last executing test programs: 9.931808858s ago: executing program 3 (id=3971): r0 = openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$auto_cachefiles_daemon_fops_internal(r0, &(0x7f0000000300)="a04f", 0x2) unshare$auto(0x40000080) r1 = ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000040)=0x5) unshare$auto(0x40000080) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/set_event\x00', 0x101901, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r4 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) ioctl$auto(0xffffffffffffffff, 0x541b, 0x24) recvmmsg$auto(0x3, 0x0, 0xfffe, 0x6, 0x0) process_vm_readv$auto(r1, &(0x7f0000000100)={&(0x7f0000000080)="f855c8d9176cb2485ddb4476ce43284bb7972322440c326f8191693f75e78cddb42429185a8849ea625b789293bf515245df8258b76c79171861dc2ee1f17e812e60244bb71a3b0ca6b41a00d0589a4e92206b8f", 0x7ff}, 0x7, &(0x7f0000000240)={&(0x7f0000000140)="59f8acd951dc1b45ba87cde4ee6df06fc5ac38560e15dc4aa49b4563a3c00909a75e19f1c121d7925d1ffa1b6ac60d70d9a85e82e154c9062c9c9e513351f62ab9989111bfb4e70b43db972505295c69b5c48db09ef5d810c568ce621db94376f871150d5a0797ff183ce902cfced8f23ae576c7bfd017232dc329109e0ef957348a780e2c1fb53de30acdb7ef4d83599feec93e23bf0f708eff57190c83840eefcc205c76e9faea9764e92d8f", 0x1}, 0x7e4, 0x2) 8.39826756s ago: executing program 2 (id=3974): openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x121200, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) r0 = syz_clone(0x5004000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x503083, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x40800) unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) getrandom$auto(0x0, 0x6000002, 0x3) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x12de82, 0x0) ioctl$auto(0x3, 0x40106f52, r2) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x24801, 0x0) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r4) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00ab29dc931f0e02b7745be74fb8e8255f614f85f94bc5ef8facda4b1cb3e135ef23203752a9a06f5adc02fe10fd6059eb5ec860fbb39453d7ba92bd5a73e0e45ce2d585cccf203901d41ed36536bffcadc5fa27dbe72d209b4c922ee03aba35fb65731b21d405c9def0", @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001280)={&(0x7f0000000240)=ANY=[@ANYBLOB="08010000", @ANYRES16=r5, @ANYBLOB="080027bd7000fddbdf2569000000060065000900000006004f01090000001700130013c366f9244357d432f6e44cc4bf4e5878fe5d00080002002f247b0005006000080000000500a3000200000045001f00ff8ddbe0dca3a0c40b31575a0fc89a052ad1070f85525f215dde201061c7ecbce4e876ab8d9dd571ee3b51789e3654f47243f6e34471afffdadef51ab57ef583e90000005c007580ba6aeb15a3f761572ca4eb336e5dfaa39a4e112524144c26d5a6468d0f3a3919ee7a2bf863f683c121bc3b2170c49b100b274baaf7e35af6d0f2356f99129b14dfb3c040f557f81b08003800000400000800e600", @ANYRES32=r1, @ANYBLOB="05008a00080042000500f600071a0000000bc38e66a8950ee3ab259a4dffde2016f61a9d1a71fdd267b60e8be22f016b650bbcaa453fb002bcf118f0e96d4b6248efe1352050bde81bcec7d7d37591a1304ff17feb"], 0x108}, 0x1, 0x0, 0x0, 0x91}, 0x10) ioctl$auto_MON_IOCX_MFETCH(r3, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r3, 0xc0109207, 0x0) mlockall$auto(0x7) mprotect$auto(0x0, 0x806121, 0x6) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) ptrace$auto(0x10, r0, 0x2, 0x1007ff) 7.192855765s ago: executing program 3 (id=3976): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r2) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x20a000, 0x2091d2, 0x4, 0x0, 0x6, 0x2) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="48100000", @ANYRES16=r3, @ANYBLOB="1b0026bd7000fbdbdf25030000000400080010000380", @ANYRES32, @ANYBLOB="1c10038045167eab3bed37f707641200007240faae86ada13ca8aa30156e8582b5d971b7c8ea9f7358ba002fe4a4098f863958bc4bb878296de239f6121744f3d53f7f8bd7cd58b7bde427ceb080fb6e6649513522a0828ab0ebb333b1d7a3e7a5c55969a954c82f9bc305b98445030a6f031d39ec216adeb1a27f67ddd8d532dd065c0c86f5b4cb2a0735253894289a91b1cb6a6ec1dfa4a23b0fe054cb5befc1b69371606fecfb00fade361ac34892dee50761a1091fcd12acf561d943c93a46bc4eddacdc91c156b4ef15f785f1c1ccce8f260349c08fd8e37ca42e2ef5fff7a9549e904c884595943ba9d2bb4cb86ab17e6f321b81e3b2c3cd21d942623532d1f6a5fe2eb0558e616e70a899ed956440cd2b36727066a67f3c8de04903170894c1e19f2770a70a33ad4079ce7c1a8c0b80078ed60e4d5039f6bc67369960445f6c1ad2bd1bb7c3a346b0b54424dbd9126eeb7a968c0f1d1f563ded17ff3a9daa1e408355856a8c39f421f1b9394f6fa5737bc3520e0f5f04bd82b90ae2b98264bdfa40215aa8fbebcff062c37d2556c50a65b61c0260e2e274e66ee1dbee0a9779fc977287dd8bf24aacf1f42cb8fe939acac8072af52a98abfd7cb6659c8e34057b0ad55a43c2c30ccca28ff90c94eb6aaedb805c1b5c93c0da6497b15469d41838447e9ea24fd0110b7954e694bb5c6848573de8034de0c65df91919d14e42903f552850ee90b8266d33cd77c6fd3ea529b7457bae2f72bd5768e2d9e4e619574a1ab7e0800a37e810e3b2e7c2c62bb63f126ff76c750ec3bdb2e7a07993aa8ea4e708be8e8145404bfc13db878a605fe6d3298c1000156a269b74953d21f0911a2768cd84168231563e5f57f9e92358c07d2cffb5cb98dc0a8f763bee29e05d3c6563c567ca5f34a227c39969f2da2108b3b84bc78b34e2e208a6b75365d650e2330ed4bf4509b024666a4f42385ccd9b9d1afd37c93f25fc8395dcd17d57fc431f9136c5b92f5130427fc0d59fac6df29d74b30be5422ae9a578c2d613f0f8f1a38f4b862292b8f96e8d324206343f86fa232341de5eb065d7d544a84a4fcdc9b84438e8fd2c16e02141acf7b656a4314974f5639b861affb0fc08bd824b1b52054906d2621f88b5dc5aa4a6b2763f5a94da46b96486dc173fd9b2de6b1ac9478b9ab48c01b0b79579ff9f0b2b1119c1c068ec71514e67198d5e480d5881055e150f4cc3fc6f8512c0890afa7dee1bc78c97ce7404530f12a04277608eab05f7e7edd30ae978d955d80b91c8faaae8eb1273b016a0c01c9cd8c023dec85ff5f3c6ce700e6bd1e597262d829166d3c2ca78bf1ef2de9b479e3b65a5edec569c50f022858a71bd6017b5bce54b77f1d3bf952ea096ca77b20b3b253843395da7ae13f71daef6b5338dad239d199b1d56ae0da6f02d68967827da4a7b3cda7f31d7f98201ae33290ba25a038d433be41995d0e23a6381a92a929786dd3a2bbcd1ae06a4b7b826a752bc8faa099ca9ecfaf7d26264636523f9ed4c8eae0d7acbaf83d9337d96897592556c256d6e3ad4632184749d016dc70db1af92d1ee4dbc516fe910577c2977bb9ae70525464cfdaabda391bd7b36bac6eef59a6df013d539357f6d18d8abec63f3c488043d8b44ea1767de5a4918ac358b3d79852473894ecff4d101315be10b19b0b347ad3e2846c81d53de7124d5f8810cbc6aa381f8ede9324644357410f286fe935f8e1044171a7df0d850224ec7f08ef1ab0e2cd42e38235b956bf5ff19daced58e2b1d5b665a665ebfa8e3d8973b33647602efeb0089bde265353719bbdf922a8db498a71bcef1f7b9cbee59258e3736d50a9a3828392607a8f393d3da6d11585b7de699ae6f23baaf9dfb5190f73551801d8da2de9e861de887f61e1c687a7ed1b542ba51a9a7fc745cf43ada692ab1cdb8bd089d1b65bc5d9b2e84a72ef35b8a8844f2ed9be4df73f20243766c97efc3a7926750b007aa631f9bbe6fa34899402067522fcd0fc5267c5f8804a2cc77666f57548b75b11b6b5bf9d042af8add84b1358d4b0f38e0425380c3fb9978f9c19f2f44865bd86916dbe1aae8b80a16b6e8929cbf7a8101bb4888832392c875f4ed39163cfe0750fac1c8fba4a0fc1fb9a6b814bf40acd371362b129bf29bf2b3578b124e2c29d76d2a7ac870be69b6f6dcd6b1b67849dbd444d17eb8f64437177a0b35f80cf177812b894f70da4b1c814cfc6df8be67c79d736b46de16924a9b95da8e47c1674069a6522ede3d1ad36a1c3be350eb44764b511e6e46f6b3f6bbab3473914b2ca9aba785ffdc346cb8f4099dd69d6efe9f20de4558163eb5d096b54416a0f43f9c989a9955000617a18c6d948d5f22126b0ec94395abbc32f7a6bbeb16d608018d5bb0f1f1dd70c839e5a144bb760fe94f1dd8220781f1415bcbd26d86fc3520905d6bcb3b5de29f9d3f0d9dda0229ec95e54d95a898dd527807c9bdcbd23fe899da6735eb77e71acdb27f32232da3dd6199136efe87e11a82432c3007e4b411ae05cd17372c4ba6e2a0f27fd1db6c80084991ff72497d7ad35977d4c49be9bf8d104954c305b68aa4c627bf224f75fccac7a379503fffccf72bad202aa61b1afd3293728520adeb2176b8f140e8ae2026e84c7fea6a12a291d659083b6d0eceaaac826bd94dd82141aa545250428342e5749a00aa8e146b42c38f41c510c476a693b3b220c52896114e7c4ff285c4aeee3993ec2a4c365797be190f722be540fbf304e85ffd263a03ace9753dc07d0575e950eacc5a082195f2a2a9e1d6dccc46eb4b5dc936744dcbe310c45b21e014938360af42a8f5d26245d275ee8a09d450b5800b054be17792986f1bec99e2040f163aef398d435e813d0ad4bd99dfbf49bc93e3b0ae11bf9e3379b97b171d945402859112d1a5446882cf37062cb3d597e42a3ce82a549430bceb14943e1deb7ad698cd7756cd2c7e91ff3efb2157c6f78b909f1df13c1e859de4c2e06b53ef8c335ea60d77bb9f9f7801cb406d12868e506214f0a8d3c8996dad0bbeb4b7e9a2ee7e0123d0921038bbb58a4a5c34fac411fde97185d931ec8ebffd3a83778c1419fef99136577331a7280b97b3ec0417958cc1ca686709c1b4f9fd605e705c8c4d11722e56b11cf5aee15c0788ec27b01d6e50c701c7c0159f8f794750d47bec2530a37408eb45e38127266550607cad2e1db5af48bf965ecfda5fd4109d75e219f815b7c17dd81e4e8386f2f59b6f60bf082bcda9557d442381c64acd832fdc21df9b64a2ef6d8a70a100b5b037adf2bfcdc1eff57042847620a9392f1949bbe479d2d4c67dcc9bf979b7e7d327b7c6e20b84445f719adffec4236b9fffb9600bfa8f26ff0bbe61b2ceeca6947c01f55a4a96d3591e9e3f92f8d3a6acee1bcf2050d55e6d22a722114271a7a87344faeb434206da5a36d6607ad8d9bf59fec2688b4e297051d15d9aafeaa3559d75bea88c831a3e2178eaea9869f345d413ed6314762bdd0bf8e01bbc356a6e2d1b090eb8eac00777f2c74a00319f8bcbd29b4a1e18dedc6c0a84a5e154890cc67b0fa0d750689c9efd9360d11aac29fe4fb5401a4702e59f575578df4d8bba519868e6015813ddfb818407c3c04670fa1058b1aad486d5caeb6fe6cd639c269aca1a287fa8d1d8efbb519b34fd2196c5cb31526f106ae4c7d38857eb0e34420369ff3bf07e1eb63d0f650a156651c9d836cd00d1441288bef3d7e9d281bd4b5e4876f4eeaa3d37beaaf2db6b4903c429d1047beb5d67789e87210fc9feff5a8285fff95c3800b20152630e25d7b0c494ee1a92b8bb98d406d9c8d69e76f93186518a5307a840658ed76f425c9055f74529a81d4e9afbd5dec0f1ecb5d8d706cb62635078041effa6a4668d277be92157cf0a8710dcba5218afad7dd44b8ed48590e49934909eb80d599843a21bd70198da950e9a6887c010d0a4bc6b68cd992d16e44102e5b06aef610c4f753facfc16dde5795830aec5faf12f6664cb493397ab2ec60172d64d96e08bff5f15b371a286ef4bcbf3b1bd1dd33d79c2994d821272fa4e081e582a7b25a263b7c01fd1b7e582f851a7409c8e5b5de991075cec3939f5d52c9eed6806031759af1c4f407a3b6a558f534d2da5491a93db21fa3b721b91d13cda52d8bb23fd41b8022d18a43d6979cb31fe7d7e9d4cddc60daad77b5ad02516fd1b0a6fe5d78cfa0a15f8eae65c84e22da84b24f0893d2e0324d2f93a83f3b322f31a741d52e9bf5c85c5229a83b325d67141a6c8b5a8fecf245d6651bb4ec917b61589ef102855ae0be7d248f86fe85d00ef8a6bf3482d4671757657822191b4a7a839fbbb3d255faea2ac1a7af9"], 0x1048}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r4, &(0x7f0000000040)="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", 0x2ed) ioctl$auto_SNDCTL_SEQ_SYNC(r4, 0x5101, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/cards\x00', 0x2, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f00000000c0)=""/147, 0x93) mmap$auto(0x0, 0x8, 0x2, 0x7fffffff, 0xffffffffffffffff, 0x10c) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) sysfs$auto(0x2, 0x3b, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) 6.740744014s ago: executing program 2 (id=3978): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto_SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, &(0x7f0000004440)) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x16e) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e23, @multicast2}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) open(0x0, 0xcd1e23e41b02d660, 0x154) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) recvmsg$auto(0x4, 0x0, 0x33c) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x0, 0x1001, 0x0, 0x0, 0x0, 0x0) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) r1 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r2, 0x5393, r1) rseq$auto(&(0x7f0000000300)={0xe, 0x7, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) personality$auto(0x8) 6.683392519s ago: executing program 0 (id=3979): r0 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0) poll$auto(&(0x7f0000000040)={r0, 0x1000, 0x1c9}, 0x2, 0x7) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) r1 = socket(0x15, 0x5, 0x0) ioctl$auto(0xffffffffffffffff, 0x40084d02, 0xffffffffffffffff) statmount$auto(&(0x7f0000000180)={0x9, @inferred, 0x81, 0x0, 0x100000000}, &(0x7f0000000480)={0x7ff, 0xdd, 0x3, 0x1, 0x3, 0xffffffff, 0xffff, 0xfffeffff, 0x85dd, 0x8, 0xfff, 0x6, 0xc48, 0x5, 0x9ea, 0xfffffffffffffffc, 0x542, 0x0, 0xfffffa39, 0x9, 0xd76c, 0x5, 0xf2, 0x400, 0x8, 0x8001, 0x8, 0xf, 0xb, 0x1, 0x10000, [0x7, 0x8001, 0x7ff, 0x8000, 0x1, 0x6, 0x43, 0x7fffffffffffffff, 0x100000001, 0xfffffffffffffff1, 0x65, 0x2, 0x6, 0x4, 0x0, 0x9, 0x2, 0x1, 0x9, 0x2cc8ff0e, 0x0, 0x1, 0x1, 0x4, 0xfffffffffffffffa, 0x8, 0x3, 0x7fffffffffffffff, 0x7, 0x2, 0x4f, 0x29a, 0x4, 0x200, 0xdc, 0xfa, 0x0, 0x6, 0x8000000000000000, 0x3, 0x3, 0x4, 0x5], "f7513f75280da3c13e6aced0de4d73eb14e6550ccb6eb84d4cca97168d2179f28291776fd25b0548f470d8bdbbc10c2d03dabfed650cd418a2078d87a916bd6e7453042d32ca272eae234fc9f903e18695e478774bcb08f085b4998e79471aaa8dd2e4552c75dc3ed21bd227b64214e28be43309527c35b3e875536213e28de2ebef6564705a537bc17f16689ff20d606c7fd611a304f5d0e82d"}, 0x1, 0xfff) setsockopt$auto(r1, 0x114, 0x8, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) ioctl$auto(0x4000000000000c8, 0x400454d9, 0x3) setresuid$auto(0x8, 0x0, 0x4) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x842, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/disksize\x00', 0x2202, 0x0) read$auto_cachefiles_daemon_fops_internal(r2, &(0x7f0000000080)=""/232, 0xe8) write$auto(r2, &(0x7f00000001c0)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x3dec) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd4/queue/iosched/front_merges\x00', 0xe0281, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000040)="2d3780", 0x3) setsockopt$auto(0x3, 0x10000000084, 0x200081, 0x0, 0xb) keyctl$auto(0xe, 0x1, 0x0, 0x5eaf, 0x8) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/run_estimation\x00', 0x88042, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r4, 0x0, 0x0) r5 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r5, &(0x7f0000000440)="11000000000000000000000000000100", 0x10) 5.942106801s ago: executing program 3 (id=3981): write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) io_uring_setup$auto(0xf0, &(0x7f0000000180)={0x6, 0x18, 0xd64, 0xc852, 0x6, 0x7, r0, [0x1, 0x401, 0x1000], {0x7, 0x5, 0x1, 0x4, 0x95, 0xf4c, 0x7fff, 0xfffffffb, 0x65f29f6d}, {0x3, 0xadc, 0x10000, 0x0, 0x5, 0xffffffff, 0x1000, 0x54f, 0x5}}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r1 = socket(0xa, 0x3, 0xff) connect$auto(r1, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000001680), 0x0) syz_clone3(0x0, 0x0) madvise$auto(0x1ffff000, 0x7, 0x100000000) mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}}) syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0) futex_wake$auto(0x0, 0x5, 0x4, 0xa) futex_wake$auto(&(0x7f0000000000)="facff2b53ab3522cb329b5a87bdbc091f5a6ad597f2789e870d64db4cf6503135f5a750abc973b65703b664991ab45d13445d9c4df1d25210345f44468854c9689b943d1c65073bf11fd0c98fb48f9f4d67c0908e7470167", 0xfffffffffffffff8, 0xfff, 0x7f) sysfs$auto(0x2, 0x20, 0x0) shmget$auto(0x8, 0x10563, 0x568d1af2) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0x20081, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000e1, 0xeb2, 0x401, 0x8000) 5.531779384s ago: executing program 0 (id=3982): r0 = openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$auto_cachefiles_daemon_fops_internal(r0, &(0x7f0000000300)="a04f", 0x2) unshare$auto(0x40000080) r1 = ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000040)=0x5) unshare$auto(0x40000080) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/set_event\x00', 0x101901, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r4 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) ioctl$auto(0xffffffffffffffff, 0x541b, 0x24) recvmmsg$auto(0x3, 0x0, 0xfffe, 0x6, 0x0) process_vm_readv$auto(r1, &(0x7f0000000100)={&(0x7f0000000080)="f855c8d9176cb2485ddb4476ce43284bb7972322440c326f8191693f75e78cddb42429185a8849ea625b789293bf515245df8258b76c79171861dc2ee1f17e812e60244bb71a3b0ca6b41a00d0589a4e92206b8f", 0x7ff}, 0x7, &(0x7f0000000240)={&(0x7f0000000140)="59f8acd951dc1b45ba87cde4ee6df06fc5ac38560e15dc4aa49b4563a3c00909a75e19f1c121d7925d1ffa1b6ac60d70d9a85e82e154c9062c9c9e513351f62ab9989111bfb4e70b43db972505295c69b5c48db09ef5d810c568ce621db94376f871150d5a0797ff183ce902cfced8f23ae576c7bfd017232dc329109e0ef957348a780e2c1fb53de30acdb7ef4d83599feec93e23bf0f708eff57190c83840eefcc205c76e9faea9764e92d8f675a60c99cd3f0da86fb1d69dd9eb5aec81f16262e352671dce1581e9651a5a6d088dc566660e876826c6c", 0x1}, 0x7e4, 0x2) 5.457079389s ago: executing program 1 (id=3983): r0 = openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$auto_cachefiles_daemon_fops_internal(r0, &(0x7f0000000300)="a04f", 0x2) unshare$auto(0x40000080) r1 = ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000040)=0x5) unshare$auto(0x40000080) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/set_event\x00', 0x101901, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r4 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) ioctl$auto(0xffffffffffffffff, 0x541b, 0x24) recvmmsg$auto(0x3, 0x0, 0xfffe, 0x6, 0x0) process_vm_readv$auto(r1, &(0x7f0000000100)={&(0x7f0000000080)="f855c8d9176cb2485ddb4476ce43284bb7972322440c326f8191693f75e78cddb42429185a8849ea625b789293bf515245df8258b76c79171861dc2ee1f17e812e60244bb71a3b0ca6b41a00d0589a4e92206b8f", 0x7ff}, 0x7, &(0x7f0000000240)={&(0x7f0000000140)="59f8acd951dc1b45ba87cde4ee6df06fc5ac38560e15dc4aa49b4563a3c00909a75e19f1c121d7925d1ffa1b6ac60d70d9a85e82e154c9062c9c9e513351f62ab9989111bfb4e70b43db972505295c69b5c48db09ef5d810c568ce621db94376f871150d5a0797ff183ce902cfced8f23ae576c7bfd017232dc329109e0ef957348a780e2c1fb53de30acdb7ef4d83599feec93e23bf0f708eff57190c83840eefcc205c76e9faea9764e92d8f675a60c99cd3f0da86fb1d69dd9eb5aec81f16262e352671dce1581e9651a5a6d088dc566660e876826c6c", 0x1}, 0x7e4, 0x2) 5.346399964s ago: executing program 2 (id=3984): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000c80)="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", 0x144) unshare$auto(0x40000080) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x1002, 0x9, 0x4, 0x200000eb0, 0x401, 0x701cf82a) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/transparent_hugepage/hugepages-2048kB/enabled\x00', 0x22b42, 0x0) r2 = eventfd$auto(0x34b) write$auto(r2, 0x0, 0x8) sendfile$auto(r1, r1, 0x0, 0x6) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x10000010, 0x0, 0x0, &(0x7f00000001c0)={[0x1ff, 0x0, 0x7, 0xfff, 0x948b, 0x9, 0x15f4da0a, 0x3, 0x400, 0x62, 0x80000000, 0x4, 0x6d41, 0x8001, 0xa, 0xfffffffffffffdf7]}, 0x0) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x2004000) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) setpriority$auto(0x2, 0x0, 0x80000) sendmmsg$auto(0x4, 0x0, 0x400, 0x7) r4 = socket(0x10, 0x2, 0x4) r5 = bpf$auto(0x6, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x8, 0x10035, 0x80000000007, 0x2, r4, 0x20000000000803}, 0x6f0) ioctl$auto__ctl_fops_dm_ioctl(r5, 0x1, &(0x7f0000000300)="c096215b03c87553d73ffa7d9d90f6f978f2") read$auto_proc_coredump_filter_operations_base(r5, &(0x7f0000000040)=""/40, 0x28) close_range$auto(0x2, 0x8, 0x0) 4.647534926s ago: executing program 3 (id=3985): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000002940)='/dev/fb0\x00', 0x841, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2242, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x191000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_pipe\x00', 0x20c01, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0xffffffffffffffff, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x1, 0xbc3, 0x800, 0x3, 0x8, 0x10001, 0x400000000003, 0x3, 0xffffffffffffffff, 0xfffffffffffffffd, 0x6, 0x9, 0xfffffffffffdff81, 0x4]}, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/irq/14/smp_affinity\x00', 0x40001, 0x0) pwrite64$auto(r1, 0x0, 0x8, 0x400000000000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getpid() openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x503083, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mouse0\x00', 0x2000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) 4.173152269s ago: executing program 2 (id=3986): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000c80)="5f74ab2fc43781e047140a5cbc3ac5229b90633d9cddda9efb1f2c3d5d1e63f3fb5acf079b9336319d009cb514679a42eaca52b81c166d19625d173c26ece6542f2fb29712f4fb9072fc432b4cf3e6f5a7f3c9f91ee88ba5fa11d48fd3658e8f44f8423b4cd02bbec912ed34f9f4b19b03d4c62b24ede44c0c76c34edf7bde061903c2ee4c64110ac668239fa53ba4291bae74c3d173663248ff0945dd2e405e0d378b5a8e4643a7bc3b35a7248431450ca8901467ea6dc5d86de1e90f869f6a04ac10043676f3b2c7f1339b2d7468133fb8447d17846b6b78079ecc31d7d0f74caa4a3db1ac4d312bfdb34bd331f1f771a2396108561a52153d63a7b2a3a077a7e4c1a22bcb23e1f3e511fee310baa67904d2aad4d6671e8b77c7720e37e84e0efecb60a35f188cbe8b8b2fb3967b78aa482aabb103f23083baa9b2ae653731d5993db4", 0x144) unshare$auto(0x40000080) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x1002, 0x9, 0x4, 0x200000eb0, 0x401, 0x701cf82a) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/transparent_hugepage/hugepages-2048kB/enabled\x00', 0x22b42, 0x0) r2 = eventfd$auto(0x34b) write$auto(r2, 0x0, 0x8) sendfile$auto(r1, r1, 0x0, 0x6) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000100), r2) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x2004000) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) setpriority$auto(0x2, 0x0, 0x80000) sendmmsg$auto(0x4, 0x0, 0x400, 0x7) r4 = socket(0x10, 0x2, 0x4) r5 = bpf$auto(0x6, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x8, 0x10035, 0x80000000007, 0x2, r4, 0x20000000000803}, 0x6f0) ioctl$auto__ctl_fops_dm_ioctl(r5, 0x1, &(0x7f0000000300)="c096215b03c87553d73ffa7d9d90f6f978f2") read$auto_proc_coredump_filter_operations_base(r5, &(0x7f0000000040)=""/40, 0x28) close_range$auto(0x2, 0x8, 0x0) 3.204275319s ago: executing program 0 (id=3987): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$auto_SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000040)) sendfile$auto(r1, r0, 0x0, 0x7) socket(0xa, 