last executing test programs: 11m48.134972706s ago: executing program 1 (id=2): openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mouse0\x00', 0x1102, 0x0) acct$auto(&(0x7f0000000100)='/dev/psaux\x00') mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r0 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0) mmap$auto(0x0, 0x202000a, 0x5, 0x16, 0xfffffffffffffffa, 0x9000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) r1 = socket(0x2, 0x1, 0x106) setsockopt$auto(r1, 0x1, 0x9, &(0x7f0000000000)='\'-+\x00\x10\xa4#\x92`\xdb\xafL\x0f\xfbUV\xa6KH]Cv\xbf\xf2a\v', 0xeb66) bind$auto(0x3, &(0x7f0000000140), 0x6c) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x7, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') umount2$auto(&(0x7f0000000000)='.\x00', 0x8) r2 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r2, 0x0, 0x17) mmap$auto(0x3, 0x20009, 0x4000000000df, 0x6b1, r0, 0x8000) unshare$auto(0x40000080) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) clone3$auto(0x0, 0x93) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VF\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xa2\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x9, 0xffffffff, 0x40eb2, 0xffffffffffffffff, 0x2ffffffffffd) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/tty/ptyp6/power/runtime_active_time\x00', 0x1551c2, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 11m44.734101345s ago: executing program 1 (id=14): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x1, 0x0) io_uring_register$auto(r0, 0x2, &(0x7f0000000040), 0x86) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0xd364, &(0x7f0000000000)={0x3fe, 0x10002, 0x7d, 0x3, 0x5, 0x5, r1, [], {0x0, 0x10, 0x6, 0x6, 0x40, 0x4, 0x7, 0x7, 0x80000000}, {0x7, 0x4, 0x80000001, 0x8, 0x6b, 0x5, 0x0, 0xfffffffa, 0xb0}}) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r2 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0) pwrite64$auto(r2, 0x0, 0x400000, 0xc) r3 = openat$auto_dma_buf_debug_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) epoll_pwait2$auto(r3, &(0x7f00000000c0)={0x2010800, 0x8000000009}, 0x80000082, &(0x7f0000000080)={0x2, 0x7ff}, &(0x7f0000000100)={0xffffffff}, 0x8) 11m43.26135106s ago: executing program 1 (id=17): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) read$auto(r0, &(0x7f0000000000)='\x00', 0x91e2) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="24051c27c100dedbdf250307cc0008000200", @ANYRES32=0x0, @ANYBLOB="060007000080000006000700050000000a00050000000000000000000a00010000000000000000000a0001000000000000000000060006000d00000006000600070000000a"], 0x6c}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044040}, 0x24008890) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r1, &(0x7f00000002c0)=""/190, 0xfffffe39) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 11m42.755528778s ago: executing program 32 (id=17): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) read$auto(r0, &(0x7f0000000000)='\x00', 0x91e2) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="24051c27c100dedbdf250307cc0008000200", @ANYRES32=0x0, @ANYBLOB="060007000080000006000700050000000a00050000000000000000000a00010000000000000000000a0001000000000000000000060006000d00000006000600070000000a"], 0x6c}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044040}, 0x24008890) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r1, &(0x7f00000002c0)=""/190, 0xfffffe39) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 8.652138706s ago: executing program 4 (id=2320): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket(0x10, 0x2, 0x0) socket(0xa, 0x801, 0x106) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') openat$auto_dfs_dom_ops_debugfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r3 = ioctl$auto_TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x4) ioctl$auto_FUSE_DEV_IOC_BACKING_OPEN(r3, 0x4010e501, &(0x7f0000000100)={r1, 0x7fffffff}) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r2, 0x541c, r4) 7.879287416s ago: executing program 4 (id=2324): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram1\x00', 0x8000, 0x0) r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) ioctl$auto_SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x0) mmap$auto(0x0, 0x2, 0x0, 0x8000000000000011, 0xffffffffffffffff, 0xcd) r1 = socket(0xa, 0x801, 0x80) r2 = socket(0xa, 0x5, 0x84) getsockopt$auto(r2, 0x87, 0x9, 0x0, &(0x7f00000003c0)=0x9b) ppoll$auto(0x0, 0x7f, 0x0, 0x0, 0x8) setsockopt$auto(r1, 0x10000000084, 0x9, 0x0, 0x9c) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/flags\x00', 0x143262, 0x0) write$auto(r3, &(0x7f00000000c0)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1dS\xf2~>\xb1\xc6\xd1\xee\xc8\x19e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}\xfcD', 0x85) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRESHEX=r1, @ANYBLOB="010b27bd7000fcdbdf250500000008000300", @ANYRES32=r6, @ANYBLOB="fb82b06b9bd10397725a33e91fb6ddc01928951246d81684eece26d5892019662ec8a2a74e34d6a57e0dd8a28a320a150965cded8b924494a05e18d4a60229e1e2933b9abd79a035a7c932554fd154038a3f38b89f"], 0x1c}, 0x1, 0x0, 0x0, 