last executing test programs: 6m16.101864725s ago: executing program 0 (id=292): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.6/usb7/version\x00', 0x20040, 0x0) read$auto(r0, &(0x7f0000000240)='$\x00', 0xb) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/fib_multipath_hash_fields\x00', 0x202, 0x0) mmap$auto(0x0, 0xfffffffffffffffa, 0xb17b, 0xeb2, 0x3fd, 0x80000001) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x2, 0x1) setsockopt$auto(r1, 0x0, 0xc6d, 0x0, 0x78) prctl$auto(0x9, 0x1, 0x0, 0x3, 0x0) setgroups$auto(0xe32, 0x0) 6m15.453568061s ago: executing program 0 (id=294): mmap$auto(0x100, 0x400009, 0xfffffffffffffff7, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) read$auto(r0, 0x0, 0x39b8) r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/uapsd_max_sp_len\x00', 0x82182, 0x0) fchmod$auto(r1, 0x2) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/sound/ctl-led/speaker/mode\x00', 0x2a001, 0x0) write$auto(r2, &(0x7f0000000040)='0\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) sysfs$auto(0x2, 0xffffffff, 0x0) add_key$auto_KEY_SPEC_USER_KEYRING(0x0, 0x0, 0x0, 0x1f, 0xfffffffffffffffc) 6m15.184322512s ago: executing program 0 (id=296): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = clone$auto(0x6dd, 0x9, &(0x7f00000000c0)=0x1ff, &(0x7f0000000280), 0x80) fcntl$auto(0x3, 0xffff, r0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/mountinfo\x00', 0x20200, 0x0) mount$auto(0x0, &(0x7f0000000300)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06\x00', &(0x7f0000000340)='nkt\xaae\xf9;\xbe\x0eG\xdd\fX\b_@\xd2\x9f(#\xcb%\xac\t\f@\xdch|\xccS\xd4>W\xa5\xa7f\"\xea\x963*n\xf5', 0x9, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x80000000) r1 = socket(0x10, 0x2, 0x4) io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x2000401, 0x8, 0xfe, 0x6fb3, 0x8a, 0x9, 0xffffffffffffffff, [0x100, 0x9, 0xfffffffe], {0x6, 0x7, 0x3, 0x4, 0xf, 0x5, 0x1, 0x1, 0xf08a2b3}, {0x0, 0xfc, 0x6, 0x0, 0x0, 0xf87, 0x9, 0x837, 0x2000005}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) get_robust_list$auto(0x1, 0xffffffffffffffff, 0x0) r4 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r4, 0x107, 0x1, 0x0, 0x8004) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x400c000) write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb) r6 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) preadv$auto(r6, &(0x7f0000000b40)={0x0, 0x4}, 0x3, 0x0, 0xe4) close_range$auto(0x2, 0x8, 0x0) r7 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r7, 0x5522, 0xf15) ioctl$auto(r7, 0x5523, r7) r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000001c0), r2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r4, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x88, r8, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_MODULE_FW_FLASH_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_MODULE_FW_FLASH_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7a7a}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @ETHTOOL_A_MODULE_FW_FLASH_FILE_NAME={0xe, 0x2, 'ns/cgroup\x00'}, @ETHTOOL_A_MODULE_FW_FLASH_FILE_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_MODULE_FW_FLASH_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4090}, 0x40c0010) acct$auto(&(0x7f0000000080)='/dev/bus/usb/015/001\x00') 6m14.71265689s ago: executing program 0 (id=297): socket(0xa, 0x801, 0x106) wait4$auto(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000140)={{0x0, 0x1000}, {0x3, 0x96}, 0x2, 0xffffffffffff5cd8, 0x504, 0x4, 0xc301, 0x8000000000000000, 0x7, 0x5, 0x6, 0x4, 0x0, 0x2, 0x3, 0x5}) r0 = socket(0x10, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000"], 0x1ac}}, 0x0) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) socket(0xa, 0x801, 0x106) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x1b) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) setrlimit$auto(0x7, &(0x7f0000000080)={0x0, 0x6}) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) setsockopt$auto(0x3, 0x1, 0xd, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000002, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c001b"], 0x1ac}}, 0x40000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0xa, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0xff, 0x6, 0x5, 0x9, 0x20003, 0x6, 0x4, 0xb4, 0x9, 0x3, 0x10000, 0x80, 0x7, 0x0, 0x8000007, 0x2000, 0x200, 0x0, 0x40084, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0xb8a0, 0x0, 0x2000000000, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x300]}, 0x1fe, 0x200c) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x6000000, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000002c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) 6m14.008295986s ago: executing program 0 (id=300): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) r0 = socket(0x2b, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_enter$auto(0xffffffffffffffff, 0x0, 0x7ffffffb, 0xffffffff, 0x0, 0x8000100000000000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) clone$auto(0x10000, 0x8000000000000001, &(0x7f0000000040)=0xfffffffc, &(0x7f00000000c0)=0xf11, 0xa) ioctl$auto_KVM_GET_MSRS(r1, 0x4068aea3, &(0x7f0000000080)={0xa4}) setsockopt$auto(r0, 0x6, 0x7, 0x0, 0xd) 6m13.334725673s ago: executing program 0 (id=304): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = open(0x0, 0x22240, 0x155) mmap$auto(0x0, 0x2020009, 0x2, 0x800000000000eb1, r0, 0x8000) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_score\x00', 0x16ba00, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptycc\x00', 0xa0840, 0x0) ioctl$auto_MEMGETINFO(0xffffffffffffffff, 0x80204d01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(r1, 0x80045438, r1) semctl$auto_IPC_INFO(0x4003, 0x3, 0x3, 0x7) mmap$auto(0x0, 0x2020009, 0x0, 0xeb1, 0xfffffffffffffffa, 0x7fff) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2da943, 0x0) r2 = socket(0x23, 0x80805, 0x0) listen$auto(r2, 0x4) r3 = ioctl$auto_TIOCGPTPEER2(0xffffffffffffffff, 0x5441, 0x0) r4 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x6, 0x0, 0xdffffffffffffffe, 0x18c}, 0x2}, 0x3, 0x9d) io_uring_setup$auto(0x800640, 0x0) writev$auto(r4, &(0x7f0000000100)={0x0, 0x6}, 0x8) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty45\x00', 0x100, 0x0) ioctl$auto_TIOCSTI2(r3, 0x5412, &(0x7f0000000140)="13") mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) close_range$auto(0x0, 0x5, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vivid.0/video4linux/video62/name\x00', 0x100, 0x0) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, 0x0, 0x410880, 0x0) 5m58.114915169s ago: executing program 32 (id=304): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = open(0x0, 0x22240, 0x155) mmap$auto(0x0, 0x2020009, 0x2, 0x800000000000eb1, r0, 0x8000) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_score\x00', 0x16ba00, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptycc\x00', 0xa0840, 0x0) ioctl$auto_MEMGETINFO(0xffffffffffffffff, 0x80204d01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(r1, 0x80045438, r1) semctl$auto_IPC_INFO(0x4003, 0x3, 0x3, 0x7) mmap$auto(0x0, 0x2020009, 0x0, 0xeb1, 0xfffffffffffffffa, 0x7fff) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2da943, 0x0) r2 = socket(0x23, 0x80805, 0x0) listen$auto(r2, 0x4) r3 = ioctl$auto_TIOCGPTPEER2(0xffffffffffffffff, 0x5441, 0x0) r4 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x6, 0x0, 0xdffffffffffffffe, 0x18c}, 0x2}, 0x3, 0x9d) io_uring_setup$auto(0x800640, 0x0) writev$auto(r4, &(0x7f0000000100)={0x0, 0x6}, 0x8) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty45\x00', 0x100, 0x0) ioctl$auto_TIOCSTI2(r3, 0x5412, &(0x7f0000000140)="13") mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) close_range$auto(0x0, 0x5, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vivid.0/video4linux/video62/name\x00', 0x100, 0x0) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, 0x0, 0x410880, 0x0) 2m26.780546453s ago: executing program 2 (id=1062): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nbd3\x00', 0x0, 0x0) socket(0x2b, 0x0, 0x87) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x2, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = socket(0x10, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/nbd6/queue/iosched/writes_starved\x00', 0xa001, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) socketpair$auto(0x1e, 0x4, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xc048aeca, 0x0) r2 = pidfd_open$auto(0xffffffffffffffff, 0x101) name_to_handle_at$auto(r2, &(0x7f0000000000)='\']\x00', &(0x7f0000000080)={0x13, 0xb, "d591f805a17d37d0fe43a9771fc307378895ec"}, &(0x7f00000001c0)="bc76688df48da890ceb18bc4c1684feeac9fa1ad47c9e904e6999254890363d1ad20a5c319496c058f2937c56e730838312c948c7ade6780124b3569934e6f6fcd2ee4fc56632f3eddde0b1394ef5195fbe7f4f245997341caa959fe25d6dd814decd3dc9a98b682b062ce50147af3d39a0838f3e4ec61d86a437f474e56cbb8a4aaf9f97efc11fa9a8867bea88af3631c2fae09f1b0d2768834352dd593dfb01eb062da983166de7c979e0bfca16e8af2f26eec007d3e1fd360af9de57d11288c262cbd2f6c30e957469557b65cb4924ab995", 0x4f6a) close_range$auto(0x2, 0x8000, 0x0) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000001240), 0x40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2m26.415526434s ago: executing program 2 (id=1064): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x1) io_uring_setup$auto(0x2, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x40, @loopback}, 0x6a) 2m26.264937768s ago: executing program 2 (id=1065): mmap$auto(0x0, 0x2020009, 0x2, 0x18, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x403, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f00000000c0), 0x40001, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x2000000000000006, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60301, 0x0) ioctl$auto_XFS_IOC_OPEN_BY_HANDLE(0xffffffffffffffff, 0xc038586b, &(0x7f0000000540)={r0, &(0x7f0000000240), 0x6a8239a0, &(0x7f0000000340)="9118bc", 0x1, 0x0, 0x0}) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, 0x0, 0x80040, 0x0) sendmsg$auto_NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x8) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000140)=@bpf_attr_3={0x11, 0x9, 0x4, 0x4, 0xd, 0x6, 0xffff, 0x81, 0x9, "1c2e12dd2ed9e1ee680b9e73eec80706", 0x0, 0x4, 0xffffffffffffffff, 0x7, 0x9, 0x4, 0x40000000, 0x40000000000000, 0x10, 0xfffffffd, @attach_btf_obj_fd, 0xffffffff, 0xffffffff, 0x4, 0x3}, 0x16) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), r1) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="013ad7fac400f8dbdf250100000008000200", @ANYBLOB="0800010048665200080002"], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_DEL(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x18, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@OVS_FLOW_ATTR_CLEAR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x800) 2m25.756529522s ago: executing program 2 (id=1067): r0 = io_uring_setup$auto(0x55, &(0x7f0000000100)={0x0, 0x1d, 0x3ff, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [0x0, 0x0, 0xff], {0x5, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6, 0x8000}, {0xe43c, 0x1, 0x2, 0x4085, 0x2, 0x1a7b870a, 0xfff, 0x8000c, 0x100000000}}) mknod$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_', 0x1081, 0x9) open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x28042, 0x1e6) close_range$auto(0x2, 0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x18d040, 0x0) readv$auto(0xffffffffffffffff, 0x0, 0x369) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) openat$auto_dfs_cpu_ops_debugfs(0xffffffffffffff9c, 0x0, 0x48140, 0x0) unshare$auto(0x40000080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x5) socket(0xa, 0x5, 0x84) sendto$auto(r1, 0x0, 0x401, 0x80, &(0x7f0000000080)=@hci={0x1f, 0x1}, 0x800001c) prctl$auto(0x3, 0x800001, 0x0, 0x1, 0x0) r2 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000001100), 0xa8000, 0x0) ioctl$auto_USB_RAW_IOCTL_EP0_READ(r2, 0xc0085504, &(0x7f00000003c0)={0x6, 0x9c6b, 0xa, "2d4257a3145331f753d1d19e1994a9a2cdbffacd2b288cd722f421fe9d7c0100010000000000a2425adc0d201a8576773160ebff0587360d91ef5d9d7696d37c92ff560359d74bc4603336bf004c7800000000000000000000000000acbeb6eaa64e620bc6fc0833a9c4820fef3b7d146f28c4d058186669b77077c43d601c"}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0xff) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vbi9\x00', 0x16b000, 0x0) ioctl$auto(r3, 0x40085618, r3) mmap$auto(0x0, 0x401, 0x4, 0x20eb1, 0xffffffffffffffff, 0x8000) acct$auto(0x0) io_uring_setup$auto(0xfe, 0x0) openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) fadvise64$auto_POSIX_FADV_SEQUENTIAL(r2, 0x2000000000004, 0x8, 0x2) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/rpc/nfsd.fh/channel\x00', 0x10000, 0x0) truncate$auto(&(0x7f00000007c0)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x1) getpid() recvfrom$auto(r0, &(0x7f0000000180)="41fa51734400106c5d8e2465b4b5c81479fa1f568f0b6ccf43730aae67c7b4a311f6c0710dae4e5cb63c41736bc95fb777b73781387fdec00f1778e0196b0e59cfa620416a7e3c3a7cacf7d5ab135de2e4b2ed33dc9a27070c8a9bfa0315d507fa79b936f6c8ed69184445fa9d3e9a2493b51275bcad824eb498d7eac07ebceb2ff570d957b6c0f17e2e94ed4e546e74b07c9fdc80639476e483627698f1", 0x137f, 0x5, &(0x7f0000000280)=@llc={0x1a, 0x101, 0x9, 0x1, 0x6, 0xd2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, &(0x7f00000002c0)=0xa) 2m25.196135269s ago: executing program 2 (id=1072): r0 = geteuid() r1 = ioctl$auto_NS_GET_TGID_FROM_PIDNS(0xffffffffffffffff, 0x8004b707, &(0x7f0000000000)=0x5b3) r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x43, 0x3, 0x0, 0x1, [@typed={0x8, 0xbc, 0x0, 0x0, @ipv4=@private=0xa010102}, @generic="4c75b94efbebd6d1dc4513337ee3d3082225d1525673946329635a4e0fbde80059487a", @typed={0xa, 0xf9, 0x0, 0x0, @str='($]-:\x00'}, @typed={0x8, 0x13, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x60}}, 0x20008000) r3 = fanotify_init$auto(0x3, 0x7f) r4 = fcntl$auto_F_GETOWN(r3, 0x9, 0x5) r5 = openat$auto_fuse_dir_operations_dir(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/bluetooth/hci7/hci7:201\x00', 0x210002, 0x0) sendmmsg$auto(r5, &(0x7f00000004c0)={{&(0x7f0000000200)="fb1cd9a99cb03a97bcde93fbfe281c4fef2a6611cf45eeae8594573f6be799ea2de2ac6743ab48cd70c52412b0d833e1d918845c90482e2d7a2032383059e884538fb5ebd4c38e46f64b0381e6035cccd87e32cc6bd35ab4a536c7aa2e6cdb252fe0160ea6ac5dd1db9dc84d71436e925095badd55036e7231a97d67ea026f9417fab32770da1fbd25677bc292702bac76f6ea05537088678182a7d5646e02037ea128b0d62ca59f6e3cba0717e4b010ec0d46cb2cc8b820e366", 0x3, &(0x7f0000000380)={&(0x7f00000002c0)="f7b6219c4ac81e19b748a60590a227d6bbbd0743d07c50f00ffc691a4ea59e3bdbfdb38ac2fbaadccfae204ea634563b0f5219d4b8b66808c752eca6d41ce76556c2281ee6b90143fb6affbd449307bb61bc044a578f2fb9749e4a5c1c6d4e383dfbcd787098d8af24ee994a2aacdf42f4f7318b57f775fefc4da9cdd06b30097afbd43b3781ff9861cad58549360a463ec20c34a4ff12a412081e86", 0xba5a}, 0x80000000, &(0x7f00000003c0)="a2fb7bf5022153023bff9f2e24f7b497ec7091fbdf65b8556bac496ba2b2ce5b6a138054f1f1804f388377fa93fbec1eeba623ffabf5056f0a5037bdead0097e5ebb21cdeb9f7909b875b6d4d97c6108fd86a65c42b702999465f699a7dbc9649f0edbee4e2ab600742c7868c6058e05eaeaa299cf85651e3f08cd6de8c6451644e9c3ea1acd702b11387403f700334b8883a009195279f3e5f499e2332f4a0970eaa87ee6558155b967f7b1e6a81936257d706f931d205e0f4dfe8460806795e451beac802b0bd1199e8190015c4e60b2c427ee090773cb85b70dcc65b02c6b18f110939c63370ceac90bd096d40e404452e3ef", 0x0, 0x6}, 0x3}, 0x6, 0x3) r6 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_DEV_DOWN(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r6, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x97'}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040010}, 0x4000) unshare$auto(0x7ff) r7 = ioctl$auto_TUNSETPERSIST(r3, 0x400454cb, &(0x7f0000000640)=0x1) openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/kernel/debug/ieee80211/phy4/total_ps_buffered\x00', 0x40200, 0x0) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000700), r1) sendmsg$auto_NL80211_CMD_PEER_MEASUREMENT_START(r7, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r8, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x81}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc040}, 0x1) shmctl$auto_IPC_RMID(0x80, 0x0, &(0x7f0000000980)={{0x14, r0, 0xee00, 0x101, 0x4, 0x1, 0xfff9}, 0x5, 0x7, 0xfffffffffffffff9, 0x400, @inferred=r4, @raw=0x1, 0x100, 0x0, &(0x7f0000000840)="cbf87ce4afcbdef30c23387a9fffcde5c46da2f34a40effb308856841476ed3be5", &(0x7f0000000880)="f123a6009508b3ddf52ea47d6d45c1339214f6f8094889cf35fe3ef0f96530e59a8b0658f7edcc81d1a51fcd70b38f0414f533fbfc2e283d11035806dfab1eea893f1fb76f47be1485d823f99fb3c5520232fae2f55c85692d7ada7d35cbe4aa1387728b5383a687908b19a43e63228817e687d70e1b55f9d349dff039837e6661892342e513febf28bb5e7e8aa7c1523dc86b0f0562744703e507965ba7854a096dd3d10b6d82bbe80c396f36635f269024db5ad81a487e4f6c1c00964580aba6b4b03b68176776a4bd077f96b6d38ea04b87bb8f4c00eeaec45a36b86af01f0b8367d8e626"}) sendmsg$auto_IPVS_CMD_GET_INFO(r3, &(0x7f0000000b40)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20020}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xd0, r2, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x9c, 0x3, 0x0, 0x1, [@nested={0x8f, 0x13f, 0x0, 0x1, [@typed={0x8, 0x114, 0x0, 0x0, @uid=r9}, @nested={0x4, 0x40}, @generic="dde12b696db9016fe402f35959d2caaaf01f28351b77216d047ba98348c1aa94ef53213f9c8a7d27f9096cca8ffbdfd04c316c1341e229d221d0c42dcfd71ba9f03c5e4943", @typed={0x8, 0xb, 0x0, 0x0, @u32=0x1}, @nested={0x4, 0xbb}, @generic="955f3751289e5467726fa97048ace61be62dca7547055b6166b2c3199903f76ea7d16a63cfaacad69feae277a467"]}, @typed={0x8, 0xb7, 0x0, 0x0, @u32=0xa41}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000844}, 0x1) unshare$auto(0x5) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/filter\x00', 0x10000, 0x0) msgctl$auto_MSG_STAT_ANY(0x7f, 0xd, &(0x7f0000000c40)={{0xcba00000, r0, r10, 0x7, 0x6, 0x9, 0x8}, &(0x7f0000000bc0)=0x80, &(0x7f0000000c00)=0x1, 0x7, 0x7, 0x1ff, 0x5, 0x6, 0x9e, 0x7, 0x800, @inferred=r4, @inferred=r11}) shmctl$auto_IPC_STAT(0x4, 0x2, &(0x7f0000000e80)={{0xfffffffc, r9, r12, 0x7fff, 0x6f, 0x8, 0x3ff}, 0x8, 0x77, 0x6, 0x0, @inferred=r11, @raw=0xffffffff, 0x5, 0x0, &(0x7f0000000cc0)="9a041a2813442eae75a093b5f073240e8d2954c94e9f468ffcc5a09d7c54fb3244d0ff5b53c661c667b47c30d65741b73f964dfaa94107b7092ff2d63a8140f2698677f2c09530ffec75cb5e5af6cff0cde6e763271fafd4ea1d5edc8f5c41dd7c2eeebdbc1bbe9b31fd3624bb34fe23d9ddb426f5195bc5d29b8f8a16a72976d5e5480062d40214ba2f30148f54fba23f6e86eda66a7a0a579fb6bde0ce1d9c48770340f77fc89254aa5a6ea7caa9d385633f3fe8a25f9b26002403", &(0x7f0000000d80)="077defbef5889304e79b03a9f8dcfc0eefd390ce32aaa01bc1fcaf9c8f6d79b92e8fe8dd9a48137f46df3e4d9ff3793b1104931d264d921fe35a0c613d96c1a528a6b8e98f3757b2fe81327d59852ccf27b409acec927713d8784c3f7e9768178b1864c15b72d8772969368c36c15305bfa758dffbbd650fca292689ff2f6029606e99f046677c8f77d73bb70f56b8b822847ab3344a60f07b9ace1c5f922f007ade34ac6368d20876b55fdf545a37fa508b9bba4a0e7c20fed05ded87cf17cd0f26c919225ca1b508fdc0c9d75bd2ad4fc7378101d68aa63061c91d0ae3e9dc"}) r13 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000f00), 0x20080, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/nbd14\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000fc0)={'veth0_virt_wifi\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000001000)={'vlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001040)={'vlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001080)={'ip6gre0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000010c0)={'pimreg0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r7, &(0x7f0000001400)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001200)={0x1b8, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xffffffff}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x34c}]}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9a5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4800}, 0x20000084) 2m24.613144097s ago: executing program 2 (id=1074): mmap$auto(0x3, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0xa, 0x1, 0x84) setsockopt$auto_SO_INCOMING_CPU(r0, 0x5, 0x31, &(0x7f0000000180)='7\x00\\\xa0\xe1J\x04|\x03\x7f\x81\xe4\x05\x1c\xc7k', 0x1) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x300000000000000, 0x200204, 0x15) setsockopt$auto(r1, 0x114, 0x1005, 0x0, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x121f01, 0x0) write$auto(r2, 0x0, 0xd) msync$auto(0x1ffff002, 0x1800000000000ff, 0x7f) socket(0x10, 0x2, 0x6) open_tree$auto(0xffffffffffffff9c, &(0x7f0000001100)='./cgroup\x00', 0x2) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram3\x00', 0x44000, 0x0) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r4, &(0x7f0000000100)='7\x00\\\xa0\xe1J\x04|\x03\x7f\x81\xe4\x05\x1c\xc7k', 0x1) ioctl$auto_BLKBSZSET(r3, 0x40081271, &(0x7f00000000c0)=0x1000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd0\x00', 0x0, 0x0) ioctl$auto(r5, 0xc0c0128e, r5) unshare$auto(0x40000080) unshare$auto(0x40000080) 2m9.362541497s ago: executing program 33 (id=1074): mmap$auto(0x3, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0xa, 0x1, 0x84) setsockopt$auto_SO_INCOMING_CPU(r0, 0x5, 0x31, &(0x7f0000000180)='7\x00\\\xa0\xe1J\x04|\x03\x7f\x81\xe4\x05\x1c\xc7k', 0x1) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x300000000000000, 0x200204, 0x15) setsockopt$auto(r1, 0x114, 0x1005, 0x0, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x121f01, 0x0) write$auto(r2, 0x0, 0xd) msync$auto(0x1ffff002, 0x1800000000000ff, 0x7f) socket(0x10, 0x2, 0x6) open_tree$auto(0xffffffffffffff9c, &(0x7f0000001100)='./cgroup\x00', 0x2) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram3\x00', 0x44000, 0x0) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r4, &(0x7f0000000100)='7\x00\\\xa0\xe1J\x04|\x03\x7f\x81\xe4\x05\x1c\xc7k', 0x1) ioctl$auto_BLKBSZSET(r3, 0x40081271, &(0x7f00000000c0)=0x1000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd0\x00', 0x0, 0x0) ioctl$auto(r5, 0xc0c0128e, r5) unshare$auto(0x40000080) unshare$auto(0x40000080) 11.445705758s ago: executing program 1 (id=1555): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/neigh/wg1/base_reachable_time_ms\x00', 0x80202, 0x0) write$auto(0x3, 0x0, 0xffd8) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) sysfs$auto(0x2, 0x1b, 0x0) r0 = fsopen$auto(0x0, 0x1) mmap$auto(0xf, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x82001, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/pcm0c/sub5/hw_params\x00', 0x490542, 0x0) write$auto(r1, &(0x7f0000000040)='Fm_\xbd\xc3!