last executing test programs: 31.65981064s ago: executing program 0 (id=688): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r1, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MESH_ADDRESS={0xa, 0x5, @random="0baab1412c07"}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0xa}, @BATADV_ATTR_VLANID={0x6, 0x28, 0xffff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_TPMETER_COOKIE={0x8, 0xd, 0xfff}]}, 0x48}}, 0x4000001) sendmsg$auto_NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_VERSION={0x8, 0x3, 0x7fffffff}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x92}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0xffff0001}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0xa5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'pimreg\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'pimreg0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'xfrm0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'ip6tnl0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth0_virt_wifi\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'pimreg1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x138, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xe}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfb26}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2f}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x20000000}, 0x1000) r9 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f00000006c0), r0) sendmsg$auto_IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, r9, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEST_PAN_ID={0x6, 0x10, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "6f3cb693966306978c050bc98412c66e"}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) r10 = openat2$dir(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x80600, 0x1a4, 0x1}, 0x18) close_range$auto(r10, r0, 0x4) personality$auto(0x7) ioctl$auto_TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, &(0x7f0000000880)={0x800, &(0x7f0000000840)={0xd, 0x4, 0x4, @inferred=0xffffffffffffffff}}) ioctl$auto(r11, 0x7, r10) r12 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f00000008c0), 0x80000, 0x0) ioctl$auto_UI_END_FF_ERASE(r12, 0x400c55cb, &(0x7f0000000900)={0xa, 0x100, 0x66}) ioctl$auto_EVIOCSKEYCODE_V2(r11, 0x40284504, &(0x7f0000000940)={0x4, 0x4, 0x800, 0x6, "ff423f57a890956994cf5614d9fcc10aea2d2e495efee936d6088ce2734c62c1"}) r13 = bpf$auto_BPF_LINK_CREATE(0x1c, &(0x7f0000000980)=@enable_stats={0x101}, 0x3) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/fuse\x00', 0x2000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/tty29\x00', 0x2, 0x0) r14 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000b00), r0) sendmsg$auto_SEG6_CMD_GET_TUNSRC(r11, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, r14, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_HMACINFO={0x18, 0x7, 0x0, 0x1, [@typed={0x12, 0x151, 0x0, 0x0, @str='A#[@!:-@\'\xa8/}\x12\x00'}]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x8}]}, 0x3c}}, 0x24000044) personality$auto(0xfffffffd) ppoll$auto(&(0x7f0000000c00)={r13, 0x3ff, 0x7}, 0xb747, &(0x7f0000000c40)={0x1, 0x8}, &(0x7f0000000c80)={0x8}, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d40)={0xcc, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x7}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x7}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8}, @NL80211_ATTR_BSSID={0x95, 0xf5, "c7d54e676e1be7879033b348bf795d96bbb8f98baac5db70d375ced2b13b073f787ae9c1a94e362f19bae264211c2aab89464572c266404a47d9fa74caacd7f595453e32f358ed484eee8050754b7d9f733ab0d99aaeb6bb9e7369b984778aeb2ae6cea341da5c5e894a718a843aa87db57b90aa95c5ff2475de1d70048ac4135ef88c53c1e6a8d040fef4804a37392c40"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x37}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4010}, 0x2404c080) 30.998381922s ago: executing program 0 (id=692): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x4f81c0, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video16\x00', 0xc0400, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0x3, 0xc0405665, 0x34) msgctl$auto_MSG_STAT_ANY(0x9, 0xd, &(0x7f0000000a00)={{0x8d, 0x0, 0xee00, 0x7fff, 0x7ff, 0x6, 0xfeb}, &(0x7f0000000680)=0x4, &(0x7f00000009c0)=0xb, 0x800000000, 0xf, 0x0, 0x7, 0x80, 0x0, 0x4, 0x3, @raw=0x3, @raw=0xe9}) msgctl$auto_MSG_STAT_ANY(0x800000, 0xd, &(0x7f0000000b00)={{0x0, 0xee01, r2, 0xdbf, 0x800, 0x9, 0x1}, &(0x7f0000000a80), &(0x7f0000000ac0)=0xda, 0x1f, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6, 0xe, 0x4, @inferred, @raw=0xfffff800}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x201, 0x14) r3 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000b80), 0x481, 0x0) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000500), 0xffffffffffffffff) open(&(0x7f00000002c0)='./file0\x00', 0x200, 0x1c7) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000002480), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_GET(r6, &(0x7f00000083c0)={0x0, 0x0, &(0x7f0000008380)={&(0x7f0000003680)={0x14, r7, 0x32f, 0x70bd2a, 0x25dfdbff, {0x12, 0x0, 0xf0}}, 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x8080) shmctl$auto_IPC_RMID(0xa, 0x0, &(0x7f0000000200)={{0x9, 0xffffffffffffffff, 0xee01, 0x4, 0x100, 0xb1fffffd}, 0x400, 0x400000006, 0x8, 0x0, @inferred, @raw=0x7, 0x2, 0x0, &(0x7f0000000540)="19c3b829e71f4b4088493f392082a22870971f0a6107a7a2bac7aa4a2307871211d729673290d92d4dc6cb4e8f3dc05610b1d7f8ecb09146bded6242685bbb2208133f1eee407cc1caedcbf9d3b9cf073be2e4adffd1e720d238f387fa431c6c5866af5935e869857d0c18be984d97fc5b5b135cc5a4e79e979488e956bcabe41981d0f39c42633024fd53f8a4cb8a5b15e19e4b6896ddbca6bf6a85bf75807268765275f93625635db6e13918c908b925f34d77fc8b2cf3411b5eb531fb2a6d267153e90168076f90a22ca54a13f47add32bd1d6c996483f5a941d7ba98ab5c", &(0x7f0000000740)="2e55e9ee5f293332e76b54634eea61dc2187145174aefcc713bfe59fa80a1971082349a14a5764ebef929a0070d08b7fc4764d868c484d3b33cf35999dddba58bc3c912d44653ee2a07d6fb5fce6cf876f8c881161ee593715c3446b2754c9472c0d80ae944cf2cb1cdbfbe3e96a113bb70487a1ffc871b90a5f449cb57223f4567195f4908eaeae629e8565823508cc0ef60f13baf5feddc5c36dec32c6dff8616368b87c38e2a6cdb93c7bb9a02f07b8d0e7f910f690c00c74996b44f3aebdb75315bf48bb924dbf2f"}) syz_clone3(&(0x7f0000000940)={0x80000, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0), {0x4}, &(0x7f0000000840)=""/229, 0xe5, &(0x7f0000000440)=""/181, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x8, {r5}}, 0x58) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) sendmsg$auto_NCSI_CMD_PKG_INFO(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="d0070000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fedbdf2501000000080004000101000004000600140002800c00ca00000000000000000004001880080008007f000000cf0002800800e500", @ANYRES32=r4, @ANYBLOB="aed195661f2deeca73add4204b929e1dd5423a1b5984cb7477b7182ade76b6f1669c142b730adc6444c0c23e5302ffbd05cb3f1a9664c7f45e0032f5eb8a4eb317916f083b83bbc33247316d36e7392658ae379603e2e278e561e139c80cfb55c3cb5c42a760e2fb678cbfc86d78e66b12bab3d560d6ccbc14fde6f14939e827f270499fcd26ee8f52ba21bc3ad89d745ffcfa7fc6553058308a71f854489801676a5a305a516fb9db526932edf74df22e96d66a5aa7250400a60008007d00", @ANYRES32=r3, @ANYBLOB="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"], 0x7d0}, 0x1, 0x0, 0x0, 0x4800}, 0x811) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r8 = socket(0x2, 0xa, 0x1) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r8, 0x10000, r1}, 0x401) 29.490818393s ago: executing program 0 (id=700): r0 = socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0xe883, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}}, 0x24004000) bpf$auto(0x3, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x8, 0x10035, 0x80208000008, 0x2, r0, 0x20000000000803}, 0x6f0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) ioctl$auto(r1, 0x5646, r1) ioctl$auto(r1, 0x2400000, 0xffffffffffffffff) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_iommufd_fops_main(0xffffffffffffff9c, 0x0, 0x80001, 0x0) ppoll$auto(0x0, 0x1c, 0x0, 0x0, 0x8) write$auto(0x6, 0x0, 0x100000001) setsockopt$auto(0x3, 0x1, 0x2a, 0x0, 0x9) recvfrom$auto(0x3, 0x0, 0x80000000002, 0x6, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 28.350293955s ago: executing program 0 (id=708): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) getsockopt$auto(0x6, 0x1, 0xb, 0xfffffffffffffffc, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) r1 = timerfd_create$auto(0x9, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) fallocate$auto(r0, 0x1, 0x820, 0x7fff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000180)="fc5ea5f1401a03cd7d362456adda0cf384c0e2d7bd3d31e409957ab6bd240c4af9373f9691253b947acf08619bf87d27ebc9b1fff0ce71c342980e157ce4c431437e29b11e2c41b25e95a0d677941ec8136ec921976149c1d14b") mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0x1002}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0x401}, 0x6, 0x0) prctl$auto(0x1000000003b, 0xfffffffffffffffd, r2, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) memfd_secret$auto(0x5) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) 26.357620403s ago: executing program 0 (id=719): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000002c0)="9581a4e2259db823a0affc0a") bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x19, 0x4, 0x4, 0x880b, 0x8, 0xd, 0x66b, 0x4, 0x7ff}, 0x6f4) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/loop10/queue/add_random\x00', 0x80302, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.idtoname/flush\x00', 0x101000, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/loop6/queue/rq_affinity\x00', 0x121281, 0x0) close_range$auto(r5, 0x8, 0xffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/waiting_for_supplier\x00', 0x80800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/workqueue/nvme-delete-wq/affinity_strict\x00', 0x183042, 0x0) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000200)='5', 0x1) ioctl$auto_SOUND_MIXER_WRITE_RECSRC2(r2, 0xc0044dff, &(0x7f0000000280)) io_uring_setup$auto(0x6, 0x0) timer_gettime$auto(0x401, &(0x7f00000000c0)={{0x6, 0x27257ca}, {0x7fffffff, 0x100}}) ioprio_set$auto_IOPRIO_WHO_PROCESS(0x1, r1, 0x9) mmap$auto(0x0, 0x8, 0x1, 0x13, 0x3, 0x120000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/net/protocols\x00', 0x100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000000e80)=""/199, 0xc7) writev$auto(r4, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000480), r3) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r8 = openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRES64=r8, @ANYBLOB="0800610001000000", @ANYRES32=r7, @ANYBLOB="13002cbd7000dddbdf2502000000080003"], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20044894) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/scsi/sg/allow_dio\x00', 0x101181, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000540)="8dabc6760e11b0145de35343f846b0b6d87043b06540026189bdffa946db0a59585afac2133c728ebdb331a873e7d1ac4f6c29ca15eba84f8fa6e4bed6b9ba202e5267ad94ce090b5e04691ea4390f3d8f9c4af4ad6ac7c8eb00cb686a59fb1649c73a31beba686b009a79f09cf387ba7b3176310b4d22c868e8d230376054764ff392f990cdb751ee5b7f1feb3b06bd42009d3c73b242add60223fa6ab54607ec0ef789b62c58d692512fb16d349daef5e65c6f993bc5d37c14168176cde13626d576390f1357845bcdc6c3c79de41022775b5d92efaab3d5213432b27f480ea184") 25.315976244s ago: executing program 0 (id=723): openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy7/queues\x00', 0x20000, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_stats_fops_2(0xffffffffffffff9c, &(0x7f000000b000), 0x80, 0x0) pread64$auto(r1, &(0x7f000000b040)='\x00', 0x7, 0x6) (async, rerun: 64) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) (rerun: 64) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000300)={0x70, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@HWSIM_ATTR_PERM_ADDR={0x44, 0x16, "25fbcb28602a95ee8324515cee243cb7d61ce4eec19a437ce561eb3103b1f00c3b1755fc2427120b85c882b25e0170f60d09a5f6766cd2ab7b708293174728a3"}, @HWSIM_ATTR_REG_HINT_ALPHA2={0x6, 0xb, ',@'}, @HWSIM_ATTR_USE_CHANCTX={0x4}, @HWSIM_ATTR_NO_VIF={0x4}, @HWSIM_ATTR_TX_INFO={0x6, 0x7, [{0x5, 0xc}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40014}, 0x4000080) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) write$auto(r2, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/sockstat\x00', 0x22000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) move_pages$auto(0x0, 0x20000f54, 0x0, 0x0, 0x0, 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) mmap$auto(0x0, 0x5, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vidtv.0/i2c-0/0-0060/uevent\x00', 0x0, 0x0) (async, rerun: 32) mincore$auto(0x1000, 0x8001, 0x0) (async, rerun: 32) r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev1\x00', 0xe0800, 0x0) ioctl$auto(r6, 0xc0205648, r6) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r8 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r7) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r8, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000", @ANYRES16=r8, @ANYBLOB="01002dbd7000fadbdf250400080000000d00b5b2dedd55318ac78875f2aaf305cde21b3c996150bf33e0ac6efbda83c562321f88bcae9665af5bbf3d802508a7d20f2de2ef8a893c2ee2ef75185383f95b5175a5327688ae09dad9a3184657721d68f903d310f09777b9bfc53b7e58e01d6a906bd1a393f8fd57f47b4bd67daf2ceda2f9aa98657e63dd93dc4e00"], 0x18}, 0x1, 0x0, 0x0, 0x4000004}, 0x4) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_GTP_CMD_NEWPDP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRESDEC=r4, @ANYRES8=r7, @ANYRES32=r3, @ANYRES16=r5], 0x40}, 0x1, 0x0, 0x0, 0x20040850}, 0x4048040) (async) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x442101, 0x0) 13.094793004s ago: executing program 2 (id=762): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) r0 = socket(0x29, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) (async) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) setresuid$auto(0x0, 0x8, 0x0) timerfd_create$auto(0x9, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0xc2) (async) unshare$auto(0xc2) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) sethostname$auto(0x0, 0xb) socket(0x2, 0x80002, 0x73) (async) socket(0x2, 0x80002, 0x73) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x2020009, 0x6, 0x800000000000eb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) getcpu$auto(&(0x7f0000000000)=0x8, &(0x7f0000000080)=0x80, 0x0) (async) getcpu$auto(&(0x7f0000000000)=0x8, &(0x7f0000000080)=0x80, 0x0) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) (async) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) epoll_ctl$auto(0xffffffffffffffff, 0x1, 0x8000000000000000, 0x0) (async) epoll_ctl$auto(0xffffffffffffffff, 0x1, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x8914, 0x24) 12.247876916s ago: executing program 3 (id=765): socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyv4\x00', 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r0, 0x0) r2 = socket(0x10, 0x2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r3) read$auto(r3, &(0x7f0000000000)='\x00', 0x91e2) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon7\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r4, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r2, &(0x7f0000000000)='\x04Y', 0xfdef) 11.995156743s ago: executing program 3 (id=767): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) mmap$auto(0x0, 0x6df, 0x200000003, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0xa, 0x3) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4b67, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) (async) mmap$auto(0x0, 0x6df, 0x200000003, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) getrandom$auto(0x0, 0xa, 0x3) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) (async) ioctl$auto(r0, 0x4b67, 0x1) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) 11.155202494s ago: executing program 2 (id=768): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x82, 0x0) socket(0x2, 0x1, 0x0) epoll_create$auto(0x7) socket$nl_generic(0x10, 0x3, 0x10) capset$auto(0x0, 0x0) socket(0x1d, 0x1, 0x7fff) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r0) statmount$auto(0x0, &(0x7f0000000180)={0x7, 0x3, 0x1ff, 0xffd, 0x5, 0x0, 0x0, 0x7, 0x200000000000003, 0xd, 0x2, 0x80003, 0x4, 0x1ffffffffffd, 0x5, 0xfffffffffffffffe, 0x7, 0x110002, 0x7f, 0x5, 0x4, 0xa, 0x22000, 0x203, 0x4, 0x84, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, [0x6, 0x0, 0x0, 0x0, 0xffffffff, 0x800000000000000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xfff, 0x800000000000400, 0x0, 0x1, 0xc, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x10, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0xa8, 0x1, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xffffffffffffffff, 0x100000000000]}, 0xa, 0x7fffffff) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x3d00, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd03, &(0x7f00000001c0)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x2000000000000005, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x5, 0x7) getsockopt$auto(r2, 0x0, 0x33, 0xfffffffffffffffe, 0x0) getpriority$auto_PRIO_USER(0x2, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/current_tracer\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) inotify_init1$auto(0x3000000000000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/kernel/pid_max\x00', 0x0, 0x0) socket(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) 11.030702351s ago: executing program 3 (id=769): times$auto(&(0x7f0000000000)={0xd75, 0xfb8, 0x1, 0x4}) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresgid$auto(0x0, 0xee01, 0xffffffffffffffff) times$auto(&(0x7f0000000040)={0x1ff, 0xc937, 0x5, 0x2}) (async) times$auto(&(0x7f0000000040)={0x1ff, 0xc937, 0x5, 0x2}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r0, 0x8000) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x408001, 0x0) (async) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x408001, 0x0) bpf$auto_BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)=@batch={0xc0cb, 0x5, 0xd3f, 0x80000000, 0x2, 0xffffffffffffffff, 0xe5a6, 0xff}, 0x4) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x5, 0x0) mknod$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_', 0x1081, 0x9) (async) mknod$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_', 0x1081, 0x9) acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x880c2, 0x95) (async) open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x880c2, 0x95) close_range$auto(0x2, r1, 0x0) (async) close_range$auto(0x2, r1, 0x0) acct$auto(&(0x7f0000000280)='/sys/devices/virtual/mtd/mtd0/size\x00') (async) acct$auto(&(0x7f0000000280)='/sys/devices/virtual/mtd/mtd0/size\x00') socket(0x2, 0x80000, 0x100) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, 0x0, 0x400d0) (async) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, 0x0, 0x400d0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r2) sendmsg$auto_TIPC_NL_NET_SET(r2, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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", @ANYRES64=r1, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x80000) socket(0x1e, 0x4, 0x0) (async) r4 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14) (async) setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14) socket(0x9, 0x80000, 0x100) socket(0x10, 0x2, 0x2) (async) socket(0x10, 0x2, 0x2) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) 10.009475517s ago: executing program 32 (id=723): openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy7/queues\x00', 0x20000, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_stats_fops_2(0xffffffffffffff9c, &(0x7f000000b000), 0x80, 0x0) pread64$auto(r1, &(0x7f000000b040)='\x00', 0x7, 0x6) (async, rerun: 64) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) (rerun: 64) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000300)={0x70, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@HWSIM_ATTR_PERM_ADDR={0x44, 0x16, "25fbcb28602a95ee8324515cee243cb7d61ce4eec19a437ce561eb3103b1f00c3b1755fc2427120b85c882b25e0170f60d09a5f6766cd2ab7b708293174728a3"}, @HWSIM_ATTR_REG_HINT_ALPHA2={0x6, 0xb, ',@'}, @HWSIM_ATTR_USE_CHANCTX={0x4}, @HWSIM_ATTR_NO_VIF={0x4}, @HWSIM_ATTR_TX_INFO={0x6, 0x7, [{0x5, 0xc}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40014}, 0x4000080) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) write$auto(r2, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/sockstat\x00', 0x22000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) move_pages$auto(0x0, 0x20000f54, 0x0, 0x0, 0x0, 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) mmap$auto(0x0, 0x5, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vidtv.0/i2c-0/0-0060/uevent\x00', 