last executing test programs: 9.268338821s ago: executing program 0 (id=2260): mmap$auto(0x0, 0x6, 0xdf, 0xeb1, 0x401, 0x8000) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) (async) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x51, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket(0x2, 0x1, 0x106) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) timer_create$auto(0x2, 0x0, &(0x7f0000000140)=0x6) (async) clock_nanosleep$auto(0x2, 0x200, &(0x7f0000000100)={0x8, 0x7}, 0x0) (async) timer_settime$auto(0x0, 0x6, &(0x7f0000000000)={{0x100000001, 0x3ff}, {0x5a, 0x2}}, 0x0) ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000180)={"ef65ce6c00cf81000000ffffffffffff000000000700000000000300", 0x3ff, 0x40c, 0x100fff, 0x100000400004, 0x200000000040000d}) (async) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) (async) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x2, 0x8000) (async) io_setup$auto(0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) (async) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) (async) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) ioctl$auto(r2, 0x4004af07, r1) (async) exit$auto(0x41) 7.926553465s ago: executing program 2 (id=2263): openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D0p\x00', 0x13b000, 0x0) r0 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638828712, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) statmount$auto(0x0, 0x0, 0x1fe, 0xd) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x200000000eb1, 0x401, 0x3fffffffffffff) fcntl$auto_F_SETLEASE(r0, 0x400, 0x3) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x10001) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x2d41, 0x0) writev$auto(r2, &(0x7f0000000240)={0x0, 0x7}, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x8000000) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x0, 0x8, 0x0, 0x4000006) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8}, 0x1) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x52) write$auto(0x3, 0x0, 0x5c8) mkdir$auto(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x8cd) 7.692640846s ago: executing program 0 (id=2265): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081) (async) close_range$auto(0x2, 0x8, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x22902, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r2 = socketcall$auto(0x5, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(r2, 0xd43, r2) (async) ioctl$auto(0x3, 0xae41, r2) (async) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="c8010000", @ANYRES16=0x0, @ANYBLOB="020027bd7000fbdbdf254f0000003000328005000100d900000005000300810000000500030002000000050003001000000005000100020000000400050004010e802200020013204416004ecbe33de74e58c0355a0ad24af8b192232f8a2936957c644400e8b3466bb68bac1fba0000c10003004d71a1575e88eaad076e48a471c5abd3569b2d36a6773cf82ac2e9da93f48455e9a4f59e8b2d8aeb82380c2f79c3ebe5af699269b1c6510b"], 0x1c8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) ioctl$auto_KVM_GET_MSRS(r1, 0x4400ae8f, &(0x7f0000000600)={0xdd}) (async) lstat$auto(0x0, &(0x7f0000000180)={0x5d7, 0x802, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7ff, 0x800000000100002, 0x0, 0x4002, 0xa, 0x40, 0x1c, 0x20000000009, 0x7}) (async) pidfd_open$auto(0x1, 0x0) (async) setns(0xffffffffffffffff, 0x8000000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x44020, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) (async) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media15\x00', 0x0, 0x0) r3 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) syz_clone3(&(0x7f0000000380)={0x1200, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) r4 = fanotify_init$auto(0x5, 0x2000000000002) r5 = open(&(0x7f0000000000)='.\x00', 0xc00, 0x409) fanotify_mark$auto(r4, 0x3, 0x8, r5, 0x0) (async) open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) execveat$auto(r3, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x808) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) 7.105439088s ago: executing program 0 (id=2266): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x6, 0x7) io_uring_setup$auto(0x401, 0x0) shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffb) open(&(0x7f0000000100)='.\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/184, 0xb8) madvise$auto(0x0, 0x2003f2, 0x15) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rt_cache\x00', 0x18b202, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x5d, 0x0) r2 = socket(0xa, 0x1, 0x84) close_range$auto(r2, 0xfffffffffffff000, 0xfff) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) 6.691508403s ago: executing program 0 (id=2269): close_range$auto(0x2, 0x8, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000200)='/dev/usbmon37\x00', 0x640, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x3, 0x8, 0xfff) prctl$auto(0x6, 0x10, 0x0, 0x80000000000000, 0x800000007) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ioctl$auto(0x4000000000000c8, 0x400454cc, 0x6f) r1 = socket(0xa, 0x5, 0x84) getsockopt$auto(r1, 0x84, 0x1f, 0x0, &(0x7f0000000080)=0x49b) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) write$auto(0x3, 0x0, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mbind$auto(0x7fff, 0xb12, 0x200, &(0x7f00000000c0)=0x3, 0x4, 0x2) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x48, r3, 0x1b, 0x70bd25, 0x25dfdbf9, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x14, 0x3, 0x0, 0x1, [@nested={0x10, 0xc, 0x0, 0x1, [@nested={0xc, 0x9, 0x0, 0x1, [@typed={0x8, 0x3b, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}, @OVS_PACKET_ATTR_PROBE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x400c880) write$auto(0x3, 0x0, 0xfffffdef) setresuid$auto(0x0, 0x0, 0xee01) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, 0x0, 0x20002, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0x6b) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100000000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x0, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000000), 0x99a8eb74715c909b, 0x0) 5.722241172s ago: executing program 2 (id=2274): syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000200), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xffffffffffffffff, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101c40, 0x0) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x560a, r1) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) unshare$auto(0x40000080) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = ioctl$auto_TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x400006, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(r1, &(0x7f0000000040)=@vsock, 0x7) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x600347, 0x0) sendmsg$auto_IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffff5, 0x0, 0x1, 0x0, 0x0, 0x60008000}, 0x4080) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x22, &(0x7f0000000000), 0x1) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) setsockopt$auto(r3, 0x6, 0x8, 0x0, 0x10000) getsockopt$auto_SO_PASSSEC(r2, 0x5, 0x22, &(0x7f0000000180)='&@\x00', 0x0) 5.4609528s ago: executing program 1 (id=2275): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram6/queue/max_hw_sectors_kb\x00', 0x80000, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/hugepages-32kB/stats/split\x00', 0x0, 0x0) write$auto_rfkill_fops_core(r1, &(0x7f00000007c0)="cf3691c6", 0x4) (async) r2 = socket(0x10, 0x801, 0x8002) setsockopt$auto(r2, 0x3, 0x4, &(0x7f0000000800)='\xe2\xbd\xa8Y\xfe\xb7\xff\f\b\x97\v\xc5(\v\a\x17h\xc2k\x1f\x8c\x83\xa0M\t\xb9[a`g\xb9B0\xf05 \xce\xfd\xaa\xde\xbc\xfda\x19z\xf5\xcd\xe7\xf2Eb\t\x00\x00\x00\x11\x96\x13\xb1\xfa\xe4\xf0\xd4\xf8\x06\xea\xd0\xe8\x86\xf4\xe7\x86\x0e\x81\x18\n\xdb2\x83\x8f+\x88\xbc\xcc\x8a\x97\xc7\xdd\x9b\x99Wc\xd4\xf9cw#\x1b\x18b\x96\x8afWN\x12\x7f\xcbF!\xed\xf5\xbd\xf0\x90U)\xd5!cHy\xb8\xd3h\xf5\xb8\x11*T\x96\f\xf0\xd0\x94\x8f\x17\x98U~T\x18\xc7t\xee\x1c\x91\xe2\\\xb0\x86|\x02\xbc\xbaTJ6\x82\x97\x04\xeb\xdb\xc9\xa6\x7f\x96`U^X\xec\xba\xe0\xd5\xdd\x17z\x1fN\x95\xba\xee\xd9\xe7\x8c<\xcb\xda,\xc5\xbf f&YB\x99\x99K7\x92\v\xe9\x969\xa5\xf7\xf5b}<\xf6I\x1d\x87\xa3\x1bO\x97\xd8\xc9\xc0\xef\x9eNR\xd5c\xe5\x955\x97TK\xf1[0\fO\t_\x9e\xbe\xdd5\t6:v\xbdy\x8a!h\xe2X\xa9\xb6\xdb\xe3\xaf+\xb8z\x83\x947\x1b\xc6-\xec\xc2S\xee\x8fM\xf8v\xdd\xea\x87\xc5w\xbf\x92S\xe71\x8b#{\xcc3\xc8\xd8\xfd\xc9\xbb \xf6\xefT\v\xde}\x0fC)\xa4\xc7_EUtZ\xf2>T\xc6J\xa7\xe75\xfer\t\bk\x86/\x8f\x01\xfe8\xd3\xdc\xfc\xaa\x97qU\xb0\xabQR\xf3\xc1\x018\xb1I\xb7\xd9\xe3\x97\x89\xe9\x1b\xd9\xb5\xfd1\xcc\x8bW\xfc\x8eP\x8e\xc5g\x10\xa0\x80\x00\xe7\xf0&\x90/\xbf\x05\xa9\xfaDTZ\x15\x97\x13\xcf\xee:x(O\xa3\x052\x8ce\xaeex-\x01|\v|\xd7\xa7\xef\xc3l\x9e{\x94-\xbf\xc5\n\"\xf7\'\x10\xc8<\x8clU\xc4\xaa\xdc\x06\x8b\x1f2w\xdb\xd8\x9d\x17S\xd2w:\xb4\x1d\xbd\x11\xe2h\x9f\x96gy\x82\xc5\x02\xa5\xf7\x0es\xb1\xadtyj&y\xbf\xc0\xfb\xdf/0n\xcaJ2Y\xe3', 0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r3) r4 = syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) sendmsg$auto_TIPC_NL_NET_SET(r3, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRESHEX=r4, @ANYBLOB="01002cbd7000ffdbf1250f000000ebff068008080200b4aa76929eedb7bb9bed50c51a7c59de8931bca62356531bbb6b24f10d569893cf865721131ec201dbe4dd3a47632b372222f5c34bbebe75180c07f5e6d2acea96052c1d513ce068b1516fb30db51122e7086dba786d29d97413208e48031fd86a97fb3ab8067f9c693c137cc0e072d1a606f1346d8b6b53adf707df06", @ANYRESDEC=r1, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x2) (async) openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, &(0x7f0000000080), 0x48040, 0x0) (async) sendmsg$auto_TIPC_NL_BEARER_ADD(r2, &(0x7f0000001980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20044040}, 0x20004000) mmap$auto(0x0, 0x2020409, 0x8000000a, 0xeb1, 0xffffffffffffffff, 0x80000000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) (async) r5 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/card1\x00', 0x101002, 0x0) ioctl$auto(r5, 0x9000643a, 0xc35) (async, rerun: 32) write$auto(0x3, 0x0, 0xfffffdef) (rerun: 32) read$auto(r0, 0x0, 0x40000) (async, rerun: 32) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) (rerun: 32) write$auto(r6, &(0x7f0000000400)='.(\x00', 0xf) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd11/queue/wbt_lat_usec\x00', 0x1c2b02, 0x0) (async) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) (async, rerun: 64) socketpair$auto(0x6, 0x5, 0x3, &(0x7f0000000040)) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x3b, 0xfffffffffffffffe, 0x0, 0xfcd, 0x80) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async, rerun: 32) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x20200, 0x0) (rerun: 32) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) 4.3606034s ago: executing program 1 (id=2277): bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xd, 0xb8, 0x1, 0x1, 0x4, 0xffffffffffffffff, 0xa, "c8c515dc6b36c87ce23f00", 0x0, 0xffffffffffffffff, 0x5, 0x80007, 0x7, 0x6}, 0xf) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) shutdown$auto(0x200000003, 0x2) sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x1c) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/040/001\x00', 0x802, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/smbd_receive_credit_max\x00', 0x641, 0x0) write$auto(0x3, 0x0, 0xfffffdef) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r1, 0x8000) mprotect$auto(0x1000, 0x401000, 0x4) mmap$auto(0xfffffffffffffff7, 0x0, 0x5, 0x10, r1, 0x2) mmap$auto(0x4, 0x3, 0x2, 0x100000000040eb5, 0x602, 0x5dc) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0) connect$auto(0x3, 0x0, 0x50) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) msync$auto(0x110c230000, 0x200001, 0x6) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) 3.95835936s ago: executing program 1 (id=2278): syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000200), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f00000004c0)="c4567d592840b0bd81ce5fdca84838a607bcd37eb3ca164f6ff36b039c048504bcc6ab5e87953324a163168ef01f8a67f1f8e4cbd3e61e68ee60447e124450c979950d", 0x3, 0x0, 0x9, 0x0, 0x1f, 0xe}, 0x800009}, 0x5, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendto$auto(0x3, 0x0, 0xfffffffffffffff8, 0x103, 0x0, 0x1c) ioctl$auto(0x3, 0x541b, 0x38) mmap$auto(0x0, 0x100, 0xdf, 0x9b72, r0, 0x8000) syslog$auto(0x3, 0x0, 0x5) lseek$auto(r0, 0x1a, 0x2) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/nbd6/queue/iosched/prio_aging_expire\x00', 0x88282, 0x0) sendfile$auto(r1, r1, 0x0, 0x1) syz_clone3(&(0x7f0000000340)={0x100400, 0x0, 0x0, &(0x7f0000000100), {0x11}, &(0x7f0000000180)=""/2, 0x2, &(0x7f0000000240)=""/161, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x3}, 0x58) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000003c0), r2) sendmsg$auto_KSMBD_EVENT_LOGIN_REQUEST(r0, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r3, 0x4, 0x70bd29, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000840) close_range$auto(0x2, 0x8, 0x204) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket(0x26, 0x80805, 0x0) mmap$auto(0x0, 0x400008, 0xdb, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x11, 0x0, 0x8) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x2000, 0x0) io_uring_setup$auto(0x6, 0x0) select$auto(0x10, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000040001fd, 0x2, 0x4, 0x8, 0x9dc, 0x200000006, 0x101, 0x10004, 0x5, 0x3, 0x5, 0x2, 0x80000000, 0x9, 0xffffdfffffffff81, 0x5]}, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000000)) ioctl$auto_SNDCTL_DSP_STEREO(r4, 0xc0045003, 0x0) 3.824910674s ago: executing program 3 (id=2279): socket(0xa, 0x3, 0xff) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) syz_clone3(&(0x7f0000000280)={0x100b8ba00, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='V'], 0x1ac}}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfffffffc, &(0x7f0000000100)={0x0, 0xfbe}, 0x8, 0x0, 0x8, 0x1}, 0x3}, 0xc, 0x4008) shutdown$auto(0x200000003, 0x2) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) r1 = pidfd_open$auto(0x1, 0x0) setns(r1, 0x60020000) mmap$auto(0x0, 0x2, 0xdf, 0xeb1, 0x401, 0x8000) mount_setattr$auto(0x5, 0x0, 0x0, &(0x7f0000000640)={0x1, 0x9, 0x80000}, 0x283) 3.619152065s ago: executing program 3 (id=2280): r0 = socket(0xa, 0x1, 0x84) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) r1 = open(&(0x7f0000000100)='./file0\x00', 0x169443, 0x64) r2 = openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/netdevsim/netdevsim7/psample/enable\x00', 0x0, 0x0) close_range$auto(r2, r2, 0x401) mmap$auto(0xfffffffffffffff8, 0x400007, 0xdb, 0x15, 0x7, 0x800007ffc) r3 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_DISABLE(r3, 0x40045506, 0x0) r4 = socket(0xa, 0x1, 0x84) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, 0x0, 0x420800, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x5) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-0/xps_cpus\x00', 0x10b062, 0x0) write$auto(r5, &(0x7f0000000400)='3\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x9b\xcf\x1a@4\x1d>\x9b\xb8\xe7\t\x88\xe0\x85\xee\x1a\a-T\xf8\xcfHx|j\xa0\n\xc7q\x93\x8e\bOp\xd8\x05\x94\xb77\x8d.\xb3t\xbd\x15\xfdR\xfd3\xa0\xe4\xecz8\x1a\xa1V8\xa4\xe3O\xc8w|\xd4\x7f\xea\xa2X\x86\xa0\xec\xd7\x91\xb1B\xcdd9\x1a[\x96\xf7=\x9aU\xeb\r\xb5\x8e\x8b\xaeq\xa12\xc9\\\xb2\xd5\xfd\xf5\xfb\x88R\xa7\xb5\xfd\xe3\xf9\x10\xf2f\xe7\t}\xe61\xcb\x14\x88\xa2\x0f\xfa\xb5T%\xc6 \\\xa3\xa1\x10@y\xbd\x16\xe1\xdfh\xee\xde\xaa\xa2U\xd7\xf4\xa8\xd6\xc1\xe0X\x8f{m\'(\xfb\xab\x8bXW\x9a>Hg\\\xcb\xa3T\x9a%\x1e\x92|a\x9f\xbc\xe4\xd0\xa7\xeb\xb1\xe6\x8e\xae\x02\x964q#u\x8c\x19\x17\xeb\xfc\x16\xab\xb7\b_\xdfh\r\f\xa8/N\xc6\f\xef\xda\xaay\xf8fm\f\xabH\x9f\f\xd1\xc2fZ8\xcd\xb61\xcd\xd8\xcc|p:7\x15\xb2\xcb\xf5\x13\xcc\xb6\x97\x18=[\x8a\x920x0}) (async, rerun: 32) shmctl$auto_IPC_SET(0x90, 0x1, &(0x7f00000008c0)={{0x9, 0x0, 0xee00, 0x401, 0x7fff, 0xd, 0xfff}, 0x7, 0x8, 0x3, 0x3, @inferred, @inferred=0xffffffffffffffff, 0x8bd, 0x0, &(0x7f00000007c0)="fb15511347d50a15f30fe5fdb3c4beb139c8b11705babd6768f284d3cf38e1b7c177149e28411c51945932949b9073fa95e9b27a921fb2624a93e037005d", &(0x7f0000000800)="8aab988724cde1a530631a16a62adff2f41b853f820c3b62ea3e99b8495d6897d70ec5a48973aaf9688782a0d06a2b7a3683066b917ce48cff6cdafc0cc02e22f5c7d63cc8d17e6f249fe14707253e7c7e7d918cc3e60a656e81c6178687c4449438626e71fdb5b1902e80f17ee03b0ca0b8af66e45f520c5c5b986dff7b570d1e65540cabde1dc81493e4edd083d3ecf4ad7519da790fcaa498"}) (rerun: 32) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000001b80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b40)={&(0x7f0000000940)={0x11ec, r3, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x2}]}, @ETHTOOL_A_CABLE_TEST_TDR_CFG={0x14, 0x2, 0x0, 0x1, [@typed={0x8, 0xb8, 0x0, 0x0, @pid}, @typed={0x8, 0xb0, 0x0, 0x0, @uid=0xee00}]}, @ETHTOOL_A_CABLE_TEST_TDR_CFG={0x1185, 0x2, 0x0, 0x1, [@nested={0x14, 0xc1, 0x0, 0x1, [@typed={0x8, 0xe0, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0xe2, 0x0, 0x0, @ipv4=@broadcast}]}, @typed={0x8, 0x124, 0x0, 0x0, @u32=0x81}, @generic="0a161cfb2293b83e99c4083890967ed5b51a9001ec816d7d63791c096eed628a69a3763dedfebefea331e9c70789d2d12804a965928eba40e5bc2bb76b80b1210f1ab2ca101021b797ae80a8daf28eedb1ef7544f07b7c7d9adeec4b62550cd12570092bd8a15c77c69c332893d404be08961c9b36e47e5b66b2b740e34a4843bc", @nested={0x8, 0x9e, 0x0, 0x1, [@nested={0x4, 0x140}]}, @typed={0x4, 0xf7}, @nested={0xd8, 0x7b, 0x0, 0x1, [@generic="6bc6fab8a165a117452b28cfdeefc87493059d820699b23da8d60dcc8e84a8bb2b04aeaf765a4d0e1d4fdc8a9117d5058b2c875951843ef357ce147a48937c16e214d43a38b312446a00c6b4015801d03cee87252f6bc430bde54e521797cdd744b5d8d45f34cd2175258e379c6808f708f15e04133d38a2c049f69c935a69f537d2d18c287eb1851d3100b09a537f4bc7b3a4eb58a30f71d13fbabeba6274020b29096d603544eee612b70dcc79638200599a230da83b25", @typed={0x8, 0xc7, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x168, 0x0, 0x0, @uid=r5}, @typed={0xc, 0x42, 0x0, 0x0, @u64=0x8}]}, @generic="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"]}]}, 0x11ec}, 0x1, 0x0, 0x0, 0x10}, 0x20000801) (async) sync_file_range$auto(r0, 0x100000000, 0x81, 0x6) r7 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000001c00), r0) sendmsg$auto_BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x40, r7, 0x301, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_LOG_LEVEL={0x8, 0x36, 0x1}, @BATADV_ATTR_HARD_IFNAME={0x14, 0x7, 'dvmrp1\x00'}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_DAT_CACHE_IP4ADDRESS={0x8, 0x23, @private=0xa010102}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4018) (async) ioctl$auto_UI_SET_SWBIT(r0, 0x4004556d, &(0x7f0000001d00)) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r9 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000001d80), r0) (rerun: 32) sendmsg$auto_GTP_CMD_NEWPDP(r8, &(0x7f0000001e40)={&(0x7f0000001d40), 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x1c, r9, 0x100, 0x70bd29, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80c0}, 0x10) (async) r10 = timerfd_create$auto_CLOCK_MONOTONIC(0x1, 0x40) ioctl$auto_PPPIOCSDEBUG(r10, 0x40047440, &(0x7f0000001e80)=0x2) (async) r11 = accept4$auto(r10, &(0x7f0000001ec0)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x2}, &(0x7f0000001f00)=0x2, 0x72) r12 = bpf$auto(0x8, &(0x7f0000001f40)=@bpf_attr_4={0xc11, r11, 0x9d, r10}, 0x7) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_VDPA_CMD_DEV_ATTR_SET(r15, &(0x7f00000020c0)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@VDPA_ATTR_MGMTDEV_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @VDPA_ATTR_DEV_QUEUE_INDEX={0x8, 0x11, 0xf}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x2008055) (async, rerun: 64) getdents$auto(r12, &(0x7f0000002100)={0x100000000, 0xb, 0x41, "a8e226a4de6fb114c37fe4d3c70a73ccb720548f3ba7c363cd1886608d479c20e0c4f2f21d67bc6ccb54fc33ca321eb9d8681f4fe7c348efe478234325b846476a68c872566f3f9162ae377f0e2562733a7917e9bc09aafd53d4af41af7ff99c94b749117536f660bf4eec31c79c236adc835720c1b34fc6765612616508a3d8d692c1842609e37c3129a8f8203259d23ce4a216abb79aa91f8fcf6664c290264e95a813415b9542a4c73e87fe21741ad70890f1068de9157c9a79005c60e805a07689ecb7e87c7c9935ef0d83f9d925ccd2ebef"}, 0x9) (rerun: 64) ioctl$auto_BTRFS_IOC_SNAP_CREATE_V2(r13, 0x50009417, &(0x7f0000002280)={@raw=0x800000000000000, 0x7, 0xb677, @btrfs_ioctl_vol_args_v2_3_0={0x10001, &(0x7f0000002200)={0x3a3, 0x0, 0x7f, 0x8, {0x0, 0x3, 0x73, 0x5, 0x8000}, [0x8, 0x5, 0x80000001]}}, @name="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"}) (async) r16 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000032c0), r8) sendmsg$auto_NL802154_CMD_TRIGGER_SCAN(r10, &(0x7f00000035c0)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003580)={&(0x7f0000003300)={0x254, r16, 0x501, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x131, 0x2f, 0x0, 0x1, [@typed={0x8, 0x13b, 0x0, 0x0, @ipv4=@multicast1}, @nested={0xc, 0x17, 0x0, 0x1, [@nested={0x4, 0x8f}, @nested={0x4, 0x162}]}, @typed={0xc, 0xab, 0x0, 0x0, @u64=0x4}, @generic="bd2a4c796501f5d6370ac9ded7e2c77dfdc44ecb84c73eb9aaae2885845f500f53e89401178e583b97f1cb88187a2c2b368c575f90b9d08955a10bb4961d054464322efcbc934fe977e419a002e94df3f1c2e910be8340245db4b706e8af492551f38339993a52366d7f4d9bd6654cd158d215d7f69fcac229c987ffa26871c9a5ce2180277ea260d463bfd0189a2781ec94c480d8da98a41e537e1307b27532b738677b3ef51b3b21b84df1eeeb3f151518e6425d7ed29e9a8d72096da6f2faa82876d40a", @typed={0x48, 0xd, 0x0, 0x0, @binary="d3f40bfeeea40e6104f3b29e9d6beefd30c81c8e4cb323eb1bf0964922ef68a1ad3f62f46eb0668370faa77f4eadccc0674af6932c46ac0e67822be733a29f85a5da8074"}]}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x9}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xdd, 0x2b, 0x0, 0x1, [@generic="5cfa6a3f8a1c7fa36e1f", @generic="169663646324bde723ba0406428b41358087969fe451a406ab9ae14af247bcb36f2cf4d1226995f6d7d7f2dde898ba8905268702c4a3b137e1c5cbb46c45764e0d3cca98d098f45c3dc6bdb5a00f308771517afdc9c59aed6ef62bd2e618c121b8ea7104e89747b8953dcc631d382f4a12d86562a26761a369ac5bf70b40c7f0a4cfa340ba79f618f5e2bff5862be5a9d804a3a2b5b77f15edf3facc65158acbe37cb88ec0a9d80a50f836479cbeb177d9ac8c5e79144983a6726078e3ac4bd2d1cc51cc0458cb50beea5ca3507c80"]}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xe}, @NL802154_ATTR_WPAN_PHY_CAPS={0xc, 