\x00', 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x1fe, 0x8000) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) open(0x0, 0x22240, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0xc0402, 0x0) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) r2 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$auto_RNDCLEARPOOL(r2, 0x5206, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_0={0x9, 0xb5, 0x4, 0x48d0, 0x4, 0xffffffffffffffff, 0x74b, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x4, 0xe5, 0x3}, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x2000040080000004, 0xe) 10.36527197s ago: executing program 1 (id=1558): mmap$auto(0x0, 0x20009, 0x5, 0xeb1, 0x401, 0x8000) socket(0x29, 0x2, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) (rerun: 64) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) (async) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec26\x00', 0xc0000, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000180)={'\x00\x00\b\x00', 0x0, 0x5, 0x2, 0xffffffff, 0x9, "000000008000", "3f57feff", "00be1200", '\x00', ["f5404de9641f0000000060c1", "6c6529f35024c2ffffeaf300", "ef5bc49241b4ce278e7426d8", "b816000000000900"]}) (async) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, 0x0) r2 = socket(0xa, 0x1, 0x84) r3 = getsockopt$auto(r2, 0x0, 0x4f, 0x0, 0x0) (async) mmap$auto(0xea8c, 0x8, 0x8, 0xfffffffffffffffb, r1, 0x3) (async) sysfs$auto(0x4, 0x6, 0xffffffffffffffff) (async, rerun: 64) shmctl$auto_SHM_LOCK(0x80000003, 0xb, 0x0) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0001, 0x35) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) (async) socket(0x25, 0x2, 0x0) (async) mmap$auto(0x0, 0x400005, 0x9, 0xff, r3, 0x8000) r4 = getpgrp(0x0) process_vm_readv$auto(r4, 0x0, 0x800000005, &(0x7f00000000c0)={0x0, 0x1fffffffe}, 0x2, 0x1) (async, rerun: 32) setsockopt$auto(r1, 0x140400, 0x40000005, 0x0, 0x8000008) (async, rerun: 32) unshare$auto(0x40000080) (async) mmap$auto(0x2, 0x2020009, 0x3, 0x400000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0) (async) getsockopt$auto_SO_TXTIME(r2, 0x9, 0x3d, 0x0, 0x0) (async) prctl$auto(0x23, 0x6, 0x0, 0x7e, 0x0) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r5 = gettid() rt_sigqueueinfo$auto(r5, 0x3ff, &(0x7f0000000000)={@siginfo_0_0={0x7, 0x7, 0xfffffffa, @_kill={r4}}}) (async) socketpair$auto(0x12008, 0x7ff, 0x4, 0x0) 10.07201709s ago: executing program 5 (id=1560): socket(0xa, 0x801, 0x106) wait4$auto(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000140)={{0x0, 0x1000}, {0x3, 0x96}, 0x2, 0xffffffffffff5cd8, 0x504, 0x4, 0xc301, 0x8000000000000000, 0x7, 0x5, 0x6, 0x4, 0x0, 0x2, 0x3, 0x5}) r0 = socket(0x10, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) socket(0xa, 0x801, 0x106) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x1b) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) setrlimit$auto(0x7, &(0x7f0000000080)={0x0, 0x6}) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) setsockopt$auto(0x3, 0x1, 0xd, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000002, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c001b"], 0x1ac}}, 0x40000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0xa, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0xff, 0x6, 0x5, 0x9, 0x20003, 0x6, 0x4, 0xb4, 0x9, 0x3, 0x10000, 0x80, 0x7, 0x0, 0x8000007, 0x2000, 0x200, 0x0, 0x40084, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0xb8a0, 0x0, 0x2000000000, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x300]}, 0x1fe, 0x200c) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="7201", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x6000000, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000002c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) 9.607616827s ago: executing program 5 (id=1561): bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6d) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x7, 0x400000000000eb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/gro_flush_timeout\x00', 0x88a82, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) sendfile$auto(r1, r0, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) modify_ldt$auto(0x1, 0x0, 0x10) modify_ldt$auto(0xfffffffe, 0x0, 0x100000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x40000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x40000000f42c, 0x80202) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) io_uring_setup$auto(0x4, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x183e81, 0x0) ioctl$auto_TCSBRKP2(r2, 0x5425, 0x0) close_range$auto(0x2, 0xa, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r3, 0x5408, 0x0) 9.423804855s ago: executing program 4 (id=1563): mmap$auto(0x1, 0x2020009, 0x1, 0xebd, 0xffffffffffffffff, 0x8000) pidfd_open$auto(0x0, 0x5) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) r2 = socket(0xa, 0x801, 0x106) r3 = getsockopt$auto(r2, 0x6, 0x5, 0x0, 0x0) statx$auto(r3, &(0x7f0000000080)='./file0\x00', 0xd0c6, 0x1ff, &(0x7f00000024c0)={0x1c32b497, 0xfffffff8, 0x40, 0x7, 0x0, 0xffffffffffffffff, 0xf, 0xe, 0x6, 0x10, 0x4, 0x0, {0xae60, 0x1000}, {0x5, 0x7}, {0x4, 0x1}, {0x3, 0x3}, 0x1, 0xc197, 0x1ff, 0x5, 0x7, 0x3, 0x10000, 0x2, 0x0, 0x5, 0x8, 0x3, [0x4, 0xd6, 0x8, 0x9, 0x4, 0x0, 0x3, 0x2, 0x6]}) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) write$auto_tty_fops_tty_io(r5, &(0x7f00000009c0)="8939cc4d36227fdb35e4a7779345a4d999cb1552f41b34b4003355454e96e6647b34e58345a013e46d9380cd77dcd9b5804ab378df5b19fd93b23d547b6a39e0563f1da27d880a0c7a41ada96f5899128a2f138a38855f3a0e5090cfcb022a807fd8d8410e21962aea3354ff7d28917ad17443189afcba863b21eedff9ef8944e15848033f30ec1ce206287db0755992c3d95fa6c7a2ecb44696ce661038bdc304c775605215501e237d8713947274ff5249f4fefe090d0581a07ac675fdc5da272124ae5975977941ead35326b8dd9ef2562c730a1df3116a5e25f19463fb391d3ba275758c4dd50d5bb8ecd6b3b07ebadfc8c978bb7e15a95c5bd06356d6d9d9e89db59312c4f8452f55ba7013b2691ca80c7db06df2026b190ae22bd233128b0459f8e22f77579ee7f7c6054e4eb33480be2d6e034dd96379f65937a7edf67a2d6b9fc5bb4253bb95d4bedd94da5d5cd944ccfa98c65c25dc3ab8fda6e68d77806b21e624aae3a6435c313b15894332942eb58e2bc6a0582aceaeb594578a2908b49a6f2ce66aac2e2ee4cadfc452cb953a51449039dbb5c7e84405d9cb335afbed3384ffc695b954cc51531bb083df05e2af461c2a7a0a697d0d59c565f5cfd3b354f051d5637fd1f72aeb79be3567215c648ae85541c9f3c4856229247b1225d327ed57fa7981424b39ebbb77a0f6ca5778ed0c9713d68aedd19627de8edf485f9155261ede5c803da5ce248f4c93a1b9925ee07d3f42c8f999252655c582ff47da1e6d010449345c4f3a43336547112ef4e8e0bd0829027b6dcb8fb127171eeb7a38470592c8422bc5c9bb784c281d20847eb79fef43fd38aa88f1a8639728267aef7a74fc40cc54cefea2807f598cd25f3c1bd8ab17fc88aac82179057717177355a1103433d8f7468a8f49d7d5dd8093f6882a791ce983aa4e03bf1a91e938b8da4f9cb41d6371579d9feb55636d8626b9e339d5e54a2397537e9b2f5bb846f1d0dd4614ad5f68fa35ea3f366a12eb4d51aad810856db0f11974bda08daf259c9477053847f17074fbbcbce75472cb9acada0b400f4fa85b71a97e7c686b2ba98e3d2bbb905d9e82430a2730d8d3465d9b632ba07fd746b2a394feb76db7501208f559be2a151c205103c4481cae7352f7117e6c626f25f0b3367d50a1ea87a38136b6ca64e1ef51207c0d6c06dfe86336b65caeee24138f1ca0955135c5d2b49743b0e51f98b7a8bd3a5ac50ca3a5d6e8e17cdf154bae7fa031b40b83b285b58eb47277920fc28ef916d5ae8536458577a37b73ae29312fee7885c405417d454e38dbe50ef1a8603e28611bf4d6b63251a1abc190581c6efe832d62d6ce8f6c4a64c7e018427b5fadddc1cec3896ed51c977d9e3f7c0d1e8f8d75693e1ead5a7a3714843fb3517bd0ddc68936c801692cce52ba003036764dc7f016e342a54f99916fc595dba1fc76222c5e814a1b71c6b9b735240e6bf747a900f6048b2836af70c6aa717701312c61c965d8ca1bdafb5d3623b2ee9b7e4a767ed76defd661a9f18bffaeada811ac2ad6731bf96274b019498c5552b38678ff0aedb465713d895595b92e2bc9e1b3acec28f3ee5831951582f2ad1831ddce1300dcc4547ec444eae5c614719be9c3d397fc1db1a76d954cbc9b7a0d7c8d1eab3eeccd70b17dcd7c3543b6d9effbea67c4ade126c6fbfdee281fe3479c3052e68cf8441a50a6adc59dec8de4261a117e0286eea92ecc88230fdfdca1ed438026e238e6dbfdc4772dccb17737c398add9644b47bfb1a3e3a4b1316ec25ea07f90f858736e80dbb9c882701e7188d315391c538469695f33d266550fb873f47a12518717c83bec4e0cce65958d08a0e287df6a08efd979e087814b1822681ba6ea015714fd66af5100967e152262973b065ed349398aa13bb4329b4f56081aba2ba73ede47a2f1b2dbd5daeaf4d4f790a030e3c1fac30da1b5f6149074de6d76b1635adf44016027efd4ac08c93983e0935c1c8b38a675d5c356483539624e1f402439e6a55529a44c17207d6a5f9d0a2b1745ccb5d4e7332a2b2467c9690c9b7fb9fa73b4da5d3eadd347b89bf05a6aacac989ce9f1398729a4b3383c64c64cc68a8638735ebd80fb9ba2ee9e30e65a56d5676f2b607567f2a07adba966b210339d6a8cc404ffdcbf8ac02216239cc9e0abec2e2aa1d27d658913c83ae08657439bf32213d6b3c3fbb37f978a1820d23be11511869e5884ccab0de2a2ac982d58f01e88b54a54b0f50cc0ff699e39f86d74371f1667927ea4ba96af4c98b05e2b1d4115ef892332ab7ac777f1537f3ce78a2889fab969aa6a11f9e855ec1ba09096346fe930737e6760688c91a60bce3f173c24fa1efcbe5d12869ba34883f95e6bc90c61994f6761c305f5de4a0f79f6b3403249190542edd86d7231f0d89d1519ccab3ef35e3dc9e35a5031ab1cb888a8ace8cbe67073c19f8060ea78bf6d6a8970ed1aae35246df0b825d325279ae4c2a838e0e1f40a3c9615b06b2c4e929942a2d820a82ef19d355754caa45119d5e07f9052bf02ed05de6e07bf46758255d8ef077fd04e971b5117f8ef54f20559c98a9c51df5ed7d2db8f2085ce9947b474c7f00f4a1585507e2344a53a597292a338dd39592df962267a835d091dc9f1c5e7a6a0f1215a0015d9083720aee97b7fa1aa7f4fbcf698018980ebe5cd928e6ea1f1c4e6087678cfa687f1f6cea280fb9f24496211fb00b3788bf4ac4cf5d0972c398baa70fc54dc28a9fd3b838a5732b5039602d5049afc135cfef8053a20359287d53bcce117c7c36147288178cef8dac66f4b941333dd74cf2e9e22ce1be287f1ea2c0d5f476ea74a996d5952c98714a9939084f87bb525f287214567bf1da94d8d098640215d14800f09367aaade0f57ad08dc581dc19d21bdd640d1d3cf54336bb0feafc14d9709f719b1212eee75d9f8b958783cce8a535cb6a1b890e002fefa0e60597275ca2d516b28ef1d1ce3f25184b20726cb59ccab574b8d0ffd30fce23936ec84224991a6f9d2fd74def41248726f86e413dd13e9be77f1856fa1b5803312b8a9179914980bb70873a380278f1c6ad42186b14933892427939f83556e9d130607c1b3e1292da5ba6908b642a11d2814b7ea8b7442ae9aaea89948a58cba34807e617404af7e34ecc449be8c403ee536f311af194d63c9120e0268c3f7e2cafc739b6a0575396d61e55707820fe6eb6a71ce094b931d67b8be93937542e3f7e5bb80ab033d979b3c1bff4ff367934c73198fd04571e7a74b9376894d4b0c45a53b7711cecdd98fc87980b82019db23bf4f41ad8182b6861cab9fdb8f882eddc568f5f35e798350857b3818e2e0ef189cf08825355a9ffec231c0f5039b80764f3c7d1f2371fc71216e8f8d83bce4273bcbf22908d81b7c28d664e574e396098ad8fb0bcd68dbc3d1bb0f0bf295df0ae59339381ee231536c7d3b949072a5a2ba5245cb57848dfbb7cbcb7cbdae9b96752c824410eb46f6978051ae5734c278292a90f3c395f098162d4a43c7f449b1cd8208e15fe97c11c25b663a837348b45e059998a10f1c05490dae27b12508decaafec265eb2c22f3df91291922c80e33f479a77078717a7beea74972a7817e791e2cedcaafb43d1bb71ae86242f3375633bdcf0176ef26075446d3cf999df207983af46406defa8aaab0071a24c273a6b2ef78c47efdc0950a3bf486e1f0c26587b8de77a7fbfeb10a22485a6ec662f3afa0508343f9019a8a04118a30c78d89311da9fddfab1cd44f0c2c2f934ba94e88862fb2121893dab164b3edd2d3b0f4658624f6883099353b1bd0e0601f5397c5a5d6689890b207189602ee61524acc886ab1276aecf1a0bb4fbc85ff7e4881a977513ea0abd", 0xacb) write$auto_tty_fops_tty_io(r5, &(0x7f0000000080)="40dcf0", 0x3) mmap$auto(0x6, 0x200000000f, 0x7ff, 0xeb1, r5, 0x5) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xf6\x04W\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xed\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\x9bg\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/system/node/node1/hugepages/hugepages-1048576kB/demote\x00', 0x183841, 0x0) write$auto(r6, &(0x7f0000000080)='+\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0x4) r7 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x0, 0x0) preadv$auto(r7, &(0x7f0000000100)={0x0, 0x82}, 0x8, 0xe637, 0x6) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8881, 0x0) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) io_uring_setup$auto(0x59, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x3, 0x4) r8 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r8, 0xc0045516, 0x0) read$auto(0x3, 0x0, 0x80) 8.621508283s ago: executing program 1 (id=1564): socket(0x10, 0x2, 0xc) mmap$auto(0x0, 0x2020009, 0x6, 0xebd, 0xffffffffffffffff, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/rpc/use-gss-proxy\x00', 0x0, 0x0) mmap$auto(0x0, 0x0, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mprotect$auto(0x1000, 0x200000, 0x4) clone$auto(0x100000008, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4000006) clone$auto(0x8, 0x14b, 0x0, 0x0, 0xe) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mprotect$auto(0x0, 0x8000000000000001, 0x8) ioctl$auto(r0, 0x0, r0) sysfs$auto(0x2, 0x5, 0x0) mprotect$auto(0x0, 0x806121, 0x6) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/vivid.0/cec1/power/control\x00', 0x42802, 0x0) write$auto(r1, 0x0, 0x81) close_range$auto(0x2, r0, 0xffffffff) settimeofday$auto(&(0x7f0000000040)={0x9, 0x5}, &(0x7f00000001c0)={0x200, 0x3}) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x440, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/rpc/nfsd.fh/channel\x00', 0x8f3b7a51b8063981, 0xfff6) write$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000040)=' \\x', 0x3) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/tunl0/disable_policy\x00', 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x1004, 0x6) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) sendfile$auto(r3, r4, 0x0, 0x800048) 8.232826259s ago: executing program 5 (id=1566): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sched_rt_period_us\x00', 0x101202, 0x0) sendfile$auto(r0, r0, 0x0, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, r1, 0x5d0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r0, 0x8000) pipe2$auto(0x0, 0x80) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r2, 0x0, 0x400000000006) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) socket(0x2, 0x5, 0x0) io_uring_setup$auto(0xffd, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x2a082, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000001fc0)='/dev/snd/midiC2D2\x00', 0x40881, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, 0xffffffffffffffff) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptytd\x00', 0x80001, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp6\x00', 0x0, 0x0) socketpair$auto(0x9, 0x4, 0x8000000000000000, 0x0) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) 7.746663504s ago: executing program 3 (id=1567): mmap$auto(0x0, 0x81, 0xdc, 0xbb72, 0x2, 0x800008000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) unshare$auto(0x8100000) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x442a00, 0x0) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) lseek$auto(r2, 0x2, 0x4) r3 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f00000024c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TASKSTATS_CMD_GET(r4, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000814) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r5 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) ioctl$auto_UBI_IOCATT(r5, 0x40186f40, 0x0) statmount$auto(0x0, 0x0, 0x800, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) ioctl$auto_UBI_IOCDET(r5, 0x40046f41, 0x0) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000080), r1) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) clone$auto(0x100000008, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4000006) read$auto(0xffffffffffffffff, &(0x7f0000000080)='\x00', 0xff09) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) ioctl$auto_PPPIOCSMRRU(r0, 0x4004743b, 0x0) 7.354947547s ago: executing program 4 (id=1568): r0 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/force\x00', 0x210000, 0x0) (async) futex_wait$auto(&(0x7f0000000080)="a231bd42c75ea456f75f2362bc5d2d285d4e4a330ac128b2b19de936c85850be27d5f96f0051f7a49d46f0ac4db2dc2a288b329a48cadaaf587a50d55b6e49bdcd913280", 0x400000000000004, 0x5, 0x401, &(0x7f0000000100)={0x4000004, 0x8}, 0x674) r1 = socket(0x15, 0x5, 0x0) getsockopt$auto(r1, 0x114, 0x5, 0xfffffffffffffffc, 0x0) (async, rerun: 64) sendfile$auto(r0, r1, &(0x7f0000000040)=0x2, 0x800) (rerun: 64) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) r2 = fanotify_init$auto(0x602, 0x1) (async) r3 = prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) (async) waitid$auto_P_PID(0x1, 0x0, &(0x7f0000000140)={@siginfo_0_0={0x69a, 0x2, 0x84e, @_sigchld={0xffffffffffffffff, 0x0, 0xc6, 0x0, 0x8}}}, 0x76, &(0x7f00000001c0)={{0x4, 0x9e}, {0x9, 0x5}, 0x2, 0x1ca5, 0x9, 0x2, 0x101, 0x94, 0x0, 0x10, 0xe, 0x1, 0x6, 0x200, 0x4, 0xffffffffffff3c49}) shmat$auto(0x0, 0x0, 0x8) (async) fcntl$auto(r2, 0xa80, r4) (async) ioctl$auto(r3, 0x541b, 0xffffffffffffffff) 6.986138087s ago: executing program 1 (id=1569): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) memfd_create$auto(&(0x7f0000000300)='/sys/kernel/debug/x86/boot_params/data\x00\"F\xb6\xcd\x06\xd6\x97\\L\xe1\xb2\xee\xb8\x8e\xd6O\xa1j\x90w\xc7\x94\xb7yi\x01&\x04b/\xaa\xfb#s\xc4\xa3\xa7\xacj\xc6\x8e\xf4L\x9a\xf8\xcc\xdcy\x9f\x93\xbc\xf6\xc8\xdb\x05w,|B\xfc\x04\x97\xd3\x0f\x8b\x81\xe8\xbc\x81\x0e\xd7o\xd2\xcd\x18z\xc2\xb7|\xe1\xa6\x9a~\x96\x10rnLnt\xdb\xdb-\x1b\x99\xd4\xed;\xf8\x13a\r\xf2\a\x85%\xef\xa7\x7f#\x96\xf2S\xb0\xf1Hq\x0f;\x83\xb7\x0fz\x9dN\xc9\x1e\x15r\x97|\xbfE\xce\"', 0xc) mmap$auto(0x0, 0x2, 0xffb, 0x8000000008011, 0x3, 0x0) fallocate$auto(0x8000000000000003, 0x3, 0xf, 0x200000004) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x82041, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, 0x0, 0x0) ioctl$auto_SNDCTL_SEQ_SYNC(r0, 0x5101, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/023/001\x00', 0x101a42, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0xe02, 0x1, 0x8, 0x103, &(0x7f0000000080)}) select$auto(0xfffffffb, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x400000000000005, 0x5, 0x6, 0x1f2, 0x9, 0xe8, 0x400000000fb, 0xa, 0x4, 0x3, 0x5, 0x7]}, 0x0, 0x0) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000600)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5') socket(0x2d, 0x2, 0x0) setsockopt$auto(0x3, 0x11d, 0x81, 0x0, 0x8) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid$auto_P_ALL(0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) 6.907963336s ago: executing program 3 (id=1570): unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xb8, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nbd3\x00', 0x0, 0x0) socket(0xa, 0x801, 0x84) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x2, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) close_range$auto(0x2, 0x8000, 0x0) r4 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000001240), 0x40, 0x0) ioctl$auto(r4, 0x3b8e, r3) readv$auto(0x3, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, 0x0) socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1) r5 = socket(0x11, 0x3, 0x9) socket(0x11, 0x80003, 0x300) sendmmsg$auto(r5, &(0x7f0000000400)={{&(0x7f0000000000), 0x205aa, &(0x7f0000000100)={0x0, 0x4b}, 0x1, 0x0, 0x5, 0x1000}, 0x5}, 0x2, 0x100) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010b27bd7000fda5c5a62073660008000300", @ANYRES32=r6], 0x1c}}, 0x4040080) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) read$auto(0x3, 0x0, 0x7fffffff) 6.697894801s ago: executing program 5 (id=1571): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/system/cpu/cpu0/topology/die_cpus_list\x00', 0xc0200, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) capset$auto(0x0, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x1e, 0x4, 0x0) (async) r0 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) (async) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x101d0, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async, rerun: 64) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb1\x00', 0x20401, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x6a) (async) ioctl$auto_FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000080)) (async, rerun: 64) socket(0x2, 0xa, 0xe89a) (async, rerun: 64) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) (async) socket(0x11, 0x3, 0x9) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109200, 0x0) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) (async, rerun: 32) writev$auto(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x7}, 0x3) (rerun: 32) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ovs_vport(0x0, 0xffffffffffffffff) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC2\x00', 0x20100, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@batch={0x7, 0x444, 0x3, 0x10001, 0x10000000, 0xffffffffffffffff, 0x400, 0x1ff}, 0x96) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x11, 0xffffffffffffffff, 0x8000) (async, rerun: 64) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async) sendmsg$auto(0xffffffffffffffff, 0x0, 0x0) 6.629499842s ago: executing program 4 (id=1572): read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="ed03667ddcd6d026df250a"], 0x51}, 0x1, 0x0, 0x0, 0x4054807}, 0x10004010) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r2 = prctl$auto_PR_SET_MM_START_CODE(0x3, 0x1, 0x0, 0xbd2c, 0x3) close_range$auto(0x2, r2, 0x0) io_uring_setup$auto(0x58, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [0x4, 0x0, 0x100000], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6, 0x2}, {0xe63a, 0x1, 0x53, 0x85, 0x2, 0xf, 0x76be, 0x8000c, 0x100000000}}) socket(0x18, 0x1, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram8\x00', 0x16fa02, 0x0) select$auto(0x9, &(0x7f00000005c0)={[0xcc0, 0x9, 0x80000001, 0x3, 0x5, 0x7, 0xffffffffffff0001, 0x4374, 0x9, 0x611d, 0x400, 0xfffffffffffffd31, 0x4, 0x5, 0x6, 0x7ff]}, &(0x7f0000000640)={[0x7bb4, 0x200, 0x6, 0x2, 0x8, 0x1ac, 0x6, 0x6, 0x3, 0x439365e, 0xcb4, 0x6, 0x8, 0x40, 0x100000000, 0x3ed]}, &(0x7f00000006c0)={[0x3, 0x101, 0x7, 0x0, 0x7fffffffffffffff, 0x1, 0x8b, 0xf0, 0x0, 0x9, 0x1, 0x5da2, 0x7fffffff, 0x6, 0x6, 0x9]}, &(0x7f0000000740)={0x0, 0x7fffffff}) sendfile$auto(0x3, r3, 0x0, 0x400000000006) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/mtd/mtd0/mtd0/nvmem\x00', 0x0, 0x0) read$auto(r4, &(0x7f0000002440)='\x00', 0xd) madvise$auto(0x0, 0x2000040080000004, 0xe) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000007c0)='/sys/devices/platform/vhci_hcd.1/usb12/12-0:1.0/ep_81/bEndpointAddress\x00', 0x20a041, 0x0) write$auto(r5, 0x0, 0x7ffffffffff) io_uring_setup$auto(0x7, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x1c1402, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}}) write$auto(r6, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(0x3, 0x0, 0x100) recvmmsg$auto(0xffffffffffffffff, 0x0, 0x1, 0x8, &(0x7f0000001500)={0x9, 0x1000}) r7 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000001500)='/proc/self/ns/cgroup\x00', 0x180, 0x0) fremovexattr$auto(r7, &(0x7f00000004c0)='system.posix_acl_access\x00e\xd8\v\x1b\x02\xd5q?\x8c\xf1\x8f\x89\x7f\xd47\x84dG\xb3\xf1\xa6\x1b\x03\x18s8G \x950\xf0\xe0H!\x86,\xd1{\xf0\vX-c\xfd\xc4\xf24\xdd\xac\xea\x1f1\xc2+0\xc7gA\xa8\xc6B\xc9f\'_]\xe5.