0x5, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x40001, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) setsockopt$auto(0xffffffffffffffff, 0x111, 0x7f, 0x0, 0x400) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/dummy_udc.3/driver_override\x00', 0xe2685, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0xd, 0x7d48, 0x948b, 0x4, 0x15f4da0c, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x4, 0x5, 0x2, 0x1]}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x26, 0x0, 0x0) socket(0xa, 0x802, 0x3a) setsockopt$auto(0x3, 0x29, 0x46, 0x0, 0x808) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "3d64dc8bff7fff7f610000000024"}, 0x55) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x59, 0x0) write$auto(0x3, 0x0, 0xfdef) r3 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x0, 0x9, 0x50b301a, 0x0, 0x2c, 0x1, 0x3}) statmount$auto(&(0x7f0000000080)={0xa, @inferred=r3, 0x10000, 0x6, 0x14f2252c}, &(0x7f00000000c0)={0x800, 0x7, 0x4, 0x5, 0x0, 0x2, 0xf, 0xffffffff, 0x11d, 0xffffffffffffffff, 0xff, 0x7f, 0xf, 0x100, 0xbd, 0x0, 0xfffffffffffeffff, 0x8, 0x7, 0x1, 0x5, 0x7, 0x5, 0x3, 0xc4b0, 0x11fd, 0x7, 0x7, 0x8, 0x2, 0x8000, [0x6, 0x3, 0x83, 0x9, 0x8, 0x7fff, 0x1, 0xffffffffffff8001, 0x100000001, 0x3, 0x0, 0x4, 0x0, 0xff, 0x5, 0x80000001, 0x4, 0x1, 0x8, 0x6, 0x10000, 0x4, 0x8db, 0x100000000000, 0xfffffffffffffffc, 0xff, 0x2, 0x8, 0x2e, 0x8000, 0x400, 0x8, 0x6, 0x1a63, 0x2, 0x3, 0x3, 0x6, 0x0, 0x1, 0x3, 0x5, 0xb009], "5f1ed21869fde4bfb620fbacacfe0de05a3e7bc6e65b50bcf3d2c88fd92fcdafc97d73349434a8dd277727b47e6f389f57f7cf999d3478881ac29c0be56ef67fe6b909e1db0f5640241a1c5c4c7a13557b3ff0d20bbe33e356b85131bc8a7b196423cf2683267b9be7ed6691c43e9c6f69288ee0925beb237641a4b137cde5000d9c7948dad4305d2ce444cd49af3a375e0241380910a70de6687fad26be46d6584d204268740d4000db2ab11f2803f3743f304dfdb7cc4525b2ce0ad7db750095e4206fedbd5acddd682bbc65272af12acab4ce533ac691639b5d979b30fa7a8351aef84463e8a2f6484ec7b43e95c0b08f6ea742"}, 0x1, 0x7) r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x400, 0x0) ioctl$auto_EVIOCSKEYCODE(r4, 0x40084504, 0x0) 2.818484052s ago: executing program 0 (id=3988): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x2, 0x9, 0x4000001000de, 0x15, 0xffffffffffffffff, 0x71d) prctl$auto_PR_SYS_DISPATCH_OFF(0x15, 0x0, 0x0, 0x9, 0x7) close_range$auto(0x2, 0xa, 0x0) socket(0x2, 0x1, 0x106) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/kvm/parameters/nx_huge_pages\x00', 0x80302, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/rose0/dev_id\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) sendmsg$auto_NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="00d099af1652b60ae61cfbb820e9ad36000000", @ANYRES16=r0, @ANYBLOB="100417b4800a540029bdc51a7b2aaea23f659b9e"], 0x14}, 0x1, 0x0, 0x0, 0x600008d0}, 0x448d5) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000100)={0x2, 0x3, 0x5f, 0x4, &(0x7f00000001c0), 0x8, 0xeb8e, 0x0, @number_of_packets=0xfffffff7, 0x7, 0x800476, 0x0}) socket(0xa, 0x801, 0xf) setsockopt$auto(0xffffffffffffffff, 0x4, 0x24, 0x0, 0xd) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/platform/vhci_hcd.12/usb34/34-0:1.0/usb34-port7/location\x00', 0x5ce941, 0x0) write$auto(r3, &(0x7f00000002c0)='0\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) mmap$auto(0x0, 0x95, 0x4000000000e3, 0x40eb2, 0xffffffffffffffff, 0x300000000000) capget$auto(0x0, 0xfffffffffffffffe) clone3$auto(&(0x7f0000000400)={0x100008000, 0x980, 0x4, 0x6, 0x0, 0x2, 0x1, 0x8, 0x4, 0x0, 0x3}, 0x40) r5 = socket(0xa, 0x801, 0x84) getsockopt$auto(r5, 0x1, 0x83, 0x0, 0x0) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="000227bd7000fbdbdf251f000000a432b39403000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10001}, 0x40) ioctl$auto(r2, 0x802c550a, 0x1) 2.602913825s ago: executing program 1 (id=3989): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x848000000015, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x6b) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x55) sendmsg$auto_NL80211_CMD_GET_MPATH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1a000}, 0x1, 0x0, 0x0, 0x20004000}, 0x100000) select$auto(0xe, 0x0, 0x0, &(0x7f0000000300)={[0x8, 0xffffffffffffff49, 0x5, 0x4, 0x800000000004, 0x1, 0x200000000005, 0x1b, 0x800000000010, 0x5, 0x3, 0x4000000000008, 0xfffffffffffffffa, 0xab, 0x0, 0x9]}, &(0x7f00000000c0)={0x0, 0x7}) r1 = socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x802, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x2, 0x80002, 0x73) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/vidtv.0/i2c-0/new_device\x00', 0x2001, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x100000000) r4 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x4610, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x27}, 0x3) setsockopt$auto(r1, 0x29, 0x37, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) recvmmsg$auto(r2, &(0x7f0000000340)={{&(0x7f0000000100)="8294d4a113186610efc4d59c84584c156ea4e3100528c47f17e8b9ca81e1ca20595a110006f817f6f5c8eba9c252630f9f86ad75664eef5c6257c5b9ed87e3d2c4c863486b3e1f38a2cb98a0b0111bbcc717e5c56456158a1f71ee4e48509433ce7bf5b8abc8a70eb86f0e7093823f50abdef4a5fce8e733c5", 0x1, &(0x7f0000000040)={&(0x7f0000000240)="163609c6ac5c5c4a10f6c3d79b39c53a0d9b6a0422aa0312ba8e48d3bdd8f88afdc22c7f38effa082daaf635f454df32089ab10217c6ed7c37297e403342a06fa61148a08ca1ea3e931687f3d8995d09b051558877350f1b33417a64d2e44ecba6d92fb5a2ae28fa47a5613995b9122df9a4d1cec8542721e92fffeccdc0bc4b048f8a3290e36f0c92bef48cf00ec70e8ae281d97b28f5a192207d5d6879d4960e2af0494a125dc6f9f245e03d2b2bbb082b3ea74f2fbcb0da3ed40556e0c8d9c1b6707c1f37be8f0812c64693f46856fe22a7e5549898d377eb7b184e83b5730906e5784404e16952e39b1984e8d90e6af1", 0xfffffffffffffffc}, 0x708, &(0x7f00000001c0)="e99c6b4dd5b941674b2411a96df0f99ba68709c4b4f0e21dae27fbbcd59e7d179adb9c978b956e8858ca5ff12052df73a891", 0x3, 0x57}, 0x6d}, 0x80000000, 0x10, &(0x7f0000000380)={0x0, 0x4fd0}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) 2.451733603s ago: executing program 0 (id=3990): mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/trace_marker\x00', 0x341, 0x0) mmap$auto(0x401000000000, 0x40000004020009, 0xc, 0x15, 0xffffffffffffffff, 0x7ffe) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14) r4 = getuid() sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002200)=ANY=[@ANYBLOB="901d0000", @ANYRES16, @ANYBLOB="080a26bd7000ffdbdf2516000000090309800c00e78008009200640101020602bf60393b8e8c11f6cd9517d218fb1332b73000bf0615509cbcfe065420c5a8267e38c3168162b01da5b94d7ecf0e134186aff62b953239185b0eaa5deac2d64935195b895c1a9410cd67f6b3e723b4eda49c1f83d8ad650ffaecdc3f8d2085c1f4a44f5c7f3110806bc714133668fc964068183d21c40bfd007b8014000900fe8000000000000000000000000000aa0800b700", @ANYRES32=r1, @ANYBLOB="5707be7cd8848e7744de2fb3b8bd1dfbcab32ed5616e3e0b305ea367d9c1a760158c9e347046ff09af0a5f8bdb4724075cf1d6f3b30fceabe162bf7d38c2346cdc953da7703957c1acfd0b58c9848d992fd8d3d4ec080400098008003c00", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="1800698014006600fe8000000000000000000000000000262000358004007d8008002f00", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r4, @ANYRES32, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="08001200", @ANYRES32=r0, @ANYRES16=r4, @ANYRES32, @ANYBLOB="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"], 0x1d90}, 0x1, 0x0, 0x0, 0x80}, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) prctl$auto(0x400, 0x7fff, 0x0, 0x10000, 0x100000000000007) bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f0000000300)=@info={r3, 0x7}, 0x7ff) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) madvise$auto(0x0, 0x2003f0, 0x15) ioctl$auto_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, 0x0) 2.399655159s ago: executing program 3 (id=3991): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000040)='/\xc8\xa5\x83\x1c\xe0\x8a\xeb\xce\xfb\xa8\xe3k\xba/>\xa7dev/audio1\x00', 0x100000a3d9) sysfs$auto(0x2, 0x23, 0x0) r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r2, 0x0, 0x4) r3 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, 0x0, 0x2482, 0x0) close_range$auto(0x2, 0x8, 0x0) select$auto(0x79c9, &(0x7f0000000200)={[0x0, 0x8, 0x4, 0x7f, 0x8, 0x7, 0x9, 0x7, 0x10000, 0x0, 0x7, 0x7, 0xdb, 0x8, 0x5ae, 0x6]}, &(0x7f00000003c0)={[0x4, 0x8, 0x8, 0x6, 0x7, 0x5, 0x6e9b, 0x0, 0x0, 0x10, 0x588, 0x1, 0x6f, 0x8, 0x6, 0x80000001]}, &(0x7f0000000440)={[0x4, 0x5ee7, 0x7, 0x80000, 0xffffffffffffff01, 0x1, 0x400, 0xe, 0x2, 0x2, 0x9, 0xbf87, 0x0, 0xfffffffffffffffd, 0x3, 0x81]}, &(0x7f0000000140)={0x401, 0x1}) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) getsockopt$auto_SO_NETNS_COOKIE(r0, 0x7, 0x47, &(0x7f0000000380)='-\xc8\xa5\x83\x1c\xe0\x8a\xeb\xcc\xfb\xa8\xe3k\b/*\xa7dev/audio1\x00q>l. <\xb0', &(0x7f00000001c0)=0x9) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) mmap$auto(0x1000, 0xffffffffffffff00, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0xd364, &(0x7f0000000000)={0x400, 0x10002, 0x7f, 0x7, 0x6, 0x5, r5, [], {0x2, 0x4, 0x6, 0x2, 0x40, 0x4, 0x7, 0x7, 0x80000000}, {0x7, 0x1ff, 0x80000001, 0x8, 0x6b, 0x9, 0x0, 0xfffffffa, 0xb1}}) sendmsg$auto_IPVS_CMD_SET_DEST(r1, &(0x7f0000000a40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000500)={0x4c4, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xd5, 0x1, 0x0, 0x1, [@generic="303c31fa3369ce48eb19a36f293d67232b03c93422d4b13bb910c82f5f3d0f957df74c337e2b5a056d42838bd7643715b4e107f92a3f2cd6ceb9ef0d7a736f876a2230834fcf4733fea2eaab27823d84b9fd740f92044946baed73917984f87be1a4528622fdd54fcab1868c2e", @typed={0x8, 0x80, 0x0, 0x0, @pid}, @generic="382f0949df58942078e6c30d79f107ba42847e9f62bdd48fad56c2dfeade393113e27e99890b317f721b8decbdcd84fac8fdb4255207210927b4b1bc83c9d6acc4c0936a7541a7fbc09d206888ae47a4b1d1b5775768f1cfe64e6717"]}, @IPVS_CMD_ATTR_DEST={0xf8, 0x2, 0x0, 0x1, [@generic="a1c2257f11457f4aaaf1a1208bbbb392453d2fd866551951c58c6aa9afaa32e32adee764c09ac952d5268b6f55e59d493f975dcf2c207107955f135679ec12ca92311de0e0512029387704dcbe3ede1e4559bc25b8989cbad40cd062d4eeb58436fc34fc72fecc7df41faf3d69c8cbc9cf5cce1944a7f6ee24fef022580490b9ca74e58ac9074f259f474c8f1a59370b713da10d000e7c470dafad522530bca862b68a64d691fb23fc5d22a0c41b30e62d7fd3c3169ac53b1a27add13bb4f791106deb6f11755f202c2ce78f3ab8188888a9ee4ecf995ee9c520676f814ffcdc41be79fad923ed7d7127c05c", @typed={0x8, 0x124, 0x0, 0x0, @uid}]}, @IPVS_CMD_ATTR_DEST={0x35, 0x2, 0x0, 0x1, [@generic="50fb692dd6d9cc3d2f401e54b43b2ad76f368444ae067183d8beef8c443f1a4c44d9f9d0ac301db2626a19e028d9d31499"]}, @IPVS_CMD_ATTR_SERVICE={0x2a6, 0x1, 0x0, 0x1, [@typed={0x9, 0x38, 0x0, 0x0, @str=']*}\'\x00'}, @generic="fcc0ca4b9403ed2b7c68fe10c584066388c76cc2cbb0bd010e45c3dcd9a021037e4c1fb35a2aacec3d11b2b2e35e7a58dca9bd6f645e000ff8ae3e28c9ec8e0817cbf5d5a232e5cf1089cf26e56fa5a188db774a311c40f9a377274aeefcd13bef4acdbe856605221d70234ddb1e0d2409807d5c8ef81507e011", @nested={0x14, 0x17, 0x0, 0x1, [@typed={0x8, 0xe7, 0x0, 0x0, @u32=0x7ff}, @typed={0x5, 0xf3, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x114, 0x0, 0x0, @fd=r5}, @typed={0x8, 0xc1, 0x0, 0x0, @fd=r3}, @nested={0x14, 0xc, 0x0, 0x1, [@nested={0x4, 0xf2}, @typed={0x7, 0x12e, 0x0, 0x0, @str='-&\x00'}, @nested={0x4, 0xcf}]}, @nested={0x1be, 0x8f, 0x0, 0x1, [@typed={0x4, 0x147}, @typed={0x8, 0x9b, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="8a669fc1d50e07d13226ff88baefd81fe0cc72a97bfbb9a4744011135deea3201fc6888b", @typed={0x14, 0x14c, 0x0, 0x0, @ipv6=@local}, @generic="b1b7ea1d16afabb2b85984e6a85e0d0110bd02593a41e3637174eb14475f5669d2a0caf85511d525ac20f6c48ee576453b2d42362b4fda0a2ea2f2526835ecd3ecb265555d0c977f6888b7826324af59eae612a7c356c7aeb4ce0d0e77c0514ff6f16fd6fe2bf8e852ea60d2ae7d0405479b0ee255bb373b7310d7c9d302c543", @generic="47af585bff59b480c93ac56e9bda79483c76cdaf615b8ebd491db21a359ce16e38a2a9481add1b5c1dc9918c7823478f21bc7468ab27e724c489dba6950586fc2bba848c882a4d1cd3951cf19b5b452ba3d1247e39dae993a975a40e42a1aa18a9fe0f20c50d0d2bb6560c37f4abedfb68484f3386f7424798b910e77ee55813983eb5140d3346fbc7db7da82ba73016b781c114f231dbbe656b603fcce0279d0bbd15197fbd69002dbd120d56b44de7b348df3c8f883350f09eb7aa564a2007de077f49b217566931f66b8339ab5f1da2157734d06e029bd33634c4c2eb9c59c8fd3a56e90ec5393c9240ff27178c9d3cbb", @nested={0x4, 0xe4}]}, @typed={0x22, 0xe3, 0x0, 0x0, @str='/sys/power/pm_trace_dev_match\x00'}]}]}, 0x4c4}, 0x1, 0x0, 0x0, 0x10}, 0x20040011) ioctl$auto_PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2082, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000280)=""/175, 0xaf) socket(0xa, 0x800, 0xa) recvmmsg$auto(0x3, 0x0, 0x3, 0x3, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) shutdown$auto(0x200000003, 0x2) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000180), r1) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x480842, 0x0) 2.316236723s ago: executing program 1 (id=3992): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000040), r1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x31, 0x8000, 0x1ffde, 0x1, 0x2, 0x1, 0x9, 0x3, 0x5, 0x8, 0x3002, 0x9, 0xb, 0x80010002, 0x80, 0xd8f9, 0x0, 0x7, 0x2, 0x203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) socket(0x23, 0x5, 0x0) open(&(0x7f0000000040)='./cgroup\x00', 0x80, 0xb5d1af1605322de0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff011) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xfc, &(0x7f0000000100)={0x0, 0xfc6}, 0x2, 0x0, 0x7, 0x3}, 0x800}, 0x7, 0x4008) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa0, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa0}}, 0x4000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x440, 0x0) socket(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x14) 2.156126779s ago: executing program 2 (id=3993): r0 = prctl$auto(0x5, 0x80000000, 0x0, 0x78, 0x8) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, 0x0, 0x40002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x10, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x40000000000f, 0x1000, 0xfffffffffffffffd, 0x7ffffffb, 0x9, 0xffffffff7ffffffc, 0x9, 0x7, 0x200000100103}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) prctl$auto(0x23, 0x200000000000009, 0x7fffffffefff, 0x0, 0x0) r3 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/cmdline\x00', 0x60502, 0x0) read$auto_proc_pid_cmdline_ops_base(r3, &(0x7f0000000040)=""/159, 0x9f) umount2$auto(&(0x7f0000000180)='/proc/bus/pci/00/01.3\x00', 0x1) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/card1/timer_source\x00', 0x400601, 0x0) preadv2$auto(r1, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0x800, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) fsconfig$auto_JFFS2_COMPR_MODE_FORCEZLIB(r4, 0x77e237c7, &(0x7f0000000240)='@\x00', &(0x7f0000000280)="11ca59451c260b3f8e41d59654deb35b3f11ab259d23a1", 0x5) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) syz_clone(0x21000000, 0x0, 0x0, 0x0, 0x0, 0x0) shmdt$auto(0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/fs/cifs/smbd_receive_credit_max\x00', 0x149041, 0x0) getsockopt$auto_SO_REUSEADDR(r0, 0x8000, 0x2, &(0x7f0000000040)='^\x92[\x00', &(0x7f00000000c0)=0x6) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/failslab/probability\x00', 0x22042, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000100)='!}*[\\@:[\xd5\xe5\xc5/\xa5', 0xc) write$auto(0x3, 0x0, 0x100082) 2.080527223s ago: executing program 1 (id=3994): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x2800c840) r0 = semctl$auto(0x7, 0x6, 0x13, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) membarrier$auto(0x2, 0x8000000000000000, 0x800) io_uring_register$auto_IORING_UNREGISTER_EVENTFD(r1, 0x5, &(0x7f0000000040), 0x25e5) lsm_list_modules$auto(0x0, 0x0, 0x0) prctl$auto_PR_SET_MM_ENV_END(0x6, 0xb, r0, 0xffffffff, 0x2) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x7) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap$auto(0x0, 0x4020008, 0xdf, 0xeb1, 0x401, 0x8000) read$auto(r2, 0x0, 0x7) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) timer_gettime$auto(0x62, &(0x7f0000000240)={{0xffffffff00000001, 0xf70c}, {0x7, 0xffffffffffff8001}}) read$auto_proc_auxv_operations_base(r1, &(0x7f00000000c0)=""/10, 0xa) writev$auto(r3, &(0x7f0000000200)={0x0, 0x9}, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_FILS_AAD(r4, &(0x7f0000001480)={&(0x7f00000001c0), 0xc, &(0x7f0000001440)={0x0, 0x11f0}, 0x1, 0x0, 0x0, 0x4000000}, 0x80c0) symlink$auto(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000440)='./file0\x00') rename$auto(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000040)='./file0/../file0\x00') 1.38674943s ago: executing program 3 (id=3995): r0 = openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$auto_cachefiles_daemon_fops_internal(r0, &(0x7f0000000300)="a04f", 0x2) unshare$auto(0x40000080) r1 = ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000040)=0x5) unshare$auto(0x40000080) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/set_event\x00', 0x101901, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r4 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) ioctl$auto(0xffffffffffffffff, 0x541b, 0x24) recvmmsg$auto(0x3, 0x0, 0xfffe, 0x6, 0x0) process_vm_readv$auto(r1, &(0x7f0000000100)={&(0x7f0000000080)="f855c8d9176cb2485ddb4476ce43284bb7972322440c326f8191693f75e78cddb42429185a8849ea625b789293bf515245df8258b76c79171861dc2ee1f17e812e60244bb71a3b0ca6b41a00d0589a4e92206b8f", 0x7ff}, 0x7, &(0x7f0000000240)={&(0x7f0000000140)="59f8acd951dc1b45ba87cde4ee6df06fc5ac38560e15dc4aa49b4563a3c00909a75e19f1c121d7925d1ffa1b6ac60d70d9a85e82e154c9062c9c9e513351f62ab9989111bfb4e70b43db972505295c69b5c48db09ef5d810c568ce621db94376f871150d5a0797ff183ce902cfced8f23ae576c7bfd017232dc329109e0ef957348a780e2c1fb53de30acdb7ef4d83599feec93e23bf0f708eff57190c83840eefcc205c76e9faea9764e92d8f675a60c99cd3f0da86fb1d69dd9eb5aec81f16262e352671dce1581e9651a5a6d088dc566660e876826c6c", 0x1}, 0x7e4, 0x2) 1.07911977s ago: executing program 1 (id=3996): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000c80)="5f74ab2fc43781e047140a5cbc3ac5229b90633d9cddda9efb1f2c3d5d1e63f3fb5acf079b9336319d009cb514679a42eaca52b81c166d19625d173c26ece6542f2fb29712f4fb9072fc432b4cf3e6f5a7f3c9f91ee88ba5fa11d48fd3658e8f44f8423b4cd02bbec912ed34f9f4b19b03d4c62b24ede44c0c76c34edf7bde061903c2ee4c64110ac668239fa53ba4291bae74c3d173663248ff0945dd2e405e0d378b5a8e4643a7bc3b35a7248431450ca8901467ea6dc5d86de1e90f869f6a04ac10043676f3b2c7f1339b2d7468133fb8447d17846b6b78079ecc31d7d0f74caa4a3db1ac4d312bfdb34bd331f1f771a2396108561a52153d63a7b2a3a077a7e4c1a22bcb23e1f3e511fee310baa67904d2aad4d6671e8b77c7720e37e84e0efecb60a35f188cbe8b8b2fb3967b78aa482aabb103f23083baa9b2ae653731d5993db4", 0x144) unshare$auto(0x40000080) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x1002, 0x9, 0x4, 0x200000eb0, 0x401, 0x701cf82a) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/transparent_hugepage/hugepages-2048kB/enabled\x00', 0x22b42, 0x0) r2 = eventfd$auto(0x34b) write$auto(r2, 0x0, 0x8) sendfile$auto(r1, r1, 0x0, 0x6) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x10000010, 0x0, 0x0, &(0x7f00000001c0)={[0x1ff, 0x0, 0x7, 0xfff, 0x948b, 0x9, 0x15f4da0a, 0x3, 0x400, 0x62, 0x80000000, 0x4, 0x6d41, 0x8001, 0xa, 0xfffffffffffffdf7]}, 0x0) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x2004000) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) setpriority$auto(0x2, 0x0, 0x80000) sendmmsg$auto(0x4, 0x0, 0x400, 0x7) r4 = socket(0x10, 0x2, 0x4) r5 = bpf$auto(0x6, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x8, 0x10035, 0x80000000007, 0x2, r4, 0x20000000000803}, 0x6f0) ioctl$auto__ctl_fops_dm_ioctl(r5, 0x1, &(0x7f0000000300)="c096215b03c87553d73ffa7d9d90f6f978f2") read$auto_proc_coredump_filter_operations_base(r5, &(0x7f0000000040)=""/40, 0x28) close_range$auto(0x2, 0x8, 0x0) 246.827576ms ago: executing program 0 (id=3997): r0 = openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$auto_cachefiles_daemon_fops_internal(r0, &(0x7f0000000300)="a04f", 0x2) unshare$auto(0x40000080) r1 = ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000040)=0x5) unshare$auto(0x40000080) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/set_event\x00', 0x101901, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r4 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) ioctl$auto(0xffffffffffffffff, 0x541b, 0x24) recvmmsg$auto(0x3, 0x0, 0xfffe, 0x6, 0x0) process_vm_readv$auto(r1, &(0x7f0000000100)={&(0x7f0000000080)="f855c8d9176cb2485ddb4476ce43284bb7972322440c326f8191693f75e78cddb42429185a8849ea625b789293bf515245df8258b76c79171861dc2ee1f17e812e60244bb71a3b0ca6b41a00d0589a4e92206b8f", 0x7ff}, 0x7, &(0x7f0000000240)={&(0x7f0000000140)="59f8acd951dc1b45ba87cde4ee6df06fc5ac38560e15dc4aa49b4563a3c00909a75e19f1c121d7925d1ffa1b6ac60d70d9a85e82e154c9062c9c9e513351f62ab9989111bfb4e70b43db972505295c69b5c48db09ef5d810c568ce621db94376f871150d5a0797ff183ce902cfced8f23ae576c7bfd017232dc329109e0ef957348a780e2c1fb53de30acdb7ef4d83599feec93e23bf0f708eff57190c83840eefcc205c76e9faea9764e92d8f675a60c99cd3f0da86fb1d69dd9eb5aec81f16262e352671dce1581e9651a5a6d088dc566660e876826c6c", 0x1}, 0x7e4, 0x2) 149.472076ms ago: executing program 1 (id=3998): mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0xb) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r1, 0x28000) r2 = io_uring_setup$auto(0x5, 0x0) close_range$auto(0x2, r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6d) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) r3 = socket(0x2, 0x1, 0x0) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x4, 0x0, 0x7fff, 0x1}, 0x80000b}, 0x5, 0x20000000) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x8000fff5) close_range$auto(0x2, 0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/tracing/current_tracer\x00', 0x2, 0x0) r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_SET_HALT(r4, 0x4004550d, &(0x7f0000000080)=0x2457) mmap$auto(0xae72, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x9) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x11, 0x80003, 0x300) 0s ago: executing program 2 (id=3999): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D2\x00', 0x20200, 0x0) setsockopt$auto_SO_WIFI_STATUS(r0, 0x4, 0x29, &(0x7f0000000300)='\x05\a\x89\xaa([\xa8\x92\x0e=\xc0\xacJ\x9b\xd9u;\x87\x12eDg[\x11\xfed\x03\x9c\xa8oB\xa62\xec\xb7-cs\x03\xd9\xbc\x7f+\xdb\xc02\xf5;\xb1e\x05\xbd#\xf0\xbbf\xd4\xfe\x99\x7f\xc6j\xb3|\x87\x99\xca\x9b\xa4\x02J\xc6\xfb\x04\x95\x94\xa9\xd1\xa7\t\xe7\xb5\xd1\xf8`\xc1\xb8\x13\xfd;\xc3\xb5\xfeC\x01\xe5G(\xc2\xc7r\x90\xd3Op\x95\x925CZa\xcd*J*1ueJ\x9b\x97\x9e\x04\xa6\t\xa0X\x18\x8fl\xd7c\xf9!