0x4000050}, 0x240088e4) lstat$auto(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x3, 0x7, 0xd, 0xffffffff, 0xee01, 0xffffffffffffffff, 0x0, 0xcf30, 0xc, 0x8001, 0x3, 0x4, 0xfffffffffffffff7, 0x8, 0xb, 0x5, 0x8000000000000001}) ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f0000000200)={0x2, 0x4, 0x3, 0x9, 0x8, 0xffffffffffffffff}) getpgrp(0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x88) mmap$auto(0x2, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) r8 = socket(0xa, 0x5, 0x0) getsockopt$auto(r8, 0x0, 0xd, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'wg0\x00'}) bpf$auto(0x0, &(0x7f0000000300)=@token_create={0x9}, 0xf) socket(0xa, 0x2, 0x3a) socket(0x1d, 0x2, 0x7) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffffffffffe11, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) 7.340657362s ago: executing program 2 (id=2325): mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPATH(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="10002abd7000fddbdf251500000006009800010400001000b000f48ae255b0a2ab7af848ca8906004301070000000500d30000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000840}, 0x20000044) (async) sendmsg$auto_NL80211_CMD_GET_MPATH(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="10002abd7000fddbdf251500000006009800010400001000b000f48ae255b0a2ab7af848ca8906004301070000000500d30000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000840}, 0x20000044) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) madvise$auto_MADV_DODUMP(0xca6f, 0x7, 0x11) madvise$auto_MADV_DODUMP(0x1, 0x8, 0x11) (async) madvise$auto_MADV_DODUMP(0x1, 0x8, 0x11) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/input/event0\x00', 0x40000, 0x0) ioctl$auto_EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000380)=[0x1, 0xe011]) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r2, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r2, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) (async) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) socket(0x11, 0x3, 0x6) (async) socket(0x11, 0x3, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/irq.pressure\x00', 0x101102, 0x0) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/dri/vkms/state\x00', 0xa8201, 0x0) r5 = mq_open$auto(&(0x7f0000000440)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u50x0}) sendmsg$auto_BATADV_CMD_TP_METER(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x30, r3, 0x77bed28568c43d3b, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffff}]}, 0x30}}, 0x80) 3.634343235s ago: executing program 0 (id=2335): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x861, 0x100001000000004, 0xfa31, 0x400, 0x8000) io_setup$auto(0x8000003, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) r0 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000001380)={0x2, 0x0, [{0xc0000103, 0x400, 0xffffffffffffffff}]}) socket(0xa, 0x5, 0x0) lsm_list_modules$auto(&(0x7f0000000000)=0x91e, &(0x7f0000000040)=0x7, 0x8) sysfs$auto(0x2, 0x0, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x6, 0x0, 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.3/usb4/busnum\x00', 0x0, 0x0) sendfile$auto(0x1, r3, 0x0, 0x748) fsmount$auto(0x4, 0x0, 0x200003) fsmount$auto(0x4, 0x0, 0xa7) 3.073049682s ago: executing program 2 (id=2336): mmap$auto(0x0, 0x2020009, 0x7, 0xeb2, 0xfffffffffffffffa, 0x8000) socketpair$auto(0xfffffffe, 0x6, 0xf, 0x0) madvise$auto(0x0, 0x1010001, 0x100000003) mmap$auto(0x0, 0x20008, 0x4000000000e3, 0x40000000000eb1, 0xffffffffffffffff, 0x4) r0 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r1 = socket(0xa, 0x1, 0x84) r2 = getsockopt$auto(r1, 0x84, 0x9, 0x0, &(0x7f0000000000)=0x95) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x5, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x0, 0xffffffff00000001, 0x4000000000000d]}, 0x0) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bind$auto(r0, &(0x7f0000000240)=@sco, 0xfffffffb) syz_genetlink_get_family_id$auto_tipcv2(0x0, r1) sendmsg$auto_TIPC_NL_MON_PEER_GET(r2, 0x0, 0x0) getsockopt$auto_SO_RCVMARK(r3, 0x8c, 0x4b, &(0x7f0000000040)='}\'.\xff\a', &(0x7f00000000c0)=0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_GET_INTERFACE(r4, &(0x7f0000000300)={0x0, 0xa6, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="05032cbd7000fbdbdf2505004000"], 0x14}, 0x1, 0x0, 0x0, 0x4004010}, 0x4040008) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/orangefs/getattr_timeout_msecs\x00', 0x8a82b6a56f18970a, 0x0) write$auto(0x3, 0x0, 0x20000000000005) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) 2.648507352s ago: executing program 0 (id=2337): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime$auto(0x0, 0xb746, &(0x7f0000000000)={{0x4d4, 0x2}, {0xfe, 0x4}}, 0x0) r0 = socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) sendto$auto(r0, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "1990b5fffff40000000000003f00"}, 0x1f) 2.499106402s ago: executing program 4 (id=2338): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) setresuid$auto(0x8, 0x8, 0x0) write$auto(r0, &(0x7f0000000180)='7\x00\\\xa0\x04|4\x00\x00\x03\x00\x00\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\x00rRVr\xc4O\xdc1\x9b%\x10Z\'\xb9\'\xa3stC=\x85\xc6\xf6\x13 \xeb\xff%\x11\x82\x05\xdfV\x02\xca&\xd8$<\xab&\xc8B-\xcc\x15\x04&\x13;\xfe\xbdQ\xaa\x16o\x1f\xc7\x94\xa3\xc9\x9a\xe1d\xf5\n\xe2\x88\x84\vT?