\xc6X\xe0c\xbbtzB\xe7\x9383\xdf\xf7x\x18\xd8\xfb(\xae\xb6\xc3\x02;mlG\x14\xdf\x9f\xea\xbf\x93\xae\xa5.\xfd\xe2a\xa4\x1bK\xbbZA\xb8\xc4\x9f\x93\xff\x86l\xd2\a7\xba=LC\xc4\xdc3\xf3%\xef\x7f\x81\x9eB\x9ak\a\xa3\xea?\x11\xd8LuY\x9b\xa8\xe2j\x98\\\xd0\xd72_c\b\xb3\xd1\xa6g,5\b|\x95\x98\xb0c\x90\xfd\x12\x1f\x1c!)(\xae\xfe\xc4\xec\x8f\xa1\x98\te\'\xc8\x97\xda\xe4&)\xe5\xa3)@\x13In\x1e0\xe5\xff\xcbv\xd2B\xd5\xaf+\xc8T\xc2\xb1\xd3\xaan\xfe}\x17\xcd\xebD[\xba\x9d\'\xb0') r8 = syz_clone(0x1000000, &(0x7f0000000000)="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", 0x5be, 0x0, 0x0, 0x0) migrate_pages$auto(r8, 0x8, 0x0, &(0x7f0000001e40)=0x1) close_range$auto(0x2, 0x8, 0x0) 4.08245377s ago: executing program 1 (id=1573): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r1 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sda1\x00', 0x2000, 0x0) sendfile$auto(0x3, r2, 0x0, 0x100400000000006) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000240), r0) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x18, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@HWSIM_ATTR_MLO_SUPPORT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000040}, 0x4004000) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace\x00', 0x3, 0x0) lseek$auto(r4, 0x7, 0x0) getdents$auto(r4, 0x0, 0x62d4) landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0xffffffffffffffff, 0x9}, 0x9, 0x80000) r5 = socket(0x1e, 0x4, 0x0) connect$auto(r5, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x0, 0x4}}, 0x10) sendmmsg$auto(r5, 0x0, 0x9a6, 0x7000000) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/sockcreate\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 3.963355372s ago: executing program 3 (id=1574): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000000), r0) sendmsg$auto_WG_CMD_SET_DEVICE(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000002900)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdc07, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}}, 0xc0) 3.505494124s ago: executing program 5 (id=1575): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.6/usb7/version\x00', 0x20040, 0x0) read$auto(r0, &(0x7f0000000240)='$\x00', 0xb) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/fib_multipath_hash_fields\x00', 0x202, 0x0) mmap$auto(0x0, 0xfffffffffffffffa, 0xb17b, 0xeb2, 0x3fd, 0x80000001) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(r1, 0x0, 0xc6d, 0x0, 0x78) prctl$auto(0x9, 0x1, 0x0, 0x3, 0x0) setgroups$auto(0xe32, 0x0) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r2, 0x0, 0xfff) r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x181880, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) connect$auto(r2, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x1, 0x0, 0x9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) io_uring_setup$auto(0x6, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x10001) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) 2.944623706s ago: executing program 4 (id=1576): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x1, 0x106) connect$auto(r0, &(0x7f00000001c0)=@in={0x2, 0x3}, 0x55) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000080), r0) sendmsg$auto_OVS_METER_CMD_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_KBPS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8080) syz_genetlink_get_family_id$auto_thermal(0x0, r0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_GOV(r0, 0x0, 0x24040151) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) shmctl$auto_IPC_INFO(0x5, 0x3, 0x0) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, 0xffffffffffffffff, 0x8000) prctl$auto_PR_GET_SHADOW_STACK_STATUS(0x4a, 0x101, 0x2, 0x0, 0x0) madvise$auto(0x0, 0x400053, 0x9) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x8001, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) semctl$auto(0x2, 0x5, 0x13, 0x9) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) 2.873387856s ago: executing program 3 (id=1577): close_range$auto(0x2, 0xa, 0x0) r0 = socket(0x18, 0xa, 0x1) close_range$auto(r0, 0xa, 0x0) keyctl$auto(0x1e, 0x0, 0x0, 0x0, 0x1) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = eventfd$auto(0x4) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) ioctl$auto(r2, 0x4008af20, r1) r3 = prctl$auto_PR_SCHED_CORE_SHARE_TO(0x6, 0x2, 0x0, 0x8, 0x200) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mq_open$auto(&(0x7f00000000c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5qn^\xbb\n\xbf\xb5wy7\xcft\t\x16\x1f\r\xf8\xe8\x0f\xe0\xaa\xe9\x1b\x96\xed/\x11vH>\x89\x83q\x14jb3\xbb\xdd/', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x5, 0x3, 0x3fda, 0x8, 0x7fffffffb000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dmmidi2\x00', 0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/tty/ptyee/power/runtime_status\x00', 0x28200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000440)=""/227, 0xe3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mseal$auto(0xe9, 0x7dda, 0x3) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) 1.568513919s ago: executing program 4 (id=1580): socket(0xa, 0x801, 0x106) wait4$auto(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000140)={{0x0, 0x1000}, {0x3, 0x96}, 0x2, 0xffffffffffff5cd8, 0x504, 0x4, 0xc301, 0x8000000000000000, 0x7, 0x5, 0x6, 0x4, 0x0, 0x2, 0x3, 0x5}) r0 = socket(0x10, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) socket(0xa, 0x801, 0x106) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x1b) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) setrlimit$auto(0x7, &(0x7f0000000080)={0x0, 0x6}) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) setsockopt$auto(0x3, 0x1, 0xd, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000002, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c001b"], 0x1ac}}, 0x40000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0xa, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0xff, 0x6, 0x5, 0x9, 0x20003, 0x6, 0x4, 0xb4, 0x9, 0x3, 0x10000, 0x80, 0x7, 0x0, 0x8000007, 0x2000, 0x200, 0x0, 0x40084, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0xb8a0, 0x0, 0x2000000000, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x300]}, 0x1fe, 0x200c) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="720100", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x6000000, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000002c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) 1.432082371s ago: executing program 3 (id=1581): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20040, 0x0) read$auto(r0, &(0x7f0000000240)='$\x00', 0xb) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/fib_multipath_hash_fields\x00', 0x202, 0x0) mmap$auto(0x0, 0xfffffffffffffffa, 0xb17b, 0xeb2, 0x3fd, 0x80000001) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(r1, 0x0, 0xc6d, 0x0, 0x78) prctl$auto(0x9, 0x1, 0x0, 0x3, 0x0) setgroups$auto(0xe32, 0x0) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r2, 0x0, 0xfff) r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x181880, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) connect$auto(r2, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x1, 0x0, 0x9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) io_uring_setup$auto(0x6, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x10001) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) 698.983538ms ago: executing program 4 (id=1582): r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x48040, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(r2, 0xae44, r1) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0xffffffffffffffff, 0x10008000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r3 = io_uring_setup$auto(0x5, 0x0) mknod$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_', 0x1081, 0x9) acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\'\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') open(&(0x7f00000007c0)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x880c2, 0xb3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) r4 = bpf$auto(0x7, &(0x7f0000000100)=@task_fd_query={0xe, r3, 0x4, 0x10001, 0x8, 0xc, 0xffffffffffffffff, 0x9, 0x7ff}, 0xee) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_FS_IOC_RESVSP(r0, 0x40305828, 0x7fff) unshare$auto(0x40000080) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x5f09, r5, 0x1, 0x2000) write$auto(r6, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x5, 0xfffffffd) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r7 = openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) preadv$auto(r7, &(0x7f0000000100)={&(0x7f0000000040), 0x7fffffff}, 0x1, 0x8, 0x6) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) setsockopt$auto(r4, 0x100, 0x5, 0x0, 0x8001) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r8, r8, 0x0, 0x3) ioctl$auto_PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000000)={0x401, 0x1}) 0s ago: executing program 3 (id=1583): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) mmap$auto(0x0, 0xfff, 0x8, 0x15, 0xfffffffffffffffa, 0x7fff) r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/block/loop9/poll_stat\x00', 0x848100, 0x0) pipe$auto(&(0x7f0000000500)) fcntl$auto(0x3, 0x4, 0xa553) close_range$auto(0x2, 0xa, 0x0) r1 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000040), 0x21043, 0x0) ioctl$auto_rfkill_fops_core(r1, 0x400005202, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x2004c0c4) preadv$auto(0xffffffffffffffff, 0x0, 0x7, 0x7, 0x402) read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/010/001\x00', 0x200802, 0x0) r2 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001180)='/dev/input/mice\x00', 0x1a1382, 0x0) write$auto_mousedev_fops_mousedev(r2, 0x0, 0x0) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x8}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) mmap$auto(0x0, 0x6, 0x1, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/amidi2\x00', 0x802, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, 0x0) mincore$auto(0x200000000000, 0xffff, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101c00, 0x0) select$auto(0xd, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r0, &(0x7f0000000000)=""/10, 0xa) linkat$auto(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x405) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000200)={0x0, 0x1d, 0x3800, 0x2, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6, 0xfffffffffffffffd}, {0x100, 0x1, 0x55, 0x82, 0x8000004, 0x1a7b870a, 0x76c2, 0x9, 0x100000000}}) kernel console output (not intermixed with test programs): 8 bytes leftover after parsing attributes in process `syz.2.62'. [ 121.641758][ T6132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.63'. [ 121.960153][ T6145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.66'. [ 124.076272][ T4942] Bluetooth: hci2: unexpected subevent 0x0c length: 118 > 5 [ 125.010726][ T6190] random: crng reseeded on system resumption [ 125.225542][ T6199] sysfs_service_op_store: Client not running :-5: [ 125.278450][ T6199] sysfs_service_op_show: Client not running :-5: [ 126.302669][ T6215] program syz.2.80 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.826266][ T6222] tipc: Started in network mode [ 126.849628][ T6222] tipc: Node identity ee00, cluster identity 4711 [ 126.875370][ T6222] tipc: Node number set to 60928 [ 127.895294][ T30] audit: type=1800 audit(1784178881.076:4): pid=6246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.85" name="dbroot" dev="configfs" ino=11557 res=0 errno=0 [ 127.949787][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.85'. [ 129.069868][ T6265] FAULT_INJECTION: forcing a failure. [ 129.069868][ T6265] name fail_futex, interval 1, probability 0, space 0, times 1 [ 129.137681][ T6265] CPU: 0 UID: 0 PID: 6265 Comm: syz.2.89 Tainted: G L syzkaller #0 PREEMPT(full) [ 129.137717][ T6265] Tainted: [L]=SOFTLOCKUP [ 129.137724][ T6265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 129.137735][ T6265] Call Trace: [ 129.137741][ T6265] [ 129.137748][ T6265] dump_stack_lvl+0x100/0x190 [ 129.137783][ T6265] should_fail_ex.cold+0x5/0xa [ 129.137804][ T6265] get_futex_key+0x1d2/0x14f0 [ 129.137836][ T6265] ? __pfx_get_futex_key+0x10/0x10 [ 129.137865][ T6265] ? find_held_lock+0x2b/0x80 [ 129.137885][ T6265] ? __fget_files+0x215/0x3d0 [ 129.137911][ T6265] ? __fget_files+0x215/0x3d0 [ 129.137942][ T6265] futex_wake+0xf4/0x5e0 [ 129.137967][ T6265] ? __pfx_futex_wake+0x10/0x10 [ 129.137987][ T6265] ? fdget+0x18b/0x210 [ 129.138013][ T6265] ? __sys_sendmmsg+0x371/0x440 [ 129.138037][ T6265] ? __pfx___sys_sendmmsg+0x10/0x10 [ 129.138062][ T6265] do_futex+0x2b2/0x440 [ 129.138081][ T6265] ? __pfx_do_futex+0x10/0x10 [ 129.138104][ T6265] __x64_sys_futex+0x34f/0x4d0 [ 129.138125][ T6265] ? __pfx___x64_sys_futex+0x10/0x10 [ 129.138152][ T6265] do_syscall_64+0x115/0x840 [ 129.138169][ T6265] ? clear_bhb_loop+0x40/0x90 [ 129.138191][ T6265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.138210][ T6265] RIP: 0033:0x7f36b559de59 [ 129.138226][ T6265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.138243][ T6265] RSP: 002b:00007f36b651a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 129.138261][ T6265] RAX: ffffffffffffffda RBX: 00007f36b5825fa8 RCX: 00007f36b559de59 [ 129.138272][ T6265] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f36b5825fac [ 129.138282][ T6265] RBP: 00007f36b5825fa0 R08: 0000000000000001 R09: 0000000000000000 [ 129.138293][ T6265] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 129.138304][ T6265] R13: 00007f36b5826038 R14: 00007fff039e59d0 R15: 00007fff039e5ab8 [ 129.138327][ T6265] [ 129.936755][ T6279] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 131.815138][ T6297] Process accounting resumed [ 132.154737][ T30] audit: type=1800 audit(1784178885.336:5): pid=6319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.102" name="dbroot" dev="configfs" ino=12001 res=0 errno=0 [ 132.252688][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.267243][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.196521][ T6329] binder: 6328:6329 ioctl c0306201 0 returned -14 [ 133.585693][ T6332] mmap: syz.3.105 (6332) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 134.178735][ T6338] ======================================================= [ 134.178735][ T6338] WARNING: The mand mount option has been deprecated and [ 134.178735][ T6338] and is ignored by this kernel. Remove the mand [ 134.178735][ T6338] option from the mount to silence this warning. [ 134.178735][ T6338] ======================================================= [ 134.447422][ T6347] random: crng reseeded on system resumption [ 134.544856][ T6341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.107'. [ 136.812922][ T6375] random: crng reseeded on system resumption [ 138.060203][ T6400] binder: 6399:6400 ioctl 541b 0 returned -22 [ 138.487141][ T6414] netlink: 20 bytes leftover after parsing attributes in process `syz.0.124'. [ 145.753259][ T6481] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 146.047201][ T6517] bridge0: port 3(team0) entered blocking state [ 146.072852][ T6517] bridge0: port 3(team0) entered disabled state [ 146.100547][ T6517] team0: entered allmulticast mode [ 146.159337][ T6517] team_slave_0: entered allmulticast mode [ 146.220093][ T6517] team_slave_1: entered allmulticast mode [ 146.279442][ T6517] team0: entered promiscuous mode [ 146.303755][ T6517] team_slave_0: entered promiscuous mode [ 146.326503][ T6517] team_slave_1: entered promiscuous mode [ 146.364419][ T6517] bridge0: port 3(team0) entered blocking state [ 146.371705][ T6517] bridge0: port 3(team0) entered forwarding state [ 148.226428][ T4942] Bluetooth: hci0: unexpected event 0x2c length: 1022 > 17 [ 150.917571][ T6570] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 151.545385][ T6587] FAULT_INJECTION: forcing a failure. [ 151.545385][ T6587] name failslab, interval 1, probability 0, space 0, times 0 [ 151.601455][ T6587] CPU: 0 UID: 0 PID: 6587 Comm: syz.1.154 Tainted: G L syzkaller #0 PREEMPT(full) [ 151.601487][ T6587] Tainted: [L]=SOFTLOCKUP [ 151.601493][ T6587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 151.601504][ T6587] Call Trace: [ 151.601510][ T6587] [ 151.601517][ T6587] dump_stack_lvl+0x100/0x190 [ 151.601544][ T6587] should_fail_ex.cold+0x5/0xa [ 151.601564][ T6587] should_failslab+0xc2/0x120 [ 151.601588][ T6587] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 151.601611][ T6587] ? blk_alloc_queue+0x31/0x790 [ 151.601639][ T6587] blk_alloc_queue+0x31/0x790 [ 151.601673][ T6587] blk_mq_alloc_queue+0x174/0x290 [ 151.601691][ T6587] ? __pfx_blk_mq_alloc_queue+0x10/0x10 [ 151.601721][ T6587] ? blk_mq_alloc_tag_set+0xe2c/0x1330 [ 151.601758][ T6587] __blk_mq_alloc_disk+0x29/0x120 [ 151.601776][ T6587] loop_add+0x498/0xb60 [ 151.601794][ T6587] ? __pfx_loop_add+0x10/0x10 [ 151.601837][ T6587] ? find_held_lock+0x2b/0x80 [ 151.601857][ T6587] ? __fget_files+0x215/0x3d0 [ 151.601886][ T6587] loop_control_ioctl+0xae/0x620 [ 151.601906][ T6587] ? __pfx_loop_control_ioctl+0x10/0x10 [ 151.601928][ T6587] ? __pfx_loop_control_ioctl+0x10/0x10 [ 151.601948][ T6587] __x64_sys_ioctl+0x18e/0x210 [ 151.601973][ T6587] do_syscall_64+0x115/0x840 [ 151.601990][ T6587] ? clear_bhb_loop+0x40/0x90 [ 151.602011][ T6587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.602031][ T6587] RIP: 0033:0x7f4eb819de59 [ 151.602047][ T6587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.602063][ T6587] RSP: 002b:00007f4eb8ffd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 151.602081][ T6587] RAX: ffffffffffffffda RBX: 00007f4eb8425fa0 RCX: 00007f4eb819de59 [ 151.602092][ T6587] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 000000000000000a [ 151.602103][ T6587] RBP: 00007f4eb8233e6f R08: 0000000000000000 R09: 0000000000000000 [ 151.602113][ T6587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.602123][ T6587] R13: 00007f4eb8426038 R14: 00007f4eb8425fa0 R15: 00007ffff6c185b8 [ 151.602153][ T6587] [ 151.825177][ T6520] kexec: Could not allocate control_code_buffer [ 152.289905][ T6592] FAULT_INJECTION: forcing a failure. [ 152.289905][ T6592] name failslab, interval 1, probability 0, space 0, times 0 [ 152.351379][ T6592] CPU: 0 UID: 0 PID: 6592 Comm: syz.3.155 Tainted: G L syzkaller #0 PREEMPT(full) [ 152.351410][ T6592] Tainted: [L]=SOFTLOCKUP [ 152.351417][ T6592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 152.351427][ T6592] Call Trace: [ 152.351433][ T6592] [ 152.351440][ T6592] dump_stack_lvl+0x100/0x190 [ 152.351465][ T6592] should_fail_ex.cold+0x5/0xa [ 152.351487][ T6592] should_failslab+0xc2/0x120 [ 152.351511][ T6592] __kmalloc_noprof+0xfc/0x820 [ 152.351531][ T6592] ? __pfx_dynamic_dname+0x10/0x10 [ 152.351564][ T6592] ? tomoyo_encode2+0xfb/0x3c0 [ 152.351592][ T6592] tomoyo_encode2+0xfb/0x3c0 [ 152.351619][ T6592] tomoyo_encode+0x29/0x50 [ 152.351643][ T6592] tomoyo_realpath_from_path+0x18c/0x690 [ 152.351673][ T6592] tomoyo_check_open_permission+0x2af/0x3c0 [ 152.351695][ T6592] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 152.351716][ T6592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.351742][ T6592] ? hook_file_open+0x24f/0x8f0 [ 152.351775][ T6592] ? lock_acquire+0x1b9/0x370 [ 152.351810][ T6592] tomoyo_file_open+0x6b/0x90 [ 152.351839][ T6592] security_file_open+0xb5/0x1e0 [ 152.351863][ T6592] do_dentry_open+0x588/0x14d0 [ 152.351897][ T6592] vfs_open+0x82/0x3f0 [ 152.351920][ T6592] dentry_open+0x71/0xd0 [ 152.351941][ T6592] pidfs_alloc_file+0x18f/0x290 [ 152.351969][ T6592] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 152.352003][ T6592] pidfd_prepare+0x107/0x1b0 [ 152.352025][ T6592] __x64_sys_pidfd_open+0x105/0x1a0 [ 152.352050][ T6592] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 152.352079][ T6592] do_syscall_64+0x115/0x840 [ 152.352096][ T6592] ? clear_bhb_loop+0x40/0x90 [ 152.352117][ T6592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.352139][ T6592] RIP: 0033:0x7fb50c99de59 [ 152.352161][ T6592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.352178][ T6592] RSP: 002b:00007fb50abf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 152.352196][ T6592] RAX: ffffffffffffffda RBX: 00007fb50cc26090 RCX: 00007fb50c99de59 [ 152.352208][ T6592] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 152.352219][ T6592] RBP: 00007fb50ca33e6f R08: 0000000000000000 R09: 0000000000000000 [ 152.352230][ T6592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.352241][ T6592] R13: 00007fb50cc26128 R14: 00007fb50cc26090 R15: 00007fffebae0498 [ 152.352263][ T6592] [ 152.831497][ T6599] vhci_hcd: not connected 4 [ 152.995638][ T6592] ERROR: Out of memory at tomoyo_realpath_from_path. [ 154.083756][ T6628] FAULT_INJECTION: forcing a failure. [ 154.083756][ T6628] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 154.196907][ T6628] CPU: 0 UID: 0 PID: 6628 Comm: syz.1.161 Tainted: G L syzkaller #0 PREEMPT(full) [ 154.196938][ T6628] Tainted: [L]=SOFTLOCKUP [ 154.196944][ T6628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 154.196954][ T6628] Call Trace: [ 154.196960][ T6628] [ 154.196967][ T6628] dump_stack_lvl+0x100/0x190 [ 154.196993][ T6628] should_fail_ex.cold+0x5/0xa [ 154.197014][ T6628] _copy_from_user+0x2e/0xd0 [ 154.197048][ T6628] copy_msghdr_from_user+0x9f/0x4c0 [ 154.197078][ T6628] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 154.197110][ T6628] ? __pfx__kstrtoull+0x10/0x10 [ 154.197132][ T6628] ___sys_sendmsg+0x106/0x1e0 [ 154.197161][ T6628] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.197200][ T6628] ? find_held_lock+0x2b/0x80 [ 154.197235][ T6628] __sys_sendmmsg+0x20c/0x440 [ 154.197259][ T6628] ? __pfx___sys_sendmmsg+0x10/0x10 [ 154.197280][ T6628] ? ksys_write+0x190/0x250 [ 154.197324][ T6628] ? fput+0x79/0x100 [ 154.197342][ T6628] ? ksys_write+0x1ac/0x250 [ 154.197369][ T6628] ? __pfx_ksys_write+0x10/0x10 [ 154.197401][ T6628] __x64_sys_sendmmsg+0x9c/0x100 [ 154.197422][ T6628] ? lockdep_hardirqs_on+0x78/0x100 [ 154.197452][ T6628] do_syscall_64+0x115/0x840 [ 154.197468][ T6628] ? clear_bhb_loop+0x40/0x90 [ 154.197490][ T6628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.197509][ T6628] RIP: 0033:0x7f4eb819de59 [ 154.197525][ T6628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.197542][ T6628] RSP: 002b:00007f4eb8ffd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 154.197560][ T6628] RAX: ffffffffffffffda RBX: 00007f4eb8425fa0 RCX: 00007f4eb819de59 [ 154.197572][ T6628] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 154.197582][ T6628] RBP: 00007f4eb8ffd090 R08: 0000000000000000 R09: 0000000000000000 [ 154.197593][ T6628] R10: 