\xc3+dW\xf4>\xd8\xa4$\xc7\xa1y\xfc\x9b;r\xc7\xbf\xfdg\xc3\xee\x1a\xe3\xb1\xc3o\xb1\x84y\x93\x7f/ngp\xa1\x92\x88H\xfa\xa8\xb1r\xee\x00'/195, 0x40) mmap$auto(0x100000000009, 0x20009, 0x4000000000df, 0xebd, 0x401, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r1 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r1, 0x29, 0x43, &(0x7f0000000040)='\xa1\x00', 0x4) openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x242, 0x0) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r2, 0x400454a4, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x9f, 0x6, 0xf8, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram0\x00', 0x67f00, 0x0) preadv2$auto(r3, &(0x7f0000000080)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x400, 0x2f) mmap$auto(0x0, 0x4120008, 0x46, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0xa40, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) pread64$auto(0xffffffffffffffff, &(0x7f0000000240)='/3Cocw\x00\x03\x00\x00\x00\x17\x00\x00\x00ipt3\x00\xc3\xa9[/\xd4>p\xaeL@N&-\x1d\xb7\x86\xdc\xa8_3.\xa1\\\xee\xc7\xb4*8\xd6\xc04KDh\xc9\xce\xbe\x16\xca\xaaO\'\xfb\v\b\vM\x00e\xd6\xb9z\xdc\x12\x8f\x9d\x88\xad\xaav1\v\x06\xe79\xb9C\f\x875j\x00\x14\xa7\x7f\x1d\xf0\xf5\xc4\xe4nLc%\x80\xa95\xc3\xc2\xf0}\x05A\xa7\\\x9fC1\x9ci\x13\xbeq\xc8\'\xb8\x8amW\xf9\xe5\xf1\x1a\xe1\x8eTS\x97\xfbx\xb9#\xd9\x03\xcbz\x11\xb2\x04\\\xc0w\xeaS\xad8I$\xa0\x8c\xc4[\x04\xa4\x9a\x8b\xf5og\xee', 0x34b, 0xffff) socket(0x2a, 0x2, 0x1) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x100000, 0x2, 0x4000000000e1, 0x40000000000eb1, 0x401, 0x3) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) kernel console output (not intermixed with test programs): 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.032650][T13367] RSP: 002b:00007f4de75fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 577.032675][T13367] RAX: ffffffffffffffda RBX: 00007f4de6a15fa0 RCX: 00007f4de679aeb9 [ 577.032692][T13367] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000006 [ 577.032708][T13367] RBP: 00007f4de6808c1f R08: 0000000000000000 R09: 0000000000000000 [ 577.032723][T13367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 577.032737][T13367] R13: 00007f4de6a16038 R14: 00007f4de6a15fa0 R15: 00007ffcc10f22d8 [ 577.032770][T13367] [ 577.884588][T13369] binder: BINDER_SET_CONTEXT_MGR already set [ 577.910218][T13369] binder: 13368:13369 ioctl 4018620d 9 returned -16 [ 580.685786][T13408] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 581.220939][T13416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1535'. [ 581.232286][T13416] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1535'. [ 581.421619][T13415] Invalid ELF header magic: != ELF [ 582.888635][T13442] forcing mempool usage for bio_alloc_bioset+0x392/0x850 [ 583.780692][T13453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1536'. [ 583.791211][T13453] netlink: 'syz.3.1536': attribute type 1 has an invalid length. [ 583.799029][T13453] netlink: 'syz.3.1536': attribute type 6 has an invalid length. [ 586.389446][T13488] blktrace: Concurrent blktraces are not allowed on loop2 [ 587.185845][T13496] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 587.464904][T13499] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1542'. [ 588.288304][T13502] forcing mempool usage for bio_alloc_bioset+0x392/0x850 [ 588.876881][T13521] zswap: compressor not available [ 590.121966][T13548] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 590.160667][T13548] serio: Serial port pty6 [ 591.339653][T13566] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input111 [ 591.462435][T13571] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input112 [ 591.802817][T13582] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input113 [ 591.998587][T13590] forcing mempool usage for bio_alloc_bioset+0x392/0x850 [ 592.520232][T13592] Invalid ELF header magic: != ELF [ 593.573771][T13611] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 593.642544][T13611] serio: Serial port pty6 [ 593.902879][T13612] Invalid ELF header magic: != ELF [ 594.649654][T13629] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input114 [ 595.559519][T13629] Process accounting resumed [ 595.997794][T13645] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input115 [ 598.075481][T13675] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 599.821668][T13704] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 599.877078][T13704] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0 [ 601.609038][T13731] FAULT_INJECTION: forcing a failure. [ 601.609038][T13731] name failslab, interval 1, probability 0, space 0, times 0 [ 601.733753][T13731] CPU: 1 UID: 0 PID: 13731 Comm: syz.2.1596 Not tainted syzkaller #0 PREEMPT(full) [ 601.733790][T13731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 601.733802][T13731] Call Trace: [ 601.733807][T13731] [ 601.733813][T13731] dump_stack_lvl+0x100/0x190 [ 601.733837][T13731] should_fail_ex.cold+0x5/0xa [ 601.733861][T13731] should_failslab+0xc2/0x120 [ 601.733882][T13731] kmem_cache_alloc_noprof+0x83/0x780 [ 601.733901][T13731] ? __proc_create+0xc2/0x8c0 [ 601.733922][T13731] ? __proc_create+0x2cb/0x8c0 [ 601.733946][T13731] ? __proc_create+0x2cb/0x8c0 [ 601.733966][T13731] __proc_create+0x2cb/0x8c0 [ 601.733995][T13731] ? __pfx___proc_create+0x10/0x10 [ 601.734025][T13731] _proc_mkdir+0xb9/0x210 [ 601.734039][T13731] ? __pfx__proc_mkdir+0x10/0x10 [ 601.734052][T13731] ? net_generic+0xea/0x2a0 [ 601.734072][T13731] ? __pfx_vlan_init_net+0x10/0x10 [ 601.734092][T13731] vlan_proc_init+0x93/0x160 [ 601.734110][T13731] ops_init+0x1e2/0x5f0 [ 601.734134][T13731] setup_net+0x118/0x3a0 [ 601.734147][T13731] ? __pfx_setup_net+0x10/0x10 [ 601.734158][T13731] ? lockdep_init_map_type+0x5c/0x250 [ 601.734179][T13731] ? mutex_init_lockep+0x110/0x150 [ 601.734201][T13731] copy_net_ns+0x46f/0x7c0 [ 601.734218][T13731] create_new_namespaces+0x3ea/0xab0 [ 601.734238][T13731] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 601.734257][T13731] ksys_unshare+0x455/0xab0 [ 601.734278][T13731] ? __pfx_ksys_unshare+0x10/0x10 [ 601.734297][T13731] ? xfd_validate_state+0x129/0x190 [ 601.734325][T13731] __x64_sys_unshare+0x31/0x40 [ 601.734344][T13731] do_syscall_64+0xc9/0xf80 [ 601.734363][T13731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.734378][T13731] RIP: 0033:0x7f4de679aeb9 [ 601.734392][T13731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 601.734405][T13731] RSP: 002b:00007f4de75db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 601.734420][T13731] RAX: ffffffffffffffda RBX: 00007f4de6a16090 RCX: 00007f4de679aeb9 [ 601.734429][T13731] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 601.734438][T13731] RBP: 00007f4de6808c1f R08: 0000000000000000 R09: 0000000000000000 [ 601.734446][T13731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 601.734454][T13731] R13: 00007f4de6a16128 R14: 00007f4de6a16090 R15: 00007ffcc10f22d8 [ 601.734473][T13731] [ 601.734491][T13731] 8021q: can't create entry in proc filesystem! [ 603.910556][T13760] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input116 [ 604.328278][ T9866] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 605.009761][T13783] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input117 [ 605.327686][T13791] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 605.546648][T13797] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input118 [ 606.263434][T13805] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input119 [ 606.582883][T13812] zswap: compressor ûW–îë“;Å0못„?u=8å}Öƒ•L­Ö(£E‘¤¤Ö¹‰jj–8+ÕÄxp¥—Èœ‹ŒNkR³¦°¤uoêÇo‹ÿ¬<µSÔH ¾}ïEd }¡ìöP¢…8a [ 607.535743][T13818] dump_stack_lvl+0x100/0x190 [ 607.535784][T13818] should_fail_ex.cold+0x5/0xa [ 607.535830][T13818] should_failslab+0xc2/0x120 [ 607.535869][T13818] kmem_cache_alloc_noprof+0x83/0x780 [ 607.535905][T13818] ? __proc_create+0xc2/0x8c0 [ 607.535944][T13818] ? __proc_create+0x2cb/0x8c0 [ 607.535992][T13818] ? __proc_create+0x2cb/0x8c0 [ 607.536030][T13818] __proc_create+0x2cb/0x8c0 [ 607.536073][T13818] ? __pfx___proc_create+0x10/0x10 [ 607.536114][T13818] ? pcpu_chunk_relocate+0x134/0x1a0 [ 607.536160][T13818] _proc_mkdir+0xb9/0x210 [ 607.536186][T13818] ? __pfx__proc_mkdir+0x10/0x10 [ 607.536223][T13818] sctp_proc_init+0x59/0x270 [ 607.536260][T13818] ? __pfx_sctp_defaults_init+0x10/0x10 [ 607.536297][T13818] sctp_defaults_init+0x758/0xd90 [ 607.536337][T13818] ? __pfx_sctp_defaults_init+0x10/0x10 [ 607.536394][T13818] ops_init+0x1e2/0x5f0 [ 607.536442][T13818] setup_net+0x118/0x3a0 [ 607.536467][T13818] ? __pfx_setup_net+0x10/0x10 [ 607.536489][T13818] ? lockdep_init_map_type+0x5c/0x250 [ 607.536527][T13818] ? mutex_init_lockep+0x110/0x150 [ 607.536570][T13818] copy_net_ns+0x46f/0x7c0 [ 607.536601][T13818] create_new_namespaces+0x3ea/0xab0 [ 607.536636][T13818] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 607.536671][T13818] ksys_unshare+0x455/0xab0 [ 607.536712][T13818] ? __pfx_ksys_unshare+0x10/0x10 [ 607.536750][T13818] ? xfd_validate_state+0x129/0x190 [ 607.536805][T13818] __x64_sys_unshare+0x31/0x40 [ 607.536843][T13818] do_syscall_64+0xc9/0xf80 [ 607.536881][T13818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.536909][T13818] RIP: 0033:0x7f4301d9aeb9 [ 607.536932][T13818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 607.536958][T13818] RSP: 002b:00007f4302c7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 607.536985][T13818] RAX: ffffffffffffffda RBX: 00007f4302015fa0 RCX: 00007f4301d9aeb9 [ 607.537003][T13818] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 607.537019][T13818] RBP: 00007f4301e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 607.537035][T13818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 607.537051][T13818] R13: 00007f4302016038 R14: 00007f4302015fa0 R15: 00007fff5aaff598 [ 607.537088][T13818] [ 610.186160][T13857] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 610.948124][T13869] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input121 [ 610.993425][T13871] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input122 [ 612.450051][ T30] audit: type=1800 audit(1770349593.769:18): pid=13877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1619" name="lu_gp_id" dev="configfs" ino=50017 res=0 errno=0 [ 612.707241][T13893] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 612.738707][T13894] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input123 [ 613.923971][T13917] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input124 [ 614.248531][T13925] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input125 [ 615.229181][ T9866] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 615.229208][ T9866] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 615.244068][ T9866] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 615.244100][ T9866] Bluetooth: hci1: adv larger than maximum supported [ 615.251224][ T9866] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 615.257947][ T9866] Bluetooth: hci1: adv larger than maximum supported [ 615.264959][ T9866] Bluetooth: hci1: adv larger than maximum supported [ 615.271867][ T9866] Bluetooth: hci1: Malformed LE Event: 0x0d [ 616.602134][T13960] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input126 [ 622.952290][T14050] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input127 [ 623.827588][T14060] lo: entered allmulticast mode [ 623.920050][T14060] lo: left allmulticast mode [ 624.214352][T14065] zswap: compressor û not available [ 624.307554][T14073] Setting dangerous option i915.mitigations - tainting kernel [ 624.325536][T14073] Bad "i915.mitigations=", '' is unknown [ 624.336428][T14060] Setting dangerous option i915.mitigations - tainting kernel [ 625.696941][T14118] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 625.735841][T14104] Process accounting paused [ 626.393773][T14131] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input128 [ 627.352713][T14151] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input129 [ 628.615606][T14175] kvm: kvm [14174]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000085) [ 628.946433][T14169] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 629.348478][ T30] audit: type=1804 audit(1770367954.670:19): pid=14182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1679" name="file0" dev="tmpfs" ino=2171 res=1 errno=0 [ 629.498099][ T30] audit: type=1804 audit(1770367954.700:20): pid=14193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1679" name="file0" dev="tmpfs" ino=2171 res=1 errno=0 [ 629.523980][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.532614][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.882880][T14199] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 629.981417][T14203] vhci_hcd vhci_hcd.2: invalid port number 16 [ 629.987744][T14203] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 631.263565][T14221] process 'syz.3.1687' launched '/dev/fd/4' with NULL argv: empty string added [ 632.228363][T14243] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input130 [ 632.878730][ T9789] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.155920][ T9767] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 633.165043][ T9767] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 633.176449][ T9767] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 633.199547][ T9767] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 633.225616][ T9767] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 633.304527][ T9789] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.760252][ T9789] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.876559][ T9789] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.209493][ T9789] bridge_slave_0: left allmulticast mode [ 634.215488][ T9789] bridge_slave_0: left promiscuous mode [ 634.290944][ T9789] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.446003][T14280] FAULT_INJECTION: forcing a failure. [ 634.446003][T14280] name failslab, interval 1, probability 0, space 0, times 0 [ 634.459590][T14280] CPU: 0 UID: 0 PID: 14280 Comm: syz.3.1701 Tainted: G U syzkaller #0 PREEMPT(full) [ 634.459624][T14280] Tainted: [U]=USER [ 634.459629][T14280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 634.459639][T14280] Call Trace: [ 634.459644][T14280] [ 634.459650][T14280] dump_stack_lvl+0x100/0x190 [ 634.459673][T14280] should_fail_ex.cold+0x5/0xa [ 634.459699][T14280] should_failslab+0xc2/0x120 [ 634.459720][T14280] kmem_cache_alloc_noprof+0x83/0x780 [ 634.459739][T14280] ? security_file_alloc+0x34/0x2c0 [ 634.459766][T14280] ? security_file_alloc+0x34/0x2c0 [ 634.459786][T14280] security_file_alloc+0x34/0x2c0 [ 634.459808][T14280] init_file+0x93/0x4c0 [ 634.459828][T14280] alloc_empty_file+0x73/0x1c0 [ 634.459855][T14280] alloc_file_pseudo+0x13a/0x230 [ 634.459878][T14280] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 634.459906][T14280] __shmem_file_setup+0x1a3/0x330 [ 634.459924][T14280] shmem_zero_setup+0x93/0x1b0 [ 634.459945][T14280] __mmap_region+0x2101/0x2820 [ 634.459964][T14280] ? __pfx___mmap_region+0x10/0x10 [ 634.459994][T14280] ? finish_task_switch.isra.0+0x1ff/0xb70 [ 634.460010][T14280] ? finish_task_switch.isra.0+0x1ff/0xb70 [ 634.460035][T14280] ? __schedule+0xff6/0x5e10 [ 634.460073][T14280] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 634.460105][T14280] ? rcu_is_watching+0x12/0xc0 [ 634.460125][T14280] mmap_region+0x180/0x3e0 [ 634.460147][T14280] do_mmap+0xc63/0x12f0 [ 634.460175][T14280] ? __pfx_do_mmap+0x10/0x10 [ 634.460196][T14280] ? __pfx_down_write_killable+0x10/0x10 [ 634.460215][T14280] ? lockdep_hardirqs_on+0x78/0x100 [ 634.460234][T14280] vm_mmap_pgoff+0x29e/0x470 [ 634.460259][T14280] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 634.460280][T14280] ? __fput+0x68a/0xb40 [ 634.460301][T14280] ? __x64_sys_futex+0x34f/0x4d0 [ 634.460319][T14280] ? __x64_sys_futex+0x358/0x4d0 [ 634.460340][T14280] ksys_mmap_pgoff+0x7d/0x5b0 [ 634.460364][T14280] __x64_sys_mmap+0x125/0x190 [ 634.460380][T14280] do_syscall_64+0xc9/0xf80 [ 634.460399][T14280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.460414][T14280] RIP: 0033:0x7f4301d9aeb9 [ 634.460427][T14280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.460441][T14280] RSP: 002b:00007f4302c7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 634.460457][T14280] RAX: ffffffffffffffda RBX: 00007f4302015fa0 RCX: 00007f4301d9aeb9 [ 634.460467][T14280] RDX: 00000000000000e2 RSI: 0000000000020009 RDI: 0000000000000000 [ 634.460476][T14280] RBP: 00007f4301e08c1f R08: 0000000000000405 R09: 0000000000008000 [ 634.460485][T14280] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 634.460494][T14280] R13: 00007f4302016038 R14: 00007f4302015fa0 R15: 00007fff5aaff598 [ 634.460513][T14280] [ 635.039042][T14287] kvm: kvm [14286]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000085) [ 635.350940][ T9767] Bluetooth: hci0: command tx timeout [ 636.138126][ T9789] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 636.188942][ T9789] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 636.253337][ T9789] bond0 (unregistering): Released all slaves [ 636.443949][T14259] chnl_net:caif_netlink_parms(): no params data found [ 636.764796][T14306] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1715'. [ 636.795582][T14306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 636.809613][T14306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 636.843619][T14306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 636.877722][T14306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 636.917480][T14306] bridge0: port 2(batadv0) entered disabled state [ 637.011300][T14306] batadv0 (unregistering): left allmulticast mode [ 637.021333][T14306] batadv0 (unregistering): left promiscuous mode [ 637.031276][T14306] bridge0: port 2(batadv0) entered disabled state [ 637.440958][ T9767] Bluetooth: hci0: command tx timeout [ 637.482640][T14259] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.542640][T14259] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.715769][T14259] bridge_slave_0: entered allmulticast mode [ 637.753471][T14259] bridge_slave_0: entered promiscuous mode [ 637.845427][T14259] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.858873][T14259] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.873557][T14259] bridge_slave_1: entered allmulticast mode [ 637.894173][T14259] bridge_slave_1: entered promiscuous mode [ 638.188367][T14259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.226321][T14259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.303571][T14259] team0: Port device team_slave_0 added [ 638.327582][T14259] team0: Port device team_slave_1 added [ 638.454266][T14324] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 638.538839][T14259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 638.617001][T14259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.698477][T14259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 638.839586][T14259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 638.865502][T14259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.913409][T14259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 639.059969][T14259] hsr_slave_0: entered promiscuous mode [ 639.080287][T14259] hsr_slave_1: entered promiscuous mode [ 639.094014][T14259] debugfs: 'hsr0' already exists in 'hsr' [ 639.106564][T14259] Cannot create hsr debugfs directory [ 639.575123][ T9767] Bluetooth: hci0: command tx timeout [ 640.364419][ T9789] hsr_slave_0: left promiscuous mode [ 640.405614][ T9789] hsr_slave_1: left promiscuous mode [ 640.438034][ T9789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 640.469902][ T9789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 640.567913][ T9789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 640.576848][ T9789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 640.741209][ T9789] veth1_macvtap: left allmulticast mode [ 640.776330][ T9789] veth1_macvtap: left promiscuous mode [ 640.804548][ T9789] veth0_macvtap: left promiscuous mode [ 640.811600][ T9789] veth1_vlan: left promiscuous mode [ 640.818435][ T9789] veth0_vlan: left promiscuous mode [ 641.200432][T14355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1716'. [ 641.585334][ T9767] Bluetooth: hci0: command tx timeout [ 641.975852][ T9789] team0 (unregistering): Port device team_slave_1 removed [ 642.376231][ T9789] smc: removing net device dummy0 with user defined pnetid DUMMY0 [ 