0x18, 0x0, 0x1, [@typed={0x8, 0xf4, 0x0, 0x0, @uid=r5}]}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1000}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x7}]}, 0x254}, 0x1, 0x0, 0x0, 0x8011}, 0x0) (async) userfaultfd$auto(0x9) pwritev$auto(r13, &(0x7f0000004600)={&(0x7f0000003600)="74ceb99f6fdbade6850dcd6541ac73cc36bb4016db0855da77669c950630c2637c74b8f3e8eb2d6790172b2103536ad14f848bfb6f361846bedd4c3a5a7bccb1e8ba7e8ac055df223f0895198ac0571e678b19f58048ffc30089df21daae3ac791ef5a2f904d5941bca078cf65cb7e3e7fb75564c37133370af2621f18622368a822ea1fb8333082314fb344317dcd935d8a59e892301c13c710c6e78dedbda6bd3faa2a72b86862c2e809552e712950f6de3f8e270368bce428a7fc7b80397fd59719685796c4bb7266fd6dd5f25bb893d61572c17abe5a14dc37b6018d8075429d0c31b80cec78f9d3dbe0bf311532aa393f9228208ad830675acc05399135cccc3fe90f818791000849cc519a2bd47dfa1762e609d6bc7394182a5facecfee9b65faf352ac725f10dca01f92aeda9863779bf35742c62e718aecb0655f8707de965d6eeb6f3ccb6ebd21d5cc411c389c0ad5c73580f6928669098dd2e718e002d57ce62c6bf4ed13d5377f272a2960458ac10d0a07ee0b30e1a75982b656cad75e3284bdb3355eff5636607b0aadcfee5ef4e3df0637b950ab516e799df70fd09e650f4d2f80db896b407a207e3d69b9ffe9fb09e9d113bc78cab0ae6f13e3de9d80bf33c8d33a061e136bd245843d0cdce600415473c951ef35be6ea3cde5f06368e566ec6902be02e03ba5a59d1342dfaaf82348c77037c63b27c9c1d86ca45669ad26e30a8ec02af35ed002d5308f050e0a2cc05497f0cd947756b9196fcf28cca04b2d1ffd03d79b5148bcc9aa179c02c39bab5ea9a4e5c006fac85791c58f84f527a774d0fa5b6643054ee210fe1520cdd0a4b29e6270e9d2589f78691435f1c38203f9577f6ccd24551faa74a414333d6b7a136b46ed259a8b4d51f0bbc4b95fbfd080ff8de301ec902fcb4f03971525e6322f1333b2fbee2d46293977d70afa41d13a3842a2340d63eb747fc16fe6799f496f89797b88eb5dcce75c5f6cf8fed0adf5ab1b396f177892570f6934d9c7d277498260280fa99e18d0166bbed86943598798c496325d9b47e9969b8efc8bf73828da1f2c7bcf178001611df576c67ea964f5f0cd19224a5ec136509d48d9d3a2b14d194fe2ab5267f03ea2258a777678878b07c7aaf3ad124256c11654e45c20de5dc07f37b4395010f37adab78382532aebd752f1b3185de2fb35beb2170dc53a7b46972bb9ec28abbed4fca628d649c4b322ff45f38515e7481a9a546250fddb2298f202c7f314fe35daaf0795d9edc92447e6fcc84955e5c56857c8109285fef27a6a93673c172799e560f5f095230d9dc05598c82f397eb5344dae408b3863b0a15c3016e47cdb77453e4602e58426835eb0eaa015873d2cd72069f306ceb9268cb292e1dddf5d2e5d9bb9977b07c648e8a6888aa44bd8ce7560a2a77f8b02d83415f4bbeb8247ba25008e39bb7813a2455fa6ac3d44e9cb5107e080a05fbd116ecb8dc7915e32afd3d15c8ca2b6ecb75b2cbbc4f0e6a4fd0b9835dbdbfa31d96a3d8609a76b0832ca2a0bbbc0b5339c50a0baed59c67353c315c2dacc59d362b2128acb84f0ca8751af5be90a08540aa649e5fbbcc1593ac3e306d2e93ae1b580c7769cbc9e75a670d73a9f9f70eadefa34535b84ccbf05c1ed62a33138877e1a17fdf780a0f7ab54fd4cefb81756f95dd0bda8b62e3825bf162ec6a547c1600eaa27f16797a292eb36012044749fd32d7e7085268ef18f8b787bb18cf8ff7d60845b75fd7777e8f1907019d387be37099e9f2311a92e60b572b19fd9aa1b0a0be484a5c0dd754095705ae488a9c3458a681368976ff2192a0b7a1d731af18d1dce4af47914a139285a06c12ea60ad85acdd30659e86d9bd4bda93ef3fc395cdf6ac649ddd0fd00bbd3f179355382f67fac9b214180f193b1b6b5f2f3e99f52b8dc7fc26d6b27814939ec4174314fd43fcb44d51a56271b249a893f9bbb457d5a98e54863acf00b504e5a7d4b60b5e98d2bbb13aefef546ccc5bb86c06dcebb5e31e88cbb95b039e07960f5066c245ed11bdb064563ac3d6a17044ab4f282ad80898a99c151ed1d12653f05106a0ae45f449dad075eefbd2d3fa8622e2f9728d53036739a14b4dc2e931e459f561d37646d4c94dbd33ce030c9a112afc28a2891acf5db3a494303c1bb6356b2d737eb5f94aca3ef3f82b98e33b0e62cfc6a64a1ba8f07d572e74757701e6fa1a99e503e086e508ba6418869925d0d8fd7cc979aedbfb0e5b716bb378e451446ca3521f357e57a85b69f62615e8b7104383bb71c645876b3994b26a43ff0616b078bd4b25f78ad074726888939ba9ca13152ae9fbd92d6235cf60aec81273be68862a09a065dd62f08aa0b93862a26678d4a20271335627ea721bf70d8818c3c03fa1f6c091f42433ee9734fb3443d4ed9ced6715bd75ff70ffafddcb6000e4318fd28e77675375b2a8ca0f02938284ff22f9babd5e14a4b8cf5608457df37d3090e916d389bbb30492a86b981464f8e16c4274f5264dd35c37e91dd8da9692a06cbe8095f45ac09626ef229f07218ae843746857786144b81c27dff9f64055abcdf97e3123fa586c6f272bfc3219b5891270ee4897e5bc8039f4318d9bc20954e1ed6263a10c15a0417dc2df92e1ece61c4310677fda6580b0734e2cc33142ac78db62f3fccffd6b5b265321e5d738c6c84a992fd53f1b1b8805ed2800ae932ac09ad7c62c3ecce80f8cab885c01b282fd5320b60403ba72c1965ef950f5f89fa83b9dcb24486e3704ae36626cb8565db56b2ebdbcb7cad7ac032ad3c04c86e8eadfea1b620f1a62e1b2f9865e59bc9988647b1dccee8e45b35dcff4a968398f5ebbcb766e9904930c3c2264fee9f9591c45cc355b54750e0731b002a864cbba27595431a68ba30d200d8b8e1d86e5bbca45c6193e916fde67f815758f59272b968969b23249d633b3effbd98018224e1e5a4c81985d9ca4ba32105ce18b0e175c88b7c312e4a3f04e3d00cb9ec5bf32f76b0831c154b0a9d17d987914fd0e6064d13d5a32bece5eab4857893a26000853c2f60ae37a262bdfd09d5408e0f1d2abcc2a2015def980340e9e12f9d8ac10f33a49b2c23a993e54c2048fdaa06e55d41d899e0ead5e2469e8ab46b061397b5a1902e3538f8202ea6ef235698368ce1a009126478d2c3d3f3596c67c8a5f9b12d3dbc348c544eac2907b0bf91dc242c39205e1fb2fde19e56d96319710e10e32612cffcd968477ae0349ab7cc2a939fb12055d29808864a53c2ce5467c5267a78e6f11a6a5fba3bdfed9eb8f02b7758d59bc2e6db44418a976faa9f813594a245146c7c7d701a689bc3578ccfd49b237352dd53d4b622e4d26cb25c1d96d7a5ad07edd10e641dada6b16db6131652bf07700fd8c81ebd799f31da09a9ee652d4cd29b5bc7776eb858b424dc990d2cd02d1f41a053ce796520bcdcf6dbd6904439a15c206d25e3374659c39d5032d8dfe559deabfd7dbdbbb17a19671c7868a99e4850979732e0e97b7156f78f20db257bd0cffb250fbdd283d90d70da1493119b330666563a8b4422d5e96740fb52036e99a080215ae54766e19d70dac9fc096e34809e4b6a29faf4366e62790af8949cf2c51473bce8925e566b563d21f5fa52acfc115f4573467d010ed31cd643c4792a9d220c108dd56b78438454b9b40d90977891cfbfaf776786ba41231a3b705f0c8b560cb6a0ee2ac203362c65766f7046a892ab35a6a60fd2873898c9494d4ae022468b4f361e865f9336147ec3070b6903f8efc5f53d0af69acf9c2ca7cdc3d7f5cff93ab29da8064c266ecdef1274e538d78a1e0a1c86368ae5b7cd5c58cfa5d28a6a9c2ac7074313bfe943524f806875e3f6f81ad585490b6947f27ea5cd63fb7c748d1da57ee414f9578fb61754ec8f079d97cdaaec69298b7fe74f5fe43d446445fe3ddc3e040576f2020a95a7f9c5c439c5302167bfef4777b0174dd1f8256b743da0b885b8a1747600c0aa24cb27fe0c93eb8f7171bcf39cca139603650174f41319769fe978c789168770f2355f29765abcb6ed1c27e55088d5ed2deeb72b8fa15df650caa03b4f33fd61831ef954be54219112b579cf50b005278fd62930ab21700a78ce26fefdbf43c2343bfa9ca6457b15fc151883519bc7a892de4fdf4d31409cacb5862c0520ceece23054733003934e60ff931c0b09e1626552391d9dad02ec793882988c8f72f960bd86d0ee8839c17874f936c63bf269bf90313e02a471aa176f52b557ad2fcb7868cfc2f3d335765993c0adf6745fd336a68cd2c606fcfe67b95ff562103b78f1305da18a29357425f1a155b9cad1efef8695b341e770f1ab8126fbcfd069b586228fcc9e55171c39dca020a551263c7af4b65d0dba666f588ef287182fdbaed909cb67bf8f674c4c7950b9c2eb29f61aa2b570846b9223988a8d02af4c823421ae8cf285a9ac523cbf3d294647c89a6458236d0196e68fe77e1ba6f156ba57d48bf778861e67ed0b77a143c53183ccecd15e06ad242ad68e4f996d3d059968301b600f9eecb8a82366f6a93640a11de96d865139e0e1be006435bf71716961a91df4e453445302cf00712b61c5dcbdd992f4021014a6b0211bab1da589330dc2c399210407e17c90b22eeed1ff7af3937e28b8fda670ed8c95ca3f6be596d4c87f7e16f0d0238324e2af17c2be78fb2ed3bac83da4e04cc749a18a990c1a6258657a9cbb5ccd063ab6fa7efe3e86271981aef449bc0a95f04ed607a05b788b1909fc43e4db6542c8721a727e678fcfec1d6e1165ed5ba54041f042cbcd70d1efd066ef45b48d09e377d1f4b2c69a543c571a01203662220ade33b33a06e1fd559c563ff0fd2667f19471a86114ecbdbce5f0eb9b9f9507d6744f2a6a5cb285f23c0ad45169eb17e2b624f9e612f2c756e736ffb0fce30972d3a245ed33a2343cd2c244a56b7204637a33867f86a8f937c25e9005c34ecbd0e5ff6eeab58810f9d42f9a579b2a92d5399f0ca97d21d5dc12a2d65244949e2226de341f90dc6d23f7f168bc80e4d1ed1fa1c5395d57fc37019d1bb3f3bc9ccbb78b2ba735a7e9a8a5b49950677668b1c07077c68b65da0289a37d312d06d4658d6c422c1e0a0e9fd94492d78f225439c0fcdc8c003ebf21a5ecb24ae1c9cd0c28778c82a9d080f049cef84a9b6181a6f197aa1dadbd50588583a8d6b6a6388b1a7391d52c7c2076bc23b86647529c0ebb0ed90450436ce20be963fa675c7ee6e42b99d84cb3c5b7884da06af2ebd181273e02058442cd28a7bc8f3fe39d83a27fb8c44678572475e3e9cca96d5f2fc8affce89da5de069c603fd3eb9beb59828f2134dd29de7d753f4ad4be7db04a337239c4a06e7264e257dadcce7271b8e27ea6dc0242d561f14c2241c31afcb7f528d01474b0aec5caba592b49ae3ef54612cf2336a2cef10a2be5e05006f67bad3ce2fcf173f3817caca7d4bdf72797745cde26010999389dabbaa77522999786847c3e31a711ad8cc8824249586caef9f3f068c212d4f72e9fbcdd826e64feafab304a3afba4ff54bb01fcad2ae838cb487c30b6281005c5d3124f0593bce0ef759961d05b5385a225a06d6460ed42ead4b2bf348cdb5c66de4fde3f5fba24f1015699f1580cafe32599b39dc6a83c237179f9df8656329d9f96f233cced810b74747b9ad0cc837b8ff51a030b9f6a0dfc5326ff7fa32392f29030c101f3dcfe04279249c9d79b53761ad674438586ce82ac941152e464a0ed2c3c46b99a546f0", 0x401}, 0x6, 0x51b3, 0x8) r17 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000004680), r14) sendmsg$auto_TIPC_NL_BEARER_SET(r0, &(0x7f0000005ac0)={&(0x7f0000004640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000005a80)={&(0x7f0000004700)={0x137c, r17, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x1179, 0x5, 0x0, 0x1, [@nested={0x102c, 0x107, 0x0, 0x1, [@typed={0xd, 0x134, 0x0, 0x0, @str='macvtap0\x00'}, @typed={0x1004, 0x15a, 0x0, 0x0, @binary="c0c68127e4bc7c58fea69e36ef6b887fc96c51703d7a13ebf733c0d0243909abff92cb65d788de943d1e90ce9a22dd45eff484f2dcb1b87979cd6aeb821487db8e9f578ab7f16499806f1433f9f485b6155a79e150cd5678732dc853f8c569aa82d80eac1299e0fef0d9f9f13a11685d9502506ae0c84b21864100d1c6d7c6c1fe43d3cd417dbaf054629801042f4d5408dd5ed0f88800c63262d814be860ea9a62153521a0be7668886d11360e3d7a6963e916499b613c2c14fe774540790571d1917c7b77ff6bda7894d0a17d824527e8c1a5f49e793d4c7de3deffee996aed0223706c9dceffdc851b2937debc1b87c7bab85d9927c85b737451fa4cee12598bbb17f6d761c14c55549fbe4a00d57605a3fea6ea8a096c9187e6abf13901d05935bf0b04306341847a6a9ccf11130924f7dc619db2c8d4e8c14dc7fb9ecb0f3738139799fbc1bfb7929c81ca604e0165dad4fe34d0f6a4eb9ca368e00caccc4ea88272c7bc19e4629f33638f6a85fa525281ec17b38f67fbad82c4bd64b44c718c5878280664386e96bd9cb36fb0290d7538a14883767fd1c9a510055d07e0dfe7d3e962af8f8c0659c073ec1921fc8e4f13395932f8404013c08750e4a1cdeefab798f63f828f00899f64617cbfcf0c360083e414ee70e4a4fe08ed50b10b4c485d4d735bc16441598c6bfeed10269fa4930a05dc78ef788bde81f3ca6fba5a9f1c54f956ca41e050d9fe314c5e0ae3989c3b505ef4f42bba9fd03056fcef36d162537f76592770d71d54dd3ffc300aa2f45ab43df68d60906326583fe2521445ae07387532bbba3666572c5e02eea2d1215f57dcb7edb1ca3205d22ddc5a79884920b60a50d10ecf0b9a217809438155bc6a24067b8d206fa187042a1a8f1718affa79f1075140f89734e281b3b394b0aa1393afae011f1d4eded521189a2e8610b7c7821b7d711509445860be5d987e0cd0beca26c2589b895cda76b14f7d69003cc7691205efef3771add6bdf1e2e5a8c42db857e6af1d960cd0cd9ca3fc390a185f931a249a74b5310dc2914ed12957d5dd8fbef791c2a564cce977824bd4d633b87c45014c99b1ecbf7e23d39360e8b7c62572ef3067961a6746ce2fac6014142acc397d98fc6c0d52857ed5b0ecd600ccbcc2d70b4fc6fbfe482d0e538b0f9219b40a7b9889d841e263c7ba0ccca3372ef0c0a6201c20b3453eb78e99bac7f8c119290d3241887c06b7a3d1fe783f33aacf66f258f57afcd3234852793050b09a97580ff78b0c60a817234f86f37a3dbd42d5e0228ec092d3ad90faeba858440f656f55a3bb9f194f23328e74f3745588be37071a147df951052d0cf62ae0c49cc8be99519c0f08b7607113920f5517f056c10db362a3e4d662233f7e4b6dc0ca91e0b67d5caa596c80f69a1934ea52abd612fbfe4f94ca9e05a36136a512ba756d1bc5415246818dfee5f5c16f0e3f76b0cc85151d2112d1514c12ce5af9dee758b48368dfcc07972705da65ace3f829093d2e1286f5495e1380cb2e1e3a495c9e11043087abc5e91e6ecca2f685056e929382f7770bdc1c421e225919219c8df942b1070a0a620f93499b2735e62857c61d44b7d221c8c303a6daa360cbaeb9f3e6e7c9664a482cdf5353057d8b14ee8114b8906ab154a08a79479524faa2b2fffe901698e5ece0d69c33cc0cf7a020c753112fd5b171471b7dbc06ce243a5fe98f45d615beaf615a48ae52a28504db1855def903230332d1ef982c4209cf18f7b802064a9796769a15b7f0285f017078930fd3cc3b8f7a752b151029eca1d4c7438400f783ed2b5c534bef3385c184ac2f7460cabf10f83f3e636ec19bd59898b6ac645c8edee99f533ef8672f27873f3f63910eecacd523cb02137fc5438b433dd7a2d7c7f30bff5251f475e407d91b85a2d6d5fc78bf5090ba91893a4d81a393d02cb963bb4a4015b19331d0f7c200d88318ad2461a8cdc2e60b3b4a10e49133a63123ef844e41e957c77961985b8ccae2279062488059ddb6ee150fa4c8f90cad3278ac93c868448604385c299373961ebc474c2b2ba86525fe9405c8c949c49562a841c838eaed6c244601cef9c6ebe83b410281c2b9bcc1deb3531f9c23184d69f563cb2a5611668b968fb701fee7da90c6dd6b440784f150486c6e66dfce36bb72e57aa2bd03a018948f75601bce6d988ee0e4f258595966c008229a433581006fd376716942d062b3e99c2c59a66a1f083165310cded17a6637e9b977f5bcb04b58492ddbcdd4370dc261199e3f2c2737a25608bf60890707306964e4e0c7051d577a67955662199fb8a0fe5e28b8fd4dcc351c8652e41c9d10b84086943152e4b4bb98ae982882ef33731a21bf463d366d4d97df0d0765f1c2be366c90fb79d3665b56ff1680ad732a7e375c7c04243e44c8e5e69a9d9f35d4ea12d634ad28b6a94bbe65338c6be4bc6d8ee68e8c67946114cbdfc590ccefe4cbb2e0aea54e85993f51261cb24f69d841a0a0ebb8a82b5a0455939da69b863932a7009f0e7386b3ce31d04b510e57f88d25c9f0ee1c7cf42c8620691a6e3cdedf6eef519483572e523f3af6bbfbebc4d33ae0123e843363064860f17f226c730293d46bacb4b6aeb7ff46c4cef9c967a8524c77c988ebdad2ce58e0ee0e23afa7386d224023ab14cda25bfb4fbc9cc8b51594594191b43e5fa9a608b533b5655149b50a9d057c2cb5d46fc55b5b3bb4a7f78fea35404f8189df53b0bba84822ceb65809522df539793cea30f17d5a09abd9bc0f67d1664c15bbf7b9a809e7b0ac11db3ca8bd87f99f08fb982dcf702d96fafb595d4a4d285219814b4ec7a5f5a10eb28ccfa05718bf66a5278d1a3e8840488dc2d635b0ce19892edcfad75f0e913aad5e1e2154cf127c9a19a1eee7afdcb64d2f4b55bfb1df66970639e51410c1c6ea5f53965e352d07738c8d506ffbd8a64ac78ce595d8f10bec0cd57f5f0b6106533d8c23e7fe8d6c69d78d05a21384f17bbf0c738211e2cf744815175627ce782083333c6e568d8fd1f909728da91fb2f6cacacf048017260ba5620fb4bf62f84b1569b1752aafc8fc866b791d4181bae01f19a546d15dc2a3313fb183256e1fed3c9a709898bf55ad37f7b97ab94c6cf5742099c05b3228ad7337f8adb37e80ba83148528d0b3bb0259c337c298bf0a4a8439f689cd06256befb4cae0286e1d8f2cbc31ff08b100b1a9de2dfb191fd2ce08b9f61d94a09e73bc9d7eecfcbebcd9894ca99c0c15189faf8a7df1cd45fdb6a1725c761da4f90727b8e7b3d1c2a2eaea4801ff0b7034aa23622ea1819fa85576c6f8077300fccd14597d452bbeb944f016027ec53a1718ae4c3f4790bc11e20bd5b77dfc44210a0063034ed4ca85907a2283275053b30ac5466d1fe35d88790e9fa0208aecadf8ec5736516d180f049b4e11fd56cf521cb7a14dd497fa531a89999d247b7300ca6ba8c7ec2fe566169cd3c0440ed0a487622af9192b87aa97b6b5865b7b6708468b361b6911e1a98f3597dbbe9dfd8e23ed3fd4c162d902ea0c24c8b3788a69b3c78d78ad13d26404d799b6134f9165eab73ae07f881fedf7b46cfbc388d814b16d522650b9df67dc2026bf2f86d19acf6529e77888c67acc415ab2f5b1b80cc247b9622eaddf113a5f6f0a560526a09134f729055accbe0c3824952a5114f17fe8eb08145280522515171e00b6d9b6144a2e980585744c8c1b25d6d0985e68f403759b4de8cb6960003d3a769068de4abbff5aa31b8b07a4dbcfe234f6b6fab944ba6a8dd1ba47e7dc94fde55d92503a763cc7322a0362d69170e3eaee62ab5ef226f059359e4d80a6ad819ba1e7dce847714aeb71215125131055e226ce44ecac898120e7a3a83ddaf323ecd8fb39014ffdc3c478d4e87449f4ac6bc5b4093385fcf484345b141853bd99f3634186e02f30aaca3ecec2831e7ce097710234971a68ce05eda80d2a9235059472ee754ca916ccdf9d16c4ec0cb9e70a51af8f1df76dd7aae719710dd0c68393b96cca66958f8c0aeda829a56455f8c75c2a828045ffd75173684beac86a239deb51d6ab5e06d62134254e5aef0b24b2a1454d62b1c90b84c4324dd5c8c4c1e2e5a0fe087e81676883e6821ae26ca3581b897005f393a32c75ce65f1fcddceeda53b611e1b635bec2d7a0fbeaec49c60f64a5f6493f371f2f0d35852fca3efa915057b59ab217e9105577049665e2b7defd2e1ed4b4ab02fb606b1db47a637b635d9d91a331999747e601cb6cd8b23aec976f41568864f20ec77e983c25be2032b17c0c0d4d3c18c8e8775adb1e0d21566640bf298f72ccaafa4e55f56eeb0ef682599a6c21371f98d884fc3e0188070fb8b250082c47feec136a5fa83d8687507efc36c4dcc3f3a73e9f37d22a979fc1e132091f41e2c9fdd41acf13f2a693858c20539cb267f5f7161600057c42dac65f01333fd74679ff09c016e819e3abb944c14b29ca931944b3efe8f207bca73aaf27335c1e0b01547a510d179ecb2a87ecc1ab4fd2c990de933caae168208200296bb5a092387ae7c7faf14d5bcc5534aac6ea9932bf8f7674d5f7388c37478077df98ecf467f576c7ec7708690c4bbe6ce1daddc95fdcbaacdbb9dab29eb3e7d20832dc4ad976b2ec647e95bbb70713129b16a422fc879344f5e8af4a646d065d666c2f7d52d071acc181c4b438c83fd435c4373d3e2adfc00ca087fbcc0e7adad1236205344599d35c61ab703f5597c248c74fe4688f8c3b9aaefef20342e2901235959325073959802572abc9cdd3da5034fd29ed86b6eafc4cb7e1fb1ea3a9d692fa2893c5cf77e9c02356d58a08aeb4cbc5aca53f4b6c5881e1868989c5b135a1c20645428adcc4ccf55a40f73e0756918c54deb9dbd615a852762a41ed3014c50b4c47e1c76351e83184a1fe381d9420960ef44bbd3bada9e200a6f76a8980f1062aea0bd39b51328384ab66a28f586680036af033dee89a9ed29e8e04566c411318fc2738a10bfa87b7a178069de4e9e911089b4e52e74e6ade82c66bb909e456dc422b94c8c924b2ee44f6bd5e12011f46676325e9b157e7a76b16c56ef20979e23f398a4adec01aeb76306b186b7454fb9c7c2c9b9ec83a5eab2ced06039e4fb4d777570bd3d7d4bd1335f35f9d1f82d2abeef0b0b35c4380cc2034149a79c370f698800540f1bba3f0f1a0fc4342b332472c9e537427c1ab5de442bbfebdf80dab9253b5cb00be680eda08c2e7f97e86faec802a1396f68cfa02d8701075d26e1edb8df5a6299af909b0cd0e84b17872423ff7de635764745e685e3951d3f7dc87f4557e5295c3c6ab603b2bd5aabc9a432fbfc28443393f2ce516cac3b5848b04be6b85ecff3969fd267ac502bb13dda8daba754bed63a839a1a27252847c218cf063484434aa3734b77032a4a216166cb89f6abf01b1e936c56e9cf6fff5863bdd2a1161b9c1f3f22a82a748cfd2d9bffae56504b873b89e5d03744a48bf2e724e68911a3384f165be3e881da8c14b3c6abb4cf38321382b1a935acccc9dd5a21c9ab13278107c480cf469d8d1b7019ad5598ca5c7ec87b16acb7120a548e777e1fffab520970101f5a68b824ea1619c37cdee64caf3c2aaf16a1af77d8ca38d3446014f8641c05acedd29a50e9fc0f5d5c58a425d0a9517ad59a4a07ed90b3711b7e09e86ad39fe6617130517809d1bd360ad00341c4d4f711170cc97b101dcce0b838f799e7a366aec6c5b4f096244e095802e3f7664aaea568f8b0d085b"}, @typed={0x8, 0x102, 0x0, 0x0, @pid=r6}, @typed={0x8, 0xee, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0x4b}]}, @typed={0x14, 0x77, 0x0, 0x0, @ipv6=@mcast1}, @generic="a5fbe85e3459c8c9c0a14fe0851207b7d178476d73840377d0338571a571662fe878a55ceb120439c8064c09191f7b920d", @typed={0x14, 0xf7, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x20}}, @nested={0xc, 0xa0, 0x0, 0x1, [@typed={0x8, 0x42, 0x0, 0x0, @fd=r14}]}, @nested={0x7d, 0x13a, 0x0, 0x1, [@generic="7e955975db057bfd01fa87b8aa9ce754b02138d5652b0860320b1d412116d0fd242b2f6e892caebe9c2a275733f96a4b1dabee5df81f1a8606997c0fdbfde12dbe283ed2d63ba9c938801478f8db40047f4a9ab64ea263c3f0cf6d05ab110a8ac41a65c2c97ea5b5ed", @nested={0x4, 0x129}, @typed={0x4, 0x101}, @typed={0x8, 0x107, 0x0, 0x0, @u32=0x2}]}, @nested={0x61, 0xa3, 0x0, 0x1, [@generic="09e6848abc47bf28031dea8489f0bc173af286228fa72b9d846ea451714ee164da6706ca0d12a615b4c3b6462b", @generic="8925efc07851c0bb91ce7fa5a31333cb3698d247e1e3016c771951eb1e3fe49340", @nested={0x4, 0xfd}, @typed={0x8, 0xbf, 0x0, 0x0, @fd}, @generic="38d01b"]}]}, @TIPC_NLA_LINK={0x1ec, 0x4, 0x0, 0x1, [@typed={0x5, 0x2, 0x0, 0x0, @str='\x00'}, @generic="345e48a55c4660675a38800b80eeb3fe045c1899b45e502e6d1c99591a10b75c5197ec2911fcee368418b0288b27e0edc670c9b2c2023d51c2da98ad4ce122de3b659151d350b91c2fd2fe6886e947e8b46223e789491373dd8c4991b358f800e8c6cc624fc7da1b760baa36ff4bc331e43dfb0db9dcebe6001927c8b685ab2f1108d7350d7fdf80806487e5a8b2e8be9d778766922a8f0928049d1f9e152b6c8c12e9b15fd4aaf6bca3ef02d96d6dd3d51b161de44f98b57ab3e58dd6ef95101718b2dc964ca19b98305508e6db88ba5b79383092e9a25c95bd6c0dfe51a6", @generic="4e407fcb3dcfe98a103fe313a0cd81d6930bc9e38f22fd6ef67668eb36b5a69d22267ea779e56d99aca5c52f8028c42fbcdcac6a27ef4ad2dbe98a164728d90ad8159aafe609d80a03ee0a3c488dc27c9f4c5b1c1a30589be9ad4cb6564f76f21e884fec299485bb44e3cbf8cf7fd75a7f18576ccdc9f82db32c27ae2819beef0bec200a5e8b6cb8cd4d10fef2af4f8a2a8f531f35e0c6871535fb19b186fa62e3b0fb9a8d55b216b5070dc7b58d32e93dadb8bfc1452398e00fe7b0d0cab2468a6cce1bb18cc6acaf99592fbfe5da73f1ade4088b7e0e0a10c957c0269adcbb9fa1da2c0ec1b8979d", @nested={0x8, 0xe3, 0x0, 0x1, [@nested={0x4, 0x31}]}, @nested={0x8, 0x76, 0x0, 0x1, [@nested={0x4, 0x45}]}, @typed={0x7, 0x45, 0x0, 0x0, @str='(}\x00'}]}]}, 0x137c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.982043194s ago: executing program 3 (id=2287): mmap$auto(0x20000000000000, 0x4005, 0x7fffffff, 0x11, 0x401, 0x300000000000) (async, rerun: 64) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) (rerun: 64) write$auto_tty_fops_tty_io(r0, &(0x7f00000001c0)="352c8efa618c0bcf83a4ebdb27ec25906b0e1015b18c429fc1d7c523728754e19b304a", 0x23) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) r1 = socket(0x15, 0x5, 0x0) getsockopt$auto(r1, 0x114, 0x271c, 0xfffffffffffffffc, 0x0) mmap$auto(0x0, 0x40009, 0x1ff, 0x9b72, 0x7, 0x28000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x57e) fcntl$auto_F_ADD_SEALS(r2, 0x410, 0x0) (async) unlink$auto(&(0x7f0000000040)='./file0\x00') (async) close_range$auto(0x2, 0x8000, 0x0) unshare$auto(0x40000080) (async) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x567) (async) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) syz_clone3(&(0x7f0000000300)={0x28020400, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) (async, rerun: 32) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (rerun: 32) r3 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_USB_RAW_IOCTL_RUN(r3, 0x5501, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) socket$auto(0x80000000, 0x497e, 0x6) (async) r4 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec7\x00', 0x0, 0x0) ioctl$auto_CEC_DQEVENT(r4, 0xc0506107, 0x0) ioctl$auto_CEC_DQEVENT(r4, 0xc0506107, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) 1.846644597s ago: executing program 1 (id=2288): socket(0x10, 0x80000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd11/queue/wbt_lat_usec\x00', 0x1c2b02, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) r1 = fcntl$auto(0xff80000000000000, 0x409, 0x3f) fallocate$auto(r1, 0x1, 0xd, 0x5) timer_settime$auto(0xffffffff, 0x9, &(0x7f0000000140)={{0x7, 0x4}, {0x10}}, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zram0\x00', 0x212100, 0x0) write$auto(r2, &(0x7f0000000400)='odev/audio1\x00', 0x100000a3d9) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/bus/usb/038/001\x00', 0x201, 0x0) ioctl$auto_USBDEVFS_CLAIM_PORT(r3, 0x80045518, &(0x7f0000000140)=0x5b) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020008, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) timerfd_settime$auto(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x10, 0x3ff}, {0x10, 0x9}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) r4 = socket(0xa, 0x5, 