000000000000006a R11: 0000000000000246 R12: 0000000000000001 [ 154.197603][ T6628] R13: 00007f4eb8426038 R14: 00007f4eb8425fa0 R15: 00007ffff6c185b8 [ 154.197626][ T6628] [ 156.619559][ T6689] FAULT_INJECTION: forcing a failure. [ 156.619559][ T6689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.701839][ T6689] CPU: 0 UID: 0 PID: 6689 Comm: syz.0.172 Tainted: G L syzkaller #0 PREEMPT(full) [ 156.701870][ T6689] Tainted: [L]=SOFTLOCKUP [ 156.701876][ T6689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 156.701886][ T6689] Call Trace: [ 156.701892][ T6689] [ 156.701899][ T6689] dump_stack_lvl+0x100/0x190 [ 156.701924][ T6689] should_fail_ex.cold+0x5/0xa [ 156.701945][ T6689] _copy_from_user+0x2e/0xd0 [ 156.701972][ T6689] ____sys_sendmsg+0x1d1/0xbe0 [ 156.702002][ T6689] ? __pfx_____sys_sendmsg+0x10/0x10 [ 156.702032][ T6689] ? __pfx__kstrtoull+0x10/0x10 [ 156.702054][ T6689] ___sys_sendmsg+0x190/0x1e0 [ 156.702084][ T6689] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.702122][ T6689] ? find_held_lock+0x2b/0x80 [ 156.702165][ T6689] __sys_sendmmsg+0x20c/0x440 [ 156.702190][ T6689] ? __pfx___sys_sendmmsg+0x10/0x10 [ 156.702210][ T6689] ? ksys_write+0x190/0x250 [ 156.702254][ T6689] ? fput+0x79/0x100 [ 156.702272][ T6689] ? ksys_write+0x1ac/0x250 [ 156.702299][ T6689] ? __pfx_ksys_write+0x10/0x10 [ 156.702331][ T6689] __x64_sys_sendmmsg+0x9c/0x100 [ 156.702352][ T6689] ? lockdep_hardirqs_on+0x78/0x100 [ 156.702382][ T6689] do_syscall_64+0x115/0x840 [ 156.702397][ T6689] ? clear_bhb_loop+0x40/0x90 [ 156.702419][ T6689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.702438][ T6689] RIP: 0033:0x7f5f2eb9de59 [ 156.702454][ T6689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.702471][ T6689] RSP: 002b:00007f5f2f9b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 156.702489][ T6689] RAX: ffffffffffffffda RBX: 00007f5f2ee25fa0 RCX: 00007f5f2eb9de59 [ 156.702500][ T6689] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 156.702511][ T6689] RBP: 00007f5f2f9b5090 R08: 0000000000000000 R09: 0000000000000000 [ 156.702521][ T6689] R10: 000000000000006a R11: 0000000000000246 R12: 0000000000000001 [ 156.702532][ T6689] R13: 00007f5f2ee26038 R14: 00007f5f2ee25fa0 R15: 00007ffc384a7a18 [ 156.702554][ T6689] [ 159.560665][ T6739] ubi0: attaching mtd0 [ 159.698042][ T6739] ubi0: scanning is finished [ 159.754797][ T6739] ubi0: empty MTD device detected [ 159.857144][ T6738] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 161.076389][ T6739] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 161.265106][ T6739] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 161.394846][ T6739] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 161.611791][ T6739] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 161.852736][ T6781] FAULT_INJECTION: forcing a failure. [ 161.852736][ T6781] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.901957][ T6739] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 161.933522][ T6781] CPU: 0 UID: 0 PID: 6781 Comm: syz.2.184 Tainted: G L syzkaller #0 PREEMPT(full) [ 161.933553][ T6781] Tainted: [L]=SOFTLOCKUP [ 161.933560][ T6781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 161.933570][ T6781] Call Trace: [ 161.933576][ T6781] [ 161.933583][ T6781] dump_stack_lvl+0x100/0x190 [ 161.933609][ T6781] should_fail_ex.cold+0x5/0xa [ 161.933630][ T6781] _copy_from_iter+0x1f4/0x1690 [ 161.933658][ T6781] ? process_measurement+0x4c8/0x2350 [ 161.933676][ T6781] ? process_measurement+0x4c8/0x2350 [ 161.933695][ T6781] ? __pfx__copy_from_iter+0x10/0x10 [ 161.933722][ T6781] ? up_write+0x2e5/0x5c0 [ 161.933738][ T6781] ? aa_label_sk_perm+0x194/0x5f0 [ 161.933765][ T6781] ping_common_sendmsg+0xc4/0x2e0 [ 161.933787][ T6781] ping_v6_sendmsg+0x1fa/0x1600 [ 161.933811][ T6781] ? __pfx_ping_v6_sendmsg+0x10/0x10 [ 161.933836][ T6781] ? __pfx___might_resched+0x10/0x10 [ 161.933863][ T6781] ? __lock_acquire+0x49f/0x1a40 [ 161.933892][ T6781] ? aa_sk_perm+0x309/0xaa0 [ 161.933923][ T6781] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 161.933952][ T6781] ? __pfx_ping_v6_sendmsg+0x10/0x10 [ 161.933972][ T6781] inet_sendmsg+0x11c/0x140 [ 161.933994][ T6781] ____sys_sendmsg+0x9c9/0xbe0 [ 161.934020][ T6781] ? __pfx_inet_sendmsg+0x10/0x10 [ 161.934042][ T6781] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.934072][ T6781] ? __pfx__kstrtoull+0x10/0x10 [ 161.934094][ T6781] ___sys_sendmsg+0x190/0x1e0 [ 161.934123][ T6781] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.934164][ T6781] ? find_held_lock+0x2b/0x80 [ 161.934199][ T6781] __sys_sendmmsg+0x20c/0x440 [ 161.934223][ T6781] ? __pfx___sys_sendmmsg+0x10/0x10 [ 161.934244][ T6781] ? ksys_write+0x190/0x250 [ 161.934287][ T6781] ? fput+0x79/0x100 [ 161.934306][ T6781] ? ksys_write+0x1ac/0x250 [ 161.934332][ T6781] ? __pfx_ksys_write+0x10/0x10 [ 161.934363][ T6781] __x64_sys_sendmmsg+0x9c/0x100 [ 161.934384][ T6781] ? lockdep_hardirqs_on+0x78/0x100 [ 161.934414][ T6781] do_syscall_64+0x115/0x840 [ 161.934430][ T6781] ? clear_bhb_loop+0x40/0x90 [ 161.934458][ T6781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.934477][ T6781] RIP: 0033:0x7f36b559de59 [ 161.934492][ T6781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.934509][ T6781] RSP: 002b:00007f36b651a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 161.934527][ T6781] RAX: ffffffffffffffda RBX: 00007f36b5825fa0 RCX: 00007f36b559de59 [ 161.934539][ T6781] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 161.934549][ T6781] RBP: 00007f36b651a090 R08: 0000000000000000 R09: 0000000000000000 [ 161.934560][ T6781] R10: 000000000000006a R11: 0000000000000246 R12: 0000000000000001 [ 161.934570][ T6781] R13: 00007f36b5826038 R14: 00007f36b5825fa0 R15: 00007fff039e5ab8 [ 161.934593][ T6781] [ 162.562342][ T6739] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 162.654331][ T6739] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 690522788 [ 162.746638][ T6739] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 162.847769][ T6744] ubi0: detaching mtd0 [ 162.907404][ T6766] ubi0: background thread "ubi_bgt0d" started, PID 6766 [ 163.081549][ T6744] ubi0: mtd0 is detached [ 163.311854][ T6744] Process accounting paused [ 164.089002][ T6787] FAULT_INJECTION: forcing a failure. [ 164.089002][ T6787] name failslab, interval 1, probability 0, space 0, times 0 [ 164.148765][ T6787] CPU: 0 UID: 0 PID: 6787 Comm: syz.0.186 Tainted: G L syzkaller #0 PREEMPT(full) [ 164.148795][ T6787] Tainted: [L]=SOFTLOCKUP [ 164.148802][ T6787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 164.148812][ T6787] Call Trace: [ 164.148818][ T6787] [ 164.148824][ T6787] dump_stack_lvl+0x100/0x190 [ 164.148849][ T6787] should_fail_ex.cold+0x5/0xa [ 164.148870][ T6787] should_failslab+0xc2/0x120 [ 164.148895][ T6787] kmem_cache_alloc_noprof+0x91/0x6a0 [ 164.148916][ T6787] ? __pfx_acct_collect+0x10/0x10 [ 164.148937][ T6787] ? taskstats_exit+0x6d3/0xca0 [ 164.148965][ T6787] taskstats_exit+0x6d3/0xca0 [ 164.148989][ T6787] ? __pfx_acct_update_integrals+0x10/0x10 [ 164.149015][ T6787] ? __pfx_taskstats_exit+0x10/0x10 [ 164.149041][ T6787] ? rcu_read_lock_any_held+0x6a/0xa0 [ 164.149067][ T6787] do_exit+0x65c/0x2ae0 [ 164.149094][ T6787] ? __pfx_do_exit+0x10/0x10 [ 164.149117][ T6787] ? do_raw_spin_lock+0x128/0x260 [ 164.149134][ T6787] ? find_held_lock+0x2b/0x80 [ 164.149155][ T6787] ? get_signal+0x7e0/0x21e0 [ 164.149175][ T6787] do_group_exit+0xd5/0x2a0 [ 164.149201][ T6787] get_signal+0x1ec7/0x21e0 [ 164.149227][ T6787] ? __pfx_get_signal+0x10/0x10 [ 164.149247][ T6787] ? do_futex+0x190/0x440 [ 164.149267][ T6787] arch_do_signal_or_restart+0x91/0x7a0 [ 164.149298][ T6787] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 164.149339][ T6787] exit_to_user_mode_loop+0x139/0x6f0 [ 164.149368][ T6787] ? rcu_is_watching+0x12/0xc0 [ 164.149390][ T6787] do_syscall_64+0x652/0x840 [ 164.149407][ T6787] ? clear_bhb_loop+0x40/0x90 [ 164.149437][ T6787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.149456][ T6787] RIP: 0033:0x7f5f2eb9de59 [ 164.149471][ T6787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.149489][ T6787] RSP: 002b:00007f5f2f9b50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 164.149507][ T6787] RAX: fffffffffffffe00 RBX: 00007f5f2ee25fa8 RCX: 00007f5f2eb9de59 [ 164.149518][ T6787] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5f2ee25fa8 [ 164.149529][ T6787] RBP: 00007f5f2ee25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 164.149539][ T6787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.149550][ T6787] R13: 00007f5f2ee26038 R14: 00007ffc384a7930 R15: 00007ffc384a7a18 [ 164.149572][ T6787] [ 166.703809][ T6862] kafs: addr_prefs: Invalid Command [ 166.710780][ T6851] [U] 0 [ 166.739271][ T6851] [U] ‘QUIÚ [ 168.463797][ T6886] FAULT_INJECTION: forcing a failure. [ 168.463797][ T6886] name failslab, interval 1, probability 0, space 0, times 0 [ 168.600848][ T6886] CPU: 0 UID: 0 PID: 6886 Comm: syz.0.205 Tainted: G L syzkaller #0 PREEMPT(full) [ 168.600879][ T6886] Tainted: [L]=SOFTLOCKUP [ 168.600885][ T6886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 168.600895][ T6886] Call Trace: [ 168.600901][ T6886] [ 168.600909][ T6886] dump_stack_lvl+0x100/0x190 [ 168.600934][ T6886] should_fail_ex.cold+0x5/0xa [ 168.600955][ T6886] should_failslab+0xc2/0x120 [ 168.600979][ T6886] __kmalloc_cache_noprof+0x91/0x6c0 [ 168.601009][ T6886] ? skb_queue_purge_reason+0x2c2/0x420 [ 168.601033][ T6886] ? nfc_genl_rcv_nl_event+0xc1/0x300 [ 168.601059][ T6886] nfc_genl_rcv_nl_event+0xc1/0x300 [ 168.601083][ T6886] notifier_call_chain+0x99/0x3f0 [ 168.601111][ T6886] blocking_notifier_call_chain+0x69/0xa0 [ 168.601137][ T6886] netlink_release+0x167a/0x1ff0 [ 168.601169][ T6886] ? netlink_release+0x1e0/0x1ff0 [ 168.601199][ T6886] ? __pfx_netlink_release+0x10/0x10 [ 168.601229][ T6886] ? __pfx_locks_remove_file+0x10/0x10 [ 168.601252][ T6886] __sock_release+0xb3/0x260 [ 168.601274][ T6886] ? __pfx_sock_close+0x10/0x10 [ 168.601295][ T6886] sock_close+0x1c/0x30 [ 168.601316][ T6886] __fput+0x3ff/0xb50 [ 168.601337][ T6886] ? _raw_spin_unlock_irq+0x23/0x50 [ 168.601366][ T6886] task_work_run+0x150/0x240 [ 168.601392][ T6886] ? __pfx_task_work_run+0x10/0x10 [ 168.601429][ T6886] exit_to_user_mode_loop+0x1d8/0x6f0 [ 168.601459][ T6886] ? rcu_is_watching+0x12/0xc0 [ 168.601481][ T6886] do_syscall_64+0x652/0x840 [ 168.601497][ T6886] ? clear_bhb_loop+0x40/0x90 [ 168.601519][ T6886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.601539][ T6886] RIP: 0033:0x7f5f2eb9de59 [ 168.601555][ T6886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.601572][ T6886] RSP: 002b:00007f5f2f994028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 168.601590][ T6886] RAX: 0000000000000000 RBX: 00007f5f2ee26090 RCX: 00007f5f2eb9de59 [ 168.601601][ T6886] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 168.601611][ T6886] RBP: 00007f5f2ec33e6f R08: 0000000000000000 R09: 0000000000000000 [ 168.601622][ T6886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.601632][ T6886] R13: 00007f5f2ee26128 R14: 00007f5f2ee26090 R15: 00007ffc384a7a18 [ 168.601655][ T6886] [ 170.641803][ T6903] netlink: 'syz.0.207': attribute type 1 has an invalid length. [ 170.940942][ T6910] syz.1.206 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 171.796465][ T6926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.210'. [ 172.261166][ T6930] FAULT_INJECTION: forcing a failure. [ 172.261166][ T6930] name failslab, interval 1, probability 0, space 0, times 0 [ 172.467572][ T30] audit: type=1800 audit(1784178925.646:6): pid=6931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.211" name="lu_gp_id" dev="configfs" ino=15317 res=0 errno=0 [ 172.521122][ T6930] CPU: 0 UID: 0 PID: 6930 Comm: syz.3.210 Tainted: G L syzkaller #0 PREEMPT(full) [ 172.521152][ T6930] Tainted: [L]=SOFTLOCKUP [ 172.521159][ T6930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 172.521169][ T6930] Call Trace: [ 172.521175][ T6930] [ 172.521183][ T6930] dump_stack_lvl+0x100/0x190 [ 172.521209][ T6930] should_fail_ex.cold+0x5/0xa [ 172.521229][ T6930] should_failslab+0xc2/0x120 [ 172.521253][ T6930] __kmalloc_cache_noprof+0x91/0x6c0 [ 172.521284][ T6930] ? dm_open+0x6b/0x150 [ 172.521309][ T6930] dm_open+0x6b/0x150 [ 172.521328][ T6930] ? __pfx_dm_open+0x10/0x10 [ 172.521346][ T6930] misc_open+0x26d/0x450 [ 172.521375][ T6930] ? __pfx_misc_open+0x10/0x10 [ 172.521403][ T6930] chrdev_open+0x234/0x6a0 [ 172.521419][ T6930] ? __pfx_apparmor_file_open+0x10/0x10 [ 172.521438][ T6930] ? __pfx_chrdev_open+0x10/0x10 [ 172.521470][ T6930] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 172.521494][ T6930] do_dentry_open+0x6ab/0x14d0 [ 172.521521][ T6930] ? __pfx_chrdev_open+0x10/0x10 [ 172.521578][ T6930] vfs_open+0x82/0x3f0 [ 172.521603][ T6930] path_openat+0x2873/0x4280 [ 172.521642][ T6930] ? __pfx_path_openat+0x10/0x10 [ 172.521677][ T6930] do_file_open+0x20e/0x430 [ 172.521708][ T6930] ? __pfx_do_file_open+0x10/0x10 [ 172.521754][ T6930] ? alloc_fd+0x471/0x7a0 [ 172.521784][ T6930] ? do_getname+0x191/0x390 [ 172.521807][ T6930] do_sys_openat2+0x10f/0x1e0 [ 172.521829][ T6930] ? __pfx_do_sys_openat2+0x10/0x10 [ 172.521852][ T6930] ? do_raw_spin_lock+0x128/0x260 [ 172.521875][ T6930] __x64_sys_openat+0x12d/0x210 [ 172.521898][ T6930] ? __pfx___x64_sys_openat+0x10/0x10 [ 172.521929][ T6930] do_syscall_64+0x115/0x840 [ 172.521946][ T6930] ? clear_bhb_loop+0x40/0x90 [ 172.521969][ T6930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.521987][ T6930] RIP: 0033:0x7fb50c99de59 [ 172.522004][ T6930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.522021][ T6930] RSP: 002b:00007fb50abd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 172.522039][ T6930] RAX: ffffffffffffffda RBX: 00007fb50cc26180 RCX: 00007fb50c99de59 [ 172.522052][ T6930] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 172.522062][ T6930] RBP: 00007fb50ca33e6f R08: 0000000000000000 R09: 0000000000000000 [ 172.522073][ T6930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.522083][ T6930] R13: 00007fb50cc26218 R14: 00007fb50cc26180 R15: 00007fffebae0498 [ 172.522106][ T6930] [ 173.170134][ T6938] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 174.710543][ T6927] __kmem_cache_create_args(nfsd_file) failed with error -12 [ 174.789158][ T6927] CPU: 0 UID: 0 PID: 6927 Comm: syz.3.210 Tainted: G L syzkaller #0 PREEMPT(full) [ 174.789188][ T6927] Tainted: [L]=SOFTLOCKUP [ 174.789195][ T6927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 174.789205][ T6927] Call Trace: [ 174.789212][ T6927] [ 174.789219][ T6927] dump_stack_lvl+0x100/0x190 [ 174.789243][ T6927] __kmem_cache_create_args.cold+0x33/0x6e [ 174.789275][ T6927] nfsd_file_cache_init+0x138/0x400 [ 174.789299][ T6927] ? net_generic+0xf4/0x2a0 [ 174.789318][ T6927] nfsd_svc+0x5fa/0x840 [ 174.789341][ T6927] nfsd_nl_threads_set_doit+0x76b/0x1100 [ 174.789381][ T6927] genl_family_rcv_msg_doit+0x214/0x300 [ 174.789403][ T6927] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 174.789422][ T6927] ? genl_get_cmd+0x3e7/0x760 [ 174.789455][ T6927] ? bpf_lsm_capable+0x9/0x10 [ 174.789473][ T6927] ? security_capable+0x80/0x260 [ 174.789507][ T6927] genl_rcv_msg+0x560/0x800 [ 174.789528][ T6927] ? __pfx_genl_rcv_msg+0x10/0x10 [ 174.789548][ T6927] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 174.789583][ T6927] netlink_rcv_skb+0x159/0x420 [ 174.789611][ T6927] ? __pfx_genl_rcv_msg+0x10/0x10 [ 174.789629][ T6927] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 174.789666][ T6927] ? netlink_deliver_tap+0x1ae/0xcc0 [ 174.789696][ T6927] genl_rcv+0x28/0x40 [ 174.789711][ T6927] netlink_unicast+0x585/0x850 [ 174.789742][ T6927] ? __pfx_netlink_unicast+0x10/0x10 [ 174.789776][ T6927] netlink_sendmsg+0x8b0/0xda0 [ 174.789807][ T6927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.789837][ T6927] ? apparmor_socket_sendmsg+0x15b/0x270 [ 174.789869][ T6927] ____sys_sendmsg+0xa4d/0xbe0 [ 174.789895][ T6927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.789924][ T6927] ? __pfx_____sys_sendmsg+0x10/0x10 [ 174.789956][ T6927] ? plist_check_list+0x1b8/0x280 [ 174.789979][ T6927] ? plist_del+0x308/0x510 [ 174.790004][ T6927] ___sys_sendmsg+0x190/0x1e0 [ 174.790033][ T6927] ? __pfx____sys_sendmsg+0x10/0x10 [ 174.790058][ T6927] ? __lock_acquire+0x49f/0x1a40 [ 174.790085][ T6927] ? futex_wake+0x220/0x5e0 [ 174.790132][ T6927] __sys_sendmsg+0x160/0x210 [ 174.790153][ T6927] ? __pfx___sys_sendmsg+0x10/0x10 [ 174.790186][ T6927] do_syscall_64+0x115/0x840 [ 174.790202][ T6927] ? clear_bhb_loop+0x40/0x90 [ 174.790223][ T6927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.790242][ T6927] RIP: 0033:0x7fb50c99de59 [ 174.790259][ T6927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.790276][ T6927] RSP: 002b:00007fb50abf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.790294][ T6927] RAX: ffffffffffffffda RBX: 00007fb50cc26090 RCX: 00007fb50c99de59 [ 174.790305][ T6927] RDX: 000000000000c840 RSI: 0000200000000140 RDI: 000000000000000a [ 174.790316][ T6927] RBP: 00007fb50ca33e6f R08: 0000000000000000 R09: 0000000000000000 [ 174.790326][ T6927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.790336][ T6927] R13: 00007fb50cc26128 R14: 00007fb50cc26090 R15: 00007fffebae0498 [ 174.790365][ T6927] [ 176.451584][ T6927] nfsd: unable to create nfsd_file_slab [ 181.675967][ T7029] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 181.711084][ T7029] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 181.863403][ T7029] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 181.909813][ T7029] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 181.954990][ T7029] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 181.999617][ T7041] pim6reg: entered allmulticast mode [ 182.014967][ T7029] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 182.063342][ T7029] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 182.097950][ T7029] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 182.155433][ T7029] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 182.214562][ T7029] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 182.239602][ T7029] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 182.295939][ T7029] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 183.602702][ T4942] Bluetooth: hci0: command 0x0c1a tx timeout [ 183.922715][ T4942] Bluetooth: hci1: command 0x0c1a tx timeout [ 184.021140][ T7071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.239'. [ 184.083728][ T4942] Bluetooth: hci2: command 0x0c1a tx timeout [ 184.242260][ T4942] Bluetooth: hci3: command 0x0c1a tx timeout [ 185.089646][ T7092] synth uevent: /devices/virtual/block/nbd6: unknown uevent action string [ 185.167971][ T7092] block nbd6: uevent: failed to send synthetic uevent: -22 [ 185.682192][ T4942] Bluetooth: hci0: command 0x0c1a tx timeout [ 186.004125][ T4942] Bluetooth: hci1: command 0x0c1a tx timeout [ 186.162525][ T4942] Bluetooth: hci2: command 0x0c1a tx timeout [ 186.322505][ T4942] Bluetooth: hci3: command 0x0c1a tx timeout [ 186.549994][ T7113] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 186.592287][ T7113] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 186.637385][ T7113] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 187.762578][ T4942] Bluetooth: hci0: command 0x0c1a tx timeout [ 188.088341][ T4942] Bluetooth: hci1: command 0x0c1a tx timeout [ 188.242403][ T4942] Bluetooth: hci2: command 0x0c1a tx timeout [ 188.404096][ T4942] Bluetooth: hci3: command 0x0c1a tx timeout [ 189.617392][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.253'. [ 190.450633][ T7179] sg_write: data in/out 65758/28903 bytes for SCSI command 0x0-- guessing data in; [ 190.450633][ T7179] program syz.2.256 not setting count and/or reply_len properly [ 194.965674][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.974386][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.856415][ T6755] syz.1.178 (6755) used greatest stack depth: 19400 bytes left [ 197.341733][ T7221] Process accounting resumed [ 197.598849][ T7291] netlink: 28 bytes leftover after parsing attributes in process `syz.0.277'. [ 197.755622][ T6157] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.820606][ T7291] virt_wifi0: entered allmulticast mode [ 199.826852][ T7328] vhci_hcd vhci_hcd.1: invalid port number 16 [ 199.852263][ T7328] vhci_hcd vhci_hcd.1: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 199.993403][ T6763] syz.1.178 (6763) used greatest stack depth: 19232 bytes left [ 200.705152][ T7342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.289'. [ 204.049641][ T7410] FAULT_INJECTION: forcing a failure. [ 204.049641][ T7410] name failslab, interval 1, probability 0, space 0, times 0 [ 204.124538][ T7410] CPU: 0 UID: 0 PID: 7410 Comm: syz.2.303 Tainted: G L syzkaller #0 PREEMPT(full) [ 204.124570][ T7410] Tainted: [L]=SOFTLOCKUP [ 204.124576][ T7410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 204.124586][ T7410] Call Trace: [ 204.124593][ T7410] [ 204.124600][ T7410] dump_stack_lvl+0x100/0x190 [ 204.124627][ T7410] should_fail_ex.cold+0x5/0xa [ 204.124648][ T7410] should_failslab+0xc2/0x120 [ 204.124673][ T7410] __kmalloc_cache_noprof+0x91/0x6c0 [ 204.124703][ T7410] ? trace_pid_list_alloc+0x232/0x480 [ 204.124732][ T7410] trace_pid_list_alloc+0x232/0x480 [ 204.124759][ T7410] trace_pid_write+0x110/0x460 [ 204.124785][ T7410] ? __pfx_trace_pid_write+0x10/0x10 [ 204.124823][ T7410] event_pid_write.isra.0+0x1e4/0x7d0 [ 204.124852][ T7410] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 204.124884][ T7410] vfs_write+0x2aa/0x1050 [ 204.124912][ T7410] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 204.124941][ T7410] ? __pfx_vfs_write+0x10/0x10 [ 204.124969][ T7410] ? __pfx_do_futex+0x10/0x10 [ 204.124985][ T7410] ? __pfx_do_sys_openat2+0x10/0x10 [ 204.125013][ T7410] ? __x64_sys_futex+0x34f/0x4d0 [ 204.125030][ T7410] ? __x64_sys_futex+0x358/0x4d0 [ 204.125050][ T7410] ksys_write+0x12a/0x250 [ 204.125077][ T7410] ? __pfx_ksys_write+0x10/0x10 [ 204.125110][ T7410] do_syscall_64+0x115/0x840 [ 204.125127][ T7410] ? clear_bhb_loop+0x40/0x90 [ 204.125149][ T7410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.125168][ T7410] RIP: 0033:0x7f36b559de59 [ 204.125185][ T7410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.125202][ T7410] RSP: 002b:00007f36b651a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 204.125219][ T7410] RAX: ffffffffffffffda RBX: 00007f36b5825fa0 RCX: 00007f36b559de59 [ 204.125231][ T7410] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 204.125249][ T7410] RBP: 00007f36b5633e6f R08: 