\x98\xa2\x00'/206, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$auto_XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, &(0x7f00000000c0)={0x6, @inferred, @inferred=r0, 0x1000, 0x7, '\x00', {0xc4, 0x6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x23f, 0xff, {0xfffffffffffffffc, 0x6}, {0x3ff, 0x4}, {0x2, 0x88}, 0x5, 0x4, 0x8, 0x9, 0x8, 0x1, 0x200, 0x2, 0x4, 0x7, '\x00', 0x3, 0x4, 0x8001, 0x6}}) sendmsg$auto_NL80211_CMD_START_NAN(r1, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x33092804}, 0xc, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc020000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="bfc934e109cd450a85f2c6878720dd91e43269d1b7c098ff472f3a9b65f95614419a9efd72b656b075a739ba6b4a720001a9452f8608001a00", @ANYRES32=r0, @ANYBLOB="0400c38000000800f300", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="06001a01d1a300006700c800e3bfba582ce29a228c33adc098cd4256ca938a44a0b50a04776b60a5b50f0101b3df64c85f53e1ffb97e00843748f9b207d34d228a0f7c577fba2ef82ab56c449f4eb3f898cc3d71ab61e55b009c78a14d68c49cd60435b828cd09961c6391b702147b00"], 0x2dc}, 0x1, 0x0, 0x0, 0x14}, 0x81) getsockopt$auto_SO_SNDTIMEO_NEW(r0, 0x8, 0x43, 0x0, 0x0) keyctl$auto(0x12, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1) 2.369217538s ago: executing program 3 (id=2339): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) lstat$auto(0x0, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x4, 0x8000000a041000a, 0x40000402, 0x10000, 0x8, 0xffffffff80000000, 0xe0, 0x6, 0x240000100103}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r2 = socket(0x10, 0x2, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000280), r0) (async) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000280), r0) sendmsg$auto_BATADV_CMD_GET_HARDIF(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r3, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFNAME={0x14, 0x4, 'bond0\x00'}, @BATADV_ATTR_TT_FLAGS={0x8, 0x15, 0x10001}, @BATADV_ATTR_TT_TTVN={0x5, 0x11, 0xf3}, @BATADV_ATTR_MESH_IFNAME={0x14, 0x4, 'veth1_virt_wifi\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x52001}, 0x800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0xb5, 0x200, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0x10) (async) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0xb5, 0x200, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0x10) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r5 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r4, 0x4b72, r5) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x0, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x0, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.990113083s ago: executing program 3 (id=2340): ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x4e, 0x1, 0x0, 0x0, 0x0) futex$auto(&(0x7f0000000000)=0x1, 0x8c, 0x1, 0x0, 0x0, 0x1) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) connect$auto(r0, &(0x7f0000000040)=@can, 0x5) close_range$auto(0x2, 0x8, 0x0) set_mempolicy_home_node$auto(0x0, 0x200fffd, 0x5, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r1 = getuid() msgctl$auto_IPC_STAT(0x5, 0x2, 0x0) keyctl$auto(0xa, r1, 0x0, 0x0, 0x80000000) 1.267150164s ago: executing program 0 (id=2341): r0 = ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, &(0x7f0000000000)={0x3, 0x0, 0xffffffffffffffff}) r2 = fsmount$auto(0xffffffffffffffff, 0x9, 0x1) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2, 0x5, 0x0) getsockopt$auto(r3, 0x84, 0x85, 0x0, &(0x7f00000000c0)=0x1000c) msgctl$auto(0x0, 0xe7, &(0x7f0000000180)={{0x43f, 0xee00, 0xee01, 0x80000001, 0x2ca6, 0xffffff9f, 0x8}, &(0x7f0000000100)=0x6, &(0x7f0000000140)=0x5, 0x8, 0x1, 0xffffffffffff7fff, 0x64e9, 0x28, 0x200, 0x7, 0x5, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001840), r5) sendmsg$auto_NL802154_CMD_GET_SEC_DEVKEY(r5, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)={0x14, r6, 0xf09, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = semctl$auto(0xfffffffc, 0x5, 0x5, 0x6) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000003840)={&(0x7f0000002640), 0xc, &(0x7f0000003800)={&(0x7f0000002680)={0x1160, r6, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x3}, @NL802154_ATTR_SEC_KEY={0x92, 0x30, 0x0, 0x1, [@generic="bc83ff9b899ad09b6b2d7ccd4ba97fdba1a0314e93a3ec77c7e1b3fb2f5932c5e446319555d9545ea230b38de16f9d7cd0a3f698725a4e2da63f783277fc7b309ba244566d3721b40e733b698999418b30336509f7b3905e656d6c06bc34a582bbbd61ebb1030976ef566791e4e1942ba48fe11b17b20fc3aae15987c4d8a7a160195950610b3a69c8bd75ce174e"]}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x20f}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL802154_ATTR_WPAN_PHY_CAPS={0x1080, 0x18, 0x0, 0x1, [@nested={0x1066, 0x13b, 0x0, 