0x0, 0x0) (async, rerun: 32) mincore$auto(0x1000, 0x8001, 0x0) (async, rerun: 32) r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev1\x00', 0xe0800, 0x0) ioctl$auto(r6, 0xc0205648, r6) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r8 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r7) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r8, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000", @ANYRES16=r8, @ANYBLOB="01002dbd7000fadbdf250400080000000d00b5b2dedd55318ac78875f2aaf305cde21b3c996150bf33e0ac6efbda83c562321f88bcae9665af5bbf3d802508a7d20f2de2ef8a893c2ee2ef75185383f95b5175a5327688ae09dad9a3184657721d68f903d310f09777b9bfc53b7e58e01d6a906bd1a393f8fd57f47b4bd67daf2ceda2f9aa98657e63dd93dc4e00"], 0x18}, 0x1, 0x0, 0x0, 0x4000004}, 0x4) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_GTP_CMD_NEWPDP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRESDEC=r4, @ANYRES8=r7, @ANYRES32=r3, @ANYRES16=r5], 0x40}, 0x1, 0x0, 0x0, 0x20040850}, 0x4048040) (async) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x442101, 0x0) 9.990518902s ago: executing program 3 (id=772): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) ioctl$auto(r0, 0x5646, r0) readv$auto(0x3, &(0x7f0000000600)={0x0, 0x4}, 0x1da) r1 = socket(0x23, 0x2, 0x0) mmap$auto(0x2, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) keyctl$auto(0xe, 0x1, 0x0, 0x5eaf, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x8) fcntl$auto_F_GET_SEALS(r1, 0x40a, 0x7) close_range$auto(0x2, 0x8, 0x0) 8.8848456s ago: executing program 2 (id=773): socket(0x2, 0x3, 0xa) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r1) (async) write$auto(0xffffffffffffffff, &(0x7f0000000440)='ON\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf0F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\xed\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0xb8c5) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) (async) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="11000000", 0x4) (async) socket(0xf, 0x3, 0x2) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/admmidi2\x00', 0x20402, 0x0) (async) socket(0xa, 0x3, 0x3b) (async) connect$auto(r0, &(0x7f0000000100)=@in={0x2, 0x4e20, @loopback}, 0x58) (async) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) io_uring_setup$auto(0xf92b, 0x0) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYRES64=r2, @ANYRES8], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) (async) get_robust_list$auto(0x1, 0x0, 0x0) (async) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) (async) mlock$auto(0x10fbe8, 0x4) (async) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) 8.659628874s ago: executing program 3 (id=774): mmap$auto(0x0, 0x2020009, 0xa2c7, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/fs/jfs/TxAnchor\x00', 0x80000, 0x0) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) r0 = socket(0x15, 0x3, 0x2000003b) (async) connect$auto(0x3, &(0x7f0000000000)=@generic={0x20, "0006945ee35cac7ed700"}, 0x58) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async, rerun: 32) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x500, 0x0) (async, rerun: 32) close_range$auto(0x2, 0xa, 0x0) (async) socket(0xa, 0x2, 0x0) (async) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x7, 0x10000, 0x9b72, 0xffffffffffffffff, 0x6) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async, rerun: 64) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async, rerun: 64) r1 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/numa_maps\x00', 0x200000, 0x0) read$auto_proc_sessionid_operations_base(r1, &(0x7f00000000c0)=""/4073, 0xfe9) r2 = socket(0x1e, 0x800, 0xff) connect$auto(r2, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) (async) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000001680), 0x0) (async) syz_clone3(0x0, 0x0) madvise$auto(0x1ffff000, 0x7, 0x100000000) (async) mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) (async) sendmsg$auto_NL80211_CMD_VENDOR(r0, &(0x7f0000001440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000001900)=ANY=[], 0x118c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket(0x2, 0x5, 0x0) (async) bind$auto(r1, &(0x7f0000000040)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e23, 0x4}}, 0x6a) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x8004008, 0x2000000329, 0x2000000010011, 0xffffffffffffffff, 0x8000) 7.711496582s ago: executing program 2 (id=775): openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000100)='/proc/kpageflags\x00', 0x2, 0x0) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) r2 = timerfd_create$auto(0x9, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/console\x00', 0x20400, 0x0) ioctl$auto_TIOCCONS(r3, 0x541d, 0x0) fallocate$auto(r1, 0x1, 0x820, 0x7fff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000180)="fc5ea5f1401a03cd7d362456adda0cf384c0e2d7bd3d31e409957ab6bd240c4af9373f9691253b947acf08619bf87d27ebc9b1fff0ce71c342980e157ce4c431437e29b1") mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r4 = memfd_secret$auto(0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) write$auto_proc_pid_attr_operations_base(r4, &(0x7f0000000200)="1ad75190d2e09122af2b0e55c74c363c8f547277f1c86a2d7152e5dd74517612dd25379abec16a3ffbe05329823a013e50c069ee58ae951df1be8c48c2417d9cd5913f1474d5cdb63d9cb5f3354bc5b513", 0x51) preadv2$auto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0x40a0ae49, 0x38) setfsuid$auto(0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 7.45687728s ago: executing program 3 (id=776): mmap$auto(0x0, 0x2020005, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) read$auto(0xffffffffffffffff, 0x0, 0xe8) (async) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) (async) r1 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_map_fd, 0xa, @old_map_fd=r1}, 0x10) (async) write$auto_tty_fops_tty_io(0xffffffffffffffff, &(0x7f0000000040)="3cb80e7216bd605e6f0065391099102a13d980a83e6019cb16f1e0d19c746d3d724f42e944c8a29c7b0f02ca95cb3c4e381be697ccb58d66e8bfdab9", 0x3c) read$auto(r0, 0x0, 0x20) (async) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) r3 = socket(0x23, 0x80805, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) poll$auto(&(0x7f0000000000)={r3, 0x1, 0x8}, 0x5, 0x400) setsockopt$auto(r4, 0x196, 0x8376, 0x0, 0x79ad226b) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) socket(0xa, 0x3, 0x3a) (async) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/block/nbd7/sched/write0_next_rq\x00', 0xa2140, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r5, 0x9, 0x7ff) (async) read$auto(0xffffffffffffffff, 0x0, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) bind$auto(0x3, 0x0, 0x6a) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) (async) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000000c0), 0xffffffffffffffff) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 7.405231375s ago: executing program 1 (id=777): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x2020011, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r1 = open(0x0, 0xcd1e23e41b02d660, 0x154) execveat$auto(r1, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x11000) r2 = setfsuid$auto(0xee00) setresuid$auto(0xffffffffffffffff, r2, 0xffffffffffffffff) 6.19260051s ago: executing program 1 (id=778): bind$auto(0x3, 0x0, 0x6b) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, 0x0, 0x440, 0x0) ioctl$auto_KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, 0x0) truncate$auto(0x0, 0x6) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/button/parameters/lid_init_state\x00', 0x169882, 0x0) sendfile$auto(r1, r1, 0x0, 0x8) r2 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r3 = getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) mmap$auto(0x0, 0x5, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x6, 0x4000000000df, 0xeb1, 0x400, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_udc.3/udc/dummy_udc.3/is_selfpowered\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000001100)=""/4105, 0x1009) open(0x0, 0x163340, 0x6a) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4, @multicast2}, 0x55) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r6 = epoll_create$auto(0x3e) epoll_ctl$auto(r6, 0x1, r5, 0x0) write$auto(0x3, 0x0, 0xfffffdef) sendmsg$auto_NL80211_CMD_VENDOR(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="bc010000", @ANYRES16=r2, @ANYBLOB="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"/275, @ANYRES32=0x0, @ANYBLOB="0400f900f300c700eb93f86ca303bcda1b49cfdf2f204668d97128cb005bdad447ccbe8353dc318f68a79b9c5fb0266dc412f7f806f9659636bf47bb4bb9f95f6d21eee42f43f260910153c87d13c3c77f6c8aaf0dc84db6227df9f564eeea3b0fe65e048f38a99e2728d0e015ff85dbdb6511fb60e9a3e7c994bfa42733e6ef9d12797f79f5e058e495d51dc6eaff90483b55cf0ee77404afa36cd438ffd5b89894838bbe842aa05a9c5436b950982975ce1201af0efbe03af88ab7e1d403971ad653b1ec2eae51f3f73aed9fba719f16ecacc1c503a928ae40ce49f0280bb9fdaafea43e573f300e889fdc2ca31988cf1f98ddc8f3710008006a004b00000004009300050039010a000000"], 0x1bc}, 0x1, 0x0, 0x0, 0x4180}, 0x20000001) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa040, 0x0) socket(0x2, 0x2, 0x1) unshare$auto(0x40000080) 4.904509904s ago: executing program 2 (id=779): r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/oom_adj\x00', 0x6000, 0x0) mmap$auto(0x0, 0xb8, 0x8df, 0xeb1, r0, 0x80000000008000) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r1, &(0x7f00000000c0)={0x0, 0x7}, 0x9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x80502, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r2 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)={0xb8, r2, 0x6c5679fc7dece1a9, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @SEG6_ATTR_SECRET={0x8d, 0x4, "53684883ee5f069a2f80ff869efb7c7317e65e0589240d6de5006fd2200522119121afd15bdf03366038b3e4c2c8dfed18739b929715cec27e27844abc2e3178b8f56748e415a5ca49c307ac2290289e124c0190b408339ac24c51f9b49ab5d5192ea7cca4580b2b3208ad6f4510a2ed14086e3c7e038de17da062d92726218a42d69af0951b56c36f"}]}, 0xb8}, 0x1, 0x0, 0x0, 0x24000014}, 0x400c810) r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000100), 0xffffffffffffffff) capget$auto(&(0x7f0000000140)={0x80000000, 0xffffffffffffffff}, &(0x7f0000000180)={0x4, 0x3, 0x3}) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="000827bd7000fddbdf2503000000032c3117deff53a096ecf679a7ffdc983eea0fb61b75137e2e0948f2dc3c261424d06932fe2c23d5932260acf57955a47e36da92c38d37abb87ce310f5e063635c71119e4b456ea50c39048f7d9ff7b37970222b41a5d2d4d7c549235b"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4040094) madvise$auto(0x0, 0x2000040080000004, 0xe) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000002740)={&(0x7f00000025c0), 0xc, &(0x7f0000002700)={&(0x7f00000003c0)=ANY=[@ANYBLOB="000000bb895a1283746fc202bd704a36584d4e00", @ANYRES16=r2, @ANYBLOB="00012cbd7000fbdbdf2503000000050006000c000000ce0004007a7467e0bd579226332271a3d8386e108927920c89896814fee8267c32aeccc8e8d6de4da7e9ad12f1a00f1f3828185bdb64bf7567bf2b7f844403a880bc1eb63eb67f9aa731c2dba54d91861e0aef0c95d8ed3c0f8f2d40e0d72c09d070fdf4203483c1b9cddb09e9c3a8961137d55ff757a110edf9da1f8e4e1027c7ff02af1cf0d32eef3a7e525dced3cf91502549fb88f3fe94645e0a2552f94828c3bbcd8393f045481e7e3be1779aa41450b030283716305d769e9ca79591d972b9fd2530e5e7247125d3bd803a0000"], 0xec}, 0x1, 0x0, 0x0, 0x2400c801}, 0x1) socket(0x2, 0x80002, 0x73) write$auto(0x3, 0x0, 0xfdef) read$auto(r1, 0x0, 0x4) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x101, 0x8000, 0x200000000003fa, 0x200000401, 0x1000008000) socket(0xa, 0x1, 0x100) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x23, 0x5, 0x2009, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) getpgid$auto(0x0) syslog$auto(0x3, 0xfffffffffffffffd, 0x6) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x8300, 0x0) msync$auto(0x1, 0x8, 0x1ff) 4.384972576s ago: executing program 1 (id=780): mmap$auto(0x0, 0x400008, 0x4, 0x40009b72, 0x2, 0x8000) r0 = io_uring_setup$auto(0x89, 0x0) mmap$auto(0x0, 0x8d4, 0x6, 0x6f52, r0, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nbd8\x00', 0x62743, 0x0) mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x5, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x5) fallocate$auto(0x3, 0x0, 0xe, 0x8ec5) finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004) unshare$auto(0x40000080) timer_create$auto(0x3, 0x0, &(0x7f0000000140)=0x6) timer_settime$auto(0x0, 0xd80, &(0x7f0000000040)={{0x40000000000026b, 0x4}, {0x0, 0x83}}, 0x0) timer_gettime$auto(0x0, &(0x7f0000000000)={{0x5, 0x8}, {0x7f, 0x10000}}) kcmp$auto(0x1, 0x1, 0x7, 0x4, 0xe) mmap$auto(0x0, 0x2020009, 0x3, 0x2000eb1, 0xffffffffffffffff, 0x8000000000000000) r1 = getpid() process_vm_readv$auto(r1, 0x0, 0x1, 0x0, 0x6, 0x0) prctl$auto(0x3d, 0x1, r1, 0x3, 0x200020000000007) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) madvise$auto(0x1000, 0x400050, 0x9) fcntl$getown(r0, 0x9) socket(0x1e, 0x5, 0x0) bind$auto(0x3, 0x0, 0x6a) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) 4.006701346s ago: executing program 2 (id=781): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/pci0000:00/0000:00:02.0/drm/card2/card2-Virtual-2/dpms\x00', 0x8da002, 0x0) sendfile$auto(r0, r0, 0x0, 0x7ffff000) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/irq/6/smp_affinity_list\x00', 0xe0182, 0x0) readv$auto(r1, &(0x7f0000000140)={0x0, 0x8}, 0x200000000080003) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/cpu/cpuidle/current_driver\x00', 0x180, 0x0) read$auto(r2, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) remap_file_pages$auto(0x4, 0x1, 0x0, 0xa, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) madvise$auto(0x4, 0x7, 0x2) sendmmsg$auto(r3, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fadvise64$auto_POSIX_FADV_NORMAL(0xffffffffffffffff, 0x7, 0xd, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r3) sendmsg$auto_NL80211_CMD_LEAVE_IBSS(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x118, r4, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_PMKID={0xff, 0x55, "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"}, @NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}]}, 0x118}, 0x1, 0x0, 0x0, 0x50}, 0x4000001) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0xb, 0x2020005, 0x1, 0xfffffffffffff593, 0xffffffffffffffff, 0xffffffff) 2.75011482s ago: executing program 1 (id=782): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x3ff, "9136a9be8e677f546c9d59e672d01f29fc"}, 0x4295) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000003880), 0x20000, 0x0) (async) r1 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000003880), 0x20000, 0x0) ioctl$auto_BTRFS_IOC_FORGET_DEV(r1, 0x50009405, 0x0) mmap$auto(0x0, 0x2020007, 0x3, 0xeb4, r1, 0x8003) socket(0x2a, 0x2, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x4, 0x28000) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x4, 0x28000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_available_congestion_control\x00', 0x0, 0x0) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_available_congestion_control\x00', 0x0, 0x0) bpf$auto(0x0, 0x0, 0x4f4) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000002040)='/dev/snd/pcmC1D1c\x00', 0x80, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/class/devcoredump/disabled\x00', 0xe3102, 0x0) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/class/devcoredump/disabled\x00', 0xe3102, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x440000, 0x0) (async) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x440000, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000200)="c1ab15fb77be466cf4974c814b95836dc2f5851c8349907743408f4e5a482734b5046daa0947e451e9119a983760b2da341681ee5349b4c6d2eb58e883c7edede7c0654e7858e3f944a2004f0a5167419f8d1acd83b6683332d4227b6a34bba32eec91ed5f4ad5bedd8bb512f68ce2f56ebf02d377a918232d349abd882ac226b409f393", 0x84) (async) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000200)="c1ab15fb77be466cf4974c814b95836dc2f5851c8349907743408f4e5a482734b5046daa0947e451e9119a983760b2da341681ee5349b4c6d2eb58e883c7edede7c0654e7858e3f944a2004f0a5167419f8d1acd83b6683332d4227b6a34bba32eec91ed5f4ad5bedd8bb512f68ce2f56ebf02d377a918232d349abd882ac226b409f393", 0x84) ioctl$auto(r4, 0x4b71, 0x1) (async) ioctl$auto(r4, 0x4b71, 0x1) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x201, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x800295f4da0a, 0x2, 0x3, 0x62, 0x80000001, 0x50a7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) socket(0x15, 0x5, 0x0) mmap$auto(0x470000000, 0xd, 0x4000000000000df, 0x109b72, 0xffffffffffffffff, 0x8000) socket(0x2, 0x80002, 0x73) socket$nl_generic(0x10, 0x3, 0x10) rseq$auto(&(0x7f0000000040)={0x5, 0x7fff, 0x2000000080000001, 0x806, 0x4, 0x2}, 0x8005, 0x0, 0x8000006) pread64$auto(0xffffffffffffffff, 0x0, 0x3ef, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x6, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x841, 0x0) (async) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x841, 0x0) 1.687532951s ago: executing program 1 (id=783): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) socket(0x23, 0x1, 0x1) socket(0xa, 0x3, 0x73) set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x7b, 0x4) mmap$auto(0x800, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0xffffffff, 0x0, 0x0) mmap$auto(0xfffffffffffffffe, 0x2020009, 0x100003, 0x18, 0xfffffffffffffffa, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0x40040, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x5) fcntl$auto(0x3, 0x4, 0xa553) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000002c0)={{@inferred, 0x5, 0x9, 0x1, "4941aa833e2fc65b6b3cf7cec76d6778ad8eac3cda35ba9c2b2d43eeb0dc59c8dd3500f11581916caa0d3053"}, 0x4, 0xfffffff9, 0x1, @inferred, @enumerated={0xffff, 0xffe, "4bd04167d52dbe3758dcb7641f58661870525adcaedaa5deaa336a58b7382f979a0ff0b3d9583c08610104000049d9f994ef5578e78507d4f25cd03a4c4b5700", 0x9, 0x3fd}, "6cc1888a6393f1b4285854c5368de438f8cc142ef6df1259b05ba1183bedbd31b642b4051bc7955610c61c329794e5311121c760cb8211c78e6947a99807bcc1"}) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0xb) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) select$auto(0xe, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x7}) clone$auto(0xff2d, 0xffff, &(0x7f0000000080)=0x9, &(0x7f00000000c0)=0x8, 0x4) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/nilfs2/features/README\x00', 0x40, 0x0) r3 = gettid() rt_sigqueueinfo$auto(r3, 0xe, &(0x7f0000000000)={@siginfo_0_0={0x76bb, 0x3, 0x4, @_sigfault={0x0}}}) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) futex$auto(0x0, 0x10d, 0x2, 0x0, 0x0, 0x8) 922.681602ms ago: executing program 4 (id=770): r0 = openat$auto_fops_ulong_ro_(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/ieee80211/phy5/netdev:wlan0/stations/08:02:11:00:00:01/tx_filtered\x00', 0x4000, 0x0) write$auto(r0, &(0x7f00000003c0)='\xf5%\x00', 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x2, 0x4d, &(0x7f0000000000)='--\xb6!\\\x00', &(0x7f0000000100)=0x5) (async) r1 = getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x2, 0x4d, &(0x7f0000000000)='--\xb6!