0x84) sendto$auto(r4, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "110400000000fe8000"}, 0x1f) madvise$auto(0x0, 0xffffffffffff0006, 0x17) 1.656595703s ago: executing program 2 (id=2289): socket(0xa, 0x3, 0xff) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) syz_clone3(&(0x7f0000000280)={0x100b8ba00, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='V'], 0x1ac}}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfffffffc, &(0x7f0000000100)={0x0, 0xfbe}, 0x8, 0x0, 0x8, 0x1}, 0x3}, 0xc, 0x4008) shutdown$auto(0x200000003, 0x2) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) r1 = pidfd_open$auto(0x1, 0x0) setns(r1, 0x60020000) getcwd$auto(0x0, 0xffffffffffffffff) mount_setattr$auto(0x5, 0x0, 0x0, &(0x7f0000000640)={0x1, 0x9, 0x80000}, 0x283) 1.655784025s ago: executing program 3 (id=2290): mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000380)="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") mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xe3, 0x1b, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0xfffffffffffffffc, 0xf7, 0xdf, 0xeb1, 0x401, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, 0x0, 0x101040, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = setfsuid$auto(0xee01) setresuid$auto(0x0, r3, r3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'tunl0\x00', 0x0}) sendmsg$auto_NL802154_CMD_ABORT_SCAN(r1, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f00000004c0)={0x354, r2, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0xaa}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x8}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0x10000}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0x383}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x6}, @NL802154_ATTR_SEC_DEVICE={0x308, 0x2e, 0x0, 0x1, [@typed={0x8, 0xfc, 0x0, 0x0, @uid=r3}, @generic="f3276e30f89785247713c7dc7a45cce1f4ddc911a1eba10024c25ea1d24e48aaa6169d6f04a33230f1ff37c38955098997eb82458540d736d52ded9b0fda4465e5cfb2c27349ae74af7fdcf8ed57aaa409c24c09b07b0dc35401c100550d198e84843724666efba5fe092e725324abe2e4f5697e366a92ff75ca36801e89073025391e29ae1324af7d618ecc467a9746c83cb4ae1a7dd983d29f554890a86fca2990fa03c33368345e239534fc9f051faeaabed217b8d6c5929a8cf914a8ae963e8fd00c1e6c9ef0c10c186cf4882d50aaabd6a03dc3629119529d89", @nested={0x14, 0xa5, 0x0, 0x1, [@nested={0x4, 0xbb}, @typed={0xc, 0x149, 0x0, 0x0, @u64=0x4}]}, @nested={0x204, 0x11a, 0x0, 0x1, [@typed={0xa4, 0x147, 0x0, 0x0, @binary="38de9b344ea95ec08dfa30d7b798bc25f9d435c357d3d341181cabcd64c1652017559dd08b37f483f766ebf6bc834f208e70018d27d26e0ddabbd68dd7078f26eb900a2f735e2f024bcd25e0ed6ec740f0aa46ba4a4906154f63cc601d91b3c90e98866415c4eadead98697a649f462bef9af6ed9e902d25160539dbe040a9e10c4fe4842ecf026db23e22e9a04d263fa889c78812289c919a036cbf59d24e03"}, @generic="0f59e36104bd91ee8323a3f2ec980b373ec9715ade62b3f018865d321d7d3d083db7f266993b2e97982c826e547eb68ae74450b20918a7cfe4ae1064ebe46145aae9ea3a2c113d930a691bd955d31c9deec3874594a598aa2894519c", @generic, @nested={0x4, 0x15}, @generic="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"]}, @typed={0x8, 0x7e, 0x0, 0x0, @u32=0x800}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x354}, 0x1, 0x0, 0x0, 0x8001}, 0x8000) readv$auto(0x3, 0x0, 0x1) write$auto(0xffffffffffffffff, 0x0, 0x5) syz_genetlink_get_family_id$auto_seg6(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x800c) sendmsg$auto_NL802154_CMD_ASSOCIATE(0xffffffffffffffff, 0x0, 0x20000000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x48402, 0x0) mmap$auto(0xe2, 0x7, 0xdf, 0x9b72, 0x2, 0x8000) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) write$auto(0x1, 0x0, 0x80000000) write$auto(0x1, 0x0, 0x6) socket(0xa, 0x801, 0x84) 720.09555ms ago: executing program 3 (id=2292): unshare$auto(0x40000080) setsockopt$auto(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x5) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$auto(r0, 0x0, 0x81) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r1 = socket(0x23, 0x80805, 0x0) poll$auto(&(0x7f0000000000)={r1, 0x1963, 0x81}, 0x5, 0x10001) setsockopt$auto(r2, 0x113, 0x3, 0x0, 0x79ad226b) userfaultfd$auto(0x3ff) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, 0x0, 0x303b01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) r3 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/cuse\x00', 0x20000, 0x0) sendfile$auto(r3, 0x3, 0x0, 0x7ffff000) 644.132689ms ago: executing program 0 (id=2293): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x302, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000380), 0x200000, 0x0) socket(0x2, 0x3, 0x100) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x0) newfstatat$auto(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x3, 0x4, 0x9cf, 0x6, 0xee00, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffe, 0x100000001, 0x0, 0x2, 0x10, 0x3, 0x4, 0x10000, 0x2}, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x8c0a02, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x5) unshare$auto(0x40000080) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xa5e) 0s ago: executing program 1 (id=2294): r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cec8\x00', 0x801, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_CEC_RECEIVE(r0, 0xc0386106, &(0x7f0000000440)={0x6, 0x0, 0x9, 0xe, 0x57a264ea, 0x4, "8b18edde614da7b18065030120308dda", 0xb, 0x8, 0x3, 0x1, 0x2, 0x2, 0x5}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r1 = socket(0xa, 0x5, 0x0) getsockopt$auto(r1, 0x84, 0x7f, 0x0, 0x0) kernel console output (not intermixed with test programs): team_slave_1 removed [ 401.597774][ T49] team0 (unregistering): Port device team_slave_0 removed [ 403.511848][T10797] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.547949][T10797] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.555596][ T5632] Bluetooth: hci3: command tx timeout [ 403.614667][T10797] bridge_slave_0: entered allmulticast mode [ 403.673276][T10797] bridge_slave_0: entered promiscuous mode [ 403.727770][T10797] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.778589][T10797] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.822539][T10797] bridge_slave_1: entered allmulticast mode [ 403.858122][T10797] bridge_slave_1: entered promiscuous mode [ 403.925648][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 404.011916][T10797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.078308][T10797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.434642][T10797] team0: Port device team_slave_0 added [ 404.470234][T10797] team0: Port device team_slave_1 added [ 404.856912][T10797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.883894][T10797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.000567][T10797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.262819][T10797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.291010][T10797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.388743][T10797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.862374][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 405.998818][T10797] hsr_slave_0: entered promiscuous mode [ 406.028403][T10797] hsr_slave_1: entered promiscuous mode [ 406.059507][T10797] debugfs: 'hsr0' already exists in 'hsr' [ 406.098656][T10797] Cannot create hsr debugfs directory [ 407.449453][ T30] audit: type=1800 audit(4294985970.138:9): pid=10973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1038" name="version" dev="configfs" ino=39473 res=0 errno=0 [ 407.660590][T10962] Invalid input. Must be >= 4608 [ 409.270193][T10990] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 409.771414][T10797] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 410.306402][T10797] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 410.344904][T10797] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 410.425893][T10797] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 410.472944][T10797] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 410.544753][T10797] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 410.644485][T10797] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 410.700416][T10797] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 411.196610][T10797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.301383][T10797] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.373085][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.380329][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.501754][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.508982][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.349829][T10797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.803966][T10797] veth0_vlan: entered promiscuous mode [ 415.913880][T10797] veth1_vlan: entered promiscuous mode [ 416.229281][T11075] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1051'. [ 416.312369][T10797] veth0_macvtap: entered promiscuous mode [ 416.520374][T10797] veth1_macvtap: entered promiscuous mode [ 417.099932][T10797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.334664][T10797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.473911][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.520027][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.582394][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.638775][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.011446][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.059944][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.135990][T11135] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1059'. [ 418.176613][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.211921][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.383151][T11137] HfR: entered promiscuous mode [ 419.403657][T11155] ubi: mtd0 is already attached to ubi1 [ 421.697734][T11189] random: crng reseeded on system resumption [ 423.839265][T11221] __vm_enough_memory: pid: 11221, comm: syz.1.1074, bytes: 4398046511104 not enough memory for the allocation [ 423.952632][T11221] nbd: must specify at least one socket [ 424.321786][T11231] ubi: mtd0 is already attached to ubi1 [ 424.405157][T11225] futex_wake_op: syz.0.1076 tries to shift op by -2048; fix this program [ 426.329294][T11225] kexec: Could not allocate control_code_buffer [ 428.258771][T11262] Process accounting resumed [ 429.859374][ T5632] Bluetooth: hci2: unexpected event 0x36 length: 123 > 7 [ 429.859885][T11299] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1091'. [ 431.561870][T11310] FAULT_INJECTION: forcing a failure. [ 431.561870][T11310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.627230][T11310] CPU: 0 UID: 0 PID: 11310 Comm: syz.1.1094 Not tainted syzkaller #0 PREEMPT(full) [ 431.627263][T11310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 431.627280][T11310] Call Trace: [ 431.627288][T11310] [ 431.627296][T11310] dump_stack_lvl+0x100/0x190 [ 431.627330][T11310] should_fail_ex.cold+0x5/0xa [ 431.627364][T11310] _copy_from_user+0x2e/0xd0 [ 431.627465][T11310] vt_ioctl+0x25b8/0x3110 [ 431.627566][T11310] ? __pfx_vt_ioctl+0x10/0x10 [ 431.627600][T11310] ? find_held_lock+0x2b/0x80 [ 431.627627][T11310] ? tomoyo_path_number_perm+0x28f/0x580 [ 431.627682][T11310] ? tomoyo_path_number_perm+0x28f/0x580 [ 431.627713][T11310] ? tomoyo_path_number_perm+0x188/0x580 [ 431.627741][T11310] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 431.627772][T11310] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 431.627826][T11310] ? __pfx_vt_ioctl+0x10/0x10 [ 431.627862][T11310] tty_ioctl+0x26a/0x1640 [ 431.627916][T11310] ? __pfx_tty_ioctl+0x10/0x10 [ 431.627951][T11310] ? find_held_lock+0x2b/0x80 [ 431.627977][T11310] ? __fget_files+0x215/0x3d0 [ 431.628011][T11310] ? hook_file_ioctl_common+0x140/0x440 [ 431.628076][T11310] ? __fget_files+0x21f/0x3d0 [ 431.628114][T11310] ? __pfx_tty_ioctl+0x10/0x10 [ 431.628143][T11310] __x64_sys_ioctl+0x18e/0x210 [ 431.628176][T11310] do_syscall_64+0x115/0x840 [ 431.628198][T11310] ? clear_bhb_loop+0x40/0x90 [ 431.628227][T11310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.628250][T11310] RIP: 0033:0x7fe1f879de59 [ 431.628269][T11310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.628299][T11310] RSP: 002b:00007fe1f9737028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 431.628321][T11310] RAX: ffffffffffffffda RBX: 00007fe1f8a25fa0 RCX: 00007fe1f879de59 [ 431.628337][T11310] RDX: 000000000000000a RSI: 000000000000560a RDI: 000000000000000a [ 431.628350][T11310] RBP: 00007fe1f9737090 R08: 0000000000000000 R09: 0000000000000000 [ 431.628364][T11310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.628378][T11310] R13: 00007fe1f8a26038 R14: 00007fe1f8a25fa0 R15: 00007ffd75279828 [ 431.628407][T11310] [ 432.612420][T11316] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 435.341379][T11368] FAULT_INJECTION: forcing a failure. [ 435.341379][T11368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.406816][T11368] CPU: 0 UID: 0 PID: 11368 Comm: syz.0.1106 Not tainted syzkaller #0 PREEMPT(full) [ 435.406853][T11368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 435.406867][T11368] Call Trace: [ 435.406875][T11368] [ 435.406884][T11368] dump_stack_lvl+0x100/0x190 [ 435.406914][T11368] should_fail_ex.cold+0x5/0xa [ 435.406940][T11368] _copy_to_user+0x32/0xd0 [ 435.406975][T11368] simple_read_from_buffer+0xcb/0x170 [ 435.407013][T11368] proc_fail_nth_read+0x1af/0x230 [ 435.407122][T11368] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 435.407155][T11368] ? rw_verify_area+0xce/0x6d0 [ 435.407186][T11368] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 435.407215][T11368] vfs_read+0x1e4/0xb40 [ 435.407252][T11368] ? __pfx_vfs_read+0x10/0x10 [ 435.407286][T11368] ? __fget_files+0x215/0x3d0 [ 435.407327][T11368] ? __fget_files+0x21f/0x3d0 [ 435.407369][T11368] ksys_read+0x12a/0x250 [ 435.407403][T11368] ? __pfx_ksys_read+0x10/0x10 [ 435.407445][T11368] do_syscall_64+0x115/0x840 [ 435.407467][T11368] ? clear_bhb_loop+0x40/0x90 [ 435.407496][T11368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.407520][T11368] RIP: 0033:0x7f89e215e68e [ 435.407539][T11368] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 435.407563][T11368] RSP: 002b:00007f89e30d9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 435.407585][T11368] RAX: ffffffffffffffda RBX: 00007f89e30da6c0 RCX: 00007f89e215e68e [ 435.407601][T11368] RDX: 000000000000000f RSI: 00007f89e30da0a0 RDI: 000000000000000b [ 435.407615][T11368] RBP: 00007f89e30da090 R08: 0000000000000000 R09: 0000000000000000 [ 435.407630][T11368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.407656][T11368] R13: 00007f89e2426038 R14: 00007f89e2425fa0 R15: 00007ffce759f848 [ 435.407684][T11368] [ 438.726089][T11427] FAULT_INJECTION: forcing a failure. [ 438.726089][T11427] name fail_futex, interval 1, probability 0, space 0, times 0 [ 438.726124][T11427] CPU: 0 UID: 0 PID: 11427 Comm: syz.0.1120 Not tainted syzkaller #0 PREEMPT(full) [ 438.726151][T11427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 438.726164][T11427] Call Trace: [ 438.726171][T11427] [ 438.726179][T11427] dump_stack_lvl+0x100/0x190 [ 438.726218][T11427] should_fail_ex.cold+0x5/0xa [ 438.726241][T11427] get_futex_key+0x1d2/0x14f0 [ 438.726278][T11427] ? __pfx_get_futex_key+0x10/0x10 [ 438.726310][T11427] ? lock_acquire+0x1b9/0x370 [ 438.726347][T11427] futex_wake+0xf4/0x5e0 [ 438.726374][T11427] ? __pfx_futex_wake+0x10/0x10 [ 438.726399][T11427] ? find_held_lock+0x2b/0x80 [ 438.726422][T11427] ? exit_mm_release+0x19/0x30 [ 438.726451][T11427] do_futex+0x2b2/0x440 [ 438.726472][T11427] ? __pfx_do_futex+0x10/0x10 [ 438.726490][T11427] ? __might_fault+0xc5/0x140 [ 438.726547][T11427] mm_release+0x24a/0x2f0 [ 438.726567][T11427] do_exit+0x707/0x2ae0 [ 438.726603][T11427] ? __pfx_do_exit+0x10/0x10 [ 438.726630][T11427] ? do_raw_spin_lock+0x128/0x260 [ 438.726649][T11427] ? find_held_lock+0x2b/0x80 [ 438.726671][T11427] ? get_signal+0x7e0/0x21e0 [ 438.726695][T11427] do_group_exit+0xd5/0x2a0 [ 438.726724][T11427] get_signal+0x1ec7/0x21e0 [ 438.726753][T11427] ? __pfx_get_signal+0x10/0x10 [ 438.726776][T11427] ? do_futex+0x190/0x440 [ 438.726799][T11427] arch_do_signal_or_restart+0x91/0x7a0 [ 438.726844][T11427] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 438.726884][T11427] ? fput+0x79/0x100 [ 438.726911][T11427] exit_to_user_mode_loop+0x139/0x6f0 [ 438.726944][T11427] ? rcu_is_watching+0x12/0xc0 [ 438.726969][T11427] do_syscall_64+0x652/0x840 [ 438.726989][T11427] ? clear_bhb_loop+0x40/0x90 [ 438.727014][T11427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.727036][T11427] RIP: 0033:0x7f89e219de59 [ 438.727052][T11427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.727073][T11427] RSP: 002b:00007f89e30b90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 438.727092][T11427] RAX: 0000000000000000 RBX: 00007f89e2426098 RCX: 00007f89e219de59 [ 438.727106][T11427] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f89e2426098 [ 438.727118][T11427] RBP: 00007f89e2426090 R08: 0000000000000000 R09: 0000000000000000 [ 438.727132][T11427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.727144][T11427] R13: 00007f89e2426128 R14: 00007ffce759f760 R15: 00007ffce759f848 [ 438.727170][T11427] [ 440.201016][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.201096][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.376428][T11465] random: crng reseeded on system resumption [ 441.596180][T11444] Process accounting resumed [ 443.446961][T11493] FAULT_INJECTION: forcing a failure. [ 443.446961][T11493] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 443.509328][T11493] CPU: 0 UID: 0 PID: 11493 Comm: syz.2.1133 Not tainted syzkaller #0 PREEMPT(full) [ 443.509372][T11493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 443.509387][T11493] Call Trace: [ 443.509394][T11493] [ 443.509403][T11493] dump_stack_lvl+0x100/0x190 [ 443.509434][T11493] should_fail_ex.cold+0x5/0xa [ 443.509456][T11493] ? prepare_alloc_pages+0x16d/0x5f0 [ 443.509492][T11493] should_fail_alloc_page+0xeb/0x140 [ 443.509525][T11493] prepare_alloc_pages+0x1f0/0x5f0 [ 443.509562][T11493] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 443.509589][T11493] ? stack_trace_save+0x8e/0xc0 [ 443.509619][T11493] ? __pfx_stack_trace_save+0x10/0x10 [ 443.509650][T11493] ? stack_depot_save_flags+0x27/0x9d0 [ 443.509685][T11493] ? drop_sysctl_table+0x434/0x5f0 [ 443.509788][T11493] ? kasan_save_stack+0x3f/0x50 [ 443.509815][T11493] ? kasan_save_stack+0x30/0x50 [ 443.509841][T11493] ? kasan_save_track+0x14/0x30 [ 443.509867][T11493] ? __kasan_kmalloc+0xaa/0xb0 [ 443.509894][T11493] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 443.509918][T11493] ? unshare_nsproxy_namespaces+0xf2/0x220 [ 443.509942][T11493] ? __x64_sys_unshare+0x31/0x40 [ 443.509970][T11493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.510017][T11493] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 443.510051][T11493] ? policy_nodemask+0xed/0x4f0 [ 443.510085][T11493] alloc_pages_mpol+0x1fb/0x540 [ 443.510118][T11493] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 443.510152][T11493] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 443.510194][T11493] alloc_pages_noprof+0x1a/0x160 [ 443.510231][T11493] timens_vdso_alloc_vvar_page+0x1d/0x70 [ 443.510269][T11493] copy_time_ns+0x10b/0x790 [ 443.510304][T11493] create_new_namespaces+0x48a/0xac0 [ 443.510357][T11493] unshare_nsproxy_namespaces+0xf2/0x220 [ 443.510383][T11493] ksys_unshare+0x438/0xab0 [ 443.510413][T11493] ? __pfx_ksys_unshare+0x10/0x10 [ 443.510452][T11493] __x64_sys_unshare+0x31/0x40 [ 443.510481][T11493] do_syscall_64+0x115/0x840 [ 443.510503][T11493] ? clear_bhb_loop+0x40/0x90 [ 443.510532][T11493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.510557][T11493] RIP: 0033:0x7f197699de59 [ 443.510576][T11493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.510601][T11493] RSP: 002b:00007f1974bd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 443.510624][T11493] RAX: ffffffffffffffda RBX: 00007f1976c26090 RCX: 00007f197699de59 [ 443.510641][T11493] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 443.510655][T11493] RBP: 00007f1976a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 443.510670][T11493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 443.510684][T11493] R13: 00007f1976c26128 R14: 00007f1976c26090 R15: 00007fff54563bc8 [ 443.510714][T11493] [ 456.254056][T11629] FAULT_INJECTION: forcing a failure. [ 456.254056][T11629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 456.376326][T11629] CPU: 0 UID: 0 PID: 11629 Comm: syz.2.1152 Not tainted syzkaller #0 PREEMPT(full) [ 456.376356][T11629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 456.376371][T11629] Call Trace: [ 456.376378][T11629] [ 456.376386][T11629] dump_stack_lvl+0x100/0x190 [ 456.376417][T11629] should_fail_ex.cold+0x5/0xa [ 456.376443][T11629] _copy_from_iter+0x1f4/0x1690 [ 456.376478][T11629] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 456.376515][T11629] ? __pfx__copy_from_iter+0x10/0x10 [ 456.376561][T11629] copy_page_from_iter+0x238/0x300 [ 456.376598][T11629] anon_pipe_write+0xc0b/0x1d90 [ 456.376637][T11629] ? aa_path_link+0x321/0x3b0 [ 456.376739][T11629] ? __pfx_anon_pipe_write+0x10/0x10 [ 456.376777][T11629] ? __pfx___might_resched+0x10/0x10 [ 456.376822][T11629] ? get_pid_task+0xfc/0x250 [ 456.376859][T11629] ? bpf_lsm_file_permission+0x9/0x10 [ 456.376896][T11629] ? security_file_permission+0x76/0x210 [ 456.376926][T11629] ? rw_verify_area+0xce/0x6d0 [ 456.376959][T11629] vfs_write+0x6ac/0x1050 [ 456.376993][T11629] ? __pfx_anon_pipe_write+0x10/0x10 [ 456.377040][T11629] ? __pfx_vfs_write+0x10/0x10 [ 456.377072][T11629] ? find_held_lock+0x2b/0x80 [ 456.377116][T11629] ksys_write+0x1f8/0x250 [ 456.377150][T11629] ? __pfx_ksys_write+0x10/0x10 [ 456.377193][T11629] do_syscall_64+0x115/0x840 [ 456.377215][T11629] ? clear_bhb_loop+0x40/0x90 [ 456.377243][T11629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.377267][T11629] RIP: 0033:0x7f197699de59 [ 456.377286][T11629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.377314][T11629] RSP: 