0000000000000000 R09: 0000000000000000 [ 204.125259][ T7410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.125269][ T7410] R13: 00007f36b5826038 R14: 00007f36b5825fa0 R15: 00007fff039e5ab8 [ 204.125292][ T7410] [ 205.955591][ T7439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.309'. [ 206.170177][ T7441] netlink: 16 bytes leftover after parsing attributes in process `syz.2.309'. [ 206.318678][ T7444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.310'. [ 207.036649][ T7419] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 207.485045][ T7449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.311'. [ 210.246153][ T7483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.316'. [ 211.400696][ T7493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.319'. [ 211.882343][ T7505] FAULT_INJECTION: forcing a failure. [ 211.882343][ T7505] name failslab, interval 1, probability 0, space 0, times 0 [ 212.058284][ T7505] CPU: 0 UID: 0 PID: 7505 Comm: syz.1.321 Tainted: G L syzkaller #0 PREEMPT(full) [ 212.058316][ T7505] Tainted: [L]=SOFTLOCKUP [ 212.058323][ T7505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 212.058333][ T7505] Call Trace: [ 212.058340][ T7505] [ 212.058347][ T7505] dump_stack_lvl+0x100/0x190 [ 212.058373][ T7505] should_fail_ex.cold+0x5/0xa [ 212.058395][ T7505] should_failslab+0xc2/0x120 [ 212.058419][ T7505] kmem_cache_alloc_noprof+0x91/0x6a0 [ 212.058438][ T7505] ? stack_trace_save+0x8e/0xc0 [ 212.058462][ T7505] ? alloc_empty_file+0x5b/0x1c0 [ 212.058487][ T7505] alloc_empty_file+0x5b/0x1c0 [ 212.058509][ T7505] path_openat+0xe7/0x4280 [ 212.058537][ T7505] ? __kasan_slab_alloc+0x89/0x90 [ 212.058558][ T7505] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 212.058576][ T7505] ? do_getname+0x35/0x390 [ 212.058595][ T7505] ? do_sys_openat2+0xc7/0x1e0 [ 212.058615][ T7505] ? __x64_sys_openat+0x12d/0x210 [ 212.058635][ T7505] ? do_syscall_64+0x115/0x840 [ 212.058651][ T7505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.058676][ T7505] ? __pfx_path_openat+0x10/0x10 [ 212.058710][ T7505] do_file_open+0x20e/0x430 [ 212.058741][ T7505] ? __pfx_do_file_open+0x10/0x10 [ 212.058784][ T7505] ? alloc_fd+0x471/0x7a0 [ 212.058813][ T7505] ? do_getname+0x191/0x390 [ 212.058836][ T7505] do_sys_openat2+0x10f/0x1e0 [ 212.058859][ T7505] ? __pfx_do_sys_openat2+0x10/0x10 [ 212.058888][ T7505] __x64_sys_openat+0x12d/0x210 [ 212.058911][ T7505] ? __pfx___x64_sys_openat+0x10/0x10 [ 212.058960][ T7505] do_syscall_64+0x115/0x840 [ 212.058976][ T7505] ? clear_bhb_loop+0x40/0x90 [ 212.058997][ T7505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.059016][ T7505] RIP: 0033:0x7f4eb819de59 [ 212.059032][ T7505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.059050][ T7505] RSP: 002b:00007f4eb8fbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 212.059068][ T7505] RAX: ffffffffffffffda RBX: 00007f4eb8426180 RCX: 00007f4eb819de59 [ 212.059079][ T7505] RDX: 0000000000000080 RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 212.059089][ T7505] RBP: 00007f4eb8233e6f R08: 0000000000000000 R09: 0000000000000000 [ 212.059100][ T7505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.059110][ T7505] R13: 00007f4eb8426218 R14: 00007f4eb8426180 R15: 00007ffff6c185b8 [ 212.059132][ T7505] [ 215.123161][ T7523] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 215.185604][ T7523] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 215.242816][ T7523] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 215.321476][ T7523] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 216.046452][ T7540] netlink: 28 bytes leftover after parsing attributes in process `syz.1.328'. [ 216.962546][ T4942] Bluetooth: hci0: command 0x0c1a tx timeout [ 217.202474][ T4942] Bluetooth: hci1: command 0x0c1a tx timeout [ 217.282563][ T4942] Bluetooth: hci2: command 0x0c1a tx timeout [ 217.362474][ T4942] Bluetooth: hci3: command 0x0c1a tx timeout [ 217.906705][ T7566] can0: slcan on ptm0. [ 218.809728][ T7564] can0 (unregistered): slcan off ptm0. [ 219.889239][ T5628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 219.906028][ T5628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 219.915768][ T5628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 219.934109][ T5628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 219.948466][ T5628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 220.269133][ T7584] netlink: 186 bytes leftover after parsing attributes in process `syz.2.338'. [ 222.083434][ T5628] Bluetooth: hci4: command tx timeout [ 223.279201][ T7663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.347'. [ 224.026580][ T7595] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.067655][ T7595] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.123444][ T7595] bridge_slave_0: entered allmulticast mode [ 224.167475][ T5628] Bluetooth: hci4: command tx timeout [ 224.183004][ T7595] bridge_slave_0: entered promiscuous mode [ 224.238802][ T7595] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.285688][ T7595] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.326096][ T7595] bridge_slave_1: entered allmulticast mode [ 224.366196][ T7595] bridge_slave_1: entered promiscuous mode [ 224.521372][ T7595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.640466][ T7595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.056086][ T7595] team0: Port device team_slave_0 added [ 225.096736][ T7595] team0: Port device team_slave_1 added [ 225.360116][ T7595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.372667][ T7691] Process accounting resumed [ 225.428550][ T7595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.572371][ T7595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.807186][ T7595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.847203][ T7595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.960362][ T7595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.198786][ T7595] hsr_slave_0: entered promiscuous mode [ 226.233968][ T7595] hsr_slave_1: entered promiscuous mode [ 226.248150][ T5628] Bluetooth: hci4: command tx timeout [ 226.286381][ T7595] debugfs: 'hsr0' already exists in 'hsr' [ 226.332478][ T7595] Cannot create hsr debugfs directory [ 226.727755][ T7710] vivid-007: ================= START STATUS ================= [ 226.777085][ T7710] vivid-007: Generate PTS: true [ 226.813951][ T7710] vivid-007: Generate SCR: true [ 226.853760][ T7710] tpg source WxH: 320x240 (Y'CbCr) [ 226.892322][ T7710] tpg field: 1 [ 226.930204][ T7710] tpg crop: (0,0)/320x240 [ 226.966527][ T7710] tpg compose: (0,0)/320x240 [ 227.057663][ T7710] tpg colorspace: 8 [ 227.116777][ T7710] tpg transfer function: 0/0 [ 227.150724][ T7710] tpg Y'CbCr encoding: 0/0 [ 227.185500][ T7710] tpg quantization: 0/0 [ 227.211399][ T7710] tpg RGB range: 0/2 [ 227.240657][ T7710] vivid-007: ================== END STATUS ================== [ 227.416265][ T7721] bridge0: port 3(veth1) entered blocking state [ 227.456476][ T7721] bridge0: port 3(veth1) entered disabled state [ 227.500385][ T7721] veth1: entered allmulticast mode [ 227.561453][ T7721] veth1: entered promiscuous mode [ 227.598230][ T7721] bridge0: port 3(veth1) entered blocking state [ 227.604669][ T7721] bridge0: port 3(veth1) entered forwarding state [ 228.323344][ T5628] Bluetooth: hci4: command tx timeout [ 228.500985][ T6159] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.837090][ T7595] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 228.909927][ T7595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 228.936633][ T7595] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 228.973103][ T7595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 229.049876][ T6159] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.115662][ T7595] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 229.161267][ T7595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 229.223848][ T7595] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 229.266024][ T7595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 229.395317][ T6159] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.605753][ T6159] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.671420][ T7759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.368'. [ 229.844865][ T7759] FAULT_INJECTION: forcing a failure. [ 229.844865][ T7759] name failslab, interval 1, probability 0, space 0, times 0 [ 229.880693][ T7721] Process accounting paused [ 229.954658][ T30] audit: type=1804 audit(1784178983.076:7): pid=7765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.366" name="/newroot/93/file0" dev="tmpfs" ino=506 res=1 errno=0 [ 230.023392][ T7759] CPU: 0 UID: 0 PID: 7759 Comm: syz.2.368 Tainted: G L syzkaller #0 PREEMPT(full) [ 230.023423][ T7759] Tainted: [L]=SOFTLOCKUP [ 230.023430][ T7759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 230.023440][ T7759] Call Trace: [ 230.023446][ T7759] [ 230.023453][ T7759] dump_stack_lvl+0x100/0x190 [ 230.023478][ T7759] should_fail_ex.cold+0x5/0xa [ 230.023500][ T7759] should_failslab+0xc2/0x120 [ 230.023524][ T7759] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 230.023548][ T7759] ? __d_alloc+0x35/0xa50 [ 230.023573][ T7759] __d_alloc+0x35/0xa50 [ 230.023594][ T7759] d_alloc+0x4a/0x1e0 [ 230.023613][ T7759] lookup_one_qstr_excl+0x171/0x250 [ 230.023637][ T7759] start_dirop+0x59/0xb0 [ 230.023664][ T7759] simple_start_creating+0xf9/0x110 [ 230.023693][ T7759] ? __pfx_simple_start_creating+0x10/0x10 [ 230.023722][ T7759] ? mntput+0x70/0xa0 [ 230.023746][ T7759] ? simple_pin_fs+0xa3/0x190 [ 230.023773][ T7759] debugfs_start_creating.part.0+0x82/0x170 [ 230.023798][ T7759] __debugfs_create_file+0xb3/0x4f0 [ 230.023825][ T7759] debugfs_create_file_full+0x41/0x60 [ 230.023851][ T7759] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 230.023879][ T7759] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 230.023904][ T7759] ? ida_alloc_range+0x70d/0x830 [ 230.023939][ T7759] ? kasan_save_track+0x14/0x30 [ 230.023959][ T7759] ? __kasan_kmalloc+0xaa/0xb0 [ 230.023980][ T7759] ? lockdep_init_map_type+0x5c/0x250 [ 230.024012][ T7759] preinit_net.part.0+0x252/0x920 [ 230.024037][ T7759] copy_net_ns+0x339/0x7c0 [ 230.024064][ T7759] create_new_namespaces+0x3ea/0xac0 [ 230.024099][ T7759] unshare_nsproxy_namespaces+0xf2/0x220 [ 230.024119][ T7759] ksys_unshare+0x438/0xab0 [ 230.024142][ T7759] ? __pfx_ksys_unshare+0x10/0x10 [ 230.024179][ T7759] __x64_sys_unshare+0x31/0x40 [ 230.024200][ T7759] do_syscall_64+0x115/0x840 [ 230.024216][ T7759] ? clear_bhb_loop+0x40/0x90 [ 230.024238][ T7759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.024256][ T7759] RIP: 0033:0x7f36b559de59 [ 230.024273][ T7759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.024291][ T7759] RSP: 002b:00007f36b651a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 230.024309][ T7759] RAX: ffffffffffffffda RBX: 00007f36b5825fa0 RCX: 00007f36b559de59 [ 230.024320][ T7759] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 230.024330][ T7759] RBP: 00007f36b5633e6f R08: 0000000000000000 R09: 0000000000000000 [ 230.024341][ T7759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.024351][ T7759] R13: 00007f36b5826038 R14: 00007f36b5825fa0 R15: 00007fff039e5ab8 [ 230.024373][ T7759] [ 230.354922][ T7595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.370360][ T7595] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.400972][ T7595] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 230.411778][ T7595] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.570752][ T6165] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.577973][ T6165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.601840][ T6165] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.609082][ T6165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.661279][ T7806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.374'. [ 231.743682][ T6159] team0: left allmulticast mode [ 231.749839][ T6159] team_slave_0: left allmulticast mode [ 231.775172][ T6159] team_slave_1: left allmulticast mode [ 231.809013][ T6159] team0: left promiscuous mode [ 231.846523][ T6159] team_slave_0: left promiscuous mode [ 231.881451][ T6159] team_slave_1: left promiscuous mode [ 231.917467][ T6159] bridge0: port 3(team0) entered disabled state [ 231.986408][ T6159] bridge_slave_1: left allmulticast mode [ 231.986444][ T6159] bridge_slave_1: left promiscuous mode [ 231.986604][ T6159] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.006583][ T6159] bridge_slave_0: left allmulticast mode [ 232.006610][ T6159] bridge_slave_0: left promiscuous mode [ 232.006758][ T6159] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.555810][ T6159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.586119][ T6159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.634745][ T6159] bond0 (unregistering): Released all slaves [ 232.669127][ T7814] netlink: 28 bytes leftover after parsing attributes in process `syz.3.375'. [ 232.718119][ T7815] netlink: 28 bytes leftover after parsing attributes in process `syz.3.375'. [ 232.759756][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 232.806393][ T7814] bond0: entered promiscuous mode [ 232.847975][ T7814] bond_slave_0: entered promiscuous mode [ 232.872035][ T7814] bond_slave_1: entered promiscuous mode [ 232.979002][ T6159] tipc: Left network mode [ 233.186761][ T7595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.750741][ T6159] hsr_slave_0: left promiscuous mode [ 233.783916][ T6159] hsr_slave_1: left promiscuous mode [ 233.810085][ T6159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.859548][ T6159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.911035][ T6159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.958522][ T6159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.065546][ T6159] veth1_macvtap: left promiscuous mode [ 234.086368][ T7839] vhci_hcd: not connected 4 [ 234.094512][ T6159] veth0_macvtap: left promiscuous mode [ 234.963651][ T6159] team0 (unregistering): Port device team_slave_1 removed [ 235.000686][ T6159] team0 (unregistering): Port device team_slave_0 removed [ 235.205288][ T6159] smc: removing net device dummy0 with user defined pnetid DUMMY0 [ 235.313402][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 237.247355][ T5287] 8021q: adding VLAN 0 to HW filter on device eth4 [ 237.532044][ T7595] veth0_vlan: entered promiscuous mode [ 237.923220][ T7595] veth1_vlan: entered promiscuous mode [ 238.393894][ T7595] veth0_macvtap: entered promiscuous mode [ 238.581169][ T7595] veth1_macvtap: entered promiscuous mode [ 239.255582][ T7595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.419440][ T7595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.493285][ T7919] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 239.515053][ T7939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.384'. [ 239.528216][ T7919] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 239.548441][ T7919] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 239.577136][ T7919] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 239.600051][ T7919] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 239.703654][ T7942] FAULT_INJECTION: forcing a failure. [ 239.703654][ T7942] name failslab, interval 1, probability 0, space 0, times 0 [ 239.719248][ T7919] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 239.767101][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 239.793350][ T6156] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.831051][ T6156] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.843835][ T7942] CPU: 0 UID: 0 PID: 7942 Comm: syz.3.384 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.843868][ T7942] Tainted: [L]=SOFTLOCKUP [ 239.843875][ T7942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 239.843885][ T7942] Call Trace: [ 239.843891][ T7942] [ 239.843898][ T7942] dump_stack_lvl+0x100/0x190 [ 239.843925][ T7942] should_fail_ex.cold+0x5/0xa [ 239.843946][ T7942] should_failslab+0xc2/0x120 [ 239.843973][ T7942] __kmalloc_noprof+0xfc/0x820 [ 239.843994][ T7942] ? tomoyo_encode2+0xfb/0x3c0 [ 239.844023][ T7942] tomoyo_encode2+0xfb/0x3c0 [ 239.844058][ T7942] tomoyo_encode+0x29/0x50 [ 239.844083][ T7942] tomoyo_realpath_from_path+0x18c/0x690 [ 239.844114][ T7942] tomoyo_check_open_permission+0x2af/0x3c0 [ 239.844143][ T7942] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 239.844171][ T7942] ? hook_file_open+0x24f/0x8f0 [ 239.844209][ T7942] ? path_get+0x61/0x80 [ 239.844230][ T7942] tomoyo_file_open+0x6b/0x90 [ 239.844259][ T7942] security_file_open+0xb5/0x1e0 [ 239.844283][ T7942] do_dentry_open+0x588/0x14d0 [ 239.844317][ T7942] vfs_open+0x82/0x3f0 [ 239.844342][ T7942] path_openat+0x2873/0x4280 [ 239.844381][ T7942] ? __pfx_path_openat+0x10/0x10 [ 239.844415][ T7942] do_file_open+0x20e/0x430 [ 239.844446][ T7942] ? __pfx_do_file_open+0x10/0x10 [ 239.844491][ T7942] ? alloc_fd+0x471/0x7a0 [ 239.844521][ T7942] ? do_getname+0x191/0x390 [ 239.844544][ T7942] do_sys_openat2+0x10f/0x1e0 [ 239.844566][ T7942] ? __pfx_do_sys_openat2+0x10/0x10 [ 239.844589][ T7942] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 239.844625][ T7942] __x64_sys_openat+0x12d/0x210 [ 239.844648][ T7942] ? __pfx___x64_sys_openat+0x10/0x10 [ 239.844680][ T7942] do_syscall_64+0x115/0x840 [ 239.844695][ T7942] ? clear_bhb_loop+0x40/0x90 [ 239.844717][ T7942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.844735][ T7942] RIP: 0033:0x7fb50c99de59 [ 239.844752][ T7942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.844769][ T7942] RSP: 002b:00007fb50abd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 239.844787][ T7942] RAX: ffffffffffffffda RBX: 00007fb50cc26180 RCX: 00007fb50c99de59 [ 239.844799][ T7942] RDX: 0000000000000201 RSI: 0000200000000540 RDI: ffffffffffffff9c [ 239.844809][ T7942] RBP: 00007fb50ca33e6f R08: 0000000000000000 R09: 0000000000000000 [ 239.844820][ T7942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.844830][ T7942] R13: 00007fb50cc26218 R14: 00007fb50cc26180 R15: 00007fffebae0498 [ 239.844853][ T7942] [ 239.844882][ T7942] ERROR: Out of memory at tomoyo_realpath_from_path. [ 240.726993][ T6156] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.841233][ T6156] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.122263][ T5628] Bluetooth: hci1: command 0x0c1a tx timeout [ 241.288423][ T6163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.339369][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 241.347474][ T6163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.357819][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 241.602432][ T5628] Bluetooth: hci4: command 0x0c1a tx timeout [ 241.608547][ T4942] Bluetooth: hci3: command 0x0c1a tx timeout [ 241.614596][ T5636] Bluetooth: hci2: command 0x0c1a tx timeout [ 241.893597][ T6157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.957340][ T6157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.419139][ T7960] Process accounting resumed [ 243.265561][ T8004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.395'. [ 243.682481][ T5628] Bluetooth: hci4: command 0x0c1a tx timeout [ 245.763378][ T5628] Bluetooth: hci4: command 0x0c1a tx timeout [ 246.241822][ T8058] nvme_fabrics: missing parameter 'transport=%s' [ 246.266954][ T8058] nvme_fabrics: missing parameter 'nqn=%s' [ 246.635851][ T8071] cifs: Unknown parameter 'no+ 1§• Ö`ÑørêsFn)ÈøaõH†šÄ¿¡h`àØÝë9k¤A}€žŠ1\D@‹Ç.ÁäZÔCg^‚' [ 246.636095][ T8070] cifs: Unknown parameter 'no+ 1§• Ö`ÑørêsFn)ÈøaõH†šÄ¿¡h`àØÝë9k¤A}€žŠ1\D@‹Ç.