\\\x00', &(0x7f0000000100)=0x5) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x2}, @ETHTOOL_A_COALESCE_TX_AGGR_MAX_BYTES={0x8, 0x1a, 0x1ff}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000fbdbdf251600000024000180080003000400000008000100", @ANYRES32=r5, @ANYBLOB="8e499d42", @ANYRES32=0x0, @ANYBLOB="080003006e08000005000300df000000"], 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x80) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="dca0ebd3", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a00000808000300000000000800010000000000080002"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 557.040433ms ago: executing program 1 (id=784): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/event0\x00', 0x2, 0x0) epoll_ctl$auto_EPOLL_CTL_MOD(r0, 0x3, r0, 0x0) ioctl$auto_EVIOCGMASK(r0, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x9}) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000280)='/dev/input/event0\x00', 0x4000, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_GET(0x5, 0x2, 0x0, 0x2f7, 0x6) mmap$auto(0x0, 0x81, 0xde, 0xffffffffffffff9c, 0x7, 0x28000) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) r2 = prctl$auto(0x0, 0x81, 0x0, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='p\x00{\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf25030000004f000780364d205d396de0458f1720e90bfa4771c052ad5fb8e93de46d1fdb1a4494f7d8d0bfcf9cd19663fa1ac79b2c122bc8d66c1598aedb3c1346a30f962d54ee37ed8a590bd5b8518805f76202000c00018008001600ac1414aa"], 0x70}, 0x1, 0x0, 0x0, 0x40010}, 0x800) syz_genetlink_get_family_id$auto_batadv(0x0, r2) fallocate$auto(r2, 0x81, 0x9, 0x0) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8000) r5 = socket(0xf, 0x3, 0x2) mmap$auto(0x0, 0x8, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x2, 0x0) r6 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x640, 0x0) ioctl$auto_MON_IOCX_GET(r6, 0x40189206, 0x0) sendmsg$auto_OVS_METER_CMD_GET(r5, &(0x7f0000001640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001600)={0x0, 0x124c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) fsconfig$auto_FSCONFIG_SET_FLAG(r1, 0x0, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) 469.46709ms ago: executing program 4 (id=785): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2a, 0x2, 0x1) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x1, 0xfffffffe}, 0x55) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x100000000000039, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x1, &(0x7f0000000000)='4\x93\x03\x00\x04\x00\x00', &(0x7f00000001c0), 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0xa, 0x801, 0x84) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(r3, r2, 0xfffffff9) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0x4048aec9, r4) 0s ago: executing program 4 (id=786): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182b02, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) keyctl$auto(0x4, 0xfffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0x8000000e) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) socket(0x3b, 0x6, 0x7fff) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/loop9/queue/nr_requests\x00', 0xa022, 0x0) pwrite64$auto(r1, &(0x7f00000000c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x7fff, 0xc) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000000)='\x00', 0x6) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(0xffffffffffffffff, &(0x7f0000001800)=""/4096, 0x1000) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000140), 0xffffffffffffffff) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x100000003, 0xd77, 0x7, 0x7181, 0x81, 0x7, 0x3, 0x9a89, 0x5, 0x80005, 0x800, 0x1fffffffffff, 0xb4, 0x7, 0x2, 0x10007, 0x80, 0xfffffffffffffffc, 0x0, 0xa, 0x22004, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1, [0x3, 0x0, 0xea4, 0x9cf, 0x200000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1000000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x100000000, 0x40000000000, 0x3, 0x4, 0x5, 0x80800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xcc, 0x4000000002, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x100000000]}, 0x1fe, 0xe) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010025bd7000fbdbdf0002"], 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x3f, &(0x7f0000000380)={&(0x7f0000001040), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xda5c}, 0x80000000}, 0x7, 0x0) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r5 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000f40), 0x2100, 0x0) ioctl$auto_BTRFS_IOC_GET_SUPPORTED_FEATURES(r5, 0x80489439, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0x5) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS0\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r6, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r6, 0x5437, 0x0) kernel console output (not intermixed with test programs): 7] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.793957][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.803677][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.862723][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.875097][ T327] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.899400][ T327] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.916554][ T327] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.942231][ T327] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.971175][ T327] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.990283][ T327] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.002280][ T3787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.025408][ T3787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.063705][ T5925] zswap: compressor not available [ 90.069992][ T3068] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.079249][ T3068] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.188441][ T327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.201407][ T327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.293506][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.305236][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.555604][ T327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.574288][ T327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.676803][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.702952][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.710479][ T327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.718434][ T327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.015420][ T5150] Bluetooth: hci1: command tx timeout [ 91.021024][ T5837] Bluetooth: hci2: command tx timeout [ 91.026575][ T5843] Bluetooth: hci3: command tx timeout [ 91.032100][ T5841] Bluetooth: hci0: command tx timeout [ 91.331251][ T5925] kexec: Could not allocate control_code_buffer [ 91.801960][ T30] audit: type=1800 audit(1767336258.966:2): pid=5959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.10" name="dbroot" dev="configfs" ino=7094 res=0 errno=0 [ 91.984243][ T48] cfg80211: failed to load regulatory.db [ 92.065116][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.429128][ T5962] zswap: compressor not available [ 92.969858][ T5958] mmap: syz.2.9 (5958) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 93.103481][ T5841] Bluetooth: hci0: command tx timeout [ 93.111666][ T5150] Bluetooth: hci1: command tx timeout [ 93.118385][ T5837] Bluetooth: hci2: command tx timeout [ 93.138575][ T5843] Bluetooth: hci3: command tx timeout [ 93.495765][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.504483][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.900621][ T5961] kexec: Could not allocate control_code_buffer [ 93.964814][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.975660][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.954925][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.047640][ T6004] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19'. [ 95.069734][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.097006][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 95.699280][ T6012] netlink: 48 bytes leftover after parsing attributes in process `syz.0.22'. [ 95.719189][ T6011] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.768219][ T6017] netlink: 48 bytes leftover after parsing attributes in process `syz.0.22'. [ 96.021518][ T6011] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.295060][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 96.312332][ T6011] netlink: 44 bytes leftover after parsing attributes in process `syz.3.21'. [ 97.115673][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.153213][ T6043] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 97.311073][ T6046] FAULT_INJECTION: forcing a failure. [ 97.311073][ T6046] name failslab, interval 1, probability 0, space 0, times 1 [ 97.337619][ T6046] CPU: 1 UID: 0 PID: 6046 Comm: syz.1.29 Not tainted syzkaller #0 PREEMPT(full) [ 97.337642][ T6046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 97.337654][ T6046] Call Trace: [ 97.337660][ T6046] [ 97.337667][ T6046] dump_stack_lvl+0x16c/0x1f0 [ 97.337696][ T6046] should_fail_ex+0x512/0x640 [ 97.337713][ T6046] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 97.337737][ T6046] should_failslab+0xc2/0x120 [ 97.337761][ T6046] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 97.337781][ T6046] ? kstrdup_const+0x63/0x80 [ 97.337802][ T6046] ? kstrdup+0x53/0x100 [ 97.337817][ T6046] kstrdup+0x53/0x100 [ 97.337834][ T6046] kstrdup_const+0x63/0x80 [ 97.337850][ T6046] __kernfs_new_node+0x9b/0x9b0 [ 97.337870][ T6046] ? __pfx___kernfs_new_node+0x10/0x10 [ 97.337891][ T6046] ? find_held_lock+0x2b/0x80 [ 97.337911][ T6046] ? kernfs_root+0xee/0x2a0 [ 97.337935][ T6046] kernfs_new_node+0x13c/0x1e0 [ 97.337957][ T6046] kernfs_create_link+0xcc/0x240 [ 97.337988][ T6046] sysfs_do_create_link_sd+0x90/0x140 [ 97.338015][ T6046] sysfs_create_link+0x61/0xc0 [ 97.338044][ T6046] device_add+0x652/0x1980 [ 97.338067][ T6046] ? __pfx_device_add+0x10/0x10 [ 97.338091][ T6046] ? kfree_const+0x55/0x60 [ 97.338111][ T6046] device_create_groups_vargs+0x1f8/0x270 [ 97.338135][ T6046] device_create+0xed/0x130 [ 97.338155][ T6046] ? __pfx_device_create+0x10/0x10 [ 97.338176][ T6046] ? do_init_timer+0xc9/0x110 [ 97.338199][ T6046] ? ieee80211_roc_setup+0x136/0x270 [ 97.338218][ T6046] ? ieee80211_alloc_hw_nm+0x231/0x22b0 [ 97.338244][ T6046] mac80211_hwsim_new_radio+0x36a/0x5150 [ 97.338269][ T6046] ? __asan_memset+0x23/0x50 [ 97.338287][ T6046] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 97.338309][ T6046] hwsim_new_radio_nl+0xba2/0x1330 [ 97.338328][ T6046] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 97.338359][ T6046] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 97.338385][ T6046] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 97.338421][ T6046] genl_family_rcv_msg_doit+0x209/0x2f0 [ 97.338447][ T6046] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 97.338471][ T6046] ? genl_get_cmd+0x194/0x580 [ 97.338496][ T6046] ? bpf_lsm_capable+0x9/0x10 [ 97.338522][ T6046] ? security_capable+0x7e/0x260 [ 97.338546][ T6046] ? ns_capable+0xd7/0x110 [ 97.338574][ T6046] genl_rcv_msg+0x55c/0x800 [ 97.338593][ T6046] ? __pfx_genl_rcv_msg+0x10/0x10 [ 97.338612][ T6046] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 97.338635][ T6046] netlink_rcv_skb+0x158/0x420 [ 97.338656][ T6046] ? __pfx_genl_rcv_msg+0x10/0x10 [ 97.338671][ T6046] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 97.338699][ T6046] ? netlink_deliver_tap+0x1ae/0xd30 [ 97.338721][ T6046] genl_rcv+0x28/0x40 [ 97.338740][ T6046] netlink_unicast+0x5aa/0x870 [ 97.338763][ T6046] ? __pfx_netlink_unicast+0x10/0x10 [ 97.338791][ T6046] netlink_sendmsg+0x8c8/0xdd0 [ 97.338814][ T6046] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.338837][ T6046] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 97.338863][ T6046] ____sys_sendmsg+0xa5d/0xc30 [ 97.338886][ T6046] ? copy_msghdr_from_user+0x10a/0x160 [ 97.338904][ T6046] ? __pfx_____sys_sendmsg+0x10/0x10 [ 97.338924][ T6046] ? preempt_schedule_thunk+0x16/0x30 [ 97.338942][ T6046] ? try_to_wake_up+0xa67/0x1860 [ 97.338964][ T6046] ___sys_sendmsg+0x134/0x1d0 [ 97.338983][ T6046] ? __pfx____sys_sendmsg+0x10/0x10 [ 97.339001][ T6046] ? futex_private_hash_put+0x160/0x1b0 [ 97.339039][ T6046] __sys_sendmsg+0x16d/0x220 [ 97.339057][ T6046] ? __pfx___sys_sendmsg+0x10/0x10 [ 97.339074][ T6046] ? __x64_sys_futex+0x1e0/0x4c0 [ 97.339102][ T6046] do_syscall_64+0xcd/0xf80 [ 97.339125][ T6046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.339140][ T6046] RIP: 0033:0x7f26b538f7c9 [ 97.339161][ T6046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.339175][ T6046] RSP: 002b:00007f26b6243038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.339190][ T6046] RAX: ffffffffffffffda RBX: 00007f26b55e5fa0 RCX: 00007f26b538f7c9 [ 97.339200][ T6046] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000009 [ 97.339209][ T6046] RBP: 00007f26b5413f91 R08: 0000000000000000 R09: 0000000000000000 [ 97.339218][ T6046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.339227][ T6046] R13: 00007f26b55e6038 R14: 00007f26b55e5fa0 R15: 00007fffc442f2c8 [ 97.339247][ T6046] [ 97.897091][ T6063] forcing mempool usage for bio_alloc_bioset+0x3de/0x8c0 [ 99.145963][ T6091] process 'syz.1.39' launched './file0' with NULL argv: empty string added [ 100.097748][ T6111] netlink: 'syz.0.45': attribute type 1 has an invalid length. [ 100.137908][ T6111] nbd: error processing sock list [ 100.465872][ T6114] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 101.261328][ T6140] FAULT_INJECTION: forcing a failure. [ 101.261328][ T6140] name failslab, interval 1, probability 0, space 0, times 0 [ 101.261371][ T6140] CPU: 1 UID: 0 PID: 6140 Comm: syz.2.48 Not tainted syzkaller #0 PREEMPT(full) [ 101.261388][ T6140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 101.261396][ T6140] Call Trace: [ 101.261401][ T6140] [ 101.261406][ T6140] dump_stack_lvl+0x16c/0x1f0 [ 101.261430][ T6140] should_fail_ex+0x512/0x640 [ 101.261446][ T6140] ? __kmalloc_cache_noprof+0x5f/0x800 [ 101.261465][ T6140] should_failslab+0xc2/0x120 [ 101.261486][ T6140] __kmalloc_cache_noprof+0x80/0x800 [ 101.261502][ T6140] ? snd_pcm_oss_change_params_locked+0x211/0x3ab0 [ 101.261534][ T6140] ? snd_pcm_oss_change_params_locked+0x211/0x3ab0 [ 101.261556][ T6140] snd_pcm_oss_change_params_locked+0x211/0x3ab0 [ 101.261579][ T6140] ? trace_contention_end+0x85/0x110 [ 101.261595][ T6140] ? __mutex_lock+0x27b/0x1ca0 [ 101.261618][ T6140] ? snd_pcm_oss_make_ready+0xc4/0x1b0 [ 101.261631][ T6140] ? find_held_lock+0x2b/0x80 [ 101.261649][ T6140] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 101.261672][ T6140] ? __pfx___mutex_lock+0x10/0x10 [ 101.261706][ T6140] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 101.261721][ T6140] snd_pcm_oss_sync+0x1de/0x840 [ 101.261736][ T6140] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 101.261757][ T6140] snd_pcm_oss_release+0x28b/0x310 [ 101.261772][ T6140] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 101.261785][ T6140] __fput+0x402/0xb70 [ 101.261805][ T6140] task_work_run+0x150/0x240 [ 101.261823][ T6140] ? __pfx_task_work_run+0x10/0x10 [ 101.261837][ T6140] ? __do_sys_close_range+0x278/0x730 [ 101.261863][ T6140] exit_to_user_mode_loop+0xfb/0x540 [ 101.261883][ T6140] do_syscall_64+0x4ee/0xf80 [ 101.261906][ T6140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.261920][ T6140] RIP: 0033:0x7fe15938f7c9 [ 101.261932][ T6140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.261946][ T6140] RSP: 002b:00007fe15a1e0038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 101.261959][ T6140] RAX: 0000000000000000 RBX: 00007fe1595e5fa0 RCX: 00007fe15938f7c9 [ 101.261968][ T6140] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 101.261976][ T6140] RBP: 00007fe159413f91 R08: 0000000000000000 R09: 0000000000000000 [ 101.261984][ T6140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.261992][ T6140] R13: 00007fe1595e6038 R14: 00007fe1595e5fa0 R15: 00007ffe29201118 [ 101.262011][ T6140] [ 101.838193][ T6152] FAULT_INJECTION: forcing a failure. [ 101.838193][ T6152] name failslab, interval 1, probability 0, space 0, times 0 [ 101.838267][ T6152] CPU: 0 UID: 0 PID: 6152 Comm: syz.1.50 Not tainted syzkaller #0 PREEMPT(full) [ 101.838298][ T6152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 101.838314][ T6152] Call Trace: [ 101.838324][ T6152] [ 101.838333][ T6152] dump_stack_lvl+0x16c/0x1f0 [ 101.838378][ T6152] should_fail_ex+0x512/0x640 [ 101.838413][ T6152] should_failslab+0xc2/0x120 [ 101.838453][ T6152] kmem_cache_alloc_node_noprof+0x86/0x800 [ 101.838487][ T6152] ? __alloc_skb+0x156/0x410 [ 101.838524][ T6152] ? __alloc_skb+0x156/0x410 [ 101.838551][ T6152] __alloc_skb+0x156/0x410 [ 101.838580][ T6152] ? __pfx___alloc_skb+0x10/0x10 [ 101.838621][ T6152] tipc_buf_acquire+0x26/0xe0 [ 101.838651][ T6152] tipc_msg_reverse+0x1e9/0x920 [ 101.838691][ T6152] tipc_sk_respond+0xfe/0x310 [ 101.838723][ T6152] ? __pfx_tipc_sk_respond+0x10/0x10 [ 101.838749][ T6152] ? tipc_node_remove_conn+0x8f/0x480 [ 101.838775][ T6152] ? tipc_sk_push_backlog+0x3b4/0xa00 [ 101.838811][ T6152] __tipc_shutdown+0xad9/0xee0 [ 101.838837][ T6152] ? __pfx___tipc_shutdown+0x10/0x10 [ 101.838859][ T6152] ? do_raw_spin_lock+0x12c/0x2b0 [ 101.838885][ T6152] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 101.838922][ T6152] ? __pfx_woken_wake_function+0x10/0x10 [ 101.838954][ T6152] ? tipc_sk_filtering+0x420/0x520 [ 101.838981][ T6152] tipc_release+0xe2/0x1650 [ 101.839002][ T6152] ? down_write+0x14d/0x200 [ 101.839024][ T6152] ? __pfx_down_write+0x10/0x10 [ 101.839054][ T6152] ? __pfx_locks_remove_file+0x10/0x10 [ 101.839097][ T6152] ? kmem_cache_free+0x171/0x770 [ 101.839130][ T6152] __sock_release+0xb3/0x270 [ 101.839162][ T6152] ? __pfx_sock_close+0x10/0x10 [ 101.839190][ T6152] sock_close+0x1c/0x30 [ 101.839218][ T6152] __fput+0x402/0xb70 [ 101.839250][ T6152] task_work_run+0x150/0x240 [ 101.839285][ T6152] ? __pfx_task_work_run+0x10/0x10 [ 101.839314][ T6152] ? __do_sys_close_range+0x278/0x730 [ 101.839371][ T6152] exit_to_user_mode_loop+0xfb/0x540 [ 101.839408][ T6152] do_syscall_64+0x4ee/0xf80 [ 101.839448][ T6152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.839476][ T6152] RIP: 0033:0x7f26b538f7c9 [ 101.839497][ T6152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.839523][ T6152] RSP: 002b:00007f26b6201038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 101.839549][ T6152] RAX: 0000000000000000 RBX: 00007f26b55e6180 RCX: 00007f26b538f7c9 [ 101.839565][ T6152] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 101.839581][ T6152] RBP: 00007f26b5413f91 R08: 0000000000000000 R09: 0000000000000000 [ 101.839596][ T6152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.839612][ T6152] R13: 00007f26b55e6218 R14: 00007f26b55e6180 R15: 00007fffc442f2c8 [ 101.839651][ T6152] [ 103.860814][ T6201] Zero length message leads to an empty skb [ 104.493090][ T6214] netlink: 342 bytes leftover after parsing attributes in process `syz.2.59'. [ 104.541897][ T6214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.59'. [ 104.573127][ T6214] FAULT_INJECTION: forcing a failure. [ 104.573127][ T6214] name failslab, interval 1, probability 0, space 0, times 0 [ 104.596373][ T6214] CPU: 1 UID: 0 PID: 6214 Comm: syz.2.59 Not tainted syzkaller #0 PREEMPT(full) [ 104.596402][ T6214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 104.596411][ T6214] Call Trace: [ 104.596417][ T6214] [ 104.596423][ T6214] dump_stack_lvl+0x16c/0x1f0 [ 104.596450][ T6214] should_fail_ex+0x512/0x640 [ 104.596468][ T6214] ? __kmalloc_cache_noprof+0x5f/0x800 [ 104.596487][ T6214] should_failslab+0xc2/0x120 [ 104.596510][ T6214] __kmalloc_cache_noprof+0x80/0x800 [ 104.596525][ T6214] ? lockdep_init_map_type+0x5c/0x270 [ 104.596541][ T6214] ? register_netdevice+0x4eb/0x21d0 [ 104.596562][ T6214] ? lockdep_init_map_type+0x5c/0x270 [ 104.596578][ T6214] ? register_netdevice+0x4eb/0x21d0 [ 104.596607][ T6214] register_netdevice+0x4eb/0x21d0 [ 104.596630][ T6214] ? idr_alloc+0xdd/0x130 [ 104.596649][ T6214] ? __pfx_register_netdevice+0x10/0x10 [ 104.596675][ T6214] ppp_dev_configure+0xa1e/0xd40 [ 104.596702][ T6214] ppp_ioctl+0x170e/0x2880 [ 104.596724][ T6214] ? find_held_lock+0x2b/0x80 [ 104.596741][ T6214] ? __pfx_ppp_ioctl+0x10/0x10 [ 104.596765][ T6214] ? __fget_files+0x20e/0x3c0 [ 104.596788][ T6214] ? __pfx_ppp_ioctl+0x10/0x10 [ 104.596809][ T6214] __x64_sys_ioctl+0x18e/0x210 [ 104.596828][ T6214] do_syscall_64+0xcd/0xf80 [ 104.596851][ T6214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.596866][ T6214] RIP: 0033:0x7fe15938f7c9 [ 104.596879][ T6214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.596892][ T6214] RSP: 002b:00007fe15a1bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.596907][ T6214] RAX: ffffffffffffffda RBX: 00007fe1595e6090 RCX: 00007fe15938f7c9 [ 104.596916][ T6214] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000007 [ 104.596924][ T6214] RBP: 00007fe159413f91 R08: 0000000000000000 R09: 0000000000000000 [ 104.596933][ T6214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.596941][ T6214] R13: 00007fe1595e6128 R14: 00007fe1595e6090 R15: 00007ffe29201118 [ 104.596962][ T6214] [ 106.126188][ T6226] netlink: 28 bytes leftover after parsing attributes in process `syz.3.63'. [ 106.260688][ T6226] veth1_macvtap: left promiscuous mode [ 107.294846][ T6266] random: crng reseeded on system resumption [ 108.696688][ T6295] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 108.992723][ T6288] Invalid ELF header magic: != ELF [ 112.295347][ T6399] input: jJǸ-9%vJ86 as /devices/virtual/input/input6 [ 112.296153][ T6403] usb usb24: usbfs: process 6403 (syz.0.82) did not claim interface 0 before use [ 113.382345][ T6438] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.621722][ T6444] syz.3.89 (6444): attempted to duplicate a private mapping with mremap. This is not supported. [ 113.913213][ T6458] netlink: 28 bytes leftover after parsing attributes in process `syz.0.93'. [ 113.967202][ T6458] hsr_slave_0: left promiscuous mode [ 113.980624][ T6458] hsr_slave_1: left promiscuous mode [ 114.065942][ T6463] syz.3.94 uses obsolete (PF_INET,SOCK_PACKET) [ 114.313624][ T6468] FAULT_INJECTION: forcing a failure. [ 114.313624][ T6468] name failslab, interval 1, probability 0, space 0, times 