643.741818][T14259] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 643.745339][ T30] audit: type=1804 audit(1770367969.060:21): pid=14374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1722" name="/newroot/436/file0" dev="tmpfs" ino=2281 res=1 errno=0 [ 643.782898][T14259] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 643.804080][ T30] audit: type=1804 audit(1770367969.090:22): pid=14377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1722" name="/newroot/436/file0" dev="tmpfs" ino=2281 res=1 errno=0 [ 643.871046][T14259] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 644.040889][T14259] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 644.288653][T14259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 644.348398][T14259] 8021q: adding VLAN 0 to HW filter on device team0 [ 644.412924][ T9789] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.420157][ T9789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 644.498120][ T9789] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.505338][ T9789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.627357][T14259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 645.037767][T14259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 645.178914][T14259] veth0_vlan: entered promiscuous mode [ 645.221696][T14259] veth1_vlan: entered promiscuous mode [ 645.291361][T14259] veth0_macvtap: entered promiscuous mode [ 645.310030][T14259] veth1_macvtap: entered promiscuous mode [ 645.351089][T14259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 645.379153][T14259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 645.437192][ T9789] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.455471][ T9789] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.464248][ T9789] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.512596][ T9789] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.695749][ T9789] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.703618][ T9789] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.777452][T12538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.805451][T12538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.489636][T14430] zswap: compressor ûW–îë“;Å0못„?u=8å}Öƒ•L­Ö(£E‘¤¤Ö¹‰jj–8+ÕÄxp¥—Èœ‹ŒNkR³¦°¤uoêÇo‹ÿ¬<µSÔH ¾}ïEd }¡ìöP¢…8a 1 [ 660.831979][ T9767] Bluetooth: hci1: hardware error 0x00 [ 661.826356][ T9866] Bluetooth: hci0: command 0x0c1a tx timeout [ 662.232672][T14686] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 662.602080][T14691] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1792'. [ 662.845339][ T30] audit: type=1804 audit(1770367988.160:23): pid=14701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1793" name="file0" dev="tmpfs" ino=2391 res=1 errno=0 [ 662.865497][ T9767] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 663.830067][T14712] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1796'. [ 664.895775][T14727] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 665.075731][T14739] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input132 [ 666.213111][T14750] lo: entered allmulticast mode [ 666.232692][T14750] lo: left allmulticast mode [ 666.891500][T14762] lo: entered allmulticast mode [ 666.946863][ T9767] Bluetooth: hci0: command 0x0c1a tx timeout [ 666.955355][T14762] lo: left allmulticast mode [ 667.490153][T14782] lo: entered allmulticast mode [ 667.495183][T14781] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1811'. [ 667.535463][T14782] lo: left allmulticast mode [ 667.586338][T14781] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1811'. [ 668.294046][T14800] lo: entered allmulticast mode [ 668.334612][T14797] lo: left allmulticast mode [ 668.585521][T14797] zswap: compressor û not available [ 668.623149][T14800] Setting dangerous option i915.mitigations - tainting kernel [ 668.667403][ T9767] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 668.717695][T14804] Setting dangerous option i915.mitigations - tainting kernel [ 668.768568][T14804] Bad "i915.mitigations=", '' is unknown [ 669.099340][ T9866] Bluetooth: hci0: Malformed LE Event: 0x1d [ 669.353029][T14825] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 669.390054][T14821] lo: entered allmulticast mode [ 669.416472][T14821] lo: left allmulticast mode [ 669.612222][T14827] Setting dangerous option i915.mitigations - tainting kernel [ 669.625424][T14824] lo: entered allmulticast mode [ 669.661064][T14824] lo: left allmulticast mode [ 670.157055][T14836] zswap: compressor not available [ 671.286520][T14860] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input133 [ 672.261653][T14872] lo: entered allmulticast mode [ 672.271547][T14872] lo: left allmulticast mode [ 674.054021][T14893] lo: entered allmulticast mode [ 674.088257][T14893] lo: left allmulticast mode [ 674.489398][T14893] zswap: compressor û not available [ 674.495369][T14897] Setting dangerous option i915.mitigations - tainting kernel [ 674.518734][T14900] Setting dangerous option i915.mitigations - tainting kernel [ 674.526370][T14900] Bad "i915.mitigations=", '' is unknown [ 675.260692][T14912] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 675.268868][T14912] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 677.350413][ T9866] Bluetooth: hci0: command 0x0c1a tx timeout [ 677.424528][T14946] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input134 [ 677.460119][T14938] lo: entered allmulticast mode [ 677.473249][T14938] lo: left allmulticast mode [ 677.798162][T14938] zswap: compressor û not available [ 677.821896][T14947] Setting dangerous option i915.mitigations - tainting kernel [ 677.869716][T14950] Setting dangerous option i915.mitigations - tainting kernel [ 677.917492][T14950] Bad "i915.mitigations=", '' is unknown [ 677.985784][T14939] delete_channel: no stack [ 678.725955][T14971] lo: entered allmulticast mode [ 678.759498][T14975] tipc: Started in network mode [ 678.765043][T14975] tipc: Node identity ee00, cluster identity 4711 [ 678.771625][T14975] tipc: Node number set to 60928 [ 678.795960][T14971] lo: left allmulticast mode [ 679.433764][ T9866] Bluetooth: hci0: command 0x0c1a tx timeout [ 680.150295][T15000] futex_wake_op: syz.0.1853 tries to shift op by -2048; fix this program [ 680.150520][T15000] futex_wake_op: syz.0.1853 tries to shift op by -2048; fix this program [ 681.284990][T15020] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input135 [ 682.956746][T15034] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1858'. [ 683.495677][T15052] Setting dangerous option i915.mitigations - tainting kernel [ 683.818938][T15047] lo: entered allmulticast mode [ 683.824296][T15047] lo: left allmulticast mode [ 684.307959][T15060] netlink: 'syz.3.1866': attribute type 5 has an invalid length. [ 684.426245][T15061] lo: entered allmulticast mode [ 684.441492][T15061] lo: left allmulticast mode [ 685.152621][T15078] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input136 [ 686.989860][T15115] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input137 [ 687.921857][T15125] FAULT_INJECTION: forcing a failure. [ 687.921857][T15125] name failslab, interval 1, probability 0, space 0, times 0 [ 687.993871][T15125] CPU: 1 UID: 0 PID: 15125 Comm: syz.2.1878 Tainted: G U syzkaller #0 PREEMPT(full) [ 687.993898][T15125] Tainted: [U]=USER [ 687.993903][T15125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 687.993912][T15125] Call Trace: [ 687.993917][T15125] [ 687.993924][T15125] dump_stack_lvl+0x100/0x190 [ 687.993947][T15125] should_fail_ex.cold+0x5/0xa [ 687.993971][T15125] should_failslab+0xc2/0x120 [ 687.993992][T15125] __kmalloc_cache_noprof+0x80/0x810 [ 687.994007][T15125] ? __mmu_notifier_register+0x4a3/0x780 [ 687.994029][T15125] ? __mmu_notifier_register+0x4a3/0x780 [ 687.994046][T15125] __mmu_notifier_register+0x4a3/0x780 [ 687.994066][T15125] mmu_notifier_register+0x74/0x1c0 [ 687.994084][T15125] kvm_dev_ioctl+0xdde/0x1a80 [ 687.994107][T15125] ? find_held_lock+0x2b/0x80 [ 687.994128][T15125] ? hook_file_ioctl_common+0x146/0x410 [ 687.994151][T15125] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 687.994174][T15125] ? __fget_files+0x21f/0x3d0 [ 687.994192][T15125] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 687.994214][T15125] __x64_sys_ioctl+0x18e/0x210 [ 687.994238][T15125] do_syscall_64+0xc9/0xf80 [ 687.994258][T15125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.994273][T15125] RIP: 0033:0x7f8bb839aeb9 [ 687.994286][T15125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 687.994300][T15125] RSP: 002b:00007f8bb9257028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 687.994315][T15125] RAX: ffffffffffffffda RBX: 00007f8bb8615fa0 RCX: 00007f8bb839aeb9 [ 687.994324][T15125] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 687.994332][T15125] RBP: 00007f8bb8408c1f R08: 0000000000000000 R09: 0000000000000000 [ 687.994341][T15125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 687.994349][T15125] R13: 00007f8bb8616038 R14: 00007f8bb8615fa0 R15: 00007ffdb3b3d828 [ 687.994372][T15125] [ 688.260124][T15104] Process accounting paused [ 688.827472][T15138] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input138 [ 690.867459][T15176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1892'. [ 690.943165][T15179] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input139 [ 690.993776][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.015600][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.118252][T15170] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 692.488685][T15202] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input140 [ 695.131757][T15246] lo: entered allmulticast mode [ 695.141514][T15246] lo: left allmulticast mode [ 697.705101][T15281] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input141 [ 698.884492][T15299] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 698.980134][T15299] serio: Serial port pty6 [ 702.411375][T15337] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input142 [ 702.836448][T15342] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input143 [ 702.966850][T15349] random: crng reseeded on system resumption [ 704.258244][T15366] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input144 [ 708.290288][ T9866] Bluetooth: hci0: unexpected event 0x1c length: 725 > 5 [ 708.466040][T15406] openvswitch: netlink: Multiple metadata blocks provided [ 708.519864][T15406] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 709.543361][T15425] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input145 [ 710.562252][T15441] lo: entered allmulticast mode [ 710.605731][T15441] lo: left allmulticast mode [ 710.792031][T15441] zswap: compressor û not available [ 710.808283][T15442] Setting dangerous option i915.mitigations - tainting kernel [ 710.860120][T15446] Setting dangerous option i915.mitigations - tainting kernel [ 710.915682][T15446] Bad "i915.mitigations=", '' is unknown [ 711.130274][T15451] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input146 [ 711.536557][T15458] Invalid ELF header magic: != ELF [ 712.686134][T15477] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input147 [ 713.712216][T15491] lo: entered allmulticast mode [ 713.740482][T15491] lo: left allmulticast mode [ 713.954162][T15491] zswap: compressor û not available [ 714.033076][T15494] Setting dangerous option i915.mitigations - tainting kernel [ 714.125603][T15499] Setting dangerous option i915.mitigations - tainting kernel [ 714.145414][T15499] Bad "i915.mitigations=", '' is unknown [ 716.698908][T15541] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input148 [ 717.599155][T15556] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input149 [ 718.267981][T15551] Process accounting resumed [ 718.347735][T15560] lo: entered allmulticast mode [ 718.354355][T15560] lo: left allmulticast mode [ 718.597549][T15561] zswap: compressor û not available [ 718.685396][T15563] Setting dangerous option i915.mitigations - tainting kernel [ 718.724139][T15560] Setting dangerous option i915.mitigations - tainting kernel [ 718.769087][T15560] Bad "i915.mitigations=", '' is unknown [ 720.186673][T15585] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1972'. [ 721.575416][T15596] lo: entered allmulticast mode [ 721.663120][T15596] lo: left allmulticast mode [ 723.983844][T15625] lo: entered allmulticast mode [ 724.013381][T15625] lo: left allmulticast mode [ 724.137806][T15629] FAULT_INJECTION: forcing a failure. [ 724.137806][T15629] name failslab, interval 1, probability 0, space 0, times 0 [ 724.175381][T15629] CPU: 0 UID: 0 PID: 15629 Comm: syz.3.1983 Tainted: G U syzkaller #0 PREEMPT(full) [ 724.175427][T15629] Tainted: [U]=USER [ 724.175437][T15629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 724.175454][T15629] Call Trace: [ 724.175463][T15629] [ 724.175475][T15629] dump_stack_lvl+0x100/0x190 [ 724.175513][T15629] should_fail_ex.cold+0x5/0xa [ 724.175558][T15629] should_failslab+0xc2/0x120 [ 724.175598][T15629] kmem_cache_alloc_noprof+0x83/0x780 [ 724.175636][T15629] ? getname_flags.part.0+0x4c/0x540 [ 724.175682][T15629] ? getname_flags.part.0+0x4c/0x540 [ 724.175722][T15629] getname_flags.part.0+0x4c/0x540 [ 724.175768][T15629] getname_flags+0x93/0xf0 [ 724.175797][T15629] do_sys_openat2+0xc5/0x220 [ 724.175840][T15629] ? __pfx_do_sys_openat2+0x10/0x10 [ 724.175895][T15629] __x64_sys_openat+0x12d/0x210 [ 724.175945][T15629] ? __pfx___x64_sys_openat+0x10/0x10 [ 724.175989][T15629] ? xfd_validate_state+0x129/0x190 [ 724.176044][T15629] do_syscall_64+0xc9/0xf80 [ 724.176082][T15629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.176110][T15629] RIP: 0033:0x7f4301d9aeb9 [ 724.176133][T15629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 724.176160][T15629] RSP: 002b:00007f4302c7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 724.176187][T15629] RAX: ffffffffffffffda RBX: 00007f4302015fa0 RCX: 00007f4301d9aeb9 [ 724.176207][T15629] RDX: 0000000000080080 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 724.176225][T15629] RBP: 00007f4301e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 724.176241][T15629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 724.176258][T15629] R13: 00007f4302016038 R14: 00007f4302015fa0 R15: 00007fff5aaff598 [ 724.176295][T15629] [ 725.245154][T15646] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 725.421146][T15651] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1988'. [ 725.475504][T15644] ima: policy update failed [ 725.501469][ T30] audit: type=1802 audit(1770368050.800:24): pid=15644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1988" res=0 errno=0 [ 727.289140][T15671] lo: entered allmulticast mode [ 727.294575][T15671] lo: left allmulticast mode [ 727.544807][T15671] zswap: compressor û not available [ 727.550171][T15674] Setting dangerous option i915.mitigations - tainting kernel [ 727.560630][T15674] Bad "i915.mitigations=", '' is unknown [ 728.837983][T15701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1998'. [ 731.362505][T15736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2009'. [ 731.455608][T15736] unsupported nlmsg_type 40 [ 733.368307][T15762] lo: entered allmulticast mode [ 733.535729][T15762] lo: left allmulticast mode [ 737.560839][T15816] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input150 [ 741.075885][T15860] lo: entered allmulticast mode [ 741.113693][T15860] lo: left allmulticast mode [ 741.147092][T15860] Setting dangerous option i915.mitigations - tainting kernel [ 741.186280][T15860] Setting dangerous option i915.mitigations - tainting kernel [ 741.193822][T15860] Bad "i915.mitigations=", '' is unknown [ 741.737592][T15870] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input151 [ 743.613238][T15903] Invalid ELF header magic: != ELF [ 744.626301][T15922] lo: entered allmulticast mode [ 744.693885][T15921] lo: left allmulticast mode [ 744.719184][T15922] Setting dangerous option i915.mitigations - tainting kernel [ 744.790495][T15921] Setting dangerous option i915.mitigations - tainting kernel [ 744.799710][T15921] Bad "i915.mitigations=", '' is unknown [ 747.300181][T15953] lo: entered allmulticast mode [ 747.330338][T15953] lo: left allmulticast mode [ 748.292115][T15958] Process accounting paused [ 752.388455][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.396282][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.259334][T16023] lo: entered allmulticast mode [ 753.266058][T16023] lo: left allmulticast mode [ 753.277569][T16023] Setting dangerous option i915.mitigations - tainting kernel [ 753.306008][T16023] Setting dangerous option i915.mitigations - tainting kernel [ 753.315565][T16023] Bad "i915.mitigations=", '' is unknown [ 755.390772][T16067] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2076'. [ 755.638574][T16067] team0: Port device team_slave_0 removed [ 757.429451][T16084] lo: entered allmulticast mode [ 757.448471][T16084] lo: left allmulticast mode [ 760.960446][T16139] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2097'. [ 761.878785][T16148] Invalid ELF header magic: != ELF [ 765.470417][T16193] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input152 [ 766.928329][T16205] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2103'. [ 767.914498][T16212] lo: entered allmulticast mode [ 767.926337][T16211] lo: left allmulticast mode [ 771.143203][T16274] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2117'. [ 773.154110][T16285] zswap: compressor û not available [ 773.171595][T16294] Setting dangerous option i915.mitigations - tainting kernel [ 773.183371][T16294] Bad "i915.mitigations=", '' is unknown [ 773.201947][T16289] Setting dangerous option i915.mitigations - tainting kernel [ 773.504593][T16304] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input153 [ 773.622785][T16302] FAULT_INJECTION: forcing a failure. [ 773.622785][T16302] name failslab, interval 1, probability 0, space 0, times 0 [ 773.648428][T16302] CPU: 0 UID: 0 PID: 16302 Comm: syz.3.2122 Tainted: G U syzkaller #0 PREEMPT(full) [ 773.648472][T16302] Tainted: [U]=USER [ 773.648481][T16302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 773.648496][T16302] Call Trace: [ 773.648504][T16302] [ 773.648514][T16302] dump_stack_lvl+0x100/0x190 [ 773.648564][T16302] should_fail_ex.cold+0x5/0xa [ 773.648606][T16302] should_failslab+0xc2/0x120 [ 773.648642][T16302] kmem_cache_alloc_noprof+0x83/0x780 [ 773.648676][T16302] ? alloc_empty_file+0x55/0x1c0 [ 773.648724][T16302] ? alloc_empty_file+0x55/0x1c0 [ 773.648758][T16302] alloc_empty_file+0x55/0x1c0 [ 773.648793][T16302] path_openat+0xe8/0x3120 [ 773.648819][T16302] ? getname_flags+0x93/0xf0 [ 773.648842][T16302] ? do_sys_openat2+0xc5/0x220 [ 773.648878][T16302] ? __x64_sys_openat+0x12d/0x210 [ 773.648910][T16302] ? do_syscall_64+0xc9/0xf80 [ 773.648939][T16302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.648977][T16302] ? __pfx_path_openat+0x10/0x10 [ 773.649021][T16302] do_filp_open+0x1f7/0x420 [ 773.649057][T16302] ? __pfx_do_filp_open+0x10/0x10 [ 773.649115][T16302] ? _raw_spin_unlock+0x28/0x50 [ 773.649142][T16302] ? alloc_fd+0x476/0x790 [ 773.649183][T16302] do_sys_openat2+0x12e/0x220 [ 773.649223][T16302] ? __pfx_do_sys_openat2+0x10/0x10 [ 773.649346][T16302] __x64_sys_openat+0x12d/0x210 [ 773.649413][T16302] ? __pfx___x64_sys_openat+0x10/0x10 [ 773.649471][T16302] ? xfd_validate_state+0x129/0x190 [ 773.649528][T16302] do_syscall_64+0xc9/0xf80 [ 773.649565][T16302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.649595][T16302] RIP: 0033:0x7f4301d9aeb9 [ 773.649617][T16302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 773.649644][T16302] RSP: 002b:00007f4302c7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 773.649672][T16302] RAX: ffffffffffffffda RBX: 00007f4302015fa0 RCX: 00007f4301d9aeb9 [ 773.649690][T16302] RDX: 0000000000080080 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 773.649708][T16302] RBP: 00007f4301e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 773.649725][T16302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 773.649741][T16302] R13: 00007f4302016038 R14: 00007f4302015fa0 R15: 00007fff5aaff598 [ 773.649777][T16302] [ 774.722818][T16321] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 775.783204][T16329] lo: entered allmulticast mode [ 775.803641][T16334] zswap: compressor û not available [ 775.819315][T16336] Setting dangerous option i915.mitigations - tainting kernel [ 775.954770][T16327] lo: left allmulticast mode [ 778.229327][T16368] zswap: compressor û not available [ 778.234842][T16370] Setting dangerous option i915.mitigations - tainting kernel [ 778.248763][T16368] Setting dangerous option i915.mitigations - tainting kernel [ 778.260121][T16368] Bad "i915.mitigations=", '' is unknown [ 778.774596][T16376] zswap: compressor û not available [ 779.000309][T16374] Process accounting resumed [ 781.728071][T16423] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.667742][T16474] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2160'. [ 789.204365][T16543] zram0: detected capacity change from 0 to 8 [ 791.551278][ T9866] Bluetooth: hci0: unexpected subevent 0x04 length: 122 > 11 [ 791.784193][ T9866] block nbd0: Receive control failed (result -32) [ 791.965827][T16579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2185'. [ 792.002479][T16579] netlink: 354 bytes leftover after parsing attributes in process `syz.2.2185'. [ 