ÁäZÔCg^‚' [ 246.911275][ T8074] FAULT_INJECTION: forcing a failure. [ 246.911275][ T8074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.911313][ T8074] CPU: 0 UID: 0 PID: 8074 Comm: syz.3.408 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.911339][ T8074] Tainted: [L]=SOFTLOCKUP [ 246.911345][ T8074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 246.911355][ T8074] Call Trace: [ 246.911361][ T8074] [ 246.911368][ T8074] dump_stack_lvl+0x100/0x190 [ 246.911393][ T8074] should_fail_ex.cold+0x5/0xa [ 246.911413][ T8074] _copy_from_user+0x2e/0xd0 [ 246.911439][ T8074] memdup_user+0x6b/0xe0 [ 246.911460][ T8074] strndup_user+0x78/0xe0 [ 246.911480][ T8074] __x64_sys_mount+0x136/0x310 [ 246.911501][ T8074] ? __pfx___x64_sys_mount+0x10/0x10 [ 246.911528][ T8074] do_syscall_64+0x115/0x840 [ 246.911544][ T8074] ? clear_bhb_loop+0x40/0x90 [ 246.911566][ T8074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.911584][ T8074] RIP: 0033:0x7fb50c99de59 [ 246.911600][ T8074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.911625][ T8074] RSP: 002b:00007fb50abf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 246.911643][ T8074] RAX: ffffffffffffffda RBX: 00007fb50cc26090 RCX: 00007fb50c99de59 [ 246.911654][ T8074] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000000000000000 [ 246.911665][ T8074] RBP: 00007fb50ca33e6f R08: 0000000000000000 R09: 0000000000000000 [ 246.911675][ T8074] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 246.911685][ T8074] R13: 00007fb50cc26128 R14: 00007fb50cc26090 R15: 00007fffebae0498 [ 246.911710][ T8074] [ 247.130403][ T8082] netlink: 342 bytes leftover after parsing attributes in process `syz.2.410'. [ 249.769257][ T8114] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 249.797499][ T8114] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 249.828190][ T8114] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 249.854641][ T8114] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 251.045799][ T8154] can: request_module (can-proto-4) failed. [ 251.362537][ T5628] Bluetooth: hci1: command 0x0c1a tx timeout [ 251.842225][ T4942] Bluetooth: hci2: command 0x0c1a tx timeout [ 251.848402][ T5628] Bluetooth: hci3: command 0x0c1a tx timeout [ 251.925426][ T5628] Bluetooth: hci4: command 0x0c1a tx timeout [ 256.105077][ T8220] Process accounting paused [ 256.223804][ T8270] FAULT_INJECTION: forcing a failure. [ 256.223804][ T8270] name failslab, interval 1, probability 0, space 0, times 0 [ 256.330441][ T8270] CPU: 0 UID: 0 PID: 8270 Comm: syz.4.439 Tainted: G L syzkaller #0 PREEMPT(full) [ 256.330472][ T8270] Tainted: [L]=SOFTLOCKUP [ 256.330479][ T8270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 256.330489][ T8270] Call Trace: [ 256.330496][ T8270] [ 256.330503][ T8270] dump_stack_lvl+0x100/0x190 [ 256.330529][ T8270] should_fail_ex.cold+0x5/0xa [ 256.330549][ T8270] should_failslab+0xc2/0x120 [ 256.330573][ T8270] kmem_cache_alloc_noprof+0x91/0x6a0 [ 256.330593][ T8270] ? stack_trace_save+0x8e/0xc0 [ 256.330617][ T8270] ? alloc_empty_file+0x5b/0x1c0 [ 256.330642][ T8270] alloc_empty_file+0x5b/0x1c0 [ 256.330664][ T8270] path_openat+0xe7/0x4280 [ 256.330691][ T8270] ? __kasan_slab_alloc+0x89/0x90 [ 256.330712][ T8270] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 256.330730][ T8270] ? do_getname+0x35/0x390 [ 256.330748][ T8270] ? do_sys_openat2+0xc7/0x1e0 [ 256.330768][ T8270] ? __x64_sys_openat+0x12d/0x210 [ 256.330788][ T8270] ? do_syscall_64+0x115/0x840 [ 256.330805][ T8270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.330830][ T8270] ? __pfx_path_openat+0x10/0x10 [ 256.330864][ T8270] do_file_open+0x20e/0x430 [ 256.330894][ T8270] ? __pfx_do_file_open+0x10/0x10 [ 256.330938][ T8270] ? alloc_fd+0x471/0x7a0 [ 256.330970][ T8270] ? do_getname+0x191/0x390 [ 256.331000][ T8270] do_sys_openat2+0x10f/0x1e0 [ 256.331023][ T8270] ? __pfx_do_sys_openat2+0x10/0x10 [ 256.331046][ T8270] ? fdget+0x18b/0x210 [ 256.331077][ T8270] __x64_sys_openat+0x12d/0x210 [ 256.331100][ T8270] ? __pfx___x64_sys_openat+0x10/0x10 [ 256.331131][ T8270] do_syscall_64+0x115/0x840 [ 256.331146][ T8270] ? clear_bhb_loop+0x40/0x90 [ 256.331168][ T8270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.331187][ T8270] RIP: 0033:0x7f769219de59 [ 256.331202][ T8270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.331220][ T8270] RSP: 002b:00007f7693045028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 256.331238][ T8270] RAX: ffffffffffffffda RBX: 00007f7692425fa0 RCX: 00007f769219de59 [ 256.331250][ T8270] RDX: 0000000000088000 RSI: 0000200000001a00 RDI: ffffffffffffff9c [ 256.331260][ T8270] RBP: 00007f7692233e6f R08: 0000000000000000 R09: 0000000000000000 [ 256.331271][ T8270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.331281][ T8270] R13: 00007f7692426038 R14: 00007f7692425fa0 R15: 00007ffcf9f18cd8 [ 256.331304][ T8270] [ 256.820552][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.827140][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.877250][ T8288] blktrace: Concurrent blktraces are not allowed on nbd5 [ 258.101159][ T8312] vivid-007: ================= START STATUS ================= [ 258.201314][ T8312] vivid-007: Generate PTS: true [ 258.258293][ T8312] vivid-007: Generate SCR: true [ 258.315499][ T8312] tpg source WxH: 320x240 (Y'CbCr) [ 258.370184][ T8312] tpg field: 1 [ 258.386797][ T8312] tpg crop: (0,0)/320x240 [ 258.415742][ T8312] tpg compose: (0,0)/320x240 [ 258.449666][ T8312] tpg colorspace: 8 [ 258.501473][ T8312] tpg transfer function: 0/0 [ 258.541446][ T8312] tpg Y'CbCr encoding: 0/0 [ 258.578578][ T8312] tpg quantization: 0/0 [ 258.601333][ T8312] tpg RGB range: 0/2 [ 258.658846][ T8312] vivid-007: ================== END STATUS ================== [ 260.275135][ T8370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.456'. [ 260.928941][ T8337] Process accounting resumed [ 262.281979][ T8428] netlink: 28 bytes leftover after parsing attributes in process `syz.1.460'. [ 264.980417][ T8469] FAULT_INJECTION: forcing a failure. [ 264.980417][ T8469] name fail_futex, interval 1, probability 0, space 0, times 0 [ 265.041680][ T8469] CPU: 0 UID: 0 PID: 8469 Comm: syz.3.471 Tainted: G L syzkaller #0 PREEMPT(full) [ 265.041711][ T8469] Tainted: [L]=SOFTLOCKUP [ 265.041717][ T8469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 265.041728][ T8469] Call Trace: [ 265.041734][ T8469] [ 265.041741][ T8469] dump_stack_lvl+0x100/0x190 [ 265.041767][ T8469] should_fail_ex.cold+0x5/0xa [ 265.041788][ T8469] get_futex_key+0x295/0x14f0 [ 265.041820][ T8469] ? __pfx_get_futex_key+0x10/0x10 [ 265.041849][ T8469] ? lock_acquire+0x1b9/0x370 [ 265.041882][ T8469] futex_wake+0xf4/0x5e0 [ 265.041907][ T8469] ? __pfx_futex_wake+0x10/0x10 [ 265.041929][ T8469] ? find_held_lock+0x2b/0x80 [ 265.041950][ T8469] ? exit_mm_release+0x19/0x30 [ 265.041975][ T8469] do_futex+0x2b2/0x440 [ 265.041994][ T8469] ? __pfx_do_futex+0x10/0x10 [ 265.042018][ T8469] ? __might_fault+0xc5/0x140 [ 265.042041][ T8469] mm_release+0x24a/0x2f0 [ 265.042059][ T8469] do_exit+0x707/0x2ae0 [ 265.042089][ T8469] ? __pfx_do_exit+0x10/0x10 [ 265.042112][ T8469] ? do_raw_spin_lock+0x128/0x260 [ 265.042130][ T8469] ? find_held_lock+0x2b/0x80 [ 265.042151][ T8469] ? get_signal+0x7e0/0x21e0 [ 265.042171][ T8469] do_group_exit+0xd5/0x2a0 [ 265.042198][ T8469] get_signal+0x1ec7/0x21e0 [ 265.042224][ T8469] ? __pfx_get_signal+0x10/0x10 [ 265.042244][ T8469] ? do_futex+0x190/0x440 [ 265.042264][ T8469] arch_do_signal_or_restart+0x91/0x7a0 [ 265.042295][ T8469] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 265.042336][ T8469] exit_to_user_mode_loop+0x139/0x6f0 [ 265.042366][ T8469] ? rcu_is_watching+0x12/0xc0 [ 265.042388][ T8469] do_syscall_64+0x652/0x840 [ 265.042405][ T8469] ? clear_bhb_loop+0x40/0x90 [ 265.042427][ T8469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.042446][ T8469] RIP: 0033:0x7fb50c99de59 [ 265.042462][ T8469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.042480][ T8469] RSP: 002b:00007fb50abf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 265.042498][ T8469] RAX: fffffffffffffe00 RBX: 00007fb50cc26098 RCX: 00007fb50c99de59 [ 265.042509][ T8469] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb50cc26098 [ 265.042520][ T8469] RBP: 00007fb50cc26090 R08: 0000000000000000 R09: 0000000000000000 [ 265.042530][ T8469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.042540][ T8469] R13: 00007fb50cc26128 R14: 00007fffebae03b0 R15: 00007fffebae0498 [ 265.042563][ T8469] [ 265.322574][ T8479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.473'. [ 265.384159][ T8479] FAULT_INJECTION: forcing a failure. [ 265.384159][ T8479] name failslab, interval 1, probability 0, space 0, times 0 [ 265.396952][ T8479] CPU: 0 UID: 0 PID: 8479 Comm: syz.2.473 Tainted: G L syzkaller #0 PREEMPT(full) [ 265.396981][ T8479] Tainted: [L]=SOFTLOCKUP [ 265.396988][ T8479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 265.396998][ T8479] Call Trace: [ 265.397004][ T8479] [ 265.397011][ T8479] dump_stack_lvl+0x100/0x190 [ 265.397036][ T8479] should_fail_ex.cold+0x5/0xa [ 265.397057][ T8479] should_failslab+0xc2/0x120 [ 265.397081][ T8479] __kmalloc_noprof+0xfc/0x820 [ 265.397101][ T8479] ? rcu_is_watching+0x12/0xc0 [ 265.397129][ T8479] ? tomoyo_realpath_from_path+0xb6/0x690 [ 265.397159][ T8479] tomoyo_realpath_from_path+0xb6/0x690 [ 265.397188][ T8479] tomoyo_check_open_permission+0x2af/0x3c0 [ 265.397210][ T8479] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 265.397238][ T8479] ? hook_file_open+0x24f/0x8f0 [ 265.397275][ T8479] ? path_get+0x61/0x80 [ 265.397297][ T8479] tomoyo_file_open+0x6b/0x90 [ 265.397326][ T8479] security_file_open+0xb5/0x1e0 [ 265.397349][ T8479] do_dentry_open+0x588/0x14d0 [ 265.397383][ T8479] vfs_open+0x82/0x3f0 [ 265.397406][ T8479] path_openat+0x2873/0x4280 [ 265.397443][ T8479] ? __pfx_path_openat+0x10/0x10 [ 265.397478][ T8479] do_file_open+0x20e/0x430 [ 265.397508][ T8479] ? __pfx_do_file_open+0x10/0x10 [ 265.397553][ T8479] ? alloc_fd+0x471/0x7a0 [ 265.397581][ T8479] ? do_getname+0x191/0x390 [ 265.397604][ T8479] do_sys_openat2+0x10f/0x1e0 [ 265.397626][ T8479] ? __pfx_do_sys_openat2+0x10/0x10 [ 265.397648][ T8479] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 265.397684][ T8479] __x64_sys_openat+0x12d/0x210 [ 265.397706][ T8479] ? __pfx___x64_sys_openat+0x10/0x10 [ 265.397737][ T8479] do_syscall_64+0x115/0x840 [ 265.397752][ T8479] ? clear_bhb_loop+0x40/0x90 [ 265.397774][ T8479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.397793][ T8479] RIP: 0033:0x7f36b559de59 [ 265.397810][ T8479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.397826][ T8479] RSP: 002b:00007f36b64f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 265.397845][ T8479] RAX: ffffffffffffffda RBX: 00007f36b5826090 RCX: 00007f36b559de59 [ 265.397856][ T8479] RDX: 0000000000000201 RSI: 0000200000000540 RDI: ffffffffffffff9c [ 265.397867][ T8479] RBP: 00007f36b5633e6f R08: 0000000000000000 R09: 0000000000000000 [ 265.397877][ T8479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.397888][ T8479] R13: 00007f36b5826128 R14: 00007f36b5826090 R15: 00007fff039e5ab8 [ 265.397910][ T8479] [ 265.397918][ T8479] ERROR: Out of memory at tomoyo_realpath_from_path. [ 265.848248][ T8482] netlink: 342 bytes leftover after parsing attributes in process `syz.1.474'. [ 266.669202][ T8487] netlink: 20 bytes leftover after parsing attributes in process `syz.4.475'. [ 267.593962][ T8495] netlink: 338 bytes leftover after parsing attributes in process `syz.3.477'. [ 477.014099][ T8788] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 4 with max blocks 2 with error 117 [ 477.063685][ T8788] EXT4-fs (sda1): This should not happen!! Data will be lost [ 477.063685][ T8788] [ 477.165814][T12187] Process accounting resumed [ 478.482630][ T6339] block nbd0: Possible stuck request ffff888027f67000: control (read@0,4096B). Runtime 150 seconds [ 478.523616][T12229] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 478.554025][T12229] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 478.580505][T12229] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 478.620690][T12229] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 478.658238][T12229] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 479.183986][T12241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1226'. [ 479.222886][T12241] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 479.273367][T12244] futex_wake_op: syz.4.1227 tries to shift op by -2048; fix this program [ 479.301448][T12241] FAULT_INJECTION: forcing a failure. [ 479.301448][T12241] name failslab, interval 1, probability 0, space 0, times 0 [ 479.316493][T12244] futex_wake_op: syz.4.1227 tries to shift op by -2048; fix this program [ 479.337131][T12244] 0x000000000001-0x000000020000 : "" [ 479.347503][T12241] CPU: 0 UID: 0 PID: 12241 Comm: syz.3.1226 Tainted: G L syzkaller #0 PREEMPT(full) [ 479.347533][T12241] Tainted: [L]=SOFTLOCKUP [ 479.347540][T12241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 479.347551][T12241] Call Trace: [ 479.347557][T12241] [ 479.347564][T12241] dump_stack_lvl+0x100/0x190 [ 479.347591][T12241] should_fail_ex.cold+0x5/0xa [ 479.347619][T12241] should_failslab+0xc2/0x120 [ 479.347643][T12241] kmem_cache_alloc_noprof+0x91/0x6a0 [ 479.347666][T12241] ? __kernfs_new_node+0xd2/0xa10 [ 479.347699][T12241] __kernfs_new_node+0xd2/0xa10 [ 479.347727][T12241] ? kernfs_add_one+0x611/0xaa0 [ 479.347757][T12241] ? __pfx___kernfs_new_node+0x10/0x10 [ 479.347791][T12241] ? find_held_lock+0x2b/0x80 [ 479.347812][T12241] ? kernfs_root+0xee/0x2a0 [ 479.347836][T12241] ? kernfs_root+0xee/0x2a0 [ 479.347865][T12241] kernfs_new_node+0x117/0x150 [ 479.347898][T12241] __kernfs_create_file+0x53/0x350 [ 479.347922][T12241] sysfs_add_file_mode_ns+0x207/0x3c0 [ 479.347952][T12241] sysfs_create_file_ns+0x145/0x1e0 [ 479.347974][T12241] ? rcu_is_watching+0x12/0xc0 [ 479.348011][T12241] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 479.348037][T12241] ? __pfx___up_read+0x10/0x10 [ 479.348062][T12241] ? acpi_device_notify+0x464/0x500 [ 479.348151][T12241] ? kobject_put+0xb9/0x640 [ 479.348203][T12241] device_create_file+0xf2/0x1d0 [ 479.348254][T12241] device_add+0x2cb/0x1970 [ 479.348283][T12241] ? __pfx_device_add+0x10/0x10 [ 479.348308][T12241] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 479.348348][T12241] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 479.348395][T12241] wiphy_register+0x2151/0x3110 [ 479.348442][T12241] ? __pfx_wiphy_register+0x10/0x10 [ 479.348467][T12241] ? __asan_memset+0x23/0x50 [ 479.348486][T12241] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 479.348534][T12241] ieee80211_register_hw+0x3053/0x4580 [ 479.348591][T12241] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 479.348611][T12241] ? __pfx___debug_object_init+0x10/0x10 [ 479.348667][T12241] ? find_held_lock+0x2b/0x80 [ 479.348690][T12241] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 479.348716][T12241] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 479.348792][T12241] ? __hrtimer_setup+0x208/0x330 [ 479.348818][T12241] mac80211_hwsim_new_radio+0x2acc/0x64c0 [ 479.348871][T12241] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 479.348896][T12241] ? __asan_memcpy+0x3c/0x60 [ 479.348916][T12241] hwsim_new_radio_nl+0xc6b/0x13f0 [ 479.348940][T12241] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 479.348968][T12241] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 479.349021][T12241] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 479.349052][T12241] genl_family_rcv_msg_doit+0x214/0x300 [ 479.349075][T12241] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 479.349093][T12241] ? genl_get_cmd+0x3e7/0x760 [ 479.349143][T12241] ? bpf_lsm_capable+0x9/0x10 [ 479.349169][T12241] ? security_capable+0x80/0x260 [ 479.349199][T12241] ? ns_capable+0xd2/0xf0 [ 479.349227][T12241] genl_rcv_msg+0x560/0x800 [ 479.349249][T12241] ? __pfx_genl_rcv_msg+0x10/0x10 [ 479.349269][T12241] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 479.349299][T12241] netlink_rcv_skb+0x159/0x420 [ 479.349327][T12241] ? __pfx_genl_rcv_msg+0x10/0x10 [ 479.349346][T12241] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 479.349384][T12241] ? netlink_deliver_tap+0x1ae/0xcc0 [ 479.349414][T12241] genl_rcv+0x28/0x40 [ 479.349430][T12241] netlink_unicast+0x585/0x850 [ 479.349461][T12241] ? __pfx_netlink_unicast+0x10/0x10 [ 479.349496][T12241] netlink_sendmsg+0x8b0/0xda0 [ 479.349528][T12241] ? __pfx_netlink_sendmsg+0x10/0x10 [ 479.349559][T12241] ? apparmor_socket_sendmsg+0x15b/0x270 [ 479.349608][T12241] ____sys_sendmsg+0xa4d/0xbe0 [ 479.349634][T12241] ? __pfx_netlink_sendmsg+0x10/0x10 [ 479.349664][T12241] ? __pfx_____sys_sendmsg+0x10/0x10 [ 479.349702][T12241] ___sys_sendmsg+0x190/0x1e0 [ 479.349731][T12241] ? __pfx____sys_sendmsg+0x10/0x10 [ 479.349758][T12241] ? __lock_acquire+0x49f/0x1a40 [ 479.349813][T12241] __sys_sendmsg+0x160/0x210 [ 479.349836][T12241] ? __pfx___sys_sendmsg+0x10/0x10 [ 479.349870][T12241] do_syscall_64+0x115/0x840 [ 479.349887][T12241] ? clear_bhb_loop+0x40/0x90 [ 479.349909][T12241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.349928][T12241] RIP: 0033:0x7fb50c99de59 [ 479.349945][T12241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.349963][T12241] RSP: 002b:00007fb50d792028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 479.349983][T12241] RAX: ffffffffffffffda RBX: 00007fb50cc25fa0 RCX: 00007fb50c99de59 [ 479.349995][T12241] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000004 [ 479.350007][T12241] RBP: 00007fb50ca33e6f R08: 0000000000000000 R09: 0000000000000000 [ 479.350018][T12241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 479.350029][T12241] R13: 00007fb50cc26038 R14: 00007fb50cc25fa0 R15: 00007fffebae0498 [ 479.350059][T12241] [ 480.034934][T12244] ftl_cs: FTL header corrupt! [ 480.372090][T10195] Bluetooth: hci1: command 0x0c1a tx timeout [ 480.681179][T10195] Bluetooth: hci2: command 0x0c1a tx timeout [ 480.687446][T10195] Bluetooth: hci4: command 0x0c1a tx timeout [ 480.693771][T10195] Bluetooth: hci3: command 0x0c1a tx timeout [ 480.811914][ T8284] Bluetooth: hci0: command 0x0c1a tx timeout [ 481.586038][T12279] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1233'. [ 482.698406][T12285] FAULT_INJECTION: forcing a failure. [ 482.698406][T12285] name fail_futex, interval 1, probability 0, space 0, times 0 [ 482.915936][T12285] CPU: 0 UID: 0 PID: 12285 Comm: syz.4.1234 Tainted: G L syzkaller #0 PREEMPT(full) [ 482.915970][T12285] Tainted: [L]=SOFTLOCKUP [ 482.915978][T12285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 482.915989][T12285] Call Trace: [ 482.915995][T12285] [ 482.916003][T12285] dump_stack_lvl+0x100/0x190 [ 482.916029][T12285] should_fail_ex.cold+0x5/0xa [ 482.916050][T12285] get_futex_key+0x1d2/0x14f0 [ 482.916083][T12285] ? __pfx_get_futex_key+0x10/0x10 [ 482.916113][T12285] ? __pfx___schedule+0x10/0x10 [ 482.916213][T12285] futex_wait_setup+0x91/0x540 [ 482.916242][T12285] __futex_wait+0x19f/0x300 [ 482.916267][T12285] ? __pfx___futex_wait+0x10/0x10 [ 482.916293][T12285] ? __pfx_futex_wake_mark+0x10/0x10 [ 482.916319][T12285] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 482.916337][T12285] ? __hrtimer_setup+0x208/0x330 [ 482.916357][T12285] ? ktime_add_safe+0x60/0x70 [ 482.916377][T12285] futex_wait+0xe6/0x370 [ 482.916400][T12285] ? __pfx_futex_wait+0x10/0x10 [ 482.916426][T12285] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 482.916451][T12285] do_futex+0x265/0x440 [ 482.916471][T12285] ? __pfx_do_futex+0x10/0x10 [ 482.916489][T12285] ? ktime_get+0x22c/0x320 [ 482.916514][T12285] ? lockdep_hardirqs_on+0x78/0x100 [ 482.916547][T12285] __x64_sys_futex+0x34f/0x4d0 [ 482.916569][T12285] ? __pfx___x64_sys_futex+0x10/0x10 [ 482.916596][T12285] do_syscall_64+0x115/0x840 [ 482.916612][T12285] ? clear_bhb_loop+0x40/0x90 [ 482.916635][T12285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.916654][T12285] RIP: 0033:0x7f769219de59 [ 482.916670][T12285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.916688][T12285] RSP: 002b:00007ffcf9f18e38 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 482.916707][T12285] RAX: ffffffffffffffda RBX: 0000000000075cfc RCX: 00007f769219de59 [ 482.916719][T12285] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f769242618c [ 482.916733][T12285] RBP: 0000000000000032 R08: 0000000000000001 R09: 0000000000000000 [ 482.916744][T12285] R10: 00007ffcf9f18f40 R11: 0000000000000246 R12: 00007ffcf9f18f60 [ 482.916755][T12285] R13: 00007f769242618c R14: 0000000000075d2e R15: 00007ffcf9f18f40 [ 482.916777][T12285] [ 483.582086][T12298] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1237'. [ 485.361042][T12329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1245'. [ 485.425159][T12329] openvswitch: HfR: Dropping previously announced user features [ 486.570526][T12357] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1250'. [ 488.067311][T12334] Process accounting paused [ 491.013436][ T30] audit: type=1800 audit(1784181292.226:18): pid=12430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1266" name="features" dev="configfs" ino=50298 res=0 errno=0 [ 492.744709][ T8542] EXT4-fs (sda1): Delayed block allocation failed for inode 2035 at logical offset 1340 with max blocks 11 with error 117 [ 492.847846][ T8542] EXT4-fs (sda1): This should not happen!! Data will be lost [ 492.847846][ T8542] [ 495.024991][T12504] can: request_module (can-proto-5) failed. [ 495.418604][T12518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1281'. [ 495.480482][T12518] openvswitch: HfR: Dropping previously announced user features [ 497.905948][T12578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1293'. [ 497.957209][T12578] openvswitch: HfR: Dropping previously announced user features [ 498.506720][T12594] ecryptfs_miscdev_write: Error while inspecting packet size [ 498.930826][T12583] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 501.450424][ T30] audit: type=1800 audit(1784181302.711:19): pid=12639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1306" name="features" dev="configfs" ino=51416 res=0 errno=0 [ 502.072120][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.078524][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.067003][T12739] netlink: 1844 bytes leftover after parsing attributes in process `syz.4.1326'. [ 506.942342][T12752] block nbd2: not configured, cannot reconfigure [ 507.339330][T12751] Process accounting paused [ 508.340471][T12770] zswap: compressor not available [ 508.440424][ T6339] block nbd0: Possible stuck request ffff888027f67000: control (read@0,4096B). Runtime 180 seconds [ 509.270623][T12802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1339'. [ 509.344025][T12802] openvswitch: HfR: Dropping previously announced user features [ 509.476721][T12787] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 509.502494][T12787] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 509.536892][T12787] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 509.565444][T12787] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 509.590699][T12787] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 510.357422][T12825] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1343'. [ 510.630059][T12822] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 510.668091][T12822] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 510.706002][T12822] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 510.738653][T12822] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 510.775852][T12822] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 511.458792][T12839] zswap: compressor not available [ 511.710801][T10980] EXT4-fs (sda1): Delayed block allocation failed for inode 2035 at logical offset 921 with max blocks 17 with error 117 [ 511.752122][T10980] EXT4-fs (sda1): This should not happen!! Data will be lost [ 511.752122][T10980] [ 511.865470][ T30] audit: type=1804 audit(1784181313.185:20): pid=12852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1349" name="/newroot/sys/kernel/tracing/set_event" dev="tracefs" ino=31 res=1 errno=0 [ 511.914915][T12852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1349'. [ 512.176387][ T8284] Bluetooth: hci1: command 0x0c1a tx timeout [ 512.733314][T10195] Bluetooth: hci3: command 0x0c1a tx timeout [ 512.739418][ T8642] Bluetooth: hci2: command 0x0c1a tx timeout [ 512.745536][ T8284] Bluetooth: hci4: command 0x0c1a tx timeout [ 512.819355][ T8284] Bluetooth: hci0: command 0x0c1a tx timeout [ 512.918259][T12871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1354'. [ 515.248703][T12919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1363'. [ 515.414654][T12919] openvswitch: HfR: Dropping previously announced user features [ 516.824961][T12949] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1368'. [ 516.921035][T12949] bond0: (slave bond_slave_0): Releasing backup interface [ 516.968502][T12949] bond_slave_0 (unregistering): left promiscuous mode [ 517.811581][T12970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1372'. [ 518.112424][T12965] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 518.140795][T12965] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 518.177382][T12965] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 518.212760][T12965] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 518.250121][T12965] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 518.375259][T12965] Process accounting resumed [ 519.737331][ T8284] Bluetooth: hci1: command 0x0c1a tx