002b:00007f1974bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 456.377337][T11629] RAX: ffffffffffffffda RBX: 00007f1976c25fa0 RCX: 00007f197699de59 [ 456.377352][T11629] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 456.377366][T11629] RBP: 00007f1974bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 456.377380][T11629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.377393][T11629] R13: 00007f1976c26038 R14: 00007f1976c25fa0 R15: 00007fff54563bc8 [ 456.377423][T11629] [ 458.434917][T11661] FAULT_INJECTION: forcing a failure. [ 458.434917][T11661] name failslab, interval 1, probability 0, space 0, times 0 [ 458.602900][T11661] CPU: 0 UID: 0 PID: 11661 Comm: syz.0.1158 Not tainted syzkaller #0 PREEMPT(full) [ 458.602932][T11661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 458.602947][T11661] Call Trace: [ 458.602954][T11661] [ 458.602963][T11661] dump_stack_lvl+0x100/0x190 [ 458.602994][T11661] should_fail_ex.cold+0x5/0xa [ 458.603021][T11661] should_failslab+0xc2/0x120 [ 458.603052][T11661] __kmalloc_cache_noprof+0x91/0x6c0 [ 458.603090][T11661] ? __pfx___xa_alloc+0x10/0x10 [ 458.603118][T11661] ? __devlink_region_snapshot_create+0x1ec/0x620 [ 458.603267][T11661] __devlink_region_snapshot_create+0x1ec/0x620 [ 458.603311][T11661] devlink_region_snapshot_create+0x34/0x50 [ 458.603349][T11661] nsim_dev_take_snapshot_write+0x11d/0x1b0 [ 458.603437][T11661] ? __debugfs_file_get+0x1fc/0x860 [ 458.603462][T11661] ? __pfx_nsim_dev_take_snapshot_write+0x10/0x10 [ 458.603500][T11661] full_proxy_write+0x135/0x1a0 [ 458.603527][T11661] vfs_write+0x2aa/0x1050 [ 458.603564][T11661] ? __pfx_full_proxy_write+0x10/0x10 [ 458.603591][T11661] ? __pfx_vfs_write+0x10/0x10 [ 458.603627][T11661] ? __fget_files+0x215/0x3d0 [ 458.603669][T11661] ? __fget_files+0x21f/0x3d0 [ 458.603713][T11661] ksys_write+0x12a/0x250 [ 458.603750][T11661] ? __pfx_ksys_write+0x10/0x10 [ 458.603795][T11661] do_syscall_64+0x115/0x840 [ 458.603816][T11661] ? clear_bhb_loop+0x40/0x90 [ 458.603845][T11661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.603870][T11661] RIP: 0033:0x7f89e219de59 [ 458.603890][T11661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.603915][T11661] RSP: 002b:00007f89e3098028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 458.603937][T11661] RAX: ffffffffffffffda RBX: 00007f89e2426180 RCX: 00007f89e219de59 [ 458.603953][T11661] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 458.603968][T11661] RBP: 00007f89e2233e6f R08: 0000000000000000 R09: 0000000000000000 [ 458.603983][T11661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.603997][T11661] R13: 00007f89e2426218 R14: 00007f89e2426180 R15: 00007ffce759f848 [ 458.604028][T11661] [ 458.604153][T11661] Failed to create region snapshot [ 459.648022][T11645] Invalid ELF header magic: != ELF [ 459.859955][T11677] random: crng reseeded on system resumption [ 462.026704][T11664] Process accounting paused [ 464.594192][T11668] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 469.114838][T11164] syz.3.1063 (11164) used greatest stack depth: 18952 bytes left [ 470.495208][ T30] audit: type=1400 audit(4294986033.178:10): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=11788 comm="syz.0.1185" [ 471.671242][T11806] FAULT_INJECTION: forcing a failure. [ 471.671242][T11806] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 471.736653][T11806] CPU: 0 UID: 0 PID: 11806 Comm: syz.1.1188 Not tainted syzkaller #0 PREEMPT(full) [ 471.736708][T11806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 471.736725][T11806] Call Trace: [ 471.736735][T11806] [ 471.736745][T11806] dump_stack_lvl+0x100/0x190 [ 471.736778][T11806] should_fail_ex.cold+0x5/0xa [ 471.736802][T11806] ? prepare_alloc_pages+0x16d/0x5f0 [ 471.736853][T11806] should_fail_alloc_page+0xeb/0x140 [ 471.736889][T11806] prepare_alloc_pages+0x1f0/0x5f0 [ 471.736930][T11806] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 471.736960][T11806] ? stack_trace_save+0x8e/0xc0 [ 471.736993][T11806] ? __pfx_stack_trace_save+0x10/0x10 [ 471.737024][T11806] ? is_bpf_text_address+0x94/0x1a0 [ 471.737089][T11806] ? stack_depot_save_flags+0x27/0x9d0 [ 471.737128][T11806] ? __kernel_text_address+0xd/0x30 [ 471.737209][T11806] ? kasan_save_stack+0x3f/0x50 [ 471.737238][T11806] ? kasan_save_stack+0x30/0x50 [ 471.737266][T11806] ? kasan_save_track+0x14/0x30 [ 471.737302][T11806] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 471.737330][T11806] ? snd_pcm_open_substream+0x90/0x1850 [ 471.737430][T11806] ? soundcore_open+0x2e3/0x5a0 [ 471.737507][T11806] ? do_dentry_open+0x6ab/0x14d0 [ 471.737546][T11806] ? vfs_open+0x82/0x3f0 [ 471.737572][T11806] ? path_openat+0x2873/0x4280 [ 471.737612][T11806] ? do_file_open+0x20e/0x430 [ 471.737653][T11806] ? do_sys_openat2+0x10f/0x1e0 [ 471.737686][T11806] ? __x64_sys_openat+0x12d/0x210 [ 471.737716][T11806] ? do_syscall_64+0x115/0x840 [ 471.737739][T11806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.737787][T11806] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 471.737831][T11806] ? policy_nodemask+0xed/0x4f0 [ 471.737873][T11806] alloc_pages_mpol+0x1fb/0x540 [ 471.737911][T11806] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 471.737944][T11806] ? kasan_save_track+0x14/0x30 [ 471.737972][T11806] ? __kasan_kmalloc+0xaa/0xb0 [ 471.738002][T11806] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 471.738047][T11806] alloc_pages_noprof+0x1a/0x160 [ 471.738087][T11806] alloc_pages_exact_noprof+0x32/0xf0 [ 471.738126][T11806] snd_pcm_attach_substream+0x45d/0xd20 [ 471.738189][T11806] snd_pcm_open_substream+0x90/0x1850 [ 471.738219][T11806] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 471.738248][T11806] ? snd_pcm_oss_open+0x5e5/0x1390 [ 471.738310][T11806] snd_pcm_oss_open+0x735/0x1390 [ 471.738360][T11806] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 471.738400][T11806] ? __lock_acquire+0x49f/0x1a40 [ 471.738439][T11806] ? __pfx_default_wake_function+0x10/0x10 [ 471.738478][T11806] ? do_raw_spin_lock+0x128/0x260 [ 471.738506][T11806] ? soundcore_open+0x231/0x5a0 [ 471.738541][T11806] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 471.738579][T11806] soundcore_open+0x2e3/0x5a0 [ 471.738614][T11806] ? __pfx_soundcore_open+0x10/0x10 [ 471.738650][T11806] chrdev_open+0x234/0x6a0 [ 471.738673][T11806] ? __pfx_apparmor_file_open+0x10/0x10 [ 471.738699][T11806] ? __pfx_chrdev_open+0x10/0x10 [ 471.738742][T11806] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 471.738800][T11806] do_dentry_open+0x6ab/0x14d0 [ 471.738841][T11806] ? __pfx_chrdev_open+0x10/0x10 [ 471.738889][T11806] vfs_open+0x82/0x3f0 [ 471.738923][T11806] path_openat+0x2873/0x4280 [ 471.738978][T11806] ? __pfx_path_openat+0x10/0x10 [ 471.739028][T11806] do_file_open+0x20e/0x430 [ 471.739072][T11806] ? __pfx_do_file_open+0x10/0x10 [ 471.739136][T11806] ? alloc_fd+0x471/0x7a0 [ 471.739186][T11806] ? do_getname+0x191/0x390 [ 471.739218][T11806] do_sys_openat2+0x10f/0x1e0 [ 471.739249][T11806] ? __pfx_do_sys_openat2+0x10/0x10 [ 471.739292][T11806] __x64_sys_openat+0x12d/0x210 [ 471.739325][T11806] ? __pfx___x64_sys_openat+0x10/0x10 [ 471.739369][T11806] do_syscall_64+0x115/0x840 [ 471.739391][T11806] ? clear_bhb_loop+0x40/0x90 [ 471.739430][T11806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.739458][T11806] RIP: 0033:0x7fe1f879de59 [ 471.739479][T11806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.739506][T11806] RSP: 002b:00007fe1f9716028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 471.739531][T11806] RAX: ffffffffffffffda RBX: 00007fe1f8a26090 RCX: 00007fe1f879de59 [ 471.739548][T11806] RDX: 0000000000020342 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 471.739565][T11806] RBP: 00007fe1f8833e6f R08: 0000000000000000 R09: 0000000000000000 [ 471.739581][T11806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.739598][T11806] R13: 00007fe1f8a26128 R14: 00007fe1f8a26090 R15: 00007ffd75279828 [ 471.739644][T11806] [ 472.399806][T11812] Process accounting paused [ 473.977581][T11161] syz.3.1063 (11161) used greatest stack depth: 16808 bytes left [ 474.278934][T11860] FAULT_INJECTION: forcing a failure. [ 474.278934][T11860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 474.358136][T11860] CPU: 0 UID: 0 PID: 11860 Comm: syz.0.1199 Not tainted syzkaller #0 PREEMPT(full) [ 474.358167][T11860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 474.358181][T11860] Call Trace: [ 474.358188][T11860] [ 474.358197][T11860] dump_stack_lvl+0x100/0x190 [ 474.358227][T11860] should_fail_ex.cold+0x5/0xa [ 474.358253][T11860] _copy_from_iter+0x1f4/0x1690 [ 474.358292][T11860] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 474.358328][T11860] ? __pfx__copy_from_iter+0x10/0x10 [ 474.358374][T11860] copy_page_from_iter+0x238/0x300 [ 474.358411][T11860] anon_pipe_write+0xc0b/0x1d90 [ 474.358450][T11860] ? aa_path_link+0x321/0x3b0 [ 474.358489][T11860] ? __pfx_anon_pipe_write+0x10/0x10 [ 474.358524][T11860] ? __pfx___might_resched+0x10/0x10 [ 474.358558][T11860] ? get_pid_task+0xfc/0x250 [ 474.358596][T11860] ? bpf_lsm_file_permission+0x9/0x10 [ 474.358632][T11860] ? security_file_permission+0x76/0x210 [ 474.358662][T11860] ? rw_verify_area+0xce/0x6d0 [ 474.358696][T11860] vfs_write+0x6ac/0x1050 [ 474.358731][T11860] ? __pfx_anon_pipe_write+0x10/0x10 [ 474.358771][T11860] ? __pfx_vfs_write+0x10/0x10 [ 474.358803][T11860] ? find_held_lock+0x2b/0x80 [ 474.358848][T11860] ksys_write+0x1f8/0x250 [ 474.358882][T11860] ? __pfx_ksys_write+0x10/0x10 [ 474.358926][T11860] do_syscall_64+0x115/0x840 [ 474.358948][T11860] ? clear_bhb_loop+0x40/0x90 [ 474.358976][T11860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.358999][T11860] RIP: 0033:0x7f89e219de59 [ 474.359025][T11860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.359048][T11860] RSP: 002b:00007f89e30da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 474.359070][T11860] RAX: ffffffffffffffda RBX: 00007f89e2425fa0 RCX: 00007f89e219de59 [ 474.359086][T11860] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 474.359099][T11860] RBP: 00007f89e30da090 R08: 0000000000000000 R09: 0000000000000000 [ 474.359113][T11860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 474.359127][T11860] R13: 00007f89e2426038 R14: 00007f89e2425fa0 R15: 00007ffce759f848 [ 474.359156][T11860] [ 474.694407][T11856] binder: 11855:11856 unknown command 1886611048 [ 474.700856][T11856] binder: 11855:11856 ioctl c0306201 0 returned -22 [ 475.128616][T11880] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1203'. [ 477.573524][T11915] FAULT_INJECTION: forcing a failure. [ 477.573524][T11915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 477.658590][T11915] CPU: 0 UID: 0 PID: 11915 Comm: syz.3.1210 Not tainted syzkaller #0 PREEMPT(full) [ 477.658621][T11915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 477.658635][T11915] Call Trace: [ 477.658642][T11915] [ 477.658651][T11915] dump_stack_lvl+0x100/0x190 [ 477.658680][T11915] should_fail_ex.cold+0x5/0xa [ 477.658706][T11915] _copy_from_iter+0x1f4/0x1690 [ 477.658740][T11915] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 477.658774][T11915] ? __pfx__copy_from_iter+0x10/0x10 [ 477.658818][T11915] copy_page_from_iter+0x238/0x300 [ 477.658862][T11915] anon_pipe_write+0xc0b/0x1d90 [ 477.658901][T11915] ? aa_path_link+0x321/0x3b0 [ 477.658938][T11915] ? __pfx_anon_pipe_write+0x10/0x10 [ 477.658972][T11915] ? __pfx___might_resched+0x10/0x10 [ 477.659004][T11915] ? get_pid_task+0xfc/0x250 [ 477.659041][T11915] ? bpf_lsm_file_permission+0x9/0x10 [ 477.659075][T11915] ? security_file_permission+0x76/0x210 [ 477.659104][T11915] ? rw_verify_area+0xce/0x6d0 [ 477.659140][T11915] vfs_write+0x6ac/0x1050 [ 477.659174][T11915] ? __pfx_anon_pipe_write+0x10/0x10 [ 477.659212][T11915] ? __pfx_vfs_write+0x10/0x10 [ 477.659243][T11915] ? find_held_lock+0x2b/0x80 [ 477.659286][T11915] ksys_write+0x1f8/0x250 [ 477.659320][T11915] ? __pfx_ksys_write+0x10/0x10 [ 477.659362][T11915] do_syscall_64+0x115/0x840 [ 477.659382][T11915] ? clear_bhb_loop+0x40/0x90 [ 477.659409][T11915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.659432][T11915] RIP: 0033:0x7fbdd7d9de59 [ 477.659450][T11915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.659472][T11915] RSP: 002b:00007fbdd8c56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 477.659494][T11915] RAX: ffffffffffffffda RBX: 00007fbdd8025fa0 RCX: 00007fbdd7d9de59 [ 477.659509][T11915] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 477.659522][T11915] RBP: 00007fbdd8c56090 R08: 0000000000000000 R09: 0000000000000000 [ 477.659536][T11915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 477.659549][T11915] R13: 00007fbdd8026038 R14: 00007fbdd8025fa0 R15: 00007ffe08a0ee58 [ 477.659578][T11915] [ 478.581158][T11937] UHID_CREATE from different security context by process 1255 (syz.1.1211), this is not allowed. [ 478.650547][T11935] futex_wake_op: syz.3.1214 tries to shift op by -2048; fix this program [ 478.743589][T11935] futex_wake_op: syz.3.1214 tries to shift op by -2048; fix this program [ 480.000876][T11947] netlink: zone id is out of range [ 480.049868][ T5632] Bluetooth: hci0: unexpected subevent 0x01 length: 2 < 18 [ 480.548140][T11960] FAULT_INJECTION: forcing a failure. [ 480.548140][T11960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 480.634468][T11960] CPU: 0 UID: 0 PID: 11960 Comm: syz.1.1218 Tainted: G L syzkaller #0 PREEMPT(full) [ 480.634506][T11960] Tainted: [L]=SOFTLOCKUP [ 480.634513][T11960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 480.634528][T11960] Call Trace: [ 480.634535][T11960] [ 480.634544][T11960] dump_stack_lvl+0x100/0x190 [ 480.634574][T11960] should_fail_ex.cold+0x5/0xa [ 480.634600][T11960] _copy_from_user+0x2e/0xd0 [ 480.634650][T11960] move_addr_to_kernel+0x65/0x170 [ 480.634690][T11960] __sys_connect+0xb5/0x170 [ 480.634712][T11960] ? __pfx___sys_connect+0x10/0x10 [ 480.634752][T11960] __x64_sys_connect+0x72/0xb0 [ 480.634774][T11960] ? lockdep_hardirqs_on+0x78/0x100 [ 480.634871][T11960] do_syscall_64+0x115/0x840 [ 480.634892][T11960] ? clear_bhb_loop+0x40/0x90 [ 480.634920][T11960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.634944][T11960] RIP: 0033:0x7fe1f879de59 [ 480.634963][T11960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.634987][T11960] RSP: 002b:00007fe1f96d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 480.635009][T11960] RAX: ffffffffffffffda RBX: 00007fe1f8a26270 RCX: 00007fe1f879de59 [ 480.635025][T11960] RDX: 0000000000000051 RSI: 0000200000000080 RDI: 0000000000000003 [ 480.635039][T11960] RBP: 00007fe1f8833e6f R08: 0000000000000000 R09: 0000000000000000 [ 480.635056][T11960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 480.635069][T11960] R13: 00007fe1f8a26308 R14: 00007fe1f8a26270 R15: 00007ffd75279828 [ 480.635098][T11960] [ 482.016690][T11966] vhci_hcd: not connected 4 [ 483.700292][T11983] futex_wake_op: syz.0.1224 tries to shift op by -1; fix this program [ 483.988834][ T30] audit: type=1800 audit(4294986046.668:11): pid=11998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1228" name="dbroot" dev="configfs" ino=45417 res=0 errno=0 [ 484.055020][T11998] netlink: 354 bytes leftover after parsing attributes in process `syz.1.1228'. [ 484.127408][T11998] raw_sendmsg: syz.1.1228 forgot to set AF_INET. Fix it! [ 486.956004][T12035] FAULT_INJECTION: forcing a failure. [ 486.956004][T12035] name failslab, interval 1, probability 0, space 0, times 0 [ 487.042825][T12035] CPU: 0 UID: 0 PID: 12035 Comm: syz.1.1235 Tainted: G L syzkaller #0 PREEMPT(full) [ 487.042864][T12035] Tainted: [L]=SOFTLOCKUP [ 487.042873][T12035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 487.042888][T12035] Call Trace: [ 487.042895][T12035] [ 487.042904][T12035] dump_stack_lvl+0x100/0x190 [ 487.042936][T12035] should_fail_ex.cold+0x5/0xa [ 487.042963][T12035] should_failslab+0xc2/0x120 [ 487.042994][T12035] __kmalloc_noprof+0xfc/0x820 [ 487.043021][T12035] ? __register_sysctl_table+0xac/0x1650 [ 487.043073][T12035] __register_sysctl_table+0xac/0x1650 [ 487.043113][T12035] ? is_module_address+0x5f/0xf0 [ 487.043156][T12035] ? __pfx___register_sysctl_table+0x10/0x10 [ 487.043195][T12035] ? is_module_address+0x69/0xf0 [ 487.043232][T12035] ? register_net_sysctl_sz+0x222/0x430 [ 487.043357][T12035] ? __asan_memcpy+0x3c/0x60 [ 487.043383][T12035] sysctl_core_net_init+0xe6/0x290 [ 487.043421][T12035] ? __pfx_sysctl_core_net_init+0x10/0x10 [ 487.043478][T12035] ops_init+0x1e2/0x5f0 [ 487.043509][T12035] setup_net+0x118/0x3a0 [ 487.043539][T12035] ? __pfx_setup_net+0x10/0x10 [ 487.043569][T12035] ? mutex_init_lockdep+0xf1/0x120 [ 487.043612][T12035] copy_net_ns+0x46f/0x7c0 [ 487.043646][T12035] create_new_namespaces+0x3ea/0xac0 [ 487.043693][T12035] unshare_nsproxy_namespaces+0xf2/0x220 [ 487.043719][T12035] ksys_unshare+0x438/0xab0 [ 487.043749][T12035] ? __pfx_ksys_unshare+0x10/0x10 [ 487.043788][T12035] __x64_sys_unshare+0x31/0x40 [ 487.043816][T12035] do_syscall_64+0x115/0x840 [ 487.043838][T12035] ? clear_bhb_loop+0x40/0x90 [ 487.043867][T12035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.043891][T12035] RIP: 0033:0x7fe1f879de59 [ 487.043911][T12035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.043935][T12035] RSP: 002b:00007fe1f9737028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 487.043958][T12035] RAX: ffffffffffffffda RBX: 00007fe1f8a25fa0 RCX: 00007fe1f879de59 [ 487.043974][T12035] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 487.043989][T12035] RBP: 00007fe1f8833e6f R08: 0000000000000000 R09: 0000000000000000 [ 487.044003][T12035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.044017][T12035] R13: 00007fe1f8a26038 R14: 00007fe1f8a25fa0 R15: 00007ffd75279828 [ 487.044055][T12035] [ 488.904633][T12065] random: crng reseeded on system resumption [ 490.171099][ T5632] Bluetooth: hci0: unexpected event 0x2c length: 1022 > 17 [ 491.661053][T12101] netlink: 'syz.2.1246': attribute type 11 has an invalid length. [ 491.760423][T12101] netlink: 'syz.2.1246': attribute type 11 has an invalid length. [ 491.838199][T12101] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1246'. [ 492.595486][ T5632] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 492.852724][T12104] Process accounting resumed [ 493.197464][T12125] futex_wake_op: syz.3.1251 tries to shift op by -2048; fix this program [ 493.264039][T12125] futex_wake_op: syz.3.1251 tries to shift op by -2048; fix this program [ 494.148971][T12140] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 494.574482][T12143] HfR: entered promiscuous mode [ 495.110195][T12157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1256'. [ 496.072837][ T5632] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 496.455968][T12183] FAULT_INJECTION: forcing a failure. [ 496.455968][T12183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.519192][T12183] CPU: 0 UID: 0 PID: 12183 Comm: syz.0.1262 Tainted: G L syzkaller #0 PREEMPT(full) [ 496.519229][T12183] Tainted: [L]=SOFTLOCKUP [ 496.519238][T12183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 496.519252][T12183] Call Trace: [ 496.519259][T12183] [ 496.519267][T12183] dump_stack_lvl+0x100/0x190 [ 496.519298][T12183] should_fail_ex.cold+0x5/0xa [ 496.519324][T12183] _copy_from_iter+0x1f4/0x1690 [ 496.519367][T12183] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 496.519402][T12183] ? __pfx__copy_from_iter+0x10/0x10 [ 496.519447][T12183] copy_page_from_iter+0x238/0x300 [ 496.519484][T12183] anon_pipe_write+0xc0b/0x1d90 [ 496.519523][T12183] ? aa_path_link+0x321/0x3b0 [ 496.519562][T12183] ? __pfx_anon_pipe_write+0x10/0x10 [ 496.519601][T12183] ? __pfx___might_resched+0x10/0x10 [ 496.519635][T12183] ? get_pid_task+0xfc/0x250 [ 496.519673][T12183] ? bpf_lsm_file_permission+0x9/0x10 [ 496.519722][T12183] ? security_file_permission+0x76/0x210 [ 496.519751][T12183] ? rw_verify_area+0xce/0x6d0 [ 496.519784][T12183] vfs_write+0x6ac/0x1050 [ 496.519817][T12183] ? __pfx_anon_pipe_write+0x10/0x10 [ 496.519855][T12183] ? __pfx_vfs_write+0x10/0x10 [ 496.519886][T12183] ? find_held_lock+0x2b/0x80 [ 496.519929][T12183] ksys_write+0x1f8/0x250 [ 496.519962][T12183] ? __pfx_ksys_write+0x10/0x10 [ 496.520003][T12183] do_syscall_64+0x115/0x840 [ 496.520024][T12183] ? clear_bhb_loop+0x40/0x90 [ 496.520051][T12183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.520074][T12183] RIP: 0033:0x7f89e219de59 [ 496.520092][T12183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.520133][T12183] RSP: 002b:00007f89e30da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 496.520154][T12183] RAX: ffffffffffffffda RBX: 00007f89e2425fa0 RCX: 00007f89e219de59 [ 496.520170][T12183] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 496.520184][T12183] RBP: 00007f89e30da090 R08: 0000000000000000 R09: 0000000000000000 [ 496.520198][T12183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 496.520212][T12183] R13: 00007f89e2426038 R14: 00007f89e2425fa0 R15: 00007ffce759f848 [ 496.520241][T12183] [ 497.011609][T12173] vivid-007: ================= START STATUS ================= [ 497.045220][T12173] vivid-007: Generate PTS: true [ 497.077697][T12173] vivid-007: Generate SCR: true [ 497.157605][T12173] tpg source WxH: 320x240 (Y'CbCr) [ 497.212356][T12173] tpg field: 1 [ 497.222462][T12173] tpg crop: (0,0)/320x240 [ 497.234062][T12171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1260'. [ 497.255364][T12173] tpg compose: (0,0)/320x240 [ 497.288360][T12173] tpg colorspace: 8 [ 497.308886][T12173] tpg transfer function: 0/0 [ 497.347643][T12173] tpg Y'CbCr encoding: 0/0 [ 497.366903][T12173] tpg quantization: 0/0 [ 497.391813][T12173] tpg RGB range: 0/2 [ 497.417834][T12173] vivid-007: ================== END STATUS ================== [ 497.640872][ T30] audit: type=1800 audit(4294986060.328:12): pid=12190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1263" name="lu_gp_id" dev="configfs" ino=46507 res=0 errno=0 [ 498.120617][ T5625] Bluetooth: hci3: command 0x2016 tx