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @nested={0x4, 0x2f}]}]}]}, 0x1354}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) 3.222304162s ago: executing program 0 (id=4414): mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb1, 0xffffffffffffffff, 0x28000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/virt_wifi0/router_solicitations\x00', 0x101202, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/disable_policy\x00', 0x202, 0x0) sendfile$auto(r1, r0, 0x0, 0x48) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ioam6(&(0x7f00000000c0), r2) sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(r2, &(0x7f0000001d00)={0x0, 0xfffffffffffffe22, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYRESOCT=r2, @ANYBLOB="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", @ANYBLOB="311e27bd7000927ddf250900000006000100000000000c00ff0f0000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008895}, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x40000000000000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010025bd7000fedbdf256700000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x90) epoll_create$auto(0x7) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x1, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) mmap$auto(0x3ff, 0x3, 0xffffffff, 0x100000eb1, 0x40000000000a1, 0x4000008000) r6 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r6, 0x0, 0x8fb5) fcntl$auto(0x0, 0x408, 0x100000) setsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x3, 0xa, &(0x7f0000000080)='nlctrl\x00', 0x400) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) 3.222066465s ago: executing program 1 (id=4415): socket(0x1e, 0x80000, 0x1) r0 = socket(0xa, 0x3, 0x3c) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmsg$auto_CTRL_CMD_GETFAMILY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000380)={0x3c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@CTRL_ATTR_FAMILY_NAME={0x28, 0x2, '/proc/sys/net/gore/rps_defaur\xc4B+\x96\x06\xc3\xa3'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x48050) write$auto(r0, &(0x7f0000000080)='+&\x00I\xaar\x1c\xbb\xde\ah\x15,\xeb|\x85\xe8\x97Z\xc30\xae}\xa1\x17K(\x80]]\x8d\xb5\xeb-\x9d\xc1\xceU\xbb_\xcf\xe8#U\xd0_|\x15f\x92\xaa\x9f\xa0l}7z#u\xf6\xd1\xe1\x8d\x05=w\xf1\xb9K\xf4\\\a\xdf\x87\xbb\x03d6\xe1\x14\xb1|\x98\x82$\xf3\xb2\xcf\xb7\x7f\xf8f*/\xc2\x82\x8c2\x8d^\x10\xc6\x1cs', 0x263f) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.0/usb1/power/autosuspend_delay_ms\x00', 0x20461, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000000)='-7', 0xfffffc49) listen$auto(0x3, 0x81) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0x3, 0x5, 0x3, 0x5, 0x2000000000200002, 0x9, 0x8, 0x400000000ff, 0xa, 0x4, 0xaab, 0x8, 0x7]}, 0x0, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) ioctl$auto_BLKGETDISKSEQ(r2, 0x80081280, &(0x7f0000000480)=0x302) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4085}, 0x4000804) lstat$auto(0x0, 0x0) ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, &(0x7f0000000240)={0xff, 0x1, 0x7, 0xba0, 0x1, 0xffffffffffffffff}) setgroups$auto(0xa1, &(0x7f0000000000)=0x8005ea) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x80001, 0x0) pselect6$auto(0x9, &(0x7f0000000280)={[0xd8b3, 0x1, 0x2, 0x790, 0xe, 0x7, 0x4, 0x9, 0x4, 0x100000000, 0x1000, 0x3, 0x6, 0x7, 0x1, 0x5]}, &(0x7f0000000300)={[0x9, 0x101, 0x4, 0x0, 0x6, 0x0, 0x6, 0xf470, 0x0, 0x8, 0xfffffffffffffbff, 0x7, 0x39, 0x6, 0x8, 0x2]}, &(0x7f00000003c0)={[0xa6, 0x4, 0x4969b372, 0x4, 0x1, 0x101, 0x2, 0x9, 0x81, 0xf8, 0x0, 0x5, 0x7fffffffffffffff, 0x6, 0x62, 0xc]}, &(0x7f0000000440)={0x6, 0x3a}, &(0x7f00000004c0)="caac2cf3e15be4a705caff8c721d71875c8e83d6650707fe65b06e") openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) write$auto(0x3, 0x0, 0xfffffdef) 3.137040652s ago: executing program 3 (id=4416): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) copy_file_range$auto(r0, &(0x7f0000000040)=0xfffffffffffffff9, r0, 0x0, 0x2, 0x0) ioctl$auto(0xc8, 0x400454ca, 0x5c8d) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@THERMAL_GENL_ATTR_TZ_TRIP_TYPE={0x8, 0x6, 0x7fffffff}, @THERMAL_GENL_ATTR_TZ_MODE={0x8, 0x9, 0x84b2}, @THERMAL_GENL_ATTR_TZ_TRIP_TYPE={0x8, 0x6, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x20000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) (async) connect$auto(0x3, 0x0, 0x0) write$auto(0x3, 0x0, 0xfffffdef) (async) writev$auto(0x3, 0x0, 0x8009) (async) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_DEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fddbdf250200c12b2bd90252"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x800) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) (async) mmap$auto(0x3, 0x402000b, 0x2000006, 0xeb1, 0x401, 0xfff) close_range$auto(0x2, 0x8, 0x0) (async) sendmsg$auto_NETDEV_CMD_DEV_GET(r2, 0x0, 0x4000080) (async) io_uring_setup$auto(0x6, 0x0) (async) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) (async) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x3, 0x9) (async) read$auto(0xffffffffffffffff, 0x0, 0x7) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x9}, 0x3) (async) r4 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/sysvipc/msg\x00', 0x2800, 0x0) ioctl$auto_PROCMAP_QUERY(r4, 0xc0686611, 0x0) (async) ioctl$auto(0xc8, 0x800454df, 0x5c8d) 3.063634037s ago: executing program 1 (id=4417): r0 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/tracing/trace_pipe\x00', 0x402, 0x0) read$auto_dai_list_fops_(r0, &(0x7f0000001500)=""/4096, 0x1000) 2.861992943s ago: executing program 0 (id=4418): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000100)='0[.[\x00', 0xcd02) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory0/state\x00', 0x1e1842, 0x0) sendfile$auto(r1, r1, 0x0, 0xe00000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) 2.141779185s ago: executing program 0 (id=4419): write$auto(0xffffffffffffffff, 0x0, 0x45c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYRES16=r1, @ANYBLOB="01002dbd70007ddbdf250c000000040003800c00018008000100", @ANYRES32=r2, @ANYBLOB="b28105536b9d33621a171931e1b68974c8f14f83174ba0e4f099"], 0x24}, 0x1, 0x0, 0x0, 0x24004840}, 0x0) 2.098001947s ago: executing program 1 (id=4420): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:03.0/resource1\x00', 0x0, 0x0) mmap$auto(0x0, 0x3, 0x1000000000001, 0x8000000008011, 0x3, 0x0) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="770e0000", @ANYRES16=0x0, @ANYBLOB="080028bd7000fddbdf250300000008000600020000000c0014"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x405b) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) ioctl$auto_UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000080)={0x130, 0x8, 0x10001}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000080)) setgroups$auto(0x8, &(0x7f0000000000)=0x5) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0x400a507}, 0x800}, 0xa, 0x8) write$auto_proc_mem_operations_base(r0, 0x0, 0x0) syz_genetlink_get_family_id$auto_smc_pnetid(0x0, 0xffffffffffffffff) r3 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/loop9/hctx0/sched_tags_bitmap\x00', 0x101a00, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r3, &(0x7f0000000340)=""/179, 0xb3) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2900, 0x0) read$auto(r4, 0x0, 0x7) acct$auto(&(0x7f0000000000)='/dev/tty\x00`Mx\x9d\xfa\xb3\x1f\xc6k\x01\x13\x9b\x15[\xf7\xaan\x1fOgo\xbb(\xcbx\x9bJ\x91*\xa5a\x02\xf3\x1b\x9d\xddy\xef\xee\xe4h\xd5\nH\x80\x8a\xd7Y\xb8\xcb\x90') 2.033586275s ago: executing program 0 (id=4421): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x1ed242, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000001100), r0) write$auto(0xca, &(0x7f0000000140)='\x042\x01\f\r\a\x00\xf6OL\xc8\xbe\x94\xf2\xa2\x00\xfb\x84(\x83\";\xa8\xd7\x05uXR\xa3\xb3@T\x89\x8e\xd4Q\xdd\xb80\xc7\xad\\\xf7C\xb3\x8f\r?\xb3>r\xdf\x99%\xd6s\xe3\x8b*\xe2\xbc\xc9\x8bV\xf0\xb7\xec.\xae\xe1\x04\x00\x00\x00\xaa', 0x2da) close_range$auto(0x2, 0x8, 0x0) r1 = bpf$auto(0x0, &(0x7f0000000440)=@bpf_attr_4={0x800000000012, 0x4, 0x6, 0x8}, 0x6f4) mmap$auto(0x0, 0xa00005, 0x80000000, 0x40eb1, 0x602, 0x5) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'vxcan1\x00'}) connect$auto(0x3, &(0x7f0000000080)=@can, 0x672) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x0, 0x0, 0x4001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0x1, 0x6, 0x1, 0x89, 0x7181, 0x3ff5e, 0x7, 0x10, 0x9, 0x6, 0x80003, 0x4, 0x11ffffffffffd, 0x85, 0xfffffffffffffffb, 0x9, 0x50007, 0x2, 0x800000029d, 0x0, 0x80000001, 0x1, 0x202, 0x9, 0x80001, 0x800000000000, 0x0, 0x2, 0xfffffffd, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x400000004, 0x3, 0x80000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffc, 0x3, 0x4, 0x9, 0x1000000000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x800000009, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc]}, 0x1fe, 0x20) r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffffffffffd02, &(0x7f00000001c0)) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x200, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x8502, 0x0) write$auto(r5, &(0x7f00000003c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x14\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C\xf8B^`\xf8\xc2\x0e\xfc>\xa1\xc5\x1dc\xb5S\xb0eX\xba\xe2\xb8\x17\xd1?\xec\xa3Rc2U\xc2OD\x1cl\xc6\xf0,4\x84A\x8f\xa0\xecJ\xb7\xfcnDO\n[^\xfc\xee\xf4\x98\xb3:K\x05\xd6ElP\xb1\xdc\xa2cg\xafENM\xb2\x1e\xfe\x0f}\xba\x83\x00\x81\x1at\xbf\x9ezF+x\xec\xe1`Qfm:\xfd\xeek\xa6#\xde\x16\x8f\xe9\xe9\xccbP\xb2z\xe1\xed\x97\x11\xaa\xea@\xee:\r\xb8\xe5\xd9CNG\x94\xe5\xcf\xfc3\xc7Z8\x03\x00\x00\x00\xc9\xe2ny\xa7\xd4\xb5A\x8e\xe2\x87\xf0\x17\x90%c\x1dE\xb1j2\x13\x10\xc2\x98\xeak\xa8\x10\xa0\x0f\xe8\x828\"9\xc1\xf2\xb6\x18\x9atD\xf13\xb2+$\x06q\xd6\x8e\xc18\x85\xd2\xd2\x1f\x97\x1d\xd7\x88\"\x01w\xaa\\\f\x98\xbf\xff\xeb\xceg\xa7\x8e\x84B\x7fn\xddu\xe0i\xd3\xf8\x8e\xf4\x111\x86\xfd\xcb\xa1\xd41\x8cI\xe0\xfa\xb3/(s\xd6\xd8\xcdCr\xf5MZ\xb8\xd4\x97\xae1\xc23ph\x84-@\xd4N_\n\xef\x86\x93T\\x\xf2\xce \xfe\v2E\xcatr\x00\xe5\xd7\xb2\x13\xe6\xd8\xd0\xe1|f\xaa\xadX@!\xc2]\xf9\x80\x9a\x1d\xcbt;\xfew\x14\x92\xc27\xbf\xad\x10\xa4\x93\xcd\xdc\x89\xa15\xe7r\x85\xcc\xd2p?\xf2\x0f`+\xb2\xcb\xf1\xddXw\xd2}Is%x\xbbJx\xebo{\x80\xc6o\x9e\xb2\"\x1c\vzL\"\x880|\v\xe0N\x8f\xd6\x8a\xaf', 0x80001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) socket(0x10, 0x2, 0x0) epoll_create$auto(0x4) ioctl$auto(0x3, 0x80000541b, 0xb551) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) 1.722410232s ago: executing program 3 (id=4422): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev$auto(0x3, 0x0, 0x8) write$auto(r0, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00'/507, 0x1098c7) 949.352081ms ago: executing program 1 (id=4423): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) ioctl$auto(0x3, 0x81484d11, 0x38) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 920.153594ms ago: executing program 0 (id=4424): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000) 683.810485ms ago: executing program 0 (id=4425): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mpls/platform_labels\x00', 0x101202, 0x0) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_MODES={0x10, 0x2, 0x0, 0x1, [@nested={0xa, 0x98, 0x0, 0x1, [@generic="3afd4dbf8102"]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20040084) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x48000, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) r0 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) write$auto(r0, &(0x7f0000000800)='0\"\xfb]$|\xcb1j\xeb0B|d\x1e\x99\xb9\xfd\xd3\x89O\x9f\xac+\xf6\xd7/\xc9\xe9x\xd4\xf3\xc8\xf5\x7fW\xd3\xa6\x96\xd3^\xb8\xb4gq%H\xcc\x88r\xeaO\x8e\x10\t\xc7 P\xcf\xa7H\b\x04\x87\x98\x16`\xa3S\xd46\x10Wf\xc9<7\xcf\xc9\xf1\b\x9b\x8c\x9fu;\xc48(u\xf9Bx\n\xafW%/bBT\xa9\a\xed\xd2H4\x96\xa3U\xca\xf1\xef\x14dU\x15\x16\xa7\xdd\x01\x0e\xda\xc8\xd3\x00\xc5\b\x1a\xb0mN\x01\xb1\xc8B.U\xd1\x02\'\x9a\'\xf1;\xedJ\xf6@\xac\a\xf5\xf5 |\x1ex\xb7@=\xad\xe7\xff\xd6\xc1\xcf\x11\x0f\x99+v\x873\xc4\x17]\x17!]ct\xff\t\xb2A\x0f\x91\x02\xca&\x91n\xc1\x9e\xcb\x1b\xec\x972\xa9\x00', 0x4000002) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sg0\x00', 0x103002, 0x0) write$auto_sg_fops_sg(r1, &(0x7f0000000140)="01000000000d0000624c492f4aa7a158ad329acb69abe1d4bbe91b3ddc84d02747403bbca33c95be8fb08baf91e29260d0", 0x31) mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x69a5, 0xa800000000000000) sysfs$auto(0x2, 0x41, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) write$auto(r2, 0x0, 0xfffffdef) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0x4000e6e) open(0x0, 0x41a001, 0x409) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r3 = bpf$auto(0x5, &(0x7f0000000000)=@info={0xffffffffffffffff, 0x4, 0x3}, 0x171) shmctl$auto_SHM_UNLOCK(0xb, 0xc, &(0x7f0000000380)={{0x1, 0x0, 0xffffffffffffffff, 0x4, 0xe21, 0x2a0ddfcb, 0x322c}, 0x5, 0x3ff, 0x2, 0xea8, @inferred, @inferred=0xffffffffffffffff, 0x735f, 0x0, &(0x7f0000000180)="86d0c00bcb8e96ac93210601d68c8bd47b083c89a69d94b69c39a338661bf2e610327e212399", &(0x7f0000000240)="5095929c68c4655d38d6e36c2ff609851621415c2a8c8e84caf74e7d5d340a5a72a8e5ab4f5721308b46e255d0772ab849baaeee5e87b10c5ca5d8979f67521dd95b4a7120e259516a8e0fb0d49d9685491a5fe3027e3eb3c9f37e5b86c64d7a717ae8b752a6276b0b7cc5c3a67f104cca7b8a419756d4bf1882527c2457f64a"}) shmctl$auto_SHM_STAT(0xffffff00, 0xd, &(0x7f0000000600)={{0x8, 0x0, 0x0, 0x50, 0x5, 0x4, 0x9}, 0xffffaa21, 0x8, 0x900000, 0x80000001, @inferred, @raw=0x8, 0xb5, 0x0, &(0x7f0000000480)="3c66a030096330ea03e97799b42d67f012856d9949e08519170ac85b5091e58efa9ec066be7e0b6e6b19d3d0817622b1c3df0ac2cae70c15c3ade744099e587f6ab364e4cf188be46abeb438d53e685519061689f6ba19add266e7665a7d9370870e4a81201eceae5441653650f6eabbadeb1794e0fbc4e3", &(0x7f0000000500)="28e74aa46c68b6ab8901d56ea88a8d9b517b01a7a4bc42883205692dd8b5d7895e93bf40a9293f42a3ddfde3edf9bfe9597cb4ef1e1c63cd3fd5cade2c747e338ee7363a352031c87daad48e1403d19c79f5e6c56f9489a93cc1f3f391c3fc2ff164bb08990db373561234b512d629e954b7b7aa611d227e11d3dad3a650d52ce62024279a1bbd3512af74963137fa74a3c5c250dabb2733618f52f8d627c99cbb9da8ce550f32a2daa96bdf0eae2b8e390e801bf4c6715743211816653fb06858364da6f019a033922925a7b1b3b639ab981622fc10ba7e9f710a55e84bf0364d4ae469"}) statx$auto(r3, &(0x7f0000000100)='./file0\x00', 0x1000, 0xfffff98d, &(0x7f0000000680)={0x4, 0xffff, 0xffffffffffffffff, 0x9, r4, r5, 0x6, 0x4, 0x8, 0xffffffff, 0x8, 0x3, {0xe8e, 0x8}, {0x5, 0xffff}, {0x8, 0x8}, {0x5, 0xf}, 0x2, 0x107, 0x9, 0xffffff4c, 0x3, 0x0, 0xc1e, 0x6, 0xb07e, 0x1, 0x4, 0x2, [0x2, 0x6, 0x1000, 0xb167, 0x7, 0x4, 0x0, 0xbbab, 0x7]}) 674.415219ms ago: executing program 1 (id=4426): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/dummy0/addr_gen_mode\x00', 0x1, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/fail-nth\x00', 0x414902, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) read$auto(r1, &(0x7f00000000c0)='/sys/devices/~latform/vhci_hc$.7/usb23/23-0:1.0/~\xda=\x8eep_81/inver', 0x6864a34) write$auto(r0, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x40) epoll_ctl$auto(0xffffffffffffffff, 0x5, r0, 0x0) setfsgid$auto(0xee01) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/vt/parameters/default_grn\x00', 0x2062, 0x0) sendfile$auto(0x2, 0x3, &(0x7f0000000040)=0x80, 0xc3e0) futex$auto(0x0, 0xc, 0xca, 0xfffffffffffffffd, 0x0, 0x7ff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pci0000:00/0000:00:00.0/ari_enabled\x00', 0xa0440, 0x0) openat$auto_autofs_root_operations_autofs_i(0xffffffffffffff9c, &(0x7f0000000540)='/sys/devices/virtual/bluetooth/hci4\x00', 0x200, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/007/001\x00', 0xa901, 0x0) inotify_init1$auto(0x3000000000000) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) socket(0x1e, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sysfs$auto(0x2, 0xe, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x8040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x40000403c6f2b, 0x0) r4 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r4, 0x40146f2c, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) 485.72944ms ago: executing program 3 (id=4427): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r1 = pipe$auto(&(0x7f0000000780)=0xffffffffffffffff) splice$auto(r2, 0x0, r0, &(0x7f0000002100)=0x1, 0x768, 0x9) close_range$auto(r2, r1, 0x0) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) r3 = getpid() r4 = gettid() rt_tgsigqueueinfo$auto(r3, r4, 0x1f, &(0x7f0000000400)={@siginfo_0_0={0x7ff, 0x101, 0x3, @_sigfault={0x0, @_addr_bnd={"f38c6c13db093f74", 0x0, 0x0}}}}) r5 = socket(0x2, 0x80002, 0x73) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/scsi/sg/allow_dio\x00', 0x101181, 0x0) r6 = openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, 0x0, 0x8000, 0x0) pread64$auto(r6, 0x0, 0x73, 0xfffffffffffffffc) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r7, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r8 = ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f00000000c0)=0xe85) setpriority$auto_PRIO_PROCESS(0x0, r8, 0x13) write$auto(r7, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r7, 0x8000) syz_genetlink_get_family_id$auto_ethtool(0x0, r5) connect$auto(0x3, 0x0, 0x54) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) read$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffffff, &(0x7f0000000200)=""/129, 0x81) 377.696934ms ago: executing program 3 (id=4428): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) socket(0xa, 0x2, 0x6010000) 165.477682ms ago: executing program 3 (id=4429): write$auto(0xffffffffffffffff, 0x0, 0x45c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYRES16=r1, @ANYBLOB="01002dbd70007ddbdf250c000000040003800c00018008000100", @ANYRES32=r2, @ANYBLOB="b28105536b9d33621a171931e1b68974c8f14f83174ba0e4f099"], 0x24}, 0x1, 0x0, 0x0, 0x24004840}, 0x0) 0s ago: executing program 4 (id=4430): r0 = openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000001380), 