0x1, [@generic="5448555442b621ec55c1d815894591868f19682498065a5ccb1392498a92f1d46889803f8790813f5a4d92c5fc78ec5a19514e8cd099e720cb3364acdbf2a27b0216a1cf2e172f175c4ab38f139618d2bc507174e6cd082d22028469e4a1", @generic="b4b8c9875d8e93e9c38af3e9f1897305551ed68132fba98fa6a1674e0048cc865243fc1c3b795f5d76494b13ca4fd90c6109cf4d1926d1fdb95c3100c81a06fd03fc5cc16a2b9ca1d187f4c46484dc5f180c6e1000baebf782dc8caaee9aeca6fe1a03d7ffa73188971d4624955f256b7bf76157dcda75ebf9785eddb4a302ad1c701a2a09fd08e9648374b7226ac317d60a67de182ec5b51447ae48df6c3d85a98936ce0ace91f040f1941594caf0ac840663213b65467554b5436f7fdccd80409eec77e3f9eb4fe1dca4e08a9f1ef99987b8dcdb0426b44922dd26aa17ef16c99ac86bd5acb812c0ed57420a8b5ad9dbfe95586e0a21015f348da3c58870ea7d3a5eca36db375430f93ccab075ea5be9d8b43a419e5be5fbeaba9b2bbe72f850443862c7a60d4fc83ae6b6b4de7fb304f40d89ab24fc76b2dd9e12b10cc268c9e5086bd7b3f66c68e7d9fe4c7199e19ea42eaa540d181368b23beff3bdb6a1435e3d0365d90e4a9ab290198b5d376877a1119b495af65e2ed795799c91da55071d3cb8c413fc2afa6cb3c7664de58edd50d52422bc8d664ed2f07b74561046d2936c528f1c383ca46aae3f2cc000682a386b51e6bcde559b224b1bda6d72910c9d60b383479fb03e122a1286cdfa564ef998d541a2d77e6a25fec58e8e32d0b3ea92abc3e20944b04e6120f7e817ef811ee31dc01763d9fe15ae305794d1ec5f6b17fe7c07107c5e2b4720ec501b61bfe5c3de0abe6bb9938b47ce8fadedd7b6022903c612374206c61d1e4807b11574535bd931f6be3c6624859a46c8749886c1447ffe92f204a4d5df237c96aed69f0b34be9c477b8cc77c8334a738534d9a682c8b39e8f7dc9d5c9b2c7866c20bc01ae070ff0f69b5ec0101906158e389ac73be4c15a9b76ca779eb5fc8769d3c5fd66b55df9510b6872b6c7be16d4be88a3a113f50be5e5fed439654ff50b6285340a46c0d7b14ba1831149cd91867ff832d106af917447572e246e07bffd8ee896ef43c8ef83299289cf0dfb6897a16c66924a2d3498c3c02dedd213052a509db1bc8abda89981d8b5e96408d346ec078b8ecedec5208a3cb932b43fb474055f2c28c5263c37c6531a19ac6fcbad15c00ac5da7d8f60d4d95386bd26eada6875e6edf0507edc68065e3edc736371d7ab03cbf3085ea087e2abe668f26a1a150961c19b38a1f9351383278a5acec812b10fdd66b9ad39bab86044634a992933c254fa26e2994cef2c758f7c7ebeb5f1350f87da7170d5e31f0d2b8b56ee10be87db9fd6a7011206a4a468c9c6c8bde662168414308d602799d602ab8ed7b4fea8db9e4664d69d1c61129328911b6f2fa87914409461cc6af6ca94ba0fa1081dea194c95ac5ef76734c075be2725555df0cc526b84f8b232d05dc64572c9b1758679c8e465f61b0db0ef25a51784099789c476e58c712c53c88399dc2008e9d99f9e40ad3a9caa7a3c516af05b06dd94cf252760f990374ba785cb42093f6111f5598819e49af75777294fefa60a17e5a72f11aa3e7113176cec604e4b04e279f98935a8047e9c30794d9efbe23f78d00bbae1a96ba9b9bf17c7f5265f6c74d4011d4dce129068c2f36ced3d5e297694a3f4f52698061d7d4b9e47740cf9c01d366acd2af9ed549c455756dff7de37992a9c239fcfc6215c43f296908331a627e725526de8a8362caf52195d2f040c8e952b9441d4e44456f23ad55abf0d4c1b21467024419afd1b2b16d39adf8de992d525fe0de037c5c1eec376724580f92b4b6781a054e6041aa58715846c47784a29278dcde04bdc09e1ea4475aa22e69ecb941b37bd3dbcdde6e9cd676db678d21c7094e03ebee4019860bf72a04895c62bae68e0508cc9c9c57683b6aaa0e0dd889793b55e8d5ec775650b52e4d06aa59763a9cf52c7f2fbcd4640692191e0f9f58858046d2508c8e9abf1cea05644c7fc347017d5a3701cd9317464e1fc7234eec6e7bb5d837532268a2a04183881fc8b91e545a5746e13cb8a6acad78ec16b11025dc5799a6547483bc0593a01e3310aec375c41b8fb44df7b8cf15f4b446737c48c0c0b1262fe9ce3b563e64847cee38f5276eb21c370cc71b7440964fe712ab920f1a5177e0c2856a23a88e04c617e750c951f023e7a66478d4d3b03776b31cf8bb23db50d9de0b832a45c11362115b76de2948d684d1c7502e58109429f17efe4bfa97998b3987b93cd1865c462eb5906313f361618c21e1ee697f5a686828e19fde902bf9a178bbbf6806c166747417bf9bb698b0fa69b1a12e6fe67f47a1e4926307f1bcb7f672270720b6b8088362592a117af452a549c5cd58dfb13ed23a579b80cef2792a4738d94431e779e76e0dc5654dafc6b7669d01e202e391b9d3c13c6b89bdb003bd8a5dfc9f8caf456aa524405caee94d727a298b2e1fefbfc85a305fb78031cd491dc5dd42f557475829eac73e5566b7a11138d5cecebc3e8b5fa7d089f1f0f13e5b43dc97234ebe7d41adef9b3c3638f269a08c089670d9214cc6b305e826d0ce8108ee12b5e90943d645a73e1acf00a0551b858afdb4cba0932d6e8e45a87e1cfb1e2dd2473d58804264a9694c3ca7c16635af208a998e966f6790507f4dc488064779110e1fe043e7ed3ed1d55213d10183e08a64f8ec51f6c4597636cf9fb00b435dd8d33888545f663fd5d02a53cde8026fadd87f12d266441852947a5e9c74c956b4426b25613f5f671c6a49e166b2e2e7520970f222c3f59b51c406166d94ea078d5b59cc56c8eebb9a4592150a4fa37c0b3ee435c6b17874cdeb48a96a5d808dd7aee337c046b4676085144813973d8d0090e2c6c30e01211a61bd0958e394c0f59787db93e5b6eeb2c6a9969eecd330f34933749bd5da54440fbff23d860abfc01944344fe567556853dfdfa0e475bd34853131ca04876bd728e90a56dfba9f027935a9f20e4549a59a0dc3f35d926e15e4f3cf689a94dc8a2bd1a6ca6af439753872e957e75f8a77f7e4c6985cb67ef0c52b179b66c33d18b0e1d63d16c397429cbf6ecb7a3e9ade48fd1fce091bd886c95137d34ff700ca0e58e3909e6f5fb6dc8d1075e659a579deb55c4c05f324bf1c6a4dc440cf8a61bde304a0ceb8a44ec67d88b2be7a8e4c4b2eb7b89b03d087d4fc3d5eb9d0e078513c053c126f5a3414c2468ef0c3f2681f90926e38b55f3e16801d8e5bc68259d9af5b80eddc6e74797850d388734fd0e01824a759c696a486515b9dcf503fac62ca6621fbe872bda38e9d1abf1637022e5d326d671138dfafd80d8e7f441fd6992128fd65c1b8b28ccd8a5bb4cbc6c13edf8a1b8eb5886ebeb7c0099adfcf3b958c4c1e373a2a9164a37011158a2f18c163c40f6bf7fdcfe61293351e9b65739ec7b247a14ac933d9ce6fede10e0158e7b0812b589c4d94f7675f02f9e9ccdf86c71a1bec37ed1fc422d27a38f8604c06b51949c54e90e94f6a247fdc77a925c7a33e62947f0532dffdad34b17fa160b4d1b40624ae420846b3ce7e7618f1c41bebdfc3fcf8dca4bf5c519dc5f9a5b0a2a40aed3f811d32b32695