timeout [ 500.195702][ T5632] Bluetooth: hci3: command 0x2016 tx timeout [ 500.304346][T12233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1275'. [ 500.546477][T12238] NFSD: Failed to start, no listeners configured. [ 500.733211][T12231] binder: 12230:12231 ioctl c018620c 200000004f40 returned -22 [ 501.123006][T12239] NFSD: Failed to start, no listeners configured. [ 501.373600][T12253] Unable to find swap-space signature [ 501.425082][T12253] Unable to find swap-space signature [ 501.636590][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.643334][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.884004][T12260] FAULT_INJECTION: forcing a failure. [ 501.884004][T12260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 501.966799][T12260] CPU: 0 UID: 0 PID: 12260 Comm: syz.0.1284 Tainted: G L syzkaller #0 PREEMPT(full) [ 501.966835][T12260] Tainted: [L]=SOFTLOCKUP [ 501.966843][T12260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 501.966856][T12260] Call Trace: [ 501.966863][T12260] [ 501.966871][T12260] dump_stack_lvl+0x100/0x190 [ 501.966901][T12260] should_fail_ex.cold+0x5/0xa [ 501.966926][T12260] _copy_from_iter+0x1f4/0x1690 [ 501.966960][T12260] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 501.966993][T12260] ? __pfx__copy_from_iter+0x10/0x10 [ 501.967036][T12260] copy_page_from_iter+0x238/0x300 [ 501.967071][T12260] anon_pipe_write+0xc0b/0x1d90 [ 501.967117][T12260] ? aa_path_link+0x321/0x3b0 [ 501.967154][T12260] ? __pfx_anon_pipe_write+0x10/0x10 [ 501.967188][T12260] ? __pfx___might_resched+0x10/0x10 [ 501.967221][T12260] ? get_pid_task+0xfc/0x250 [ 501.967259][T12260] ? bpf_lsm_file_permission+0x9/0x10 [ 501.967293][T12260] ? security_file_permission+0x76/0x210 [ 501.967322][T12260] ? rw_verify_area+0xce/0x6d0 [ 501.967356][T12260] vfs_write+0x6ac/0x1050 [ 501.967390][T12260] ? __pfx_anon_pipe_write+0x10/0x10 [ 501.967427][T12260] ? __pfx_vfs_write+0x10/0x10 [ 501.967459][T12260] ? find_held_lock+0x2b/0x80 [ 501.967501][T12260] ksys_write+0x1f8/0x250 [ 501.967534][T12260] ? __pfx_ksys_write+0x10/0x10 [ 501.967576][T12260] do_syscall_64+0x115/0x840 [ 501.967596][T12260] ? clear_bhb_loop+0x40/0x90 [ 501.967624][T12260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.967647][T12260] RIP: 0033:0x7f89e219de59 [ 501.967664][T12260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 501.967732][T12260] RSP: 002b:00007f89e30da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 501.967753][T12260] RAX: ffffffffffffffda RBX: 00007f89e2425fa0 RCX: 00007f89e219de59 [ 501.967769][T12260] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 501.967783][T12260] RBP: 00007f89e30da090 R08: 0000000000000000 R09: 0000000000000000 [ 501.967797][T12260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 501.967811][T12260] R13: 00007f89e2426038 R14: 00007f89e2425fa0 R15: 00007ffce759f848 [ 501.967841][T12260] [ 503.138597][T12265] Process accounting resumed [ 503.860186][T12286] random: crng reseeded on system resumption [ 504.144732][T12284] hub 1-0:1.0: USB hub found [ 504.234849][T12284] hub 1-0:1.0: 1 port detected [ 504.426936][T12294] netlink: 'syz.0.1291': attribute type 4 has an invalid length. [ 504.495000][T12294] netlink: 314 bytes leftover after parsing attributes in process `syz.0.1291'. [ 505.668398][T12312] FAULT_INJECTION: forcing a failure. [ 505.668398][T12312] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 505.747173][T12312] CPU: 0 UID: 0 PID: 12312 Comm: syz.3.1295 Tainted: G L syzkaller #0 PREEMPT(full) [ 505.747210][T12312] Tainted: [L]=SOFTLOCKUP [ 505.747218][T12312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 505.747232][T12312] Call Trace: [ 505.747240][T12312] [ 505.747248][T12312] dump_stack_lvl+0x100/0x190 [ 505.747279][T12312] should_fail_ex.cold+0x5/0xa [ 505.747301][T12312] ? prepare_alloc_pages+0x16d/0x5f0 [ 505.747338][T12312] should_fail_alloc_page+0xeb/0x140 [ 505.747370][T12312] prepare_alloc_pages+0x1f0/0x5f0 [ 505.747427][T12312] ? find_held_lock+0x2b/0x80 [ 505.747457][T12312] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 505.747482][T12312] ? __up_read+0x333/0x980 [ 505.747505][T12312] ? __pfx___up_read+0x10/0x10 [ 505.747525][T12312] ? do_user_addr_fault+0x7de/0x12f0 [ 505.747554][T12312] ? do_user_addr_fault+0x7de/0x12f0 [ 505.747588][T12312] ? __lock_acquire+0x49f/0x1a40 [ 505.747625][T12312] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 505.747658][T12312] ? find_held_lock+0x2b/0x80 [ 505.747683][T12312] ? __might_fault+0xc5/0x140 [ 505.747710][T12312] ? __might_fault+0xc5/0x140 [ 505.747739][T12312] ? _copy_from_iter+0x270/0x1690 [ 505.747774][T12312] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 505.747807][T12312] ? policy_nodemask+0xed/0x4f0 [ 505.747841][T12312] alloc_pages_mpol+0x1fb/0x540 [ 505.747872][T12312] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 505.747911][T12312] alloc_pages_noprof+0x1a/0x160 [ 505.747947][T12312] anon_pipe_write+0x14f2/0x1d90 [ 505.747987][T12312] ? aa_path_link+0x321/0x3b0 [ 505.748026][T12312] ? __pfx_anon_pipe_write+0x10/0x10 [ 505.748061][T12312] ? __pfx___might_resched+0x10/0x10 [ 505.748094][T12312] ? get_pid_task+0xfc/0x250 [ 505.748162][T12312] ? bpf_lsm_file_permission+0x9/0x10 [ 505.748199][T12312] ? security_file_permission+0x76/0x210 [ 505.748229][T12312] ? rw_verify_area+0xce/0x6d0 [ 505.748263][T12312] vfs_write+0x6ac/0x1050 [ 505.748299][T12312] ? __pfx_anon_pipe_write+0x10/0x10 [ 505.748340][T12312] ? __pfx_vfs_write+0x10/0x10 [ 505.748372][T12312] ? find_held_lock+0x2b/0x80 [ 505.748416][T12312] ksys_write+0x1f8/0x250 [ 505.748451][T12312] ? __pfx_ksys_write+0x10/0x10 [ 505.748494][T12312] do_syscall_64+0x115/0x840 [ 505.748515][T12312] ? clear_bhb_loop+0x40/0x90 [ 505.748543][T12312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.748567][T12312] RIP: 0033:0x7fbdd7d9de59 [ 505.748585][T12312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.748621][T12312] RSP: 002b:00007fbdd8c56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 505.748642][T12312] RAX: ffffffffffffffda RBX: 00007fbdd8025fa0 RCX: 00007fbdd7d9de59 [ 505.748657][T12312] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 505.748670][T12312] RBP: 00007fbdd8c56090 R08: 0000000000000000 R09: 0000000000000000 [ 505.748684][T12312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 505.748704][T12312] R13: 00007fbdd8026038 R14: 00007fbdd8025fa0 R15: 00007ffe08a0ee58 [ 505.748732][T12312] [ 507.570564][T12340] zswap: compressor û not available [ 507.990278][ T5625] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 507.990308][ T5625] Bluetooth: hci1: unexpected subevent 0x0e length: 725 > 15 [ 508.006544][ T5625] Bluetooth: hci1: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 510.790585][T12401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1315'. [ 513.807525][ T30] audit: type=1400 audit(4294986076.498:13): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=12429 comm="syz.1.1320" [ 514.453480][T12454] random: crng reseeded on system resumption [ 514.845533][T12460] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1325'. [ 515.879805][ T5625] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 516.445018][T12481] FAULT_INJECTION: forcing a failure. [ 516.445018][T12481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 516.531273][T12481] CPU: 0 UID: 0 PID: 12481 Comm: syz.1.1333 Tainted: G L syzkaller #0 PREEMPT(full) [ 516.531311][T12481] Tainted: [L]=SOFTLOCKUP [ 516.531319][T12481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 516.531333][T12481] Call Trace: [ 516.531341][T12481] [ 516.531349][T12481] dump_stack_lvl+0x100/0x190 [ 516.531380][T12481] should_fail_ex.cold+0x5/0xa [ 516.531406][T12481] _copy_from_iter+0x1f4/0x1690 [ 516.531441][T12481] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 516.531476][T12481] ? __pfx__copy_from_iter+0x10/0x10 [ 516.531511][T12481] ? alloc_pages_mpol+0x25a/0x540 [ 516.531544][T12481] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 516.531583][T12481] copy_page_from_iter+0x238/0x300 [ 516.531619][T12481] anon_pipe_write+0xc0b/0x1d90 [ 516.531659][T12481] ? aa_path_link+0x321/0x3b0 [ 516.531698][T12481] ? __pfx_anon_pipe_write+0x10/0x10 [ 516.531732][T12481] ? __pfx___might_resched+0x10/0x10 [ 516.531766][T12481] ? get_pid_task+0xfc/0x250 [ 516.531803][T12481] ? bpf_lsm_file_permission+0x9/0x10 [ 516.531839][T12481] ? security_file_permission+0x76/0x210 [ 516.531874][T12481] ? rw_verify_area+0xce/0x6d0 [ 516.531908][T12481] vfs_write+0x6ac/0x1050 [ 516.531944][T12481] ? __pfx_anon_pipe_write+0x10/0x10 [ 516.531983][T12481] ? __pfx_vfs_write+0x10/0x10 [ 516.532016][T12481] ? find_held_lock+0x2b/0x80 [ 516.532064][T12481] ksys_write+0x1f8/0x250 [ 516.532098][T12481] ? __pfx_ksys_write+0x10/0x10 [ 516.532141][T12481] do_syscall_64+0x115/0x840 [ 516.532162][T12481] ? clear_bhb_loop+0x40/0x90 [ 516.532190][T12481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.532214][T12481] RIP: 0033:0x7fe1f879de59 [ 516.532233][T12481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.532256][T12481] RSP: 002b:00007fe1f9737028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 516.532277][T12481] RAX: ffffffffffffffda RBX: 00007fe1f8a25fa0 RCX: 00007fe1f879de59 [ 516.532293][T12481] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 516.532307][T12481] RBP: 00007fe1f9737090 R08: 0000000000000000 R09: 0000000000000000 [ 516.532321][T12481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 516.532335][T12481] R13: 00007fe1f8a26038 R14: 00007fe1f8a25fa0 R15: 00007ffd75279828 [ 516.532364][T12481] [ 519.159598][ T5632] Bluetooth: hci3: command 0x2016 tx timeout [ 522.652378][T12572] hub 1-0:1.0: USB hub found [ 522.713668][T12572] hub 1-0:1.0: 1 port detected [ 524.328697][T12568] Process accounting paused [ 525.194809][T12588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1352'. [ 525.328584][T12591] Line length is too long: Should be less than 4094 [ 529.532471][T12653] vivid-007: ================= START STATUS ================= [ 529.602812][T12653] vivid-007: Generate PTS: true [ 529.618458][T12653] vivid-007: Generate SCR: true [ 529.663375][T12653] tpg source WxH: 320x240 (Y'CbCr) [ 529.687602][T12653] tpg field: 1 [ 529.749460][T12653] tpg crop: (0,0)/320x240 [ 529.803553][T12653] tpg compose: (0,0)/320x240 [ 529.829406][T12653] tpg colorspace: 8 [ 529.858058][T12653] tpg transfer function: 0/0 [ 529.887986][T12653] tpg Y'CbCr encoding: 0/0 [ 529.908982][T12653] tpg quantization: 0/0 [ 529.929949][T12653] tpg RGB range: 0/2 [ 529.954019][T12653] vivid-007: ================== END STATUS ================== [ 531.937668][T12696] FAULT_INJECTION: forcing a failure. [ 531.937668][T12696] name failslab, interval 1, probability 0, space 0, times 0 [ 532.028632][T12696] CPU: 0 UID: 0 PID: 12696 Comm: syz.3.1373 Tainted: G L syzkaller #0 PREEMPT(full) [ 532.028670][T12696] Tainted: [L]=SOFTLOCKUP [ 532.028697][T12696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 532.028712][T12696] Call Trace: [ 532.028719][T12696] [ 532.028728][T12696] dump_stack_lvl+0x100/0x190 [ 532.028758][T12696] should_fail_ex.cold+0x5/0xa [ 532.028785][T12696] should_failslab+0xc2/0x120 [ 532.028817][T12696] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 532.028846][T12696] ? proc_alloc_inode+0x25/0x200 [ 532.028955][T12696] ? __pfx_proc_alloc_inode+0x10/0x10 [ 532.028991][T12696] proc_alloc_inode+0x25/0x200 [ 532.029025][T12696] alloc_inode+0x68/0x250 [ 532.029055][T12696] new_inode+0x22/0x1c0 [ 532.029086][T12696] proc_pid_make_inode+0x22/0x160 [ 532.029121][T12696] proc_pident_instantiate+0x85/0x310 [ 532.029160][T12696] proc_fill_cache+0x2a3/0x3a0 [ 532.029194][T12696] ? __pfx_proc_pident_instantiate+0x10/0x10 [ 532.029231][T12696] ? __pfx_proc_fill_cache+0x10/0x10 [ 532.029275][T12696] proc_pident_readdir+0x1bc/0x530 [ 532.029317][T12696] iterate_dir+0x296/0xae0 [ 532.029354][T12696] __x64_sys_getdents+0x13b/0x2b0 [ 532.029388][T12696] ? __pfx___x64_sys_getdents+0x10/0x10 [ 532.029422][T12696] ? __pfx_filldir+0x10/0x10 [ 532.029464][T12696] do_syscall_64+0x115/0x840 [ 532.029494][T12696] ? clear_bhb_loop+0x40/0x90 [ 532.029523][T12696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.029548][T12696] RIP: 0033:0x7fbdd7d9de59 [ 532.029568][T12696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.029593][T12696] RSP: 002b:00007fbdd8c56028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 532.029616][T12696] RAX: ffffffffffffffda RBX: 00007fbdd8025fa0 RCX: 00007fbdd7d9de59 [ 532.029632][T12696] RDX: 000000000000a2b0 RSI: 0000000000000000 RDI: 0000000000000005 [ 532.029647][T12696] RBP: 00007fbdd7e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 532.029661][T12696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.029675][T12696] R13: 00007fbdd8026038 R14: 00007fbdd8025fa0 R15: 00007ffe08a0ee58 [ 532.029708][T12696] [ 533.740232][T12694] Process accounting paused [ 533.919222][T12719] random: crng reseeded on system resumption [ 534.238250][T12721] hub 1-0:1.0: USB hub found [ 534.357796][T12721] hub 1-0:1.0: 1 port detected [ 535.824037][T12746] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1380'. [ 535.847889][T12746] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1380'. [ 536.302811][T12765] FAULT_INJECTION: forcing a failure. [ 536.302811][T12765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 536.384040][T12765] CPU: 0 UID: 0 PID: 12765 Comm: syz.0.1383 Tainted: G L syzkaller #0 PREEMPT(full) [ 536.384076][T12765] Tainted: [L]=SOFTLOCKUP [ 536.384083][T12765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 536.384096][T12765] Call Trace: [ 536.384103][T12765] [ 536.384111][T12765] dump_stack_lvl+0x100/0x190 [ 536.384140][T12765] should_fail_ex.cold+0x5/0xa [ 536.384165][T12765] _copy_from_iter+0x1f4/0x1690 [ 536.384199][T12765] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 536.384233][T12765] ? __pfx__copy_from_iter+0x10/0x10 [ 536.384266][T12765] ? alloc_pages_mpol+0x25a/0x540 [ 536.384298][T12765] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 536.384332][T12765] copy_page_from_iter+0x238/0x300 [ 536.384368][T12765] anon_pipe_write+0xc0b/0x1d90 [ 536.384406][T12765] ? aa_path_link+0x321/0x3b0 [ 536.384453][T12765] ? __pfx_anon_pipe_write+0x10/0x10 [ 536.384487][T12765] ? __pfx___might_resched+0x10/0x10 [ 536.384520][T12765] ? get_pid_task+0xfc/0x250 [ 536.384556][T12765] ? bpf_lsm_file_permission+0x9/0x10 [ 536.384591][T12765] ? security_file_permission+0x76/0x210 [ 536.384619][T12765] ? rw_verify_area+0xce/0x6d0 [ 536.384658][T12765] vfs_write+0x6ac/0x1050 [ 536.384692][T12765] ? __pfx_anon_pipe_write+0x10/0x10 [ 536.384730][T12765] ? __pfx_vfs_write+0x10/0x10 [ 536.384761][T12765] ? find_held_lock+0x2b/0x80 [ 536.384804][T12765] ksys_write+0x1f8/0x250 [ 536.384837][T12765] ? __pfx_ksys_write+0x10/0x10 [ 536.384879][T12765] do_syscall_64+0x115/0x840 [ 536.384900][T12765] ? clear_bhb_loop+0x40/0x90 [ 536.384927][T12765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.384950][T12765] RIP: 0033:0x7f89e219de59 [ 536.384967][T12765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.384990][T12765] RSP: 002b:00007f89e30da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 536.385011][T12765] RAX: ffffffffffffffda RBX: 00007f89e2425fa0 RCX: 00007f89e219de59 [ 536.385026][T12765] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 536.385039][T12765] RBP: 00007f89e30da090 R08: 0000000000000000 R09: 0000000000000000 [ 536.385053][T12765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 536.385066][T12765] R13: 00007f89e2426038 R14: 00007f89e2425fa0 R15: 00007ffce759f848 [ 536.385095][T12765] [ 539.497590][T12806] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1392'. [ 542.894897][T12851] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1401'. [ 545.041815][T12884] futex_wake_op: syz.2.1409 tries to shift op by -2048; fix this program [ 545.115065][T12884] futex_wake_op: syz.2.1409 tries to shift op by -2048; fix this program [ 545.369039][T12893] random: crng reseeded on system resumption [ 546.319259][T12900] futex_wake_op: syz.1.1412 tries to shift op by -2048; fix this program [ 546.376911][T12900] futex_wake_op: syz.1.1412 tries to shift op by -2048; fix this program [ 548.283661][T12904] random: crng reseeded on system resumption [ 551.193959][T12917] could not allocate digest TFM handle [ 551.737476][T12950] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1422'. [ 553.691781][T12977] netlink: 290 bytes leftover after parsing attributes in process `syz.3.1427'. [ 554.054069][T12981] ubi: mtd0 is already attached to ubi1 [ 554.199778][T12989] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1430'. [ 556.002294][T12984] Process accounting resumed [ 556.699331][T13006] zswap: compressor not available [ 557.069608][T13035] FAULT_INJECTION: forcing a failure. [ 557.069608][T13035] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 557.140177][T13035] CPU: 0 UID: 0 PID: 13035 Comm: syz.1.1439 Tainted: G L syzkaller #0 PREEMPT(full) [ 557.140212][T13035] Tainted: [L]=SOFTLOCKUP [ 557.140220][T13035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 557.140233][T13035] Call Trace: [ 557.140242][T13035] [ 557.140269][T13035] dump_stack_lvl+0x100/0x190 [ 557.140302][T13035] should_fail_ex.cold+0x5/0xa [ 557.140326][T13035] ? prepare_alloc_pages+0x16d/0x5f0 [ 557.140361][T13035] should_fail_alloc_page+0xeb/0x140 [ 557.140392][T13035] prepare_alloc_pages+0x1f0/0x5f0 [ 557.140427][T13035] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 557.140460][T13035] ? find_held_lock+0x2b/0x80 [ 557.140487][T13035] ? is_bpf_text_address+0x8a/0x1a0 [ 557.140518][T13035] ? is_bpf_text_address+0x8a/0x1a0 [ 557.140548][T13035] ? bpf_ksym_find+0x124/0x1c0 [ 557.140570][T13035] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 557.140602][T13035] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 557.140625][T13035] ? is_bpf_text_address+0x94/0x1a0 [ 557.140657][T13035] ? __kernel_text_address+0xd/0x30 [ 557.140690][T13035] ? unwind_get_return_address+0x59/0xa0 [ 557.140727][T13035] ? __lock_acquire+0x49f/0x1a40 [ 557.140770][T13035] ? look_up_lock_class+0x64/0x120 [ 557.140811][T13035] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 557.140844][T13035] ? policy_nodemask+0xed/0x4f0 [ 557.140876][T13035] alloc_pages_mpol+0x1fb/0x540 [ 557.140917][T13035] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 557.140948][T13035] ? __thp_vma_allowable_orders+0x1d9/0xf00 [ 557.140990][T13035] alloc_pages_noprof+0x1a/0x160 [ 557.141025][T13035] pte_alloc_one+0x1c/0x3d0 [ 557.141058][T13035] do_fault+0x86c/0x1750 [ 557.141093][T13035] __handle_mm_fault+0x187d/0x2a00 [ 557.141134][T13035] ? mt_find+0x45e/0x8e0 [ 557.141235][T13035] ? __pfx___handle_mm_fault+0x10/0x10 [ 557.141270][T13035] ? __pfx_mt_find+0x10/0x10 [ 557.141310][T13035] ? find_vma+0xbf/0x140 [ 557.141337][T13035] ? __pfx_find_vma+0x10/0x10 [ 557.141366][T13035] handle_mm_fault+0x37b/0xa30 [ 557.141407][T13035] do_user_addr_fault+0x74c/0x12f0 [ 557.141445][T13035] exc_page_fault+0x6f/0xd0 [ 557.141494][T13035] asm_exc_page_fault+0x26/0x30 [ 557.141516][T13035] RIP: 0010:rep_movs_alternative+0xf/0xa0 [ 557.141547][T13035] Code: c4 10 c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 7d 9d 04 00 66 66 [ 557.141571][T13035] RSP: 0018:ffffc90004eef9b0 EFLAGS: 00050202 [ 557.141590][T13035] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000007 [ 557.141604][T13035] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90004eefa38 [ 557.141617][T13035] RBP: 0000000000000007 R08: 0000000000000001 R09: fffff520009ddf47 [ 557.141631][T13035] R10: ffffc90004eefa3e R11: 0000000000000000 R12: 0000000000000000 [ 557.141645][T13035] R13: ffffc90004eefa38 R14: 1ffff920009ddf41 R15: ffffc90004eefd7c [ 557.141673][T13035] _copy_from_user+0x98/0xd0 [ 557.141707][T13035] ____sys_sendmsg+0x1d1/0xbe0 [ 557.141745][T13035] ? __pfx_____sys_sendmsg+0x10/0x10 [ 557.141782][T13035] ? __pfx__kstrtoull+0x10/0x10 [ 557.141808][T13035] ___sys_sendmsg+0x190/0x1e0 [ 557.141844][T13035] ? __pfx____sys_sendmsg+0x10/0x10 [ 557.141895][T13035] ? find_held_lock+0x2b/0x80 [ 557.141938][T13035] __sys_sendmmsg+0x20c/0x440 [ 557.141968][T13035] ? __pfx___sys_sendmmsg+0x10/0x10 [ 557.141994][T13035] ? ksys_write+0x190/0x250 [ 557.142048][T13035] ? fput+0x79/0x100 [ 557.142070][T13035] ? ksys_write+0x1ac/0x250 [ 557.142102][T13035] ? __pfx_ksys_write+0x10/0x10 [ 557.142139][T13035] __x64_sys_sendmmsg+0x9c/0x100 [ 557.142165][T13035] ? lockdep_hardirqs_on+0x78/0x100 [ 557.142200][T13035] do_syscall_64+0x115/0x840 [ 557.142219][T13035] ? clear_bhb_loop+0x40/0x90 [ 557.142247][T13035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.142270][T13035] RIP: 0033:0x7fe1f879de59 [ 557.142288][T13035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.142310][T13035] RSP: 002b:00007fe1f9716028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 557.142329][T13035] RAX: ffffffffffffffda RBX: 00007fe1f8a26090 RCX: 00007fe1f879de59 [ 557.142343][T13035] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 000000000000000a [ 557.142357][T13035] RBP: 00007fe1f9716090 R08: 0000000000000000 R09: 0000000000000000 [ 557.142370][T13035] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 557.142383][T13035] R13: 00007fe1f8a26128 R14: 00007fe1f8a26090 R15: 00007ffd75279828 [ 557.142431][T13035] [ 559.607363][T13055] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1444'. [ 563.077406][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.090009][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.093625][T13094] Process accounting resumed [ 565.400477][ T5625] Bluetooth: hci1: Unexpected cc 0x7c89 with no status [ 567.828894][T11130] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 567.901324][T13171] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1468'. [ 568.239683][T13171] veth0_macvtap: left promiscuous mode [ 568.318083][T13171] macvtap0: entered promiscuous mode [ 568.377260][T13171] macvtap0: entered allmulticast mode [ 