0x8000, 0x0) pread64$auto(r0, 0x0, 0x73, 0x8) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r1, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r1, 0x8000) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0xb03, 0x80000000000ff, 0xffffffffffff7fff, 0x9b72, 0x2, 0x80000008000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) socket(0xa, 0x5, 0x0) mmap$auto(0xfffffffffffffffc, 0x2020009, 0x3, 0x1c, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0xfffffffd, 0x5, 0x9, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f00000000c0), 0x141401, 0x0) clock_adjtime$auto(0xfffffffffffffffb, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x7, 0x0, &(0x7f0000000240)={{0x0, 0x0, 0xee00, 0x8, 0x5, 0x4, 0x4}, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x2, 0xfffffffffffffffd, 0xb52, 0x0, 0x7, 0x6, 0x4, 0x9, 0xf, @raw=0x8}) prctl$auto(0x3e, 0x1, 0x0, 0x21, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto(r3, 0x540a, 0x0) msgrcv$auto(0x9, 0x0, 0xfffffffffffffffd, 0x2, 0x80008) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r3, 0x8000) socket(0x80000000000000a, 0x2, 0x0) kernel console output (not intermixed with test programs): 429227][T31204] RSP: 002b:00007fe5a66a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1056.429260][T31204] RAX: ffffffffffffffda RBX: 00007fe5a59e5fa0 RCX: 00007fe5a578f6c9 [ 1056.429286][T31204] RDX: 0000000000000002 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 1056.429309][T31204] RBP: 00007fe5a5811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1056.429333][T31204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1056.429355][T31204] R13: 00007fe5a59e6038 R14: 00007fe5a59e5fa0 R15: 00007ffcef81e8f8 [ 1056.429407][T31204] [ 1056.429537][T31204] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1056.441179][T31211] netlink: 330 bytes leftover after parsing attributes in process `syz.3.3621'. [ 1056.756828][ T5871] smpboot: CPU 1 is now offline [ 1057.286952][T31237] netlink: 98 bytes leftover after parsing attributes in process `syz.3.3625'. [ 1058.790137][T31321] FAULT_INJECTION: forcing a failure. [ 1058.790137][T31321] name failslab, interval 1, probability 0, space 0, times 0 [ 1058.858115][T31321] CPU: 0 UID: 0 PID: 31321 Comm: syz.1.3631 Not tainted syzkaller #0 PREEMPT(full) [ 1058.858148][T31321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1058.858164][T31321] Call Trace: [ 1058.858172][T31321] [ 1058.858181][T31321] dump_stack_lvl+0x16c/0x1f0 [ 1058.858214][T31321] should_fail_ex+0x512/0x640 [ 1058.858258][T31321] ? __kmalloc_noprof+0xca/0x880 [ 1058.858300][T31321] should_failslab+0xc2/0x120 [ 1058.858333][T31321] __kmalloc_noprof+0xdd/0x880 [ 1058.858371][T31321] ? udpv6_init_sock+0x24e/0x450 [ 1058.858400][T31321] ? udpv6_init_sock+0x24e/0x450 [ 1058.858421][T31321] udpv6_init_sock+0x24e/0x450 [ 1058.858443][T31321] ? __pfx_udpv6_init_sock+0x10/0x10 [ 1058.858472][T31321] inet6_create+0xb30/0x12b0 [ 1058.858503][T31321] ? inet6_create+0x7f/0x12b0 [ 1058.858534][T31321] __sock_create+0x338/0x8d0 [ 1058.858572][T31321] __sys_socket+0x14d/0x260 [ 1058.858604][T31321] ? __pfx___sys_socket+0x10/0x10 [ 1058.858636][T31321] ? xfd_validate_state+0x61/0x180 [ 1058.858670][T31321] ? __pfx_ksys_write+0x10/0x10 [ 1058.858703][T31321] __x64_sys_socket+0x72/0xb0 [ 1058.858733][T31321] ? lockdep_hardirqs_on+0x7c/0x110 [ 1058.858768][T31321] do_syscall_64+0xcd/0xfa0 [ 1058.858798][T31321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.858824][T31321] RIP: 0033:0x7faef158f6c9 [ 1058.858844][T31321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1058.858867][T31321] RSP: 002b:00007faef2468038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1058.858890][T31321] RAX: ffffffffffffffda RBX: 00007faef17e5fa0 RCX: 00007faef158f6c9 [ 1058.858906][T31321] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 1058.858920][T31321] RBP: 00007faef1611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1058.858935][T31321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1058.858949][T31321] R13: 00007faef17e6038 R14: 00007faef17e5fa0 R15: 00007ffe5daf0ec8 [ 1058.858981][T31321] [ 1060.068224][T31373] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1060.185996][T31373] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1060.319198][T31379] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3637'. [ 1060.396884][T31379] mac80211_hwsim hwsim34 wlan1: entered allmulticast mode [ 1060.437052][T31373] blktrace: Concurrent blktraces are not allowed on loop2 [ 1060.595994][T31383] FAULT_INJECTION: forcing a failure. [ 1060.595994][T31383] name failslab, interval 1, probability 0, space 0, times 0 [ 1060.713153][T31383] CPU: 0 UID: 0 PID: 31383 Comm: syz.0.3639 Not tainted syzkaller #0 PREEMPT(full) [ 1060.713189][T31383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1060.713205][T31383] Call Trace: [ 1060.713213][T31383] [ 1060.713223][T31383] dump_stack_lvl+0x16c/0x1f0 [ 1060.713255][T31383] should_fail_ex+0x512/0x640 [ 1060.713290][T31383] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1060.713332][T31383] should_failslab+0xc2/0x120 [ 1060.713364][T31383] __kmalloc_cache_noprof+0x72/0x780 [ 1060.713401][T31383] ? __pfx_acpi_ut_trace+0x10/0x10 [ 1060.713421][T31383] ? acpi_ut_allocate_owner_id+0x42c/0x520 [ 1060.713455][T31383] ? acpi_ds_create_walk_state+0x95/0x300 [ 1060.713498][T31383] ? acpi_ds_create_walk_state+0x95/0x300 [ 1060.713535][T31383] acpi_ds_create_walk_state+0x95/0x300 [ 1060.713575][T31383] acpi_ds_call_control_method+0x226/0xab0 [ 1060.713613][T31383] acpi_ps_parse_aml+0xab3/0x1170 [ 1060.713656][T31383] acpi_ps_execute_method+0x5c4/0xe90 [ 1060.713687][T31383] acpi_ns_evaluate+0x98c/0x16d0 [ 1060.713719][T31383] acpi_evaluate_object+0x4ca/0xdf0 [ 1060.713759][T31383] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 1060.713794][T31383] ? __mutex_trylock_common+0xe9/0x250 [ 1060.713834][T31383] acpi_evaluate_integer+0xdd/0x200 [ 1060.713863][T31383] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 1060.713904][T31383] ? __pfx_status_show+0x10/0x10 [ 1060.713936][T31383] status_show+0xa0/0x120 [ 1060.713975][T31383] ? __pfx_status_show+0x10/0x10 [ 1060.714015][T31383] dev_attr_show+0x56/0xe0 [ 1060.714053][T31383] ? __pfx_dev_attr_show+0x10/0x10 [ 1060.714086][T31383] sysfs_kf_seq_show+0x216/0x3e0 [ 1060.714119][T31383] seq_read_iter+0x50e/0x12d0 [ 1060.714169][T31383] kernfs_fop_read_iter+0x46c/0x610 [ 1060.714193][T31383] ? rw_verify_area+0xcf/0x6c0 [ 1060.714218][T31383] vfs_read+0x8bf/0xcf0 [ 1060.714247][T31383] ? __pfx___mutex_lock+0x10/0x10 [ 1060.714278][T31383] ? __pfx_vfs_read+0x10/0x10 [ 1060.714322][T31383] ksys_read+0x12a/0x250 [ 1060.714347][T31383] ? __pfx_ksys_read+0x10/0x10 [ 1060.714381][T31383] do_syscall_64+0xcd/0xfa0 [ 1060.714411][T31383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.714435][T31383] RIP: 0033:0x7fe5a578f6c9 [ 1060.714453][T31383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1060.714476][T31383] RSP: 002b:00007fe5a66a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1060.714498][T31383] RAX: ffffffffffffffda RBX: 00007fe5a59e5fa0 RCX: 00007fe5a578f6c9 [ 1060.714514][T31383] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000008 [ 1060.714529][T31383] RBP: 00007fe5a5811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1060.714544][T31383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1060.714558][T31383] R13: 00007fe5a59e6038 R14: 00007fe5a59e5fa0 R15: 00007ffcef81e8f8 [ 1060.714590][T31383] [ 1061.138038][T31415] program syz.1.3641 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1061.564744][T31444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3643'. [ 1061.858496][T31383] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20250807/psparse-529) [ 1062.216659][T31461] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1062.287843][T31048] mkiss: ax0: crc mode is auto. [ 1062.332088][T31461] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1062.640114][T31473] blktrace: Concurrent blktraces are not allowed on loop2 [ 1062.846027][T31499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3654'. [ 1062.881703][T31499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3654'. [ 1063.248344][T31477] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1063.278680][T31510] FAULT_INJECTION: forcing a failure. [ 1063.278680][T31510] name failslab, interval 1, probability 0, space 0, times 0 [ 1063.308108][T31477] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1063.314196][T31477] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1063.339842][T31510] CPU: 0 UID: 0 PID: 31510 Comm: syz.4.3656 Not tainted syzkaller #0 PREEMPT(full) [ 1063.339873][T31510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1063.339887][T31510] Call Trace: [ 1063.339894][T31510] [ 1063.339903][T31510] dump_stack_lvl+0x16c/0x1f0 [ 1063.339936][T31510] should_fail_ex+0x512/0x640 [ 1063.339973][T31510] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 1063.340000][T31510] should_failslab+0xc2/0x120 [ 1063.340033][T31510] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 1063.340058][T31510] ? alloc_inode+0xc3/0x240 [ 1063.340095][T31510] ? alloc_inode+0xc3/0x240 [ 1063.340124][T31510] alloc_inode+0xc3/0x240 [ 1063.340156][T31510] path_from_stashed+0x25b/0x750 [ 1063.340180][T31510] ? alloc_fd+0x471/0x7d0 [ 1063.340207][T31510] pidfs_alloc_file+0xf8/0x290 [ 1063.340229][T31510] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 1063.340259][T31510] pidfd_prepare+0x129/0x200 [ 1063.340290][T31510] scm_recv_unix+0x26d/0x400 [ 1063.340327][T31510] ? __pfx_scm_recv_unix+0x10/0x10 [ 1063.340366][T31510] ? skb_copy_datagram_iter+0x40/0x50 [ 1063.340405][T31510] unix_stream_read_generic+0xb89/0x2a20 [ 1063.340466][T31510] ? __pfx_unix_stream_read_generic+0x10/0x10 [ 1063.340509][T31510] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1063.340548][T31510] unix_stream_recvmsg+0x190/0x1c0 [ 1063.340582][T31510] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 1063.340617][T31510] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 1063.340649][T31510] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1063.340690][T31510] sock_recvmsg+0x1f9/0x250 [ 1063.340720][T31510] ____sys_recvmsg+0x218/0x6b0 [ 1063.340755][T31510] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1063.340796][T31510] ? __lock_acquire+0x622/0x1c90 [ 1063.340833][T31510] ___sys_recvmsg+0x114/0x1a0 [ 1063.340856][T31510] ? __pfx____sys_recvmsg+0x10/0x10 [ 1063.340882][T31510] ? find_held_lock+0x2b/0x80 [ 1063.340923][T31510] do_recvmmsg+0x2fe/0x750 [ 1063.340950][T31510] ? __pfx_do_recvmmsg+0x10/0x10 [ 1063.340979][T31510] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1063.341019][T31510] ? __fget_files+0x20e/0x3c0 [ 1063.341048][T31510] __x64_sys_recvmmsg+0x22a/0x280 [ 1063.341074][T31510] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1063.341108][T31510] do_syscall_64+0xcd/0xfa0 [ 1063.341137][T31510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.341161][T31510] RIP: 0033:0x7fcb61d8f6c9 [ 1063.341179][T31510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1063.341203][T31510] RSP: 002b:00007fcb62be3038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1063.341225][T31510] RAX: ffffffffffffffda RBX: 00007fcb61fe5fa0 RCX: 00007fcb61d8f6c9 [ 1063.341240][T31510] RDX: 0000000080000401 RSI: 0000000000000000 RDI: 0000000000000003 [ 1063.341255][T31510] RBP: 00007fcb62be3090 R08: 0000000000000000 R09: 0000000000000000 [ 1063.341270][T31510] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001 [ 1063.341284][T31510] R13: 00007fcb61fe6038 R14: 00007fcb61fe5fa0 R15: 00007ffdf5d9c3a8 [ 1063.341315][T31510] [ 1063.765581][T31477] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1064.494117][T13788] Bluetooth: hci0: command 0x0c1a tx timeout [ 1065.074496][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1065.074621][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1065.367564][T13788] Bluetooth: hci1: command 0x0c1a tx timeout [ 1065.373754][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout [ 1065.561391][T31609] FAULT_INJECTION: forcing a failure. [ 1065.561391][T31609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1065.623928][T31609] CPU: 0 UID: 0 PID: 31609 Comm: syz.0.3666 Not tainted syzkaller #0 PREEMPT(full) [ 1065.623961][T31609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1065.623977][T31609] Call Trace: [ 1065.623985][T31609] [ 1065.623995][T31609] dump_stack_lvl+0x16c/0x1f0 [ 1065.624028][T31609] should_fail_ex+0x512/0x640 [ 1065.624068][T31609] _copy_from_user+0x2e/0xd0 [ 1065.624106][T31609] get_timespec64+0x8b/0x1b0 [ 1065.624137][T31609] ? __pfx_get_timespec64+0x10/0x10 [ 1065.624171][T31609] ? ktime_get+0x200/0x310 [ 1065.624207][T31609] __x64_sys_futex+0x288/0x4c0 [ 1065.624243][T31609] ? __pfx___x64_sys_futex+0x10/0x10 [ 1065.624276][T31609] ? xfd_validate_state+0x61/0x180 [ 1065.624320][T31609] do_syscall_64+0xcd/0xfa0 [ 1065.624349][T31609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.624374][T31609] RIP: 0033:0x7fe5a578f6c9 [ 1065.624405][T31609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1065.624429][T31609] RSP: 002b:00007ffcef81ea58 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1065.624450][T31609] RAX: ffffffffffffffda RBX: 0000000000104203 RCX: 00007fe5a578f6c9 [ 1065.624466][T31609] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe5a59e609c [ 1065.624485][T31609] RBP: 0000000000000032 R08: 00007fe5a66a6000 R09: 00000015ef81ed4f [ 1065.624499][T31609] R10: 00007ffcef81eb50 R11: 0000000000000246 R12: 00007fe5a59e609c [ 1065.624514][T31609] R13: 00007ffcef81eb50 R14: 0000000000104235 R15: 00007ffcef81eb70 [ 1065.624543][T31609] [ 1066.061330][T13788] Bluetooth: hci3: command 0x0c1a tx timeout [ 1066.122637][T31644] netlink: 206 bytes leftover after parsing attributes in process `syz.3.3668'. [ 1066.748502][T31658] bridge0: port 3(bond0) entered blocking state [ 1066.749760][T31658] bridge0: port 3(bond0) entered disabled state [ 1066.749914][T31658] bond0: entered allmulticast mode [ 1066.749934][T31658] bond_slave_0: entered allmulticast mode [ 1066.749951][T31658] bond_slave_1: entered allmulticast mode [ 1066.769101][T31658] bond0: entered promiscuous mode [ 1066.769127][T31658] bond_slave_0: entered promiscuous mode [ 1066.769274][T31658] bond_slave_1: entered promiscuous mode [ 1068.129627][T13788] Bluetooth: hci3: unexpected event 0x32 length: 727 > 9 [ 1068.174309][T31679] FAULT_INJECTION: forcing a failure. [ 1068.174309][T31679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1068.372831][T31679] CPU: 0 UID: 0 PID: 31679 Comm: syz.0.3678 Not tainted syzkaller #0 PREEMPT(full) [ 1068.372863][T31679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1068.372879][T31679] Call Trace: [ 1068.372887][T31679] [ 1068.372896][T31679] dump_stack_lvl+0x16c/0x1f0 [ 1068.372935][T31679] should_fail_ex+0x512/0x640 [ 1068.372975][T31679] _copy_from_user+0x2e/0xd0 [ 1068.373014][T31679] get_timespec64+0x8b/0x1b0 [ 1068.373045][T31679] ? __pfx_get_timespec64+0x10/0x10 [ 1068.373074][T31679] ? ktime_get+0x200/0x310 [ 1068.373111][T31679] __x64_sys_futex+0x288/0x4c0 [ 1068.373148][T31679] ? __pfx___x64_sys_futex+0x10/0x10 [ 1068.373181][T31679] ? xfd_validate_state+0x61/0x180 [ 1068.373229][T31679] do_syscall_64+0xcd/0xfa0 [ 1068.373260][T31679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.373284][T31679] RIP: 0033:0x7fe5a578f6c9 [ 1068.373303][T31679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1068.373326][T31679] RSP: 002b:00007ffcef81ea58 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1068.373348][T31679] RAX: ffffffffffffffda RBX: 0000000000104c37 RCX: 00007fe5a578f6c9 [ 1068.373363][T31679] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe5a59e609c [ 1068.373378][T31679] RBP: 0000000000000032 R08: 00007fe5a66a6000 R09: 00000015ef81ed4f [ 1068.373393][T31679] R10: 00007ffcef81eb50 R11: 0000000000000246 R12: 00007fe5a59e609c [ 1068.373408][T31679] R13: 00007ffcef81eb50 R14: 0000000000104c69 R15: 00007ffcef81eb70 [ 1068.373439][T31679] [ 1068.602042][T31709] program syz.1.3681 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1069.135258][T31734] netlink: 98 bytes leftover after parsing attributes in process `syz.4.3687'. [ 1069.674420][T31747] device-mapper: ioctl: Invalid ioctl structure: name , dev 8000010007 [ 1069.792642][T31751] program syz.1.3691 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1070.232402][T13788] Bluetooth: hci2: unexpected event 0x32 length: 727 > 9 [ 1070.809537][T31773] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1071.285065][T31799] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1071.303637][T31799] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1071.324766][T31795] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3700'. [ 1071.516294][T31814] blktrace: Concurrent blktraces are not allowed on loop2 [ 1071.876596][T31851] FAULT_INJECTION: forcing a failure. [ 1071.876596][T31851] name failslab, interval 1, probability 0, space 0, times 0 [ 1071.942694][T31851] CPU: 0 UID: 0 PID: 31851 Comm: syz.4.3704 Not tainted syzkaller #0 PREEMPT(full) [ 1071.942732][T31851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1071.942747][T31851] Call Trace: [ 1071.942756][T31851] [ 1071.942766][T31851] dump_stack_lvl+0x16c/0x1f0 [ 1071.942797][T31851] should_fail_ex+0x512/0x640 [ 1071.942835][T31851] ? __kmalloc_noprof+0xca/0x880 [ 1071.942876][T31851] should_failslab+0xc2/0x120 [ 1071.942911][T31851] __kmalloc_noprof+0xdd/0x880 [ 1071.942950][T31851] ? sk_prot_alloc+0x1a8/0x2a0 [ 1071.942983][T31851] ? sk_prot_alloc+0x1a8/0x2a0 [ 1071.943009][T31851] sk_prot_alloc+0x1a8/0x2a0 [ 1071.943040][T31851] sk_alloc+0x36/0xc20 [ 1071.943077][T31851] __netlink_create+0x5e/0x2c0 [ 1071.943111][T31851] ? __wake_up+0x3f/0x60 [ 1071.943140][T31851] netlink_create+0x39e/0x620 [ 