acd2081586e27d2c06388f6aa1aa3be25deec3e3eda2bb150e62d52e77e56c9a14c824c413d7f685b8916153f2fd52a7248b8bea853f78d4b5c477f4b1a1d9544f9233e4224bd7c88fedf5e9e6c3e7985342e6a5a4eae134c03af2c249955290985dd6e6277f48386eb04faa20f69a4ba6bf899196e42c2a39f1682e73c4d83e46eb6acf3fd8b4a14a192ab716141a61799d7303b8527d6796bd5e7f4e650a9973754ce62a41f20661e6f89ec6caa1596e48438e67ed49ba78ae5b4dd212948a6c0e14838c1dad7f843efec3c85c39c20cdf67efa0098d3c9b19126fcb5ef69814f7ef9751418a0fcbc9bcf1dfc7b57f49bd11f639c23bb9e9ded47ea6f5f730a095c5c4b4088635a95d9e38f9c0c39b7c067882f43c3fca32fa5c4f870cf800222d7825a0d0a75ce3c60723f5f56d1f598e567010428eae21bc62e827ef3bb161f46b033cc244b4e6251fac0874e8674512859c03b2dd4600454c33ff67e175f31ac4407e544662229da9673cc1e625190baca7c640a3ef913447f3307151371bf6ff35f3604b4d26216425d20262f2fe5d226cfd9d0b21095c520a66ee22a8e0bdbd4a9dd97b7bcd5876100b1cef664d3f3c0e2409cc0e95166f665d7e8baaf44d187e24f33968f2b3d8ecb17683a5a0f73e2d44f0e1bceb7b3bceaadaef6ee0a844da8e68bcd5dde6e346489acde47923f9487f02c3b667671751e84627b7783289f17d01dd56a621ccf442c8c7716899f612ca6a22cffaf7ed888764e54378f4b09e49977ba25eb1008f2e84ba2cb2a1cfd8d97285ae8192090f6aa8c4eb96717f1b8bfb2251aa199906a88441d9765a9a1ca6e1cc32f36842525f2e09953a4d280b7f81dfe47e90afeede3b493e63b7fdb1e23a6954c5f7cb214ca95cfaee3ecfc07ebcc65b80f2873af1831976c2a6e185746b3401129e1615c6ab57b285314144b7d5669a0ffe4539cd4d8676eac76362357f0e3bb5c01abfa65ead87c32425648d6c413abfe5c08f5cf7ca31697ddeae63501e73595ae14cb189b4c9900ac67e06f9922cd6153252e3c43c680c54acfd2d0cd052933b6531ab5333415ac609238a7109249d6006de1b899f9500bbc1f1dec7bc5504016e9e06d753347f7c1d822f77eaa70ef9bbb6e4c026f122dfe351a8d7d316bb7021cbed251dcf23a239201a648150773d84e8d71f280ea8a768b9dec6b50b307f983ffc9fb5e26e3c1e4e252c16768f92a03c1323ca869bb3d01c48be4b11dedadf37fbd63b6c6cdcdc9e828a964d1bcc1bc117b9c8b68944aedf020d6be718e3dbaf2a2c347a6b2eaa1e47b8201b27324a1e89af139cc50ace44f7951b67e05b3244a0afc37a90af07e1b67ce130d85f2757818c83c7926fcbeba4305bd36e06d8f101ae2fe52869b2d20eae9e4594be7fb34e137cb226b377c41b111a9b8829209940066c1d26c99f49d7a8879dab094c714e9aba818196d52e2d567f9e3b0cc7645ca63393e31839e5e5182fae09ddee1f148a7cf32bbdaa61731134d5224ac86591d42f079a67ba72b964adb0fc9eb76a66bb0997f21deab823de1be9b88e8e6c2efed7a0403298e6babb1d5c2cfc73db08c3101d7c644ee9b947fc116d7d1a28a0f866437a4c5219b3c360a9c3de6a0ebbb503ed0d3bb5b510073817e024dc856adba55f27096039db255e1601b1e983346b06abd5054a51ff14ea14846984aa4d93444deaed164dc6d6799af78f4a107fe9ed27328e61ea1c20d1a628a4807400de87710561304aa86a8cdcc6f641ca741a24f18b0aee263e43b0b1e3abd3465ea5c602e468f72f9a81ac2999ce62eee7c77c57e4892bd4c8e6e43d5ec6c9f2cffb217da5a6fa629a6f913e83fb9c245b26d89d10c1c69d36038b8908ea299fa9c9540cfef23cb05a053d0beb559cac29cd3c3c5b4664e77e8ab740eb62d062bd99fd635dfc40742a2c03b849be6caaf6ce94d75b012377ad7611225e9b9a7ab25bf8909a99e77e61a3ee0a0a2934fee9c7ea89235e9dfaf186da1c1ae5aa5733d984278f475cd01a9258b055640db3a492e94e0690c23e0091318f9599f0e623e94e75e8f4546f7d168a7aa624a697ce1819e001ba095f0c11e85875d7c745e7bb565a030e2ce375b26dec734466972ec89410b6b34133571451a5c0a1a66bf7a9958f20362836df5e5fd7e32eca5df571428b0db3acefc4b5e98c85cb12029dab42", @nested={0x4, 0x62}]}, @typed={0x8, 0xc6, 0x0, 0x0, @ipv4=@empty}, @typed={0xc, 0x4f, 0x0, 0x0, @u64=0x6}]}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x6}, @NL802154_ATTR_PID={0x8, 0x1c, r7}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x4f37}]}, 0x1160}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) sendmsg$auto_NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000002600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000025c0)={&(0x7f0000000280)={0x2304, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_STA_FLAGS={0x110c, 0x11, 0x0, 0x1, [@typed={0x5, 0xad, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x3b, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x10, 0x0, 0x0, @uid=r4}, @nested={0x1c, 0x94, 0x0, 0x1, [@typed={0x14, 0x12b, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}, @nested={0x4, 0xd7}]}, @nested={0x10cc, 0x13d, 0x0, 0x1, [@generic="be0b31d4782d5ad5ed08d4e8c42ef6c449a8bf8530a45ed76d4228196cc1a5161c28adc1c564f7708824c363455f712ac57d9b1c8bcdfe014a4127da1135ff88f5cd8849ec67a39d6cd7cb0a246fcd4552abe732b56042738858264f4049bd4d8f13bf419033e884a1cd8591ddf78a3c6a6c00e20724e9230752917f47492b145f2d03efbee16dba83ca855d68ee34096b", @typed={0x4, 0x55}, @generic="cedf3c68907c4191ed27b3c258388cbbf52d263652f4a525a1a90b1811d908e6a74dd3", @nested={0x4, 