timeout [ 520.136247][ T8284] Bluetooth: hci2: command 0x0c1a tx timeout [ 520.217762][ T8642] Bluetooth: hci3: command 0x0c1a tx timeout [ 520.223859][ T8284] Bluetooth: hci4: command 0x0c1a tx timeout [ 520.294239][ T8284] Bluetooth: hci0: command 0x0c1a tx timeout [ 520.480873][T13016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1382'. [ 521.490135][T13026] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 521.587008][T13026] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 521.671003][T13026] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 521.684742][T13041] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1387'. [ 521.746899][T13026] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 521.814466][T13026] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 522.575986][T13061] FAULT_INJECTION: forcing a failure. [ 522.575986][T13061] name failslab, interval 1, probability 0, space 0, times 0 [ 522.698655][T13061] CPU: 0 UID: 0 PID: 13061 Comm: syz.5.1389 Tainted: G L syzkaller #0 PREEMPT(full) [ 522.698687][T13061] Tainted: [L]=SOFTLOCKUP [ 522.698695][T13061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 522.698705][T13061] Call Trace: [ 522.698712][T13061] [ 522.698721][T13061] dump_stack_lvl+0x100/0x190 [ 522.698750][T13061] should_fail_ex.cold+0x5/0xa [ 522.698773][T13061] should_failslab+0xc2/0x120 [ 522.698800][T13061] __kmalloc_noprof+0xfc/0x820 [ 522.698822][T13061] ? landlock_init_hierarchy_log+0x186/0x820 [ 522.698935][T13061] landlock_init_hierarchy_log+0x186/0x820 [ 522.698966][T13061] landlock_merge_ruleset+0x66d/0x8b0 [ 522.698988][T13061] ? prepare_creds+0x5ee/0x950 [ 522.699017][T13061] __do_sys_landlock_restrict_self+0x2af/0x9e0 [ 522.699052][T13061] do_syscall_64+0x115/0x840 [ 522.699070][T13061] ? clear_bhb_loop+0x40/0x90 [ 522.699093][T13061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.699112][T13061] RIP: 0033:0x7fc8f6b9de59 [ 522.699128][T13061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.699145][T13061] RSP: 002b:00007fc8f7b45028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 522.699164][T13061] RAX: ffffffffffffffda RBX: 00007fc8f6e25fa0 RCX: 00007fc8f6b9de59 [ 522.699176][T13061] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000000005 [ 522.699186][T13061] RBP: 00007fc8f6c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 522.699196][T13061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 522.699207][T13061] R13: 00007fc8f6e26038 R14: 00007fc8f6e25fa0 R15: 00007ffd091348f8 [ 522.699230][T13061] [ 523.211575][ T8284] Bluetooth: hci1: command 0x0c1a tx timeout [ 523.639595][ T8284] Bluetooth: hci2: command 0x0c1a tx timeout [ 523.727146][ T8284] Bluetooth: hci3: command 0x0c1a tx timeout [ 523.795821][ T8284] Bluetooth: hci4: command 0x0c1a tx timeout [ 523.875450][ T8284] Bluetooth: hci0: command 0x0c1a tx timeout [ 524.701833][T13108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1399'. [ 525.803019][T13099] random: crng reseeded on system resumption [ 526.997654][T13110] Process accounting resumed [ 528.538222][T13170] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 528.672827][T13177] netlink: 'syz.1.1412': attribute type 19 has an invalid length. [ 528.685949][T13173] nbd: must specify a size in bytes for the device [ 528.725916][T13177] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1412'. [ 528.775049][ T8284] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 530.422080][T13213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1419'. [ 530.500100][T13216] FAULT_INJECTION: forcing a failure. [ 530.500100][T13216] name failslab, interval 1, probability 0, space 0, times 0 [ 530.575722][T13216] CPU: 0 UID: 0 PID: 13216 Comm: syz.3.1420 Tainted: G L syzkaller #0 PREEMPT(full) [ 530.575754][T13216] Tainted: [L]=SOFTLOCKUP [ 530.575761][T13216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 530.575771][T13216] Call Trace: [ 530.575778][T13216] [ 530.575785][T13216] dump_stack_lvl+0x100/0x190 [ 530.575811][T13216] should_fail_ex.cold+0x5/0xa [ 530.575832][T13216] should_failslab+0xc2/0x120 [ 530.575857][T13216] __kmalloc_noprof+0xfc/0x820 [ 530.575885][T13216] ? process_preds+0x4c2/0x1d90 [ 530.575945][T13216] process_preds+0x4c2/0x1d90 [ 530.575978][T13216] apply_subsystem_event_filter+0x4a0/0x17a0 [ 530.576011][T13216] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 530.576043][T13216] ? _copy_from_user+0x59/0xd0 [ 530.576139][T13216] subsystem_filter_write+0x95/0x120 [ 530.576167][T13216] vfs_write+0x2aa/0x1050 [ 530.576197][T13216] ? __pfx_subsystem_filter_write+0x10/0x10 [ 530.576224][T13216] ? __pfx_vfs_write+0x10/0x10 [ 530.576252][T13216] ? __fget_files+0x215/0x3d0 [ 530.576284][T13216] ? __fget_files+0x21f/0x3d0 [ 530.576319][T13216] ksys_write+0x12a/0x250 [ 530.576346][T13216] ? __pfx_ksys_write+0x10/0x10 [ 530.576381][T13216] do_syscall_64+0x115/0x840 [ 530.576398][T13216] ? clear_bhb_loop+0x40/0x90 [ 530.576421][T13216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.576440][T13216] RIP: 0033:0x7fb50c99de59 [ 530.576456][T13216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.576474][T13216] RSP: 002b:00007fb50abf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 530.576494][T13216] RAX: ffffffffffffffda RBX: 00007fb50cc26090 RCX: 00007fb50c99de59 [ 530.576506][T13216] RDX: 0000000000000071 RSI: 0000200000000040 RDI: 0000000000000009 [ 530.576517][T13216] RBP: 00007fb50ca33e6f R08: 0000000000000000 R09: 0000000000000000 [ 530.576528][T13216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 530.576539][T13216] R13: 00007fb50cc26128 R14: 00007fb50cc26090 R15: 00007fffebae0498 [ 530.576562][T13216] [ 530.964388][T13226] FAULT_INJECTION: forcing a failure. [ 530.964388][T13226] name failslab, interval 1, probability 0, space 0, times 0 [ 530.977256][T13226] CPU: 0 UID: 0 PID: 13226 Comm: syz.4.1419 Tainted: G L syzkaller #0 PREEMPT(full) [ 530.977287][T13226] Tainted: [L]=SOFTLOCKUP [ 530.977294][T13226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 530.977305][T13226] Call Trace: [ 530.977312][T13226] [ 530.977320][T13226] dump_stack_lvl+0x100/0x190 [ 530.977346][T13226] should_fail_ex.cold+0x5/0xa [ 530.977367][T13226] should_failslab+0xc2/0x120 [ 530.977392][T13226] __kmalloc_noprof+0xfc/0x820 [ 530.977411][T13226] ? rcu_is_watching+0x12/0xc0 [ 530.977434][T13226] ? tomoyo_realpath_from_path+0xb6/0x690 [ 530.977549][T13226] tomoyo_realpath_from_path+0xb6/0x690 [ 530.977580][T13226] tomoyo_check_open_permission+0x2af/0x3c0 [ 530.977607][T13226] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 530.977636][T13226] ? hook_file_open+0x24f/0x8f0 [ 530.977674][T13226] ? path_get+0x61/0x80 [ 530.977696][T13226] tomoyo_file_open+0x6b/0x90 [ 530.977725][T13226] security_file_open+0xb5/0x1e0 [ 530.977749][T13226] do_dentry_open+0x588/0x14d0 [ 530.977796][T13226] vfs_open+0x82/0x3f0 [ 530.977820][T13226] path_openat+0x2873/0x4280 [ 530.977858][T13226] ? __pfx_path_openat+0x10/0x10 [ 530.977897][T13226] do_file_open+0x20e/0x430 [ 530.977931][T13226] ? __pfx_do_file_open+0x10/0x10 [ 530.977986][T13226] ? alloc_fd+0x471/0x7a0 [ 530.978016][T13226] ? do_getname+0x191/0x390 [ 530.978039][T13226] do_sys_openat2+0x10f/0x1e0 [ 530.978061][T13226] ? __pfx_do_sys_openat2+0x10/0x10 [ 530.978084][T13226] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 530.978125][T13226] __x64_sys_openat+0x12d/0x210 [ 530.978148][T13226] ? __pfx___x64_sys_openat+0x10/0x10 [ 530.978179][T13226] do_syscall_64+0x115/0x840 [ 530.978195][T13226] ? clear_bhb_loop+0x40/0x90 [ 530.978217][T13226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.978237][T13226] RIP: 0033:0x7f769219de59 [ 530.978254][T13226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.978272][T13226] RSP: 002b:00007f7693003028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 530.978291][T13226] RAX: ffffffffffffffda RBX: 00007f7692426180 RCX: 00007f769219de59 [ 530.978303][T13226] RDX: 0000000000000201 RSI: 0000200000000540 RDI: ffffffffffffff9c [ 530.978315][T13226] RBP: 00007f7692233e6f R08: 0000000000000000 R09: 0000000000000000 [ 530.978325][T13226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 530.978336][T13226] R13: 00007f7692426218 R14: 00007f7692426180 R15: 00007ffcf9f18cd8 [ 530.978360][T13226] [ 531.965835][T13226] ERROR: Out of memory at tomoyo_realpath_from_path. [ 535.035445][T13324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1439'. [ 536.081482][ T8284] Bluetooth: hci3: unexpected event 0x18 length: 726 > 23 [ 537.147763][T13338] kexec: Could not allocate control_code_buffer [ 538.025234][T13395] FAULT_INJECTION: forcing a failure. [ 538.025234][T13395] name failslab, interval 1, probability 0, space 0, times 0 [ 538.114412][T13395] CPU: 0 UID: 0 PID: 13395 Comm: syz.5.1451 Tainted: G L syzkaller #0 PREEMPT(full) [ 538.114444][T13395] Tainted: [L]=SOFTLOCKUP [ 538.114451][T13395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 538.114462][T13395] Call Trace: [ 538.114468][T13395] [ 538.114475][T13395] dump_stack_lvl+0x100/0x190 [ 538.114501][T13395] should_fail_ex.cold+0x5/0xa [ 538.114522][T13395] should_failslab+0xc2/0x120 [ 538.114550][T13395] __kmalloc_noprof+0xfc/0x820 [ 538.114571][T13395] ? blk_rq_map_user_iov+0x2a5/0x1440 [ 538.114669][T13395] blk_rq_map_user_iov+0x2a5/0x1440 [ 538.114702][T13395] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 538.114734][T13395] ? policy_nodemask+0xed/0x4f0 [ 538.114759][T13395] ? alloc_pages_mpol+0x25a/0x540 [ 538.114789][T13395] ? find_held_lock+0x2b/0x80 [ 538.114811][T13395] ? sg_common_write.isra.0+0xe26/0x1b90 [ 538.114873][T13395] ? import_ubuf+0x1b6/0x220 [ 538.114899][T13395] blk_rq_map_user_io+0x1ff/0x230 [ 538.114927][T13395] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 538.114954][T13395] ? alloc_pages_noprof+0xf9/0x160 [ 538.114991][T13395] sg_common_write.isra.0+0xf74/0x1b90 [ 538.115022][T13395] ? __might_fault+0xc5/0x140 [ 538.115044][T13395] ? __pfx_sg_common_write.isra.0+0x10/0x10 [ 538.115075][T13395] sg_write+0x7eb/0xdb0 [ 538.115098][T13395] ? __pfx_sg_write+0x10/0x10 [ 538.115121][T13395] ? plist_check_list+0x1b8/0x280 [ 538.115180][T13395] ? apparmor_file_permission+0x13f/0x1c0 [ 538.115202][T13395] ? bpf_lsm_file_permission+0x9/0x10 [ 538.115230][T13395] ? security_file_permission+0x76/0x210 [ 538.115253][T13395] ? rw_verify_area+0xce/0x6d0 [ 538.115281][T13395] vfs_write+0x2aa/0x1050 [ 538.115309][T13395] ? __pfx_sg_write+0x10/0x10 [ 538.115331][T13395] ? __pfx_vfs_write+0x10/0x10 [ 538.115356][T13395] ? find_held_lock+0x2b/0x80 [ 538.115376][T13395] ? __fget_files+0x215/0x3d0 [ 538.115402][T13395] ? __fget_files+0x215/0x3d0 [ 538.115432][T13395] ? __fget_files+0x21f/0x3d0 [ 538.115464][T13395] ksys_write+0x12a/0x250 [ 538.115491][T13395] ? __pfx_ksys_write+0x10/0x10 [ 538.115524][T13395] do_syscall_64+0x115/0x840 [ 538.115540][T13395] ? clear_bhb_loop+0x40/0x90 [ 538.115562][T13395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.115582][T13395] RIP: 0033:0x7fc8f6b9de59 [ 538.115598][T13395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 538.115616][T13395] RSP: 002b:00007fc8f7b24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 538.115634][T13395] RAX: ffffffffffffffda RBX: 00007fc8f6e26090 RCX: 00007fc8f6b9de59 [ 538.115646][T13395] RDX: 000000000000b6bd RSI: 0000000000000000 RDI: 0000000000000003 [ 538.115657][T13395] RBP: 00007fc8f6c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 538.115668][T13395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 538.115678][T13395] R13: 00007fc8f6e26128 R14: 00007fc8f6e26090 R15: 00007ffd091348f8 [ 538.115701][T13395] [ 538.889675][ T6339] block nbd0: Possible stuck request ffff888027f67000: control (read@0,4096B). Runtime 210 seconds [ 539.657003][T13418] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1453'. [ 540.010540][T13424] FAULT_INJECTION: forcing a failure. [ 540.010540][T13424] name failslab, interval 1, probability 0, space 0, times 0 [ 540.119075][T13424] CPU: 0 UID: 0 PID: 13424 Comm: syz.5.1453 Tainted: G L syzkaller #0 PREEMPT(full) [ 540.119107][T13424] Tainted: [L]=SOFTLOCKUP [ 540.119114][T13424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 540.119124][T13424] Call Trace: [ 540.119131][T13424] [ 540.119138][T13424] dump_stack_lvl+0x100/0x190 [ 540.119165][T13424] should_fail_ex.cold+0x5/0xa [ 540.119186][T13424] should_failslab+0xc2/0x120 [ 540.119211][T13424] __kmalloc_noprof+0xfc/0x820 [ 540.119230][T13424] ? rcu_is_watching+0x12/0xc0 [ 540.119251][T13424] ? tomoyo_realpath_from_path+0xb6/0x690 [ 540.119281][T13424] tomoyo_realpath_from_path+0xb6/0x690 [ 540.119311][T13424] tomoyo_check_open_permission+0x2af/0x3c0 [ 540.119334][T13424] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 540.119362][T13424] ? hook_file_open+0x24f/0x8f0 [ 540.119400][T13424] ? path_get+0x61/0x80 [ 540.119420][T13424] tomoyo_file_open+0x6b/0x90 [ 540.119449][T13424] security_file_open+0xb5/0x1e0 [ 540.119472][T13424] do_dentry_open+0x588/0x14d0 [ 540.119510][T13424] vfs_open+0x82/0x3f0 [ 540.119534][T13424] path_openat+0x2873/0x4280 [ 540.119573][T13424] ? __pfx_path_openat+0x10/0x10 [ 540.119608][T13424] do_file_open+0x20e/0x430 [ 540.119639][T13424] ? __pfx_do_file_open+0x10/0x10 [ 540.119683][T13424] ? alloc_fd+0x471/0x7a0 [ 540.119713][T13424] ? do_getname+0x191/0x390 [ 540.119736][T13424] do_sys_openat2+0x10f/0x1e0 [ 540.119758][T13424] ? __pfx_do_sys_openat2+0x10/0x10 [ 540.119788][T13424] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 540.119826][T13424] __x64_sys_openat+0x12d/0x210 [ 540.119850][T13424] ? __pfx___x64_sys_openat+0x10/0x10 [ 540.119881][T13424] do_syscall_64+0x115/0x840 [ 540.119898][T13424] ? clear_bhb_loop+0x40/0x90 [ 540.119920][T13424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.119939][T13424] RIP: 0033:0x7fc8f6b9de59 [ 540.119956][T13424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 540.119974][T13424] RSP: 002b:00007fc8f7b03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 540.119993][T13424] RAX: ffffffffffffffda RBX: 00007fc8f6e26180 RCX: 00007fc8f6b9de59 [ 540.120005][T13424] RDX: 0000000000000201 RSI: 0000200000000540 RDI: ffffffffffffff9c [ 540.120016][T13424] RBP: 00007fc8f6c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 540.120026][T13424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 540.120037][T13424] R13: 00007fc8f6e26218 R14: 00007fc8f6e26180 R15: 00007ffd091348f8 [ 540.120060][T13424] [ 540.375800][T13424] ERROR: Out of memory at tomoyo_realpath_from_path. [ 540.958143][T13352] Process accounting resumed [ 541.633621][ T8782] EXT4-fs (sda1): Delayed block allocation failed for inode 2035 at logical offset 929 with max blocks 9 with error 117 [ 541.718144][ T8782] EXT4-fs (sda1): This should not happen!! Data will be lost [ 541.718144][ T8782] [ 541.787774][ T8782] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 1337 with max blocks 15 with error 117 [ 541.807494][T13450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1461'. [ 541.877859][T13450] batadv_slave_1: entered promiscuous mode [ 541.885154][ T8782] EXT4-fs (sda1): This should not happen!! Data will be lost [ 541.885154][ T8782] [ 541.923202][T13450] batadv_slave_1: left promiscuous mode [ 542.656271][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.656364][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.667120][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.667157][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.667269][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.667293][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.667389][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.667412][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.668334][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.668359][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.668481][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.668505][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.668598][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.668622][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.668716][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.668739][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.668858][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.668882][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.668975][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.668998][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.669091][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.669113][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.669206][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.669229][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.669340][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.669363][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.669458][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.669480][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.669576][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.669599][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.669703][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.669732][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.669852][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.669875][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.669968][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.669991][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.670083][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.670106][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.670199][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.670222][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.670333][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.670356][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.670448][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.670471][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.670569][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.670592][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.670684][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.670707][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.670823][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.670847][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.670941][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.670964][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.671066][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.671089][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.671181][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.671204][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.671314][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.671337][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.671429][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.671452][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.671545][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.671567][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.671659][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.671682][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.671791][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.671814][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.671915][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.671938][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.672038][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.672061][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.672153][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.672176][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.672287][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.672310][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.672409][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.672432][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.672533][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.672559][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.672666][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.672693][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.672941][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.672978][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.750467][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.750507][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.752341][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.752373][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.752534][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.752558][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.754227][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.754252][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.754399][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.754423][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.765599][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.765637][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.765760][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.765784][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.765894][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.765918][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.766016][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.766039][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.766138][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.787450][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.787669][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.787695][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.789426][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.789453][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.797998][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.798030][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.798153][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.798176][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.798270][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.798293][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.798388][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.798412][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.798506][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.798529][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.798622][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.798645][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.798802][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.798825][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.813151][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.813190][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.813335][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.813359][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.813456][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.813479][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.813574][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.813598][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 