0 [ 114.328236][ T6468] CPU: 1 UID: 5 PID: 6468 Comm: syz.2.95 Not tainted syzkaller #0 PREEMPT(full) [ 114.328274][ T6468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 114.328290][ T6468] Call Trace: [ 114.328299][ T6468] [ 114.328310][ T6468] dump_stack_lvl+0x16c/0x1f0 [ 114.328355][ T6468] should_fail_ex+0x512/0x640 [ 114.328385][ T6468] ? __kmalloc_cache_noprof+0x5f/0x800 [ 114.328421][ T6468] should_failslab+0xc2/0x120 [ 114.328461][ T6468] __kmalloc_cache_noprof+0x80/0x800 [ 114.328490][ T6468] ? net_generic+0xf4/0x2a0 [ 114.328524][ T6468] ? fib_net_init+0x1a4/0x3f0 [ 114.328572][ T6468] ? fib_net_init+0x1a4/0x3f0 [ 114.328610][ T6468] fib_net_init+0x1a4/0x3f0 [ 114.328648][ T6468] ? __pfx___register_sysctl_table+0x10/0x10 [ 114.328685][ T6468] ? __pfx_fib_net_init+0x10/0x10 [ 114.328724][ T6468] ? lockdep_init_map_type+0x5c/0x270 [ 114.328752][ T6468] ? do_init_timer+0xc9/0x110 [ 114.328795][ T6468] ? devinet_init_net+0x5c2/0x910 [ 114.328824][ T6468] ? __pfx_fib_net_init+0x10/0x10 [ 114.328863][ T6468] ops_init+0x1e2/0x5f0 [ 114.328903][ T6468] setup_net+0x11d/0x3a0 [ 114.328941][ T6468] ? __pfx_setup_net+0x10/0x10 [ 114.328975][ T6468] ? lockdep_init_map_type+0x5c/0x270 [ 114.329004][ T6468] ? mutex_init_lockep+0x110/0x150 [ 114.329038][ T6468] copy_net_ns+0x351/0x7c0 [ 114.329081][ T6468] create_new_namespaces+0x3ea/0xab0 [ 114.329127][ T6468] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 114.329168][ T6468] ksys_unshare+0x45b/0xa40 [ 114.329220][ T6468] ? __pfx_ksys_unshare+0x10/0x10 [ 114.329265][ T6468] ? xfd_validate_state+0x61/0x180 [ 114.329300][ T6468] __x64_sys_unshare+0x31/0x40 [ 114.329341][ T6468] do_syscall_64+0xcd/0xf80 [ 114.329380][ T6468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.329406][ T6468] RIP: 0033:0x7fe15938f7c9 [ 114.329429][ T6468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.329454][ T6468] RSP: 002b:00007fe15a1e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 114.329481][ T6468] RAX: ffffffffffffffda RBX: 00007fe1595e5fa0 RCX: 00007fe15938f7c9 [ 114.329500][ T6468] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 114.329517][ T6468] RBP: 00007fe159413f91 R08: 0000000000000000 R09: 0000000000000000 [ 114.329534][ T6468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.329551][ T6468] R13: 00007fe1595e6038 R14: 00007fe1595e5fa0 R15: 00007ffe29201118 [ 114.329590][ T6468] [ 115.548240][ T6496] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 116.181284][ T6512] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 117.457210][ T6514] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 118.053610][ T6511] kexec: Could not allocate control_code_buffer [ 118.909899][ T6548] can: request_module (can-proto-0) failed. [ 119.609903][ T6553] mkiss: ax0: crc mode is auto. [ 121.647367][ T6607] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 122.045380][ T6622] block2mtd: parameter too long [ 122.580380][ T6627] FAULT_INJECTION: forcing a failure. [ 122.580380][ T6627] name failslab, interval 1, probability 0, space 0, times 0 [ 122.617569][ T6627] CPU: 1 UID: 0 PID: 6627 Comm: syz.1.130 Tainted: G L syzkaller #0 PREEMPT(full) [ 122.617595][ T6627] Tainted: [L]=SOFTLOCKUP [ 122.617601][ T6627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 122.617609][ T6627] Call Trace: [ 122.617615][ T6627] [ 122.617621][ T6627] dump_stack_lvl+0x16c/0x1f0 [ 122.617658][ T6627] should_fail_ex+0x512/0x640 [ 122.617674][ T6627] ? __kmalloc_cache_noprof+0x5f/0x800 [ 122.617693][ T6627] should_failslab+0xc2/0x120 [ 122.617715][ T6627] __kmalloc_cache_noprof+0x80/0x800 [ 122.617732][ T6627] ? trace_pid_list_alloc+0x232/0x480 [ 122.617755][ T6627] ? trace_pid_list_alloc+0x232/0x480 [ 122.617773][ T6627] trace_pid_list_alloc+0x232/0x480 [ 122.617795][ T6627] trace_pid_write+0x10c/0x4b0 [ 122.617812][ T6627] ? __pfx_trace_pid_write+0x10/0x10 [ 122.617824][ T6627] ? __pfx_aa_file_perm+0x10/0x10 [ 122.617847][ T6627] ? update_last_data+0xaa/0x510 [ 122.617871][ T6627] event_pid_write.isra.0+0x1e4/0x7f0 [ 122.617893][ T6627] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 122.617923][ T6627] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 122.617943][ T6627] vfs_write+0x2a0/0x11d0 [ 122.617965][ T6627] ? __pfx___mutex_lock+0x10/0x10 [ 122.617989][ T6627] ? __pfx_vfs_write+0x10/0x10 [ 122.618014][ T6627] ? __fget_files+0x20e/0x3c0 [ 122.618040][ T6627] ksys_write+0x12a/0x250 [ 122.618059][ T6627] ? __pfx_ksys_write+0x10/0x10 [ 122.618084][ T6627] do_syscall_64+0xcd/0xf80 [ 122.618107][ T6627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.618122][ T6627] RIP: 0033:0x7f26b538f7c9 [ 122.618137][ T6627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.618151][ T6627] RSP: 002b:00007f26b6243038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 122.618165][ T6627] RAX: ffffffffffffffda RBX: 00007f26b55e5fa0 RCX: 00007f26b538f7c9 [ 122.618175][ T6627] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 122.618183][ T6627] RBP: 00007f26b5413f91 R08: 0000000000000000 R09: 0000000000000000 [ 122.618192][ T6627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.618200][ T6627] R13: 00007f26b55e6038 R14: 00007f26b55e5fa0 R15: 00007fffc442f2c8 [ 122.618220][ T6627] [ 122.868095][ T6612] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 124.548292][ T6668] netlink: 342 bytes leftover after parsing attributes in process `syz.3.138'. [ 124.583850][ T6668] IPv6: NLM_F_CREATE should be specified when creating new route [ 124.617785][ T6668] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 124.625318][ T6668] IPv6: NLM_F_CREATE should be set when creating new route [ 124.632550][ T6668] IPv6: NLM_F_CREATE should be set when creating new route [ 126.022847][ T6693] netlink: 13 bytes leftover after parsing attributes in process `syz.3.144'. [ 126.818317][ T6718] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 128.736414][ T6724] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 128.784925][ T6724] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 128.995825][ T6724] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 129.203203][ T6724] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 129.263577][ T6724] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 129.427534][ T6724] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 129.528198][ T6724] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 129.548757][ T6724] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 129.628488][ T6724] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 129.685274][ T6724] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 129.707932][ T6724] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 129.812701][ T6724] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 130.774739][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 130.802466][ T6773] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 131.272723][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout [ 131.305973][ T6778] FAULT_INJECTION: forcing a failure. [ 131.305973][ T6778] name failslab, interval 1, probability 0, space 0, times 0 [ 131.356925][ T6778] CPU: 0 UID: 0 PID: 6778 Comm: syz.1.163 Tainted: G L syzkaller #0 PREEMPT(full) [ 131.356950][ T6778] Tainted: [L]=SOFTLOCKUP [ 131.356955][ T6778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 131.356963][ T6778] Call Trace: [ 131.356968][ T6778] [ 131.356974][ T6778] dump_stack_lvl+0x16c/0x1f0 [ 131.356999][ T6778] should_fail_ex+0x512/0x640 [ 131.357015][ T6778] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 131.357039][ T6778] should_failslab+0xc2/0x120 [ 131.357060][ T6778] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 131.357081][ T6778] ? kvasprintf_const+0x66/0x1a0 [ 131.357101][ T6778] ? kvasprintf+0xbc/0x150 [ 131.357115][ T6778] kvasprintf+0xbc/0x150 [ 131.357130][ T6778] ? __pfx_kvasprintf+0x10/0x10 [ 131.357146][ T6778] ? lockdep_hardirqs_on+0x7c/0x110 [ 131.357167][ T6778] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 131.357187][ T6778] ? __debug_object_init+0x2de/0x3d0 [ 131.357211][ T6778] kvasprintf_const+0x66/0x1a0 [ 131.357227][ T6778] kobject_set_name_vargs+0x5a/0x140 [ 131.357243][ T6778] dev_set_name+0xc7/0x100 [ 131.357264][ T6778] ? __pfx_dev_set_name+0x10/0x10 [ 131.357286][ T6778] ? lockdep_init_map_type+0x5c/0x270 [ 131.357301][ T6778] ? __init_waitqueue_head+0xca/0x150 [ 131.357319][ T6778] ? input_allocate_device+0x271/0x350 [ 131.357339][ T6778] input_allocate_device+0x293/0x350 [ 131.357357][ T6778] uinput_ioctl_handler.isra.0+0x8bb/0x1df0 [ 131.357372][ T6778] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 131.357390][ T6778] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 131.357410][ T6778] ? find_held_lock+0x2b/0x80 [ 131.357437][ T6778] ? __pfx_uinput_ioctl+0x10/0x10 [ 131.357451][ T6778] __x64_sys_ioctl+0x18e/0x210 [ 131.357476][ T6778] do_syscall_64+0xcd/0xf80 [ 131.357497][ T6778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.357513][ T6778] RIP: 0033:0x7f26b538f7c9 [ 131.357525][ T6778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.357538][ T6778] RSP: 002b:00007f26b6243038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.357552][ T6778] RAX: ffffffffffffffda RBX: 00007f26b55e5fa0 RCX: 00007f26b538f7c9 [ 131.357561][ T6778] RDX: 000000000000001f RSI: 0000000040045565 RDI: 0000000000000003 [ 131.357570][ T6778] RBP: 00007f26b5413f91 R08: 0000000000000000 R09: 0000000000000000 [ 131.357578][ T6778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.357586][ T6778] R13: 00007f26b55e6038 R14: 00007f26b55e5fa0 R15: 00007fffc442f2c8 [ 131.357605][ T6778] [ 131.620767][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 131.742560][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout [ 132.856317][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 133.334686][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout [ 133.355707][ T6821] aoe: skb alloc failure [ 133.394132][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.401110][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.655481][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 133.814813][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout [ 134.940619][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 134.967957][ T6850] Console: switching to colour VGA+ 80x25 [ 135.415519][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout [ 135.735973][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 135.889775][ T6867] netlink: 338 bytes leftover after parsing attributes in process `syz.2.178'. [ 135.904580][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout [ 135.963103][ T6868] netlink: 338 bytes leftover after parsing attributes in process `syz.2.178'. [ 136.304393][ T6874] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 136.771042][ T6881] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 137.340727][ T6896] vivid-009: ================= START STATUS ================= [ 137.398100][ T6896] vivid-009: Radio HW Seek Mode: Bounded [ 137.440135][ T6896] vivid-009: Radio Programmable HW Seek: false [ 137.531902][ T6896] vivid-009: RDS Rx I/O Mode: Block I/O [ 137.549024][ T6898] zswap: compressor not available [ 137.576715][ T6896] vivid-009: Generate RBDS Instead of RDS: false [ 137.674617][ T6896] vivid-009: RDS Reception: true [ 137.700860][ T6896] vivid-009: RDS Program Type: 0 inactive [ 137.721824][ T6906] netlink: 'syz.1.184': attribute type 1 has an invalid length. [ 137.750135][ T6909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.187'. [ 137.791801][ T6896] vivid-009: RDS PS Name: inactive [ 137.844698][ T6896] vivid-009: RDS Radio Text: inactive [ 137.895207][ T6896] vivid-009: RDS Traffic Announcement: false inactive [ 137.922975][ T6896] vivid-009: RDS Traffic Program: false inactive [ 137.996381][ T6896] vivid-009: RDS Music: false inactive [ 138.001890][ T6896] vivid-009: ================== END STATUS ================== [ 138.061089][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.067591][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.649920][ T6923] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input11 [ 138.877678][ T6925] vhci_hcd vhci_hcd.1: invalid port number 9 [ 139.873068][ T6938] zswap: compressor 000 not available [ 140.470469][ T6950] FAULT_INJECTION: forcing a failure. [ 140.470469][ T6950] name fail_futex, interval 1, probability 0, space 0, times 1 [ 140.483431][ T6950] CPU: 0 UID: 0 PID: 6950 Comm: syz.1.196 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.483475][ T6950] Tainted: [L]=SOFTLOCKUP [ 140.483485][ T6950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 140.483502][ T6950] Call Trace: [ 140.483511][ T6950] [ 140.483521][ T6950] dump_stack_lvl+0x16c/0x1f0 [ 140.483566][ T6950] should_fail_ex+0x512/0x640 [ 140.483612][ T6950] get_futex_key+0x1d0/0x15f0 [ 140.483648][ T6950] ? __pfx_get_futex_key+0x10/0x10 [ 140.483692][ T6950] futex_wake+0xea/0x530 [ 140.483739][ T6950] ? kasan_quarantine_put+0x10a/0x240 [ 140.483778][ T6950] ? __pfx_futex_wake+0x10/0x10 [ 140.483819][ T6950] ? putname+0xf5/0x1a0 [ 140.483854][ T6950] do_futex+0x1e3/0x350 [ 140.483885][ T6950] ? __pfx_do_futex+0x10/0x10 [ 140.483919][ T6950] ? kfree+0x27d/0x6e0 [ 140.483950][ T6950] __x64_sys_futex+0x1e0/0x4c0 [ 140.483985][ T6950] ? __x64_sys_openat+0x174/0x210 [ 140.484016][ T6950] ? __pfx___x64_sys_futex+0x10/0x10 [ 140.484062][ T6950] do_syscall_64+0xcd/0xf80 [ 140.484112][ T6950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.484140][ T6950] RIP: 0033:0x7f26b538f7c9 [ 140.484163][ T6950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.484189][ T6950] RSP: 002b:00007f26b62430e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 140.484215][ T6950] RAX: ffffffffffffffda RBX: 00007f26b55e5fa8 RCX: 00007f26b538f7c9 [ 140.484234][ T6950] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f26b55e5fac [ 140.484251][ T6950] RBP: 00007f26b55e5fa0 R08: 00007f26b6244000 R09: 0000000000000000 [ 140.484269][ T6950] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000000 [ 140.484285][ T6950] R13: 00007f26b55e6038 R14: 00007fffc442f1e0 R15: 00007fffc442f2c8 [ 140.484322][ T6950] [ 141.862809][ T6980] can: request_module (can-proto-4) failed. [ 141.883653][ T6978] can: request_module (can-proto-4) failed. [ 142.029074][ T6955] ima: policy update failed [ 142.036392][ T30] audit: type=1802 audit(1767336309.201:3): pid=6955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.199" res=0 errno=0 [ 142.223902][ T6992] i2c i2c-0: delete_device: Can't find device in list [ 142.265313][ T6992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.207'. [ 142.962087][ T5843] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 143.487323][ T7019] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 145.381156][ T7071] futex_wake_op: syz.0.221 tries to shift op by -2048; fix this program [ 145.433824][ T7071] futex_wake_op: syz.0.221 tries to shift op by -2048; fix this program [ 146.615939][ T7119] mkiss: ax0: crc mode is auto. [ 146.981329][ T7125] FAULT_INJECTION: forcing a failure. [ 146.981329][ T7125] name failslab, interval 1, probability 0, space 0, times 0 [ 146.981420][ T7125] CPU: 1 UID: 0 PID: 7125 Comm: syz.3.229 Tainted: G L syzkaller #0 PREEMPT(full) [ 146.981460][ T7125] Tainted: [L]=SOFTLOCKUP [ 146.981470][ T7125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 146.981487][ T7125] Call Trace: [ 146.981496][ T7125] [ 146.981507][ T7125] dump_stack_lvl+0x16c/0x1f0 [ 146.981561][ T7125] should_fail_ex+0x512/0x640 [ 146.981591][ T7125] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 146.981630][ T7125] should_failslab+0xc2/0x120 [ 146.981671][ T7125] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 146.981708][ T7125] ? mqueue_alloc_inode+0x25/0x50 [ 146.981761][ T7125] ? __pfx_mqueue_fill_super+0x10/0x10 [ 146.981803][ T7125] ? __pfx_mqueue_alloc_inode+0x10/0x10 [ 146.981843][ T7125] ? mqueue_alloc_inode+0x25/0x50 [ 146.981881][ T7125] ? lockdep_init_map_type+0x5c/0x270 [ 146.981907][ T7125] mqueue_alloc_inode+0x25/0x50 [ 146.981947][ T7125] alloc_inode+0x64/0x240 [ 146.981975][ T7125] new_inode+0x22/0x1c0 [ 146.982003][ T7125] ? __pfx_mqueue_fill_super+0x10/0x10 [ 146.982040][ T7125] mqueue_get_inode+0x2e/0xdd0 [ 146.982075][ T7125] ? sget_fc+0x808/0xc20 [ 146.982110][ T7125] ? __pfx_mqueue_fill_super+0x10/0x10 [ 146.982145][ T7125] mqueue_fill_super+0x14d/0x260 [ 146.982206][ T7125] get_tree_nodev+0xdd/0x190 [ 146.982246][ T7125] mqueue_get_tree+0xf1/0x130 [ 146.982285][ T7125] vfs_get_tree+0x8e/0x330 [ 146.982311][ T7125] fc_mount_longterm+0x1a/0x270 [ 146.982345][ T7125] mq_init_ns+0x482/0x810 [ 146.982378][ T7125] copy_ipcs+0x3db/0x7d0 [ 146.982409][ T7125] create_new_namespaces+0x20a/0xab0 [ 146.982446][ T7125] ? security_capable+0x7e/0x260 [ 146.982492][ T7125] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 146.982530][ T7125] ksys_unshare+0x45b/0xa40 [ 146.982594][ T7125] ? __pfx_ksys_unshare+0x10/0x10 [ 146.982633][ T7125] ? xfd_validate_state+0x61/0x180 [ 146.982669][ T7125] __x64_sys_unshare+0x31/0x40 [ 146.982704][ T7125] do_syscall_64+0xcd/0xf80 [ 146.982752][ T7125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.982786][ T7125] RIP: 0033:0x7f76f738f7c9 [ 146.982808][ T7125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.982832][ T7125] RSP: 002b:00007f76f82a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 146.982858][ T7125] RAX: ffffffffffffffda RBX: 00007f76f75e5fa0 RCX: 00007f76f738f7c9 [ 146.982875][ T7125] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 146.982889][ T7125] RBP: 00007f76f7413f91 R08: 0000000000000000 R09: 0000000000000000 [ 146.982905][ T7125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.982920][ T7125] R13: 00007f76f75e6038 R14: 00007f76f75e5fa0 R15: 00007ffd8d84bcb8 [ 146.982956][ T7125] [ 147.268585][ T7138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.232'. [ 149.236102][ T7178] __vm_enough_memory: pid: 7178, comm: syz.2.239, bytes: 4398046511104 not enough memory for the allocation [ 149.437684][ T6852] netdevsim netdevsim15 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.499690][ T6852] netdevsim netdevsim15 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.829309][ T327] netdevsim netdevsim15 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.859404][ T327] netdevsim netdevsim15 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.897527][ T327] netdevsim netdevsim15 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.985410][ T7192] netlink: 186 bytes leftover after parsing attributes in process `syz.2.242'. [ 150.062488][ T7188] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 150.331995][ T7200] netlink: 62 bytes leftover after parsing attributes in process `syz.2.244'. [ 150.446618][ T7195] netlink: 'syz.0.243': attribute type 6 has an invalid length. [ 150.454755][ T7195] netlink: 13 bytes leftover after parsing attributes in process `syz.0.243'. [ 151.064171][ T7220] mkiss: ax0: crc mode is auto. [ 151.720416][ T7235] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 153.449040][ T7277] netlink: 28 bytes leftover after parsing attributes in process `syz.3.259'. [ 153.540963][ T7266] Process accounting resumed [ 153.636733][ T7281] netlink: 330 bytes leftover after parsing attributes in process `syz.2.260'. [ 153.654056][ T7282] usb usb37: usbfs: process 7282 (syz.0.261) did not claim interface 0 before use [ 155.491538][ T7315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.268'. [ 157.436748][ T7338] FAULT_INJECTION: forcing a failure. [ 157.436748][ T7338] name failslab, interval 1, probability 0, space 0, times 0 [ 157.504852][ T7338] CPU: 1 UID: 0 PID: 7338 Comm: syz.2.274 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.504898][ T7338] Tainted: [L]=SOFTLOCKUP [ 157.504918][ T7338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 157.504934][ T7338] Call Trace: [ 157.504943][ T7338] [ 157.504954][ T7338] dump_stack_lvl+0x16c/0x1f0 [ 157.505001][ T7338] should_fail_ex+0x512/0x640 [ 157.505033][ T7338] ? __kmalloc_noprof+0xca/0x910 [ 157.505082][ T7338] should_failslab+0xc2/0x120 [ 157.505147][ T7338] __kmalloc_noprof+0xeb/0x910 [ 157.505179][ T7338] ? create_ruleset+0x21/0x140 [ 157.505214][ T7338] ? create_ruleset+0x21/0x140 [ 157.505239][ T7338] create_ruleset+0x21/0x140 [ 157.505278][ T7338] landlock_merge_ruleset+0xbb/0x870 [ 157.505314][ T7338] ? prepare_creds+0x5ea/0x940 [ 157.505350][ T7338] __do_sys_landlock_restrict_self+0x2a1/0x910 [ 157.505392][ T7338] do_syscall_64+0xcd/0xf80 [ 157.505438][ T7338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.505467][ T7338] RIP: 0033:0x7fe15938f7c9 [ 157.505490][ T7338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.505517][ T7338] RSP: 