1071.943177][T31851] ? __pfx_genl_bind+0x10/0x10 [ 1071.943202][T31851] ? __pfx_genl_unbind+0x10/0x10 [ 1071.943226][T31851] ? __pfx_genl_release+0x10/0x10 [ 1071.943258][T31851] __sock_create+0x338/0x8d0 [ 1071.943294][T31851] __sys_socket+0x14d/0x260 [ 1071.943326][T31851] ? __pfx___sys_socket+0x10/0x10 [ 1071.943359][T31851] ? do_user_addr_fault+0x843/0x1370 [ 1071.943395][T31851] __x64_sys_socket+0x72/0xb0 [ 1071.943426][T31851] ? lockdep_hardirqs_on+0x7c/0x110 [ 1071.943456][T31851] do_syscall_64+0xcd/0xfa0 [ 1071.943488][T31851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.943512][T31851] RIP: 0033:0x7fcb61d915e7 [ 1071.943531][T31851] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1071.943562][T31851] RSP: 002b:00007fcb62be1fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1071.943585][T31851] RAX: ffffffffffffffda RBX: 00007fcb61fe5fa0 RCX: 00007fcb61d915e7 [ 1071.943601][T31851] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1071.943616][T31851] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 1071.943630][T31851] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 1071.943644][T31851] R13: 00007fcb61fe6038 R14: 00007fcb61fe5fa0 R15: 00007ffdf5d9c3a8 [ 1071.943674][T31851] [ 1072.305899][T31853] device-mapper: ioctl: Invalid ioctl structure: name , dev 8000010007 [ 1072.392569][T31871] ptp ptp0: new virtual clock ptp1 [ 1072.490105][T31871] ptp ptp0: new virtual clock ptp2 [ 1072.521186][T31871] ptp ptp0: new virtual clock ptp3 [ 1072.526468][T31871] ptp ptp0: guarantee physical clock free running [ 1072.655103][T13788] Bluetooth: hci2: unexpected event 0x32 length: 727 > 9 [ 1073.822055][T31910] FAULT_INJECTION: forcing a failure. [ 1073.822055][T31910] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1073.853476][T31910] CPU: 1 UID: 0 PID: 31910 Comm: syz.1.3712 Not tainted syzkaller #0 PREEMPT(full) [ 1073.853522][T31910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1073.853543][T31910] Call Trace: [ 1073.853555][T31910] [ 1073.853568][T31910] dump_stack_lvl+0x16c/0x1f0 [ 1073.853613][T31910] should_fail_ex+0x512/0x640 [ 1073.853679][T31910] should_fail_alloc_page+0xe7/0x130 [ 1073.853731][T31910] prepare_alloc_pages+0x3c2/0x610 [ 1073.853775][T31910] ? rcu_is_watching+0x12/0xc0 [ 1073.853815][T31910] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 1073.853864][T31910] ? stack_trace_save+0x8e/0xc0 [ 1073.853904][T31910] ? __pfx_stack_trace_save+0x10/0x10 [ 1073.853944][T31910] ? stack_depot_save_flags+0x29/0x9c0 [ 1073.853998][T31910] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1073.854040][T31910] ? kasan_save_stack+0x42/0x60 [ 1073.854077][T31910] ? kasan_save_stack+0x33/0x60 [ 1073.854112][T31910] ? kasan_save_track+0x14/0x30 [ 1073.854149][T31910] ? __kasan_kmalloc+0xaa/0xb0 [ 1073.854185][T31910] ? mon_bin_open+0x1a8/0x4a0 [ 1073.854230][T31910] ? do_sys_openat2+0x11b/0x1d0 [ 1073.854276][T31910] ? __x64_sys_openat+0x174/0x210 [ 1073.854322][T31910] ? do_syscall_64+0xcd/0xfa0 [ 1073.854358][T31910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1073.854400][T31910] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1073.854462][T31910] ? policy_nodemask+0xea/0x4e0 [ 1073.854509][T31910] alloc_pages_mpol+0x1fb/0x550 [ 1073.854555][T31910] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1073.854613][T31910] alloc_pages_noprof+0x131/0x390 [ 1073.854666][T31910] get_zeroed_page_noprof+0x18/0xb0 [ 1073.854708][T31910] mon_alloc_buff+0xce/0x1b0 [ 1073.854747][T31910] ? kasan_save_track+0x14/0x30 [ 1073.854789][T31910] mon_bin_open+0x207/0x4a0 [ 1073.854830][T31910] ? __pfx_mon_bin_open+0x10/0x10 [ 1073.854870][T31910] chrdev_open+0x234/0x6a0 [ 1073.854908][T31910] ? __pfx_apparmor_file_open+0x10/0x10 [ 1073.854957][T31910] ? __pfx_chrdev_open+0x10/0x10 [ 1073.855000][T31910] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1073.855045][T31910] do_dentry_open+0x982/0x1530 [ 1073.855085][T31910] ? __pfx_chrdev_open+0x10/0x10 [ 1073.855133][T31910] vfs_open+0x82/0x3f0 [ 1073.855186][T31910] path_openat+0x1de4/0x2cb0 [ 1073.855237][T31910] ? __pfx_path_openat+0x10/0x10 [ 1073.855276][T31910] ? __lock_acquire+0xb8a/0x1c90 [ 1073.855326][T31910] do_filp_open+0x20b/0x470 [ 1073.855364][T31910] ? __pfx_do_filp_open+0x10/0x10 [ 1073.855435][T31910] ? alloc_fd+0x471/0x7d0 [ 1073.855480][T31910] do_sys_openat2+0x11b/0x1d0 [ 1073.855528][T31910] ? __pfx_do_sys_openat2+0x10/0x10 [ 1073.855594][T31910] __x64_sys_openat+0x174/0x210 [ 1073.855643][T31910] ? __pfx___x64_sys_openat+0x10/0x10 [ 1073.855720][T31910] do_syscall_64+0xcd/0xfa0 [ 1073.855763][T31910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1073.855797][T31910] RIP: 0033:0x7faef158f6c9 [ 1073.855824][T31910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1073.855857][T31910] RSP: 002b:00007faef2468038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1073.855890][T31910] RAX: ffffffffffffffda RBX: 00007faef17e5fa0 RCX: 00007faef158f6c9 [ 1073.855913][T31910] RDX: 0000000000121200 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 1073.855935][T31910] RBP: 00007faef1611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1073.855956][T31910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1073.855976][T31910] R13: 00007faef17e6038 R14: 00007faef17e5fa0 R15: 00007ffe5daf0ec8 [ 1073.856023][T31910] [ 1074.223677][T31517] mkiss: ax0: crc mode is auto. [ 1074.368133][T31917] netlink: 98 bytes leftover after parsing attributes in process `syz.1.3713'. [ 1074.706435][T31928] Invalid ELF header magic: != ELF [ 1075.341503][T31923] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1075.348236][T31923] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1075.355086][T31923] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1075.361926][T31923] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1075.874067][ T9] smpboot: CPU 1 is now offline [ 1076.270882][T31949] ptp ptp0: guarantee physical clock free running [ 1076.571398][T13788] Bluetooth: hci0: command 0x0c1a tx timeout [ 1076.613692][T31954] netlink: 98 bytes leftover after parsing attributes in process `syz.0.3722'. [ 1076.665190][T31956] netlink: 268 bytes leftover after parsing attributes in process `syz.4.3720'. [ 1076.968131][T31956] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.4.3720: iget: checksum invalid [ 1077.207638][T31956] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1077.381661][T13788] Bluetooth: hci3: command 0x0c1a tx timeout [ 1077.387895][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 1077.393993][T26478] Bluetooth: hci2: command 0x0c1a tx timeout [ 1077.668869][T31956] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.4.3720: iget: checksum invalid [ 1078.213931][T31956] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1078.360251][T31956] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.4.3720: iget: checksum invalid [ 1078.401647][T31997] netlink: 98 bytes leftover after parsing attributes in process `syz.1.3728'. [ 1078.610441][T31956] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1078.864745][T31956] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.4.3720: iget: checksum invalid [ 1078.937830][T13788] Bluetooth: hci0: unexpected event 0x32 length: 727 > 9 [ 1079.024608][T32006] ptp ptp0: delete virtual clock ptp3 [ 1079.094236][T31956] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1079.163517][T31956] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1079.227422][T31956] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1079.491953][T32009] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1079.551831][T32006] ptp ptp0: delete virtual clock ptp2 [ 1079.618747][ T9] smpboot: CPU 1 is now offline [ 1079.797897][T32006] ptp ptp0: delete virtual clock ptp1 [ 1079.848832][T32047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3732'. [ 1079.874611][T32006] ptp ptp0: only physical clock in use now [ 1079.987814][T32050] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input32 [ 1080.252732][T32053] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input33 [ 1080.864455][T32103] program syz.1.3739 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1081.476314][T32124] ptp ptp0: new virtual clock ptp1 [ 1081.641332][T32124] ptp ptp0: new virtual clock ptp2 [ 1081.849398][T32124] ptp ptp0: new virtual clock ptp3 [ 1081.879379][T13788] Bluetooth: hci2: unexpected event 0x32 length: 727 > 9 [ 1081.939789][T32124] ptp ptp0: guarantee physical clock free running [ 1082.260446][T32154] ptp ptp0: delete virtual clock ptp3 [ 1082.269179][T32154] ptp ptp0: delete virtual clock ptp2 [ 1082.280147][T32154] ptp ptp0: delete virtual clock ptp1 [ 1082.300226][T32154] ptp ptp0: only physical clock in use now [ 1082.480256][T32178] FAULT_INJECTION: forcing a failure. [ 1082.480256][T32178] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1082.516876][T32178] CPU: 0 UID: 0 PID: 32178 Comm: syz.1.3744 Not tainted syzkaller #0 PREEMPT(full) [ 1082.516908][T32178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1082.516922][T32178] Call Trace: [ 1082.516931][T32178] [ 1082.516940][T32178] dump_stack_lvl+0x16c/0x1f0 [ 1082.516973][T32178] should_fail_ex+0x512/0x640 [ 1082.517014][T32178] get_futex_key+0x1d0/0x1560 [ 1082.517049][T32178] ? __pfx_get_futex_key+0x10/0x10 [ 1082.517080][T32178] ? __pfx___schedule+0x10/0x10 [ 1082.517105][T32178] ? trace_sched_set_need_resched_tp+0xf3/0x150 [ 1082.517135][T32178] futex_wait_setup+0x9d/0x550 [ 1082.517181][T32178] __futex_wait+0x193/0x2f0 [ 1082.517220][T32178] ? __pfx___futex_wait+0x10/0x10 [ 1082.517263][T32178] ? __pfx_futex_wake_mark+0x10/0x10 [ 1082.517305][T32178] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1082.517341][T32178] ? __hrtimer_setup+0x176/0x280 [ 1082.517379][T32178] ? ktime_add_safe+0x60/0x70 [ 1082.517418][T32178] futex_wait+0xe8/0x380 [ 1082.517455][T32178] ? __pfx_futex_wait+0x10/0x10 [ 1082.517491][T32178] ? __lock_acquire+0xb8a/0x1c90 [ 1082.517526][T32178] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1082.517573][T32178] do_futex+0x229/0x350 [ 1082.517605][T32178] ? __pfx_do_futex+0x10/0x10 [ 1082.517643][T32178] ? rcu_is_watching+0x12/0xc0 [ 1082.517667][T32178] ? ktime_get+0x200/0x310 [ 1082.517695][T32178] ? lockdep_hardirqs_on+0x7c/0x110 [ 1082.517726][T32178] ? read_tsc+0x9/0x20 [ 1082.517757][T32178] __x64_sys_futex+0x1e0/0x4c0 [ 1082.517793][T32178] ? __pfx___x64_sys_futex+0x10/0x10 [ 1082.517826][T32178] ? xfd_validate_state+0x61/0x180 [ 1082.517869][T32178] do_syscall_64+0xcd/0xfa0 [ 1082.517899][T32178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.517922][T32178] RIP: 0033:0x7faef158f6c9 [ 1082.517941][T32178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1082.517964][T32178] RSP: 002b:00007ffe5daf1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1082.517987][T32178] RAX: ffffffffffffffda RBX: 0000000000108412 RCX: 00007faef158f6c9 [ 1082.518002][T32178] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007faef17e609c [ 1082.518017][T32178] RBP: 0000000000000032 R08: 00007faef2469000 R09: 000000145daf131f [ 1082.518032][T32178] R10: 00007ffe5daf1120 R11: 0000000000000246 R12: 00007faef17e609c [ 1082.518047][T32178] R13: 00007ffe5daf1120 R14: 0000000000108444 R15: 00007ffe5daf1140 [ 1082.518077][T32178] [ 1083.230562][T32221] FAULT_INJECTION: forcing a failure. [ 1083.230562][T32221] name failslab, interval 1, probability 0, space 0, times 0 [ 1083.266237][T32221] CPU: 0 UID: 0 PID: 32221 Comm: syz.1.3746 Not tainted syzkaller #0 PREEMPT(full) [ 1083.266271][T32221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1083.266286][T32221] Call Trace: [ 1083.266295][T32221] [ 1083.266304][T32221] dump_stack_lvl+0x16c/0x1f0 [ 1083.266337][T32221] should_fail_ex+0x512/0x640 [ 1083.266374][T32221] ? fs_reclaim_acquire+0xae/0x150 [ 1083.266409][T32221] should_failslab+0xc2/0x120 [ 1083.266443][T32221] __kmalloc_noprof+0xdd/0x880 [ 1083.266482][T32221] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1083.266540][T32221] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1083.266568][T32221] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1083.266599][T32221] ? tomoyo_profile+0x47/0x60 [ 1083.266633][T32221] tomoyo_path_perm+0x274/0x460 [ 1083.266677][T32221] ? tomoyo_path_perm+0x260/0x460 [ 1083.266717][T32221] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 1083.266792][T32221] ? __pfx_ima_file_check+0x10/0x10 [ 1083.266828][T32221] ? hook_file_truncate+0xc7/0x250 [ 1083.266861][T32221] security_file_truncate+0x84/0x1e0 [ 1083.266889][T32221] path_openat+0xc10/0x2cb0 [ 1083.266925][T32221] ? __pfx_path_openat+0x10/0x10 [ 1083.266953][T32221] ? __lock_acquire+0xb8a/0x1c90 [ 1083.266990][T32221] do_filp_open+0x20b/0x470 [ 1083.267016][T32221] ? __pfx_do_filp_open+0x10/0x10 [ 1083.267064][T32221] ? alloc_fd+0x471/0x7d0 [ 1083.267096][T32221] do_sys_openat2+0x11b/0x1d0 [ 1083.267131][T32221] ? __pfx_do_sys_openat2+0x10/0x10 [ 1083.267178][T32221] __x64_sys_openat+0x174/0x210 [ 1083.267215][T32221] ? __pfx___x64_sys_openat+0x10/0x10 [ 1083.267263][T32221] do_syscall_64+0xcd/0xfa0 [ 1083.267296][T32221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.267320][T32221] RIP: 0033:0x7faef158f6c9 [ 1083.267339][T32221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1083.267363][T32221] RSP: 002b:00007faef2468038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1083.267386][T32221] RAX: ffffffffffffffda RBX: 00007faef17e5fa0 RCX: 00007faef158f6c9 [ 1083.267402][T32221] RDX: 0000000000101202 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1083.267417][T32221] RBP: 00007faef1611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1083.267432][T32221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1083.267447][T32221] R13: 00007faef17e6038 R14: 00007faef17e5fa0 R15: 00007ffe5daf0ec8 [ 1083.267479][T32221] [ 1083.267496][T32221] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1084.802127][T32320] FAULT_INJECTION: forcing a failure. [ 1084.802127][T32320] name failslab, interval 1, probability 0, space 0, times 0 [ 1084.861346][T32320] CPU: 0 UID: 0 PID: 32320 Comm: syz.4.3751 Not tainted syzkaller #0 PREEMPT(full) [ 1084.861379][T32320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1084.861395][T32320] Call Trace: [ 1084.861403][T32320] [ 1084.861421][T32320] dump_stack_lvl+0x16c/0x1f0 [ 1084.861453][T32320] should_fail_ex+0x512/0x640 [ 1084.861490][T32320] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 1084.861519][T32320] should_failslab+0xc2/0x120 [ 1084.861552][T32320] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 1084.861579][T32320] ? __d_alloc+0x32/0xae0 [ 1084.861611][T32320] ? __d_alloc+0x32/0xae0 [ 1084.861637][T32320] __d_alloc+0x32/0xae0 [ 1084.861668][T32320] d_alloc_pseudo+0x1c/0xc0 [ 1084.861710][T32320] alloc_file_pseudo+0xcf/0x230 [ 1084.861747][T32320] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1084.861782][T32320] ? alloc_fd+0x471/0x7d0 [ 1084.861810][T32320] sock_alloc_file+0x50/0x210 [ 1084.861837][T32320] __sys_socket+0x1c0/0x260 [ 1084.861870][T32320] ? __pfx___sys_socket+0x10/0x10 [ 1084.861904][T32320] ? xfd_validate_state+0x61/0x180 [ 1084.861939][T32320] ? __pfx_ksys_write+0x10/0x10 [ 1084.861971][T32320] __x64_sys_socket+0x72/0xb0 [ 1084.862001][T32320] ? lockdep_hardirqs_on+0x7c/0x110 [ 1084.862029][T32320] do_syscall_64+0xcd/0xfa0 [ 1084.862061][T32320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.862086][T32320] RIP: 0033:0x7fcb61d8f6c9 [ 1084.862105][T32320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1084.862134][T32320] RSP: 002b:00007fcb62be3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1084.862159][T32320] RAX: ffffffffffffffda RBX: 00007fcb61fe5fa0 RCX: 00007fcb61d8f6c9 [ 1084.862175][T32320] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1084.862189][T32320] RBP: 00007fcb61e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1084.862204][T32320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1084.862218][T32320] R13: 00007fcb61fe6038 R14: 00007fcb61fe5fa0 R15: 00007ffdf5d9c3a8 [ 1084.862250][T32320] [ 1085.588429][T31936] mkiss: ax0: crc mode is auto. [ 1085.723890][T32381] ptp ptp0: new virtual clock ptp1 [ 1085.750700][T32381] ptp ptp0: new virtual clock ptp2 [ 1085.777585][T32381] ptp ptp0: new virtual clock ptp3 [ 1085.796839][T32381] ptp ptp0: guarantee physical clock free running [ 1086.100719][T32320] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.4.3751: iget: checksum invalid [ 1086.237877][T32320] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1086.366922][T32320] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.4.3751: iget: checksum invalid [ 1086.494871][T32320] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1086.598843][T32320] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.4.3751: iget: checksum invalid [ 1086.723071][T32320] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1086.846465][T32320] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.4.3751: iget: checksum invalid [ 1086.965132][T32320] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1087.071018][T32320] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1087.159951][T32320] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1088.146699][T32414] program syz.1.3762 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1088.584797][T32407] netlink: 330 bytes leftover after parsing attributes in process `syz.4.3760'. [ 1089.049791][T32433] program syz.1.3767 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1089.205271][T32436] FAULT_INJECTION: forcing a failure. [ 1089.205271][T32436] name failslab, interval 1, probability 0, space 0, times 0 [ 1089.218939][T32436] CPU: 0 UID: 0 PID: 32436 Comm: syz.1.3768 Not tainted syzkaller #0 PREEMPT(full) [ 1089.218977][T32436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1089.218992][T32436] Call Trace: [ 1089.219000][T32436] [ 1089.219010][T32436] dump_stack_lvl+0x16c/0x1f0 [ 1089.219043][T32436] should_fail_ex+0x512/0x640 [ 1089.219079][T32436] ? __kmalloc_noprof+0xca/0x880 [ 1089.219120][T32436] should_failslab+0xc2/0x120 [ 1089.219153][T32436] __kmalloc_noprof+0xdd/0x880 [ 1089.219191][T32436] ? udpv6_init_sock+0x24e/0x450 [ 1089.219219][T32436] ? udpv6_init_sock+0x24e/0x450 [ 1089.219241][T32436] udpv6_init_sock+0x24e/0x450 [ 1089.219262][T32436] ? __pfx_udpv6_init_sock+0x10/0x10 [ 1089.219287][T32436] inet6_create+0xb30/0x12b0 [ 1089.219317][T32436] ? inet6_create+0x7f/0x12b0 [ 1089.219349][T32436] __sock_create+0x338/0x8d0 [ 1089.219386][T32436] __sys_socket+0x14d/0x260 [ 1089.219418][T32436] ? __pfx___sys_socket+0x10/0x10 [ 1089.219450][T32436] ? xfd_validate_state+0x61/0x180 [ 1089.219486][T32436] ? __pfx_ksys_write+0x10/0x10 [ 1089.219519][T32436] __x64_sys_socket+0x72/0xb0 [ 1089.219549][T32436] ? lockdep_hardirqs_on+0x7c/0x110 [ 1089.219577][T32436] do_syscall_64+0xcd/0xfa0 [ 1089.219608][T32436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1089.219632][T32436] RIP: 0033:0x7faef158f6c9 [ 1089.219651][T32436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1089.219675][T32436] RSP: 002b:00007faef2468038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1089.219697][T32436] RAX: ffffffffffffffda RBX: 00007faef17e5fa0 RCX: 00007faef158f6c9 [ 1089.219713][T32436] RDX: 0000000000000011 RSI: 0000000000000002 RDI: 000000000000000a [ 1089.219728][T32436] RBP: 00007faef1611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1089.219743][T32436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1089.219757][T32436] R13: 00007faef17e6038 R14: 00007faef17e5fa0 R15: 00007ffe5daf0ec8 [ 1089.219788][T32436] [ 1090.977360][T32483] FAULT_INJECTION: forcing a failure. [ 1090.977360][T32483] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1091.000517][T32483] CPU: 0 UID: 0 PID: 32483 Comm: syz.1.3776 Not tainted syzkaller #0 PREEMPT(full) [ 1091.000550][T32483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1091.000565][T32483] Call Trace: [ 1091.000572][T32483] [ 1091.000581][T32483] dump_stack_lvl+0x16c/0x1f0 [ 1091.000613][T32483] should_fail_ex+0x512/0x640 [ 1091.000654][T32483] get_futex_key+0x1d0/0x1560 [ 1091.000689][T32483] ? __pfx_get_futex_key+0x10/0x10 [ 1091.000724][T32483] ? __mutex_trylock_common+0xe9/0x250 [ 1091.000766][T32483] futex_wake+0xea/0x530 [ 1091.000806][T32483] ? __pfx_futex_wake+0x10/0x10 [ 1091.000848][T32483] ? __lock_acquire+0xb8a/0x1c90 [ 1091.000893][T32483] do_futex+0x1e3/0x350 [ 1091.000926][T32483] ? __pfx_do_futex+0x10/0x10 [ 1091.000956][T32483] ? __might_fault+0xe3/0x190 [ 1091.000998][T32483] mm_release+0x24e/0x300 [ 1091.001026][T32483] do_exit+0x68e/0x2bf0 [ 1091.001065][T32483] ? __pfx_do_exit+0x10/0x10 [ 1091.001097][T32483] ? do_raw_spin_lock+0x12c/0x2b0 [ 1091.001133][T32483] ? find_held_lock+0x2b/0x80 [ 1091.001161][T32483] do_group_exit+0xd3/0x2a0 [ 1091.001196][T32483] get_signal+0x2671/0x26d0 [ 1091.001234][T32483] ? __pfx_get_signal+0x10/0x10 [ 1091.001260][T32483] ? do_futex+0x122/0x350 [ 1091.001292][T32483] ? __pfx_do_futex+0x10/0x10 [ 1091.001326][T32483] arch_do_signal_or_restart+0x8f/0x790 [ 1091.001358][T32483] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1091.001394][T32483] ? set_cred_ucounts+0x10f/0x200 [ 1091.001439][T32483] exit_to_user_mode_loop+0x85/0x130 [ 1091.001477][T32483] do_syscall_64+0x426/0xfa0 [ 1091.001507][T32483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.001530][T32483] RIP: 0033:0x7faef158f6c9 [ 1091.001548][T32483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1091.001572][T32483] RSP: 002b:00007faef24260e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1091.001595][T32483] RAX: fffffffffffffe00 RBX: 00007faef17e6188 RCX: 00007faef158f6c9 [ 1091.001610][T32483] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007faef17e6188 [ 1091.001625][T32483] RBP: 00007faef17e6180 R08: 0000000000000000 R09: 0000000000000000 [ 1091.001638][T32483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1091.001652][T32483] R13: 00007faef17e6218 R14: 00007ffe5daf0de0 R15: 00007ffe5daf0ec8 [ 1091.001682][T32483] [ 1091.280963][T32484] can0: slcan on ptm1. [ 1091.290486][T32484] can1: slcan on ptm0. [ 1091.451619][T32484] can1 (unregistered): slcan off ptm0. [ 1091.502530][T32481] can0 (unregistered): slcan off ptm1. [ 1091.559971][T32531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3779'. [ 1091.569964][T32531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3779'. [ 1091.832854][T32537] netlink: 'syz.0.3781': attribute type 1 has an invalid length. [ 1091.966066][ T30] audit: type=1800 audit(4294977099.041:24): pid=32537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3781" name="dbroot" dev="configfs" ino=76302 res=0 errno=0 [ 1091.989441][T32537] phram: not enough arguments [ 1092.462964][T32557] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1092.541333][ T9] smpboot: CPU 1 is now offline [ 1092.816549][ T30] audit: type=1800 audit(4294977099.921:25): pid=32554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3783" name="lu_gp_id" dev="configfs" ino=76375 res=0 errno=0 [ 1093.004917][T32582] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 1093.687609][T32596] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1093.787732][ T853] smpboot: CPU 1 is now offline [ 1093.995403][T32615] netlink: 98 bytes leftover after parsing attributes in process `syz.1.3794'. [ 1094.231144][T32631] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1094.239122][T32631] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1094.423459][T32650] blktrace: Concurrent blktraces are not allowed on loop2 [ 1094.742004][T32618] zswap: compressor not available [ 1095.189915][T32685] FAULT_INJECTION: forcing a failure. [ 1095.189915][T32685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1095.332881][T32685] CPU: 0 UID: 0 PID: 32685 Comm: syz.0.3799 Not tainted syzkaller #0 PREEMPT(full) [ 1095.332913][T32685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1095.332928][T32685] Call Trace: [ 1095.332936][T32685] [ 1095.332945][T32685] dump_stack_lvl+0x16c/0x1f0 [ 1095.332977][T32685] should_fail_ex+0x512/0x640 [ 1095.333017][T32685] _copy_from_iter+0x29f/0x1720 [ 1095.333057][T32685] ? __alloc_skb+0x200/0x380 [ 1095.333107][T32685] ? __pfx__copy_from_iter+0x10/0x10 [ 1095.333143][T32685] ? netlink_autobind.isra.0+0x158/0x370 [ 1095.333178][T32685] netlink_sendmsg+0x820/0xdd0 [ 1095.333207][T32685] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1095.333234][T32685] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1095.333273][T32685] ____sys_sendmsg+0xa98/0xc70 [ 1095.333303][T32685] ? copy_msghdr_from_user+0x10a/0x160 [ 1095.333325][T32685] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1095.333366][T32685] ___sys_sendmsg+0x134/0x1d0 [ 1095.333390][T32685] ? __pfx____sys_sendmsg+0x10/0x10 [ 1095.333410][T32685] ? __lock_acquire+0x622/0x1c90 [ 1095.333475][T32685] __sys_sendmsg+0x16d/0x220 [ 1095.333497][T32685] ? __pfx___sys_sendmsg+0x10/0x10 [ 1095.333536][T32685] do_syscall_64+0xcd/0xfa0 [ 1095.333569][T32685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.333593][T32685] RIP: 0033:0x7fe5a578f6c9 [ 1095.333610][T32685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1095.333632][T32685] RSP: 002b:00007fe5a66a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1095.333654][T32685] RAX: ffffffffffffffda RBX: 00007fe5a59e5fa0 RCX: 00007fe5a578f6c9 [ 1095.333669][T32685] RDX: 0000000004000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1095.333684][T32685] RBP: 00007fe5a66a5090 R08: 0000000000000000 R09: 0000000000000000 [ 1095.333698][T32685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1095.333712][T32685] R13: 00007fe5a59e6038 R14: 00007fe5a59e5fa0 R15: 00007ffcef81e8f8 [ 1095.333746][T32685] [ 1095.893851][T32695] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1096.146680][T32708] program syz.1.3805 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1096.761795][T32755] program syz.1.3810 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1097.431632][T32397] mkiss: ax0: crc mode is auto. [ 1098.543961][ T420] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3820'. [ 1098.555329][ T420] netlink: 214 bytes leftover after parsing attributes in process `syz.1.3820'. [ 1098.756689][ T431] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3821'. [ 1098.768508][ T431] netlink: 214 bytes leftover after parsing attributes in process `syz.1.3821'. [ 1100.719792][ T482] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1100.727504][ T482] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1100.883083][ T497] blktrace: Concurrent blktraces are not allowed on loop2 [ 1101.271537][T13788] Bluetooth: hci1: unexpected event 0x32 length: 727 > 9 [ 1101.811813][ T562] zswap: compressor not available [ 1103.227586][ T607] program syz.0.3845 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1103.594389][ T616] device-mapper: ioctl: Invalid ioctl structure: name , dev 8000010007 [ 1104.503742][ T626] zswap: compressor not available [ 1104.958277][T13788] Bluetooth: hci2: unexpected event 0x32 length: 727 > 9 [ 1105.051682][ T665] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 1105.140521][ T665] ptp ptp0: delete virtual clock ptp3 [ 1105.166158][ T665] ptp ptp0: delete virtual clock ptp2 [ 1105.204258][ T665] ptp ptp0: delete virtual clock ptp1 [ 1105.257979][ T665] ptp ptp0: only physical clock in use now [ 1109.059767][ T424] mkiss: ax0: crc mode is auto. [ 1109.500223][ T759] program syz.0.3864 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1109.522524][ T760] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1109.530672][ T760] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1109.771493][ T786] blktrace: Concurrent blktraces are not allowed on loop2 [ 1110.407683][ T837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3874'. [ 1110.915471][ T845] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 1111.724971][ T861] program syz.0.3880 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1113.026918][ T896] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1113.039727][ T896] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1113.113155][ T893] FAULT_INJECTION: forcing a failure. [ 1113.113155][ T893] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1113.126731][ T893] CPU: 1 UID: 0 PID: 893 Comm: syz.4.3887 Not tainted syzkaller #0 PREEMPT(full) [ 1113.126774][ T893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1113.126809][ T893] Call Trace: [ 1113.126822][ T893] [ 1113.126837][ T893] dump_stack_lvl+0x16c/0x1f0 [ 1113.126881][ T893] should_fail_ex+0x512/0x640 [ 1113.126936][ T893] _copy_from_iter+0x29f/0x1720 [ 1113.126999][ T893] ? __alloc_skb+0x200/0x380 [ 1113.127049][ T893] ? __pfx__copy_from_iter+0x10/0x10 [ 1113.127099][ T893] ? netlink_autobind.isra.0+0x158/0x370 [ 1113.127151][ T893] netlink_sendmsg+0x820/0xdd0 [ 1113.127194][ T893] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1113.127234][ T893] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1113.127297][ T893] ____sys_sendmsg+0xa98/0xc70 [ 1113.127339][ T893] ? copy_msghdr_from_user+0x10a/0x160 [ 1113.127370][ T893] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1113.127431][ T893] ___sys_sendmsg+0x134/0x1d0 [ 1113.127466][ T893] ? __pfx____sys_sendmsg+0x10/0x10 [ 1113.127494][ T893] ? __lock_acquire+0x622/0x1c90 [ 1113.127587][ T893] __sys_sendmsg+0x16d/0x220 [ 1113.127646][ T893] ? __pfx___sys_sendmsg+0x10/0x10 [ 1113.127706][ T893] do_syscall_64+0xcd/0xfa0 [ 1113.127745][ T893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1113.127774][ T893] RIP: 0033:0x7fcb61d8f6c9 [ 1113.127797][ T893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1113.127829][ T893] RSP: 002b:00007fcb62be3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1113.127860][ T893] RAX: ffffffffffffffda RBX: 00007fcb61fe5fa0 RCX: 00007fcb61d8f6c9 [ 1113.127882][ T893] RDX: 0000000024048084 RSI: 0000200000000440 RDI: 0000000000000003 [ 1113.127904][ T893] RBP: 00007fcb62be3090 R08: 0000000000000000 R09: 0000000000000000 [ 1113.127925][ T893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1113.127945][ T893] R13: 00007fcb61fe6038 R14: 00007fcb61fe5fa0 R15: 00007ffdf5d9c3a8 [ 1113.128046][ T893] [ 1113.426304][ T907] blktrace: Concurrent blktraces are not allowed on loop2 [ 1113.645336][ T935] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1113.652872][ T935] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1113.805133][ T5871] smpboot: CPU 1 is now offline [ 1113.815473][ T953] blktrace: Concurrent blktraces are not allowed on loop2 [ 1113.966747][ T958] FAULT_INJECTION: forcing a failure. [ 1113.966747][ T958] name failslab, interval 1, probability 0, space 0, times 0 [ 1113.992494][ T958] CPU: 0 UID: 0 PID: 958 Comm: syz.0.3895 Not tainted syzkaller #0 PREEMPT(full) [ 1113.992525][ T958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1113.992540][ T958] Call Trace: [ 1113.992548][ T958] [ 1113.992557][ T958] dump_stack_lvl+0x16c/0x1f0 [ 1113.992589][ T958] should_fail_ex+0x512/0x640 [ 1113.992626][ T958] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1113.992653][ T958] should_failslab+0xc2/0x120 [ 1113.992685][ T958] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1113.992709][ T958] ? taskstats_exit+0x654/0xbe0 [ 1113.992759][ T958] ? taskstats_exit+0x654/0xbe0 [ 1113.992795][ T958] ? acct_update_integrals+0x2ce/0x4a0 [ 1113.992816][ T958] taskstats_exit+0x654/0xbe0 [ 1113.992855][ T958] ? __pfx_taskstats_exit+0x10/0x10 [ 1113.992897][ T958] ? exit_signals+0x38e/0xb40 [ 1113.992928][ T958] do_exit+0x5dc/0x2bf0 [ 1113.992966][ T958] ? __pfx_do_exit+0x10/0x10 [ 1113.992999][ T958] ? do_raw_spin_lock+0x12c/0x2b0 [ 1113.993037][ T958] ? find_held_lock+0x2b/0x80 [ 1113.993065][ T958] do_group_exit+0xd3/0x2a0 [ 1113.993101][ T958] get_signal+0x2671/0x26d0 [ 1113.993138][ T958] ? __pfx_get_signal+0x10/0x10 [ 1113.993164][ T958] ? do_futex+0x122/0x350 [ 1113.993198][ T958] ? __pfx_do_futex+0x10/0x10 [ 1113.993232][ T958] arch_do_signal_or_restart+0x8f/0x790 [ 1113.993264][ T958] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1113.993300][ T958] ? ksys_mmap_pgoff+0x85/0x5c0 [ 1113.993333][ T958] ? xfd_validate_state+0x61/0x180 [ 1113.993366][ T958] ? __pfx_ksys_write+0x10/0x10 [ 1113.993398][ T958] exit_to_user_mode_loop+0x85/0x130 [ 1113.993436][ T958] do_syscall_64+0x426/0xfa0 [ 1113.993466][ T958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1113.993490][ T958] RIP: 0033:0x7fe5a578f6c9 [ 1113.993508][ T958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1113.993532][ T958] RSP: 002b:00007fe5a66a50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1113.993554][ T958] RAX: fffffffffffffe00 RBX: 00007fe5a59e5fa8 RCX: 00007fe5a578f6c9 [ 1113.993569][ T958] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe5a59e5fa8 [ 1113.993584][ T958] RBP: 00007fe5a59e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1113.993599][ T958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1113.993613][ T958] R13: 00007fe5a59e6038 R14: 00007ffcef81e810 R15: 00007ffcef81e8f8 [ 1113.993644][ T958] [ 1114.919447][ T965] Invalid ELF header magic: != ELF [ 1116.474272][ T996] netlink: 334 bytes leftover after parsing attributes in process `syz.1.3904'. [ 1116.492072][ T996] netlink: 334 bytes leftover after parsing attributes in process `syz.1.3904'. [ 1117.056756][ T1010] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1117.439668][ T1010] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1117.645629][ T1039] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3912'. [ 1117.713453][ T1042] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888078000d00 pfn:0x78000 [ 1117.742037][ T1042] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1117.763144][ T1042] memcg:ffff88805c112501 [ 1117.767498][ T1042] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1117.801834][ T1042] page_type: f5(slab) [ 1117.811479][ T1042] raw: 00fff00000000040 ffff88802feb4000 dead000000000122 0000000000000000 [ 1117.833059][ T1042] raw: ffff888078000d00 0000000080130011 00000000f5000000 ffff88805c112501 [ 1117.845376][ T1042] head: 00fff00000000040 ffff88802feb4000 dead000000000122 0000000000000000 [ 1117.855653][ T1042] head: ffff888078000d00 0000000080130011 00000000f5000000 ffff88805c112501 [ 1117.902460][ T1042] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 1117.921161][ T1042] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1117.941735][ T1042] page dumped because: unmovable page [ 1117.961079][ T1042] page_owner tracks the page as allocated [ 1117.967460][ T1042] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6896, tgid 6881 (syz.1.239), ts 170055437371, free_ts 170055338537 [ 1118.008050][ T1042] post_alloc_hook+0x1c0/0x230 [ 1118.018160][ T1042] get_page_from_freelist+0x10a3/0x3a30 [ 1118.025341][ T1042] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 1118.035271][ T1042] alloc_pages_mpol+0x1fb/0x550 [ 1118.040607][ T1008] blktrace: Concurrent blktraces are not allowed on loop2 [ 1118.047928][ T1042] new_slab+0x24a/0x360 [ 1118.052550][ T1042] ___slab_alloc+0xd79/0x1a50 [ 1118.057318][ T1042] __slab_alloc.constprop.0+0x63/0x110 [ 1118.069228][ T1042] kmem_cache_alloc_noprof+0x43f/0x6e0 [ 1118.074941][ T1042] sk_prot_alloc+0x60/0x2a0 [ 1118.080630][ T1042] sk_alloc+0x36/0xc20 [ 1118.084876][ T1042] pn_socket_create+0x22d/0x560 [ 1118.089860][ T1042] __sock_create+0x338/0x8d0 [ 1118.101064][ T1042] __sys_socket+0x14d/0x260 [ 1118.108357][ T1042] __x64_sys_socket+0x72/0xb0 [ 1118.119663][ T1042] do_syscall_64+0xcd/0xfa0 [ 1118.128063][ T1042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.136594][ T1042] page last free pid 6896 tgid 6881 stack trace: [ 1118.146730][ T1042] __free_frozen_pages+0x7df/0x1160 [ 1118.152460][ T1042] __put_partials+0x130/0x170 [ 1118.159049][ T1042] qlist_free_all+0x4d/0x120 [ 1118.167413][ T1042] kasan_quarantine_reduce+0x195/0x1e0 [ 1118.175433][ T1042] __kasan_slab_alloc+0x69/0x90 [ 1118.182928][ T1042] kmem_cache_alloc_lru_noprof+0x254/0x6e0 [ 1118.190319][ T1042] sock_alloc_inode+0x25/0x1c0 [ 1118.198999][ T1042] alloc_inode+0x64/0x240 [ 1118.205776][ T1042] sock_alloc+0x40/0x280 [ 1118.211875][ T1042] __sock_create+0xc1/0x8d0 [ 1118.220294][ T1042] __sys_socket+0x14d/0x260 [ 1118.229293][ T1042] __x64_sys_socket+0x72/0xb0 [ 1118.234652][ T1042] do_syscall_64+0xcd/0xfa0 [ 1118.241589][ T1042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.623453][ T1081] program syz.1.3922 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1118.921633][ T1093] ptp ptp0: new virtual clock ptp1 [ 1118.943725][ T1093] ptp ptp0: new virtual clock ptp2 [ 1119.013819][ T1093] ptp ptp0: new virtual clock ptp3 [ 1119.019786][ T1093] ptp ptp0: guarantee physical clock free running [ 1120.064447][ T1114] Invalid ELF header magic: != ELF [ 1120.231578][ T1119] FAULT_INJECTION: forcing a failure. [ 1120.231578][ T1119] name failslab, interval 1, probability 0, space 0, times 0 [ 1120.275887][ T1119] CPU: 0 UID: 0 PID: 1119 Comm: syz.1.3928 Not tainted syzkaller #0 PREEMPT(full) [ 1120.275920][ T1119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1120.275936][ T1119] Call Trace: [ 1120.275944][ T1119] [ 1120.275954][ T1119] dump_stack_lvl+0x16c/0x1f0 [ 1120.275987][ T1119] should_fail_ex+0x512/0x640 [ 1120.276024][ T1119] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1120.276074][ T1119] should_failslab+0xc2/0x120 [ 1120.276107][ T1119] __kmalloc_cache_noprof+0x72/0x780 [ 1120.276146][ T1119] ? rcu_is_watching+0x12/0xc0 [ 1120.276172][ T1119] ? call_usermodehelper_setup+0xaf/0x360 [ 1120.276198][ T1119] ? __pfx_free_modprobe_argv+0x10/0x10 [ 1120.276238][ T1119] ? call_usermodehelper_setup+0xaf/0x360 [ 1120.276260][ T1119] call_usermodehelper_setup+0xaf/0x360 [ 1120.276289][ T1119] __request_module+0x3bd/0x690 [ 1120.276327][ T1119] ? __pfx___request_module+0x10/0x10 [ 1120.276377][ T1119] ? find_held_lock+0x2b/0x80 [ 1120.276409][ T1119] inet6_create+0xd78/0x12b0 [ 1120.276440][ T1119] ? inet6_create+0x7f/0x12b0 [ 1120.276471][ T1119] __sock_create+0x338/0x8d0 [ 1120.276508][ T1119] __sys_socket+0x14d/0x260 [ 1120.276540][ T1119] ? __pfx___sys_socket+0x10/0x10 [ 1120.276572][ T1119] ? xfd_validate_state+0x61/0x180 [ 1120.276606][ T1119] ? __pfx_ksys_write+0x10/0x10 [ 1120.276637][ T1119] __x64_sys_socket+0x72/0xb0 [ 1120.276676][ T1119] ? lockdep_hardirqs_on+0x7c/0x110 [ 1120.276705][ T1119] do_syscall_64+0xcd/0xfa0 [ 1120.276736][ T1119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.276761][ T1119] RIP: 0033:0x7faef158f6c9 [ 1120.276781][ T1119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1120.276805][ T1119] RSP: 002b:00007faef2468038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1120.276826][ T1119] RAX: ffffffffffffffda RBX: 00007faef17e5fa0 RCX: 00007faef158f6c9 [ 1120.276843][ T1119] RDX: 0000000000000106 RSI: 0000000000000002 RDI: 000000000000000a [ 1120.276857][ T1119] RBP: 00007faef1611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1120.276872][ T1119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1120.276887][ T1119] R13: 00007faef17e6038 R14: 00007faef17e5fa0 R15: 00007ffe5daf0ec8 [ 1120.276921][ T1119] [ 1121.333648][ T827] mkiss: ax0: crc mode is auto. [ 1121.903237][T13788] Bluetooth: hci3: unexpected event 0x32 length: 727 > 9 [ 1122.048154][ T1163] ptp ptp0: delete virtual clock ptp3 [ 1122.436393][ T1163] ptp ptp0: delete virtual clock ptp2 [ 1122.601535][ T1163] ptp ptp0: delete virtual clock ptp1 [ 1122.719287][ T1163] ptp ptp0: only physical clock in use now [ 1124.705294][ T1187] FAULT_INJECTION: forcing a failure. [ 1124.705294][ T1187] name failslab, interval 1, probability 0, space 0, times 0 [ 1124.919522][ T1200] hub 1-0:1.0: USB hub found [ 1124.933185][ T1200] hub 1-0:1.0: 1 port detected [ 1125.049424][ T1187] CPU: 0 UID: 0 PID: 1187 Comm: syz.4.3934 Not tainted syzkaller #0 PREEMPT(full) [ 1125.049456][ T1187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1125.049471][ T1187] Call Trace: [ 1125.049479][ T1187] [ 1125.049488][ T1187] dump_stack_lvl+0x16c/0x1f0 [ 1125.049521][ T1187] should_fail_ex+0x512/0x640 [ 1125.049557][ T1187] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1125.049584][ T1187] should_failslab+0xc2/0x120 [ 1125.049617][ T1187] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1125.049641][ T1187] ? taskstats_exit+0x654/0xbe0 [ 1125.049685][ T1187] ? taskstats_exit+0x654/0xbe0 [ 1125.049722][ T1187] ? acct_update_integrals+0x2ce/0x4a0 [ 1125.049742][ T1187] taskstats_exit+0x654/0xbe0 [ 1125.049782][ T1187] ? __pfx_taskstats_exit+0x10/0x10 [ 1125.049822][ T1187] ? exit_signals+0x38e/0xb40 [ 1125.049853][ T1187] do_exit+0x5dc/0x2bf0 [ 1125.049890][ T1187] ? __pfx_do_exit+0x10/0x10 [ 1125.049922][ T1187] ? do_raw_spin_lock+0x12c/0x2b0 [ 1125.049967][ T1187] ? find_held_lock+0x2b/0x80 [ 1125.049996][ T1187] do_group_exit+0xd3/0x2a0 [ 1125.050031][ T1187] get_signal+0x2671/0x26d0 [ 1125.050068][ T1187] ? __pfx_get_signal+0x10/0x10 [ 1125.050095][ T1187] ? do_futex+0x122/0x350 [ 1125.050127][ T1187] ? __pfx_do_futex+0x10/0x10 [ 1125.050162][ T1187] arch_do_signal_or_restart+0x8f/0x790 [ 1125.050193][ T1187] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1125.050229][ T1187] ? set_cred_ucounts+0x10f/0x200 [ 1125.050274][ T1187] exit_to_user_mode_loop+0x85/0x130 [ 1125.050312][ T1187] do_syscall_64+0x426/0xfa0 [ 1125.050343][ T1187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.050367][ T1187] RIP: 0033:0x7fcb61d8f6c9 [ 1125.050386][ T1187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1125.050409][ T1187] RSP: 002b:00007fcb62b800e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1125.050431][ T1187] RAX: fffffffffffffe00 RBX: 00007fcb61fe6278 RCX: 00007fcb61d8f6c9 [ 1125.050447][ T1187] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcb61fe6278 [ 1125.050463][ T1187] RBP: 00007fcb61fe6270 R08: 0000000000000000 R09: 0000000000000000 [ 1125.050477][ T1187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1125.050492][ T1187] R13: 00007fcb61fe6308 R14: 00007ffdf5d9c2c0 R15: 00007ffdf5d9c3a8 [ 1125.050523][ T1187] [ 1125.590865][ T1221] program syz.4.3941 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1125.707201][ T1197] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1125.729119][ T1197] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1125.773941][ T1197] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1125.805120][ T1197] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1126.525492][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1126.532357][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1126.613171][ T1317] can0: slcan on ptm1. [ 1126.658675][ T1316] can0 (unregistered): slcan off ptm1. [ 1126.835411][ T1330] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1126.998252][T13788] Bluetooth: hci0: command 0x0c1a tx timeout [ 1127.078363][ T22] IRQ fixup: irq 34 move in progress, old vector 49 [ 1127.087146][ T853] smpboot: CPU 1 is now offline [ 1127.796867][T13788] Bluetooth: hci1: command 0x0c1a tx timeout [ 1127.803241][T26478] Bluetooth: hci2: command 0x0c1a tx timeout [ 1127.877133][T13788] Bluetooth: hci3: command 0x0c1a tx timeout [ 1128.141622][ T1389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3956'. [ 1128.209890][ T1390] ptp ptp0: new virtual clock ptp1 [ 1128.305306][ T1390] ptp ptp0: new virtual clock ptp2 [ 1128.375418][ T1394] program syz.0.3957 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1128.393177][ T1390] ptp ptp0: new virtual clock ptp3 [ 1128.423766][ T1390] ptp ptp0: guarantee physical clock free running [ 1129.208464][ T1422] Invalid ELF header magic: != ELF [ 1131.141168][ T1457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3965'. [ 1132.073448][ T1467] ptp ptp0: guarantee physical clock free running [ 1132.503712][ T1470] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1132.979718][ T1480] program syz.1.3969 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1133.440718][ T1171] mkiss: ax0: crc mode is auto. [ 1133.847343][T21413] smpboot: CPU 1 is now offline [ 1134.551989][ T1518] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1134.570216][ T1518] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1134.843584][ T1531] blktrace: Concurrent blktraces are not allowed on loop2 [ 1134.908826][ T1522] sd 0:0:1:0: device reset [ 1135.432580][ T1574] sp0: Synchronizing with TNC [ 1135.859705][ T1621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3986'. [ 1136.504391][T13788] Bluetooth: hci2: unexpected event 0x32 length: 727 > 9 [ 1136.608568][ T1664] ptp ptp0: delete virtual clock ptp3 [ 1137.064588][ T1664] ptp ptp0: delete virtual clock ptp2 [ 1137.182590][ T1664] ptp ptp0: delete virtual clock ptp1 [ 1137.318801][ T1664] ptp ptp0: only physical clock in use now [ 1137.565233][ T1687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3995'. [ 1137.717634][ T1682] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1137.913913][ T1682] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1138.325755][ T1710] blktrace: Concurrent blktraces are not allowed on loop2 [ 1139.916415][ T1839] ptp ptp0: new virtual clock ptp1 [ 1139.949842][ T1839] ptp ptp0: new virtual clock ptp2 [ 1140.005960][ T1839] ptp ptp0: new virtual clock ptp3 [ 1140.011148][ T1839] ptp ptp0: guarantee physical clock free running [ 1141.948896][ T1893] base or size exceeds the MTRR width [ 1145.924344][ T1880] kexec: Could not allocate control_code_buffer [ 1146.019409][ T1519] mkiss: ax0: crc mode is auto. [ 1146.361567][ T1924] Console: switching to colour VGA+ 80x25 [ 1146.624770][ T1919] mkiss: ax0: crc mode is auto. [ 1146.789947][ T1936] random: crng reseeded on system resumption [ 1148.031341][ T2017] netlink: 330 bytes leftover after parsing attributes in process `syz.3.4021'. [ 1149.732506][ T2105] netlink: 330 bytes leftover after parsing attributes in process `syz.4.4027'. [ 1152.283140][ T2141] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4034'. [ 1152.840899][ T2147] program syz.4.4036 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1152.876101][ T2158] netlink: 330 bytes leftover after parsing attributes in process `syz.3.4037'. [ 1154.818495][ T2191] program syz.4.4041 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1155.236783][ T2216] blktrace: Concurrent blktraces are not allowed on loop2 [ 1155.662545][T13788] Bluetooth: hci0: unexpected event 0x32 length: 727 > 9 [ 1155.751642][ T2238] ptp ptp0: delete virtual clock ptp3 [ 1156.033293][ T2238] ptp ptp0: delete virtual clock ptp2 [ 1156.734197][ T2249] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4048'. [ 1157.029756][ T2238] ptp ptp0: delete virtual clock ptp1 [ 1157.085521][ T2238] ptp ptp0: only physical clock in use now [ 1157.404022][ T2261] netlink: 330 bytes leftover after parsing attributes in process `syz.0.4052'. [ 1157.684872][ T2271] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1157.846708][ T2271] PCI: Can't parse resource_alignment parameter: B¿Fj˜ô’l [ 1158.404971][ T30] audit: type=1804 audit(4294978188.480:26): pid=2257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4051" name="file0" dev="tmpfs" ino=2275 res=1 errno=0 [ 1158.562653][ T1948] mkiss: ax0: crc mode is auto. [ 1158.691782][ T2284] ptp ptp0: new virtual clock ptp1 [ 1158.743962][ T2284] ptp ptp0: new virtual clock ptp2 [ 1158.810066][ T2284] ptp ptp0: new virtual clock ptp3 [ 1158.866833][ T2284] ptp ptp0: guarantee physical clock free running [ 1159.830672][ T2316] Invalid ELF header magic: != ELF [ 1160.262148][ T2323] overlayfs: missing 'lowerdir' [ 1160.310519][ T2327] Invalid ELF header magic: != ELF [ 1160.705271][ T2337] netlink: 342 bytes leftover after parsing attributes in process `syz.4.4064'. [ 1160.726215][ T2334] program syz.0.4063 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1160.993185][ T2341] ptp ptp0: guarantee physical clock free running [ 1163.623516][ T2499] netlink: 268 bytes leftover after parsing attributes in process `syz.4.4072'. [ 1164.897172][ T2521] program syz.0.4076 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1165.192067][ T2499] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.4.4072: iget: checksum invalid [ 1165.225728][ T2499] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1165.273464][ T2499] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.4.4072: iget: checksum invalid [ 1165.323926][ T2499] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1165.362294][ T2499] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.4.4072: iget: checksum invalid [ 1165.398326][ T2499] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1165.450430][ T2499] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.4.4072: iget: checksum invalid [ 1165.503720][ T2499] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1165.540547][ T2499] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1165.590596][ T2499] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1165.849296][ T2595] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1166.548939][ T2661] FAULT_INJECTION: forcing a failure. [ 1166.548939][ T2661] name failslab, interval 1, probability 0, space 0, times 0 [ 1166.564745][ T2661] CPU: 1 UID: 0 PID: 2661 Comm: syz.4.4084 Not tainted syzkaller #0 PREEMPT(full) [ 1166.564786][ T2661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1166.564801][ T2661] Call Trace: [ 1166.564810][ T2661] [ 1166.564818][ T2661] dump_stack_lvl+0x16c/0x1f0 [ 1166.564851][ T2661] should_fail_ex+0x512/0x640 [ 1166.564887][ T2661] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1166.564914][ T2661] should_failslab+0xc2/0x120 [ 1166.564946][ T2661] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1166.564970][ T2661] ? do_epoll_ctl+0x24d7/0x3790 [ 1166.565002][ T2661] ? do_epoll_ctl+0x24d7/0x3790 [ 1166.565028][ T2661] do_epoll_ctl+0x24d7/0x3790 [ 1166.565065][ T2661] ? __pfx_do_epoll_ctl+0x10/0x10 [ 1166.565099][ T2661] ? rep_movs_alternative+0x30/0x90 [ 1166.565145][ T2661] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 1166.565170][ T2661] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 1166.565197][ T2661] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 1166.565233][ T2661] do_syscall_64+0xcd/0xfa0 [ 1166.565263][ T2661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.565287][ T2661] RIP: 0033:0x7fcb61d8f6c9 [ 1166.565306][ T2661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1166.565330][ T2661] RSP: 002b:00007fcb62be3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1166.565352][ T2661] RAX: ffffffffffffffda RBX: 00007fcb61fe5fa0 RCX: 00007fcb61d8f6c9 [ 1166.565368][ T2661] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 1166.565382][ T2661] RBP: 00007fcb62be3090 R08: 0000000000000000 R09: 0000000000000000 [ 1166.565396][ T2661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1166.565410][ T2661] R13: 00007fcb61fe6038 R14: 00007fcb61fe5fa0 R15: 00007ffdf5d9c3a8 [ 1166.565441][ T2661] [ 1166.813992][ T2645] zswap: compressor not available [ 1167.806953][ T2726] netlink: 330 bytes leftover after parsing attributes in process `syz.3.4088'. [ 1167.840880][ T2723] hub 1-0:1.0: USB hub found [ 1167.845875][ T2723] hub 1-0:1.0: 1 port detected [ 1168.026419][ T2738] netlink: 138 bytes leftover after parsing attributes in process `syz.4.4090'. [ 1168.195425][ T2742] ptp ptp0: guarantee physical clock free running [ 1168.430825][T13788] Bluetooth: hci0: unexpected event 0x32 length: 727 > 9 [ 1168.538139][ T2756] ptp ptp0: delete virtual clock ptp3 [ 1169.099980][ T2756] ptp ptp0: delete virtual clock ptp2 [ 1169.118676][ T2756] ptp ptp0: delete virtual clock ptp1 [ 1169.196865][ T2756] ptp ptp0: only physical clock in use now [ 1169.790299][ T2828] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4096'. [ 1169.924179][ T2843] blktrace: Concurrent blktraces are not allowed on loop2 [ 1169.965983][ T2856] bond0: option all_slaves_active: invalid value () [ 1170.046760][ T2881] FAULT_INJECTION: forcing a failure. [ 1170.046760][ T2881] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1170.109680][ T2881] CPU: 0 UID: 0 PID: 2881 Comm: syz.1.4098 Not tainted syzkaller #0 PREEMPT(full) [ 1170.109730][ T2881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1170.109750][ T2881] Call Trace: [ 1170.109761][ T2881] [ 1170.109775][ T2881] dump_stack_lvl+0x16c/0x1f0 [ 1170.109819][ T2881] should_fail_ex+0x512/0x640 [ 1170.109874][ T2881] get_futex_key+0x1d0/0x1560 [ 1170.109919][ T2881] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1170.109956][ T2881] ? __pfx_get_futex_key+0x10/0x10 [ 1170.109998][ T2881] ? snd_seq_write+0x5bc/0x6d0 [ 1170.110048][ T2881] futex_wake+0xea/0x530 [ 1170.110097][ T2881] ? bpf_lsm_file_permission+0x9/0x10 [ 1170.110138][ T2881] ? __pfx_futex_wake+0x10/0x10 [ 1170.110196][ T2881] ? vfs_write+0x15d/0x11d0 [ 1170.110242][ T2881] do_futex+0x1e3/0x350 [ 1170.110288][ T2881] ? __pfx_do_futex+0x10/0x10 [ 1170.110344][ T2881] __x64_sys_futex+0x1e0/0x4c0 [ 1170.110392][ T2881] ? fput+0x9b/0xd0 [ 1170.110434][ T2881] ? __pfx___x64_sys_futex+0x10/0x10 [ 1170.110478][ T2881] ? ksys_write+0x1ac/0x250 [ 1170.110513][ T2881] ? __pfx_ksys_write+0x10/0x10 [ 1170.110560][ T2881] do_syscall_64+0xcd/0xfa0 [ 1170.110603][ T2881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.110636][ T2881] RIP: 0033:0x7faef158f6c9 [ 1170.110662][ T2881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1170.110709][ T2881] RSP: 002b:00007faef24260e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1170.110742][ T2881] RAX: ffffffffffffffda RBX: 00007faef17e6188 RCX: 00007faef158f6c9 [ 1170.110765][ T2881] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007faef17e618c [ 1170.110788][ T2881] RBP: 