542.813695][T13468] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.813718][T13468] vhci_hcd vhci_hcd.2: invalid port number 0 [ 545.778392][T13536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1472'. [ 545.802416][T13536] openvswitch: HfR: Dropping previously announced user features [ 546.419986][T13556] Ignoring unsupported numa_zonelist_order value: [ 546.460891][T13548] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 546.479844][T13548] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 546.503408][T13548] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 546.539688][T13548] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 546.573299][T13548] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 548.076025][ T8284] Bluetooth: hci1: command 0x0c1a tx timeout [ 548.545848][ T8284] Bluetooth: hci4: command 0x0c1a tx timeout [ 548.552075][ T8642] Bluetooth: hci3: command 0x0c1a tx timeout [ 548.558265][T10195] Bluetooth: hci2: command 0x0c1a tx timeout [ 548.627154][ T8284] Bluetooth: hci0: command 0x0c1a tx timeout [ 548.949176][T13610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1489'. [ 549.548770][T13604] Process accounting paused [ 553.611970][T13699] FAULT_INJECTION: forcing a failure. [ 553.611970][T13699] name failslab, interval 1, probability 0, space 0, times 0 [ 553.656153][T13699] CPU: 0 UID: 0 PID: 13699 Comm: syz.4.1510 Tainted: G L syzkaller #0 PREEMPT(full) [ 553.656190][T13699] Tainted: [L]=SOFTLOCKUP [ 553.656197][T13699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 553.656207][T13699] Call Trace: [ 553.656213][T13699] [ 553.656221][T13699] dump_stack_lvl+0x100/0x190 [ 553.656248][T13699] should_fail_ex.cold+0x5/0xa [ 553.656269][T13699] should_failslab+0xc2/0x120 [ 553.656294][T13699] __kmalloc_noprof+0xfc/0x820 [ 553.656313][T13699] ? rcu_is_watching+0x12/0xc0 [ 553.656335][T13699] ? tomoyo_realpath_from_path+0xb6/0x690 [ 553.656369][T13699] tomoyo_realpath_from_path+0xb6/0x690 [ 553.656400][T13699] tomoyo_path_number_perm+0x23c/0x580 [ 553.656420][T13699] ? tomoyo_path_number_perm+0x22e/0x580 [ 553.656443][T13699] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 553.656473][T13699] ? rcu_read_lock_any_held+0x6a/0xa0 [ 553.656509][T13699] ? _raw_spin_unlock_irq+0x23/0x50 [ 553.656594][T13699] ? hook_file_ioctl_common+0x140/0x440 [ 553.656626][T13699] security_file_ioctl+0xd3/0x230 [ 553.656649][T13699] __x64_sys_ioctl+0xb7/0x210 [ 553.656677][T13699] do_syscall_64+0x115/0x840 [ 553.656693][T13699] ? clear_bhb_loop+0x40/0x90 [ 553.656716][T13699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.656734][T13699] RIP: 0033:0x7f769219de59 [ 553.656751][T13699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.656768][T13699] RSP: 002b:00007f7693045028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 553.656787][T13699] RAX: ffffffffffffffda RBX: 00007f7692425fa0 RCX: 00007f769219de59 [ 553.656799][T13699] RDX: 0000000000000001 RSI: 0000000000004b67 RDI: 0000000000000000 [ 553.656809][T13699] RBP: 00007f7693045090 R08: 0000000000000000 R09: 0000000000000000 [ 553.656821][T13699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.656831][T13699] R13: 00007f7692426038 R14: 00007f7692425fa0 R15: 00007ffcf9f18cd8 [ 553.656855][T13699] [ 554.311419][T13699] ERROR: Out of memory at tomoyo_realpath_from_path. [ 555.051606][T13715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1516'. [ 555.113456][T13715] openvswitch: HfR: Dropping previously announced user features [ 555.462948][T13727] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1517'. [ 556.664490][T13738] Process accounting resumed [ 557.057773][T13735] FAULT_INJECTION: forcing a failure. [ 557.057773][T13735] name fail_futex, interval 1, probability 0, space 0, times 0 [ 557.119310][T13735] CPU: 0 UID: 0 PID: 13735 Comm: syz.4.1520 Tainted: G L syzkaller #0 PREEMPT(full) [ 557.119341][T13735] Tainted: [L]=SOFTLOCKUP [ 557.119348][T13735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 557.119359][T13735] Call Trace: [ 557.119365][T13735] [ 557.119372][T13735] dump_stack_lvl+0x100/0x190 [ 557.119399][T13735] should_fail_ex.cold+0x5/0xa [ 557.119420][T13735] get_futex_key+0xf74/0x14f0 [ 557.119454][T13735] ? __pfx_get_futex_key+0x10/0x10 [ 557.119483][T13735] ? lock_acquire+0x1b9/0x370 [ 557.119517][T13735] futex_wake+0xf4/0x5e0 [ 557.119542][T13735] ? __pfx_futex_wake+0x10/0x10 [ 557.119565][T13735] ? find_held_lock+0x2b/0x80 [ 557.119587][T13735] ? exit_mm_release+0x19/0x30 [ 557.119638][T13735] do_futex+0x2b2/0x440 [ 557.119658][T13735] ? __pfx_do_futex+0x10/0x10 [ 557.119674][T13735] ? __might_fault+0xc5/0x140 [ 557.119698][T13735] mm_release+0x24a/0x2f0 [ 557.119716][T13735] do_exit+0x707/0x2ae0 [ 557.119743][T13735] ? __pfx_do_exit+0x10/0x10 [ 557.119767][T13735] ? do_raw_spin_lock+0x128/0x260 [ 557.119791][T13735] ? find_held_lock+0x2b/0x80 [ 557.119812][T13735] ? get_signal+0x7e0/0x21e0 [ 557.119833][T13735] do_group_exit+0xd5/0x2a0 [ 557.119859][T13735] get_signal+0x1ec7/0x21e0 [ 557.119886][T13735] ? __pfx_get_signal+0x10/0x10 [ 557.119910][T13735] ? do_futex+0x190/0x440 [ 557.119930][T13735] arch_do_signal_or_restart+0x91/0x7a0 [ 557.119975][T13735] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 557.120011][T13735] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 557.120046][T13735] exit_to_user_mode_loop+0x139/0x6f0 [ 557.120075][T13735] ? rcu_is_watching+0x12/0xc0 [ 557.120098][T13735] do_syscall_64+0x652/0x840 [ 557.120115][T13735] ? clear_bhb_loop+0x40/0x90 [ 557.120138][T13735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.120158][T13735] RIP: 0033:0x7f769219de59 [ 557.120174][T13735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.120193][T13735] RSP: 002b:00007f76930240e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 557.120212][T13735] RAX: fffffffffffffe00 RBX: 00007f7692426098 RCX: 00007f769219de59 [ 557.120224][T13735] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7692426098 [ 557.120235][T13735] RBP: 00007f7692426090 R08: 0000000000000000 R09: 0000000000000000 [ 557.120246][T13735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 557.120257][T13735] R13: 00007f7692426128 R14: 00007ffcf9f18bf0 R15: 00007ffcf9f18cd8 [ 557.120280][T13735] [ 557.928257][T13762] FAULT_INJECTION: forcing a failure. [ 557.928257][T13762] name failslab, interval 1, probability 0, space 0, times 0 [ 558.031353][T13762] CPU: 0 UID: 0 PID: 13762 Comm: syz.5.1526 Tainted: G L syzkaller #0 PREEMPT(full) [ 558.031385][T13762] Tainted: [L]=SOFTLOCKUP [ 558.031391][T13762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 558.031402][T13762] Call Trace: [ 558.031409][T13762] [ 558.031416][T13762] dump_stack_lvl+0x100/0x190 [ 558.031442][T13762] should_fail_ex.cold+0x5/0xa [ 558.031463][T13762] should_failslab+0xc2/0x120 [ 558.031488][T13762] __kmalloc_noprof+0xfc/0x820 [ 558.031508][T13762] ? trace_kmalloc+0xeb/0x110 [ 558.031531][T13762] ? lsm_blob_alloc+0x68/0x90 [ 558.031563][T13762] lsm_blob_alloc+0x68/0x90 [ 558.031590][T13762] security_sk_alloc+0x2d/0x290 [ 558.031609][T13762] sk_prot_alloc+0x12a/0x2a0 [ 558.031641][T13762] sk_alloc+0x36/0xe80 [ 558.031661][T13762] __netlink_create+0x5e/0x2c0 [ 558.031686][T13762] ? __wake_up+0x3f/0x60 [ 558.031710][T13762] netlink_create+0x29b/0x610 [ 558.031735][T13762] ? __pfx_genl_bind+0x10/0x10 [ 558.031751][T13762] ? __pfx_genl_unbind+0x10/0x10 [ 558.031785][T13762] ? __pfx_genl_release+0x10/0x10 [ 558.031805][T13762] __sock_create+0x339/0x860 [ 558.031837][T13762] __sys_socket+0x14d/0x260 [ 558.031864][T13762] ? exc_page_fault+0x6f/0xd0 [ 558.031896][T13762] ? __pfx___sys_socket+0x10/0x10 [ 558.031931][T13762] __x64_sys_socket+0x72/0xb0 [ 558.031959][T13762] ? lockdep_hardirqs_on+0x78/0x100 [ 558.031988][T13762] do_syscall_64+0x115/0x840 [ 558.032004][T13762] ? clear_bhb_loop+0x40/0x90 [ 558.032027][T13762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.032046][T13762] RIP: 0033:0x7fc8f6b9f6c7 [ 558.032062][T13762] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 558.032080][T13762] RSP: 002b:00007fc8f7b22f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 558.032099][T13762] RAX: ffffffffffffffda RBX: 00007fc8f6e26090 RCX: 00007fc8f6b9f6c7 [ 558.032111][T13762] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 558.032121][T13762] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 558.032132][T13762] R10: 0000200000000140 R11: 0000000000000286 R12: 0000000000000000 [ 558.032144][T13762] R13: 00007fc8f6e26128 R14: 00007fc8f6e26090 R15: 00007ffd091348f8 [ 558.032166][T13762] [ 560.132312][T13805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1535'. [ 561.687921][T13832] netlink: 326 bytes leftover after parsing attributes in process `syz.4.1543'. [ 561.722919][T13833] netlink: 326 bytes leftover after parsing attributes in process `syz.4.1543'. [ 561.762803][T13832] netlink: 326 bytes leftover after parsing attributes in process `syz.4.1543'. [ 561.802652][T13833] netlink: 326 bytes leftover after parsing attributes in process `syz.4.1543'. [ 563.015894][T13847] Process accounting resumed [ 563.191194][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.200457][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.797812][T13857] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1549'. [ 564.897745][T13874] ubi0: attaching mtd0 [ 564.945830][T13874] ubi0 warning: ubi_attach: valid VID header but corrupted EC header at PEB 0 [ 564.989923][T13874] ubi0: scanning is finished [ 565.070696][T13878] FAULT_INJECTION: forcing a failure. [ 565.070696][T13878] name failslab, interval 1, probability 0, space 0, times 0 [ 565.173652][T13878] CPU: 0 UID: 0 PID: 13878 Comm: syz.4.1553 Tainted: G L syzkaller #0 PREEMPT(full) [ 565.173684][T13878] Tainted: [L]=SOFTLOCKUP [ 565.173690][T13878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 565.173701][T13878] Call Trace: [ 565.173707][T13878] [ 565.173714][T13878] dump_stack_lvl+0x100/0x190 [ 565.173740][T13878] should_fail_ex.cold+0x5/0xa [ 565.173761][T13878] should_failslab+0xc2/0x120 [ 565.173786][T13878] kmem_cache_alloc_noprof+0x91/0x6a0 [ 565.173807][T13878] ? trace_kmem_cache_alloc+0xdd/0x100 [ 565.173831][T13878] ? security_file_alloc+0x34/0x2c0 [ 565.173858][T13878] security_file_alloc+0x34/0x2c0 [ 565.173880][T13878] init_file+0x95/0x480 [ 565.173901][T13878] alloc_empty_file+0x79/0x1c0 [ 565.173923][T13878] alloc_file_pseudo+0x183/0x290 [ 565.173949][T13878] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 565.173971][T13878] ? security_inode_init_security_anon+0x7b/0x230 [ 565.173996][T13878] __do_sys_memfd_secret+0x11d/0x3d0 [ 565.174023][T13878] do_syscall_64+0x115/0x840 [ 565.174040][T13878] ? clear_bhb_loop+0x40/0x90 [ 565.174062][T13878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.174081][T13878] RIP: 0033:0x7f769219de59 [ 565.174097][T13878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.174115][T13878] RSP: 002b:00007f7693003028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 565.174133][T13878] RAX: ffffffffffffffda RBX: 00007f7692426180 RCX: 00007f769219de59 [ 565.174145][T13878] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 565.174156][T13878] RBP: 00007f7692233e6f R08: 0000000000000000 R09: 0000000000000000 [ 565.174166][T13878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 565.174177][T13878] R13: 00007f7692426218 R14: 00007f7692426180 R15: 00007ffcf9f18cd8 [ 565.174199][T13878] [ 565.993439][T13874] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 566.011405][T13896] bond0: option packets_per_slave: invalid value () [ 566.095465][T13896] bond0: option packets_per_slave: allowed values 0 - 65535 [ 566.152563][T13874] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 566.314820][T13874] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 566.453880][T13874] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 566.479310][T13886] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 566.515129][T13886] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 566.525101][T13897] capability: warning: `syz.1.1555' uses 32-bit capabilities (legacy support in use) [ 566.585575][T13886] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 566.627261][T13886] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 566.664522][T13886] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 566.709744][T13874] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 566.718192][ T8642] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 566.866917][T13874] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 567.036051][T13874] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 690522788 [ 567.208802][T13874] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 567.388632][T13895] ubi0: background thread "ubi_bgt0d" started, PID 13895 [ 567.399664][T13876] ubi0: detaching mtd0 [ 567.420860][T13895] ubi0: scrubbed PEB 0 (LEB 2147479551:0), data moved to PEB 31 [ 567.514966][T13876] ubi0: mtd0 is detached [ 568.121396][ T8642] Bluetooth: hci1: command 0x0c1a tx timeout [ 568.183846][T13933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1563'. [ 568.519461][ T8642] Bluetooth: hci2: command 0x0c1a tx timeout [ 568.598728][ T8642] Bluetooth: hci3: command 0x0c1a tx timeout [ 568.678393][ T8284] Bluetooth: hci4: command 0x0c1a tx timeout [ 568.684510][ T8642] Bluetooth: hci0: command 0x0c1a tx timeout [ 568.918153][ T6339] block nbd0: Possible stuck request ffff888027f67000: control (read@0,4096B). Runtime 240 seconds [ 570.949345][T13980] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1572'. [ 574.263645][T13989] Process accounting paused [ 574.688783][T14001] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 574.715918][T14001] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 574.743360][T14001] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 574.768645][T14001] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 574.795751][T14001] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 576.239314][ T8642] Bluetooth: hci1: command 0x0c1a tx timeout [ 576.716469][ T8284] Bluetooth: hci2: command 0x0c1a tx timeout [ 576.796440][ T8284] Bluetooth: hci0: command 0x0c1a tx timeout [ 576.802563][T10195] Bluetooth: hci4: command 0x0c1a tx timeout [ 576.809190][T10195] Bluetooth: hci3: command 0x0c1a tx timeout [ 576.868549][T14027] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 576.903094][T14027] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 576.949637][T14027] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 577.015561][T14027] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 577.069794][T14027] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 577.830899][ T31] INFO: task syz.2.1074:11487 blocked for more than 143 seconds. [ 577.838870][ T31] Tainted: G L syzkaller #0 [ 577.854148][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 577.893231][ T31] task:syz.2.1074 state:D stack:24352 pid:11487 tgid:11486 ppid:5626 task_flags:0x400140 flags:0x00080002 [ 577.948855][ T31] Call Trace: [ 577.963591][ T31] [ 577.977668][ T31] __schedule+0x125c/0x6730 [ 578.000792][ T31] ? do_raw_spin_lock+0x128/0x260 [ 578.026411][ T31] ? __pfx___schedule+0x10/0x10 [ 578.049693][ T31] ? find_held_lock+0x2b/0x80 [ 578.071563][ T31] ? schedule+0x225/0x2c0 [ 578.092044][ T31] schedule+0xdd/0x2c0 [ 578.111559][ T31] schedule_preempt_disabled+0x13/0x30 [ 578.138266][ T31] __mutex_lock+0xccc/0x1bd0 [ 578.159779][ T31] ? bdev_open+0x41a/0xe40 [ 578.181154][ T31] ? find_held_lock+0x2b/0x80 [ 578.205058][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 578.230108][ T31] ? bdev_open+0x41a/0xe40 [ 578.253059][ T31] bdev_open+0x41a/0xe40 [ 578.271461][ T31] ? iput+0x3a/0x40 [ 578.289121][ T31] blkdev_open+0x34e/0x4f0 [ 578.308565][ T31] do_dentry_open+0x6ab/0x14d0 [ 578.333994][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 578.358631][ T31] vfs_open+0x82/0x3f0 [ 578.377144][ T31] path_openat+0x2873/0x4280 [ 578.398900][ T31] ? __pfx_path_openat+0x10/0x10 [ 578.426268][ T31] do_file_open+0x20e/0x430 [ 578.452788][ T31] ? __pfx_do_file_open+0x10/0x10 [ 578.470564][ T8642] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 578.499480][ T31] ? alloc_fd+0x471/0x7a0 [ 578.527071][ T31] ? do_getname+0x191/0x390 [ 578.556733][ T31] do_sys_openat2+0x10f/0x1e0 [ 578.584220][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 578.612550][ T31] __x64_sys_openat+0x12d/0x210 [ 578.626952][ T8642] Bluetooth: hci1: command 0x0c1a tx timeout [ 578.649845][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 578.684331][ T31] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 578.718903][ T31] ? syscall_user_dispatch+0x76/0x130 [ 578.749749][ T31] do_syscall_64+0x115/0x840 [ 578.774842][ T31] ? clear_bhb_loop+0x40/0x90 [ 578.796673][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.827755][ T31] RIP: 0033:0x7f36b559de59 [ 578.846530][ T31] RSP: 002b:00007f36b651a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 578.883261][ T31] RAX: ffffffffffffffda RBX: 00007f36b5825fa0 RCX: 00007f36b559de59 [ 578.920140][ T31] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 578.945509][T14034] Bluetooth: hci2: command 0x0c1a tx timeout [ 578.951605][ T8642] Bluetooth: hci3: command 0x0c1a tx timeout [ 578.971405][ T31] RBP: 00007f36b5633e6f R08: 0000000000000000 R09: 0000000000000000 [ 579.007868][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 579.027739][ T8642] Bluetooth: hci4: command 0x0c1a tx timeout [ 579.050495][ T31] R13: 00007f36b5826038 R14: 00007f36b5825fa0 R15: 00007fff039e5ab8 [ 579.088786][ T31] [ 579.102563][ T31] [ 579.102563][ T31] Showing all locks held in the system: [ 579.110694][ T8642] Bluetooth: hci0: command 0x0c1a tx timeout [ 579.196536][ T31] 1 lock held by khungtaskd/31: [ 579.229722][ T31] #0: ffffffff8ebe5f80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 579.289332][ T31] 2 locks held by getty/5380: [ 579.320271][ T31] #0: ffff8880370590a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 579.366427][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 579.411927][ T31] 3 locks held by kworker/0:6/5775: [ 579.436270][ T31] 1 lock held by udevd/7782: [ 579.458115][ T31] #0: ffff888027dc5350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 579.499803][ T31] 4 locks held by kworker/u10:23/10982: [ 579.527957][ T31] #0: ffff88801caf6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 579.567349][ T31] #1: ffffc9000468fd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 579.608527][ T31] #2: ffffffff90a86148 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 579.639813][ T31] #3: ffffffff90a9ed40 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 579.673936][ T31] 1 lock held by syz.2.1074/11487: [ 579.698221][ T31] #0: ffff888027dc5350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 579.720238][ T31] 1 lock held by syz-executor/11733: [ 579.731995][ T31] #0: ffffffff8ebf1a28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 579.756027][ T31] 1 lock held by syz.1.1564/13950: [ 579.767209][ T31] 2 locks held by syz.1.1564/13955: [ 579.793468][ T31] [ 579.805247][ T31] ============================================= [ 579.805247][ T31] [ 579.878438][ T31] NMI backtrace for cpu 0 [ 579.878459][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 579.878485][ T31] Tainted: [L]=SOFTLOCKUP [ 579.878492][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 579.878502][ T31] Call Trace: [ 579.878508][ T31] [ 579.878515][ T31] dump_stack_lvl+0x100/0x190 [ 579.878542][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 579.878565][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 579.878624][ T31] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 579.878653][ T31] sys_info+0x141/0x190 [ 579.878674][ T31] watchdog+0xcb1/0x1030 [ 579.878704][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 579.878732][ T31] ? __pfx_watchdog+0x10/0x10 [ 579.878757][ T31] ? __kthread_parkme+0x18c/0x230 [ 579.878779][ T31] ? kthread+0x13a/0x450 [ 579.878800][ T31] ? __pfx_watchdog+0x10/0x10 [ 579.878829][ T31] kthread+0x370/0x450 [ 579.878851][ T31] ? __pfx_kthread+0x10/0x10 [ 579.878875][ T31] ret_from_fork+0x72b/0xd50 [ 579.878896][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 579.878917][ T31] ? __switch_to+0x800/0x10f0 [ 579.878946][ T31] ? __switch_to_asm+0x39/0x70 [ 579.878971][ T31] ? __pfx_kthread+0x10/0x10 [ 579.878995][ T31] ret_from_fork_asm+0x1a/0x30 [ 579.879029][ T31] [ 580.196081][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 580.202977][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 580.213659][ T31] Tainted: [L]=SOFTLOCKUP [ 580.217980][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 580.228033][ T31] Call Trace: [ 580.231328][ T31] [ 580.234258][ T31] dump_stack_lvl+0x100/0x190 [ 580.238948][ T31] vpanic+0x552/0x970 [ 580.242933][ T31] ? __pfx_vpanic+0x10/0x10 [ 580.247436][ T31] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 580.253601][ T31] panic+0xd1/0xe0 [ 580.257345][ T31] ? __pfx_panic+0x10/0x10 [ 580.261762][ T31] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 580.267925][ T31] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 580.274087][ T31] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 580.280248][ T31] ? watchdog.cold+0x1ec/0x234 [ 580.285034][ T31] ? watchdog+0xcc1/0x1030 [ 580.289476][ T31] watchdog.cold+0x1fd/0x234 [ 580.294099][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 580.299932][ T31] ? __pfx_watchdog+0x10/0x10 [ 580.304623][ T31] ? __kthread_parkme+0x18c/0x230 [ 580.309687][ T31] ? kthread+0x13a/0x450 [ 580.313960][ T31] ? __pfx_watchdog+0x10/0x10 [ 580.318651][ T31] kthread+0x370/0x450 [ 580.322742][ T31] ? __pfx_kthread+0x10/0x10 [ 580.327344][ T31] ret_from_fork+0x72b/0xd50 [ 580.331941][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 580.337072][ T31] ? __switch_to+0x800/0x10f0 [ 580.341757][ T31] ? __switch_to_asm+0x39/0x70 [ 580.346526][ T31] ? __pfx_kthread+0x10/0x10 [ 580.351127][ T31] ret_from_fork_asm+0x1a/0x30 [ 580.355910][ T31] [ 580.359006][ T31] Kernel Offset: disabled [ 580.363335][ T31] Rebooting in 86400 seconds..