0x5c}, @generic="83cb2e4a18a3259e4a12b22810a11fabfb6efa798f35a823e2157de30123f6a31068c513f1066fe84707794d3f93af56518eafabe6bd2a954895f355d6edd7f41b721b1e2b36fddec2b92e44f3c5e01f8863f145810978c3cdf1573b8ae0f4d7047cbed0764012cd22c61d8dc03254de63a61dcb43edad551fb57d93ece2b7d58fd19934ddcd7a155b46684af59837eaf871bbe71c1a42b9c40190b2365dfc5b94de45ba5f797e72083a33c3a77b8cd1abb523af959be1b396a5d2b836fe243243dea094e375d0a37ff15e6b1a1ff56f54b461fe7b13a04277e1e80d73432df20aa4fe4d492823b6eb230811395aae2372dff39f5bfb0a31566e89d6cc7d50db30d2ffea21de4bc6e55901a3b16a909a038a9bb80fec15ab486ce7f3dfcf9c44751c365559e64d67821ef587cff42c0b20e556906e940ec9268defd9fcb899de9d5dd577405f3b0ef9df69693f1909eb12a16a60bf042fd3b9ef2a5a559e6c1b9a4740e1a3cedbf8852a918d0db8ef004900dff932d512d2b3dbee477b9bea28855f5f2a97616467e594718024aaede8a907fff409cad64efe1f745e0e3e41f76f281519bf895c6bd230c236c85386aa1c59423c2ae79e42d64d9aa4ed6cf928ed378221b1e0dc098da7dad2402ccbac7c304643314f4c9bada4612cb16dcbdda10a14a471036bc691b82ba55b0356ed349bd8e6d1ebf5a847c81b934da3c7ae057a04dcc3634d9cb19eb8b4eb2caa53cbefb46da5a4a9d1244e4836ac1ced6fd6be3746d8cb1e0bfdb50a746a45f26b24b185c7d29b783a8f36e14ec05cb02239461ba98413b9b07332a600b3059f412c7196fd0b0daa56b2574314d17d128db640ec8204e5a279e66c183afb7449678994c0d0174bf1be0d020e92b1045bff690e14d0ffa2be5ad92d282dda2af23cb7350a45e7c2f7acfdd8ea476efc9e095bc5252a2b07a998082c646824ef5ec95a616e9723374c2a5c296b4c16bc2a8a27db29b87d3cb5c108f3db5bd7424b5cce0a03c50f5f35fcbe0a3bc6b5f8015b7e16642311ab64a8e116ee56c4e857c34e5cf131beb4bd30c8226a6103575feacb79553760505efee37b8cc20fda747364292a9978a516e4418457efb3105fee316b8397e2754728c282b96355a28c422437bdb259780e96ede5c37eb79838fd0f22ffceeff551635d97471aa86f8022022ce577a48f45101efd09727d03e0cf132c5cb7db56d390b0b4fbf57e6218161752f9fb6e1991ebe6cd5ff80a97b8bf84c0ea1ab764b374dc028ade87dd107be4c09e82640e6ce4e7c80725e6740890998dac4ba523d1f18b66422a6177e8b0abc525e52f5adb62883286b906900af8109a421165ff2fd255eeb7790406bd738a06d55c8e900e689df63b56f6c16ad0bc2d359a2774c71b912f8b6070a3e0ab627d0a6eede7fa62c85674fd9505e0c7ec6476b1ba1a2090618b5832b48a017c440db67f1eff92354c7d1f792e080261aae74adc7955aea48b1b57971b7fbcdb1e78afb4e62f11f5cd24ae6bd0217f2e4c38db2fb6c43fa04e188b1e820e856c98e808d1bae59e992c782b95bd701e859c0609a9dbf22bf7aed6b1f49f2856acbec899015c8527f7def9eaa8126cd1eed54e98d1c78d258fa0f042ca3efd02dc710988bcb52f9e43aabe514b3a380049c2006923951ebfdf168dc9ba2a85b53501308ab8584f798348cf7b14a774049ef1974729cad2d4c1cea16c822d4ff8948cd16b595d57bd3cd56381697e600527819ed7d5fe4ceae896c5241680e9fe2206c7721c5d1f20c4f47b77f95d0eac3c7088a836769680028f2cbe98ecf3ce3a285bfb99e807457dbaccd76feede1428576ec633bcd4c19a2927d8f6bb7965d16cadad5a3baf526cafc7e20d901cda3af2829bc1604bd8f30bbb7b735428e5ce8b3e6a99e373f507c2b87a8f76e1f950e6ed1f692118e38114b83b3a6f31e382afc69f824ef2d66d7c05c56504fe178817425f7c77a4aeea7a975c404a9eaef5269201f149d5231275636efa6376fa12ff70d778b10792fcdbf2d8f9baba5a0276a8780eb2db2ededc1f0047bd0b54c9615ee8660e2bdf293844c4fa77c08b1cf1ea93b6435bbdba8f2e99761ae60e7c5476eb22be11cc9a3f5f4109478edceae720203ce46a30d2b19dea0b8b897997afb21217402e10ac2a37a6d97145bf5702956dd79052f9093415e5c429f6ecdfd56b6d619918da9a6b7246dc75ac529f2f2dca54c3cb3d5e91647dcfb8264a21ffa147d4ce02cae39c3a2852b071c73cb8fdf189a85aaea04a80b8107834efd23201ef25b4040456931bea2f19775d3d5e9c6d3d69b34d2fff3432694372938d69faa219d7fc966288d39de1e4c1da3500c7f645ac89997b0f28032d62caccfa2e02c2b7b68975712b0082f009e8e393fa0841925d4fa0bf7506879569d840f7087f515300ded3ddb58e149f7013b71391fa6044ec3623bd2322ecd76649af606a89bb5b4368ea5daad2f9d8741dc38085dc32a1525c54765890aa7c4147d89eea5043b65aa34a47607b57159041be7bc73a6a6a67b9b2597ca64b4d4d75e4b0ef4abf37a96514c8aaa1981214218a78b040c4cab95655affeecdbc53d7bd3d43d0702c9a0aeb3d324b67bfeb8b64950e871bea5f4efc6be5f133485615dad37c56033671f295d3dcc0819a404476e172d2e9bd72dfa81be226a8bd90e2ea0b4ab25cf29122a4e7657d72beee3a844003a1654dec92969452a6ae12efdbefcccb89b885790847da5378a9b575547985739999ca52bab91382aa590f8d10239c980197162aa40d1b577b041f7c74c5befbea802a046d74b4fe37bf4199d879ccf55f177d7e89a219d557f623675153fd5f36b7b0530677b5fc119cc5c4f6e30c2f05d54e4a8e4592f69308a65369c494f47635ef6928981276660c31420e50b20d9afa1799646e3ea9d41a0c30ed891d59a82000293661fa4f74418b2f9239ddfef9b6383dc85f0940f40f522541a65bbf55e43e634d18065710fc10788314ef803fa89ffd4059cf1f505eca5cb20b5b0cd3238c4b919329152b1cd429bf02643829a8f34ef0794ec306947018560cdd0e1767993f44f89e0dbd5a7e4142dc943a282eb23e0930d058052bd919fc5fbb4c9a92431b23e25c725f09b148b4419cb5928be50aa2f01245415d5a9702e409766ee57db16f870d0eaa91a84695bdac4e961c2d99cdc3ad423815cd8da78bd9c964c362361821630c658adc40142106ed7b523328ea6d9a6604309d54532012bca31efb23449a3ce36f0c6f43e779351cf98b75fd5656736b57bff3328d7f89d1b39f48db0b903060d8918070cbd39fc5f56de446b7ec4ca76f11c8ccfbca323bc223cb5e030fc4825b9bc37692cb9500b38159e8a7e18e0e0c824524847ac16336e64f0b8865e189841533a1ab0d1a5fa8c6ae229cee2dd32eac4e1642669d6834765498a44b692d90b2e857c59350bd7e4401a41a823ad9657d35f9a5e7eb2b56128e012a7526d19b4d81eef4dfcc115fd11445a0f7bf1cf3e959f5cfa5c47f9f400eb4b2bee248fdfeee3d711e3ecbc36176a06646fc8a71597fd2dae5c15db3e3f8b030522643f04af5997d64475381ea3c7a7de274dba61af020c999a4907745b4ede20df034cf03bdbd87efc82443c949af305fe1b7f77e88e41996752fad139fd3720b54bb1a9949dbbc5a64e8e9211dc27d157598670c08d1c4c922c68da5b0fabe7de85e3424d6bfaff7e93801106e49939606579b01ff3d3b27c00b36a2fa7280ba57f41a3dd4437546786c6d4e8fb379c71fb5938056113ac856c28fb8efe494972d9214a9dbd0501055972e7ca41ce7bd9c5d3cf2e839fe1142a6a1bca74ecc20d94bc585e5b91e95681ac3f60fce5ae9948720659a33fa5fdc9f34dc2cb5e8da0cea39d813090823ddfe18929f0f3df181e8ed7e07443a5e1c56336c90cba8f444b9d4ffaac2bf7f1fe97c761201e110ba2b7fc964f1e938a0e1f5d4f5506cca54d3d55763b472665f371c6c4057ee0443418219aac0a181562709c17aa9263d5e9c499fc52ea1b5e51b3bcabd5da71