00007faef17e6180 R08: 00007faef2469000 R09: 0000000000000000 [ 1170.110809][ T2881] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1170.110831][ T2881] R13: 00007faef17e6218 R14: 00007ffe5daf0de0 R15: 00007ffe5daf0ec8 [ 1170.110877][ T2881] [ 1170.111860][ T2856] bond0: option all_slaves_active: invalid value (15) [ 1170.896917][ T2910] random: crng reseeded on system resumption [ 1171.060359][ T2317] mkiss: ax0: crc mode is auto. [ 1173.557765][ T3011] hub 1-0:1.0: USB hub found [ 1173.562947][ T3011] hub 1-0:1.0: 1 port detected [ 1174.226595][ T3010] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1174.243175][ T3010] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1174.260049][ T3010] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1174.271788][ T3010] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1174.279749][ T3022] netlink: 330 bytes leftover after parsing attributes in process `syz.1.4112'. [ 1175.580897][T13788] Bluetooth: hci0: command 0x0c1a tx timeout [ 1175.942321][ T3043] netlink: 186 bytes leftover after parsing attributes in process `syz.0.4116'. [ 1176.013902][ T3044] program syz.4.4117 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1176.050220][ T3049] netlink: 'syz.1.4118': attribute type 21 has an invalid length. [ 1176.070467][ T3049] netlink: 334 bytes leftover after parsing attributes in process `syz.1.4118'. [ 1176.301835][T13788] Bluetooth: hci3: command 0x0c1a tx timeout [ 1176.304192][T26478] Bluetooth: hci1: command 0x0c1a tx timeout [ 1176.307931][T13788] Bluetooth: hci2: command 0x0c1a tx timeout [ 1178.450965][ T3141] Invalid ELF header magic: != ELF [ 1178.650911][ T3144] vivid-003: ================= START STATUS ================= [ 1178.663267][ T3144] vivid-003: Radio HW Seek Mode: Bounded [ 1178.669447][ T3144] vivid-003: Radio Programmable HW Seek: false [ 1178.692492][ T3144] vivid-003: RDS Rx I/O Mode: Block I/O [ 1178.702888][ T3144] vivid-003: Generate RBDS Instead of RDS: false [ 1178.709278][ T3144] vivid-003: RDS Reception: true [ 1178.725761][ T3144] vivid-003: RDS Program Type: 0 inactive [ 1178.755113][ T3144] vivid-003: RDS PS Name: inactive [ 1178.760487][ T3144] vivid-003: RDS Radio Text: inactive [ 1178.810435][ T3144] vivid-003: RDS Traffic Announcement: false inactive [ 1178.822251][ T3144] vivid-003: RDS Traffic Program: false inactive [ 1178.829527][ T3144] vivid-003: RDS Music: false inactive [ 1178.835159][ T3144] vivid-003: ================== END STATUS ================== [ 1179.797410][ T3164] blktrace: Concurrent blktraces are not allowed on loop2 [ 1179.935734][ T3190] ecryptfs_parse_packet_length: Error parsing packet length [ 1179.943182][ T3190] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 1180.332219][ T3202] netlink: 330 bytes leftover after parsing attributes in process `syz.1.4137'. [ 1181.088763][T13788] Bluetooth: hci3: unexpected event 0x32 length: 727 > 9 [ 1181.187275][ T3239] ptp ptp0: only physical clock in use now [ 1181.481784][ T3246] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' [ 1181.514345][ T3246] CPU: 0 UID: 0 PID: 3246 Comm: syz.1.4142 Not tainted syzkaller #0 PREEMPT(full) [ 1181.514389][ T3246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1181.514410][ T3246] Call Trace: [ 1181.514421][ T3246] [ 1181.514435][ T3246] dump_stack_lvl+0x16c/0x1f0 [ 1181.514480][ T3246] sysfs_warn_dup+0x7f/0xa0 [ 1181.514520][ T3246] sysfs_do_create_link_sd+0x124/0x140 [ 1181.514565][ T3246] sysfs_create_link+0x61/0xc0 [ 1181.514607][ T3246] device_add+0x62c/0x1aa0 [ 1181.514665][ T3246] ? __pfx_device_add+0x10/0x10 [ 1181.514714][ T3246] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1181.514783][ T3246] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 1181.514832][ T3246] wiphy_register+0x1eb0/0x2b20 [ 1181.514877][ T3246] ? netdev_run_todo+0x864/0x1320 [ 1181.514927][ T3246] ? __pfx_wiphy_register+0x10/0x10 [ 1181.514996][ T3246] ieee80211_register_hw+0x253d/0x4120 [ 1181.515059][ T3246] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1181.515105][ T3246] ? __pfx___debug_object_init+0x10/0x10 [ 1181.515156][ T3246] ? find_held_lock+0x2b/0x80 [ 1181.515193][ T3246] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1181.515251][ T3246] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1181.515296][ T3246] ? __hrtimer_setup+0x176/0x280 [ 1181.515352][ T3246] mac80211_hwsim_new_radio+0x32d8/0x50b0 [ 1181.515416][ T3246] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1181.515466][ T3246] hwsim_new_radio_nl+0xba2/0x1330 [ 1181.515507][ T3246] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1181.515557][ T3246] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1181.515602][ T3246] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1181.515656][ T3246] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1181.515703][ T3246] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1181.515766][ T3246] ? bpf_lsm_capable+0x9/0x10 [ 1181.515811][ T3246] ? security_capable+0x7e/0x260 [ 1181.515860][ T3246] ? ns_capable+0xd7/0x110 [ 1181.515900][ T3246] genl_rcv_msg+0x55c/0x800 [ 1181.515947][ T3246] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1181.515990][ T3246] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1181.516042][ T3246] netlink_rcv_skb+0x158/0x420 [ 1181.516077][ T3246] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1181.516118][ T3246] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1181.516169][ T3246] ? netlink_deliver_tap+0x1ae/0xd30 [ 1181.516206][ T3246] genl_rcv+0x28/0x40 [ 1181.516241][ T3246] netlink_unicast+0x5aa/0x870 [ 1181.516281][ T3246] ? __pfx_netlink_unicast+0x10/0x10 [ 1181.516332][ T3246] netlink_sendmsg+0x8c8/0xdd0 [ 1181.516386][ T3246] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1181.516427][ T3246] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1181.516483][ T3246] ____sys_sendmsg+0xa98/0xc70 [ 1181.516526][ T3246] ? copy_msghdr_from_user+0x10a/0x160 [ 1181.516557][ T3246] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1181.516609][ T3246] ? __pfx_futex_wake_mark+0x10/0x10 [ 1181.516685][ T3246] ___sys_sendmsg+0x134/0x1d0 [ 1181.516729][ T3246] ? __pfx____sys_sendmsg+0x10/0x10 [ 1181.516758][ T3246] ? __lock_acquire+0x622/0x1c90 [ 1181.516873][ T3246] __sys_sendmsg+0x16d/0x220 [ 1181.516908][ T3246] ? __pfx___sys_sendmsg+0x10/0x10 [ 1181.516942][ T3246] ? __x64_sys_futex+0x1e0/0x4c0 [ 1181.517016][ T3246] do_syscall_64+0xcd/0xfa0 [ 1181.517059][ T3246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.517092][ T3246] RIP: 0033:0x7faef158f6c9 [ 1181.517120][ T3246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1181.517152][ T3246] RSP: 002b:00007faef2468038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1181.517184][ T3246] RAX: ffffffffffffffda RBX: 00007faef17e5fa0 RCX: 00007faef158f6c9 [ 1181.517206][ T3246] RDX: 0000000004000800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1181.517229][ T3246] RBP: 00007faef1611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1181.517251][ T3246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1181.517273][ T3246] R13: 00007faef17e6038 R14: 00007faef17e5fa0 R15: 00007ffe5daf0ec8 [ 1181.517331][ T3246] [ 1183.399600][ T2974] mkiss: ax0: crc mode is auto. [ 1183.614325][T13788] Bluetooth: hci2: unexpected event 0x32 length: 727 > 9 [ 1183.680518][ T3326] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1183.699255][ T3326] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1183.722300][ T3327] ptp ptp0: only physical clock in use now [ 1183.895833][ T3330] blktrace: Concurrent blktraces are not allowed on loop2 [ 1185.781249][ T3385] netlink: 330 bytes leftover after parsing attributes in process `syz.0.4159'. [ 1188.007660][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1188.014040][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1188.581848][ T3518] ptp ptp0: new virtual clock ptp1 [ 1188.607357][ T3518] ptp ptp0: new virtual clock ptp2 [ 1188.645202][ T3518] ptp ptp0: new virtual clock ptp3 [ 1188.669400][ T3518] ptp ptp0: guarantee physical clock free running [ 1189.325485][ T3531] FAULT_INJECTION: forcing a failure. [ 1189.325485][ T3531] name failslab, interval 1, probability 0, space 0, times 0 [ 1189.338747][ T3531] CPU: 0 UID: 0 PID: 3531 Comm: syz.1.4168 Not tainted syzkaller #0 PREEMPT(full) [ 1189.338792][ T3531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1189.338812][ T3531] Call Trace: [ 1189.338824][ T3531] [ 1189.338837][ T3531] dump_stack_lvl+0x16c/0x1f0 [ 1189.338884][ T3531] should_fail_ex+0x512/0x640 [ 1189.338942][ T3531] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1189.338981][ T3531] should_failslab+0xc2/0x120 [ 1189.339029][ T3531] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1189.339064][ T3531] ? __kernfs_new_node+0xd2/0x8e0 [ 1189.339116][ T3531] ? __kernfs_new_node+0xd2/0x8e0 [ 1189.339156][ T3531] __kernfs_new_node+0xd2/0x8e0 [ 1189.339204][ T3531] ? __pfx___kernfs_new_node+0x10/0x10 [ 1189.339260][ T3531] ? find_held_lock+0x2b/0x80 [ 1189.339296][ T3531] ? kernfs_root+0xee/0x2a0 [ 1189.339347][ T3531] kernfs_new_node+0x13c/0x1e0 [ 1189.339404][ T3531] __kernfs_create_file+0x53/0x350 [ 1189.339444][ T3531] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1189.339495][ T3531] internal_create_group+0x578/0xf30 [ 1189.339552][ T3531] ? __pfx_internal_create_group+0x10/0x10 [ 1189.339604][ T3531] ? kernfs_create_link+0x1bd/0x240 [ 1189.339646][ T3531] internal_create_groups+0x9d/0x150 [ 1189.339696][ T3531] device_add+0x77f/0x1aa0 [ 1189.339752][ T3531] ? __pfx_device_add+0x10/0x10 [ 1189.339803][ T3531] ? lockdep_init_map_type+0x5c/0x280 [ 1189.339851][ T3531] ? __init_waitqueue_head+0xca/0x150 [ 1189.339915][ T3531] netdev_register_kobject+0x1a9/0x3d0 [ 1189.340001][ T3531] register_netdevice+0x13dc/0x2270 [ 1189.340049][ T3531] ? __pfx_register_netdevice+0x10/0x10 [ 1189.340103][ T3531] ppp_dev_configure+0xa1e/0xd40 [ 1189.340162][ T3531] ppp_ioctl+0x170e/0x2880 [ 1189.340212][ T3531] ? find_held_lock+0x2b/0x80 [ 1189.340246][ T3531] ? __pfx_ppp_ioctl+0x10/0x10 [ 1189.340303][ T3531] ? __fget_files+0x20e/0x3c0 [ 1189.340345][ T3531] ? __pfx_ppp_ioctl+0x10/0x10 [ 1189.340395][ T3531] __x64_sys_ioctl+0x18e/0x210 [ 1189.340449][ T3531] do_syscall_64+0xcd/0xfa0 [ 1189.340493][ T3531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1189.340547][ T3531] RIP: 0033:0x7faef158f6c9 [ 1189.340575][ T3531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1189.340610][ T3531] RSP: 002b:00007faef2447038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1189.340643][ T3531] RAX: ffffffffffffffda RBX: 00007faef17e6090 RCX: 00007faef158f6c9 [ 1189.340667][ T3531] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 000000000000000b [ 1189.340687][ T3531] RBP: 00007faef1611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1189.340705][ T3531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1189.340721][ T3531] R13: 00007faef17e6128 R14: 00007faef17e6090 R15: 00007ffe5daf0ec8 [ 1189.340761][ T3531] [ 1189.619831][ C0] vkms_vblank_simulate: vblank timer overrun [ 1191.571270][ T3594] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1191.609840][ T3594] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1192.133932][T13788] Bluetooth: hci0: unexpected event 0x32 length: 727 > 9 [ 1192.231304][ T3613] blktrace: Concurrent blktraces are not allowed on loop2 [ 1192.251121][ T3606] ptp ptp0: delete virtual clock ptp3 [ 1192.401438][ T3606] ptp ptp0: delete virtual clock ptp2 [ 1192.436256][ T3606] ptp ptp0: delete virtual clock ptp1 [ 1192.577818][ T3606] ptp ptp0: only physical clock in use now [ 1193.097241][ T3701] FAULT_INJECTION: forcing a failure. [ 1193.097241][ T3701] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1193.136068][ T3701] CPU: 1 UID: 0 PID: 3701 Comm: syz.4.4183 Not tainted syzkaller #0 PREEMPT(full) [ 1193.136111][ T3701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1193.136131][ T3701] Call Trace: [ 1193.136142][ T3701] [ 1193.136155][ T3701] dump_stack_lvl+0x16c/0x1f0 [ 1193.136199][ T3701] should_fail_ex+0x512/0x640 [ 1193.136253][ T3701] get_futex_key+0x1d0/0x1560 [ 1193.136301][ T3701] ? __pfx_get_futex_key+0x10/0x10 [ 1193.136341][ T3701] ? __mutex_trylock_common+0xe9/0x250 [ 1193.136399][ T3701] futex_wake+0xea/0x530 [ 1193.136455][ T3701] ? __pfx_futex_wake+0x10/0x10 [ 1193.136501][ T3701] ? __lock_acquire+0xb8a/0x1c90 [ 1193.136564][ T3701] do_futex+0x1e3/0x350 [ 1193.136616][ T3701] ? __pfx_do_futex+0x10/0x10 [ 1193.136657][ T3701] ? __might_fault+0xe3/0x190 [ 1193.136700][ T3701] mm_release+0x24e/0x300 [ 1193.136738][ T3701] do_exit+0x68e/0x2bf0 [ 1193.136791][ T3701] ? __pfx_do_exit+0x10/0x10 [ 1193.136835][ T3701] ? do_raw_spin_lock+0x12c/0x2b0 [ 1193.136885][ T3701] ? find_held_lock+0x2b/0x80 [ 1193.136926][ T3701] do_group_exit+0xd3/0x2a0 [ 1193.136975][ T3701] get_signal+0x2671/0x26d0 [ 1193.137029][ T3701] ? __pfx_get_signal+0x10/0x10 [ 1193.137065][ T3701] ? do_futex+0x122/0x350 [ 1193.137110][ T3701] ? __pfx_do_futex+0x10/0x10 [ 1193.137158][ T3701] arch_do_signal_or_restart+0x8f/0x790 [ 1193.137201][ T3701] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1193.137251][ T3701] ? ksys_mmap_pgoff+0x85/0x5c0 [ 1193.137291][ T3701] ? __pfx_ksys_write+0x10/0x10 [ 1193.137337][ T3701] exit_to_user_mode_loop+0x85/0x130 [ 1193.137390][ T3701] do_syscall_64+0x426/0xfa0 [ 1193.137432][ T3701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.137466][ T3701] RIP: 0033:0x7fcb61d8f6c9 [ 1193.137491][ T3701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1193.137523][ T3701] RSP: 002b:00007fcb62be30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1193.137584][ T3701] RAX: fffffffffffffe00 RBX: 00007fcb61fe5fa8 RCX: 00007fcb61d8f6c9 [ 1193.137611][ T3701] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcb61fe5fa8 [ 1193.137632][ T3701] RBP: 00007fcb61fe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1193.137653][ T3701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1193.137674][ T3701] R13: 00007fcb61fe6038 R14: 00007ffdf5d9c2c0 R15: 00007ffdf5d9c3a8 [ 1193.137718][ T3701] [ 1193.193977][T13788] Bluetooth: hci2: unexpected event 0x32 length: 727 > 9 [ 1193.273267][ T3708] ptp ptp0: only physical clock in use now [ 1193.620859][ T3716] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 1193.646035][ T3716] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 1194.113134][ T3745] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 1194.905730][T13788] Bluetooth: hci2: unexpected event 0x32 length: 727 > 9 [ 1195.011940][ T3762] ptp ptp0: only physical clock in use now [ 1195.770406][ T3368] mkiss: ax0: crc mode is auto. [ 1197.868370][ T3866] ptp ptp0: new virtual clock ptp1 [ 1197.954895][ T3866] ptp ptp0: new virtual clock ptp2 [ 1197.966910][ T3866] ptp ptp0: new virtual clock ptp3 [ 1197.984544][ T3866] ptp ptp0: guarantee physical clock free running [ 1198.660526][T13788] Bluetooth: hci0: unexpected event 0x32 length: 727 > 9 [ 1198.778779][ T3916] ptp ptp0: delete virtual clock ptp3 [ 1198.869809][ T3916] ptp ptp0: delete virtual clock ptp2 [ 1199.071263][ T3916] ptp ptp0: delete virtual clock ptp1 [ 1199.280718][ T3916] ptp ptp0: only physical clock in use now [ 1199.847519][ T3935] program syz.1.4210 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1200.392002][ T3958] blktrace: Concurrent blktraces are not allowed on loop2 [ 1200.745975][T13788] Bluetooth: hci2: unexpected event 0x32 length: 727 > 9 [ 1200.762643][T21413] smpboot: CPU 1 is now offline [ 1200.844646][ T3985] ptp ptp0: only physical clock in use now [ 1201.409430][ T3994] FAULT_INJECTION: forcing a failure. [ 1201.409430][ T3994] name failslab, interval 1, probability 0, space 0, times 0 [ 1201.474237][ T3994] CPU: 0 UID: 0 PID: 3994 Comm: syz.0.4219 Not tainted syzkaller #0 PREEMPT(full) [ 1201.474270][ T3994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1201.474284][ T3994] Call Trace: [ 1201.474292][ T3994] [ 1201.474301][ T3994] dump_stack_lvl+0x16c/0x1f0 [ 1201.474333][ T3994] should_fail_ex+0x512/0x640 [ 1201.474369][ T3994] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1201.474395][ T3994] should_failslab+0xc2/0x120 [ 1201.474427][ T3994] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1201.474450][ T3994] ? taskstats_exit+0x654/0xbe0 [ 1201.474493][ T3994] ? taskstats_exit+0x654/0xbe0 [ 1201.474528][ T3994] ? acct_update_integrals+0x2ce/0x4a0 [ 1201.474548][ T3994] taskstats_exit+0x654/0xbe0 [ 1201.474587][ T3994] ? __pfx_taskstats_exit+0x10/0x10 [ 1201.474628][ T3994] ? exit_signals+0x38e/0xb40 [ 1201.474658][ T3994] do_exit+0x5dc/0x2bf0 [ 1201.474696][ T3994] ? __pfx_do_exit+0x10/0x10 [ 1201.474728][ T3994] ? do_raw_spin_lock+0x12c/0x2b0 [ 1201.474769][ T3994] ? find_held_lock+0x2b/0x80 [ 1201.474804][ T3994] do_group_exit+0xd3/0x2a0 [ 1201.474840][ T3994] get_signal+0x2671/0x26d0 [ 1201.474877][ T3994] ? __pfx_get_signal+0x10/0x10 [ 1201.474904][ T3994] ? do_futex+0x122/0x350 [ 1201.474936][ T3994] ? __pfx_do_futex+0x10/0x10 [ 1201.474971][ T3994] arch_do_signal_or_restart+0x8f/0x790 [ 1201.475002][ T3994] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1201.475040][ T3994] ? xfd_validate_state+0x61/0x180 [ 1201.475073][ T3994] ? __pfx_ksys_write+0x10/0x10 [ 1201.475105][ T3994] exit_to_user_mode_loop+0x85/0x130 [ 1201.475142][ T3994] do_syscall_64+0x426/0xfa0 [ 1201.475173][ T3994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.475197][ T3994] RIP: 0033:0x7fe5a578f6c9 [ 1201.475216][ T3994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1201.475239][ T3994] RSP: 002b:00007fe5a66a50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1201.475261][ T3994] RAX: fffffffffffffe00 RBX: 00007fe5a59e5fa8 RCX: 00007fe5a578f6c9 [ 1201.475277][ T3994] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe5a59e5fa8 [ 1201.475292][ T3994] RBP: 00007fe5a59e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1201.475306][ T3994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1201.475320][ T3994] R13: 00007fe5a59e6038 R14: 00007ffcef81e810 R15: 00007ffcef81e8f8 [ 1201.475351][ T3994] [ 1201.826115][ T3987] Invalid ELF header magic: != ELF [ 1202.393137][ T4011] ptp ptp0: new virtual clock ptp1 [ 1202.414526][ T4011] ptp ptp0: new virtual clock ptp2 [ 1202.454386][ T4011] ptp ptp0: new virtual clock ptp3 [ 1202.487277][ T4011] ptp ptp0: guarantee physical clock free running [ 1203.919028][ T4062] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888078002700 pfn:0x78000 [ 1204.010891][ T4062] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1204.054464][ T4062] memcg:ffff88805c112501 [ 1204.081806][ T4062] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1204.145761][ T4062] page_type: f5(slab) [ 1204.184746][ T4062] raw: 00fff00000000040 ffff88802feb4000 dead000000000122 0000000000000000 [ 1204.258453][ T4062] raw: ffff888078002700 0000000080130010 00000000f5000000 ffff88805c112501 [ 1204.334235][ T4062] head: 00fff00000000040 ffff88802feb4000 dead000000000122 0000000000000000 [ 1204.384613][ T4062] head: ffff888078002700 0000000080130010 00000000f5000000 ffff88805c112501 [ 1204.473241][ T4062] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 1204.554116][ T4062] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1204.652853][ T4062] page dumped because: unmovable page [ 1204.690461][ T4062] page_owner tracks the page as allocated [ 1204.741696][ T4062] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6896, tgid 6881 (syz.1.239), ts 170055437371, free_ts 170055338537 [ 1204.923639][ T4062] post_alloc_hook+0x1c0/0x230 [ 1204.945866][ T4062] get_page_from_freelist+0x10a3/0x3a30 [ 1205.006452][ T4062] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 1205.012423][ T4062] alloc_pages_mpol+0x1fb/0x550 [ 1205.091397][ T4062] new_slab+0x24a/0x360 [ 1205.117094][ T4062] ___slab_alloc+0xd79/0x1a50 [ 1205.159296][ T4062] __slab_alloc.constprop.0+0x63/0x110 [ 1205.205457][ T4062] kmem_cache_alloc_noprof+0x43f/0x6e0 [ 1205.260705][ T4062] sk_prot_alloc+0x60/0x2a0 [ 1205.290427][ T4062] sk_alloc+0x36/0xc20 [ 1205.294591][ T4062] pn_socket_create+0x22d/0x560 [ 1205.358699][ T4062] __sock_create+0x338/0x8d0 [ 1205.388888][ T4150] FAULT_INJECTION: forcing a failure. [ 1205.388888][ T4150] name failslab, interval 1, probability 0, space 0, times 0 [ 1205.406331][ T4062] __sys_socket+0x14d/0x260 [ 1205.410915][ T4062] __x64_sys_socket+0x72/0xb0 [ 1205.426486][ T4150] CPU: 0 UID: 0 PID: 4150 Comm: syz.4.4233 Not tainted syzkaller #0 PREEMPT(full) [ 1205.426523][ T4150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1205.426537][ T4150] Call Trace: [ 1205.426545][ T4150] [ 1205.426555][ T4150] dump_stack_lvl+0x16c/0x1f0 [ 1205.426587][ T4150] should_fail_ex+0x512/0x640 [ 1205.426623][ T4150] ? __kmalloc_noprof+0xca/0x880 [ 1205.426665][ T4150] should_failslab+0xc2/0x120 [ 1205.426697][ T4150] __kmalloc_noprof+0xdd/0x880 [ 1205.426735][ T4150] ? sk_prot_alloc+0x1a8/0x2a0 [ 1205.426769][ T4150] ? sk_prot_alloc+0x1a8/0x2a0 [ 1205.426795][ T4150] sk_prot_alloc+0x1a8/0x2a0 [ 1205.426826][ T4150] sk_alloc+0x36/0xc20 [ 1205.426863][ T4150] __netlink_create+0x5e/0x2c0 [ 1205.426897][ T4150] ? __wake_up+0x3f/0x60 [ 1205.426926][ T4150] netlink_create+0x39e/0x620 [ 1205.426962][ T4150] ? __pfx_genl_bind+0x10/0x10 [ 1205.426987][ T4150] ? __pfx_genl_unbind+0x10/0x10 [ 1205.427012][ T4150] ? __pfx_genl_release+0x10/0x10 [ 1205.427043][ T4150] __sock_create+0x338/0x8d0 [ 1205.427080][ T4150] __sys_socket+0x14d/0x260 [ 1205.427110][ T4150] ? __x64_sys_openat+0x174/0x210 [ 1205.427147][ T4150] ? __pfx___sys_socket+0x10/0x10 [ 1205.427178][ T4150] ? xfd_validate_state+0x61/0x180 [ 1205.427229][ T4150] __x64_sys_socket+0x72/0xb0 [ 1205.427261][ T4150] ? lockdep_hardirqs_on+0x7c/0x110 [ 1205.427289][ T4150] do_syscall_64+0xcd/0xfa0 [ 1205.427320][ T4150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.427350][ T4150] RIP: 0033:0x7fcb61d8f6c9 [ 1205.427369][ T4150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1205.427393][ T4150] RSP: 002b:00007fcb62be3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1205.427416][ T4150] RAX: ffffffffffffffda RBX: 00007fcb61fe5fa0 RCX: 00007fcb61d8f6c9 [ 1205.427431][ T4150] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1205.427446][ T4150] RBP: 00007fcb61e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1205.427461][ T4150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1205.427476][ T4150] R13: 00007fcb61fe6038 R14: 00007fcb61fe5fa0 R15: 00007ffdf5d9c3a8 [ 1205.427507][ T4150] [ 1205.659611][ T4150] program syz.4.4233 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1206.089954][ T4062] do_syscall_64+0xcd/0xfa0 [ 1206.095335][ T4062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.112032][ T4167] Invalid ELF header magic: != ELF [ 1206.133451][ T4062] page last free pid 6896 tgid 6881 stack trace: [ 1206.156862][ T4062] __free_frozen_pages+0x7df/0x1160 [ 1206.166221][ T4062] __put_partials+0x130/0x170 [ 1206.170936][ T4062] qlist_free_all+0x4d/0x120 [ 1206.191535][ T4062] kasan_quarantine_reduce+0x195/0x1e0 [ 1206.208399][ T4062] __kasan_slab_alloc+0x69/0x90 [ 1206.213310][ T4062] kmem_cache_alloc_lru_noprof+0x254/0x6e0 [ 1206.237950][ T4062] sock_alloc_inode+0x25/0x1c0 [ 1206.260490][ T4062] alloc_inode+0x64/0x240 [ 1206.264893][ T4062] sock_alloc+0x40/0x280 [ 1206.295232][ T4062] __sock_create+0xc1/0x8d0 [ 1206.306041][ T4062] __sys_socket+0x14d/0x260 [ 1206.319987][ T4062] __x64_sys_socket+0x72/0xb0 [ 1206.335189][ T4062] do_syscall_64+0xcd/0xfa0 [ 1206.351956][ T4062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.027736][ T4178] netlink: 330 bytes leftover after parsing attributes in process `syz.1.4236'. [ 1207.281618][ T4162] netlink: 330 bytes leftover after parsing attributes in process `syz.3.4234'. [ 1208.218858][ T3828] mkiss: ax0: crc mode is auto. [ 1210.963905][ T4309] hub 1-0:1.0: USB hub found [ 1211.032750][ T4309] hub 1-0:1.0: 1 port detected [ 1211.599801][ T4348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4247'. [ 1212.694904][ T4390] FAULT_INJECTION: forcing a failure. [ 1212.694904][ T4390] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1212.749756][ T4390] CPU: 0 UID: 0 PID: 4390 Comm: syz.0.4249 Not tainted syzkaller #0 PREEMPT(full) [ 1212.749789][ T4390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1212.749803][ T4390] Call Trace: [ 1212.749811][ T4390] [ 1212.749820][ T4390] dump_stack_lvl+0x16c/0x1f0 [ 1212.749852][ T4390] should_fail_ex+0x512/0x640 [ 1212.749892][ T4390] get_futex_key+0x1d0/0x1560 [ 1212.749926][ T4390] ? __pfx_get_futex_key+0x10/0x10 [ 1212.749956][ T4390] ? __mutex_trylock_common+0xe9/0x250 [ 1212.749997][ T4390] futex_wake+0xea/0x530 [ 1212.750036][ T4390] ? __pfx_futex_wake+0x10/0x10 [ 1212.750070][ T4390] ? __lock_acquire+0xb8a/0x1c90 [ 1212.750115][ T4390] do_futex+0x1e3/0x350 [ 1212.750147][ T4390] ? __pfx_do_futex+0x10/0x10 [ 1212.750176][ T4390] ? __might_fault+0xe3/0x190 [ 1212.750207][ T4390] mm_release+0x24e/0x300 [ 1212.750233][ T4390] do_exit+0x68e/0x2bf0 [ 1212.750271][ T4390] ? __pfx_do_exit+0x10/0x10 [ 1212.750302][ T4390] ? do_raw_spin_lock+0x12c/0x2b0 [ 1212.750338][ T4390] ? find_held_lock+0x2b/0x80 [ 1212.750366][ T4390] do_group_exit+0xd3/0x2a0 [ 1212.750401][ T4390] get_signal+0x2671/0x26d0 [ 1212.750438][ T4390] ? __pfx_get_signal+0x10/0x10 [ 1212.750464][ T4390] ? do_futex+0x122/0x350 [ 1212.750502][ T4390] ? __pfx_do_futex+0x10/0x10 [ 1212.750537][ T4390] arch_do_signal_or_restart+0x8f/0x790 [ 1212.750569][ T4390] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1212.750605][ T4390] ? set_cred_ucounts+0x10f/0x200 [ 1212.750650][ T4390] exit_to_user_mode_loop+0x85/0x130 [ 1212.750687][ T4390] do_syscall_64+0x426/0xfa0 [ 1212.750718][ T4390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1212.750742][ T4390] RIP: 0033:0x7fe5a578f6c9 [ 1212.750760][ T4390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1212.750784][ T4390] RSP: 002b:00007fe5a66420e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1212.750806][ T4390] RAX: fffffffffffffe00 RBX: 00007fe5a59e6278 RCX: 00007fe5a578f6c9 [ 1212.750822][ T4390] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe5a59e6278 [ 1212.750837][ T4390] RBP: 00007fe5a59e6270 R08: 0000000000000000 R09: 0000000000000000 [ 1212.750851][ T4390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1212.750865][ T4390] R13: 00007fe5a59e6308 R14: 00007ffcef81e810 R15: 00007ffcef81e8f8 [ 1212.750896][ T4390] [ 1213.257663][ T4399] ptp ptp0: delete virtual clock ptp3 [ 1213.412147][ T4407] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4252'. [ 1215.229186][ T4399] ptp ptp0: delete virtual clock ptp2 [ 1215.242012][ T4399] ptp ptp0: delete virtual clock ptp1 [ 1215.272877][ T4399] ptp ptp0: only physical clock in use now [ 1215.398955][ T4444] random: crng reseeded on system resumption [ 1216.924904][ T4485] program syz.1.4259 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1217.657428][ T4530] : Can't lookup blockdev [ 1218.411365][ T4529] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1218.417916][ T4529] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1218.452302][ T4529] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1218.458386][ T4529] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1219.703992][ T4579] ptp ptp0: new virtual clock ptp1 [ 1219.808229][ T4579] ptp ptp0: new virtual clock ptp2 [ 1219.842931][T26478] Bluetooth: hci0: command 0x0c1a tx timeout [ 1219.911068][ T4579] ptp ptp0: new virtual clock ptp3 [ 1219.973033][ T4579] ptp ptp0: guarantee physical clock free running [ 1220.497069][T26478] Bluetooth: hci3: command 0x0c1a tx timeout [ 1220.503350][T13788] Bluetooth: hci1: command 0x0c1a tx timeout [ 1220.509395][T13788] Bluetooth: hci2: command 0x0c1a tx timeout [ 1220.609999][ T4227] mkiss: ax0: crc mode is auto. [ 1220.764357][ T4594] netlink: 'syz.0.4270': attribute type 1 has an invalid length. [ 1221.028014][ T4606] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4268'. [ 1222.525615][ T4597] Bluetooth: hci3: unexpected event 0x32 length: 727 > 9 [ 1222.597685][ T4650] ptp ptp0: delete virtual clock ptp3 [ 1222.925764][ T4650] ptp ptp0: delete virtual clock ptp2 [ 1223.147300][ T4650] ptp ptp0: delete virtual clock ptp1 [ 1223.235802][ T4650] ptp ptp0: only physical clock in use now [ 1223.271906][ T4651] ptp ptp0: only physical clock in use now [ 1223.553927][ T4669] FAULT_INJECTION: forcing a failure. [ 1223.553927][ T4669] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1223.612074][ T4669] CPU: 0 UID: 0 PID: 4669 Comm: syz.1.4277 Not tainted syzkaller #0 PREEMPT(full) [ 1223.612106][ T4669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1223.612121][ T4669] Call Trace: [ 1223.612129][ T4669] [ 1223.612138][ T4669] dump_stack_lvl+0x16c/0x1f0 [ 1223.612172][ T4669] should_fail_ex+0x512/0x640 [ 1223.612213][ T4669] should_fail_alloc_page+0xe7/0x130 [ 1223.612249][ T4669] prepare_alloc_pages+0x3c2/0x610 [ 1223.612287][ T4669] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 1223.612326][ T4669] ? mas_wr_store_entry+0x102d/0x2550 [ 1223.612360][ T4669] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1223.612389][ T4669] ? perf_event_mmap+0xba/0xe70 [ 1223.612423][ T4669] ? __pfx_perf_event_mmap+0x10/0x10 [ 1223.612455][ T4669] ? vma_wants_writenotify+0x10b/0x390 [ 1223.612480][ T4669] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1223.612607][ T4669] ? policy_nodemask+0xea/0x4e0 [ 1223.612643][ T4669] alloc_pages_mpol+0x1fb/0x550 [ 1223.612677][ T4669] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1223.612718][ T4669] alloc_pages_noprof+0x131/0x390 [ 1223.612751][ T4669] __pmd_alloc+0x3b/0x8b0 [ 1223.612782][ T4669] ? find_held_lock+0x2b/0x80 [ 1223.612809][ T4669] __handle_mm_fault+0xada/0x2aa0 [ 1223.612861][ T4669] ? __pfx___handle_mm_fault+0x10/0x10 [ 1223.612924][ T4669] handle_mm_fault+0x589/0xd10 [ 1223.612969][ T4669] __get_user_pages+0x54e/0x3530 [ 1223.613015][ T4669] ? __pfx___get_user_pages+0x10/0x10 [ 1223.613057][ T4669] populate_vma_page_range+0x267/0x3f0 [ 1223.613094][ T4669] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1223.613128][ T4669] ? __pfx_find_vma_intersection+0x10/0x10 [ 1223.613161][ T4669] ? do_mmap+0x69c/0x1210 [ 1223.613195][ T4669] __mm_populate+0x1d8/0x380 [ 1223.613231][ T4669] ? __pfx___mm_populate+0x10/0x10 [ 1223.613268][ T4669] ? up_write+0x1b2/0x520 [ 1223.613306][ T4669] vm_mmap_pgoff+0x37f/0x470 [ 1223.613341][ T4669] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1223.613378][ T4669] ? __x64_sys_futex+0x1e0/0x4c0 [ 1223.613411][ T4669] ? __x64_sys_futex+0x1e9/0x4c0 [ 1223.613447][ T4669] ksys_mmap_pgoff+0x7d/0x5c0 [ 1223.613475][ T4669] ? xfd_validate_state+0x61/0x180 [ 1223.613513][ T4669] ? __pfx_ksys_write+0x10/0x10 [ 1223.613548][ T4669] __x64_sys_mmap+0x125/0x190 [ 1223.613589][ T4669] do_syscall_64+0xcd/0xfa0 [ 1223.613620][ T4669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1223.613644][ T4669] RIP: 0033:0x7faef158f6c9 [ 1223.613664][ T4669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1223.613688][ T4669] RSP: 002b:00007faef2468038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1223.613711][ T4669] RAX: ffffffffffffffda RBX: 00007faef17e5fa0 RCX: 00007faef158f6c9 [ 1223.613727][ T4669] RDX: 00000000000000df RSI: 0000000000400005 RDI: 0000000000000000 [ 1223.613742][ T4669] RBP: 00007faef1611f91 R08: 0000000000000002 R09: 0000000000008000 [ 1223.613757][ T4669] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1223.613782][ T4669] R13: 00007faef17e6038 R14: 00007faef17e5fa0 R15: 00007ffe5daf0ec8 [ 1223.613814][ T4669] [ 1224.755507][ T4692] ptp ptp0: new virtual clock ptp1 [ 1224.765059][ T4692] ptp ptp0: new virtual clock ptp2 [ 1224.784445][ T4699] hub 1-0:1.0: USB hub found [ 1224.796531][ T4692] ptp ptp0: new virtual clock ptp3 [ 1224.802900][ T4699] hub 1-0:1.0: 1 port detected [ 1224.835000][ T4692] ptp ptp0: guarantee physical clock free running [ 1225.516781][ T4690] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1225.523719][ T4690] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1225.539002][ T4690] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1225.557058][ T4690] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1226.616604][ T4751] FAULT_INJECTION: forcing a failure. [ 1226.616604][ T4751] name failslab, interval 1, probability 0, space 0, times 0 [ 1226.636454][ T4597] Bluetooth: hci0: unexpected event 0x32 length: 727 > 9 [ 1226.664229][ T4751] CPU: 0 UID: 0 PID: 4751 Comm: syz.1.4292 Not tainted syzkaller #0 PREEMPT(full) [ 1226.664263][ T4751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1226.664278][ T4751] Call Trace: [ 1226.664286][ T4751] [ 1226.664295][ T4751] dump_stack_lvl+0x16c/0x1f0 [ 1226.664327][ T4751] should_fail_ex+0x512/0x640 [ 1226.664363][ T4751] ? __kmalloc_noprof+0xca/0x880 [ 1226.664403][ T4751] should_failslab+0xc2/0x120 [ 1226.664436][ T4751] __kmalloc_noprof+0xdd/0x880 [ 1226.664474][ T4751] ? kernfs_fop_write_iter+0x237/0x570 [ 1226.664517][ T4751] ? kernfs_fop_write_iter+0x237/0x570 [ 1226.664555][ T4751] kernfs_fop_write_iter+0x237/0x570 [ 1226.664597][ T4751] do_iter_readv_writev+0x662/0x9e0 [ 1226.664631][ T4751] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1226.664668][ T4751] vfs_writev+0x35f/0xde0 [ 1226.664699][ T4751] ? __pfx_vfs_writev+0x10/0x10 [ 1226.664721][ T4751] ? __mutex_lock+0x1c5/0x1060 [ 1226.664759][ T4751] ? __pfx___mutex_lock+0x10/0x10 [ 1226.664800][ T4751] ? __fget_files+0x20e/0x3c0 [ 1226.664821][ T4751] ? __fget_files+0x1b0/0x3c0 [ 1226.664851][ T4751] ? do_writev+0x132/0x340 [ 1226.664872][ T4751] do_writev+0x132/0x340 [ 1226.664896][ T4751] ? __pfx_do_writev+0x10/0x10 [ 1226.664928][ T4751] do_syscall_64+0xcd/0xfa0 [ 1226.664958][ T4751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.664983][ T4751] RIP: 0033:0x7faef158f6c9 [ 1226.665002][ T4751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1226.665025][ T4751] RSP: 002b:00007faef2468038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1226.665048][ T4751] RAX: ffffffffffffffda RBX: 00007faef17e5fa0 RCX: 00007faef158f6c9 [ 1226.665063][ T4751] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 1226.665078][ T4751] RBP: 00007faef2468090 R08: 0000000000000000 R09: 0000000000000000 [ 1226.665092][ T4751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1226.665106][ T4751] R13: 00007faef17e6038 R14: 00007faef17e5fa0 R15: 00007ffe5daf0ec8 [ 1226.665138][ T4751] [ 1227.126785][ T4597] Bluetooth: hci0: command 0x0c1a tx timeout [ 1227.392283][ T4759] ptp ptp0: delete virtual clock ptp3 [ 1227.526729][ T4597] Bluetooth: hci2: command 0x0c1a tx timeout [ 1227.606803][ T4597] Bluetooth: hci3: command 0x0c1a tx timeout [ 1227.613489][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 1227.664095][ T4759] ptp ptp0: delete virtual clock ptp2 [ 1227.734689][ T4759] ptp ptp0: delete virtual clock ptp1 [ 1227.821991][ T4759] ptp ptp0: only physical clock in use now [ 1228.093008][ T4787] __vm_enough_memory: pid: 4787, comm: syz.0.4297, bytes: 4398046511104 not enough memory for the allocation [ 1228.630294][ T4809] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1228.651333][ T4809] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1228.844774][ T4814] blktrace: Concurrent blktraces are not allowed on loop2 [ 1228.975719][ T4817] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4302'. [ 1229.109266][ T4817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1229.159387][ T4817] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1229.194673][ T4817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1229.226492][ T4817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1231.472294][ T4900] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888078002700 pfn:0x78000 [ 