568.790110][T11130] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 569.238851][ T30] audit: type=1800 audit(4294988179.937:14): pid=13199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1477" name="discovery_nqn" dev="configfs" ino=53370 res=0 errno=0 [ 569.785026][T11130] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 570.778726][ T10] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 571.772992][ T10] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 572.107688][T13239] netlink: 266 bytes leftover after parsing attributes in process `syz.1.1487'. [ 572.158554][T13239] IPv6: NLM_F_CREATE should be specified when creating new route [ 572.772170][ T5723] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 573.771575][ T5723] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 574.755915][ T10] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 575.449428][T13303] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1501'. [ 575.507056][T13304] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1499'. [ 575.750522][ T10] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 576.751287][ T10] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 576.781944][ T5625] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 577.738826][ T10] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 578.733152][ T5704] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 578.844474][T13329] Bluetooth: hci3: command 0x2016 tx timeout [ 579.727482][ T5704] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 580.721756][ T10] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 580.912486][T13329] Bluetooth: hci3: command 0x2016 tx timeout [ 581.716066][ T5704] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 581.984138][T13402] futex_wake_op: syz.1.1523 tries to shift op by -2048; fix this program [ 582.015250][T13403] input: f¬ as /devices/virtual/input/input73 [ 582.055412][T13402] futex_wake_op: syz.1.1523 tries to shift op by -2048; fix this program [ 582.571374][T13414] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1524'. [ 582.711917][ T5704] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 582.842775][T13418] syz.2.1526 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 583.727889][ T10] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 584.699308][ T5704] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 585.274338][T13447] futex_wake_op: syz.3.1533 tries to shift op by -2048; fix this program [ 585.315053][T13447] futex_wake_op: syz.3.1533 tries to shift op by -2048; fix this program [ 585.694626][ T5704] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 586.689066][ T5704] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 586.913930][T13424] Process accounting resumed [ 587.682019][T11130] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 588.676321][T11130] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 588.945482][T13482] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1541'. [ 589.253380][T13477] kexec: Could not allocate control_code_buffer [ 589.670607][ T5730] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 590.664907][ T5730] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 591.567053][T13520] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1545'. [ 593.078973][T13541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1551'. [ 593.148364][T13541] HfR: entered promiscuous mode [ 593.992815][T13545] Process accounting paused [ 594.040122][T13550] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1553'. [ 595.455023][T13564] EXT4-fs error (device sda1): ext4_lookup:1785: inode #449: comm syz.1.1557: iget: checksum invalid [ 595.538101][T13564] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 595.594288][T13564] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -74 [ 595.665719][T13564] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 602.056861][T13668] FAULT_INJECTION: forcing a failure. [ 602.056861][T13668] name failslab, interval 1, probability 0, space 0, times 0 [ 602.125436][T13671] openvswitch: netlink: Multiple metadata blocks provided [ 602.181986][T13668] CPU: 0 UID: 0 PID: 13668 Comm: syz.3.1576 Tainted: G L syzkaller #0 PREEMPT(full) [ 602.182025][T13668] Tainted: [L]=SOFTLOCKUP [ 602.182033][T13668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 602.182048][T13668] Call Trace: [ 602.182056][T13668] [ 602.182064][T13668] dump_stack_lvl+0x100/0x190 [ 602.182106][T13668] should_fail_ex.cold+0x5/0xa [ 602.182132][T13668] should_failslab+0xc2/0x120 [ 602.182165][T13668] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 602.182194][T13668] ? __d_alloc+0x35/0xa50 [ 602.182222][T13668] __d_alloc+0x35/0xa50 [ 602.182248][T13668] d_alloc+0x4a/0x1e0 [ 602.182273][T13668] lookup_one_qstr_excl+0x171/0x250 [ 602.182305][T13668] start_dirop+0x59/0xb0 [ 602.182341][T13668] simple_start_creating+0xf9/0x110 [ 602.182379][T13668] ? __pfx_simple_start_creating+0x10/0x10 [ 602.182420][T13668] ? mntput+0x70/0xa0 [ 602.182454][T13668] ? simple_pin_fs+0xa3/0x190 [ 602.182489][T13668] debugfs_start_creating.part.0+0x82/0x170 [ 602.182524][T13668] __debugfs_create_file+0xb3/0x4f0 [ 602.182559][T13668] debugfs_create_file_full+0x41/0x60 [ 602.182594][T13668] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 602.182632][T13668] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 602.182668][T13668] ? ida_alloc_range+0x70d/0x830 [ 602.182744][T13668] ? kasan_save_track+0x14/0x30 [ 602.182771][T13668] ? __kasan_kmalloc+0xaa/0xb0 [ 602.182799][T13668] ? lockdep_init_map_type+0x5c/0x250 [ 602.182841][T13668] preinit_net.part.0+0x252/0x920 [ 602.182874][T13668] copy_net_ns+0x339/0x7c0 [ 602.182909][T13668] create_new_namespaces+0x3ea/0xac0 [ 602.182956][T13668] unshare_nsproxy_namespaces+0xf2/0x220 [ 602.182982][T13668] ksys_unshare+0x438/0xab0 [ 602.183013][T13668] ? __pfx_ksys_unshare+0x10/0x10 [ 602.183053][T13668] __x64_sys_unshare+0x31/0x40 [ 602.183086][T13668] do_syscall_64+0x115/0x840 [ 602.183108][T13668] ? clear_bhb_loop+0x40/0x90 [ 602.183137][T13668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.183163][T13668] RIP: 0033:0x7fbdd7d9de59 [ 602.183182][T13668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 602.183206][T13668] RSP: 002b:00007fbdd8c56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 602.183229][T13668] RAX: ffffffffffffffda RBX: 00007fbdd8025fa0 RCX: 00007fbdd7d9de59 [ 602.183246][T13668] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 602.183260][T13668] RBP: 00007fbdd7e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 602.183275][T13668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 602.183289][T13668] R13: 00007fbdd8026038 R14: 00007fbdd8025fa0 R15: 00007ffe08a0ee58 [ 602.183333][T13668] [ 604.154358][T13694] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1585'. [ 606.199488][T13725] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1592'. [ 609.743097][T13770] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1601'. [ 614.546819][T13830] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1613'. [ 615.175458][T13837] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1615'. [ 615.824912][T13845] futex_wake_op: syz.3.1617 tries to shift op by -2048; fix this program [ 615.916724][T13845] futex_wake_op: syz.3.1617 tries to shift op by -2048; fix this program [ 616.206384][T13849] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1618'. [ 616.351895][T13855] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1619'. [ 619.119927][T13867] Process accounting paused [ 619.666378][T13891] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1627'. [ 620.331412][T13895] futex_wake_op: syz.1.1628 tries to shift op by -2048; fix this program [ 620.360897][T13895] futex_wake_op: syz.1.1628 tries to shift op by -2048; fix this program [ 621.726138][T13923] ubi: mtd0 is already attached to ubi1 [ 621.892272][T13926] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1637'. [ 622.152786][T13933] FAULT_INJECTION: forcing a failure. [ 622.152786][T13933] name failslab, interval 1, probability 0, space 0, times 0 [ 622.202510][T13933] CPU: 0 UID: 0 PID: 13933 Comm: syz.3.1635 Tainted: G L syzkaller #0 PREEMPT(full) [ 622.202553][T13933] Tainted: [L]=SOFTLOCKUP [ 622.202562][T13933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 622.202577][T13933] Call Trace: [ 622.202585][T13933] [ 622.202594][T13933] dump_stack_lvl+0x100/0x190 [ 622.202625][T13933] should_fail_ex.cold+0x5/0xa [ 622.202653][T13933] should_failslab+0xc2/0x120 [ 622.202684][T13933] kmem_cache_alloc_noprof+0x91/0x6a0 [ 622.202711][T13933] ? __pfx_map_id_range_down+0x10/0x10 [ 622.202771][T13933] ? security_inode_alloc+0x3b/0x2c0 [ 622.202802][T13933] security_inode_alloc+0x3b/0x2c0 [ 622.202827][T13933] inode_init_always_gfp+0xc77/0xfb0 [ 622.202870][T13933] alloc_inode+0x8e/0x250 [ 622.202899][T13933] iget_locked+0x1d9/0x6d0 [ 622.202928][T13933] ? __pfx_iget_locked+0x10/0x10 [ 622.202956][T13933] ? kernfs_root+0xee/0x2a0 [ 622.203043][T13933] ? kernfs_root+0xee/0x2a0 [ 622.203082][T13933] kernfs_get_inode+0x46/0x470 [ 622.203127][T13933] kernfs_iop_lookup+0x1a7/0x2d0 [ 622.203171][T13933] __lookup_slow+0x155/0x320 [ 622.203209][T13933] lookup_slow+0x50/0x70 [ 622.203334][T13933] link_path_walk+0x1377/0x1cc0 [ 622.203396][T13933] path_openat+0x1c9/0x4280 [ 622.203447][T13933] ? __kasan_slab_alloc+0x89/0x90 [ 622.203486][T13933] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 622.203517][T13933] ? do_getname+0x35/0x390 [ 622.203552][T13933] ? __x64_sys_openat+0x12d/0x210 [ 622.203614][T13933] ? __pfx_path_openat+0x10/0x10 [ 622.203687][T13933] do_file_open+0x20e/0x430 [ 622.203752][T13933] ? __pfx_do_file_open+0x10/0x10 [ 622.204007][T13933] ? alloc_fd+0x471/0x7a0 [ 622.204088][T13933] ? do_getname+0x191/0x390 [ 622.204133][T13933] do_sys_openat2+0x10f/0x1e0 [ 622.204171][T13933] ? __pfx_do_sys_openat2+0x10/0x10 [ 622.204209][T13933] ? do_raw_spin_lock+0x128/0x260 [ 622.204246][T13933] __x64_sys_openat+0x12d/0x210 [ 622.204283][T13933] ? __pfx___x64_sys_openat+0x10/0x10 [ 622.204332][T13933] do_syscall_64+0x115/0x840 [ 622.204354][T13933] ? clear_bhb_loop+0x40/0x90 [ 622.204384][T13933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.204409][T13933] RIP: 0033:0x7fbdd7d9de59 [ 622.204430][T13933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.204455][T13933] RSP: 002b:00007fbdd8c35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 622.204478][T13933] RAX: ffffffffffffffda RBX: 00007fbdd8026090 RCX: 00007fbdd7d9de59 [ 622.204495][T13933] RDX: 0000000000189002 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 622.204517][T13933] RBP: 00007fbdd7e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 622.204532][T13933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 622.204546][T13933] R13: 00007fbdd8026128 R14: 00007fbdd8026090 R15: 00007ffe08a0ee58 [ 622.204579][T13933] [ 624.194927][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.202435][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.305439][T13959] openvswitch: netlink: IP tunnel dst address not specified [ 624.537887][T13958] netlink: 146 bytes leftover after parsing attributes in process `syz.1.1643'. [ 625.170709][T13952] Process accounting resumed [ 625.773496][T13983] ubi: mtd0 is already attached to ubi1 [ 627.144581][T14005] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1654'. [ 630.731299][T14058] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1665'. [ 631.880233][T14044] Process accounting resumed [ 632.855988][T14094] futex_wake_op: syz.3.1673 tries to shift op by -2048; fix this program [ 632.924232][T14094] futex_wake_op: syz.3.1673 tries to shift op by -2048; fix this program [ 633.004866][T14094] blktrace: Concurrent blktraces are not allowed on nbd5 [ 633.299595][T14107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1675'. [ 634.403675][T14116] syz.3.1676 (14116): attempted to duplicate a private mapping with mremap. This is not supported. [ 641.143322][T14210] futex_wake_op: syz.2.1698 tries to shift op by -2048; fix this program [ 641.182540][T14210] futex_wake_op: syz.2.1698 tries to shift op by -2048; fix this program [ 641.244959][T14210] blktrace: Concurrent blktraces are not allowed on nbd5 [ 641.602582][ T30] audit: type=1800 audit(4294988252.700:15): pid=14216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1699" name="lu_gp_id" dev="configfs" ino=59291 res=0 errno=0 [ 646.506201][T14290] blktrace: Concurrent blktraces are not allowed on nbd5 [ 646.945521][T14298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1716'. [ 647.144511][T14277] FAULT_INJECTION: forcing a failure. [ 647.144511][T14277] name failslab, interval 1, probability 0, space 0, times 0 [ 647.347476][T14277] CPU: 0 UID: 0 PID: 14277 Comm: syz.0.1711 Tainted: G L syzkaller #0 PREEMPT(full) [ 647.347515][T14277] Tainted: [L]=SOFTLOCKUP [ 647.347524][T14277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 647.347538][T14277] Call Trace: [ 647.347545][T14277] [ 647.347554][T14277] dump_stack_lvl+0x100/0x190 [ 647.347584][T14277] should_fail_ex.cold+0x5/0xa [ 647.347611][T14277] should_failslab+0xc2/0x120 [ 647.347642][T14277] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 647.347671][T14277] ? __d_alloc+0x35/0xa50 [ 647.347698][T14277] __d_alloc+0x35/0xa50 [ 647.347723][T14277] d_alloc+0x4a/0x1e0 [ 647.347746][T14277] lookup_one_qstr_excl+0x171/0x250 [ 647.347777][T14277] start_dirop+0x59/0xb0 [ 647.347813][T14277] simple_start_creating+0xf9/0x110 [ 647.347871][T14277] ? __pfx_simple_start_creating+0x10/0x10 [ 647.347909][T14277] ? mntput+0x70/0xa0 [ 647.347943][T14277] ? simple_pin_fs+0xa3/0x190 [ 647.347977][T14277] debugfs_start_creating.part.0+0x82/0x170 [ 647.348011][T14277] __debugfs_create_file+0xb3/0x4f0 [ 647.348046][T14277] debugfs_create_file_full+0x41/0x60 [ 647.348081][T14277] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 647.348118][T14277] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 647.348153][T14277] ? ida_alloc_range+0x70d/0x830 [ 647.348201][T14277] ? kasan_save_track+0x14/0x30 [ 647.348229][T14277] ? __kasan_kmalloc+0xaa/0xb0 [ 647.348263][T14277] ? lockdep_init_map_type+0x5c/0x250 [ 647.348307][T14277] preinit_net.part.0+0x252/0x920 [ 647.348339][T14277] copy_net_ns+0x339/0x7c0 [ 647.348374][T14277] create_new_namespaces+0x3ea/0xac0 [ 647.348422][T14277] unshare_nsproxy_namespaces+0xf2/0x220 [ 647.348448][T14277] ksys_unshare+0x438/0xab0 [ 647.348490][T14277] ? __pfx_ksys_unshare+0x10/0x10 [ 647.348547][T14277] __x64_sys_unshare+0x31/0x40 [ 647.348576][T14277] do_syscall_64+0x115/0x840 [ 647.348597][T14277] ? clear_bhb_loop+0x40/0x90 [ 647.348626][T14277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.348651][T14277] RIP: 0033:0x7f89e219de59 [ 647.348671][T14277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.348695][T14277] RSP: 002b:00007f89e30da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 647.348717][T14277] RAX: ffffffffffffffda RBX: 00007f89e2425fa0 RCX: 00007f89e219de59 [ 647.348733][T14277] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 647.348748][T14277] RBP: 00007f89e2233e6f R08: 0000000000000000 R09: 0000000000000000 [ 647.348763][T14277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 647.348776][T14277] R13: 00007f89e2426038 R14: 00007f89e2425fa0 R15: 00007ffce759f848 [ 647.348807][T14277] [ 648.242322][T14299] futex_wake_op: syz.1.1716 tries to shift op by -2048; fix this program [ 648.599448][T14305] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1717'. [ 648.676672][T14305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 648.809489][T14305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 650.370138][T14277] Process accounting resumed [ 651.324897][ T5625] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 653.059098][T14372] EXT4-fs error (device sda1): ext4_lookup:1785: inode #449: comm syz.1.1731: iget: checksum invalid [ 653.142325][T14372] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 653.200595][T14372] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -74 [ 653.331900][T14372] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 655.291901][T14426] netlink: 'syz.2.1742': attribute type 1 has an invalid length. [ 655.349478][T14426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1742'. [ 655.395973][T14426] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 655.547425][T14431] Process accounting paused [ 657.915428][T14470] openvswitch: netlink: IP tunnel dst address not specified [ 659.151779][T14489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1761'. [ 661.059075][T14512] ubi: mtd0 is already attached to ubi1 [ 671.508922][T14680] ima: policy update failed [ 671.537575][ T30] audit: type=1802 audit(4295006626.814:16): pid=14680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1802" res=0 errno=0 [ 673.664421][T14714] openvswitch: netlink: Message has 4096 unknown bytes. [ 674.103108][T14727] sg_write: data in/out 262108/21 bytes for SCSI command 0x61-- guessing data in; [ 674.103108][T14727] program syz.2.1813 not setting count and/or reply_len properly [ 680.788895][T14817] FAULT_INJECTION: forcing a failure. [ 680.788895][T14817] name failslab, interval 1, probability 0, space 0, times 0 [ 680.867677][T14817] CPU: 0 UID: 0 PID: 14817 Comm: syz.2.1834 Tainted: G L syzkaller #0 PREEMPT(full) [ 680.867717][T14817] Tainted: [L]=SOFTLOCKUP [ 680.867726][T14817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 680.867741][T14817] Call Trace: [ 680.867748][T14817] [ 680.867758][T14817] dump_stack_lvl+0x100/0x190 [ 680.867793][T14817] should_fail_ex.cold+0x5/0xa [ 680.867822][T14817] should_failslab+0xc2/0x120 [ 680.867856][T14817] __kmalloc_cache_noprof+0x91/0x6c0 [ 680.867897][T14817] ? sctp_add_bind_addr+0xae/0x3e0 [ 680.868004][T14817] sctp_add_bind_addr+0xae/0x3e0 [ 680.868033][T14817] sctp_copy_local_addr_list+0x349/0x550 [ 680.868087][T14817] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 680.868121][T14817] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 680.868170][T14817] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 680.868209][T14817] sctp_bind_addr_copy+0xe0/0x530 [ 680.868240][T14817] sctp_connect_new_asoc+0x1c9/0x770 [ 680.868278][T14817] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 680.868312][T14817] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 680.868343][T14817] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 680.868384][T14817] __sctp_connect+0x3e7/0xc70 [ 680.868425][T14817] ? __pfx___sctp_connect+0x10/0x10 [ 680.868461][T14817] ? __pfx_sctp_inet_connect+0x10/0x10 [ 680.868498][T14817] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 680.868533][T14817] ? __pfx_sctp_inet_connect+0x10/0x10 [ 680.868567][T14817] sctp_inet_connect+0x15f/0x220 [ 680.868603][T14817] __sys_connect_file+0x141/0x1a0 [ 680.868633][T14817] __sys_connect+0x141/0x170 [ 680.868656][T14817] ? __pfx___sys_connect+0x10/0x10 [ 680.868698][T14817] __x64_sys_connect+0x72/0xb0 [ 680.868721][T14817] ? lockdep_hardirqs_on+0x78/0x100 [ 680.868760][T14817] do_syscall_64+0x115/0x840 [ 680.868781][T14817] ? clear_bhb_loop+0x40/0x90 [ 680.868811][T14817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.868836][T14817] RIP: 0033:0x7f197699de59 [ 680.868857][T14817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 680.868882][T14817] RSP: 002b:00007f1974bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 680.868905][T14817] RAX: ffffffffffffffda RBX: 00007f1976c25fa0 RCX: 00007f197699de59 [ 680.868921][T14817] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 680.868943][T14817] RBP: 00007f1976a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 680.868958][T14817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 680.868973][T14817] R13: 00007f1976c26038 R14: 00007f1976c25fa0 R15: 00007fff54563bc8 [ 680.869003][T14817] [ 681.426257][T14779] Process accounting paused [ 682.645523][T14833] random: crng reseeded on system resumption [ 683.159164][T14841] futex_wake_op: syz.1.1840 tries to shift op by -2048; fix this program [ 683.198748][T14841] futex_wake_op: syz.1.1840 tries to shift op by -2048; fix this program [ 683.466436][T14844] futex_wake_op: syz.1.1841 tries to shift op by -2048; fix this program [ 683.506149][T14844] futex_wake_op: syz.1.1841 tries to shift op by -2048; fix this program [ 685.288885][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.298896][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.362026][T14876] Process accounting resumed [ 687.523443][T13329] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 687.783615][T14914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1854'. [ 689.579955][T13329] Bluetooth: hci2: command 0x0406 tx timeout [ 690.552978][T14964] netlink: 286 bytes leftover after parsing attributes in process `syz.0.1868'. [ 691.344596][T14973] FAULT_INJECTION: forcing a failure. [ 691.344596][T14973] name failslab, interval 1, probability 0, space 0, times 0 [ 691.407893][T14973] CPU: 0 UID: 0 PID: 14973 Comm: syz.0.1871 Tainted: G L syzkaller #0 PREEMPT(full) [ 691.407932][T14973] Tainted: [L]=SOFTLOCKUP [ 691.407940][T14973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 691.407955][T14973] Call Trace: [ 691.407962][T14973] [ 691.407971][T14973] dump_stack_lvl+0x100/0x190 [ 691.408005][T14973] should_fail_ex.cold+0x5/0xa [ 691.408039][T14973] should_failslab+0xc2/0x120 [ 691.408072][T14973] kmem_cache_alloc_noprof+0x91/0x6a0 [ 691.408101][T14973] ? ptlock_alloc+0x1f/0x70 [ 691.408143][T14973] ptlock_alloc+0x1f/0x70 [ 691.408179][T14973] pte_alloc_one+0x82/0x3d0 [ 691.408215][T14973] __pte_alloc+0x6d/0x3e0 [ 691.408243][T14973] ? __pfx___pte_alloc+0x10/0x10 [ 691.408272][T14973] ? __pfx___might_resched+0x10/0x10 [ 691.408306][T14973] ? copy_page_range+0x1c4a/0x5b20 [ 691.408348][T14973] copy_page_range+0x3dd8/0x5b20 [ 691.408416][T14973] ? mas_wr_store_entry+0xa1/0x1e80 [ 691.408447][T14973] ? __pfx_copy_page_range+0x10/0x10 [ 691.408494][T14973] ? __pfx___might_resched+0x10/0x10 [ 691.408534][T14973] ? dup_mmap+0xcfe/0x21b0 [ 691.408567][T14973] ? down_write+0x146/0x1f0 [ 691.408595][T14973] ? up_write+0x2e5/0x5c0 [ 691.408620][T14973] dup_mmap+0xd44/0x21b0 [ 691.408664][T14973] ? __pfx_dup_mmap+0x10/0x10 [ 691.408697][T14973] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 691.408804][T14973] ? __lock_acquire+0x49f/0x1a40 [ 691.408840][T14973] ? find_held_lock+0x2b/0x80 [ 691.408867][T14973] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 691.408947][T14973] copy_process+0x4588/0x8030 [ 691.408972][T14973] ? futex_unqueue+0x133/0x2c0 [ 691.409037][T14973] ? __pfx_copy_process+0x10/0x10 [ 691.409071][T14973] ? _copy_from_user+0x59/0xd0 [ 691.409110][T14973] kernel_clone+0x176/0x9d0 [ 691.409139][T14973] ? __pfx_kernel_clone+0x10/0x10 [ 691.409183][T14973] __do_sys_clone3+0x214/0x290 [ 691.409210][T14973] ? __pfx___do_sys_clone3+0x10/0x10 [ 691.409275][T14973] do_syscall_64+0x115/0x840 [ 691.409296][T14973] ? clear_bhb_loop+0x40/0x90 [ 691.409326][T14973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.409351][T14973] RIP: 0033:0x7f89e219de59 [ 691.409371][T14973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 691.409396][T14973] RSP: 002b:00007f89e30d9ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 691.409419][T14973] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f89e219de59 [ 691.409435][T14973] RDX: 00007f89e30d9f10 RSI: 0000000000000058 RDI: 00007f89e30d9f10 [ 691.409450][T14973] RBP: 00007f89e2233e6f R08: 0000000000000000 R09: 0000000000000058 [ 691.409466][T14973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 691.409480][T14973] R13: 00007f89e2426038 R14: 00007f89e2425fa0 R15: 00007ffce759f848 [ 691.409511][T14973] [ 692.124847][T13329] Bluetooth: hci2: command 0x0406 tx timeout [ 693.985530][T14993] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input88 [ 694.105053][T14989] random: crng reseeded on system resumption [ 694.366246][T15000] EXT4-fs error (device sda1): ext4_lookup:1785: inode #449: comm syz.3.1878: iget: checksum invalid [ 694.423676][T15000] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 694.467339][T15000] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -74 [ 694.513282][T15000] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 695.517757][T15012] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1880'. [ 695.588452][T15012] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 695.613203][T15012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 695.648080][T15010] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.1.1880: bg 2: bad block bitmap checksum [ 695.695274][T15012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 695.719925][T15010] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 7 with max blocks 1 with error 74 [ 695.765640][T15012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 695.790167][T15010] EXT4-fs (sda1): This should not happen!! Data will be lost [ 695.790167][T15010] [ 697.003186][T15033] No such timeout policy "" [ 701.732239][T15094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1895'. [ 704.746357][T15143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1905'. [ 706.597876][ T30] audit: type=1800 audit(4295006662.074:17): pid=15152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1906" name="SYSVffffffff" dev="tmpfs" ino=0 res=0 errno=0 [ 707.671596][ T5625] Bluetooth: hci0: unexpected event 0x02 length: 1021 > 260 [ 707.711486][T15176] ima: policy update failed [ 707.870551][ T30] audit: type=1802 audit(4295006663.361:18): pid=15176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1911" res=0 errno=0 [ 708.175904][ T5625] Bluetooth: hci2: Unexpected cc 0x7c89 with no status [ 708.520178][T15187] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 7 with max blocks 1 with error 117 [ 708.733061][T15187] EXT4-fs (sda1): This should not happen!! Data will be lost [ 708.733061][T15187] [ 711.356073][ T5625] Bluetooth: hci3: unexpected event 0x3e length: 508 > 260 [ 711.356106][ T5625] Bluetooth: hci3: unexpected subevent 0x02 length: 507 > 260 [ 711.371331][ T5625] Bluetooth: hci3: Dropping invalid advertising data [ 711.379145][ T5625] Bluetooth: hci3: unknown advertising packet type: 0xe9 [ 711.379184][ T5625] Bluetooth: hci3: Dropping invalid advertising data [ 711.395211][ T5625] Bluetooth: hci3: Malformed LE Event: 0x02 [ 711.746378][T15235] Process accounting resumed [ 715.005405][T15273] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 715.360021][T15275] smpboot: CPU 1 is now offline [ 717.418987][T15302] Process accounting paused [ 719.951004][T15381] ubi: mtd0 is already attached to ubi1 [ 722.049013][T15424] FAULT_INJECTION: forcing a failure. [ 722.049013][T15424] name failslab, interval 1, probability 0, space 0, times 0 [ 722.198905][T15424] CPU: 0 UID: 0 PID: 15424 Comm: syz.0.1960 Tainted: G L syzkaller #0 PREEMPT(full) [ 722.198944][T15424] Tainted: [L]=SOFTLOCKUP [ 722.198953][T15424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 722.198968][T15424] Call Trace: [ 722.198977][T15424] [ 722.198987][T15424] dump_stack_lvl+0x100/0x190 [ 722.199018][T15424] should_fail_ex.cold+0x5/0xa [ 722.199046][T15424] should_failslab+0xc2/0x120 [ 722.199078][T15424] kmem_cache_alloc_noprof+0x91/0x6a0 [ 722.199105][T15424] ? __thp_vma_allowable_orders+0x1d9/0xf00 [ 722.199144][T15424] ? ptlock_alloc+0x1f/0x70 [ 722.199185][T15424] ptlock_alloc+0x1f/0x70 [ 722.199222][T15424] pte_alloc_one+0x82/0x3d0 [ 722.199258][T15424] do_fault+0x86c/0x1750 [ 722.199289][T15424] ? __pmd_alloc+0x3fb/0x950 [ 722.199325][T15424] __handle_mm_fault+0x187d/0x2a00 [ 722.199368][T15424] ? mt_find+0x45e/0x8e0 [ 722.199396][T15424] ? __pfx___handle_mm_fault+0x10/0x10 [ 722.199432][T15424] ? __pfx_mt_find+0x10/0x10 [ 722.199474][T15424] ? find_vma+0xbf/0x140 [ 722.199501][T15424] ? __pfx_find_vma+0x10/0x10 [ 722.199532][T15424] handle_mm_fault+0x37b/0xa30 [ 722.199577][T15424] do_user_addr_fault+0x74c/0x12f0 [ 722.199617][T15424] exc_page_fault+0x6f/0xd0 [ 722.199656][T15424] asm_exc_page_fault+0x26/0x30 [ 722.199679][T15424] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 722.199712][T15424] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 7d 9d 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 722.199736][T15424] RSP: 0018:ffffc90004eafa98 EFLAGS: 00050212 [ 722.199755][T15424] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000024 [ 722.199770][T15424] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90004eafb28 [ 722.199793][T15424] RBP: 0000000000000024 R08: 0000000000000001 R09: fffff520009d5f69 [ 722.199808][T15424] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 722.199822][T15424] R13: ffffc90004eafb28 R14: 0000000000000000 R15: 000000000000b6bd [ 722.199852][T15424] _copy_from_user+0x98/0xd0 [ 722.199888][T15424] sg_write+0x2af/0xdb0 [ 722.200022][T15424] ? __pfx_sg_write+0x10/0x10 [ 722.200076][T15424] ? apparmor_file_permission+0x13f/0x1c0 [ 722.200107][T15424] ? bpf_lsm_file_permission+0x9/0x10 [ 722.200145][T15424] ? security_file_permission+0x76/0x210 [ 722.200177][T15424] ? rw_verify_area+0xce/0x6d0 [ 722.200213][T15424] vfs_write+0x2aa/0x1050 [ 722.200250][T15424] ? __pfx_sg_write+0x10/0x10 [ 722.200279][T15424] ? __pfx_vfs_write+0x10/0x10 [ 722.200313][T15424] ? find_held_lock+0x2b/0x80 [ 722.200340][T15424] ? __fget_files+0x215/0x3d0 [ 722.200376][T15424] ? __fget_files+0x215/0x3d0 [ 722.200420][T15424] ? __fget_files+0x21f/0x3d0 [ 722.200464][T15424] ksys_write+0x12a/0x250 [ 722.200501][T15424] ? __pfx_ksys_write+0x10/0x10 [ 722.200546][T15424] do_syscall_64+0x115/0x840 [ 722.200567][T15424] ? clear_bhb_loop+0x40/0x90 [ 722.200597][T15424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.200621][T15424] RIP: 0033:0x7f89e219de59 [ 722.200641][T15424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 722.200665][T15424] RSP: 002b:00007f89e30da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 722.200687][T15424] RAX: ffffffffffffffda RBX: 00007f89e2425fa0 RCX: 00007f89e219de59 [ 722.200702][T15424] RDX: 000000000000b6bd RSI: 0000000000000000 RDI: 0000000000000003 [ 722.200717][T15424] RBP: 00007f89e2233e6f R08: 0000000000000000 R09: 0000000000000000 [ 722.200732][T15424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 722.200747][T15424] R13: 00007f89e2426038 R14: 00007f89e2425fa0 R15: 00007ffce759f848 [ 722.200778][T15424] [ 724.282689][T15453] FAULT_INJECTION: forcing a failure. [ 724.282689][T15453] name failslab, interval 1, probability 0, space 0, times 0 [ 724.457371][T15453] CPU: 0 UID: 0 PID: 15453 Comm: syz.0.1967 Tainted: G L syzkaller #0 PREEMPT(full) [ 724.457409][T15453] Tainted: [L]=SOFTLOCKUP [ 724.457418][T15453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 724.457432][T15453] Call Trace: [ 724.457439][T15453] [ 724.457447][T15453] dump_stack_lvl+0x100/0x190 [ 724.457477][T15453] should_fail_ex.cold+0x5/0xa [ 724.457503][T15453] should_failslab+0xc2/0x120 [ 724.457534][T15453] __kmalloc_noprof+0xfc/0x820 [ 724.457559][T15453] ? trace_kmalloc+0xeb/0x110 [ 724.457588][T15453] ? lsm_blob_alloc+0x68/0x90 [ 724.457627][T15453] lsm_blob_alloc+0x68/0x90 [ 724.457684][T15453] security_sk_alloc+0x2d/0x290 [ 724.457769][T15453] sk_prot_alloc+0x12a/0x2a0 [ 724.457805][T15453] sk_alloc+0x36/0xe80 [ 724.457830][T15453] __netlink_create+0x5e/0x2c0 [ 724.457859][T15453] ? __wake_up+0x3f/0x60 [ 724.457889][T15453] netlink_create+0x29b/0x610 [ 724.457919][T15453] ? __pfx_genl_bind+0x10/0x10 [ 724.457938][T15453] ? __pfx_genl_unbind+0x10/0x10 [ 724.457973][T15453] ? __pfx_genl_release+0x10/0x10 [ 724.457997][T15453] __sock_create+0x339/0x860 [ 724.458036][T15453] __sys_socket+0x14d/0x260 [ 724.458070][T15453] ? exc_page_fault+0x6f/0xd0 [ 724.458106][T15453] ? __pfx___sys_socket+0x10/0x10 [ 724.458149][T15453] __x64_sys_socket+0x72/0xb0 [ 724.458185][T15453] ? lockdep_hardirqs_on+0x78/0x100 [ 724.458222][T15453] do_syscall_64+0x115/0x840 [ 724.458242][T15453] ? clear_bhb_loop+0x40/0x90 [ 724.458270][T15453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.458293][T15453] RIP: 0033:0x7f89e219f6c7 [ 724.458312][T15453] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 724.458336][T15453] RSP: 002b:00007f89e30b7f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 724.458358][T15453] RAX: ffffffffffffffda RBX: 00007f89e2426090 RCX: 00007f89e219f6c7 [ 724.458374][T15453] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 724.458387][T15453] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 724.458401][T15453] R10: 0000200000000e40 R11: 0000000000000286 R12: 0000000000000000 [ 724.458415][T15453] R13: 00007f89e2426128 R14: 00007f89e2426090 R15: 00007ffce759f848 [ 724.458444][T15453] [ 728.572076][T15498] input: f¬ as /devices/virtual/input/input89 [ 730.680395][T15557] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 7 with max blocks 2 with error 117 [ 730.752345][T15557] EXT4-fs (sda1): This should not happen!! Data will be lost [ 730.752345][T15557] [ 731.240186][T15589] netlink: 'syz.0.1989': attribute type 1 has an invalid length. [ 733.990665][ T5625] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 735.215776][T15653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2002'. [ 738.135440][T15709] No such timeout policy "" [ 738.156779][T15712] No such timeout policy "" [ 740.810926][T15755] FAULT_INJECTION: forcing a failure. [ 740.810926][T15755] name fail_futex, interval 1, probability 0, space 0, times 0 [ 740.856283][T15755] CPU: 0 UID: 0 PID: 15755 Comm: syz.2.2021 Tainted: G L syzkaller #0 PREEMPT(full) [ 740.856322][T15755] Tainted: [L]=SOFTLOCKUP [ 740.856330][T15755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 740.856345][T15755] Call Trace: [ 740.856353][T15755] [ 740.856362][T15755] dump_stack_lvl+0x100/0x190 [ 740.856394][T15755] should_fail_ex.cold+0x5/0xa [ 740.856421][T15755] get_futex_key+0x1d2/0x14f0 [ 740.856464][T15755] ? __pfx_get_futex_key+0x10/0x10 [ 740.856515][T15755] ? __pfx_futex_hash+0x10/0x10 [ 740.856549][T15755] ? rwsem_mark_wake+0x64e/0x970 [ 740.856580][T15755] futex_wake+0xf4/0x5e0 [ 740.856610][T15755] ? __pfx___might_resched+0x10/0x10 [ 740.856646][T15755] ? __pfx_futex_wake+0x10/0x10 [ 740.856679][T15755] ? rds_setsockopt+0x2ee/0xdb0 [ 740.856794][T15755] do_futex+0x2b2/0x440 [ 740.856820][T15755] ? __pfx_do_futex+0x10/0x10 [ 740.856844][T15755] ? rcu_is_watching+0x12/0xc0 [ 740.856870][T15755] ? do_sock_setsockopt+0x101/0x1d0 [ 740.856901][T15755] ? kfree+0x1e5/0x6c0 [ 740.856940][T15755] __x64_sys_futex+0x34f/0x4d0 [ 740.856967][T15755] ? __pfx___x64_sys_futex+0x10/0x10 [ 740.856992][T15755] ? __sys_setsockopt+0x139/0x190 [ 740.857026][T15755] do_syscall_64+0x115/0x840 [ 740.857047][T15755] ? clear_bhb_loop+0x40/0x90 [ 740.857076][T15755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.857100][T15755] RIP: 0033:0x7f197699de59 [ 740.857121][T15755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 740.857145][T15755] RSP: 002b:00007f1974bf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 740.857167][T15755] RAX: ffffffffffffffda RBX: 00007f1976c25fa8 RCX: 00007f197699de59 [ 740.857183][T15755] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1976c25fac [ 740.857199][T15755] RBP: 00007f1976c25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 740.857213][T15755] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 740.857228][T15755] R13: 00007f1976c26038 R14: 00007fff54563ae0 R15: 00007fff54563bc8 [ 740.857258][T15755] [ 741.356120][ T5625] Bluetooth: hci0: unexpected event 0x3e length: 358 > 260 [ 741.356154][ T5625] Bluetooth: hci0: unexpected subevent 0x1b length: 357 > 260 [ 741.700225][T15757] Process accounting paused [ 742.454098][T15792] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2031'. [ 743.477693][T15807] EXT4-fs error (device sda1): ext4_lookup:1785: inode #449: comm syz.3.2033: iget: checksum invalid [ 743.578003][T15807] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 743.643697][T15807] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -74 [ 743.712370][T15807] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 744.217783][T15815] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2035'. [ 745.240712][T15838] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2041'. [ 746.378334][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.389576][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.893101][T15875] Process accounting resumed [ 748.965642][T15892] netlink: 346 bytes leftover after parsing attributes in process `syz.1.2050'. getty: ttyS0: read error: Resource temporarily unavailable [ 750.351027][T15926] futex_wake_op: syz.2.2060 tries to shift op by -2048; fix this program [ 750.429210][T15926] futex_wake_op: syz.2.2060 tries to shift op by -2048; fix this program [ 750.716724][T15940] netlink: 'syz.3.2063': attribute type 64 has an invalid length. [ 750.780575][T15940] netlink: 74 bytes leftover after parsing attributes in process `syz.3.2063'. [ 750.834882][T15944] vhci_hcd vhci_hcd.3: default hub control req: 2307 v0018 i0005 l3 [ 754.451667][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807f624400: rx timeout, send abort [ 754.462871][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807f624400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 755.082387][T16052] sctp: [Deprecated]: syz.0.2082 (pid 16052) Use of int in maxseg socket option. [ 755.082387][T16052] Use struct sctp_assoc_value instead [ 755.774191][T16073] FAULT_INJECTION: forcing a failure. [ 755.774191][T16073] name failslab, interval 1, probability 0, space 0, times 0 [ 755.851077][T16073] CPU: 0 UID: 0 PID: 16073 Comm: syz.2.2086 Tainted: G L syzkaller #0 PREEMPT(full) [ 755.851116][T16073] Tainted: [L]=SOFTLOCKUP [ 755.851124][T16073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 755.851138][T16073] Call Trace: [ 755.851149][T16073] [ 755.851158][T16073] dump_stack_lvl+0x100/0x190 [ 755.851190][T16073] should_fail_ex.cold+0x5/0xa [ 755.851217][T16073] should_failslab+0xc2/0x120 [ 755.851249][T16073] __kmalloc_cache_noprof+0x91/0x6c0 [ 755.851295][T16073] ? vidtv_psi_network_name_desc_init+0x183/0x310 [ 755.851442][T16073] ? vidtv_psi_service_list_desc_init+0x52/0x550 [ 755.851491][T16073] vidtv_psi_service_list_desc_init+0x52/0x550 [ 755.851539][T16073] vidtv_psi_nit_table_init+0x39a/0x5f0 [ 755.851578][T16073] vidtv_channel_si_init+0xccf/0x18f0 [ 755.851618][T16073] vidtv_mux_init+0x522/0xbf0 [ 755.851653][T16073] vidtv_start_feed+0x34e/0x500 [ 755.851692][T16073] ? __pfx_vidtv_start_feed+0x10/0x10 [ 755.851730][T16073] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 755.851775][T16073] ? mark_held_locks+0x40/0x70 [ 755.851815][T16073] ? __pfx_vidtv_start_feed+0x10/0x10 [ 755.851852][T16073] dmx_ts_feed_start_filtering+0xf6/0x220 [ 755.851902][T16073] dvb_dmxdev_start_feed+0x273/0x3f0 [ 755.851940][T16073] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 755.851979][T16073] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 755.852018][T16073] dvb_demux_do_ioctl+0xe64/0x1200 [ 755.852064][T16073] dvb_usercopy+0x167/0x340 [ 755.852095][T16073] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 755.852133][T16073] ? __pfx_dvb_usercopy+0x10/0x10 [ 755.852183][T16073] ? __fget_files+0x21f/0x3d0 [ 755.852226][T16073] dvb_demux_ioctl+0x29/0x40 [ 755.852258][T16073] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 755.852298][T16073] __x64_sys_ioctl+0x18e/0x210 [ 755.852333][T16073] do_syscall_64+0x115/0x840 [ 755.852355][T16073] ? clear_bhb_loop+0x40/0x90 [ 755.852385][T16073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.852410][T16073] RIP: 0033:0x7f197699de59 [ 755.852430][T16073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 755.852454][T16073] RSP: 002b:00007f1974bd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 755.852478][T16073] RAX: ffffffffffffffda RBX: 00007f1976c26090 RCX: 00007f197699de59 [ 755.852494][T16073] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 000000000000000a [ 755.852509][T16073] RBP: 00007f1976a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 755.852523][T16073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 755.852537][T16073] R13: 00007f1976c26128 R14: 00007f1976c26090 R15: 00007fff54563bc8 [ 755.852569][T16073] [ 757.764935][T16085] FAULT_INJECTION: forcing a failure. [ 757.764935][T16085] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 758.048017][T16085] CPU: 0 UID: 0 PID: 16085 Comm: syz.0.2089 Tainted: G L syzkaller #0 PREEMPT(full) [ 758.048057][T16085] Tainted: [L]=SOFTLOCKUP [ 758.048066][T16085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 758.048080][T16085] Call Trace: [ 758.048088][T16085] [ 758.048097][T16085] dump_stack_lvl+0x100/0x190 [ 758.048128][T16085] should_fail_ex.cold+0x5/0xa [ 758.048158][T16085] ? prepare_alloc_pages+0x16d/0x5f0 [ 758.048195][T16085] should_fail_alloc_page+0xeb/0x140 [ 758.048228][T16085] prepare_alloc_pages+0x1f0/0x5f0 [ 758.048266][T16085] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 758.048293][T16085] ? is_bpf_text_address+0x8a/0x1a0 [ 758.048328][T16085] ? bpf_ksym_find+0x124/0x1c0 [ 758.048352][T16085] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 758.048386][T16085] ? is_bpf_text_address+0x94/0x1a0 [ 758.048418][T16085] ? kernel_text_address+0x8d/0x100 [ 758.048452][T16085] ? __kernel_text_address+0xd/0x30 [ 758.048486][T16085] ? unwind_get_return_address+0x59/0xa0 [ 758.048523][T16085] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 758.048556][T16085] ? tomoyo_check_open_permission+0x1a2/0x3c0 [ 758.048590][T16085] ? look_up_lock_class+0x64/0x120 [ 758.048631][T16085] ? find_held_lock+0x2b/0x80 [ 758.048658][T16085] ? ima_match_policy+0x8c4/0x2350 [ 758.048758][T16085] ? ima_match_policy+0x8c4/0x2350 [ 758.048793][T16085] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 758.048850][T16085] ? policy_nodemask+0xed/0x4f0 [ 758.048885][T16085] alloc_pages_mpol+0x1fb/0x540 [ 758.048919][T16085] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 758.048954][T16085] ? do_raw_spin_lock+0x128/0x260 [ 758.048977][T16085] ? find_held_lock+0x2b/0x80 [ 758.049003][T16085] ? swap_cache_alloc_folio+0x374/0xc50 [ 758.049031][T16085] folio_alloc_mpol_noprof+0x36/0x260 [ 758.049070][T16085] swap_cache_alloc_folio+0x3d7/0xc50 [ 758.049100][T16085] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 758.049125][T16085] ? swap_cache_get_folio+0x28d/0x360 [ 758.049155][T16085] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 758.049187][T16085] swap_cache_read_folio+0x47/0x140 [ 758.049215][T16085] swap_cluster_readahead+0x387/0x5f0 [ 758.049247][T16085] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 758.049289][T16085] ? __lock_acquire+0x49f/0x1a40 [ 758.049324][T16085] ? get_vma_policy+0x23d/0x3b0 [ 758.049361][T16085] swapin_readahead+0x159/0x1200 [ 758.049395][T16085] ? __pfx_swapin_readahead+0x10/0x10 [ 758.049426][T16085] ? swap_table_get+0x10d/0x2c0 [ 758.049465][T16085] ? swap_cache_get_folio+0x28d/0x360 [ 758.049489][T16085] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 758.049513][T16085] ? __pfx_softleaf_type+0x10/0x10 [ 758.049542][T16085] ? do_swap_page+0xf98/0x5780 [ 758.049577][T16085] do_swap_page+0xf98/0x5780 [ 758.049619][T16085] ? rwsem_mark_wake+0x64e/0x970 [ 758.049648][T16085] ? __pfx_do_swap_page+0x10/0x10 [ 758.049686][T16085] ? __lock_acquire+0x49f/0x1a40 [ 758.049721][T16085] ? userfaultfd_unmap_complete+0x267/0x380 [ 758.049764][T16085] ? rcu_is_watching+0x12/0xc0 [ 758.049791][T16085] ? __pte_offset_map+0x179/0x310 [ 758.049822][T16085] __handle_mm_fault+0x192f/0x2a00 [ 758.049866][T16085] ? reacquire_held_locks+0xce/0x1e0 [ 758.049903][T16085] ? __pfx___handle_mm_fault+0x10/0x10 [ 758.049945][T16085] ? lock_vma_under_rcu+0x17c/0x590 [ 758.049999][T16085] handle_mm_fault+0x37b/0xa30 [ 758.050042][T16085] do_user_addr_fault+0x5a3/0x12f0 [ 758.050081][T16085] exc_page_fault+0x6f/0xd0 [ 758.050120][T16085] asm_exc_page_fault+0x26/0x30 [ 758.050150][T16085] RIP: 0033:0x7f89e219de6b [ 758.050170][T16085] Code: 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 <64> 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 [ 758.050195][T16085] RSP: 002b:00007f89e30b9028 EFLAGS: 00010213 [ 758.050215][T16085] RAX: 0000000000000016 RBX: 00007f89e2426090 RCX: ffffffffffffffe8 [ 758.050230][T16085] RDX: 00000000000000df RSI: 0000000000000005 RDI: 00000000000001fd [ 758.050245][T16085] RBP: 00007f89e2233e6f R08: ffffffffffffffff R09: 0000000000008000 [ 758.050260][T16085] R10: 0000000000008b72 R11: 0000000000000246 R12: 0000000000000000 [ 758.050274][T16085] R13: 00007f89e2426128 R14: 00007f89e2426090 R15: 00007ffce759f848 [ 758.050305][T16085] [ 760.159050][T16083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2089'. [ 760.635047][T16113] kexec: Could not allocate control_code_buffer [ 761.128150][T16083] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2089'. [ 763.673388][T16179] tipc: Started in network mode [ 763.710255][T16179] tipc: Node identity ee00, cluster identity 4711 [ 763.820841][T16179] tipc: Node number set to 60928 [ 764.092469][ T5625] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 764.100269][ T5625] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 764.971103][T16200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2112'. [ 771.913304][T16308] ksmbd: Unknown IPC event: 14, ignore. [ 772.014383][T16269] Process accounting resumed [ 772.649076][ T5625] Bluetooth: hci3: unexpected subevent 0x01 length: 132 > 18 [ 774.694684][T13329] Bluetooth: hci3: command 0x2016 tx timeout [ 776.763028][ T5625] Bluetooth: hci3: command 0x2016 tx timeout [ 777.772906][T16384] FAULT_INJECTION: forcing a failure. [ 777.772906][T16384] name failslab, interval 1, probability 0, space 0, times 0 [ 778.025084][T16384] CPU: 0 UID: 0 PID: 16384 Comm: syz.2.2152 Tainted: G L syzkaller #0 PREEMPT(full) [ 778.025124][T16384] Tainted: [L]=SOFTLOCKUP [ 778.025132][T16384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 778.025148][T16384] Call Trace: [ 778.025155][T16384] [ 778.025165][T16384] dump_stack_lvl+0x100/0x190 [ 778.025196][T16384] should_fail_ex.cold+0x5/0xa [ 778.025223][T16384] should_failslab+0xc2/0x120 [ 778.025255][T16384] kmem_cache_alloc_noprof+0x91/0x6a0 [ 778.025284][T16384] ? __kernfs_new_node+0xd2/0xa10 [ 778.025328][T16384] __kernfs_new_node+0xd2/0xa10 [ 778.025370][T16384] ? __pfx___kernfs_new_node+0x10/0x10 [ 778.025414][T16384] ? find_held_lock+0x2b/0x80 [ 778.025441][T16384] ? kernfs_root+0xee/0x2a0 [ 778.025473][T16384] ? kernfs_root+0xee/0x2a0 [ 778.025513][T16384] kernfs_new_node+0x117/0x150 [ 778.025558][T16384] __kernfs_create_file+0x53/0x350 [ 778.025653][T16384] sysfs_add_file_mode_ns+0x207/0x3c0 [ 778.025693][T16384] sysfs_merge_group+0x194/0x340 [ 778.025736][T16384] ? __pfx_sysfs_merge_group+0x10/0x10 [ 778.025772][T16384] ? bus_add_device+0x2e2/0x6c0 [ 778.025838][T16384] ? __pfx_bus_add_device+0x10/0x10 [ 778.025862][T16384] ? __pfx_dev_add_physical_location+0x10/0x10 [ 778.025946][T16384] dpm_sysfs_add+0x237/0x280 [ 778.026012][T16384] device_add+0x9f4/0x1970 [ 778.026066][T16384] ? __pfx_device_add+0x10/0x10 [ 778.026099][T16384] ? lockdep_init_map_type+0x5c/0x250 [ 778.026139][T16384] ? __init_waitqueue_head+0xca/0x150 [ 778.026169][T16384] rfkill_register+0x1ad/0xb30 [ 778.026253][T16384] nfc_register_device+0x11f/0x3e0 [ 778.026298][T16384] nci_register_device+0x7f1/0xb80 [ 778.026350][T16384] ? __pfx_nci_register_device+0x10/0x10 [ 778.026389][T16384] ? lockdep_init_map_type+0x5c/0x250 [ 778.026431][T16384] virtual_ncidev_open+0x141/0x220 [ 778.026500][T16384] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 778.026535][T16384] misc_open+0x26d/0x450 [ 778.026601][T16384] ? __pfx_misc_open+0x10/0x10 [ 778.026640][T16384] chrdev_open+0x234/0x6a0 [ 778.026661][T16384] ? __pfx_apparmor_file_open+0x10/0x10 [ 778.026686][T16384] ? __pfx_chrdev_open+0x10/0x10 [ 778.026733][T16384] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 778.026766][T16384] do_dentry_open+0x6ab/0x14d0 [ 778.026804][T16384] ? __pfx_chrdev_open+0x10/0x10 [ 778.026850][T16384] vfs_open+0x82/0x3f0 [ 778.026883][T16384] path_openat+0x2873/0x4280 [ 778.026934][T16384] ? __pfx_path_openat+0x10/0x10 [ 778.026981][T16384] do_file_open+0x20e/0x430 [ 778.027023][T16384] ? __pfx_do_file_open+0x10/0x10 [ 778.027083][T16384] ? alloc_fd+0x471/0x7a0 [ 778.027123][T16384] ? do_getname+0x191/0x390 [ 778.027153][T16384] do_sys_openat2+0x10f/0x1e0 [ 778.027183][T16384] ? __pfx_do_sys_openat2+0x10/0x10 [ 778.027215][T16384] ? __fget_files+0x21f/0x3d0 [ 778.027256][T16384] __x64_sys_openat+0x12d/0x210 [ 778.027287][T16384] ? __pfx___x64_sys_openat+0x10/0x10 [ 778.027328][T16384] do_syscall_64+0x115/0x840 [ 778.027366][T16384] ? clear_bhb_loop+0x40/0x90 [ 778.027396][T16384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.027421][T16384] RIP: 0033:0x7f197699de59 [ 778.027441][T16384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 778.027466][T16384] RSP: 002b:00007f1974bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 778.027489][T16384] RAX: ffffffffffffffda RBX: 00007f1976c25fa0 RCX: 00007f197699de59 [ 778.027505][T16384] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 778.027521][T16384] RBP: 00007f1976a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 778.027536][T16384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 778.027551][T16384] R13: 00007f1976c26038 R14: 00007f1976c25fa0 R15: 00007fff54563bc8 [ 778.027582][T16384] [ 778.879064][T13329] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 778.888882][T13329] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 781.376626][T16384] Process accounting paused [ 782.294191][T16436] netlink: 346 bytes leftover after parsing attributes in process `syz.0.2161'. [ 786.198735][T16500] futex_wake_op: syz.3.2174 tries to shift op by -2048; fix this program [ 788.935413][T16545] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 7 with max blocks 2 with error 117 [ 789.054502][T16545] EXT4-fs (sda1): This should not happen!! Data will be lost [ 789.054502][T16545] [ 794.294916][ T9822] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 8 with max blocks 2 with error 117 [ 794.372839][ T9822] EXT4-fs (sda1): This should not happen!! Data will be lost [ 794.372839][ T9822] [ 796.812855][ T30] audit: type=1800 audit(4295006752.808:19): pid=16660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2206" name="lu_gp_id" dev="configfs" ino=72893 res=0 errno=0 [ 798.741137][T16695] warning: `syz.2.2216' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 801.996799][T16760] Process accounting paused [ 805.939440][T16856] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 807.470946][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 807.483702][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 807.635505][T16888] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2254'. [ 807.681048][T16888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 807.721128][T16888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 807.794745][T16888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 807.875225][T16888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 809.151117][T16897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2258'. [ 809.361527][T16908] blktrace: Concurrent blktraces are not allowed on loop2 [ 810.645968][T16928] FAULT_INJECTION: forcing a failure. [ 810.645968][T16928] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 810.737727][T16928] CPU: 0 UID: 0 PID: 16928 Comm: syz.2.2263 Tainted: G L syzkaller #0 PREEMPT(full) [ 810.737766][T16928] Tainted: [L]=SOFTLOCKUP [ 810.737775][T16928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 810.737797][T16928] Call Trace: [ 810.737805][T16928] [ 810.737813][T16928] dump_stack_lvl+0x100/0x190 [ 810.737848][T16928] should_fail_ex.cold+0x5/0xa [ 810.737872][T16928] ? prepare_alloc_pages+0x16d/0x5f0 [ 810.737910][T16928] should_fail_alloc_page+0xeb/0x140 [ 810.737943][T16928] prepare_alloc_pages+0x1f0/0x5f0 [ 810.737980][T16928] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 810.738012][T16928] ? __lock_acquire+0x49f/0x1a40 [ 810.738050][T16928] ? folio_batch_move_lru+0x3a9/0xc00 [ 810.738089][T16928] ? __pfx_lru_add+0x10/0x10 [ 810.738131][T16928] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 810.738155][T16928] ? lock_acquire+0x1b9/0x370 [ 810.738200][T16928] ? __lock_acquire+0x49f/0x1a40 [ 810.738234][T16928] ? __lock_acquire+0x49f/0x1a40 [ 810.738278][T16928] ? lock_acquire+0x1b9/0x370 [ 810.738313][T16928] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 810.738348][T16928] ? policy_nodemask+0xed/0x4f0 [ 810.738383][T16928] alloc_pages_mpol+0x1fb/0x540 [ 810.738417][T16928] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 810.738462][T16928] folio_alloc_mpol_noprof+0x36/0x260 [ 810.738501][T16928] vma_alloc_folio_noprof+0xed/0x1d0 [ 810.738538][T16928] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 810.738585][T16928] do_anonymous_page+0xb2b/0x2080 [ 810.738625][T16928] ? rcu_read_unlock+0x2d/0xb0 [ 810.738654][T16928] __handle_mm_fault+0x1d2c/0x2a00 [ 810.738696][T16928] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 810.738724][T16928] ? __pfx___handle_mm_fault+0x10/0x10 [ 810.738764][T16928] ? pte_offset_map_lock+0x174/0x320 [ 810.738799][T16928] ? find_held_lock+0x2b/0x80 [ 810.738836][T16928] ? follow_page_pte+0x4d0/0x13f0 [ 810.738872][T16928] handle_mm_fault+0x37b/0xa30 [ 810.738917][T16928] __get_user_pages+0x1178/0x32a0 [ 810.738960][T16928] ? __pfx___get_user_pages+0x10/0x10 [ 810.739000][T16928] populate_vma_page_range+0x267/0x3f0 [ 810.739036][T16928] ? __pfx_populate_vma_page_range+0x10/0x10 [ 810.739070][T16928] ? __pfx_find_vma_intersection+0x10/0x10 [ 810.739103][T16928] ? do_mmap+0x93f/0x12f0 [ 810.739137][T16928] __mm_populate+0x107/0x3a0 [ 810.739172][T16928] ? __pfx___mm_populate+0x10/0x10 [ 810.739208][T16928] ? up_write+0x2e5/0x5c0 [ 810.739233][T16928] vm_mmap_pgoff+0x37f/0x470 [ 810.739267][T16928] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 810.739303][T16928] ? __pfx_do_futex+0x10/0x10 [ 810.739328][T16928] ? ksys_unshare+0x69b/0xab0 [ 810.739360][T16928] ksys_mmap_pgoff+0xe4/0x610 [ 810.739391][T16928] ? __x64_sys_futex+0x358/0x4d0 [ 810.739416][T16928] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 810.739447][T16928] ? xfd_validate_state+0x129/0x190 [ 810.739509][T16928] __x64_sys_mmap+0x125/0x190 [ 810.739539][T16928] do_syscall_64+0x115/0x840 [ 810.739563][T16928] ? clear_bhb_loop+0x40/0x90 [ 810.739593][T16928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.739618][T16928] RIP: 0033:0x7f197699de59 [ 810.739638][T16928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 810.739662][T16928] RSP: 002b:00007f1974bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 810.739686][T16928] RAX: ffffffffffffffda RBX: 00007f1976c25fa0 RCX: 00007f197699de59 [ 810.739702][T16928] RDX: 00000000000000df RSI: 0000000000400007 RDI: 0000000000000000 [ 810.739717][T16928] RBP: 00007f1976a33e6f R08: ffffffffffffffff R09: 0000000000000000 [ 810.739732][T16928] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 810.739746][T16928] R13: 00007f1976c26038 R14: 00007f1976c25fa0 R15: 00007fff54563bc8 [ 810.739777][T16928] [ 811.590858][ T30] audit: type=1800 audit(4295006767.552:20): pid=16948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2266" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 812.254839][T16966] No such timeout policy "" [ 812.576427][T16928] Process accounting resumed [ 816.865309][T17045] EXT4-fs error (device sda1): ext4_lookup:1785: inode #449: comm syz.0.2284: iget: checksum invalid [ 817.028660][T17045] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 817.115849][T17068] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:106: comm syz-executor: Corrupt inode bitmap - block_group = 2, inode_bitmap = 139 [ 817.159987][T17045] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -74 [ 817.217056][T17068] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 1: bad block bitmap checksum [ 817.306739][T17045] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 818.165204][T13329] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 818.181339][T13329] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 818.190674][T13329] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 818.203470][T13329] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 818.211928][T13329] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 818.441904][T16124] ------------[ cut here ]------------ [ 818.447747][T16124] ODEBUG: free active (active state 0) object: ffff88807b251438 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0 [ 818.460808][T16124] WARNING: lib/debugobjects.c:629 at debug_print_object+0x198/0x2b0, CPU#0: syz.2.2094/16124 [ 818.471175][T16124] Modules linked in: [ 818.475206][T16124] CPU: 0 UID: 0 PID: 16124 Comm: syz.2.2094 Tainted: G L syzkaller #0 PREEMPT(full) [ 818.486247][T16124] Tainted: [L]=SOFTLOCKUP [ 818.490604][T16124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 818.501586][T16124] RIP: 0010:debug_print_object+0x1a5/0x2b0 [ 818.507586][T16124] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 08 15 09 0c 41 56 48 8b 14 ed 40 17 40 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 52 1c fe 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 818.527302][T16124] RSP: 0018:ffffc90004ecf6f8 EFLAGS: 00010246 [ 818.534477][T16124] RAX: dffffc0000000000 RBX: ffffc90004ecf7e0 RCX: 0000000000000000 [ 818.543169][T16124] RDX: ffffffff8c401680 RSI: ffffffff8c401220 RDI: ffffffff912d92f0 [ 818.551457][T16124] RBP: 0000000000000003 R08: ffff88807b251438 R09: ffffffff8bd2e220 [ 818.559566][T16124] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c401220 [ 818.567593][T16124] R13: ffffffff8bd2e260 R14: ffffffff8abf6a10 R15: ffffc90004ecf7f8 [ 818.575615][T16124] FS: 0000000000000000(0000) GS:ffff888123df1000(0000) knlGS:0000000000000000 [ 818.584599][T16124] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 818.591203][T16124] CR2: 0000001b34024000 CR3: 000000005e2e8000 CR4: 00000000003526f0 [ 818.599234][T16124] Call Trace: [ 818.602545][T16124] [ 818.605617][T16124] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 818.611116][T16124] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 818.617039][T16124] debug_check_no_obj_freed+0x4da/0x630 [ 818.622623][T16124] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 818.628757][T16124] ? __page_table_check_zero+0x27f/0x410 [ 818.635473][T16124] ? __page_table_check_zero+0x284/0x410 [ 818.641138][T16124] __free_frozen_pages+0x409/0x1090 [ 818.647090][T16124] hci_release_dev+0x4ef/0x630 [ 818.651949][T16124] ? __pfx_hci_release_dev+0x10/0x10 [ 818.657340][T16124] ? device_release+0x97/0x270 [ 818.662192][T16124] ? rcu_is_watching+0x12/0xc0 [ 818.667017][T16124] ? device_release+0x97/0x270 [ 818.671857][T16124] bt_host_release+0x6b/0xb0 [ 818.676565][T16124] ? __pfx_bt_host_release+0x10/0x10 [ 818.681897][T16124] device_release+0xd2/0x270 [ 818.686552][T16124] kobject_put+0x1f7/0x640 [ 818.690998][T16124] put_device+0x1f/0x30 [ 818.695212][T16124] vhci_release+0x185/0x230 [ 818.699820][T16124] ? __pfx_vhci_release+0x10/0x10 [ 818.704903][T16124] __fput+0x3ff/0xb50 [ 818.708917][T16124] task_work_run+0x150/0x240 [ 818.713536][T16124] ? __pfx_task_work_run+0x10/0x10 [ 818.718711][T16124] ? free_uts_ns+0x16e/0x330 [ 818.723334][T16124] do_exit+0x951/0x2ae0 [ 818.727623][T16124] ? __pfx_do_exit+0x10/0x10 [ 818.732257][T16124] ? do_raw_spin_lock+0x128/0x260 [ 818.738414][T16124] ? find_held_lock+0x2b/0x80 [ 818.743143][T16124] ? get_signal+0x7e0/0x21e0 [ 818.748419][T16124] do_group_exit+0xd5/0x2a0 [ 818.752975][T16124] get_signal+0x1ec7/0x21e0 [ 818.757555][T16124] ? __pfx_get_signal+0x10/0x10 [ 818.762450][T16124] ? do_futex+0x190/0x440 [ 818.767312][T16124] arch_do_signal_or_restart+0x91/0x7a0 [ 818.772966][T16124] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 818.779464][T16124] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 818.785690][T16124] ? exc_page_fault+0x6f/0xd0 [ 818.790463][T16124] exit_to_user_mode_loop+0x139/0x6f0 [ 818.795915][T16124] ? rcu_is_watching+0x12/0xc0 [ 818.800708][T16124] do_syscall_64+0x652/0x840 [ 818.805353][T16124] ? clear_bhb_loop+0x40/0x90 [ 818.810069][T16124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.816014][T16124] RIP: 0033:0x7f197699de59 [ 818.820450][T16124] Code: Unable to access opcode bytes at 0x7f197699de2f. [ 818.827524][T16124] RSP: 002b:00007f197436e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 818.836021][T16124] RAX: fffffffffffffe00 RBX: 00007f1976c26368 RCX: 00007f197699de59 [ 818.845133][T16124] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1976c26368 [ 818.853794][T16124] RBP: 00007f1976c26360 R08: 0000000000000000 R09: 0000000000000000 [ 818.861809][T16124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 818.869837][T16124] R13: 00007f1976c263f8 R14: 00007fff54563ae0 R15: 00007fff54563bc8 [ 818.877883][T16124] [ 818.880946][T16124] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 818.888238][T16124] CPU: 0 UID: 0 PID: 16124 Comm: syz.2.2094 Tainted: G L syzkaller #0 PREEMPT(full) [ 818.899201][T16124] Tainted: [L]=SOFTLOCKUP [ 818.903546][T16124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 818.913609][T16124] Call Trace: [ 818.916901][T16124] [ 818.919845][T16124] dump_stack_lvl+0x100/0x190 [ 818.924547][T16124] vpanic+0x552/0x970 [ 818.928550][T16124] ? __pfx_vpanic+0x10/0x10 [ 818.933075][T16124] panic+0xd1/0xe0 [ 818.936812][T16124] ? __pfx_panic+0x10/0x10 [ 818.941253][T16124] ? check_panic_on_warn+0x1f/0x90 [ 818.946395][T16124] check_panic_on_warn.cold+0x19/0x34 [ 818.951782][T16124] ? debug_print_object+0x198/0x2b0 [ 818.956998][T16124] __warn.cold+0x191/0x318 [ 818.961445][T16124] __report_bug+0x30f/0x440 [ 818.966049][T16124] ? debug_print_object+0x198/0x2b0 [ 818.971276][T16124] ? __pfx___report_bug+0x10/0x10 [ 818.976337][T16124] ? __lock_acquire+0x49f/0x1a40 [ 818.981311][T16124] report_bug_entry+0xe1/0x290 [ 818.986105][T16124] ? debug_print_object+0x1a5/0x2b0 [ 818.991327][T16124] handle_bug+0x1cd/0x2a0 [ 818.995676][T16124] exc_invalid_op+0x17/0x50 [ 819.000297][T16124] asm_exc_invalid_op+0x1a/0x20 [ 819.005165][T16124] RIP: 0010:debug_print_object+0x1a5/0x2b0 [ 819.010998][T16124] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 08 15 09 0c 41 56 48 8b 14 ed 40 17 40 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 52 1c fe 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 819.030729][T16124] RSP: 0018:ffffc90004ecf6f8 EFLAGS: 00010246 [ 819.036834][T16124] RAX: dffffc0000000000 RBX: ffffc90004ecf7e0 RCX: 0000000000000000 [ 819.044827][T16124] RDX: ffffffff8c401680 RSI: ffffffff8c401220 RDI: ffffffff912d92f0 [ 819.052816][T16124] RBP: 0000000000000003 R08: ffff88807b251438 R09: ffffffff8bd2e220 [ 819.060802][T16124] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c401220 [ 819.068799][T16124] R13: ffffffff8bd2e260 R14: ffffffff8abf6a10 R15: ffffc90004ecf7f8 [ 819.076885][T16124] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 819.082390][T16124] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 819.087888][T16124] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 819.093746][T16124] debug_check_no_obj_freed+0x4da/0x630 [ 819.099347][T16124] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 819.105457][T16124] ? __page_table_check_zero+0x27f/0x410 [ 819.111135][T16124] ? __page_table_check_zero+0x284/0x410 [ 819.116800][T16124] __free_frozen_pages+0x409/0x1090 [ 819.122038][T16124] hci_release_dev+0x4ef/0x630 [ 819.126831][T16124] ? __pfx_hci_release_dev+0x10/0x10 [ 819.132143][T16124] ? device_release+0x97/0x270 [ 819.137033][T16124] ? rcu_is_watching+0x12/0xc0 [ 819.141823][T16124] ? device_release+0x97/0x270 [ 819.146637][T16124] bt_host_release+0x6b/0xb0 [ 819.151269][T16124] ? __pfx_bt_host_release+0x10/0x10 [ 819.156591][T16124] device_release+0xd2/0x270 [ 819.161240][T16124] kobject_put+0x1f7/0x640 [ 819.165703][T16124] put_device+0x1f/0x30 [ 819.169948][T16124] vhci_release+0x185/0x230 [ 819.174491][T16124] ? __pfx_vhci_release+0x10/0x10 [ 819.179559][T16124] __fput+0x3ff/0xb50 [ 819.183575][T16124] task_work_run+0x150/0x240 [ 819.188193][T16124] ? __pfx_task_work_run+0x10/0x10 [ 819.193343][T16124] ? free_uts_ns+0x16e/0x330 [ 819.197977][T16124] do_exit+0x951/0x2ae0 [ 819.202162][T16124] ? __pfx_do_exit+0x10/0x10 [ 819.206794][T16124] ? do_raw_spin_lock+0x128/0x260 [ 819.211851][T16124] ? find_held_lock+0x2b/0x80 [ 819.216551][T16124] ? get_signal+0x7e0/0x21e0 [ 819.221173][T16124] do_group_exit+0xd5/0x2a0 [ 819.225708][T16124] get_signal+0x1ec7/0x21e0 [ 819.230245][T16124] ? __pfx_get_signal+0x10/0x10 [ 819.235116][T16124] ? do_futex+0x190/0x440 [ 819.239483][T16124] arch_do_signal_or_restart+0x91/0x7a0 [ 819.245067][T16124] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 819.251517][T16124] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 819.257708][T16124] ? exc_page_fault+0x6f/0xd0 [ 819.262437][T16124] exit_to_user_mode_loop+0x139/0x6f0 [ 819.267854][T16124] ? rcu_is_watching+0x12/0xc0 [ 819.272659][T16124] do_syscall_64+0x652/0x840 [ 819.277289][T16124] ? clear_bhb_loop+0x40/0x90 [ 819.282115][T16124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.288046][T16124] RIP: 0033:0x7f197699de59 [ 819.292497][T16124] Code: Unable to access opcode bytes at 0x7f197699de2f. [ 819.299526][T16124] RSP: 002b:00007f197436e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 819.308058][T16124] RAX: fffffffffffffe00 RBX: 00007f1976c26368 RCX: 00007f197699de59 [ 819.316043][T16124] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1976c26368 [ 819.324037][T16124] RBP: 00007f1976c26360 R08: 0000000000000000 R09: 0000000000000000 [ 819.332034][T16124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 819.340038][T16124] R13: 00007f1976c263f8 R14: 00007fff54563ae0 R15: 00007fff54563bc8 [ 819.348059][T16124] [ 819.351158][T16124] Kernel Offset: disabled [ 819.355507][T16124] Rebooting in 86400 seconds..