f4d8cc0e826e1578613d9ac5b5725f3e021db13335c1d02cba6ae28b0deab6848d3ec9ec18929efc2b48c570c33a2e3d08965640a45d6a66044b996bca040d8f425bfa40d7061c30f182bfba6298b43aa37e85713f121f4ca8e5c2063ffa7d0d13e8ca3ed76d7aa825c27baf9cab72cac4ff7f8f0697af583220637fb954f304a3ed5de0aaa7a23eff8af0112f198243c6318ac6407453114af7565e30eb99406bd3b9687ee557fa59c12647d2b435aa72f12abd5c5dce79b0b9a9a3510bb5dd3cdba270af940aa9a9a65fbfa774c8717e24568f1b859c1b54a00c31a2aa6582be758bd3f5d235a36d5ee872b110306d04d414070472bded05d29888071d0f022b7dff5c972a004630398ff347aedbfcd633dc7c6719445aee995b3e8c5d51868bbc7f6136415b6a76c2de3ddaeb0b9588da2f05c8f0119a7f70845a0ab63f2d58870e3ecfe6f6d1b9ff1dd2680125c2dbf4058ede92cbc27f8014d1978a6a0c942aee45ff5b5eb27910bf1e15eae15b93f62b18a9d26df83ca5d3829435e4d3303eaf9f82d94a2c58e58b9227e1609884e4913a25e2fb0ac5c55ed80c67b5f43f206a8f275320d97d72f2e55d79340b1a8d1e572684e75c53cca8f188a12f0f7045c05840fc3ee2a31ad474173dcec272f93301cc407d612b55e5bfbb8d2362b9f02ab0335b2b99e548eecefc0038065162120d03855573824fe81162a4ef488b93abf57b48179eb268096295c1ac534dc9ccf908c221f145c801f11466bfe69e8d3073cb86accf680df6ab94932af6d4c912f59d7d68c05de888a34259cb50caa0fbcab1d20926fdf00c9c049d1a15161d210b91b90154226dbbc8a742721a9ba80287fdf40b2d001a45ca43f6c86c29455e2307cf88191c5b9bcd09cb6f6f9a5de343ab48ce9841021596bdc273ed69877f54fced404f77f15155973571a2f47e2568414112ed8d8480c071c1a25972c492a9a147a0c9be407832dfda8647f4e4cbf5c4a02c0c1ecf7b449cfb6bf40ef0d5c7f0f0557003069a8dc80a4271b0d0d9dea96f7f7deb1c6715d83ed0ea9444b76b24866c75913ba61eb99641a3d90aca91f25a80af34a997bbc5974e623ab65108524ac1c8585c0b5a6e4a9fe92fef397b8e136ccb98a488a865ddd83d0bf51d4bf968a1016f753e9856f915e86c5f9c08c8d220d51e465a3ab373c6d024dea8003c6ec00ff9967914b9139f46921579b83591ff328eb2610376833e494d78246aa1424ef9c65b58d227947d5329a8a79465623afedbfb9976b81461f749c962ab34bce34e08c65c204dfcefcc7478c54e3af3bff94e94c4b956bcf84c97f90d04fa0d04916da155174adbcd3683610a910500f919d97e5e8d1dc1351a3e1ffd75c7319869b1f2510f7a81ce9c32be8f57a03b1cae568e98c26f29a3c656410bffc0a57944424af5737d8e32100afed3debf4460eae884200397eea25b31f862f015dab7d37cdd9a205cf5a7bea8fb0f9105912c64e32cd023983c0d12e262f106bc0b7598217e644436883f912e35a550a7240186495e433b998fff664a7e6da08d1d46a2250757bcdea3bc5263d0d32349530d737703f90fd56667ed105e0f827b568344fb8fa3766a366addd67eebf0f04e12b706bd07ed65528b511d3b9d4411cd2298e6639fdbcf83642b984593137e3ee3e03e156260bd681205e9958356073c47e2670a", @nested={0x4, 0x14a}, @nested={0x4, 0x4f}, @nested={0x4, 0xdb}]}, @typed={0x8, 0x4e, 0x0, 0x0, @u32=0x4}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x11e4, 0x2c, 0x0, 0x1, [@typed={0x4, 0x80}, @nested={0x11d6, 0xa4, 0x0, 0x1, [@nested={0x4, 0x113}, @nested={0x4, 0xc9}, @nested={0x4, 0x9f}, @generic="a3f721371bc8e9b5af7dc2ff825a02306b7dba992edaadbde2bc409a763b8961b588943d830672d3d5e5a1c9d6139a92c2f07cfdd1da33d97115105ffb0ecd7a4cbdc21d542d06f608b4d9256e0b1b65cf825e675a754f96dd4ada9d95e8221ce984380953427476d2f3cae458914f822c44565ee67a3af7b1ba43651732a341de409d534f955388094046d0823e4ddd77b8291b745dafa41b624eb8e8076fd694c80ed3ef3b12240b1903224d47ff01600584942e8c66719e2376ea749c8cf4110eec037bb9837a9ad9cc9865a0e5d2a0c7e7d60bc1", @nested={0x4, 0xf3}, @generic="f02e6391527fa459446400a81fdb564102556c06e02ead751f79e79d89eed3c1133974b53d71b6582aab98c8f4079cb8ea641b743ed4633b9e0859bf034029c2d2a104ffedbb003fef80ccabaafc11ccb6177dd1a9c4600e37fd8217e2f314eb733564d1d306253ab2e14958e6dd1e12fbecaef21846deb79a6ffe919fa6f6a3678732f9ce5096a90a80439a4ec86e9193d4a3ac784371085a1898e0707ff0ede6e185761f5ad1835dd5c84836fd7cf60be7b759dc638f238fb1c4e071c7ff82db4abf032be5c90f6b4c6b65383e790a5a19e9a2f60af4715ffe05be67f2eae6b9de84ac3c6888b796347258", @generic="87e0e51bc02eed4bd6488124e70227a53f1dc7a3793440078ac7e642e386d05e04c38323fd125e77aa934810b315b9ea6989f9d04e8bf28f3b8e35ee5de8f0475ff2e4b09519e52e4c220416605103d98a272287cd87ca1944c533a801a334380b8e6ae67fa939fbd3d2f6498fb7103130b45bed19791eeac01c5528e2cde3d23222097560c0fa9767208984417a1ef8e7fbb19b2bb518c839b9cbdb7c4c38d4d1512569ee3a69c6d2326b35cb2f8b4c750466aa884d411a85a2edda885c6d51ca21bf539b867e55df50d821860b5352aafd02f06b3202d19a3ff580473ed82174d1722709ddc87ab1318736ef9d4192bb7ed0ecdc6dda6285c0e12b4a15c6d96521b1903ef0a27fba5ad713b3f6043951db68ee5b06fe6f892425f9dc111e9c03efc1e306c7ec280ffa9d7a0bf25abf9a17e78f3d0135abbfa994a91538a9e776d0fa97f4c475662cc78347fd49ec6c00e36d7e8a62b14acf32f4a4dd48280e9b440ad371cdd54a1d209e5c0d63de202839f2fb39ff4d934038d29f696a0d5233852062cd4827930a3903f3b1d0a0a4e66b96bfb3d27652c113b951794816d6e34b1725da0018536741128adfbc76fba672552457aa3ba8b652fe17e0c84157028c8238534dad5052832404bd7c7058c400859126a1acb808c19a31076329654e97abf508b211ba6c0a3e8720ee357c89fb036bf65a73718532752284b80cd32590217c6420dee3bc9e59c19bca05b3bf46a727af98c225dd8f232049b173fb453992c2cbbf9522ff3be9066aa410a0784eaec40eeb91fc945b6503b3496b641ab3008a8647f5a60bbdaf5311082290a15554a7d45c4d2cfc603adbf8e704744ce5ff2dac78ad88935056dca705ed672c63e78407b1d46011036282e2ddc1e3e3ab5def0e9777f827894985b5225476db2d566eedbfd762223f2861dca2170097ca1c2cd89801c375c62919a27c22a1fe06d3e5ada51a5d189aea132e13f481891158d5cd91a60f7bad9c8dcef0f9710c5e