792.393629][T16580] zswap: compressor û not available [ 792.731911][T16590] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2187'. [ 793.327625][T16607] __vm_enough_memory: pid: 16607, comm: syz.2.2191, bytes: 4398046511104 not enough memory for the allocation [ 797.972574][T16678] FAULT_INJECTION: forcing a failure. [ 797.972574][T16678] name failslab, interval 1, probability 0, space 0, times 0 [ 798.033068][T16678] CPU: 1 UID: 0 PID: 16678 Comm: syz.3.2206 Tainted: G U syzkaller #0 PREEMPT(full) [ 798.033110][T16678] Tainted: [U]=USER [ 798.033118][T16678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 798.033131][T16678] Call Trace: [ 798.033138][T16678] [ 798.033147][T16678] dump_stack_lvl+0x100/0x190 [ 798.033182][T16678] should_fail_ex.cold+0x5/0xa [ 798.033232][T16678] should_failslab+0xc2/0x120 [ 798.033269][T16678] kmem_cache_alloc_noprof+0x83/0x780 [ 798.033311][T16678] ? getname_flags.part.0+0x4c/0x540 [ 798.033358][T16678] ? getname_flags.part.0+0x4c/0x540 [ 798.033397][T16678] getname_flags.part.0+0x4c/0x540 [ 798.033441][T16678] getname_flags+0x93/0xf0 [ 798.033470][T16678] do_sys_openat2+0xc5/0x220 [ 798.033514][T16678] ? __pfx_do_sys_openat2+0x10/0x10 [ 798.033568][T16678] __x64_sys_openat+0x12d/0x210 [ 798.033611][T16678] ? __pfx___x64_sys_openat+0x10/0x10 [ 798.033650][T16678] ? xfd_validate_state+0x129/0x190 [ 798.033705][T16678] do_syscall_64+0xc9/0xf80 [ 798.033742][T16678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.033770][T16678] RIP: 0033:0x7f4301d9aeb9 [ 798.033793][T16678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 798.033819][T16678] RSP: 002b:00007f4302c7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 798.033845][T16678] RAX: ffffffffffffffda RBX: 00007f4302015fa0 RCX: 00007f4301d9aeb9 [ 798.033863][T16678] RDX: 0000000000080080 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 798.033882][T16678] RBP: 00007f4301e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 798.033904][T16678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 798.033920][T16678] R13: 00007f4302016038 R14: 00007f4302015fa0 R15: 00007fff5aaff598 [ 798.033957][T16678] [ 805.435581][T16774] lo: entered allmulticast mode [ 805.444694][T16774] lo: left allmulticast mode [ 806.473109][T16793] kafs: addr_prefs: Invalid Command [ 809.448144][T16831] lo: entered allmulticast mode [ 809.476591][T16834] zswap: compressor û not available [ 809.507790][T16831] lo: left allmulticast mode [ 809.532865][T16837] Setting dangerous option i915.mitigations - tainting kernel [ 809.592152][T16839] Setting dangerous option i915.mitigations - tainting kernel [ 809.646769][T16839] Bad "i915.mitigations=", '' is unknown [ 809.932253][T16830] Process accounting paused [ 810.203465][T16850] zswap: compressor not available [ 810.896455][T16863] FAULT_INJECTION: forcing a failure. [ 810.896455][T16863] name failslab, interval 1, probability 0, space 0, times 0 [ 810.941791][T16863] CPU: 1 UID: 0 PID: 16863 Comm: syz.2.2245 Tainted: G U syzkaller #0 PREEMPT(full) [ 810.941839][T16863] Tainted: [U]=USER [ 810.941848][T16863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 810.941864][T16863] Call Trace: [ 810.941873][T16863] [ 810.941882][T16863] dump_stack_lvl+0x100/0x190 [ 810.941920][T16863] should_fail_ex.cold+0x5/0xa [ 810.941967][T16863] should_failslab+0xc2/0x120 [ 810.942005][T16863] kmem_cache_alloc_noprof+0x83/0x780 [ 810.942042][T16863] ? getname_flags.part.0+0x4c/0x540 [ 810.942088][T16863] ? getname_flags.part.0+0x4c/0x540 [ 810.942127][T16863] getname_flags.part.0+0x4c/0x540 [ 810.942171][T16863] getname_flags+0x93/0xf0 [ 810.942198][T16863] do_sys_openat2+0xc5/0x220 [ 810.942240][T16863] ? __pfx_do_sys_openat2+0x10/0x10 [ 810.942301][T16863] __x64_sys_openat+0x12d/0x210 [ 810.942346][T16863] ? __pfx___x64_sys_openat+0x10/0x10 [ 810.942388][T16863] ? ksys_write+0x1ac/0x250 [ 810.942430][T16863] do_syscall_64+0xc9/0xf80 [ 810.942465][T16863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.942492][T16863] RIP: 0033:0x7f8bb839aeb9 [ 810.942514][T16863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 810.942540][T16863] RSP: 002b:00007f8bb9257028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 810.942566][T16863] RAX: ffffffffffffffda RBX: 00007f8bb8615fa0 RCX: 00007f8bb839aeb9 [ 810.942585][T16863] RDX: 0000000000080080 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 810.942603][T16863] RBP: 00007f8bb8408c1f R08: 0000000000000000 R09: 0000000000000000 [ 810.942619][T16863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 810.942636][T16863] R13: 00007f8bb8616038 R14: 00007f8bb8615fa0 R15: 00007ffdb3b3d828 [ 810.942674][T16863] [ 812.481661][T16882] Invalid ELF header magic: != ELF [ 812.858408][T16890] lo: entered allmulticast mode [ 812.863600][T16890] lo: left allmulticast mode [ 813.830442][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.839576][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 815.632068][T16922] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 815.700949][T16938] __vm_enough_memory: pid: 16938, comm: syz.0.2260, bytes: 4398046511104 not enough memory for the allocation [ 816.617978][T16958] lo: entered allmulticast mode [ 816.838927][T16958] lo: left allmulticast mode [ 817.027947][ T9866] Bluetooth: hci0: command 0x0c1a tx timeout [ 817.391868][T16963] netlink: 'syz.0.2275': attribute type 1 has an invalid length. [ 820.031893][T17008] zram: Cannot change disksize for initialized device [ 820.749066][T17013] Invalid ELF header magic: != ELF [ 821.993234][T17038] lo: entered allmulticast mode [ 822.006175][T17038] lo: left allmulticast mode [ 825.307070][T17090] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 826.929699][T17124] zram: Cannot change disksize for initialized device [ 827.346169][ T9767] Bluetooth: hci0: command 0x0c1a tx timeout [ 830.075707][T17172] zram: Cannot change disksize for initialized device [ 832.710135][T17204] zram: Cannot change disksize for initialized device [ 833.643581][T17222] zram: Cannot change disksize for initialized device [ 836.431762][T17267] zram: Cannot change disksize for initialized device [ 836.563936][T17266] Invalid ELF header magic: != ELF [ 839.134686][ T9767] block nbd1: Receive control failed (result -32) [ 840.996447][T17312] Process accounting resumed [ 842.801089][T17365] zram: Cannot change disksize for initialized device [ 843.368505][ T9767] block nbd2: Receive control failed (result -32) [ 846.573080][T17427] lo: entered allmulticast mode [ 846.578796][T17427] lo: left allmulticast mode [ 848.469006][T17457] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 849.951972][T17475] zswap: compressor not available [ 850.054073][T17473] lo: entered allmulticast mode [ 850.075813][T17473] lo: left allmulticast mode [ 850.252425][T17473] zswap: compressor û not available [ 850.258618][T17479] Setting dangerous option i915.mitigations - tainting kernel [ 850.316118][T17483] Setting dangerous option i915.mitigations - tainting kernel [ 850.323856][T17483] Bad "i915.mitigations=", '' is unknown [ 851.095961][T17500] zram: Cannot change disksize for initialized device [ 854.448976][T17546] zram: Cannot change disksize for initialized device [ 855.117949][T17553] lo: entered allmulticast mode [ 855.146614][T17553] lo: left allmulticast mode [ 856.277686][T17577] zram: Cannot change disksize for initialized device [ 857.173143][T17583] FAULT_INJECTION: forcing a failure. [ 857.173143][T17583] name failslab, interval 1, probability 0, space 0, times 0 [ 857.250084][T17583] CPU: 0 UID: 0 PID: 17583 Comm: syz.3.2396 Tainted: G U syzkaller #0 PREEMPT(full) [ 857.250127][T17583] Tainted: [U]=USER [ 857.250136][T17583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 857.250152][T17583] Call Trace: [ 857.250160][T17583] [ 857.250169][T17583] dump_stack_lvl+0x100/0x190 [ 857.250208][T17583] should_fail_ex.cold+0x5/0xa [ 857.250252][T17583] should_failslab+0xc2/0x120 [ 857.250289][T17583] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 857.250329][T17583] ? alloc_inode+0x183/0x250 [ 857.250373][T17583] ? alloc_inode+0x183/0x250 [ 857.250407][T17583] alloc_inode+0x183/0x250 [ 857.250444][T17583] alloc_anon_inode+0x2a/0x3e0 [ 857.250474][T17583] dma_buf_export+0x267/0xa90 [ 857.250499][T17583] ? sg_alloc_table+0x4c/0x1c0 [ 857.250530][T17583] system_heap_allocate+0xaec/0x10e0 [ 857.250563][T17583] ? __pfx_system_heap_allocate+0x10/0x10 [ 857.250591][T17583] ? __might_fault+0xc5/0x140 [ 857.250637][T17583] dma_heap_ioctl+0x37f/0x5e0 [ 857.250682][T17583] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 857.250723][T17583] ? __do_sys_close_range+0x230/0x740 [ 857.250771][T17583] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 857.250811][T17583] __x64_sys_ioctl+0x18e/0x210 [ 857.250853][T17583] do_syscall_64+0xc9/0xf80 [ 857.250889][T17583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.250916][T17583] RIP: 0033:0x7f4301d9aeb9 [ 857.250937][T17583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 857.250962][T17583] RSP: 002b:00007f4302c5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 857.250999][T17583] RAX: ffffffffffffffda RBX: 00007f4302016090 RCX: 00007f4301d9aeb9 [ 857.251015][T17583] RDX: 0000200000000140 RSI: ffffffffffdffe00 RDI: 0000000000000001 [ 857.251033][T17583] RBP: 00007f4301e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 857.251050][T17583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 857.251065][T17583] R13: 00007f4302016128 R14: 00007f4302016090 R15: 00007fff5aaff598 [ 857.251105][T17583] [ 859.037230][T17598] FAULT_INJECTION: forcing a failure. [ 859.037230][T17598] name failslab, interval 1, probability 0, space 0, times 0 [ 859.086388][T17598] CPU: 0 UID: 0 PID: 17598 Comm: syz.2.2399 Tainted: G U syzkaller #0 PREEMPT(full) [ 859.086440][T17598] Tainted: [U]=USER [ 859.086451][T17598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 859.086467][T17598] Call Trace: [ 859.086477][T17598] [ 859.086487][T17598] dump_stack_lvl+0x100/0x190 [ 859.086528][T17598] should_fail_ex.cold+0x5/0xa [ 859.086576][T17598] should_failslab+0xc2/0x120 [ 859.086616][T17598] kmem_cache_alloc_noprof+0x83/0x780 [ 859.086655][T17598] ? alloc_empty_file+0x55/0x1c0 [ 859.086703][T17598] ? alloc_empty_file+0x55/0x1c0 [ 859.086741][T17598] alloc_empty_file+0x55/0x1c0 [ 859.086783][T17598] path_openat+0xe8/0x3120 [ 859.086814][T17598] ? getname_flags+0x93/0xf0 [ 859.086839][T17598] ? do_sys_openat2+0xc5/0x220 [ 859.086880][T17598] ? __x64_sys_openat+0x12d/0x210 [ 859.086920][T17598] ? do_syscall_64+0xc9/0xf80 [ 859.086949][T17598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.086986][T17598] ? __pfx_path_openat+0x10/0x10 [ 859.087033][T17598] do_filp_open+0x1f7/0x420 [ 859.087075][T17598] ? __pfx_do_filp_open+0x10/0x10 [ 859.087135][T17598] ? _raw_spin_unlock+0x28/0x50 [ 859.087163][T17598] ? alloc_fd+0x476/0x790 [ 859.087207][T17598] do_sys_openat2+0x12e/0x220 [ 859.087250][T17598] ? __pfx_do_sys_openat2+0x10/0x10 [ 859.087306][T17598] __x64_sys_openat+0x12d/0x210 [ 859.087349][T17598] ? __pfx___x64_sys_openat+0x10/0x10 [ 859.087391][T17598] ? xfd_validate_state+0x129/0x190 [ 859.087447][T17598] do_syscall_64+0xc9/0xf80 [ 859.087484][T17598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.087512][T17598] RIP: 0033:0x7f8bb839aeb9 [ 859.087535][T17598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 859.087560][T17598] RSP: 002b:00007f8bb9257028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 859.087586][T17598] RAX: ffffffffffffffda RBX: 00007f8bb8615fa0 RCX: 00007f8bb839aeb9 [ 859.087603][T17598] RDX: 0000000000080080 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 859.087621][T17598] RBP: 00007f8bb8408c1f R08: 0000000000000000 R09: 0000000000000000 [ 859.087637][T17598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 859.087652][T17598] R13: 00007f8bb8616038 R14: 00007f8bb8615fa0 R15: 00007ffdb3b3d828 [ 859.087685][T17598] [ 860.305816][T17603] Invalid ELF header magic: != ELF [ 866.394428][T17680] openvswitch: netlink: Missing valid actions attribute. [ 867.114694][T17698] lo: entered allmulticast mode [ 867.120012][T17698] lo: left allmulticast mode [ 867.517062][T17709] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 869.106009][T17736] zram: Cannot change disksize for initialized device [ 870.555757][T17745] lo: entered allmulticast mode [ 870.565469][T17745] lo: left allmulticast mode [ 871.279217][T17726] Process accounting paused [ 871.424942][T17749] lo: entered allmulticast mode [ 871.454344][T17756] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2435'. [ 871.484804][T17749] lo: left allmulticast mode [ 871.506556][T17749] Setting dangerous option i915.mitigations - tainting kernel [ 871.961308][T17756] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2435'. [ 871.991508][T17756] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2435'. [ 872.108692][T17756] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2435'. [ 872.948345][T17786] lo: entered allmulticast mode [ 872.953577][T17786] lo: left allmulticast mode [ 873.188155][T17777] openvswitch: netlink: Missing valid actions attribute. [ 873.226626][T17793] vivid-007: ================= START STATUS ================= [ 873.269966][T17793] vivid-007: Generate PTS: true [ 873.280307][T17793] vivid-007: Generate SCR: true [ 873.316805][T17793] tpg source WxH: 320x240 (Y'CbCr) [ 873.332671][T17793] tpg field: 1 [ 873.384316][T17793] tpg crop: (0,0)/320x240 [ 873.410737][T17793] tpg compose: (0,0)/320x240 [ 873.417087][T17793] tpg colorspace: 8 [ 873.420926][T17793] tpg transfer function: 0/0 [ 873.454868][T17793] tpg Y'CbCr encoding: 0/0 [ 873.485295][T17793] tpg quantization: 0/0 [ 873.499739][T17793] tpg RGB range: 0/2 [ 873.503688][T17793] vivid-007: ================== END STATUS ================== [ 873.636984][T17808] Setting dangerous option i915.mitigations - tainting kernel [ 873.824172][T17802] lo: entered allmulticast mode [ 873.829265][T17802] lo: left allmulticast mode [ 875.272487][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.279627][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.830962][T17844] lo: entered allmulticast mode [ 876.864398][T17844] lo: left allmulticast mode [ 877.696490][T17864] zram: Cannot change disksize for initialized device [ 878.706653][T17878] openvswitch: netlink: Duplicate or invalid key (type 0). [ 884.869208][T17955] zram: Cannot change disksize for initialized device [ 890.553651][ T5889] Process accounting resumed [ 891.358549][T18027] Process accounting resumed [ 896.893072][T18099] lo: entered allmulticast mode [ 896.931481][T18099] lo: left allmulticast mode [ 897.000192][T18104] zswap: compressor û not available [ 900.475447][ T30] audit: type=1800 audit(1770368225.770:25): pid=18149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2515" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 901.386685][T18160] zram: Cannot change disksize for initialized device [ 902.005336][T18173] zram: Cannot change disksize for initialized device [ 904.144006][T18192] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2524'. [ 905.781002][T18215] openvswitch: netlink: Duplicate or invalid key (type 0). [ 907.352177][T18248] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2538'. [ 908.882202][T18272] zram: Cannot change disksize for initialized device [ 910.344239][T18311] FAULT_INJECTION: forcing a failure. [ 910.344239][T18311] name failslab, interval 1, probability 0, space 0, times 0 [ 910.393613][T18311] CPU: 1 UID: 0 PID: 18311 Comm: syz.2.2553 Tainted: G U syzkaller #0 PREEMPT(full) [ 910.393654][T18311] Tainted: [U]=USER [ 910.393663][T18311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 910.393678][T18311] Call Trace: [ 910.393687][T18311] [ 910.393696][T18311] dump_stack_lvl+0x100/0x190 [ 910.393735][T18311] should_fail_ex.cold+0x5/0xa [ 910.393779][T18311] should_failslab+0xc2/0x120 [ 910.393819][T18311] kmem_cache_alloc_noprof+0x83/0x780 [ 910.393855][T18311] ? getname_flags.part.0+0x4c/0x540 [ 910.393904][T18311] ? getname_flags.part.0+0x4c/0x540 [ 910.393945][T18311] getname_flags.part.0+0x4c/0x540 [ 910.393989][T18311] getname_flags+0x93/0xf0 [ 910.394019][T18311] do_sys_openat2+0xc5/0x220 [ 910.394062][T18311] ? __pfx_do_sys_openat2+0x10/0x10 [ 910.394116][T18311] __x64_sys_openat+0x12d/0x210 [ 910.394157][T18311] ? __pfx___x64_sys_openat+0x10/0x10 [ 910.394197][T18311] ? xfd_validate_state+0x129/0x190 [ 910.394253][T18311] do_syscall_64+0xc9/0xf80 [ 910.394295][T18311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.394325][T18311] RIP: 0033:0x7f8bb839aeb9 [ 910.394347][T18311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 910.394375][T18311] RSP: 002b:00007f8bb9257028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 910.394401][T18311] RAX: ffffffffffffffda RBX: 00007f8bb8615fa0 RCX: 00007f8bb839aeb9 [ 910.394418][T18311] RDX: 0000000000080080 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 910.394446][T18311] RBP: 00007f8bb8408c1f R08: 0000000000000000 R09: 0000000000000000 [ 910.394463][T18311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 910.394479][T18311] R13: 00007f8bb8616038 R14: 00007f8bb8615fa0 R15: 00007ffdb3b3d828 [ 910.394517][T18311] [ 910.589690][T18312] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2552'. [ 911.691875][T18339] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2558'. [ 914.586857][T18369] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 915.995951][T18396] zram: Cannot change disksize for initialized device [ 916.639654][T18387] random: crng reseeded on system resumption [ 920.278432][T18466] openvswitch: netlink: Duplicate or invalid key (type 0). [ 920.684842][T18473] random: crng reseeded on system resumption [ 921.251078][T18486] zram: Cannot change disksize for initialized device [ 922.510338][T18489] Process accounting paused [ 923.229635][T18501] netlink: 354 bytes leftover after parsing attributes in process `syz.1.2603'. [ 924.230768][T18534] openvswitch: netlink: Duplicate or invalid key (type 0). [ 927.375191][T18583] netlink: 'syz.0.2613': attribute type 64 has an invalid length. [ 927.411566][T18583] netlink: 74 bytes leftover after parsing attributes in process `syz.0.2613'. [ 927.973200][T18600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2616'. [ 929.534843][T18630] NFSD: Failed to start, no listeners configured. [ 930.170647][ T9767] Bluetooth: hci0: unexpected event 0x16 length: 440 > 6 [ 931.065858][T18662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2629'. [ 932.177488][T18677] zram: Cannot change disksize for initialized device [ 934.658193][T18722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2642'. [ 935.889356][ T9767] Bluetooth: hci0: unexpected event 0x16 length: 440 > 6 [ 936.387668][ T9767] Bluetooth: hci0: unexpected event 0x16 length: 440 > 6 [ 936.700283][T18762] zram: Cannot change disksize for initialized device [ 936.711008][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.721307][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.288393][T18776] openvswitch: netlink: Duplicate or invalid key (type 0). [ 939.342902][T18816] netlink: 'syz.1.2664': attribute type 64 has an invalid length. [ 939.350936][T18816] netlink: 74 bytes leftover after parsing attributes in process `syz.1.2664'. [ 944.876288][T18889] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2682'. [ 945.078891][T18901] zram: Cannot change disksize for initialized device [ 945.179956][T18889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 945.192748][T18889] bond0 (unregistering): Released all slaves [ 947.154779][T18956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2705'. [ 948.850063][T18973] zram: Cannot change disksize for initialized device [ 949.747305][T18985] zram: Cannot change disksize for initialized device [ 951.114049][ T9767] Bluetooth: hci0: unexpected event 0x16 length: 440 > 6 [ 951.618721][T19026] zram: Cannot change disksize for initialized device [ 951.817646][T19029] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2716'. [ 952.182228][T19029] team0: Port device team_slave_1 removed [ 952.719888][T18996] Process accounting resumed [ 953.440769][T19040] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2719'. [ 953.840596][T19048] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2720'. [ 954.680217][T19073] zram: Cannot change disksize for initialized device [ 957.125458][T19108] zram: Cannot change disksize for initialized device [ 958.094003][T19125] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 959.800376][ T9765] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u10:0: bg 2: bad block bitmap checksum [ 959.821379][T19159] zram: Cannot change disksize for initialized device [ 959.834357][ T9765] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 927 with max blocks 8 with error 74 [ 959.861978][ T9765] EXT4-fs (sda1): This should not happen!! Data will be lost [ 959.861978][ T9765] [ 962.648975][T19193] zram: Cannot change disksize for initialized device [ 963.457456][ T9767] Bluetooth: hci0: unexpected event 0x16 length: 440 > 6 [ 963.748962][T19219] zram: Cannot change disksize for initialized device [ 965.350657][T19247] zram: Cannot change disksize for initialized device [ 965.933195][T19257] zram: Cannot change disksize for initialized device [ 966.859552][T19273] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2768'. [ 973.304331][T19362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2786'. [ 