1231.483300][ T4908] Invalid ELF header magic: != ELF [ 1231.496111][ T4900] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1231.540831][ T4900] memcg:ffff88805c112501 [ 1231.549292][ T4900] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1231.569513][ T4900] page_type: f5(slab) [ 1231.581797][ T4900] raw: 00fff00000000040 ffff88802feb4000 dead000000000122 0000000000000000 [ 1231.620012][ T4900] raw: ffff888078002700 0000000080130010 00000000f5000000 ffff88805c112501 [ 1231.676478][ T4900] head: 00fff00000000040 ffff88802feb4000 dead000000000122 0000000000000000 [ 1231.713429][ T4900] head: ffff888078002700 0000000080130010 00000000f5000000 ffff88805c112501 [ 1231.759393][ T4900] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 1231.785529][ T4900] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1231.817849][ T4900] page dumped because: unmovable page [ 1231.833510][ T4900] page_owner tracks the page as allocated [ 1231.866050][ T4900] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6896, tgid 6881 (syz.1.239), ts 170055437371, free_ts 170055338537 [ 1231.944051][ T4900] post_alloc_hook+0x1c0/0x230 [ 1231.962814][ T4900] get_page_from_freelist+0x10a3/0x3a30 [ 1231.978639][ T4900] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 1231.999737][ T4900] alloc_pages_mpol+0x1fb/0x550 [ 1232.015581][ T4900] new_slab+0x24a/0x360 [ 1232.028077][ T4900] ___slab_alloc+0xd79/0x1a50 [ 1232.041971][ T4900] __slab_alloc.constprop.0+0x63/0x110 [ 1232.061787][ T4900] kmem_cache_alloc_noprof+0x43f/0x6e0 [ 1232.095482][ T4900] sk_prot_alloc+0x60/0x2a0 [ 1232.107321][ T4900] sk_alloc+0x36/0xc20 [ 1232.119035][ T4900] pn_socket_create+0x22d/0x560 [ 1232.137584][ T4900] __sock_create+0x338/0x8d0 [ 1232.149477][ T4900] __sys_socket+0x14d/0x260 [ 1232.163269][ T4900] __x64_sys_socket+0x72/0xb0 [ 1232.179213][ T4900] do_syscall_64+0xcd/0xfa0 [ 1232.195101][ T4900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1232.214432][ T4900] page last free pid 6896 tgid 6881 stack trace: [ 1232.239810][ T4900] __free_frozen_pages+0x7df/0x1160 [ 1232.279563][ T4900] __put_partials+0x130/0x170 [ 1232.284330][ T4900] qlist_free_all+0x4d/0x120 [ 1232.326122][ T4900] kasan_quarantine_reduce+0x195/0x1e0 [ 1232.354119][ T4900] __kasan_slab_alloc+0x69/0x90 [ 1232.381617][ T4900] kmem_cache_alloc_lru_noprof+0x254/0x6e0 [ 1232.387540][ T4900] sock_alloc_inode+0x25/0x1c0 [ 1232.425031][ T4900] alloc_inode+0x64/0x240 [ 1232.445806][ T4900] sock_alloc+0x40/0x280 [ 1232.457880][ T4900] __sock_create+0xc1/0x8d0 [ 1232.475266][ T4963] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1232.486199][ T4900] __sys_socket+0x14d/0x260 [ 1232.504061][ T4900] __x64_sys_socket+0x72/0xb0 [ 1232.522125][ T4963] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1232.534245][ T4900] do_syscall_64+0xcd/0xfa0 [ 1232.538840][ T4900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1232.911872][ T4963] blktrace: Concurrent blktraces are not allowed on loop2 [ 1233.219510][ T4642] mkiss: ax0: crc mode is auto. [ 1234.404114][ T5052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4320'. [ 1236.036039][ T5096] Invalid ELF header magic: != ELF [ 1236.108343][ T5100] openvswitch: netlink: Tunnel attr 218 out of range max 16 [ 1236.763355][ T5092] zswap: compressor not available [ 1237.206599][ T5132] FAULT_INJECTION: forcing a failure. [ 1237.206599][ T5132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1237.318727][ T5132] CPU: 0 UID: 0 PID: 5132 Comm: syz.4.4334 Not tainted syzkaller #0 PREEMPT(full) [ 1237.318759][ T5132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1237.318774][ T5132] Call Trace: [ 1237.318783][ T5132] [ 1237.318792][ T5132] dump_stack_lvl+0x16c/0x1f0 [ 1237.318824][ T5132] should_fail_ex+0x512/0x640 [ 1237.318865][ T5132] _copy_to_user+0x32/0xd0 [ 1237.318905][ T5132] simple_read_from_buffer+0xcb/0x170 [ 1237.318945][ T5132] proc_fail_nth_read+0x197/0x240 [ 1237.318973][ T5132] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1237.319001][ T5132] ? rw_verify_area+0xcf/0x6c0 [ 1237.319023][ T5132] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1237.319049][ T5132] vfs_read+0x1e4/0xcf0 [ 1237.319078][ T5132] ? __pfx___mutex_lock+0x10/0x10 [ 1237.319108][ T5132] ? __pfx_vfs_read+0x10/0x10 [ 1237.319141][ T5132] ? __fget_files+0x20e/0x3c0 [ 1237.319174][ T5132] ksys_read+0x12a/0x250 [ 1237.319199][ T5132] ? __pfx_ksys_read+0x10/0x10 [ 1237.319233][ T5132] do_syscall_64+0xcd/0xfa0 [ 1237.319271][ T5132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1237.319297][ T5132] RIP: 0033:0x7fcb61d8e0dc [ 1237.319316][ T5132] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1237.319340][ T5132] RSP: 002b:00007fcb62bc2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1237.319362][ T5132] RAX: ffffffffffffffda RBX: 00007fcb61fe6090 RCX: 00007fcb61d8e0dc [ 1237.319378][ T5132] RDX: 000000000000000f RSI: 00007fcb62bc20a0 RDI: 0000000000000006 [ 1237.319393][ T5132] RBP: 00007fcb62bc2090 R08: 0000000000000000 R09: 0000000000000000 [ 1237.319407][ T5132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1237.319422][ T5132] R13: 00007fcb61fe6128 R14: 00007fcb61fe6090 R15: 00007ffdf5d9c3a8 [ 1237.319453][ T5132] [ 1239.667582][ T5163] zswap: compressor not available [ 1240.541165][ T5218] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1240.569381][ T5218] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1240.776174][ T5228] blktrace: Concurrent blktraces are not allowed on loop2 [ 1241.837838][ T4597] Bluetooth: hci0: unexpected event 0x02 length: 726 > 260 [ 1245.693831][ T5053] mkiss: ax0: crc mode is auto. [ 1246.150703][ T5398] device-mapper: ioctl: Invalid ioctl structure: name , dev 8000010007 [ 1246.631909][ T5409] FAULT_INJECTION: forcing a failure. [ 1246.631909][ T5409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1246.707949][ T5409] CPU: 0 UID: 0 PID: 5409 Comm: syz.0.4369 Not tainted syzkaller #0 PREEMPT(full) [ 1246.707982][ T5409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1246.707997][ T5409] Call Trace: [ 1246.708005][ T5409] [ 1246.708014][ T5409] dump_stack_lvl+0x16c/0x1f0 [ 1246.708046][ T5409] should_fail_ex+0x512/0x640 [ 1246.708086][ T5409] _copy_from_user+0x2e/0xd0 [ 1246.708124][ T5409] core_sys_select+0x35b/0xc20 [ 1246.708154][ T5409] ? __pfx_core_sys_select+0x10/0x10 [ 1246.708182][ T5409] ? proc_fail_nth_write+0x9f/0x220 [ 1246.708232][ T5409] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1246.708270][ T5409] kern_select+0x15d/0x1e0 [ 1246.708292][ T5409] ? __pfx_kern_select+0x10/0x10 [ 1246.708318][ T5409] ? __pfx_ksys_write+0x10/0x10 [ 1246.708357][ T5409] __x64_sys_select+0xbd/0x160 [ 1246.708379][ T5409] ? do_syscall_64+0x91/0xfa0 [ 1246.708406][ T5409] ? lockdep_hardirqs_on+0x7c/0x110 [ 1246.708433][ T5409] do_syscall_64+0xcd/0xfa0 [ 1246.708463][ T5409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1246.708487][ T5409] RIP: 0033:0x7fe5a578f6c9 [ 1246.708505][ T5409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1246.708529][ T5409] RSP: 002b:00007fe5a66a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1246.708552][ T5409] RAX: ffffffffffffffda RBX: 00007fe5a59e5fa0 RCX: 00007fe5a578f6c9 [ 1246.708568][ T5409] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000a [ 1246.708582][ T5409] RBP: 00007fe5a66a5090 R08: 0000000000000000 R09: 0000000000000000 [ 1246.708596][ T5409] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 1246.708610][ T5409] R13: 00007fe5a59e6038 R14: 00007fe5a59e5fa0 R15: 00007ffcef81e8f8 [ 1246.708641][ T5409] [ 1248.046140][ T5526] random: crng reseeded on system resumption [ 1248.063878][ T5526] : Can't lookup blockdev [ 1248.618516][ T5578] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.1.4376: [ 1248.778524][ T5537] zswap: compressor -Ž not available [ 1249.219214][ T5563] zswap: compressor not available [ 1249.464507][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1249.471028][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1252.334458][ T5637] hub 1-0:1.0: USB hub found [ 1252.352534][ T5637] hub 1-0:1.0: 1 port detected [ 1252.808328][ T5627] zswap: compressor not available [ 1253.049935][ T5636] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1253.056527][ T5636] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1253.073621][ T5636] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1253.098962][ T5636] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1253.311550][ T5674] blktrace: Concurrent blktraces are not allowed on loop2 [ 1253.667086][ T5680] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1254.341832][ T4597] Bluetooth: hci0: command 0x0c1a tx timeout [ 1255.063490][ T4597] Bluetooth: hci2: command 0x0c1a tx timeout [ 1255.140973][ T4597] Bluetooth: hci3: command 0x0c1a tx timeout [ 1255.147463][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 1255.778277][ T5801] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1255.808939][ T5801] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1256.255053][ T5804] blktrace: Concurrent blktraces are not allowed on loop2 [ 1256.272154][ T4597] Bluetooth: hci0: unexpected event 0x32 length: 727 > 9 [ 1256.325454][ T5830] ptp ptp0: only physical clock in use now [ 1257.285870][ T5861] FAULT_INJECTION: forcing a failure. [ 1257.285870][ T5861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1257.311633][ T5861] CPU: 0 UID: 0 PID: 5861 Comm: syz.0.4412 Not tainted syzkaller #0 PREEMPT(full) [ 1257.311676][ T5861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1257.311696][ T5861] Call Trace: [ 1257.311708][ T5861] [ 1257.311720][ T5861] dump_stack_lvl+0x16c/0x1f0 [ 1257.311763][ T5861] should_fail_ex+0x512/0x640 [ 1257.311816][ T5861] _copy_to_user+0x32/0xd0 [ 1257.311869][ T5861] simple_read_from_buffer+0xcb/0x170 [ 1257.311924][ T5861] proc_fail_nth_read+0x197/0x240 [ 1257.311960][ T5861] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1257.311998][ T5861] ? rw_verify_area+0xcf/0x6c0 [ 1257.312028][ T5861] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1257.312064][ T5861] vfs_read+0x1e4/0xcf0 [ 1257.312104][ T5861] ? __pfx___mutex_lock+0x10/0x10 [ 1257.312146][ T5861] ? __pfx_vfs_read+0x10/0x10 [ 1257.312193][ T5861] ? __fget_files+0x20e/0x3c0 [ 1257.312239][ T5861] ksys_read+0x12a/0x250 [ 1257.312274][ T5861] ? __pfx_ksys_read+0x10/0x10 [ 1257.312324][ T5861] do_syscall_64+0xcd/0xfa0 [ 1257.312365][ T5861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.312397][ T5861] RIP: 0033:0x7fe5a578e0dc [ 1257.312424][ T5861] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1257.312464][ T5861] RSP: 002b:00007fe5a66a5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1257.312496][ T5861] RAX: ffffffffffffffda RBX: 00007fe5a59e5fa0 RCX: 00007fe5a578e0dc [ 1257.312519][ T5861] RDX: 000000000000000f RSI: 00007fe5a66a50a0 RDI: 0000000000000005 [ 1257.312540][ T5861] RBP: 00007fe5a66a5090 R08: 0000000000000000 R09: 0000000000000000 [ 1257.312560][ T5861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1257.312580][ T5861] R13: 00007fe5a59e6038 R14: 00007fe5a59e5fa0 R15: 00007ffcef81e8f8 [ 1257.312626][ T5861] [ 1258.035619][ T5420] mkiss: ax0: crc mode is auto. [ 1258.127981][ T5893] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888078002700 pfn:0x78000 [ 1258.138861][ T5893] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1258.163827][ T5893] memcg:ffff88805c112501 [ 1258.170732][ T5893] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1258.183084][ T5893] page_type: f5(slab) [ 1258.200606][ T5893] raw: 00fff00000000040 ffff88802feb4000 dead000000000122 0000000000000000 [ 1258.232022][ T5893] raw: ffff888078002700 0000000080130010 00000000f5000000 ffff88805c112501 [ 1258.241247][ T5893] head: 00fff00000000040 ffff88802feb4000 dead000000000122 0000000000000000 [ 1258.251393][ T5893] head: ffff888078002700 0000000080130010 00000000f5000000 ffff88805c112501 [ 1258.264422][ T5893] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 1258.280276][ T5893] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1258.313829][ T5893] page dumped because: unmovable page [ 1258.320623][ T5893] page_owner tracks the page as allocated [ 1258.362129][ T5893] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6896, tgid 6881 (syz.1.239), ts 170055437371, free_ts 170055338537 [ 1258.393303][ T5893] post_alloc_hook+0x1c0/0x230 [ 1258.398296][ T5893] get_page_from_freelist+0x10a3/0x3a30 [ 1258.409857][ T5893] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 1258.418790][ T5893] alloc_pages_mpol+0x1fb/0x550 [ 1258.425364][ T5893] new_slab+0x24a/0x360 [ 1258.429716][ T5893] ___slab_alloc+0xd79/0x1a50 [ 1258.435887][ T5893] __slab_alloc.constprop.0+0x63/0x110 [ 1258.443621][ T5893] kmem_cache_alloc_noprof+0x43f/0x6e0 [ 1258.451673][ T5893] sk_prot_alloc+0x60/0x2a0 [ 1258.457595][ T5893] sk_alloc+0x36/0xc20 [ 1258.463031][ T5893] pn_socket_create+0x22d/0x560 [ 1258.469241][ T5893] __sock_create+0x338/0x8d0 [ 1258.475334][ T5893] __sys_socket+0x14d/0x260 [ 1258.481224][ T5893] __x64_sys_socket+0x72/0xb0 [ 1258.486654][ T5893] do_syscall_64+0xcd/0xfa0 [ 1258.492315][ T5893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.504317][ T5893] page last free pid 6896 tgid 6881 stack trace: [ 1258.515797][ T5893] __free_frozen_pages+0x7df/0x1160 [ 1258.521270][ T5893] __put_partials+0x130/0x170 [ 1258.529753][ T5893] qlist_free_all+0x4d/0x120 [ 1258.538784][ T5893] kasan_quarantine_reduce+0x195/0x1e0 [ 1258.545918][ T5893] __kasan_slab_alloc+0x69/0x90 [ 1258.551178][ T5893] kmem_cache_alloc_lru_noprof+0x254/0x6e0 [ 1258.558856][ T5893] sock_alloc_inode+0x25/0x1c0 [ 1258.565157][ T5893] alloc_inode+0x64/0x240 [ 1258.569709][ T5893] sock_alloc+0x40/0x280 [ 1258.575486][ T5893] __sock_create+0xc1/0x8d0 [ 1258.580204][ T5893] __sys_socket+0x14d/0x260 [ 1258.589628][ T5893] __x64_sys_socket+0x72/0xb0 [ 1258.595258][ T5893] do_syscall_64+0xcd/0xfa0 [ 1258.601122][ T5893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.955335][ T4597] Bluetooth: hci0: unexpected event 0x32 length: 727 > 9 [ 1259.001701][ T5903] ptp ptp0: only physical clock in use now [ 1259.028972][ T5904] netlink: 330 bytes leftover after parsing attributes in process `syz.1.4420'. [ 1260.285409][ T5917] sg_write: data in/out 3292/1 bytes for SCSI command 0xa3-- guessing data in; [ 1260.285409][ T5917] program syz.0.4425 not setting count and/or reply_len properly [ 1260.347494][ T30] audit: type=1807 audit(4294978290.299:27): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 1260.543250][ T30] audit: type=1802 audit(4294978290.309:28): pid=5917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.4425" res=0 errno=0 [ 1261.052275][ T5915] ima: policy update failed [ 1261.057000][ T846] BUG: sleeping function called from invalid context at ./include/linux/pagemap.h:1139 [ 1261.067091][ T846] in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 846, name: kworker/1:4 [ 1261.076157][ T846] preempt_count: 1, expected: 0 [ 1261.081130][ T846] RCU nest depth: 0, expected: 0 [ 1261.086099][ T846] 3 locks held by kworker/1:4/846: [ 1261.091242][ T846] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1261.101876][ T846] #1: ffffc9000e47fd00 ((work_completion)(&sfp->ew.work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1261.113355][ T846] #2: ffff888021b88080 (&sfp->rq_list_lock){..-.}-{3:3}, at: sg_remove_sfp_usercontext+0x81/0x590 [ 1261.124145][ T846] irq event stamp: 1128 [ 1261.128347][ T846] hardirqs last enabled at (1127): [] _raw_spin_unlock_irq+0x23/0x50 [ 1261.138098][ T846] hardirqs last disabled at (1128): [] _raw_write_lock_irqsave+0x52/0x60 [ 1261.148108][ T846] softirqs last enabled at (1116): [] wg_packet_encrypt_worker+0x8fc/0xbc0 [ 1261.158380][ T846] softirqs last disabled at (1114): [] wg_packet_encrypt_worker+0xdb/0xbc0 [ 1261.168585][ T846] Preemption disabled at: [ 1261.168602][ T846] [<0000000000000000>] 0x0 [ 1261.177491][ T846] CPU: 1 UID: 0 PID: 846 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 1261.177526][ T846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1261.177545][ T846] Workqueue: events sg_remove_sfp_usercontext [ 1261.177578][ T846] Call Trace: [ 1261.177587][ T846] [ 1261.177598][ T846] dump_stack_lvl+0x116/0x1f0 [ 1261.177633][ T846] __might_resched+0x3c0/0x5e0 [ 1261.177662][ T846] ? try_to_wake_up+0x154/0x1870 [ 1261.177688][ T846] ? __pfx___might_resched+0x10/0x10 [ 1261.177717][ T846] ? bio_first_folio+0x3de/0x640 [ 1261.177756][ T846] __bio_release_pages+0x312/0x3b0 [ 1261.177794][ T846] ? __pfx___bio_release_pages+0x10/0x10 [ 1261.177847][ T846] blk_rq_unmap_user+0x3be/0x980 [ 1261.177884][ T846] ? __pfx_blk_rq_unmap_user+0x10/0x10 [ 1261.177918][ T846] ? do_raw_write_lock+0x11c/0x3a0 [ 1261.177944][ T846] ? __pfx_do_raw_write_lock+0x10/0x10 [ 1261.177975][ T846] sg_finish_rem_req+0xde/0x590 [ 1261.178026][ T846] sg_remove_sfp_usercontext+0x103/0x590 [ 1261.178068][ T846] process_one_work+0x9cf/0x1b70 [ 1261.178125][ T846] ? __pfx_process_one_work+0x10/0x10 [ 1261.178180][ T846] ? assign_work+0x1a0/0x250 [ 1261.178223][ T846] worker_thread+0x6c8/0xf10 [ 1261.178277][ T846] ? __kthread_parkme+0x19e/0x250 [ 1261.178319][ T846] ? __pfx_worker_thread+0x10/0x10 [ 1261.178363][ T846] kthread+0x3c5/0x780 [ 1261.178404][ T846] ? __pfx_kthread+0x10/0x10 [ 1261.178446][ T846] ? rcu_is_watching+0x12/0xc0 [ 1261.178476][ T846] ? __pfx_kthread+0x10/0x10 [ 1261.178518][ T846] ret_from_fork+0x675/0x7d0 [ 1261.178567][ T846] ? __pfx_kthread+0x10/0x10 [ 1261.178608][ T846] ret_from_fork_asm+0x1a/0x30 [ 1261.178665][ T846] [ 1261.464556][ T30] audit: type=1802 audit(4294978291.398:29): pid=5915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.4425" res=0 errno=0 [ 1261.744769][ T5930] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input36 [ 1261.807230][ T5930] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input37 [ 1269.695736][ T5909] mkiss: ax0: crc mode is auto.