002b:00007fe15a1e0038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 157.505544][ T7338] RAX: ffffffffffffffda RBX: 00007fe1595e5fa0 RCX: 00007fe15938f7c9 [ 157.505562][ T7338] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 157.505578][ T7338] RBP: 00007fe159413f91 R08: 0000000000000000 R09: 0000000000000000 [ 157.505595][ T7338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.505612][ T7338] R13: 00007fe1595e6038 R14: 00007fe1595e5fa0 R15: 00007ffe29201118 [ 157.505649][ T7338] [ 159.415732][ T7378] FAULT_INJECTION: forcing a failure. [ 159.415732][ T7378] name failslab, interval 1, probability 0, space 0, times 0 [ 159.520474][ T7378] CPU: 1 UID: 0 PID: 7378 Comm: syz.2.286 Tainted: G L syzkaller #0 PREEMPT(full) [ 159.520519][ T7378] Tainted: [L]=SOFTLOCKUP [ 159.520529][ T7378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 159.520543][ T7378] Call Trace: [ 159.520552][ T7378] [ 159.520563][ T7378] dump_stack_lvl+0x16c/0x1f0 [ 159.520608][ T7378] should_fail_ex+0x512/0x640 [ 159.520638][ T7378] ? __kmalloc_noprof+0xca/0x910 [ 159.520672][ T7378] should_failslab+0xc2/0x120 [ 159.520733][ T7378] __kmalloc_noprof+0xeb/0x910 [ 159.520763][ T7378] ? ops_init+0x77/0x5f0 [ 159.520804][ T7378] ? ops_init+0x77/0x5f0 [ 159.520835][ T7378] ops_init+0x77/0x5f0 [ 159.520873][ T7378] setup_net+0x11d/0x3a0 [ 159.520914][ T7378] ? __pfx_setup_net+0x10/0x10 [ 159.520956][ T7378] ? lockdep_init_map_type+0x5c/0x270 [ 159.521003][ T7378] ? mutex_init_lockep+0x110/0x150 [ 159.521041][ T7378] copy_net_ns+0x351/0x7c0 [ 159.521090][ T7378] create_new_namespaces+0x3ea/0xab0 [ 159.521149][ T7378] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 159.521208][ T7378] ksys_unshare+0x45b/0xa40 [ 159.521251][ T7378] ? __pfx_ksys_unshare+0x10/0x10 [ 159.521313][ T7378] ? xfd_validate_state+0x61/0x180 [ 159.521349][ T7378] __x64_sys_unshare+0x31/0x40 [ 159.521390][ T7378] do_syscall_64+0xcd/0xf80 [ 159.521426][ T7378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.521450][ T7378] RIP: 0033:0x7fe15938f7c9 [ 159.521470][ T7378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.521501][ T7378] RSP: 002b:00007fe15a1e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 159.521527][ T7378] RAX: ffffffffffffffda RBX: 00007fe1595e5fa0 RCX: 00007fe15938f7c9 [ 159.521545][ T7378] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 159.521560][ T7378] RBP: 00007fe159413f91 R08: 0000000000000000 R09: 0000000000000000 [ 159.521576][ T7378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.521590][ T7378] R13: 00007fe1595e6038 R14: 00007fe1595e5fa0 R15: 00007ffe29201118 [ 159.521626][ T7378] [ 159.762451][ T7385] zram0: detected capacity change from 0 to 8 [ 160.390057][ T7410] FAULT_INJECTION: forcing a failure. [ 160.390057][ T7410] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 160.404183][ T7410] CPU: 1 UID: 0 PID: 7410 Comm: syz.1.290 Tainted: G L syzkaller #0 PREEMPT(full) [ 160.404228][ T7410] Tainted: [L]=SOFTLOCKUP [ 160.404237][ T7410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 160.404253][ T7410] Call Trace: [ 160.404262][ T7410] [ 160.404272][ T7410] dump_stack_lvl+0x16c/0x1f0 [ 160.404318][ T7410] should_fail_ex+0x512/0x640 [ 160.404348][ T7410] _copy_from_user+0x2e/0xd0 [ 160.404380][ T7410] __sys_bpf+0x248/0x4980 [ 160.404402][ T7410] ? futex_private_hash_put+0x160/0x1b0 [ 160.404431][ T7410] ? __pfx___sys_bpf+0x10/0x10 [ 160.404454][ T7410] ? __pfx_futex_wait+0x10/0x10 [ 160.404499][ T7410] ? putname+0xf5/0x1a0 [ 160.404531][ T7410] ? do_futex+0x122/0x350 [ 160.404573][ T7410] ? __x64_sys_openat+0x174/0x210 [ 160.404600][ T7410] ? xfd_validate_state+0x61/0x180 [ 160.404625][ T7410] __x64_sys_bpf+0x78/0xc0 [ 160.404644][ T7410] ? lockdep_hardirqs_on+0x7c/0x110 [ 160.404677][ T7410] do_syscall_64+0xcd/0xf80 [ 160.404708][ T7410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.404731][ T7410] RIP: 0033:0x7f26b538f7c9 [ 160.404751][ T7410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.404773][ T7410] RSP: 002b:00007f26b6222038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 160.404805][ T7410] RAX: ffffffffffffffda RBX: 00007f26b55e6090 RCX: 00007f26b538f7c9 [ 160.404820][ T7410] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000008000000 [ 160.404835][ T7410] RBP: 00007f26b5413f91 R08: 0000000000000000 R09: 0000000000000000 [ 160.404850][ T7410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.404865][ T7410] R13: 00007f26b55e6128 R14: 00007f26b55e6090 R15: 00007fffc442f2c8 [ 160.404896][ T7410] [ 160.849314][ T7413] netlink: 'syz.1.291': attribute type 2 has an invalid length. [ 161.346933][ T7423] netlink: 350 bytes leftover after parsing attributes in process `syz.0.292'. [ 162.128096][ T7437] random: crng reseeded on system resumption [ 163.060338][ T7462] mkiss: ax0: crc mode is auto. [ 164.444992][ T7504] FAULT_INJECTION: forcing a failure. [ 164.444992][ T7504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.478694][ T7504] CPU: 1 UID: 0 PID: 7504 Comm: syz.0.309 Tainted: G L syzkaller #0 PREEMPT(full) [ 164.478737][ T7504] Tainted: [L]=SOFTLOCKUP [ 164.478746][ T7504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 164.478761][ T7504] Call Trace: [ 164.478769][ T7504] [ 164.478780][ T7504] dump_stack_lvl+0x16c/0x1f0 [ 164.478823][ T7504] should_fail_ex+0x512/0x640 [ 164.478857][ T7504] copy_fpstate_to_sigframe+0x827/0xad0 [ 164.478903][ T7504] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 164.478949][ T7504] ? collect_signal+0x263/0x540 [ 164.478974][ T7504] ? x86_task_fpu+0x5f/0x90 [ 164.479011][ T7504] get_sigframe+0x4a8/0x9c0 [ 164.479050][ T7504] ? __pfx_get_sigframe+0x10/0x10 [ 164.479085][ T7504] ? rcu_is_watching+0x12/0xc0 [ 164.479120][ T7504] ? _raw_spin_unlock_irq+0x23/0x50 [ 164.479153][ T7504] ? siginfo_layout+0x1d2/0x290 [ 164.479191][ T7504] x64_setup_rt_frame+0x129/0xcf0 [ 164.479229][ T7504] ? find_held_lock+0x2b/0x80 [ 164.479264][ T7504] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 164.479310][ T7504] ? kill_proc_info+0x9c/0x1b0 [ 164.479350][ T7504] arch_do_signal_or_restart+0x5c2/0x7a0 [ 164.479388][ T7504] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 164.479423][ T7504] ? kill_something_info+0x111/0x310 [ 164.479469][ T7504] ? __pfx___x64_sys_kill+0x10/0x10 [ 164.479516][ T7504] exit_to_user_mode_loop+0x8c/0x540 [ 164.479552][ T7504] do_syscall_64+0x4ee/0xf80 [ 164.479592][ T7504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.479618][ T7504] RIP: 0033:0x7f9aeab8f7c9 [ 164.479639][ T7504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.479663][ T7504] RSP: 002b:00007f9aeb9bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000003e [ 164.479687][ T7504] RAX: 0000000000000000 RBX: 00007f9aeade6090 RCX: 00007f9aeab8f7c9 [ 164.479704][ T7504] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 000000000000012c [ 164.479719][ T7504] RBP: 00007f9aeac13f91 R08: 0000000000000000 R09: 0000000000000000 [ 164.479735][ T7504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.479750][ T7504] R13: 00007f9aeade6128 R14: 00007f9aeade6090 R15: 00007fff84bffaf8 [ 164.479785][ T7504] [ 165.210636][ T7518] zswap: compressor not available [ 166.661423][ T7557] FAULT_INJECTION: forcing a failure. [ 166.661423][ T7557] name failslab, interval 1, probability 0, space 0, times 0 [ 166.712680][ T7557] CPU: 0 UID: 0 PID: 7557 Comm: syz.3.321 Tainted: G L syzkaller #0 PREEMPT(full) [ 166.712705][ T7557] Tainted: [L]=SOFTLOCKUP [ 166.712710][ T7557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 166.712718][ T7557] Call Trace: [ 166.712723][ T7557] [ 166.712729][ T7557] dump_stack_lvl+0x16c/0x1f0 [ 166.712753][ T7557] should_fail_ex+0x512/0x640 [ 166.712769][ T7557] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 166.712790][ T7557] should_failslab+0xc2/0x120 [ 166.712812][ T7557] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 166.712830][ T7557] ? mqueue_alloc_inode+0x25/0x50 [ 166.712855][ T7557] ? __pfx_mqueue_alloc_inode+0x10/0x10 [ 166.712875][ T7557] ? mqueue_alloc_inode+0x25/0x50 [ 166.712894][ T7557] mqueue_alloc_inode+0x25/0x50 [ 166.712914][ T7557] alloc_inode+0x64/0x240 [ 166.712931][ T7557] new_inode+0x22/0x1c0 [ 166.712948][ T7557] mqueue_get_inode+0x2e/0xdd0 [ 166.712971][ T7557] mqueue_create_attr+0x2b6/0x570 [ 166.712995][ T7557] vfs_mkobj+0x3db/0x620 [ 166.713011][ T7557] ? __pfx_mqueue_create_attr+0x10/0x10 [ 166.713027][ T7557] do_mq_open+0x7a1/0x9e0 [ 166.713050][ T7557] ? __pfx_do_mq_open+0x10/0x10 [ 166.713076][ T7557] __x64_sys_mq_open+0x155/0x1e0 [ 166.713089][ T7557] ? __pfx___x64_sys_mq_open+0x10/0x10 [ 166.713102][ T7557] ? fput+0x70/0xf0 [ 166.713124][ T7557] do_syscall_64+0xcd/0xf80 [ 166.713146][ T7557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.713161][ T7557] RIP: 0033:0x7f76f738f7c9 [ 166.713173][ T7557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.713186][ T7557] RSP: 002b:00007f76f82a4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 166.713200][ T7557] RAX: ffffffffffffffda RBX: 00007f76f75e5fa0 RCX: 00007f76f738f7c9 [ 166.713209][ T7557] RDX: 000000000000fffc RSI: 0000000000000061 RDI: 0000200000000180 [ 166.713218][ T7557] RBP: 00007f76f7413f91 R08: 0000000000000000 R09: 0000000000000000 [ 166.713226][ T7557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.713234][ T7557] R13: 00007f76f75e6038 R14: 00007f76f75e5fa0 R15: 00007ffd8d84bcb8 [ 166.713253][ T7557] [ 167.148653][ T7557] FAULT_INJECTION: forcing a failure. [ 167.148653][ T7557] name fail_futex, interval 1, probability 0, space 0, times 0 [ 167.306136][ T7557] CPU: 1 UID: 0 PID: 7557 Comm: syz.3.321 Tainted: G L syzkaller #0 PREEMPT(full) [ 167.306176][ T7557] Tainted: [L]=SOFTLOCKUP [ 167.306184][ T7557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 167.306198][ T7557] Call Trace: [ 167.306206][ T7557] [ 167.306214][ T7557] dump_stack_lvl+0x16c/0x1f0 [ 167.306253][ T7557] should_fail_ex+0x512/0x640 [ 167.306285][ T7557] get_futex_key+0x1d0/0x15f0 [ 167.306319][ T7557] ? __pfx_get_futex_key+0x10/0x10 [ 167.306356][ T7557] futex_wake+0xea/0x530 [ 167.306393][ T7557] ? __pfx_futex_wake+0x10/0x10 [ 167.306421][ T7557] ? __fget_files+0x20e/0x3c0 [ 167.306461][ T7557] ? fput+0x70/0xf0 [ 167.306486][ T7557] do_futex+0x1e3/0x350 [ 167.306503][ T7557] ? __pfx_do_futex+0x10/0x10 [ 167.306524][ T7557] __x64_sys_futex+0x1e0/0x4c0 [ 167.306542][ T7557] ? __pfx___x64_sys_futex+0x10/0x10 [ 167.306558][ T7557] ? xfd_validate_state+0x61/0x180 [ 167.306582][ T7557] do_syscall_64+0xcd/0xf80 [ 167.306620][ T7557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.306646][ T7557] RIP: 0033:0x7f76f738f7c9 [ 167.306665][ T7557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.306679][ T7557] RSP: 002b:00007f76f82a40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 167.306692][ T7557] RAX: ffffffffffffffda RBX: 00007f76f75e5fa8 RCX: 00007f76f738f7c9 [ 167.306702][ T7557] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f76f75e5fac [ 167.306710][ T7557] RBP: 00007f76f75e5fa0 R08: 00007f76f82a5000 R09: 0000000000000000 [ 167.306719][ T7557] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 167.306727][ T7557] R13: 00007f76f75e6038 R14: 00007ffd8d84bbd0 R15: 00007ffd8d84bcb8 [ 167.306746][ T7557] [ 167.795224][ T7591] futex_wake_op: syz.1.326 tries to shift op by -2048; fix this program [ 167.803898][ T7591] futex_wake_op: syz.1.326 tries to shift op by -2048; fix this program [ 168.815502][ T7605] netlink: 'syz.1.331': attribute type 89 has an invalid length. [ 168.848413][ T7605] ovs_: entered promiscuous mode [ 169.373139][ T7614] FAULT_INJECTION: forcing a failure. [ 169.373139][ T7614] name failslab, interval 1, probability 0, space 0, times 0 [ 169.388448][ T7614] CPU: 1 UID: 0 PID: 7614 Comm: syz.1.333 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.388475][ T7614] Tainted: [L]=SOFTLOCKUP [ 169.388480][ T7614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 169.388489][ T7614] Call Trace: [ 169.388494][ T7614] [ 169.388499][ T7614] dump_stack_lvl+0x16c/0x1f0 [ 169.388526][ T7614] should_fail_ex+0x512/0x640 [ 169.388543][ T7614] ? kmem_cache_alloc_noprof+0x62/0x770 [ 169.388563][ T7614] should_failslab+0xc2/0x120 [ 169.388585][ T7614] kmem_cache_alloc_noprof+0x83/0x770 [ 169.388602][ T7614] ? net_alloc_generic+0x1e/0x70 [ 169.388620][ T7614] ? copy_net_ns+0xe8/0x7c0 [ 169.388643][ T7614] ? copy_net_ns+0xe8/0x7c0 [ 169.388662][ T7614] copy_net_ns+0xe8/0x7c0 [ 169.388681][ T7614] ? copy_cgroup_ns+0x71/0x980 [ 169.388697][ T7614] create_new_namespaces+0x3ea/0xab0 [ 169.388722][ T7614] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 169.388743][ T7614] ksys_unshare+0x45b/0xa40 [ 169.388765][ T7614] ? __pfx_ksys_unshare+0x10/0x10 [ 169.388795][ T7614] __x64_sys_unshare+0x31/0x40 [ 169.388816][ T7614] do_syscall_64+0xcd/0xf80 [ 169.388838][ T7614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.388852][ T7614] RIP: 0033:0x7f26b538f7c9 [ 169.388865][ T7614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.388879][ T7614] RSP: 002b:00007f26b6222038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 169.388892][ T7614] RAX: ffffffffffffffda RBX: 00007f26b55e6090 RCX: 00007f26b538f7c9 [ 169.388902][ T7614] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 169.388910][ T7614] RBP: 00007f26b5413f91 R08: 0000000000000000 R09: 0000000000000000 [ 169.388919][ T7614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.388927][ T7614] R13: 00007f26b55e6128 R14: 00007f26b55e6090 R15: 00007fffc442f2c8 [ 169.388946][ T7614] [ 172.028322][ T7657] kexec: Could not allocate control_code_buffer [ 172.950268][ T30] audit: type=1800 audit(1767336340.111:4): pid=7683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.342" name="lu_gp_id" dev="configfs" ino=17932 res=0 errno=0 [ 174.002255][ T7690] HSR: entered promiscuous mode [ 174.205432][ T30] audit: type=1800 audit(1767336341.381:5): pid=7693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.348" name="dbroot" dev="configfs" ino=19035 res=0 errno=0 [ 174.362777][ T7703] netlink: 338 bytes leftover after parsing attributes in process `syz.0.350'. [ 174.415044][ T7703] netlink: 338 bytes leftover after parsing attributes in process `syz.0.350'. [ 175.040688][ T7730] ubi0: attaching mtd0 [ 175.049142][ T7730] ubi0: scanning is finished [ 175.053818][ T7730] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 175.362106][ T7730] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 176.707171][ T7770] netlink: 'syz.1.366': attribute type 12 has an invalid length. [ 176.725111][ T7770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.366'. [ 178.062351][ T7789] FAULT_INJECTION: forcing a failure. [ 178.062351][ T7789] name failslab, interval 1, probability 0, space 0, times 0 [ 178.086637][ T7786] netlink: 21 bytes leftover after parsing attributes in process `syz.0.371'. [ 178.090129][ T7789] CPU: 0 UID: 0 PID: 7789 Comm: syz.1.370 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.090174][ T7789] Tainted: [L]=SOFTLOCKUP [ 178.090184][ T7789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 178.090200][ T7789] Call Trace: [ 178.090209][ T7789] [ 178.090219][ T7789] dump_stack_lvl+0x16c/0x1f0 [ 178.090264][ T7789] should_fail_ex+0x512/0x640 [ 178.090294][ T7789] ? fs_reclaim_acquire+0xae/0x150 [ 178.090340][ T7789] should_failslab+0xc2/0x120 [ 178.090381][ T7789] __kmalloc_noprof+0xeb/0x910 [ 178.090411][ T7789] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 178.090455][ T7789] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 178.090491][ T7789] tomoyo_realpath_from_path+0xc2/0x6e0 [ 178.090537][ T7789] tomoyo_check_open_permission+0x2ab/0x3c0 [ 178.090571][ T7789] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 178.090638][ T7789] ? do_raw_spin_lock+0x12c/0x2b0 [ 178.090680][ T7789] tomoyo_file_open+0x6b/0x90 [ 178.090731][ T7789] security_file_open+0x84/0x1e0 [ 178.090767][ T7789] do_dentry_open+0x597/0x1590 [ 178.090811][ T7789] ? security_inode_permission+0xbf/0x260 [ 178.090848][ T7789] vfs_open+0x82/0x3f0 [ 178.090882][ T7789] path_openat+0x2078/0x3140 [ 178.090932][ T7789] ? __pfx_path_openat+0x10/0x10 [ 178.090984][ T7789] do_filp_open+0x20b/0x470 [ 178.091025][ T7789] ? __pfx_do_filp_open+0x10/0x10 [ 178.091090][ T7789] ? alloc_fd+0x471/0x7d0 [ 178.091138][ T7789] do_sys_openat2+0x121/0x290 [ 178.091168][ T7789] ? __pfx_do_sys_openat2+0x10/0x10 [ 178.091212][ T7789] __x64_sys_openat+0x174/0x210 [ 178.091254][ T7789] ? __pfx___x64_sys_openat+0x10/0x10 [ 178.091301][ T7789] do_syscall_64+0xcd/0xf80 [ 178.091344][ T7789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.091371][ T7789] RIP: 0033:0x7f26b538f7c9 [ 178.091393][ T7789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.091418][ T7789] RSP: 002b:00007f26b6243038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 178.091443][ T7789] RAX: ffffffffffffffda RBX: 00007f26b55e5fa0 RCX: 00007f26b538f7c9 [ 178.091461][ T7789] RDX: 0000000000000102 RSI: 0000200000000800 RDI: ffffffffffffff9c [ 178.091479][ T7789] RBP: 00007f26b5413f91 R08: 0000000000000000 R09: 0000000000000000 [ 178.091496][ T7789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.091512][ T7789] R13: 00007f26b55e6038 R14: 00007f26b55e5fa0 R15: 00007fffc442f2c8 [ 178.091550][ T7789] [ 178.091561][ T7789] ERROR: Out of memory at tomoyo_realpath_from_path. [ 178.500525][ T7802] netlink: 146 bytes leftover after parsing attributes in process `syz.2.373'. [ 181.124933][ T7849] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 181.588791][ T7849] ACPI: Can not change Invalid GPE/Fixed Event status [ 182.969996][ T7887] ubi31: attaching mtd0 [ 182.997366][ T7887] ubi31: scanning is finished [ 183.024672][ T7887] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 183.222494][ T7887] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 183.260546][ T7899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.397'. [ 183.961174][ T7917] netlink: 44 bytes leftover after parsing attributes in process `syz.0.402'. [ 183.964179][ T7916] futex_wake_op: syz.3.403 tries to shift op by -2048; fix this program [ 184.034717][ T7922] capability: warning: `syz.1.401' uses 32-bit capabilities (legacy support in use) [ 184.095388][ T7923] netlink: 'syz.2.404': attribute type 1 has an invalid length. [ 184.107287][ T7924] size and base must be multiples of 4 kiB [ 184.113140][ T7924] CPU: 1 UID: 0 PID: 7924 Comm: syz.3.403 Tainted: G L syzkaller #0 PREEMPT(full) [ 184.113183][ T7924] Tainted: [L]=SOFTLOCKUP [ 184.113193][ T7924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 184.113209][ T7924] Call Trace: [ 184.113218][ T7924] [ 184.113229][ T7924] dump_stack_lvl+0x16c/0x1f0 [ 184.113270][ T7924] mtrr_add+0xdf/0x110 [ 184.113308][ T7924] mtrr_ioctl+0x7ef/0xcf0 [ 184.113329][ T7924] ? __pfx_mtrr_ioctl+0x10/0x10 [ 184.113358][ T7924] ? find_held_lock+0x2b/0x80 [ 184.113399][ T7924] ? __fget_files+0x20e/0x3c0 [ 184.113434][ T7924] ? __pfx_mtrr_ioctl+0x10/0x10 [ 184.113453][ T7924] proc_reg_unlocked_ioctl+0x229/0x320 [ 184.113472][ T7924] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 184.113491][ T7924] __x64_sys_ioctl+0x18e/0x210 [ 184.113510][ T7924] do_syscall_64+0xcd/0xf80 [ 184.113533][ T7924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.113548][ T7924] RIP: 0033:0x7f76f738f7c9 [ 184.113560][ T7924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.113574][ T7924] RSP: 002b:00007f76f8283038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 184.113589][ T7924] RAX: ffffffffffffffda RBX: 00007f76f75e6090 RCX: 00007f76f738f7c9 [ 184.113598][ T7924] RDX: 0000000000000000 RSI: 0000000040104d01 RDI: 0000000000000000 [ 184.113607][ T7924] RBP: 00007f76f7413f91 R08: 0000000000000000 R09: 0000000000000000 [ 184.113615][ T7924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.113623][ T7924] R13: 00007f76f75e6128 R14: 00007f76f75e6090 R15: 00007ffd8d84bcb8 [ 184.113642][ T7924] [ 184.509063][ T7930] Invalid ELF header magic: != ELF [ 185.161469][ T7938] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 185.369181][ T7944] Unable to find swap-space signature [ 185.460388][ T7946] netlink: 346 bytes leftover after parsing attributes in process `syz.2.408'. [ 186.792298][ T7970] FAULT_INJECTION: forcing a failure. [ 186.792298][ T7970] name failslab, interval 1, probability 0, space 0, times 0 [ 186.834646][ T7970] CPU: 1 UID: 0 PID: 7970 Comm: syz.3.415 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.834693][ T7970] Tainted: [L]=SOFTLOCKUP [ 186.834703][ T7970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 186.834719][ T7970] Call Trace: [ 186.834729][ T7970] [ 186.834740][ T7970] dump_stack_lvl+0x16c/0x1f0 [ 186.834786][ T7970] should_fail_ex+0x512/0x640 [ 186.834817][ T7970] ? kmem_cache_alloc_noprof+0x62/0x770 [ 186.834856][ T7970] should_failslab+0xc2/0x120 [ 186.834911][ T7970] kmem_cache_alloc_noprof+0x83/0x770 [ 186.834942][ T7970] ? kmem_cache_alloc_noprof+0x1e1/0x770 [ 186.834972][ T7970] ? anon_vma_fork+0x200/0x620 [ 186.835008][ T7970] ? anon_vma_fork+0x200/0x620 [ 186.835032][ T7970] anon_vma_fork+0x200/0x620 [ 186.835065][ T7970] dup_mmap+0x12d3/0x20e0 [ 186.835121][ T7970] ? __pfx_dup_mmap+0x10/0x10 [ 186.835188][ T7970] copy_process+0x3b9f/0x7430 [ 186.835229][ T7970] ? __pfx___futex_wait+0x10/0x10 [ 186.835265][ T7970] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 186.835317][ T7970] ? __pfx_copy_process+0x10/0x10 [ 186.835357][ T7970] ? find_held_lock+0x2b/0x80 [ 186.835398][ T7970] ? futex_private_hash_put+0x160/0x1b0 [ 186.835435][ T7970] kernel_clone+0xfc/0x910 [ 186.835479][ T7970] ? __pfx_kernel_clone+0x10/0x10 [ 186.835541][ T7970] __do_sys_clone+0xce/0x120 [ 186.835580][ T7970] ? __pfx___do_sys_clone+0x10/0x10 [ 186.835639][ T7970] ? xfd_validate_state+0x61/0x180 [ 186.835663][ T7970] ? __pfx_do_writev+0x10/0x10 [ 186.835710][ T7970] do_syscall_64+0xcd/0xf80 [ 186.835754][ T7970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.835782][ T7970] RIP: 0033:0x7f76f738f7c9 [ 186.835804][ T7970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.835830][ T7970] RSP: 002b:00007f76f82a3fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 186.835857][ T7970] RAX: ffffffffffffffda RBX: 00007f76f75e5fa0 RCX: 00007f76f738f7c9 [ 186.835877][ T7970] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000600 [ 186.835900][ T7970] RBP: 00007f76f7413f91 R08: 0000000000000000 R09: 0000000000000000 [ 186.835917][ T7970] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 186.835934][ T7970] R13: 00007f76f75e6038 R14: 00007f76f75e5fa0 R15: 00007ffd8d84bcb8 [ 186.835973][ T7970] [ 187.444439][ T7976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.416'. [ 190.533036][ T8054] netlink: 'syz.0.430': attribute type 11 has an invalid length. [ 190.763852][ T8061] size and base must be multiples of 4 kiB [ 190.780796][ T8061] CPU: 1 UID: 0 PID: 8061 Comm: syz.3.432 Tainted: G L syzkaller #0 PREEMPT(full) [ 190.780822][ T8061] Tainted: [L]=SOFTLOCKUP [ 190.780827][ T8061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 190.780835][ T8061] Call Trace: [ 190.780841][ T8061] [ 190.780847][ T8061] dump_stack_lvl+0x16c/0x1f0 [ 190.780874][ T8061] mtrr_del+0xd1/0x110 [ 190.780898][ T8061] mtrr_ioctl+0x922/0xcf0 [ 190.780911][ T8061] ? __pfx_mtrr_ioctl+0x10/0x10 [ 190.780928][ T8061] ? find_held_lock+0x2b/0x80 [ 190.780952][ T8061] ? __fget_files+0x20e/0x3c0 [ 190.780974][ T8061] ? __pfx_mtrr_ioctl+0x10/0x10 [ 190.780987][ T8061] proc_reg_unlocked_ioctl+0x229/0x320 [ 190.781005][ T8061] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 190.781024][ T8061] __x64_sys_ioctl+0x18e/0x210 [ 190.781043][ T8061] do_syscall_64+0xcd/0xf80 [ 190.781065][ T8061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.781080][ T8061] RIP: 0033:0x7f76f738f7c9 [ 190.781093][ T8061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.781106][ T8061] RSP: 002b:00007f76f82a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 190.781120][ T8061] RAX: ffffffffffffffda RBX: 00007f76f75e5fa0 RCX: 00007f76f738f7c9 [ 190.781130][ T8061] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000005 [ 190.781142][ T8061] RBP: 00007f76f7413f91 R08: 0000000000000000 R09: 0000000000000000 [ 190.781151][ T8061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.781159][ T8061] R13: 00007f76f75e6038 R14: 00007f76f75e5fa0 R15: 00007ffd8d84bcb8 [ 190.781178][ T8061] [ 191.283778][ T8070] FAULT_INJECTION: forcing a failure. [ 191.283778][ T8070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.331206][ T8070] CPU: 1 UID: 0 PID: 8070 Comm: syz.1.433 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.331235][ T8070] Tainted: [L]=SOFTLOCKUP [ 191.331240][ T8070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 191.331248][ T8070] Call Trace: [ 191.331253][ T8070] [ 191.331259][ T8070] dump_stack_lvl+0x16c/0x1f0 [ 191.331285][ T8070] should_fail_ex+0x512/0x640 [ 191.331304][ T8070] _copy_from_user+0x2e/0xd0 [ 191.331321][ T8070] do_sock_getsockopt+0x3a1/0x410 [ 191.331344][ T8070] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 191.331364][ T8070] ? __fget_files+0x204/0x3c0 [ 191.331393][ T8070] __sys_getsockopt+0x123/0x1b0 [ 191.331414][ T8070] __x64_sys_getsockopt+0xbd/0x160 [ 191.331429][ T8070] ? do_syscall_64+0x91/0xf80 [ 191.331455][ T8070] ? lockdep_hardirqs_on+0x7c/0x110 [ 191.331476][ T8070] do_syscall_64+0xcd/0xf80 [ 191.331497][ T8070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.331511][ T8070] RIP: 0033:0x7f26b538f7c9 [ 191.331524][ T8070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.331537][ T8070] RSP: 002b:00007f26b6243038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 191.331551][ T8070] RAX: ffffffffffffffda RBX: 00007f26b55e5fa0 RCX: 00007f26b538f7c9 [ 191.331560][ T8070] RDX: 0000000000000002 RSI: 000000000000006b RDI: 0000000000000004 [ 191.331568][ T8070] RBP: 00007f26b6243090 R08: 0000000000000000 R09: 0000000000000000 [ 191.331576][ T8070] R10: 9999999999999999 R11: 0000000000000246 R12: 0000000000000001 [ 191.331585][ T8070] R13: 00007f26b55e6038 R14: 00007f26b55e5fa0 R15: 00007fffc442f2c8 [ 191.331603][ T8070] [ 191.752674][ T8073] random: crng reseeded on system resumption [ 192.369030][ T8088] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.439: iget: checksum invalid [ 192.427332][ T8088] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 192.559041][ T8088] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.439: iget: checksum invalid [ 192.676344][ T8088] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 192.788342][ T8088] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.439: iget: checksum invalid [ 192.851629][ T8088] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 192.910434][ T8088] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.439: iget: checksum invalid [ 193.042492][ T8088] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 193.098255][ T8088] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 193.117044][ T8088] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 194.084702][ T8150] zswap: compressor not available [ 196.358716][ T8202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.460'. [ 196.772357][ T8217] nvme_fabrics: unknown parameter or missing value '@' in ctrl creation request [ 196.815499][ T8218] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 196.822358][ T8218] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 196.874044][ T8219] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 196.880544][ T8219] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 198.961950][ T8269] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3383192691 (54131083056 ns) > initial count (1048592 ns). Using initial count to start timer. [ 199.597967][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.620024][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.311476][ T8287] FAULT_INJECTION: forcing a failure. [ 200.311476][ T8287] name fail_futex, interval 1, probability 0, space 0, times 0 [ 200.325902][ T8287] CPU: 1 UID: 0 PID: 8287 Comm: syz.0.481 Tainted: G L syzkaller #0 PREEMPT(full) [ 200.325944][ T8287] Tainted: [L]=SOFTLOCKUP [ 200.325953][ T8287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 200.325967][ T8287] Call Trace: [ 200.325975][ T8287] [ 200.325985][ T8287] dump_stack_lvl+0x16c/0x1f0 [ 200.326024][ T8287] should_fail_ex+0x512/0x640 [ 200.326044][ T8287] get_futex_key+0x1d0/0x15f0 [ 200.326061][ T8287] ? destroy_inode+0x12c/0x1b0 [ 200.326080][ T8287] ? evict+0x599/0xad0 [ 200.326093][ T8287] ? __pfx_get_futex_key+0x10/0x10 [ 200.326106][ T8287] ? __sock_create+0x27b/0x8a0 [ 200.326130][ T8287] ? __x64_sys_socket+0x72/0xb0 [ 200.326143][ T8287] ? do_syscall_64+0xcd/0xf80 [ 200.326163][ T8287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.326183][ T8287] futex_wait_setup+0x9d/0x570 [ 200.326208][ T8287] __futex_wait+0x193/0x2f0 [ 200.326228][ T8287] ? __pfx___futex_wait+0x10/0x10 [ 200.326250][ T8287] ? __pfx_futex_wake_mark+0x10/0x10 [ 200.326271][ T8287] ? futex_hash+0x2c5/0x380 [ 200.326288][ T8287] ? futex_private_hash_put+0x160/0x1b0 [ 200.326305][ T8287] futex_wait+0xe8/0x380 [ 200.326332][ T8287] ? __pfx_futex_wait+0x10/0x10 [ 200.326363][ T8287] do_futex+0x229/0x350 [ 200.326380][ T8287] ? __pfx_do_futex+0x10/0x10 [ 200.326395][ T8287] ? iput+0x35/0x40 [ 200.326408][ T8287] ? __sock_release+0x20b/0x270 [ 200.326431][ T8287] __x64_sys_futex+0x1e0/0x4c0 [ 200.326448][ T8287] ? __sys_socket+0xac/0x260 [ 200.326462][ T8287] ? __pfx___x64_sys_futex+0x10/0x10 [ 200.326478][ T8287] ? xfd_validate_state+0x61/0x180 [ 200.326491][ T8287] ? __pfx_do_writev+0x10/0x10 [ 200.326515][ T8287] do_syscall_64+0xcd/0xf80 [ 200.326536][ T8287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.326550][ T8287] RIP: 0033:0x7f9aeab8f7c9 [ 200.326563][ T8287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.326577][ T8287] RSP: 002b:00007f9aeb9e00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 200.326591][ T8287] RAX: ffffffffffffffda RBX: 00007f9aeade5fa8 RCX: 00007f9aeab8f7c9 [ 200.326600][ T8287] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9aeade5fa8 [ 200.326609][ T8287] RBP: 00007f9aeade5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 200.326617][ T8287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.326625][ T8287] R13: 00007f9aeade6038 R14: 00007fff84bffa10 R15: 00007fff84bffaf8 [ 200.326645][ T8287] [ 200.666288][ T8289] FAULT_INJECTION: forcing a failure. [ 200.666288][ T8289] name failslab, interval 1, probability 0, space 0, times 0 [ 200.679841][ T8289] CPU: 1 UID: 0 PID: 8289 Comm: syz.0.481 Tainted: G L syzkaller #0 PREEMPT(full) [ 200.679867][ T8289] Tainted: [L]=SOFTLOCKUP [ 200.679872][ T8289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 200.679881][ T8289] Call Trace: [ 200.679888][ T8289] [ 200.679894][ T8289] dump_stack_lvl+0x16c/0x1f0 [ 200.679922][ T8289] should_fail_ex+0x512/0x640 [ 200.679939][ T8289] ? __kmalloc_noprof+0xca/0x910 [ 200.679958][ T8289] should_failslab+0xc2/0x120 [ 200.679980][ T8289] __kmalloc_noprof+0xeb/0x910 [ 200.679997][ T8289] ? udp_init_sock+0x24e/0x450 [ 200.680019][ T8289] ? udp_init_sock+0x24e/0x450 [ 200.680035][ T8289] udp_init_sock+0x24e/0x450 [ 200.680051][ T8289] ? __pfx_udp_init_sock+0x10/0x10 [ 200.680071][ T8289] inet_create+0x939/0x1040 [ 200.680089][ T8289] ? inet_create+0x93/0x1040 [ 200.680108][ T8289] __sock_create+0x339/0x8a0 [ 200.680135][ T8289] udp_sock_create4+0xa6/0x450 [ 200.680156][ T8289] ? __pfx_udp_sock_create4+0x10/0x10 [ 200.680180][ T8289] ? lockdep_hardirqs_on+0x7c/0x110 [ 200.680201][ T8289] ? crng_make_state+0x48e/0x6c0 [ 200.680218][ T8289] rxrpc_open_socket+0x4f5/0x6b0 [ 200.680234][ T8289] ? __pfx_rxrpc_open_socket+0x10/0x10 [ 200.680260][ T8289] ? rcu_is_watching+0x12/0xc0 [ 200.680283][ T8289] rxrpc_lookup_local+0xa01/0x1220 [ 200.680302][ T8289] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 200.680329][ T8289] ? __local_bh_enable_ip+0xa4/0x120 [ 200.680353][ T8289] rxrpc_sendmsg+0x37e/0x680 [ 200.680375][ T8289] sock_write_iter+0x566/0x610 [ 200.680398][ T8289] ? __pfx_sock_write_iter+0x10/0x10 [ 200.680427][ T8289] ? bpf_lsm_file_permission+0x9/0x10 [ 200.680443][ T8289] ? security_file_permission+0x71/0x210 [ 200.680462][ T8289] ? rw_verify_area+0xcf/0x6c0 [ 200.680482][ T8289] vfs_write+0x7d3/0x11d0 [ 200.680502][ T8289] ? __pfx_sock_write_iter+0x10/0x10 [ 200.680526][ T8289] ? __pfx_vfs_write+0x10/0x10 [ 200.680544][ T8289] ? find_held_lock+0x2b/0x80 [ 200.680575][ T8289] ksys_write+0x1f8/0x250 [ 200.680594][ T8289] ? __pfx_ksys_write+0x10/0x10 [ 200.680620][ T8289] do_syscall_64+0xcd/0xf80 [ 200.680642][ T8289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.680658][ T8289] RIP: 0033:0x7f9aeab8f7c9 [ 200.680671][ T8289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.680685][ T8289] RSP: 002b:00007f9aeb9bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 200.680699][ T8289] RAX: ffffffffffffffda RBX: 00007f9aeade6090 RCX: 00007f9aeab8f7c9 [ 200.680709][ T8289] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000002 [ 200.680718][ T8289] RBP: 00007f9aeac13f91 R08: 0000000000000000 R09: 0000000000000000 [ 200.680726][ T8289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.680735][ T8289] R13: 00007f9aeade6128 R14: 00007f9aeade6090 R15: 00007fff84bffaf8 [ 200.680755][ T8289] [ 202.816605][ T8329] ptrace attach of "./syz-executor exec"[5829] was attempted by "8RESn=|)4[xSW{ܬ@I.+JfN`s,X55kט>ek\x5c4$1ݯuNUݤDSik'#aw \x0a@3L٦^\x5c_i{q=c@l|~zo\x22[Bnv.;vixS̨bph4(мNd-J0%hik4T;&BttO^!g9`n`}ʻ|1I]\x07\x07\x0dl>uŲ}6 aHPvhkij$(Lz\x0a\x0d&?MGXSB[}Rϓ\x07 Go9-:SezUW:}B\x5cm_w\x1bp66^8ǡp+Yf`'#xzk܅p]2mHH~._MN}.MXGZQэ:eaQQMڈsp2$X6HAgEa{J1S#;nFeA$Yj-X6u)TE@@XAAwj]KQ$\x0c\x0c)ˇżޣdgt̎eim\x0b32.DF~cJِ{&J}+:\x0du\x09N4~\x0a7.hi#}h\x22mޟlCrԔP\x1b'&a|&p,-T܇ҕYZ8m.\x5cnz[:\x0dI:)ØͦOh,b [ 203.195763][ T8320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.487'. [ 204.408462][ T30] audit: type=1800 audit(1767336371.581:6): pid=8393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.505" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 205.885016][ T8423] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.512: iget: checksum invalid [ 206.020789][ T8423] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 206.076522][ T8423] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.512: iget: checksum invalid [ 206.134140][ T8422] netlink: 28 bytes leftover after parsing attributes in process `syz.2.512'. [ 206.138547][ T8423] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 206.204978][ T8423] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.512: iget: checksum invalid [ 206.228356][ T8423] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 206.283301][ T8423] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.512: iget: checksum invalid [ 206.316516][ T8423] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 206.344644][ T8423] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 206.375054][ T8423] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 206.426810][ T8432] netlink: 16 bytes leftover after parsing attributes in process `syz.2.512'. [ 206.532997][ T8422] bond0: (slave bond_slave_1): Releasing backup interface [ 207.548474][ T8440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.517'. [ 207.592158][ T8440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.517'. [ 211.089723][ T8514] FAULT_INJECTION: forcing a failure. [ 211.089723][ T8514] name failslab, interval 1, probability 0, space 0, times 0 [ 211.110372][ T8514] CPU: 0 UID: 0 PID: 8514 Comm: syz.1.527 Tainted: G L syzkaller #0 PREEMPT(full) [ 211.110411][ T8514] Tainted: [L]=SOFTLOCKUP [ 211.110419][ T8514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 211.110433][ T8514] Call Trace: [ 211.110442][ T8514] [ 211.110452][ T8514] dump_stack_lvl+0x16c/0x1f0 [ 211.110496][ T8514] should_fail_ex+0x512/0x640 [ 211.110527][ T8514] ? fs_reclaim_acquire+0xae/0x150 [ 211.110571][ T8514] should_failslab+0xc2/0x120 [ 211.110611][ T8514] __kmalloc_cache_noprof+0x80/0x800 [ 211.110643][ T8514] ? usb_control_msg+0xbc/0x4a0 [ 211.110683][ T8514] ? __pfx___mutex_lock+0x10/0x10 [ 211.110727][ T8514] ? usb_control_msg+0xbc/0x4a0 [ 211.110766][ T8514] usb_control_msg+0xbc/0x4a0 [ 211.110808][ T8514] ? __pfx_usb_control_msg+0x10/0x10 [ 211.110846][ T8514] ? schedule_timeout+0x160/0x290 [ 211.110887][ T8514] hub_ext_port_status+0x14e/0x670 [ 211.110934][ T8514] hub_activate+0x6e5/0x1d90 [ 211.110969][ T8514] ? __pfx_hub_activate+0x10/0x10 [ 211.110989][ T8514] ? find_held_lock+0x2b/0x80 [ 211.111019][ T8514] ? usbdev_ioctl+0x10f0/0x4070 [ 211.111062][ T8514] hub_resume+0xa8/0x400 [ 211.111087][ T8514] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 211.111136][ T8514] ? __pfx_hub_resume+0x10/0x10 [ 211.111161][ T8514] ? __pfx_hcd_bus_resume+0x10/0x10 [ 211.111204][ T8514] usb_resume_interface.constprop.0.isra.0+0x2c5/0x400 [ 211.111244][ T8514] usb_resume_both+0x237/0x9b0 [ 211.111276][ T8514] ? __pfx_usb_resume_both+0x10/0x10 [ 211.111307][ T8514] ? __pfx_usb_runtime_resume+0x10/0x10 [ 211.111343][ T8514] ? __pfx_usb_runtime_resume+0x10/0x10 [ 211.111379][ T8514] __rpm_callback+0xc8/0x610 [ 211.111413][ T8514] ? __pfx_usb_runtime_resume+0x10/0x10 [ 211.111448][ T8514] rpm_callback+0x1b7/0x200 [ 211.111474][ T8514] ? __pfx_usb_runtime_resume+0x10/0x10 [ 211.111510][ T8514] rpm_resume+0xceb/0x12f0 [ 211.111550][ T8514] ? __pfx_rpm_resume+0x10/0x10 [ 211.111578][ T8514] ? do_raw_spin_lock+0x12c/0x2b0 [ 211.111610][ T8514] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 211.111654][ T8514] __pm_runtime_resume+0xb6/0x170 [ 211.111687][ T8514] usb_autoresume_device+0x23/0xe0 [ 211.111725][ T8514] usbdev_open+0x228/0x8b0 [ 211.111761][ T8514] ? kobject_get_unless_zero+0x156/0x1e0 [ 211.111802][ T8514] ? __pfx_usbdev_open+0x10/0x10 [ 211.111838][ T8514] ? chrdev_open+0x10b/0x6a0 [ 211.111881][ T8514] ? __pfx_usbdev_open+0x10/0x10 [ 211.111916][ T8514] chrdev_open+0x234/0x6a0 [ 211.111953][ T8514] ? __pfx_apparmor_file_open+0x10/0x10 [ 211.111981][ T8514] ? __pfx_chrdev_open+0x10/0x10 [ 211.112022][ T8514] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 211.112070][ T8514] do_dentry_open+0x748/0x1590 [ 211.112115][ T8514] ? __pfx_chrdev_open+0x10/0x10 [ 211.112162][ T8514] vfs_open+0x82/0x3f0 [ 211.112195][ T8514] path_openat+0x2078/0x3140 [ 211.112245][ T8514] ? __pfx_path_openat+0x10/0x10 [ 211.112297][ T8514] do_filp_open+0x20b/0x470 [ 211.112337][ T8514] ? __pfx_do_filp_open+0x10/0x10 [ 211.112404][ T8514] ? alloc_fd+0x471/0x7d0 [ 211.112453][ T8514] do_sys_openat2+0x121/0x290 [ 211.112483][ T8514] ? __pfx_do_sys_openat2+0x10/0x10 [ 211.112528][ T8514] __x64_sys_openat+0x174/0x210 [ 211.112558][ T8514] ? __pfx___x64_sys_openat+0x10/0x10 [ 211.112614][ T8514] do_syscall_64+0xcd/0xf80 [ 211.112656][ T8514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.112683][ T8514] RIP: 0033:0x7f26b538f7c9 [ 211.112710][ T8514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.112734][ T8514] RSP: 002b:00007f26b6222038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 211.112758][ T8514] RAX: ffffffffffffffda RBX: 00007f26b55e6090 RCX: 00007f26b538f7c9 [ 211.112776][ T8514] RDX: 000000000000a901 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 211.112793][ T8514] RBP: 00007f26b5413f91 R08: 0000000000000000 R09: 0000000000000000 [ 211.112809][ T8514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.112824][ T8514] R13: 00007f26b55e6128 R14: 00007f26b55e6090 R15: 00007fffc442f2c8 [ 211.112861][ T8514] [ 211.112946][ T8514] hub 36-0:1.0: hub_ext_port_status failed (err = -12) [ 213.435193][ T8556] random: crng reseeded on system resumption [ 213.745564][ T8556] hub 1-0:1.0: USB hub found [ 213.764193][ T8556] hub 1-0:1.0: 1 port detected [ 215.145499][ T8596] random: crng reseeded on system resumption [ 216.572099][ T8638] netlink: 28 bytes leftover after parsing attributes in process `syz.0.561'. [ 216.604717][ T8638] bridge_slave_1: left allmulticast mode [ 216.610411][ T8638] bridge_slave_1: left promiscuous mode [ 216.638700][ T8638] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.731311][ T8638] bridge_slave_0: left allmulticast mode [ 216.744607][ T8638] bridge_slave_0: left promiscuous mode [ 216.750414][ T8638] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.862037][ T8671] dlm: non-version read from control device 1 [ 219.097096][ T8702] netlink: 28 bytes leftover after parsing attributes in process `syz.2.573'. [ 219.740427][ T8718] netlink: 28 bytes leftover after parsing attributes in process `syz.3.576'. [ 219.965238][ T8718] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.111691][ T8718] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.246404][ T8718] bond0 (unregistering): Released all slaves [ 222.562698][ T8766] NFSD: Failed to start, no listeners configured. [ 223.954874][ T5843] Bluetooth: hci3: unexpected subevent 0x01 length: 3 < 18 [ 224.167638][ T8827] netlink: zone id is out of range [ 224.203343][ T8827] netlink: del zone limit has 4 unknown bytes [ 224.213952][ T8829] FAULT_INJECTION: forcing a failure. [ 224.213952][ T8829] name fail_futex, interval 1, probability 0, space 0, times 0 [ 224.251909][ T8823] netlink: set zone limit has 8 unknown bytes [ 224.275677][ T8829] CPU: 0 UID: 0 PID: 8829 Comm: syz.1.602 Tainted: G L syzkaller #0 PREEMPT(full) [ 224.275721][ T8829] Tainted: [L]=SOFTLOCKUP [ 224.275730][ T8829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 224.275745][ T8829] Call Trace: [ 224.275754][ T8829] [ 224.275764][ T8829] dump_stack_lvl+0x16c/0x1f0 [ 224.275807][ T8829] should_fail_ex+0x512/0x640 [ 224.275841][ T8829] get_futex_key+0x1d0/0x15f0 [ 224.275875][ T8829] ? __pfx_get_futex_key+0x10/0x10 [ 224.275901][ T8829] ? lock_acquire+0x179/0x330 [ 224.275931][ T8829] ? __lock_acquire+0x436/0x2890 [ 224.275959][ T8829] futex_wait_setup+0x9d/0x570 [ 224.276005][ T8829] __futex_wait+0x193/0x2f0 [ 224.276042][ T8829] ? __pfx___futex_wait+0x10/0x10 [ 224.276082][ T8829] ? __pfx_futex_wake_mark+0x10/0x10 [ 224.276119][ T8829] ? futex_hash+0x2c5/0x380 [ 224.276150][ T8829] ? futex_private_hash_put+0x160/0x1b0 [ 224.276182][ T8829] futex_wait+0xe8/0x380 [ 224.276216][ T8829] ? __pfx_futex_wait+0x10/0x10 [ 224.276249][ T8829] ? mark_held_locks+0x49/0x80 [ 224.276286][ T8829] do_futex+0x229/0x350 [ 224.276317][ T8829] ? __pfx_do_futex+0x10/0x10 [ 224.276347][ T8829] ? __might_fault+0xe3/0x190 [ 224.276396][ T8829] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 224.276440][ T8829] __x64_sys_futex+0x1e0/0x4c0 [ 224.276479][ T8829] ? __pfx___x64_sys_futex+0x10/0x10 [ 224.276528][ T8829] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 224.276584][ T8829] do_syscall_64+0xcd/0xf80 [ 224.276623][ T8829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.276646][ T8829] RIP: 0033:0x7f26b538f7c9 [ 224.276666][ T8829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.276688][ T8829] RSP: 002b:00007f26b62010e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 224.276714][ T8829] RAX: ffffffffffffffda RBX: 00007f26b55e6188 RCX: 00007f26b538f7c9 [ 224.276731][ T8829] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f26b55e6188 [ 224.276747][ T8829] RBP: 00007f26b55e6180 R08: 0000000000000000 R09: 0000000000000000 [ 224.276761][ T8829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.276776][ T8829] R13: 00007f26b55e6218 R14: 00007fffc442f1e0 R15: 00007fffc442f2c8 [ 224.276812][ T8829] [ 225.092056][ T8842] netlink: 330 bytes leftover after parsing attributes in process `syz.2.604'. [ 226.602576][ T8874] FAULT_INJECTION: forcing a failure. [ 226.602576][ T8874] name fail_futex, interval 1, probability 0, space 0, times 0 [ 226.615947][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 226.623410][ T8826] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 226.668918][ T8874] CPU: 0 UID: 0 PID: 8874 Comm: syz.0.611 Tainted: G L syzkaller #0 PREEMPT(full) [ 226.668962][ T8874] Tainted: [L]=SOFTLOCKUP [ 226.668971][ T8874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 226.668986][ T8874] Call Trace: [ 226.668994][ T8874] [ 226.669004][ T8874] dump_stack_lvl+0x16c/0x1f0 [ 226.669048][ T8874] should_fail_ex+0x512/0x640 [ 226.669082][ T8874] get_futex_key+0x1d0/0x15f0 [ 226.669114][ T8874] ? __lock_acquire+0x436/0x2890 [ 226.669138][ T8874] ? __pfx_get_futex_key+0x10/0x10 [ 226.669178][ T8874] futex_wait_setup+0x9d/0x570 [ 226.669224][ T8874] __futex_wait+0x193/0x2f0 [ 226.669268][ T8874] ? __pfx___futex_wait+0x10/0x10 [ 226.669310][ T8874] ? __pfx_futex_wake_mark+0x10/0x10 [ 226.669350][ T8874] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 226.669380][ T8874] ? __hrtimer_setup+0x176/0x280 [ 226.669415][ T8874] ? ktime_add_safe+0x60/0x70 [ 226.669451][ T8874] futex_wait+0xe8/0x380 [ 226.669485][ T8874] ? __pfx_futex_wait+0x10/0x10 [ 226.669518][ T8874] ? __lock_acquire+0x436/0x2890 [ 226.669546][ T8874] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 226.669591][ T8874] do_futex+0x229/0x350 [ 226.669622][ T8874] ? __pfx_do_futex+0x10/0x10 [ 226.669649][ T8874] ? rcu_is_watching+0x12/0xc0 [ 226.669683][ T8874] ? ktime_get+0x200/0x310 [ 226.669707][ T8874] ? lockdep_hardirqs_on+0x7c/0x110 [ 226.669744][ T8874] ? read_tsc+0x9/0x20 [ 226.669782][ T8874] __x64_sys_futex+0x1e0/0x4c0 [ 226.669817][ T8874] ? __pfx___x64_sys_futex+0x10/0x10 [ 226.669848][ T8874] ? xfd_validate_state+0x61/0x180 [ 226.669888][ T8874] do_syscall_64+0xcd/0xf80 [ 226.669929][ T8874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.669956][ T8874] RIP: 0033:0x7f9aeab8f7c9 [ 226.669979][ T8874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.670003][ T8874] RSP: 002b:00007fff84bffc58 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 226.670028][ T8874] RAX: ffffffffffffffda RBX: 0000000000037508 RCX: 00007f9aeab8f7c9 [ 226.670045][ T8874] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9aeade609c [ 226.670064][ T8874] RBP: 0000000000000032 R08: 00007f9aeb9e1000 R09: 0000000784bfff4f [ 226.670081][ T8874] R10: 00007fff84bffd50 R11: 0000000000000246 R12: 00007f9aeade609c [ 226.670097][ T8874] R13: 00007fff84bffd50 R14: 000000000003753a R15: 00007fff84bffd70 [ 226.670131][ T8874] [ 227.075900][ T8826] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 227.083370][ T8826] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 227.096847][ T8826] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 227.104724][ T8826] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 228.201482][ T30] audit: type=1804 audit(1767336395.351:7): pid=8904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.616" name="/newroot/134/file0" dev="tmpfs" ino=720 res=1 errno=0 [ 228.254591][ T30] audit: type=1804 audit(1767336395.401:8): pid=8900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.616" name="/newroot/134/file0" dev="tmpfs" ino=720 res=1 errno=0 [ 228.558880][ T8912] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.619: iget: checksum invalid [ 228.571223][ T8912] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 228.597234][ T8912] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.619: iget: checksum invalid [ 228.617512][ T8912] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 228.635462][ T8912] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.619: iget: checksum invalid [ 228.657537][ T8912] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 228.669730][ T8912] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.619: iget: checksum invalid [ 228.682264][ T8912] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 228.693058][ T8912] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 228.705070][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout [ 228.714682][ T8912] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 229.097345][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 229.174840][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout [ 229.241103][ T8925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.622'. [ 229.297724][ T8925] netlink: 'syz.1.622': attribute type 2 has an invalid length. [ 229.308550][ T8925] netlink: 'syz.1.622': attribute type 3 has an invalid length. [ 229.317775][ T8925] netlink: 20232 bytes leftover after parsing attributes in process `syz.1.622'. [ 229.829530][ T8942] KVM: debugfs: duplicate directory 8942-3 [ 230.885313][ T8972] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 231.262434][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout [ 231.405255][ T8992] ubi0: attaching mtd0 [ 231.430445][ T8992] ubi0: scanning is finished [ 231.450381][ T8992] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 231.681478][ T8992] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 231.986590][ T9005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.642'. [ 231.996242][ T9005] netlink: 13 bytes leftover after parsing attributes in process `syz.2.642'. [ 233.016179][ T9019] netlink: 28 bytes leftover after parsing attributes in process `syz.0.648'. [ 233.063375][ T9019] ipvlan0: entered promiscuous mode [ 233.073997][ T9019] ipvlan0: entered allmulticast mode [ 233.088452][ T9019] veth0_vlan: entered allmulticast mode [ 233.383211][ T9042] hub 1-0:1.0: USB hub found [ 233.433397][ T9042] hub 1-0:1.0: 1 port detected [ 233.470446][ T9050] FAULT_INJECTION: forcing a failure. [ 233.470446][ T9050] name failslab, interval 1, probability 0, space 0, times 0 [ 233.537285][ T9050] CPU: 1 UID: 0 PID: 9050 Comm: syz.0.651 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.537329][ T9050] Tainted: [L]=SOFTLOCKUP [ 233.537339][ T9050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 233.537353][ T9050] Call Trace: [ 233.537362][ T9050] [ 233.537372][ T9050] dump_stack_lvl+0x16c/0x1f0 [ 233.537414][ T9050] should_fail_ex+0x512/0x640 [ 233.537443][ T9050] ? kmem_cache_alloc_noprof+0x62/0x770 [ 233.537477][ T9050] should_failslab+0xc2/0x120 [ 233.537512][ T9050] kmem_cache_alloc_noprof+0x83/0x770 [ 233.537536][ T9050] ? getname_flags.part.0+0x4c/0x550 [ 233.537570][ T9050] ? getname_flags.part.0+0x4c/0x550 [ 233.537598][ T9050] getname_flags.part.0+0x4c/0x550 [ 233.537631][ T9050] getname_flags+0x93/0xf0 [ 233.537665][ T9050] do_sys_openat2+0xb9/0x290 [ 233.537695][ T9050] ? __pfx_do_sys_openat2+0x10/0x10 [ 233.537735][ T9050] __x64_sys_openat+0x174/0x210 [ 233.537765][ T9050] ? __pfx___x64_sys_openat+0x10/0x10 [ 233.537808][ T9050] do_syscall_64+0xcd/0xf80 [ 233.537844][ T9050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.537869][ T9050] RIP: 0033:0x7f9aeab8f7c9 [ 233.537892][ T9050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.537916][ T9050] RSP: 002b:00007f9aeb9e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 233.537942][ T9050] RAX: ffffffffffffffda RBX: 00007f9aeade5fa0 RCX: 00007f9aeab8f7c9 [ 233.537960][ T9050] RDX: 0000000000002000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 233.537978][ T9050] RBP: 00007f9aeac13f91 R08: 0000000000000000 R09: 0000000000000000 [ 233.537994][ T9050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.538009][ T9050] R13: 00007f9aeade6038 R14: 00007f9aeade5fa0 R15: 00007fff84bffaf8 [ 233.538045][ T9050] [ 233.982547][ T9057] syz.0.653(9057): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 235.241299][ T9102] FAULT_INJECTION: forcing a failure. [ 235.241299][ T9102] name failslab, interval 1, probability 0, space 0, times 0 [ 235.263563][ T9102] CPU: 1 UID: 0 PID: 9102 Comm: syz.3.664 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.263606][ T9102] Tainted: [L]=SOFTLOCKUP [ 235.263616][ T9102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 235.263632][ T9102] Call Trace: [ 235.263641][ T9102] [ 235.263652][ T9102] dump_stack_lvl+0x16c/0x1f0 [ 235.263697][ T9102] should_fail_ex+0x512/0x640 [ 235.263727][ T9102] ? kmem_cache_alloc_noprof+0x62/0x770 [ 235.263767][ T9102] should_failslab+0xc2/0x120 [ 235.263808][ T9102] kmem_cache_alloc_noprof+0x83/0x770 [ 235.263839][ T9102] ? do_sys_openat2+0x121/0x290 [ 235.263868][ T9102] ? __x64_sys_openat+0x174/0x210 [ 235.263897][ T9102] ? fuse_request_alloc+0x22/0x200 [ 235.263932][ T9102] ? fuse_request_alloc+0x22/0x200 [ 235.263958][ T9102] fuse_request_alloc+0x22/0x200 [ 235.263986][ T9102] fuse_get_req+0x748/0xff0 [ 235.264024][ T9102] ? __pfx_fuse_get_req+0x10/0x10 [ 235.264071][ T9102] fuse_simple_background+0x464/0x5f0 [ 235.264098][ T9102] ? kasan_save_track+0x14/0x30 [ 235.264136][ T9102] cuse_channel_open+0x561/0x7f0 [ 235.264174][ T9102] ? __pfx_cuse_channel_open+0x10/0x10 [ 235.264215][ T9102] misc_open+0x26d/0x450 [ 235.264247][ T9102] ? __pfx_misc_open+0x10/0x10 [ 235.264286][ T9102] chrdev_open+0x234/0x6a0 [ 235.264328][ T9102] ? __pfx_apparmor_file_open+0x10/0x10 [ 235.264357][ T9102] ? __pfx_chrdev_open+0x10/0x10 [ 235.264400][ T9102] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 235.264453][ T9102] do_dentry_open+0x748/0x1590 [ 235.264487][ T9102] ? __pfx_chrdev_open+0x10/0x10 [ 235.264531][ T9102] vfs_open+0x82/0x3f0 [ 235.264564][ T9102] path_openat+0x2078/0x3140 [ 235.264611][ T9102] ? __pfx_path_openat+0x10/0x10 [ 235.264664][ T9102] do_filp_open+0x20b/0x470 [ 235.264703][ T9102] ? __pfx_do_filp_open+0x10/0x10 [ 235.264769][ T9102] ? alloc_fd+0x471/0x7d0 [ 235.264817][ T9102] do_sys_openat2+0x121/0x290 [ 235.264848][ T9102] ? __pfx_do_sys_openat2+0x10/0x10 [ 235.264880][ T9102] ? find_held_lock+0x2b/0x80 [ 235.264926][ T9102] __x64_sys_openat+0x174/0x210 [ 235.264957][ T9102] ? __pfx___x64_sys_openat+0x10/0x10 [ 235.265004][ T9102] do_syscall_64+0xcd/0xf80 [ 235.265045][ T9102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.265071][ T9102] RIP: 0033:0x7f76f738f7c9 [ 235.265093][ T9102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.265120][ T9102] RSP: 002b:00007f76f8283038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 235.265147][ T9102] RAX: ffffffffffffffda RBX: 00007f76f75e6090 RCX: 00007f76f738f7c9 [ 235.265165][ T9102] RDX: 0000000000000000 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 235.265182][ T9102] RBP: 00007f76f7413f91 R08: 0000000000000000 R09: 0000000000000000 [ 235.265197][ T9102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.265212][ T9102] R13: 00007f76f75e6128 R14: 00007f76f75e6090 R15: 00007ffd8d84bcb8 [ 235.265248][ T9102] [ 235.706888][ T9097] netlink: 172 bytes leftover after parsing attributes in process `syz.3.664'. [ 236.129758][ T9121] bond0: invalid ARP target specified [ 241.524564][ T30] audit: type=1804 audit(1767336408.621:9): pid=9256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.698" name="/newroot/177/file0" dev="tmpfs" ino=926 res=1 errno=0 [ 241.686597][ T9266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.697'. [ 244.566728][ T5921] Process accounting resumed [ 245.824254][ T9363] FAULT_INJECTION: forcing a failure. [ 245.824254][ T9363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.846337][ T9363] CPU: 0 UID: 0 PID: 9363 Comm: syz.3.721 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.846385][ T9363] Tainted: [L]=SOFTLOCKUP [ 245.846395][ T9363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 245.846417][ T9363] Call Trace: [ 245.846426][ T9363] [ 245.846440][ T9363] dump_stack_lvl+0x16c/0x1f0 [ 245.846487][ T9363] should_fail_ex+0x512/0x640 [ 245.846523][ T9363] __fpu_restore_sig+0xfe/0x1370 [ 245.846567][ T9363] ? __lock_acquire+0x436/0x2890 [ 245.846594][ T9363] ? __pfx___fpu_restore_sig+0x10/0x10 [ 245.846654][ T9363] ? __might_fault+0xe3/0x190 [ 245.846684][ T9363] ? __might_fault+0x13b/0x190 [ 245.846721][ T9363] fpu__restore_sig+0x151/0x190 [ 245.846765][ T9363] restore_sigcontext+0x4c9/0x6a0 [ 245.846804][ T9363] ? __pfx_restore_sigcontext+0x10/0x10 [ 245.846869][ T9363] ? __pfx_restore_altstack+0x10/0x10 [ 245.846899][ T9363] ? _raw_spin_unlock_irq+0x23/0x50 [ 245.846937][ T9363] ? lockdep_hardirqs_on+0x7c/0x110 [ 245.846993][ T9363] __do_sys_rt_sigreturn+0x229/0x2c0 [ 245.847034][ T9363] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 245.847086][ T9363] do_syscall_64+0xcd/0xf80 [ 245.847130][ T9363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.847159][ T9363] RIP: 0033:0x7f76f738f7c7 [ 245.847188][ T9363] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 245.847213][ T9363] RSP: 002b:00007f76f82a40e8 EFLAGS: 00000246 [ 245.847236][ T9363] RAX: 00000000000000ca RBX: 00007f76f75e5fa8 RCX: 00007f76f738f7c9 [ 245.847255][ T9363] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f76f75e5fa8 [ 245.847272][ T9363] RBP: 00007f76f75e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 245.847289][ T9363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.847307][ T9363] R13: 00007f76f75e6038 R14: 00007ffd8d84bbd0 R15: 00007ffd8d84bcb8 [ 245.847349][ T9363] [ 246.556602][ T9376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.723'. [ 246.958693][ T9394] FAULT_INJECTION: forcing a failure. [ 246.958693][ T9394] name failslab, interval 1, probability 0, space 0, times 0 [ 246.972359][ T9394] CPU: 1 UID: 0 PID: 9394 Comm: syz.3.726 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.972407][ T9394] Tainted: [L]=SOFTLOCKUP [ 246.972418][ T9394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 246.972435][ T9394] Call Trace: [ 246.972445][ T9394] [ 246.972456][ T9394] dump_stack_lvl+0x16c/0x1f0 [ 246.972503][ T9394] should_fail_ex+0x512/0x640 [ 246.972534][ T9394] ? __kmalloc_noprof+0xca/0x910 [ 246.972569][ T9394] should_failslab+0xc2/0x120 [ 246.972612][ T9394] __kmalloc_noprof+0xeb/0x910 [ 246.972643][ T9394] ? drm_atomic_state_init+0x183/0x540 [ 246.972682][ T9394] ? drm_atomic_state_init+0x183/0x540 [ 246.972711][ T9394] drm_atomic_state_init+0x183/0x540 [ 246.972741][ T9394] ? kasan_save_track+0x14/0x30 [ 246.972783][ T9394] drm_atomic_state_alloc+0xd3/0x120 [ 246.972815][ T9394] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 246.972851][ T9394] ? rcu_is_watching+0x12/0xc0 [ 246.972896][ T9394] ? trace_contention_end+0xdd/0x110 [ 246.972927][ T9394] ? __mutex_lock+0x27b/0x1ca0 [ 246.972971][ T9394] ? __mutex_lock+0x27b/0x1ca0 [ 246.973014][ T9394] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 246.973050][ T9394] ? trace_contention_end+0xdd/0x110 [ 246.973113][ T9394] drm_client_modeset_commit_locked+0x14d/0x580 [ 246.973154][ T9394] drm_client_modeset_commit+0x4f/0x80 [ 246.973191][ T9394] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 246.973238][ T9394] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 246.973278][ T9394] drm_fbdev_client_restore+0x1b/0x30 [ 246.973323][ T9394] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 246.973367][ T9394] drm_client_dev_restore+0x200/0x2a0 [ 246.973410][ T9394] drm_release+0x2c6/0x360 [ 246.973445][ T9394] ? __pfx_drm_release+0x10/0x10 [ 246.973475][ T9394] __fput+0x402/0xb70 [ 246.973514][ T9394] task_work_run+0x150/0x240 [ 246.973546][ T9394] ? __pfx_task_work_run+0x10/0x10 [ 246.973574][ T9394] ? __do_sys_close_range+0x278/0x730 [ 246.973630][ T9394] exit_to_user_mode_loop+0xfb/0x540 [ 246.973670][ T9394] do_syscall_64+0x4ee/0xf80 [ 246.973714][ T9394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.973744][ T9394] RIP: 0033:0x7f76f738f7c9 [ 246.973768][ T9394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.973794][ T9394] RSP: 002b:00007f76f82a4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 246.973821][ T9394] RAX: 0000000000000000 RBX: 00007f76f75e5fa0 RCX: 00007f76f738f7c9 [ 246.973840][ T9394] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 246.973856][ T9394] RBP: 00007f76f7413f91 R08: 0000000000000000 R09: 0000000000000000 [ 246.973874][ T9394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.973900][ T9394] R13: 00007f76f75e6038 R14: 00007f76f75e5fa0 R15: 00007ffd8d84bcb8 [ 246.973942][ T9394] [ 247.584814][ T9391] bond0: invalid ARP target specified [ 249.432545][ T9421] FAULT_INJECTION: forcing a failure. [ 249.432545][ T9421] name failslab, interval 1, probability 0, space 0, times 0 [ 249.486260][ T9421] CPU: 1 UID: 0 PID: 9421 Comm: syz.3.732 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.486303][ T9421] Tainted: [L]=SOFTLOCKUP [ 249.486311][ T9421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 249.486327][ T9421] Call Trace: [ 249.486335][ T9421] [ 249.486345][ T9421] dump_stack_lvl+0x16c/0x1f0 [ 249.486386][ T9421] should_fail_ex+0x512/0x640 [ 249.486413][ T9421] ? __kmalloc_noprof+0xca/0x910 [ 249.486444][ T9421] should_failslab+0xc2/0x120 [ 249.486482][ T9421] __kmalloc_noprof+0xeb/0x910 [ 249.486509][ T9421] ? sk_prot_alloc+0x1a8/0x2a0 [ 249.486550][ T9421] ? sk_prot_alloc+0x1a8/0x2a0 [ 249.486588][ T9421] sk_prot_alloc+0x1a8/0x2a0 [ 249.486632][ T9421] sk_alloc+0x36/0xe30 [ 249.486663][ T9421] alg_create+0x9e/0x150 [ 249.486697][ T9421] __sock_create+0x339/0x8a0 [ 249.486742][ T9421] __sys_socket+0x14d/0x260 [ 249.486765][ T9421] ? __pfx___sys_socket+0x10/0x10 [ 249.486791][ T9421] ? __pfx___x64_sys_clock_gettime+0x10/0x10 [ 249.486832][ T9421] __x64_sys_socket+0x72/0xb0 [ 249.486854][ T9421] ? lockdep_hardirqs_on+0x7c/0x110 [ 249.486890][ T9421] do_syscall_64+0xcd/0xf80 [ 249.486928][ T9421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.486954][ T9421] RIP: 0033:0x7f76f738f7c9 [ 249.486974][ T9421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.486998][ T9421] RSP: 002b:00007f76f82a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 249.487022][ T9421] RAX: ffffffffffffffda RBX: 00007f76f75e5fa0 RCX: 00007f76f738f7c9 [ 249.487039][ T9421] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000026 [ 249.487054][ T9421] RBP: 00007f76f7413f91 R08: 0000000000000000 R09: 0000000000000000 [ 249.487069][ T9421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.487084][ T9421] R13: 00007f76f75e6038 R14: 00007f76f75e5fa0 R15: 00007ffd8d84bcb8 [ 249.487117][ T9421] [ 251.647798][ T9463] syz.3.739 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 253.727843][ T9542] NFSD: Failed to start, no listeners configured. [ 254.259657][ T9553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.747'. [ 254.616091][ T5843] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 254.616309][ T5841] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 254.624000][ T5150] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 254.644544][ T5837] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 254.661706][ T52] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 254.694571][ T5842] Bluetooth: hci11: Opcode 0x0c03 failed: -110 [ 254.694659][ T5833] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 254.701098][ T5835] Bluetooth: hci10: Opcode 0x0c03 failed: -110 [ 254.784683][ T9470] Bluetooth: hci15: Opcode 0x0c03 failed: -110 [ 254.791450][ T9475] Bluetooth: hci19: Opcode 0x0c03 failed: -110 [ 254.798790][ T9476] Bluetooth: hci16: Opcode 0x0c03 failed: -110 [ 254.861791][ T9484] Bluetooth: hci24: Opcode 0x0c03 failed: -110 [ 254.861852][ T5844] Bluetooth: hci20: Opcode 0x0c03 failed: -110 [ 254.868306][ T9477] Bluetooth: hci21: Opcode 0x0c03 failed: -110 [ 254.868593][ T9479] Bluetooth: hci14: Opcode 0x0c03 failed: -110 [ 254.876886][ T9482] Bluetooth: hci13: Opcode 0x0c03 failed: -110 [ 254.881620][ T9486] Bluetooth: hci25: Opcode 0x0c03 failed: -110 [ 254.887409][ T9478] Bluetooth: hci17: Opcode 0x0c03 failed: -110 [ 254.920240][ T9480] Bluetooth: hci22: Opcode 0x0c03 failed: -110 [ 254.924675][ T9481] Bluetooth: hci18: Opcode 0x0c03 failed: -110 [ 254.927450][ T9487] Bluetooth: hci26: Opcode 0x0c03 failed: -110 [ 254.933878][ T9483] Bluetooth: hci12: Opcode 0x0c03 failed: -110 [ 254.955273][ T9485] Bluetooth: hci28: Opcode 0x0c03 failed: -110 [ 254.962061][ T9488] Bluetooth: hci27: Opcode 0x0c03 failed: -110 [ 254.968985][ T9491] Bluetooth: hci29: Opcode 0x0c03 failed: -110 [ 255.014776][ T9497] Bluetooth: hci31: Opcode 0x0c03 failed: -110 [ 255.022463][ T9499] Bluetooth: hci43: Opcode 0x0c03 failed: -110 [ 255.027775][ T9489] Bluetooth: hci30: Opcode 0x0c03 failed: -110 [ 255.032725][ T9501] Bluetooth: hci33: Opcode 0x0c03 failed: -110 [ 255.035542][ T9492] Bluetooth: hci23: Opcode 0x0c03 failed: -110 [ 255.041753][ T9502] Bluetooth: hci41: Opcode 0x0c03 failed: -110 [ 255.048096][ T9498] Bluetooth: hci32: Opcode 0x0c03 failed: -110 [ 255.060910][ T9500] Bluetooth: hci42: Opcode 0x0c03 failed: -110 [ 255.095239][ T9508] Bluetooth: hci37: Opcode 0x0c03 failed: -110 [ 255.095839][ T9510] Bluetooth: hci40: Opcode 0x0c03 failed: -110 [ 255.108339][ T9504] Bluetooth: hci36: Opcode 0x0c03 failed: -110 [ 255.114797][ T9503] Bluetooth: hci47: Opcode 0x0c03 failed: -110 [ 255.124796][ T9506] Bluetooth: hci35: Opcode 0x0c03 failed: -110 [ 255.131472][ T9507] Bluetooth: hci46: Opcode 0x0c03 failed: -110 [ 255.175846][ T9509] Bluetooth: hci39: Opcode 0x0c03 failed: -110 [ 255.179113][ T9515] Bluetooth: hci44: Opcode 0x0c03 failed: -110 [ 255.184164][ T9516] Bluetooth: hci52: Opcode 0x0c03 failed: -110 [ 255.194531][ T9513] Bluetooth: hci38: Opcode 0x0c03 failed: -110 [ 255.195150][ T9517] Bluetooth: hci48: Opcode 0x0c03 failed: -110 [ 255.201544][ T9514] Bluetooth: hci34: Opcode 0x0c03 failed: -110 [ 255.214265][ T9511] Bluetooth: hci45: Opcode 0x0c03 failed: -110 [ 255.221490][ T9519] Bluetooth: hci50: Opcode 0x0c03 failed: -110 [ 255.229591][ T9520] Bluetooth: hci51: Opcode 0x0c03 failed: -110 [ 255.236071][ T9518] Bluetooth: hci49: Opcode 0x0c03 failed: -110 [ 255.258251][ T9531] Bluetooth: hci63: Opcode 0x0c03 failed: -110 [ 255.259825][ T9527] Bluetooth: hci60: Opcode 0x0c03 failed: -110 [ 255.269237][ T9533] Bluetooth: hci64: Opcode 0x0c03 failed: -110 [ 255.271096][ T9525] Bluetooth: hci58: Opcode 0x0c03 failed: -110 [ 255.285898][ T9524] Bluetooth: hci57: Opcode 0x0c03 failed: -110 [ 255.293476][ T9522] Bluetooth: hci54: Opcode 0x0c03 failed: -110 [ 255.304704][ T9523] Bluetooth: hci55: Opcode 0x0c03 failed: -110 [ 255.306013][ T9529] Bluetooth: hci62: Opcode 0x0c03 failed: -110 [ 255.312577][ T9526] Bluetooth: hci56: Opcode 0x0c03 failed: -110 [ 255.318252][ T9532] Bluetooth: hci66: Opcode 0x0c03 failed: -110 [ 255.324338][ T9530] Bluetooth: hci61: Opcode 0x0c03 failed: -110 [ 255.334625][ T9528] Bluetooth: hci59: Opcode 0x0c03 failed: -110 [ 255.340805][ T9535] Bluetooth: hci65: Opcode 0x0c03 failed: -110 [ 255.344366][ T9521] Bluetooth: hci53: Opcode 0x0c03 failed: -110 [ 255.350649][ T9534] Bluetooth: hci67: Opcode 0x0c03 failed: -110 [ 255.367388][ T9537] Bluetooth: hci68: Opcode 0x0c03 failed: -110 [ 256.347875][ T9583] zswap: compressor not available [ 257.581632][ T9598] kexec: Could not allocate control_code_buffer [ 258.953888][ T9632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.765'. [ 258.963903][ T9632] netlink: 'syz.3.765': attribute type 2 has an invalid length. [ 258.972068][ T9632] netlink: 'syz.3.765': attribute type 3 has an invalid length. [ 258.984549][ T9632] netlink: 20232 bytes leftover after parsing attributes in process `syz.3.765'. [ 260.642311][ T9537] Bluetooth: hci1: Malformed LE Event: 0x0b [ 260.699535][ T9656] netlink: 12 bytes leftover after parsing attributes in process `syz.3.769'. [ 260.937466][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.943773][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.086020][ T9664] vivid-003: ================= START STATUS ================= [ 261.108781][ T9664] vivid-003: Radio HW Seek Mode: Bounded [ 261.134642][ T9662] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 261.153960][ T9664] vivid-003: Radio Programmable HW Seek: false [ 261.170849][ T9664] vivid-003: RDS Rx I/O Mode: Block I/O [ 261.176689][ T9664] vivid-003: Generate RBDS Instead of RDS: false [ 261.204802][ T9664] vivid-003: RDS Reception: true [ 261.209815][ T9664] vivid-003: RDS Program Type: 0 inactive [ 261.216711][ T9662] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 261.247857][ T9664] vivid-003: RDS PS Name: [ 261.247896][ T9662] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 261.267269][ T9664] inactive [ 261.270442][ T9664] vivid-003: RDS Radio Text: inactive [ 261.295084][ T9664] vivid-003: RDS Traffic Announcement: false inactive [ 261.373494][ T9664] vivid-003: RDS Traffic Program: false inactive [ 261.391703][ T9664] vivid-003: RDS Music: false inactive [ 261.435816][ T9664] vivid-003: ================== END STATUS ================== [ 261.750024][ T9676] GUP no longer grows the stack in syz.1.771 (9676): 14000-18000 (4000) [ 261.784975][ T9676] CPU: 1 UID: 0 PID: 9676 Comm: syz.1.771 Tainted: G L syzkaller #0 PREEMPT(full) [ 261.785019][ T9676] Tainted: [L]=SOFTLOCKUP [ 261.785029][ T9676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 261.785044][ T9676] Call Trace: [ 261.785052][ T9676] [ 261.785061][ T9676] dump_stack_lvl+0x16c/0x1f0 [ 261.785106][ T9676] gup_vma_lookup+0x1d2/0x220 [ 261.785144][ T9676] __get_user_pages+0x241/0x3590 [ 261.785183][ T9676] ? find_held_lock+0x2b/0x80 [ 261.785203][ T9676] ? __pfx___get_user_pages+0x10/0x10 [ 261.785230][ T9676] get_user_pages_remote+0x243/0xab0 [ 261.785255][ T9676] ? __pfx_get_user_pages_remote+0x10/0x10 [ 261.785278][ T9676] ? __pfx___might_resched+0x10/0x10 [ 261.785298][ T9676] ? noop_dirty_folio+0x5e/0xb0 [ 261.785320][ T9676] __access_remote_vm+0x24d/0x850 [ 261.785344][ T9676] ? __pfx___access_remote_vm+0x10/0x10 [ 261.785369][ T9676] mem_rw+0x20e/0x640 [ 261.785393][ T9676] ? __pfx_mem_write+0x10/0x10 [ 261.785412][ T9676] vfs_write+0x2a0/0x11d0 [ 261.785433][ T9676] ? __pfx___mutex_lock+0x10/0x10 [ 261.785457][ T9676] ? __pfx_vfs_write+0x10/0x10 [ 261.785483][ T9676] ? __fget_files+0x20e/0x3c0 [ 261.785509][ T9676] ksys_write+0x12a/0x250 [ 261.785528][ T9676] ? __pfx_ksys_write+0x10/0x10 [ 261.785554][ T9676] do_syscall_64+0xcd/0xf80 [ 261.785577][ T9676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.785592][ T9676] RIP: 0033:0x7f26b538f7c9 [ 261.785605][ T9676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.785619][ T9676] RSP: 002b:00007f26b61e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 261.785634][ T9676] RAX: ffffffffffffffda RBX: 00007f26b55e6270 RCX: 00007f26b538f7c9 [ 261.785643][ T9676] RDX: 000000000000ffd8 RSI: 0000000000000000 RDI: 0000000000000003 [ 261.785652][ T9676] RBP: 00007f26b5413f91 R08: 0000000000000000 R09: 0000000000000000 [ 261.785661][ T9676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.785670][ T9676] R13: 00007f26b55e6308 R14: 00007f26b55e6270 R15: 00007fffc442f2c8 [ 261.785691][ T9676] [ 262.187911][ T9521] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 262.196735][ T9521] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 262.215749][ T9521] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 262.236385][ T9521] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 262.250478][ T9521] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 263.039514][ T9677] chnl_net:caif_netlink_parms(): no params data found [ 263.410827][ T9677] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.505004][ T9677] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.512452][ T9677] bridge_slave_0: entered allmulticast mode [ 263.595310][ T9677] bridge_slave_0: entered promiscuous mode [ 263.624080][ T9677] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.645618][ T9677] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.689332][ T9677] bridge_slave_1: entered allmulticast mode [ 263.708714][ T9677] bridge_slave_1: entered promiscuous mode [ 263.864745][ T9713] FAULT_INJECTION: forcing a failure. [ 263.864745][ T9713] name failslab, interval 1, probability 0, space 0, times 0 [ 263.932292][ T9677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.945511][ T9713] CPU: 1 UID: 0 PID: 9713 Comm: syz.1.777 Tainted: G L syzkaller #0 PREEMPT(full) [ 263.945556][ T9713] Tainted: [L]=SOFTLOCKUP [ 263.945566][ T9713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 263.945581][ T9713] Call Trace: [ 263.945591][ T9713] [ 263.945600][ T9713] dump_stack_lvl+0x16c/0x1f0 [ 263.945651][ T9713] should_fail_ex+0x512/0x640 [ 263.945680][ T9713] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 263.945717][ T9713] should_failslab+0xc2/0x120 [ 263.945754][ T9713] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 263.945784][ T9713] ? dquot_alloc_inode+0x51b/0xb90 [ 263.945813][ T9713] ? __dquot_initialize+0x299/0xd50 [ 263.945840][ T9713] ? __d_alloc+0x35/0xa80 [ 263.945868][ T9713] ? __d_alloc+0x35/0xa80 [ 263.945888][ T9713] __d_alloc+0x35/0xa80 [ 263.945915][ T9713] d_alloc_pseudo+0x1c/0xc0 [ 263.945945][ T9713] alloc_file_pseudo+0xcf/0x230 [ 263.945974][ T9713] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 263.946011][ T9713] __shmem_file_setup+0x1a8/0x350 [ 263.946053][ T9713] shmem_zero_setup+0x93/0x1b0 [ 263.946085][ T9713] __mmap_region+0x2271/0x2a00 [ 263.946117][ T9713] ? __lock_acquire+0x436/0x2890 [ 263.946141][ T9713] ? __pfx___mmap_region+0x10/0x10 [ 263.946168][ T9713] ? rcu_is_watching+0x12/0xc0 [ 263.946212][ T9713] ? lock_acquire+0x179/0x330 [ 263.946247][ T9713] ? finish_task_switch.isra.0+0x207/0xbd0 [ 263.946342][ T9713] ? rcu_is_watching+0x12/0xc0 [ 263.946384][ T9713] mmap_region+0x1ab/0x3f0 [ 263.946413][ T9713] ? __get_unmapped_area+0x267/0x3f0 [ 263.946453][ T9713] do_mmap+0xa3e/0x1210 [ 263.946494][ T9713] ? __pfx_do_mmap+0x10/0x10 [ 263.946531][ T9713] ? __pfx_down_write_killable+0x10/0x10 [ 263.946563][ T9713] vm_mmap_pgoff+0x29e/0x470 [ 263.946603][ T9713] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 263.946650][ T9713] ? __x64_sys_futex+0x1e0/0x4c0 [ 263.946679][ T9713] ? __x64_sys_futex+0x1e9/0x4c0 [ 263.946713][ T9713] ksys_mmap_pgoff+0x7d/0x5c0 [ 263.946748][ T9713] ? xfd_validate_state+0x61/0x180 [ 263.946772][ T9713] ? __pfx_ksys_write+0x10/0x10 [ 263.946811][ T9713] __x64_sys_mmap+0x125/0x190 [ 263.946840][ T9713] do_syscall_64+0xcd/0xf80 [ 263.946879][ T9713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.946904][ T9713] RIP: 0033:0x7f26b538f7c9 [ 263.946925][ T9713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.946949][ T9713] RSP: 002b:00007f26b6243038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 263.946973][ T9713] RAX: ffffffffffffffda RBX: 00007f26b55e5fa0 RCX: 00007f26b538f7c9 [ 263.946991][ T9713] RDX: 0000000000000003 RSI: 0000000002020011 RDI: 0000000000000000 [ 263.947006][ T9713] RBP: 00007f26b5413f91 R08: fffffffffffffffa R09: 0000000000008000 [ 263.947023][ T9713] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 263.947039][ T9713] R13: 00007f26b55e6038 R14: 00007f26b55e5fa0 R15: 00007fffc442f2c8 [ 263.947074][ T9713] [ 264.294665][ T9521] Bluetooth: hci4: command tx timeout [ 264.571207][ T9677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.697647][ T9677] team0: Port device team_slave_0 added [ 264.886864][ T9677] team0: Port device team_slave_1 added [ 265.189446][ T9724] zswap: compressor not available [ 265.209274][ T9677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.234532][ T9677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.334523][ T9677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.385574][ T9677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.415197][ T9677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.524788][ T9677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.643394][ T9724] zswap: compressor  not available [ 265.756642][ T9677] hsr_slave_0: entered promiscuous mode [ 265.780688][ T9677] hsr_slave_1: entered promiscuous mode [ 265.803193][ T9677] debugfs: 'hsr0' already exists in 'hsr' [ 265.817845][ T9677] Cannot create hsr debugfs directory [ 266.374848][ T9521] Bluetooth: hci4: command tx timeout [ 266.714631][ T9677] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 266.757692][ T9677] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 266.846963][ T9677] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 266.892597][ T9677] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 267.208781][ T9677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.256155][ T9677] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.299310][ T3787] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.306587][ T3787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.347256][ T3787] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.354549][ T3787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.985501][ T9677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.456499][ T9521] Bluetooth: hci4: command tx timeout [ 269.105787][ T9677] veth0_vlan: entered promiscuous mode [ 269.123513][ T9677] veth1_vlan: entered promiscuous mode [ 269.239984][ T9677] veth0_macvtap: entered promiscuous mode [ 269.250947][ T9677] veth1_macvtap: entered promiscuous mode [ 269.346063][ T9677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.391581][ T9677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.438557][ T6687] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.483499][ T6687] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.536197][ T6687] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.554630][ T6687] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.825307][ T327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.833170][ T327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.952257][ T6852] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.973042][ T6852] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.330128][ T9771] netlink: 326 bytes leftover after parsing attributes in process `syz.4.770'. [ 270.355782][ T9770] netlink: 326 bytes leftover after parsing attributes in process `syz.4.770'. [ 270.535766][ T9521] Bluetooth: hci4: command tx timeout [ 271.279170][ T9785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.786'. [ 271.635406][ T9787] EXT4-fs error (device sda1): xattr_find_entry:337: inode #1312: comm kworker/u8:5: corrupted xattr entries [ 271.665220][ T9787] ------------[ cut here ]------------ [ 271.671866][ T9787] WARNING: kernel/sched/core.c:10569 at sched_mm_cid_fork+0x81/0xcc0, CPU#1: kworker/u8:5/9787 [ 271.682341][ T9787] Modules linked in: [ 271.686560][ T9787] CPU: 1 UID: 0 PID: 9787 Comm: kworker/u8:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 271.697765][ T9787] Tainted: [L]=SOFTLOCKUP [ 271.702104][ T9787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 271.712772][ T9787] RIP: 0010:sched_mm_cid_fork+0x81/0xcc0 [ 271.719049][ T9787] Code: 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 2a 0a 00 00 81 bd d4 15 00 00 00 00 00 80 74 04 90 <0f> 0b 90 49 8d 84 24 c0 01 00 00 31 f6 4d 8d ac 24 80 01 00 00 48 [ 271.739180][ T9787] RSP: 0018:ffffc900199afd00 EFLAGS: 00010246 [ 271.745407][ T9787] RAX: dffffc0000000000 RBX: ffff888078e83d00 RCX: ffffffff823c0721 [ 271.754010][ T9787] RDX: 1ffff1100f1d0853 RSI: ffffffff823c072f RDI: ffff888078e84298 [ 271.762443][ T9787] RBP: ffff888078e83d00 R08: 0000000000000001 R09: 0000000000000000 [ 271.770485][ T9787] R10: 0000000000000000 R11: ffff888078e84830 R12: 0000000000000000 [ 271.778636][ T9787] R13: ffffed100b6f7f05 R14: 00000000ffffff8b R15: ffffffff8e622220 [ 271.786761][ T9787] FS: 0000000000000000(0000) GS:ffff8881249fc000(0000) knlGS:0000000000000000 [ 271.795786][ T9787] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 271.802391][ T9787] CR2: 0000000000bc8000 CR3: 00000000252f6000 CR4: 00000000003526f0 [ 271.811925][ T9787] Call Trace: [ 271.815894][ T9787] [ 271.818849][ T9787] bprm_execve+0x4ff/0x1620 [ 271.823389][ T9787] ? __pfx_bprm_execve+0x10/0x10 [ 271.828952][ T9787] ? copy_strings_kernel+0x152/0x190 [ 271.834280][ T9787] kernel_execve+0x2ef/0x3b0 [ 271.839059][ T9787] call_usermodehelper_exec_async+0x255/0x4c0 [ 271.845206][ T9787] ? lockdep_hardirqs_on+0x7c/0x110 [ 271.850831][ T9787] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 271.857879][ T9787] ret_from_fork+0x983/0xb10 [ 271.862497][ T9787] ? __pfx_ret_from_fork+0x10/0x10 [ 271.867776][ T9787] ? __switch_to+0x7af/0x10d0 [ 271.872483][ T9787] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 271.879154][ T9787] ret_from_fork_asm+0x1a/0x30 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 271.883960][ T9787] [ 271.887056][ T9787] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 271.894351][ T9787] CPU: 1 UID: 0 PID: 9787 Comm: kworker/u8:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 271.905409][ T9787] Tainted: [L]=SOFTLOCKUP [ 271.909751][ T9787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 271.919824][ T9787] Call Trace: [ 271.923114][ T9787] [ 271.926047][ T9787] dump_stack_lvl+0x3d/0x1f0 [ 271.930667][ T9787] vpanic+0x640/0x6f0 [ 271.934673][ T9787] ? sched_mm_cid_fork+0x81/0xcc0 [ 271.939726][ T9787] panic+0xca/0xd0 [ 271.943465][ T9787] ? __pfx_panic+0x10/0x10 [ 271.947996][ T9787] ? check_panic_on_warn+0x1f/0xb0 [ 271.953130][ T9787] check_panic_on_warn+0xab/0xb0 [ 271.958092][ T9787] __warn+0x108/0x3c0 [ 271.962095][ T9787] __report_bug+0x2a0/0x520 [ 271.966618][ T9787] ? sched_mm_cid_fork+0x81/0xcc0 [ 271.971668][ T9787] ? __pfx___report_bug+0x10/0x10 [ 271.976726][ T9787] ? kfree+0x2f8/0x6e0 [ 271.980810][ T9787] ? rw_verify_area+0xcf/0x6c0 [ 271.985594][ T9787] ? load_elf_binary+0x4cc/0x4fe0 [ 271.991341][ T9787] ? load_elf_binary+0x4cc/0x4fe0 [ 271.996382][ T9787] ? load_elf_binary+0x4d1/0x4fe0 [ 272.001635][ T9787] ? sched_mm_cid_fork+0x81/0xcc0 [ 272.006668][ T9787] report_bug+0xb2/0x220 [ 272.010927][ T9787] ? sched_mm_cid_fork+0x81/0xcc0 [ 272.015958][ T9787] handle_bug+0x127/0x260 [ 272.020300][ T9787] exc_invalid_op+0x17/0x50 [ 272.024820][ T9787] asm_exc_invalid_op+0x1a/0x20 [ 272.029682][ T9787] RIP: 0010:sched_mm_cid_fork+0x81/0xcc0 [ 272.035329][ T9787] Code: 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 2a 0a 00 00 81 bd d4 15 00 00 00 00 00 80 74 04 90 <0f> 0b 90 49 8d 84 24 c0 01 00 00 31 f6 4d 8d ac 24 80 01 00 00 48 [ 272.054946][ T9787] RSP: 0018:ffffc900199afd00 EFLAGS: 00010246 [ 272.061021][ T9787] RAX: dffffc0000000000 RBX: ffff888078e83d00 RCX: ffffffff823c0721 [ 272.068990][ T9787] RDX: 1ffff1100f1d0853 RSI: ffffffff823c072f RDI: ffff888078e84298 [ 272.076963][ T9787] RBP: ffff888078e83d00 R08: 0000000000000001 R09: 0000000000000000 [ 272.084933][ T9787] R10: 0000000000000000 R11: ffff888078e84830 R12: 0000000000000000 [ 272.092903][ T9787] R13: ffffed100b6f7f05 R14: 00000000ffffff8b R15: ffffffff8e622220 [ 272.100892][ T9787] ? bprm_execve+0x4e1/0x1620 [ 272.105647][ T9787] ? bprm_execve+0x4ef/0x1620 [ 272.110348][ T9787] bprm_execve+0x4ff/0x1620 [ 272.114870][ T9787] ? __pfx_bprm_execve+0x10/0x10 [ 272.119829][ T9787] ? copy_strings_kernel+0x152/0x190 [ 272.125225][ T9787] kernel_execve+0x2ef/0x3b0 [ 272.129838][ T9787] call_usermodehelper_exec_async+0x255/0x4c0 [ 272.135919][ T9787] ? lockdep_hardirqs_on+0x7c/0x110 [ 272.141133][ T9787] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 272.147736][ T9787] ret_from_fork+0x983/0xb10 [ 272.152338][ T9787] ? __pfx_ret_from_fork+0x10/0x10 [ 272.157458][ T9787] ? __switch_to+0x7af/0x10d0 [ 272.162230][ T9787] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 272.168830][ T9787] ret_from_fork_asm+0x1a/0x30 [ 272.173623][ T9787] [ 272.177018][ T9787] Kernel Offset: disabled [ 272.181338][ T9787] Rebooting in 86400 seconds..