973.525765][T19363] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2786'. [ 975.965583][T19400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2795'. [ 982.009857][T19490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2816'. [ 982.102966][T19490] netlink: 'syz.3.2816': attribute type 1 has an invalid length. [ 982.172918][T19494] NFSD: Failed to start, no listeners configured. [ 982.179717][T19490] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2816'. [ 984.435000][T19488] Process accounting paused [ 986.194739][T19524] zram: Cannot change disksize for initialized device [ 990.025421][T19589] zram: Cannot change disksize for initialized device [ 990.799148][T19595] zram: Cannot change disksize for initialized device [ 991.952575][T19621] random: crng reseeded on system resumption [ 992.380499][T19624] Invalid ELF header magic: != ELF [ 993.623152][T19642] zram: Cannot change disksize for initialized device [ 994.366292][T19650] zram: Cannot change disksize for initialized device [ 994.676599][T19656] zram: Cannot change disksize for initialized device [ 995.068894][T19667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2860'. [ 995.079334][T19667] netlink: 'syz.2.2860': attribute type 1 has an invalid length. [ 995.109586][T19667] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2860'. [ 995.378863][T19675] zram: Cannot change disksize for initialized device [ 995.911805][T19689] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 996.008466][T19689] serio: Serial port pty6 [ 996.046750][T19694] zram: Cannot change disksize for initialized device [ 996.968961][T19704] zram: Cannot change disksize for initialized device [ 997.108440][T19707] zram: Cannot change disksize for initialized device [ 998.083056][T19723] Invalid ELF header magic: != ELF [ 998.186214][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.195327][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 999.225954][T19740] zram: Cannot change disksize for initialized device [ 1002.279702][T19798] zram: Cannot change disksize for initialized device [ 1004.717438][T19818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2893'. [ 1008.983907][T19865] zram: Cannot change disksize for initialized device [ 1009.669117][T19879] zram: Cannot change disksize for initialized device [ 1015.246637][T19931] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1016.111323][T19924] Process accounting resumed [ 1017.265527][ T9767] Bluetooth: hci0: command 0x0c1a tx timeout [ 1017.696635][T19959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2923'. [ 1017.753950][T19961] netlink: 'syz.3.2923': attribute type 1 has an invalid length. [ 1017.786270][T19961] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2923'. [ 1019.950456][T19996] zram: Cannot change disksize for initialized device [ 1021.560059][T20005] FAULT_INJECTION: forcing a failure. [ 1021.560059][T20005] name failslab, interval 1, probability 0, space 0, times 0 [ 1021.600731][T20005] CPU: 1 UID: 0 PID: 20005 Comm: syz.2.2934 Tainted: G U syzkaller #0 PREEMPT(full) [ 1021.600758][T20005] Tainted: [U]=USER [ 1021.600764][T20005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1021.600773][T20005] Call Trace: [ 1021.600779][T20005] [ 1021.600784][T20005] dump_stack_lvl+0x100/0x190 [ 1021.600809][T20005] should_fail_ex.cold+0x5/0xa [ 1021.600835][T20005] should_failslab+0xc2/0x120 [ 1021.600855][T20005] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 1021.600876][T20005] ? sock_alloc_inode+0x25/0x1c0 [ 1021.600894][T20005] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1021.600907][T20005] ? sock_alloc_inode+0x25/0x1c0 [ 1021.600920][T20005] ? apparmor_socket_create+0x59/0x310 [ 1021.600939][T20005] sock_alloc_inode+0x25/0x1c0 [ 1021.600953][T20005] alloc_inode+0x68/0x250 [ 1021.600973][T20005] sock_alloc+0x44/0x280 [ 1021.600985][T20005] ? security_socket_create+0x7f/0x250 [ 1021.601004][T20005] __sock_create+0xc2/0x860 [ 1021.601021][T20005] ? proc_create_reg+0xd7/0x170 [ 1021.601037][T20005] inet_ctl_sock_create+0x94/0x230 [ 1021.601053][T20005] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 1021.601069][T20005] ? lockdep_init_map_type+0x5c/0x250 [ 1021.601090][T20005] ? lockdep_init_map_type+0x5c/0x250 [ 1021.601110][T20005] ? __pfx_igmp_net_init+0x10/0x10 [ 1021.601127][T20005] igmp_net_init+0xd0/0x150 [ 1021.601145][T20005] ops_init+0x1e2/0x5f0 [ 1021.601168][T20005] setup_net+0x118/0x3a0 [ 1021.601184][T20005] ? __pfx_setup_net+0x10/0x10 [ 1021.601195][T20005] ? lockdep_init_map_type+0x5c/0x250 [ 1021.601215][T20005] ? mutex_init_lockep+0x110/0x150 [ 1021.601237][T20005] copy_net_ns+0x46f/0x7c0 [ 1021.601253][T20005] create_new_namespaces+0x3ea/0xab0 [ 1021.601274][T20005] copy_namespaces+0x468/0x5e0 [ 1021.601291][T20005] copy_process+0x32d5/0x7890 [ 1021.601318][T20005] ? __pfx_copy_process+0x10/0x10 [ 1021.601345][T20005] kernel_clone+0xfc/0x930 [ 1021.601362][T20005] ? __pfx_futex_wait+0x10/0x10 [ 1021.601377][T20005] ? __pfx_kernel_clone+0x10/0x10 [ 1021.601400][T20005] ? __pfx_sock_write_iter+0x10/0x10 [ 1021.601420][T20005] __do_sys_clone+0xd9/0x120 [ 1021.601449][T20005] ? __pfx___do_sys_clone+0x10/0x10 [ 1021.601476][T20005] ? xfd_validate_state+0x129/0x190 [ 1021.601507][T20005] do_syscall_64+0xc9/0xf80 [ 1021.601526][T20005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.601542][T20005] RIP: 0033:0x7f8bb839aeb9 [ 1021.601555][T20005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1021.601570][T20005] RSP: 002b:00007f8bb9235fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1021.601585][T20005] RAX: ffffffffffffffda RBX: 00007f8bb8616090 RCX: 00007f8bb839aeb9 [ 1021.601594][T20005] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040180211 [ 1021.601603][T20005] RBP: 00007f8bb8408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1021.601611][T20005] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1021.601620][T20005] R13: 00007f8bb8616128 R14: 00007f8bb8616090 R15: 00007ffdb3b3d828 [ 1021.601640][T20005] [ 1021.601659][T20005] socket: no more sockets [ 1022.136719][T20005] Failed to initialize the IGMP autojoin socket (err -23) [ 1022.185633][T20013] NFSD: Failed to start, no listeners configured. [ 1023.536714][T20035] zram: Cannot change disksize for initialized device [ 1025.041421][T20066] zram: Cannot change disksize for initialized device [ 1028.247061][T20082] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1028.411364][T20095] zram: Cannot change disksize for initialized device [ 1029.296289][T20105] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2953'. [ 1029.396098][T20105] mac80211_hwsim hwsim98 ›: renamed from wlan0 [ 1031.567416][T20156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2964'. [ 1031.619410][T20158] netlink: 'syz.2.2964': attribute type 1 has an invalid length. [ 1031.642849][T20158] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2964'. [ 1035.386611][T20197] zram: Cannot change disksize for initialized device [ 1035.912700][T20203] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2972'. [ 1037.788019][T20230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2978'. [ 1040.558973][T20262] zram: Cannot change disksize for initialized device [ 1042.884664][T20278] zram: Cannot change disksize for initialized device [ 1044.923022][T20311] zram: Cannot change disksize for initialized device [ 1045.381332][T20316] zram: Cannot change disksize for initialized device [ 1045.960267][T20323] zram: Cannot change disksize for initialized device [ 1047.336619][T20332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3003'. [ 1047.356022][T20332] netlink: 'syz.2.3003': attribute type 1 has an invalid length. [ 1047.390205][T20332] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3003'. [ 1047.724981][T20300] Process accounting paused [ 1048.910022][T20355] zram: Cannot change disksize for initialized device [ 1055.569908][T20400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3018'. [ 1056.934865][T20427] zram: Cannot change disksize for initialized device [ 1056.944523][T20425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3023'. [ 1056.981822][T20425] netlink: 'syz.3.3023': attribute type 1 has an invalid length. [ 1057.056205][T20425] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3023'. [ 1059.598084][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.604434][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.012540][T20449] Invalid ELF header magic: != ELF [ 1061.499847][T20472] zram: Cannot change disksize for initialized device [ 1063.049632][T20362] syz.1.3010 (20362) used greatest stack depth: 18616 bytes left [ 1065.786956][T20517] zram: Cannot change disksize for initialized device [ 1068.383715][T20551] zram: Cannot change disksize for initialized device [ 1069.014815][T20562] Invalid ELF header magic: != ELF [ 1069.991435][T20576] zram: Cannot change disksize for initialized device [ 1070.736406][T20583] zram: Cannot change disksize for initialized device [ 1070.819054][T20587] zram: Cannot change disksize for initialized device [ 1074.883914][T20634] zram: Cannot change disksize for initialized device [ 1075.761618][T20645] zram: Cannot change disksize for initialized device [ 1077.987443][T20671] zram: Cannot change disksize for initialized device [ 1078.464790][T20683] zram: Cannot change disksize for initialized device [ 1078.531691][T20681] netlink: 330 bytes leftover after parsing attributes in process `syz.1.3075'. [ 1078.703041][T20681] mac80211_hwsim hwsim16 ›: renamed from wlan0 [ 1080.172360][T20696] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3077'. [ 1081.606647][T20658] Process accounting resumed [ 1082.703738][T20742] Invalid ELF header magic: != ELF [ 1085.108601][ T9767] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1085.425788][T20782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3094'. [ 1086.527989][T20793] zram: Cannot change disksize for initialized device [ 1093.497633][T20892] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3115'. [ 1094.167373][T20899] zram: Cannot change disksize for initialized device [ 1096.897896][T20936] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3126'. [ 1098.737597][T20597] usb usb40-port2: attempt power cycle [ 1099.344851][T20597] usb usb40-port2: unable to enumerate USB device [ 1101.105296][ T9767] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1102.070235][T20992] zram: Cannot change disksize for initialized device [ 1104.842583][T21037] bridge0: port 2(team0) entered blocking state [ 1104.872896][T21037] bridge0: port 2(team0) entered disabled state [ 1104.887919][T21037] team0: entered allmulticast mode [ 1104.893078][T21037] team_slave_1: entered allmulticast mode [ 1104.919368][T21037] team0: entered promiscuous mode [ 1104.924417][T21037] team_slave_1: entered promiscuous mode [ 1104.933578][T21037] bridge0: port 2(team0) entered blocking state [ 1104.939994][T21037] bridge0: port 2(team0) entered forwarding state [ 1105.491803][T21047] zram: Cannot change disksize for initialized device [ 1105.861766][T21056] zram: Cannot change disksize for initialized device [ 1107.141445][T21073] Invalid ELF header magic: != ELF [ 1109.341953][T21101] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3157'. [ 1109.387814][T21101] hsr_slave_0: left promiscuous mode [ 1109.400010][T21101] hsr_slave_1: left promiscuous mode [ 1109.529130][T21103] NFSD: Failed to start, no listeners configured. [ 1109.579485][T21109] zram: Cannot change disksize for initialized device [ 1109.603779][T21102] blktrace: Concurrent blktraces are not allowed on loop2 [ 1111.395621][T21136] syz.3.3163(21136): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 1112.723294][T21161] Invalid ELF header magic: != ELF [ 1112.884965][T21136] Process accounting paused [ 1117.033601][T21234] zram: Cannot change disksize for initialized device [ 1117.688939][T21244] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1119.883661][T21273] zram: Cannot change disksize for initialized device [ 1120.649557][T21285] zram: Cannot change disksize for initialized device [ 1121.042083][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.050649][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1122.220986][T21305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3199'. [ 1122.231013][T21305] netlink: 25 bytes leftover after parsing attributes in process `syz.2.3199'. [ 1127.148845][T21370] QAT: Invalid ioctl 21531 [ 1129.145437][T21393] Invalid ELF header magic: != ELF [ 1130.047452][T21415] zram: Cannot change disksize for initialized device [ 1131.317050][T21417] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3222'. [ 1131.413675][T21421] NFSD: Failed to start, no listeners configured. [ 1131.520554][T21417] hsr_slave_0: left promiscuous mode [ 1131.545187][T21417] hsr_slave_1: left promiscuous mode [ 1133.297234][T21439] zram: Cannot change disksize for initialized device [ 1135.413581][T21468] Invalid ELF header magic: != ELF [ 1136.799293][T21478] tipc: Started in network mode [ 1136.855391][T21478] tipc: Node identity ffffffff, cluster identity 4711 [ 1136.865362][T21478] tipc: Node number set to 4294967295 [ 1137.328232][T21493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3237'. [ 1144.306392][ T9767] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1144.698006][T21528] Process accounting resumed [ 1146.823406][T21611] Invalid ELF header magic: != ELF [ 1148.685341][T21628] zram: Cannot change disksize for initialized device [ 1150.988560][T21656] zram: Cannot change disksize for initialized device [ 1151.815247][ T9767] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1151.820443][T21668] FAULT_INJECTION: forcing a failure. [ 1151.820443][T21668] name failslab, interval 1, probability 0, space 0, times 0 [ 1151.926595][T21668] CPU: 1 UID: 0 PID: 21668 Comm: syz.3.3270 Tainted: G U syzkaller #0 PREEMPT(full) [ 1151.926628][T21668] Tainted: [U]=USER [ 1151.926633][T21668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1151.926643][T21668] Call Trace: [ 1151.926649][T21668] [ 1151.926656][T21668] dump_stack_lvl+0x100/0x190 [ 1151.926679][T21668] should_fail_ex.cold+0x5/0xa [ 1151.926704][T21668] should_failslab+0xc2/0x120 [ 1151.926724][T21668] kmem_cache_alloc_noprof+0x83/0x780 [ 1151.926743][T21668] ? __kernfs_new_node+0xd2/0x960 [ 1151.926766][T21668] ? __kernfs_new_node+0xd2/0x960 [ 1151.926784][T21668] __kernfs_new_node+0xd2/0x960 [ 1151.926805][T21668] ? __pfx___kernfs_new_node+0x10/0x10 [ 1151.926830][T21668] ? find_held_lock+0x2b/0x80 [ 1151.926844][T21668] ? kernfs_root+0xee/0x2a0 [ 1151.926868][T21668] ? kernfs_root+0xee/0x2a0 [ 1151.926891][T21668] kernfs_new_node+0x11b/0x1a0 [ 1151.926922][T21668] __kernfs_create_file+0x53/0x350 [ 1151.926941][T21668] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1151.926964][T21668] internal_create_group+0x593/0xf40 [ 1151.926990][T21668] ? __pfx_internal_create_group+0x10/0x10 [ 1151.927014][T21668] ? kernfs_create_link+0x1bd/0x240 [ 1151.927033][T21668] internal_create_groups+0x9d/0x150 [ 1151.927056][T21668] device_add+0x7c8/0x1950 [ 1151.927083][T21668] ? __pfx_device_add+0x10/0x10 [ 1151.927104][T21668] ? lockdep_init_map_type+0x5c/0x250 [ 1151.927125][T21668] ? __init_waitqueue_head+0xca/0x150 [ 1151.927153][T21668] netdev_register_kobject+0x1a9/0x3d0 [ 1151.927173][T21668] register_netdevice+0x12b3/0x21d0 [ 1151.927190][T21668] ? idr_alloc+0xdd/0x130 [ 1151.927207][T21668] ? __pfx_register_netdevice+0x10/0x10 [ 1151.927219][T21668] ? net_generic+0xea/0x2a0 [ 1151.927242][T21668] ppp_dev_configure+0x986/0xcb0 [ 1151.927265][T21668] ppp_ioctl+0x985/0x2800 [ 1151.927284][T21668] ? find_held_lock+0x2b/0x80 [ 1151.927298][T21668] ? __pfx_ppp_ioctl+0x10/0x10 [ 1151.927319][T21668] ? __fget_files+0x21f/0x3d0 [ 1151.927337][T21668] ? __pfx_ppp_ioctl+0x10/0x10 [ 1151.927356][T21668] __x64_sys_ioctl+0x18e/0x210 [ 1151.927379][T21668] do_syscall_64+0xc9/0xf80 [ 1151.927398][T21668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.927413][T21668] RIP: 0033:0x7f4301d9aeb9 [ 1151.927427][T21668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1151.927442][T21668] RSP: 002b:00007f4302c3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1151.927457][T21668] RAX: ffffffffffffffda RBX: 00007f4302016180 RCX: 00007f4301d9aeb9 [ 1151.927466][T21668] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 000000000000000d [ 1151.927475][T21668] RBP: 00007f4301e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1151.927483][T21668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1151.927492][T21668] R13: 00007f4302016218 R14: 00007f4302016180 R15: 00007fff5aaff598 [ 1151.927512][T21668] [ 1152.754025][T21680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3273'. [ 1153.030300][T21553] Bluetooth: hci0: Unexpected cc 0x7c89 with no status [ 1153.283906][T21689] Invalid ELF header magic: != ELF [ 1158.337207][T21760] zram: Cannot change disksize for initialized device [ 1158.746855][T21766] zram: Cannot change disksize for initialized device [ 1160.376687][T21791] zram: Cannot change disksize for initialized device [ 1162.254379][T21835] zram: Cannot change disksize for initialized device [ 1162.285845][T21553] Bluetooth: hci0: unexpected event 0x16 length: 440 > 6 [ 1163.867980][T21864] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3312'. [ 1165.464833][T21903] zram: Cannot change disksize for initialized device [ 1166.645473][T21919] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3322'. [ 1166.683549][T21919] hsr_slave_0: left promiscuous mode [ 1166.693868][T21919] hsr_slave_1: left promiscuous mode [ 1166.759504][T21922] NFSD: Failed to start, no listeners configured. [ 1171.651487][T21985] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3338'. [ 1171.764932][T21990] NFSD: Failed to start, no listeners configured. [ 1171.840212][T21985] hsr_slave_0: left promiscuous mode [ 1171.867970][T21985] hsr_slave_1: left promiscuous mode [ 1172.411722][T21992] Invalid ELF header magic: != ELF [ 1172.818269][T22000] bridge0: port 2(team0) entered blocking state [ 1172.824699][T22000] bridge0: port 2(team0) entered disabled state [ 1172.855864][T22000] team0: entered allmulticast mode [ 1172.982589][T22000] team_slave_1: entered allmulticast mode [ 1173.047880][T22000] team0: entered promiscuous mode [ 1173.053073][T22000] team_slave_1: entered promiscuous mode [ 1173.074217][T22000] bridge0: port 2(team0) entered blocking state [ 1173.080623][T22000] bridge0: port 2(team0) entered forwarding state [ 1174.106667][T22006] zram: Cannot change disksize for initialized device [ 1174.781571][T22021] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3344'. [ 1175.269091][T22014] Process accounting paused [ 1176.423433][T22059] nbd: nbd0 already in use [ 1178.587171][T22081] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3357'. [ 1178.742673][T22085] NFSD: Failed to start, no listeners configured. [ 1181.214599][T22120] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3365'. [ 1182.249008][T22130] Invalid ELF header magic: != ELF [ 1182.476499][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.482861][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.644337][T22140] zram: Cannot change disksize for initialized device [ 1184.021518][T22154] zram: Cannot change disksize for initialized device [ 1185.041622][T22174] zram: Cannot change disksize for initialized device [ 1186.414450][T22193] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3379'. [ 1187.274339][T22211] zram: Cannot change disksize for initialized device [ 1190.675501][T22240] FAULT_INJECTION: forcing a failure. [ 1190.675501][T22240] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1190.735196][T22240] CPU: 1 UID: 0 PID: 22240 Comm: syz.2.3388 Tainted: G U syzkaller #0 PREEMPT(full) [ 1190.735241][T22240] Tainted: [U]=USER [ 1190.735250][T22240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1190.735264][T22240] Call Trace: [ 1190.735272][T22240] [ 1190.735281][T22240] dump_stack_lvl+0x100/0x190 [ 1190.735335][T22240] should_fail_ex.cold+0x5/0xa [ 1190.735375][T22240] ? prepare_alloc_pages+0x16d/0x5f0 [ 1190.735420][T22240] should_fail_alloc_page+0xeb/0x140 [ 1190.735457][T22240] prepare_alloc_pages+0x1f0/0x5f0 [ 1190.735500][T22240] __alloc_frozen_pages_noprof+0x193/0x2410 [ 1190.735533][T22240] ? __lock_acquire+0x4a5/0x2630 [ 1190.735578][T22240] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1190.735611][T22240] ? find_held_lock+0x2b/0x80 [ 1190.735635][T22240] ? is_bpf_text_address+0x8a/0x1a0 [ 1190.735663][T22240] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1190.735698][T22240] ? is_bpf_text_address+0x94/0x1a0 [ 1190.735721][T22240] ? kernel_text_address+0x8d/0x100 [ 1190.735761][T22240] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1190.735790][T22240] ? policy_nodemask+0xed/0x4f0 [ 1190.735830][T22240] alloc_pages_mpol+0x1fb/0x550 [ 1190.735871][T22240] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1190.735920][T22240] alloc_pages_noprof+0x131/0x390 [ 1190.735961][T22240] pte_alloc_one+0x1e/0x3e0 [ 1190.735998][T22240] do_huge_pmd_anonymous_page+0x836/0x1c00 [ 1190.736040][T22240] __handle_mm_fault+0x1e96/0x2b50 [ 1190.736073][T22240] ? mt_find+0x45e/0x8e0 [ 1190.736109][T22240] ? __pfx___handle_mm_fault+0x10/0x10 [ 1190.736138][T22240] ? __pfx_mt_find+0x10/0x10 [ 1190.736200][T22240] handle_mm_fault+0x36d/0xa20 [ 1190.736238][T22240] __get_user_pages+0xf9c/0x34d0 [ 1190.736289][T22240] ? down_read_killable+0x30e/0x4c0 [ 1190.736337][T22240] ? __lock_acquire+0x4a5/0x2630 [ 1190.736374][T22240] ? __pfx___get_user_pages+0x10/0x10 [ 1190.736427][T22240] __gup_longterm_locked+0x87d/0x16f0 [ 1190.736475][T22240] ? __pfx___gup_longterm_locked+0x10/0x10 [ 1190.736517][T22240] ? try_get_folio+0x262/0x750 [ 1190.736548][T22240] ? pmd_write+0xd3/0x150 [ 1190.736583][T22240] ? sanity_check_pinned_pages+0x5f6/0x1250 [ 1190.736631][T22240] gup_fast_fallback+0x18c6/0x2460 [ 1190.736699][T22240] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1190.736739][T22240] ? ksys_write+0x12a/0x250 [ 1190.736770][T22240] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1190.736813][T22240] pin_user_pages_fast+0xa7/0xf0 [ 1190.736855][T22240] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 1190.736908][T22240] iov_iter_extract_pages+0xa0d/0x1ef0 [ 1190.736963][T22240] ? pfn_valid+0x98/0x4e0 [ 1190.736998][T22240] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 1190.737040][T22240] ? bvec_try_merge_page+0x1cd/0x290 [ 1190.737082][T22240] ? bio_add_page+0x162/0x760 [ 1190.737117][T22240] ? iov_iter_revert+0x252/0x5b0 [ 1190.737163][T22240] bio_iov_iter_get_pages+0x35e/0x12c0 [ 1190.737226][T22240] ? __pfx_bio_iov_iter_get_pages+0x10/0x10 [ 1190.737271][T22240] ? __pfx_bio_alloc_bioset+0x10/0x10 [ 1190.737324][T22240] ? iov_iter_npages+0xf8/0x500 [ 1190.737365][T22240] blkdev_direct_IO+0x1302/0x1fb0 [ 1190.737417][T22240] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 1190.737457][T22240] ? filemap_check_errors+0xa9/0x150 [ 1190.737510][T22240] blkdev_write_iter+0x703/0xd70 [ 1190.737552][T22240] vfs_write+0x6ac/0x1070 [ 1190.737584][T22240] ? __pfx_blkdev_write_iter+0x10/0x10 [ 1190.737621][T22240] ? __pfx_vfs_write+0x10/0x10 [ 1190.737649][T22240] ? find_held_lock+0x2b/0x80 [ 1190.737699][T22240] ksys_write+0x12a/0x250 [ 1190.737731][T22240] ? __pfx_ksys_write+0x10/0x10 [ 1190.737772][T22240] do_syscall_64+0xc9/0xf80 [ 1190.737808][T22240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1190.737836][T22240] RIP: 0033:0x7f8bb839aeb9 [ 1190.737860][T22240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1190.737886][T22240] RSP: 002b:00007f8bb9257028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1190.737912][T22240] RAX: ffffffffffffffda RBX: 00007f8bb8615fa0 RCX: 00007f8bb839aeb9 [ 1190.737931][T22240] RDX: 000000100000a3d9 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1190.737948][T22240] RBP: 00007f8bb8408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1190.737964][T22240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1190.737980][T22240] R13: 00007f8bb8616038 R14: 00007f8bb8615fa0 R15: 00007ffdb3b3d828 [ 1190.738018][T22240] [ 1197.333085][T22336] zram: Cannot change disksize for initialized device [ 1205.626095][T22416] Process accounting resumed [ 1205.780934][T22432] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3422'. [ 1210.957234][T22516] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1212.493196][T22539] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3445'. [ 1217.135839][T22600] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3460'. [ 1218.668997][T22628] zram: Cannot change disksize for initialized device [ 1221.108369][T22668] Invalid ELF header magic: != ELF [ 1224.437581][T22706] zram: Cannot change disksize for initialized device [ 1224.575829][T22708] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3481'. [ 1226.609772][T22739] Invalid ELF header magic: != ELF [ 1230.287664][T22787] zram: Cannot change disksize for initialized device [ 1235.051119][T22852] netlink: set zone limit has 8 unknown bytes [ 1235.163653][T22852] netlink: zone id is out of range [ 1235.204080][T22852] netlink: zone id is out of range [ 1235.223279][T22852] netlink: zone id is out of range [ 1235.255858][T22852] netlink: zone id is out of range [ 1235.309640][T22852] netlink: zone id is out of range [ 1235.363411][T22852] netlink: zone id is out of range [ 1235.438009][T22852] netlink: zone id is out of range [ 1235.465598][T22852] netlink: zone id is out of range [ 1235.471196][T22852] netlink: zone id is out of range [ 1236.132478][T22856] Process accounting paused [ 1238.972613][T22911] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1239.647635][T22918] FAULT_INJECTION: forcing a failure. [ 1239.647635][T22918] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1239.703655][T22918] CPU: 1 UID: 0 PID: 22918 Comm: syz.2.3527 Tainted: G U syzkaller #0 PREEMPT(full) [ 1239.703681][T22918] Tainted: [U]=USER [ 1239.703686][T22918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1239.703696][T22918] Call Trace: [ 1239.703702][T22918] [ 1239.703708][T22918] dump_stack_lvl+0x100/0x190 [ 1239.703730][T22918] should_fail_ex.cold+0x5/0xa [ 1239.703751][T22918] ? prepare_alloc_pages+0x16d/0x5f0 [ 1239.703775][T22918] should_fail_alloc_page+0xeb/0x140 [ 1239.703797][T22918] prepare_alloc_pages+0x1f0/0x5f0 [ 1239.703818][T22918] ? is_bpf_text_address+0x94/0x1a0 [ 1239.703833][T22918] __alloc_frozen_pages_noprof+0x193/0x2410 [ 1239.703858][T22918] ? __lock_acquire+0x4a5/0x2630 [ 1239.703891][T22918] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1239.703911][T22918] ? __lock_acquire+0x4a5/0x2630 [ 1239.703937][T22918] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1239.703955][T22918] ? policy_nodemask+0xed/0x4f0 [ 1239.703984][T22918] alloc_pages_mpol+0x1fb/0x550 [ 1239.704005][T22918] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1239.704030][T22918] alloc_pages_noprof+0x131/0x390 [ 1239.704052][T22918] pte_alloc_one+0x1e/0x3e0 [ 1239.704072][T22918] do_huge_pmd_anonymous_page+0x836/0x1c00 [ 1239.704093][T22918] __handle_mm_fault+0x1e96/0x2b50 [ 1239.704121][T22918] ? mt_find+0x45e/0x8e0 [ 1239.704141][T22918] ? __pfx___handle_mm_fault+0x10/0x10 [ 1239.704156][T22918] ? __pfx_mt_find+0x10/0x10 [ 1239.704189][T22918] handle_mm_fault+0x36d/0xa20 [ 1239.704210][T22918] __get_user_pages+0xf9c/0x34d0 [ 1239.704238][T22918] ? down_read_killable+0x30e/0x4c0 [ 1239.704257][T22918] ? __lock_acquire+0x4a5/0x2630 [ 1239.704275][T22918] ? __pfx___get_user_pages+0x10/0x10 [ 1239.704301][T22918] __gup_longterm_locked+0x87d/0x16f0 [ 1239.704328][T22918] ? __pfx___gup_longterm_locked+0x10/0x10 [ 1239.704351][T22918] ? try_get_folio+0x262/0x750 [ 1239.704369][T22918] ? pmd_write+0xd3/0x150 [ 1239.704387][T22918] ? sanity_check_pinned_pages+0x5f6/0x1250 [ 1239.704411][T22918] gup_fast_fallback+0x18c6/0x2460 [ 1239.704445][T22918] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1239.704465][T22918] ? ksys_write+0x12a/0x250 [ 1239.704481][T22918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.704503][T22918] pin_user_pages_fast+0xa7/0xf0 [ 1239.704524][T22918] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 1239.704551][T22918] iov_iter_extract_pages+0xa0d/0x1ef0 [ 1239.704578][T22918] ? pfn_valid+0x98/0x4e0 [ 1239.704597][T22918] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 1239.704619][T22918] ? bvec_try_merge_page+0x1cd/0x290 [ 1239.704641][T22918] ? bio_add_page+0x162/0x760 [ 1239.704660][T22918] ? iov_iter_revert+0x252/0x5b0 [ 1239.704682][T22918] bio_iov_iter_get_pages+0x35e/0x12c0 [ 1239.704715][T22918] ? __pfx_bio_iov_iter_get_pages+0x10/0x10 [ 1239.704737][T22918] ? __pfx_bio_alloc_bioset+0x10/0x10 [ 1239.704760][T22918] ? iov_iter_npages+0xf8/0x500 [ 1239.704781][T22918] blkdev_direct_IO+0x1302/0x1fb0 [ 1239.704807][T22918] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 1239.704827][T22918] ? filemap_check_errors+0xa9/0x150 [ 1239.704856][T22918] blkdev_write_iter+0x703/0xd70 [ 1239.704878][T22918] vfs_write+0x6ac/0x1070 [ 1239.704895][T22918] ? __pfx_blkdev_write_iter+0x10/0x10 [ 1239.704914][T22918] ? __pfx_vfs_write+0x10/0x10 [ 1239.704928][T22918] ? find_held_lock+0x2b/0x80 [ 1239.704954][T22918] ksys_write+0x12a/0x250 [ 1239.704970][T22918] ? __pfx_ksys_write+0x10/0x10 [ 1239.705002][T22918] do_syscall_64+0xc9/0xf80 [ 1239.705031][T22918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.705055][T22918] RIP: 0033:0x7f8bb839aeb9 [ 1239.705075][T22918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1239.705110][T22918] RSP: 002b:00007f8bb9236028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1239.705138][T22918] RAX: ffffffffffffffda RBX: 00007f8bb8616090 RCX: 00007f8bb839aeb9 [ 1239.705157][T22918] RDX: 000000100000a3d9 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1239.705175][T22918] RBP: 00007f8bb8408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1239.705189][T22918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1239.705204][T22918] R13: 00007f8bb8616128 R14: 00007f8bb8616090 R15: 00007ffdb3b3d828 [ 1239.705241][T22918] [ 1240.802177][T22931] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3529'. [ 1243.921091][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1243.938547][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1245.321275][T22991] zram: Cannot change disksize for initialized device [ 1248.582604][T23037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3550'. [ 1248.689386][T23038] netlink: 25 bytes leftover after parsing attributes in process `syz.3.3550'. [ 1248.897356][T23040] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3551'. [ 1249.105421][T23041] NFSD: Failed to start, no listeners configured. [ 1251.248242][T23071] zram: Cannot change disksize for initialized device [ 1252.004450][T23081] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3559'. [ 1252.161769][T23081] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3559'. [ 1257.375929][T23153] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3577'. [ 1258.789699][T23188] zram: Cannot change disksize for initialized device [ 1259.430774][T23193] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3586'. [ 1259.497193][T23194] NFSD: Failed to start, no listeners configured. [ 1261.453946][T23209] zram: Cannot change disksize for initialized device [ 1262.563536][T23231] zram: Cannot change disksize for initialized device [ 1263.304130][T23247] zram: Cannot change disksize for initialized device [ 1266.422200][T23284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3607'. [ 1266.445217][T23284] netlink: 'syz.2.3607': attribute type 1 has an invalid length. [ 1266.471331][T23284] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3607'. [ 1266.978945][T23257] Process accounting resumed [ 1267.513291][T23301] zram: Cannot change disksize for initialized device [ 1267.972482][T23305] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3612'. [ 1272.720411][T23356] kexec: Could not allocate control_code_buffer [ 1273.182320][T23373] zram: Cannot change disksize for initialized device [ 1273.543821][T23379] Invalid ELF header magic: != ELF [ 1275.562493][T23411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3630'. [ 1275.681208][T23412] netlink: 25 bytes leftover after parsing attributes in process `syz.2.3630'. [ 1277.084035][T23426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3635'. [ 1277.140405][T23427] netlink: 'syz.3.3635': attribute type 1 has an invalid length. [ 1277.186933][T23427] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3635'. [ 1282.630702][T23500] zram: Cannot change disksize for initialized device [ 1284.148493][T23522] program syz.2.3654 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1287.089623][T23564] zram: Cannot change disksize for initialized device [ 1287.639264][T23572] net_ratelimit: 5 callbacks suppressed [ 1287.639281][T23572] openvswitch: netlink: IP tunnel dst address not specified [ 1288.899211][T23556] forcing mempool usage for bvec_alloc+0x197/0x210 [ 1290.588637][T23626] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1290.756975][T23626] FAULT_INJECTION: forcing a failure. [ 1290.756975][T23626] name failslab, interval 1, probability 0, space 0, times 0 [ 1290.825234][T23626] CPU: 0 UID: 0 PID: 23626 Comm: syz.3.3679 Tainted: G U syzkaller #0 PREEMPT(full) [ 1290.825282][T23626] Tainted: [U]=USER [ 1290.825292][T23626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1290.825310][T23626] Call Trace: [ 1290.825321][T23626] [ 1290.825333][T23626] dump_stack_lvl+0x100/0x190 [ 1290.825374][T23626] should_fail_ex.cold+0x5/0xa [ 1290.825421][T23626] should_failslab+0xc2/0x120 [ 1290.825472][T23626] __kmalloc_cache_noprof+0x80/0x810 [ 1290.825505][T23626] ? proc_thread_self_get_link+0x1a6/0x210 [ 1290.825553][T23626] ? proc_thread_self_get_link+0x1a6/0x210 [ 1290.825593][T23626] proc_thread_self_get_link+0x1a6/0x210 [ 1290.825636][T23626] pick_link+0xac2/0x13c0 [ 1290.825660][T23626] ? link_path_walk+0xf28/0x1cc0 [ 1290.825688][T23626] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 1290.825732][T23626] step_into_slowpath+0x6c2/0xf50 [ 1290.825766][T23626] ? __pfx_step_into_slowpath+0x10/0x10 [ 1290.825801][T23626] ? lookup_fast+0x2da/0x600 [ 1290.825824][T23626] ? inode_permission+0x374/0x630 [ 1290.825870][T23626] link_path_walk+0xf28/0x1cc0 [ 1290.825913][T23626] path_openat+0x1be/0x3120 [ 1290.825944][T23626] ? getname_flags+0x93/0xf0 [ 1290.825971][T23626] ? do_sys_openat2+0xc5/0x220 [ 1290.826011][T23626] ? __x64_sys_openat+0x12d/0x210 [ 1290.826052][T23626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1290.826091][T23626] ? __pfx_path_openat+0x10/0x10 [ 1290.826137][T23626] do_filp_open+0x1f7/0x420 [ 1290.826174][T23626] ? __pfx_do_filp_open+0x10/0x10 [ 1290.826229][T23626] ? _raw_spin_unlock+0x28/0x50 [ 1290.826257][T23626] ? alloc_fd+0x476/0x790 [ 1290.826300][T23626] do_sys_openat2+0x12e/0x220 [ 1290.826344][T23626] ? __pfx_do_sys_openat2+0x10/0x10 [ 1290.826400][T23626] __x64_sys_openat+0x12d/0x210 [ 1290.826444][T23626] ? __pfx___x64_sys_openat+0x10/0x10 [ 1290.826496][T23626] ? xfd_validate_state+0x129/0x190 [ 1290.826555][T23626] do_syscall_64+0xc9/0xf80 [ 1290.826592][T23626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1290.826621][T23626] RIP: 0033:0x7f4301d9aeb9 [ 1290.826644][T23626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1290.826672][T23626] RSP: 002b:00007f4302c7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1290.826699][T23626] RAX: ffffffffffffffda RBX: 00007f4302015fa0 RCX: 00007f4301d9aeb9 [ 1290.826717][T23626] RDX: 0000000000008800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1290.826735][T23626] RBP: 00007f4301e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1290.826751][T23626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1290.826768][T23626] R13: 00007f4302016038 R14: 00007f4302015fa0 R15: 00007fff5aaff598 [ 1290.826807][T23626] [ 1298.036047][T23710] zram: Cannot change disksize for initialized device [ 1299.958366][T23694] Process accounting paused [ 1302.894530][T23767] FAULT_INJECTION: forcing a failure. [ 1302.894530][T23767] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1302.961632][T23767] CPU: 0 UID: 0 PID: 23767 Comm: syz.3.3708 Tainted: G U syzkaller #0 PREEMPT(full) [ 1302.961678][T23767] Tainted: [U]=USER [ 1302.961688][T23767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1302.961704][T23767] Call Trace: [ 1302.961715][T23767] [ 1302.961726][T23767] dump_stack_lvl+0x100/0x190 [ 1302.961768][T23767] should_fail_ex.cold+0x5/0xa [ 1302.961808][T23767] ? prepare_alloc_pages+0x16d/0x5f0 [ 1302.961853][T23767] should_fail_alloc_page+0xeb/0x140 [ 1302.961897][T23767] prepare_alloc_pages+0x1f0/0x5f0 [ 1302.961938][T23767] ? rcu_is_watching+0x12/0xc0 [ 1302.961971][T23767] __alloc_frozen_pages_noprof+0x193/0x2410 [ 1302.962018][T23767] ? __lock_acquire+0x4a5/0x2630 [ 1302.962056][T23767] ? finish_task_switch.isra.0+0x204/0xb70 [ 1302.962093][T23767] ? rcu_is_watching+0x12/0xc0 [ 1302.962120][T23767] ? trace_sched_exit_tp+0xcd/0x100 [ 1302.962160][T23767] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1302.962196][T23767] ? find_held_lock+0x2b/0x80 [ 1302.962223][T23767] ? __might_fault+0xc5/0x140 [ 1302.962255][T23767] ? __might_fault+0xc5/0x140 [ 1302.962298][T23767] ? _copy_from_iter+0x270/0x1690 [ 1302.962342][T23767] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1302.962375][T23767] ? policy_nodemask+0xed/0x4f0 [ 1302.962415][T23767] alloc_pages_mpol+0x1fb/0x550 [ 1302.962457][T23767] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1302.962498][T23767] ? __pfx___futex_wait+0x10/0x10 [ 1302.962532][T23767] alloc_pages_noprof+0x131/0x390 [ 1302.962573][T23767] anon_pipe_write+0xabf/0x1d40 [ 1302.962614][T23767] ? __pfx_anon_pipe_write+0x10/0x10 [ 1302.962642][T23767] ? common_file_perm+0x1ab/0x4f0 [ 1302.962683][T23767] ? futex_wait+0x125/0x380 [ 1302.962712][T23767] ? bpf_lsm_file_permission+0x9/0x10 [ 1302.962749][T23767] ? security_file_permission+0x76/0x210 [ 1302.962794][T23767] ? rw_verify_area+0xce/0x6d0 [ 1302.962825][T23767] vfs_write+0x6ac/0x1070 [ 1302.962858][T23767] ? __pfx_anon_pipe_write+0x10/0x10 [ 1302.962896][T23767] ? __pfx_vfs_write+0x10/0x10 [ 1302.962925][T23767] ? find_held_lock+0x2b/0x80 [ 1302.962984][T23767] ksys_write+0x1f8/0x250 [ 1302.963017][T23767] ? __pfx_ksys_write+0x10/0x10 [ 1302.963059][T23767] do_syscall_64+0xc9/0xf80 [ 1302.963094][T23767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1302.963122][T23767] RIP: 0033:0x7f4301d9aeb9 [ 1302.963142][T23767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1302.963170][T23767] RSP: 002b:00007f4302c5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1302.963197][T23767] RAX: ffffffffffffffda RBX: 00007f4302016090 RCX: 00007f4301d9aeb9 [ 1302.963214][T23767] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1302.963231][T23767] RBP: 00007f4301e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1302.963248][T23767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1302.963264][T23767] R13: 00007f4302016128 R14: 00007f4302016090 R15: 00007fff5aaff598 [ 1302.963300][T23767] [ 1305.025881][T23804] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3714'. [ 1305.152884][T23804] netlink: 124 bytes leftover after parsing attributes in process `syz.3.3714'. [ 1305.357214][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.363781][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1307.651455][T23836] zram: Cannot change disksize for initialized device [ 1307.905424][T21553] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1309.637467][T23860] netlink: 124 bytes leftover after parsing attributes in process `syz.3.3726'. [ 1310.093813][T23873] zram: Cannot change disksize for initialized device [ 1310.985133][T23885] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3733'. [ 1311.191872][T23887] NFSD: Failed to start, no listeners configured. [ 1312.125920][T23910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3735'. [ 1312.220105][T23904] netlink: 25 bytes leftover after parsing attributes in process `syz.3.3735'. [ 1312.918529][T23916] zram: Cannot change disksize for initialized device [ 1315.289177][T23946] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1317.021432][T23970] zram: Cannot change disksize for initialized device [ 1317.032178][T23967] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3751'. [ 1318.581528][T23995] zram: Cannot change disksize for initialized device [ 1321.459769][T24040] zram: Cannot change disksize for initialized device [ 1327.240297][T24119] zram: Cannot change disksize for initialized device [ 1327.918177][T24132] program syz.3.3781 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1330.236486][T24151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3787'. [ 1330.345236][T24159] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3787'. [ 1330.900234][T24148] Process accounting resumed [ 1331.336735][T24177] zram: Cannot change disksize for initialized device [ 1339.369302][T24270] binder: 24267:24270 ioctl c018620c 0 returned -1 [ 1340.134324][T24294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3815'. [ 1340.331977][T24299] netlink: 25 bytes leftover after parsing attributes in process `syz.3.3815'. [ 1344.455679][T24355] zram: Cannot change disksize for initialized device [ 1349.063668][T24403] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3836'. [ 1349.204275][T24406] NFSD: Failed to start, no listeners configured. [ 1351.024088][T24429] FAULT_INJECTION: forcing a failure. [ 1351.024088][T24429] name failslab, interval 1, probability 0, space 0, times 0 [ 1351.037111][T24429] CPU: 0 UID: 0 PID: 24429 Comm: syz.3.3841 Tainted: G U syzkaller #0 PREEMPT(full) [ 1351.037156][T24429] Tainted: [U]=USER [ 1351.037166][T24429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1351.037184][T24429] Call Trace: [ 1351.037193][T24429] [ 1351.037204][T24429] dump_stack_lvl+0x100/0x190 [ 1351.037248][T24429] should_fail_ex.cold+0x5/0xa [ 1351.037297][T24429] should_failslab+0xc2/0x120 [ 1351.037337][T24429] __kmalloc_node_noprof+0xfb/0x9e0 [ 1351.037374][T24429] ? lockdep_init_map_type+0x5c/0x250 [ 1351.037414][T24429] ? mempool_init_node+0x11b/0x6e0 [ 1351.037457][T24429] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 1351.037499][T24429] ? __pfx_mempool_free_slab+0x10/0x10 [ 1351.037539][T24429] ? mempool_init_node+0x11b/0x6e0 [ 1351.037579][T24429] mempool_init_node+0x11b/0x6e0 [ 1351.037620][T24429] ? __pfx_xa_load+0x10/0x10 [ 1351.037663][T24429] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 1351.037704][T24429] ? __pfx_mempool_free_slab+0x10/0x10 [ 1351.037746][T24429] mempool_init_noprof+0x3a/0x50 [ 1351.037793][T24429] bioset_init+0x37e/0x8a0 [ 1351.037846][T24429] ? __pfx_bioset_init+0x10/0x10 [ 1351.037906][T24429] __alloc_disk_node+0x83/0x6b0 [ 1351.037954][T24429] __blk_mq_alloc_disk+0x89/0x120 [ 1351.037993][T24429] nbd_dev_add+0x492/0xb10 [ 1351.038027][T24429] ? find_held_lock+0x2b/0x80 [ 1351.038056][T24429] ? __pfx_nbd_dev_add+0x10/0x10 [ 1351.038087][T24429] ? nbd_genl_connect+0x131a/0x1a40 [ 1351.038144][T24429] ? bpf_lsm_capable+0x9/0x10 [ 1351.038170][T24429] ? __radix_tree_lookup+0x217/0x2b0 [ 1351.038206][T24429] nbd_genl_connect+0xb8d/0x1a40 [ 1351.038239][T24429] ? rcu_is_watching+0x12/0xc0 [ 1351.038263][T24429] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc8/0x290 [ 1351.038297][T24429] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1351.038325][T24429] ? __nla_parse+0x40/0x60 [ 1351.038343][T24429] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x290 [ 1351.038360][T24429] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b4/0x290 [ 1351.038380][T24429] genl_family_rcv_msg_doit+0x214/0x300 [ 1351.038398][T24429] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1351.038414][T24429] ? genl_get_cmd+0x3ef/0x720 [ 1351.038435][T24429] ? __dev_queue_xmit+0x7fd/0x46f0 [ 1351.038452][T24429] ? __radix_tree_lookup+0x217/0x2b0 [ 1351.038470][T24429] genl_rcv_msg+0x560/0x800 [ 1351.038488][T24429] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1351.038504][T24429] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1351.038529][T24429] netlink_rcv_skb+0x159/0x420 [ 1351.038542][T24429] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1351.038558][T24429] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1351.038586][T24429] genl_rcv+0x28/0x40 [ 1351.038600][T24429] netlink_unicast+0x5aa/0x870 [ 1351.038624][T24429] ? __pfx_netlink_unicast+0x10/0x10 [ 1351.038653][T24429] netlink_sendmsg+0x8b0/0xda0 [ 1351.038679][T24429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1351.038699][T24429] ? __import_iovec+0x1d2/0x640 [ 1351.038723][T24429] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1351.038744][T24429] ____sys_sendmsg+0xa54/0xc30 [ 1351.038762][T24429] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1351.038777][T24429] ? __pfx___futex_wait+0x10/0x10 [ 1351.038795][T24429] ? __pfx_futex_wake_mark+0x10/0x10 [ 1351.038829][T24429] ___sys_sendmsg+0x190/0x1e0 [ 1351.038848][T24429] ? __pfx____sys_sendmsg+0x10/0x10 [ 1351.038875][T24429] ? find_held_lock+0x2b/0x80 [ 1351.038903][T24429] __sys_sendmsg+0x170/0x220 [ 1351.038925][T24429] ? __pfx___sys_sendmsg+0x10/0x10 [ 1351.038946][T24429] ? __x64_sys_futex+0x34f/0x4d0 [ 1351.038976][T24429] do_syscall_64+0xc9/0xf80 [ 1351.038996][T24429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1351.039011][T24429] RIP: 0033:0x7f4301d9aeb9 [ 1351.039026][T24429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1351.039040][T24429] RSP: 002b:00007f4302c7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1351.039056][T24429] RAX: ffffffffffffffda RBX: 00007f4302015fa0 RCX: 00007f4301d9aeb9 [ 1351.039065][T24429] RDX: 0000000020040000 RSI: 0000200000000500 RDI: 0000000000000002 [ 1351.039075][T24429] RBP: 00007f4301e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1351.039084][T24429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1351.039094][T24429] R13: 00007f4302016038 R14: 00007f4302015fa0 R15: 00007fff5aaff598 [ 1351.039114][T24429] [ 1351.755463][T24429] nbd: failed to add new device [ 1354.624774][T24487] vhci_hcd vhci_hcd.2: invalid port number 16 [ 1354.631194][T24487] vhci_hcd vhci_hcd.2: invalid port number 16 [ 1355.767248][T24502] zram: Cannot change disksize for initialized device [ 1356.565691][T24507] zram: Cannot change disksize for initialized device [ 1360.319441][T24565] FAULT_INJECTION: forcing a failure. [ 1360.319441][T24565] name failslab, interval 1, probability 0, space 0, times 0 [ 1360.396740][T24565] CPU: 1 UID: 0 PID: 24565 Comm: syz.2.3868 Tainted: G U syzkaller #0 PREEMPT(full) [ 1360.396788][T24565] Tainted: [U]=USER [ 1360.396798][T24565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1360.396816][T24565] Call Trace: [ 1360.396827][T24565] [ 1360.396838][T24565] dump_stack_lvl+0x100/0x190 [ 1360.396879][T24565] should_fail_ex.cold+0x5/0xa [ 1360.396926][T24565] should_failslab+0xc2/0x120 [ 1360.396968][T24565] ? net_alloc_generic+0x1e/0x70 [ 1360.397011][T24565] __kmalloc_noprof+0xf6/0x9c0 [ 1360.397042][T24565] ? __pfx_inc_ucount+0x10/0x10 [ 1360.397089][T24565] ? net_alloc_generic+0x1e/0x70 [ 1360.397132][T24565] net_alloc_generic+0x1e/0x70 [ 1360.397172][T24565] copy_net_ns+0xc6/0x7c0 [ 1360.397207][T24565] ? copy_cgroup_ns+0x71/0x970 [ 1360.397246][T24565] create_new_namespaces+0x3ea/0xab0 [ 1360.397289][T24565] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1360.397324][T24565] ksys_unshare+0x455/0xab0 [ 1360.397367][T24565] ? __pfx_ksys_unshare+0x10/0x10 [ 1360.397407][T24565] ? xfd_validate_state+0x129/0x190 [ 1360.397465][T24565] __x64_sys_unshare+0x31/0x40 [ 1360.397504][T24565] do_syscall_64+0xc9/0xf80 [ 1360.397541][T24565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1360.397572][T24565] RIP: 0033:0x7f8bb839aeb9 [ 1360.397596][T24565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1360.397626][T24565] RSP: 002b:00007f8bb9257028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1360.397654][T24565] RAX: ffffffffffffffda RBX: 00007f8bb8615fa0 RCX: 00007f8bb839aeb9 [ 1360.397672][T24565] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1360.397691][T24565] RBP: 00007f8bb8408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1360.397709][T24565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1360.397727][T24565] R13: 00007f8bb8616038 R14: 00007f8bb8615fa0 R15: 00007ffdb3b3d828 [ 1360.397766][T24565] [ 1361.744708][T24587] zram: Cannot change disksize for initialized device [ 1362.459124][T24599] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3875'. [ 1363.814683][T24544] Process accounting paused [ 1364.866899][T24632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3881'. [ 1364.930368][T24635] netlink: 25 bytes leftover after parsing attributes in process `syz.3.3881'. [ 1366.795511][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.801876][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1371.643706][T24700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3894'. [ 1371.839929][T24703] netlink: 'syz.2.3894': attribute type 1 has an invalid length. [ 1371.892168][T24703] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3894'. [ 1375.648975][T24727] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3900'. [ 1378.070051][T24749] binder: 24745:24749 ioctl c018620c 0 returned -1 [ 1386.351127][T24845] FAULT_INJECTION: forcing a failure. [ 1386.351127][T24845] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1386.367603][T24845] CPU: 0 UID: 0 PID: 24845 Comm: syz.3.3922 Tainted: G U syzkaller #0 PREEMPT(full) [ 1386.367630][T24845] Tainted: [U]=USER [ 1386.367635][T24845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1386.367645][T24845] Call Trace: [ 1386.367651][T24845] [ 1386.367657][T24845] dump_stack_lvl+0x100/0x190 [ 1386.367681][T24845] should_fail_ex.cold+0x5/0xa [ 1386.367703][T24845] ? prepare_alloc_pages+0x16d/0x5f0 [ 1386.367728][T24845] should_fail_alloc_page+0xeb/0x140 [ 1386.367751][T24845] prepare_alloc_pages+0x1f0/0x5f0 [ 1386.367776][T24845] __alloc_frozen_pages_noprof+0x193/0x2410 [ 1386.367794][T24845] ? arch_stack_walk+0x88/0xf0 [ 1386.367815][T24845] ? __lock_acquire+0x4a5/0x2630 [ 1386.367835][T24845] ? stack_trace_save+0x8e/0xc0 [ 1386.367851][T24845] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1386.367868][T24845] ? kernel_text_address+0x8d/0x100 [ 1386.367898][T24845] ? __lock_acquire+0x4a5/0x2630 [ 1386.367919][T24845] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1386.367936][T24845] ? policy_nodemask+0xed/0x4f0 [ 1386.367958][T24845] alloc_pages_mpol+0x1fb/0x550 [ 1386.367979][T24845] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1386.368005][T24845] alloc_pages_noprof+0x131/0x390 [ 1386.368026][T24845] pte_alloc_one+0x1e/0x3e0 [ 1386.368045][T24845] do_huge_pmd_anonymous_page+0x836/0x1c00 [ 1386.368067][T24845] __handle_mm_fault+0x1e96/0x2b50 [ 1386.368086][T24845] ? mt_find+0x45e/0x8e0 [ 1386.368106][T24845] ? __pfx___handle_mm_fault+0x10/0x10 [ 1386.368120][T24845] ? __pfx_mt_find+0x10/0x10 [ 1386.368153][T24845] handle_mm_fault+0x36d/0xa20 [ 1386.368174][T24845] __get_user_pages+0xf9c/0x34d0 [ 1386.368203][T24845] ? down_read_killable+0x30e/0x4c0 [ 1386.368222][T24845] ? __lock_acquire+0x4a5/0x2630 [ 1386.368241][T24845] ? __pfx___get_user_pages+0x10/0x10 [ 1386.368263][T24845] ? rcu_is_watching+0x12/0xc0 [ 1386.368280][T24845] __gup_longterm_locked+0x87d/0x16f0 [ 1386.368308][T24845] ? __pfx___gup_longterm_locked+0x10/0x10 [ 1386.368332][T24845] ? try_get_folio+0x262/0x750 [ 1386.368351][T24845] ? pmd_write+0xd3/0x150 [ 1386.368370][T24845] ? sanity_check_pinned_pages+0x5f6/0x1250 [ 1386.368394][T24845] gup_fast_fallback+0x18c6/0x2460 [ 1386.368437][T24845] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1386.368460][T24845] ? ksys_write+0x12a/0x250 [ 1386.368477][T24845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1386.368501][T24845] pin_user_pages_fast+0xa7/0xf0 [ 1386.368523][T24845] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 1386.368550][T24845] iov_iter_extract_pages+0xa0d/0x1ef0 [ 1386.368577][T24845] ? pfn_valid+0x98/0x4e0 [ 1386.368597][T24845] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 1386.368620][T24845] ? bvec_try_merge_page+0x1cd/0x290 [ 1386.368643][T24845] ? bio_add_page+0x162/0x760 [ 1386.368662][T24845] ? iov_iter_revert+0x252/0x5b0 [ 1386.368685][T24845] bio_iov_iter_get_pages+0x35e/0x12c0 [ 1386.368718][T24845] ? __pfx_bio_iov_iter_get_pages+0x10/0x10 [ 1386.368741][T24845] ? __pfx_bio_alloc_bioset+0x10/0x10 [ 1386.368765][T24845] ? iov_iter_npages+0xf8/0x500 [ 1386.368786][T24845] blkdev_direct_IO+0x1302/0x1fb0 [ 1386.368812][T24845] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 1386.368833][T24845] ? filemap_check_errors+0xa9/0x150 [ 1386.368860][T24845] blkdev_write_iter+0x703/0xd70 [ 1386.368881][T24845] vfs_write+0x6ac/0x1070 [ 1386.368898][T24845] ? __pfx_blkdev_write_iter+0x10/0x10 [ 1386.368917][T24845] ? __pfx_vfs_write+0x10/0x10 [ 1386.368932][T24845] ? find_held_lock+0x2b/0x80 [ 1386.368958][T24845] ksys_write+0x12a/0x250 [ 1386.368974][T24845] ? __pfx_ksys_write+0x10/0x10 [ 1386.368996][T24845] do_syscall_64+0xc9/0xf80 [ 1386.369016][T24845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1386.369031][T24845] RIP: 0033:0x7f4301d9aeb9 [ 1386.369044][T24845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1386.369058][T24845] RSP: 002b:00007f4302c1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1386.369073][T24845] RAX: ffffffffffffffda RBX: 00007f4302016270 RCX: 00007f4301d9aeb9 [ 1386.369084][T24845] RDX: 000000100000a3d9 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1386.369094][T24845] RBP: 00007f4301e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1386.369104][T24845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1386.369113][T24845] R13: 00007f4302016308 R14: 00007f4302016270 R15: 00007fff5aaff598 [ 1386.369134][T24845] [ 1388.944141][T24870] nvme_fcloop: unknown parameter or missing value '7' [ 1389.159605][T24876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3930'. [ 1389.172089][T24876] netlink: 354 bytes leftover after parsing attributes in process `syz.3.3930'. [ 1389.504675][T24884] zram: Cannot change disksize for initialized device [ 1391.051982][T24910] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3939'. [ 1393.757702][T24960] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3951'. [ 1394.020696][T24965] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3953'. [ 1394.761808][T24940] Process accounting resumed [ 1404.395804][T25083] netlink: 186 bytes leftover after parsing attributes in process `syz.2.3972'. [ 1404.454693][T25083] netlink: 186 bytes leftover after parsing attributes in process `syz.2.3972'. [ 1407.054737][T25102] netlink: 4128 bytes leftover after parsing attributes in process `syz.3.3976'. [ 1412.076545][T25189] bridge0: port 3(team0) entered blocking state [ 1412.127216][T25189] bridge0: port 3(team0) entered disabled state [ 1412.209900][T25189] team0: entered allmulticast mode [ 1412.277557][T25189] team_slave_1: entered allmulticast mode [ 1412.348410][T25189] team0: entered promiscuous mode [ 1412.383672][T25189] team_slave_1: entered promiscuous mode [ 1412.402591][T25189] bridge0: port 3(team0) entered blocking state [ 1412.409079][T25189] bridge0: port 3(team0) entered forwarding state [ 1413.705996][T25216] [ 1413.708371][T25216] ====================================================== [ 1413.715376][T25216] WARNING: possible circular locking dependency detected [ 1413.722476][T25216] syzkaller #0 Tainted: G U [ 1413.728444][T25216] ------------------------------------------------------ [ 1413.735539][T25216] syz.1.3998/25216 is trying to acquire lock: [ 1413.741637][T25216] ffff88807e75afd8 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x4ca/0xcb0 [ 1413.753273][T25216] [ 1413.753273][T25216] but task is already holding lock: [ 1413.760637][T25216] ffff88807e758260 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 1413.769637][T25216] [ 1413.769637][T25216] which lock already depends on the new lock. [ 1413.769637][T25216] [ 1413.780038][T25216] [ 1413.780038][T25216] the existing dependency chain (in reverse order) is: [ 1413.789053][T25216] [ 1413.789053][T25216] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 1413.796806][T25216] lock_sock_nested+0x41/0xf0 [ 1413.802018][T25216] smc_listen_out+0x1f5/0x4b0 [ 1413.807220][T25216] smc_listen_work+0x4c2/0x50e0 [ 1413.812595][T25216] process_one_work+0x9c2/0x1840 [ 1413.818065][T25216] worker_thread+0x5da/0xe40 [ 1413.823186][T25216] kthread+0x3b3/0x730 [ 1413.827784][T25216] ret_from_fork+0x754/0xaf0 [ 1413.832891][T25216] ret_from_fork_asm+0x1a/0x30 [ 1413.838184][T25216] [ 1413.838184][T25216] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 1413.848352][T25216] __lock_acquire+0x14b8/0x2630 [ 1413.853738][T25216] lock_acquire+0x17c/0x330 [ 1413.858765][T25216] __flush_work+0x4de/0xcb0 [ 1413.863787][T25216] cancel_work_sync+0xd1/0xf0 [ 1413.868987][T25216] smc_clcsock_release+0x5f/0xe0 [ 1413.874454][T25216] __smc_release+0x5c2/0x880 [ 1413.879574][T25216] smc_close_non_accepted+0xda/0x200 [ 1413.885380][T25216] smc_close_active+0x4ff/0x1070 [ 1413.890837][T25216] __smc_release+0x634/0x880 [ 1413.895949][T25216] smc_release+0x1fc/0x620 [ 1413.900889][T25216] __sock_release+0xb3/0x260 [ 1413.906012][T25216] sock_close+0x1c/0x30 [ 1413.910700][T25216] __fput+0x3ff/0xb40 [ 1413.915213][T25216] task_work_run+0x150/0x240 [ 1413.920344][T25216] get_signal+0x1bd/0x21e0 [ 1413.925373][T25216] arch_do_signal_or_restart+0x91/0x770 [ 1413.931459][T25216] exit_to_user_mode_loop+0x86/0x4b0 [ 1413.937284][T25216] do_syscall_64+0x4ea/0xf80 [ 1413.942399][T25216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1413.948833][T25216] [ 1413.948833][T25216] other info that might help us debug this: [ 1413.948833][T25216] [ 1413.959061][T25216] Possible unsafe locking scenario: [ 1413.959061][T25216] [ 1413.966516][T25216] CPU0 CPU1 [ 1413.972236][T25216] ---- ---- [ 1413.977601][T25216] lock(sk_lock-AF_SMC/1); [ 1413.982119][T25216] lock((work_completion)(&new_smc->smc_listen_work)); [ 1413.991575][T25216] lock(sk_lock-AF_SMC/1); [ 1413.998607][T25216] lock((work_completion)(&new_smc->smc_listen_work)); [ 1414.005561][T25216] [ 1414.005561][T25216] *** DEADLOCK *** [ 1414.005561][T25216] [ 1414.013696][T25216] 3 locks held by syz.1.3998/25216: [ 1414.018887][T25216] #0: ffff88807fe4e3c8 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 1414.029464][T25216] #1: ffff88807e758260 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 1414.038907][T25216] #2: ffffffff8e5e3120 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xfd/0xcb0 [ 1414.048081][T25216] [ 1414.048081][T25216] stack backtrace: [ 1414.053978][T25216] CPU: 1 UID: 0 PID: 25216 Comm: syz.1.3998 Tainted: G U syzkaller #0 PREEMPT(full) [ 1414.054015][T25216] Tainted: [U]=USER [ 1414.054025][T25216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1414.054040][T25216] Call Trace: [ 1414.054050][T25216] [ 1414.054060][T25216] dump_stack_lvl+0x100/0x190 [ 1414.054093][T25216] print_circular_bug.cold+0x178/0x1c7 [ 1414.054134][T25216] check_noncircular+0x146/0x160 [ 1414.054169][T25216] __lock_acquire+0x14b8/0x2630 [ 1414.054207][T25216] lock_acquire+0x17c/0x330 [ 1414.054238][T25216] ? __flush_work+0x4ca/0xcb0 [ 1414.054262][T25216] ? mark_held_locks+0x40/0x70 [ 1414.054294][T25216] ? __flush_work+0x4ca/0xcb0 [ 1414.054318][T25216] __flush_work+0x4de/0xcb0 [ 1414.054340][T25216] ? __flush_work+0x4ca/0xcb0 [ 1414.054370][T25216] ? __pfx___flush_work+0x10/0x10 [ 1414.054395][T25216] ? __pfx_wq_barrier_func+0x10/0x10 [ 1414.054431][T25216] ? __pfx___might_resched+0x10/0x10 [ 1414.054473][T25216] cancel_work_sync+0xd1/0xf0 [ 1414.054501][T25216] smc_clcsock_release+0x5f/0xe0 [ 1414.054533][T25216] __smc_release+0x5c2/0x880 [ 1414.054561][T25216] ? __pfx_sock_def_readable+0x10/0x10 [ 1414.054596][T25216] smc_close_non_accepted+0xda/0x200 [ 1414.054627][T25216] smc_close_active+0x4ff/0x1070 [ 1414.054659][T25216] __smc_release+0x634/0x880 [ 1414.054686][T25216] smc_release+0x1fc/0x620 [ 1414.054714][T25216] __sock_release+0xb3/0x260 [ 1414.054752][T25216] ? __pfx_sock_close+0x10/0x10 [ 1414.054789][T25216] sock_close+0x1c/0x30 [ 1414.054825][T25216] __fput+0x3ff/0xb40 [ 1414.054860][T25216] ? _raw_spin_unlock_irq+0x23/0x50 [ 1414.054889][T25216] task_work_run+0x150/0x240 [ 1414.054927][T25216] ? __pfx_task_work_run+0x10/0x10 [ 1414.054968][T25216] get_signal+0x1bd/0x21e0 [ 1414.054999][T25216] ? task_work_add+0x201/0x3b0 [ 1414.055036][T25216] ? __pfx_task_work_add+0x10/0x10 [ 1414.055074][T25216] ? __pfx_get_signal+0x10/0x10 [ 1414.055105][T25216] ? __fput_deferred+0x217/0x490 [ 1414.055141][T25216] arch_do_signal_or_restart+0x91/0x770 [ 1414.055177][T25216] ? __sys_accept4+0x1cb/0x200 [ 1414.055209][T25216] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1414.055248][T25216] ? __pfx___sys_accept4+0x10/0x10 [ 1414.055279][T25216] ? xfd_validate_state+0x129/0x190 [ 1414.055321][T25216] exit_to_user_mode_loop+0x86/0x4b0 [ 1414.055364][T25216] ? rcu_is_watching+0x12/0xc0 [ 1414.055390][T25216] do_syscall_64+0x4ea/0xf80 [ 1414.055421][T25216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1414.055448][T25216] RIP: 0033:0x7f34a0d9aeb9 [ 1414.055469][T25216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1414.055500][T25216] RSP: 002b:00007f34a1d2a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 1414.055525][T25216] RAX: fffffffffffffe00 RBX: 00007f34a1015fa0 RCX: 00007f34a0d9aeb9 [ 1414.055544][T25216] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1414.055560][T25216] RBP: 00007f34a0e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1414.055576][T25216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1414.055593][T25216] R13: 00007f34a1016038 R14: 00007f34a1015fa0 R15: 00007ffdc1b49b08 [ 1414.055617][T25216] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1415.626688][T11755] EXT4-fs error (device sda1): ext4_discard_preallocations:5703: comm syz.1.1183: Error -117 reading block bitmap for 2 [ 1415.701874][T11755] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz.1.1183: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 1415.735195][T11755] EXT4-fs error (device sda1) in ext4_free_inode:361: Filesystem failed CRC [ 1415.755523][T11755] EXT4-fs error (device sda1): ext4_discard_preallocations:5703: comm syz.1.1183: Error -117 reading block bitmap for 2 [ 1415.803933][T25222] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 1415.834235][T25222] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 1415.878649][T11755] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 1416.656163][T25200] EXT4-fs error (device sda1): ext4_discard_preallocations:5703: comm syz.3.3995: Error -117 reading block bitmap for 2 [ 1416.695697][T25200] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 1416.704330][T25200] EXT4-fs error (device sda1): ext4_discard_preallocations:5703: comm syz.3.3995: Error -117 reading block bitmap for 2 [ 1417.172731][ T9770] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.258050][ T9770] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.338795][ T9770] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.423793][ T9770] team0: left allmulticast mode [ 1417.430518][ T9770] team_slave_1: left allmulticast mode [ 1417.436581][ T9770] team0: left promiscuous mode [ 1417.441406][ T9770] team_slave_1: left promiscuous mode [ 1417.447447][ T9770] bridge0: port 2(team0) entered disabled state [ 1417.455561][ T9770] bridge_slave_0: left allmulticast mode [ 1417.461222][ T9770] bridge_slave_0: left promiscuous mode [ 1417.467308][ T9770] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.913743][ T9770] veth1_macvtap: left promiscuous mode [ 1418.919397][ T9770] veth0_macvtap: left promiscuous mode [ 1419.097957][ T9770] team0 (unregistering): Port device team_slave_1 removed [ 1419.226801][ T9770] smc: removing net device dummy0 with user defined pnetid DUMMY0