799bb272386e6ca8ab07d1a04fa37ace76e651213913d99146dbab255c10610033d7aa207a4a7338e5bbd359c306ceae65f2a55f2145a3f1684151100481d88c3baac9a53b6386a979e21e081bd0d47f9942ae2eeea276b6b0a92b9c041df8482afef4ce913061f4bc314542c68472ea75b8a2d665422e1b9154a1f4dc27e3ea9fddf760aa7b67ece9f968d7e187b253e6929876dc0787d373eed2fd21564fb5d45b34aae837acb94933edc6a1f156ee46ed4bf4d9e35aaf7e6d743c9d5cfacb3a9af0444236a2bb325fbd5e09cb46d6c44a336325032aa58625aac80f18e30448a68e8ae3d0f56a6b0661cb8bbee509da44b283ef377eb7f7f7760c331cbb7c0d92d41b24e6474d4d05f8dc422df72cc047e3da0642a8709b5dd87145350e118e29b8c873fa2692e3bf23c2fc3f5c79260dd7c374e18c86c3c47849546a7823d3bd9de108d798a20848099267070d5ac48ef877f68de6aaae375e8e61e0d05a10c0e45ae7f66410e7b80c540253b5a43e32b00688fe3aa07bdc1f7abe4f8076566c121548eb74a33e160cadc801b7056604fed5446719c0ae84c36e8ba0ce597b952b5b9bb997aaf3bda045f9678fe1789f1bcacce77296bfb3d7fd66193f05b355d8ddf16d3fbfb232b7e0a1b710fa55c0e1e5ea4ef3510f4367dfefab209b7e99a7808f216465817f0daf3c5cfee232f41f3c1277214b46120b4f32b821cc8de2f686e3013be039dad538ef17c8186c1b294c134b7091d202284c521e5a4e9bad06bb3c2881d0d177ffef71dcff2b3d67c2b98be8c150ab863c4663fb45305ed3b2f1218c7c7799f1d76ccade7bd1f9a04e43f08385352fd7380204736587f6770130e5623592b27fd7ad32dcaf464062e11d6ec088aaeb93de68656353e87be8532a50fc37205b4f35e3808dfee669fccc335becdcdde49026112ea08df2b030aa3a39ca1093a2cc8ddf3e5f20689c29c41afe127048541f5aa563f2afb9df6d6eacfa2edc2ec704f69d82d904b5be552b3e1f1f89d0145427930784a1afd84c218c60513add4a781a4967a1fe062e170f838817f5d854547d2e058b11d33d679e0774bf306a7f34d9ad4089a668bad9d6d06a3db0ba4eae177294eae203b25c606c82b507a3f09061311899f51f99ce112bbf67ce08f67c400e0855e147d2ccf1a68a80532c560d51c80448041f751056a1299f44736f10fe0b89855a8863cebc722a37d0d23a28b37b30fca025ceda5108728dd3d1ef8af11de340ee3d70f92a551895536b6a0f55dba8c2dd79f553abc80cdd82fae4d398894df9b1d1a306ddd40bf38ee525ed238e183cfb5281a8a7a0c82075beca015befc00eba30298084ab116223580060735cf81896edec8f73f6ab35ce580be77eb5ed024f5a21d16b742994c2c8e72101ef95bf8a07b3d62266f37a12e8610ee6a5ea35fa799c5a72ab3d1fc2e995f4997695956d8a7358316aefe655f01e56323fc67f8f5abd92b6c73ea9fd63ec068fb829a4e437c494424aba760716e6587050dc383574b8404fa14d24cd5088032b7d6a0738143bf109041dabcc9a3e625c8480261592026b963aa265807e4d4449ed22529ec6a48d1acfbe9ac9a3d46274069a8a4a3bd3d5968e30f45ea448ef7a63fae26b2ba532b2b53ed9e5fff2a756b9d6edf23b4da844cd5588541cecbc406367c8cbaa72f14acd589028bebc5ef028027dc4f1c983d88d02fdb2273ea2af8dcb6f55fa930a9ef26c990c0eebdfc9d9c04c0012d640b9c4f3e3552aa740caff42ebe8b857ed04c6600671a6580d32309022b23a375d115b31040db4b5efee25050a9e96a2607470bdad671608ef9afd68454f4cf7e1052b99cb151df415f4b419cb344dafe9d1d6e6c77a11b7139a963dca54bd84e620a39cf553518e01a2d7f1db3f638bc8c3d7b843fc21a4053130097cda767bdaf87dc44e154bce18109c0d268ecf6cd83b0178531fce2c65b6ded80556512304f99c85c53eba3335948d9f90aae40ae40155f6fffd542089fd82b8dc293df897d83c3691063c0c436f5a01db0d674ba4496e6c99fcc32deac7cae9c2512e782e647405286363e670da2024a2a393cc1a8b4a1bd5cfa2b12fbf92cebaadc5f3be60b788c005771e41bb729b9dc6f6658208c6a175dd3afe40ca17f9f3bd8cbe34c210baeeeb96947b9c4b6c8c7434e2dffed97ca6c3d8b611deae34c03bc717270c85d2e10568777c4c9215fe333cdb6ad8b1616724200473cae2b66826551e1b5dfa6aa98f6133b9032f56c7d20893a64d131eafdeb56075a78c0dec54dcbdfd7301f77a2d92163e7cc7c676064eceac45e764193e34a20058d71c9d814c6223a079aa75b60cd5bc1ddf83bc3d1ae5664fb4128cdc2512a48671c6d404622459854f7ac34f85584c06688af1f0652f019bf6e8032b459f69c7ef81176e10d2e2deecd3ec17490776d8ea1d8789f5bb92fe220fcecc37c65b7675ab6fde776862a9bc3f797a17912b92b9743ae552f7a6749e906ebff71e74fa92608ed8139eaa4f5e4ef592c9f63ea432e0c49e2f7d08021aa1e3aca8f584a39ec9307d3eb7ba6c00d72fcd017a659eaa1e89baced2b519781fdff0f14841560cde1510097c952fcb94b692cc60cf730dce9f217d4323e1bd01dc50e86f66e9945208010a66a4027e172b6493a44f9aad97ab83f73d326d31ae5e903682b03be40c15c2fe2fd4d8deb37937334997b571a250eb303533f9874124876e1f6f525baad87ac201060aeca966de6b26b57b774c05388f2be8313d9276e5f48b8a7c0fe565676c40277f5f44fe4ffa5daf06d51610e6dae80ee3563ff2bb44aebe54b0ef73d8adf9b52f83e84d88006d5be816055553e85b69b79fbc3cce9ba08fae4b959e78dee9d0e3aa3097abcc3b8dcffc6d6df524b8e818bcf74ab8bfb4be098df431f3165ee27d074304479218cfa5c8416dc44a58430587d6a6d17f3139f86c64cb4fae8d326da23825570e3203b3f2a9a50b768b855bd04172f1900c2be76d008b2bdfb205349cacec73e4630bb15520c63ce4e9647e7f24da041aa482fdce6dd2729b1e49b84012b4c708b3ce4350e33f519e6908863a46d7993ca614796cd9c8a6094b932e6431d186ba27239fa9227de00e694e1a289b871b3fe0ce418864a1e2f58d9ee928b8c009fc3207514285ebb33619850fe3798332f2fab5862273975c49fd89878dccf6ff9000cc9ed86d2d8dbe1349694110c4729ba4f3ccaeeb0ab87742e1b832620bc227e7a7f7383c8604a7df85c6cbae5bdc4a35037d5113dc7dc80697d4eca80f94c0368ca826157e26afa95c048dd50f3c0eee8f4451371fe42cac02ff450151be63aac3f36ca7491e475501d0fe10f81d75832d95138082b9aa20dbe4aac5d43ce7cfb05dc7329fbba9e8b41fd5805895686907aa7b869e04f49f566555aef2dc7e80432c1c5828a1445138c2d72002a60f4909db2266f449ce3498d41af1d8a3fa0b1a21480bfa46e92d2d512f4081b9f52010b7f1b1248747b36bcc3254ff1bbf8e7b7cd833e8981f28fbd0988749f78cad6deb5e5848eae30af264c25cb0b67c8ab02629725ec8927cf711c8b254651e00532748b0e7ef8fc51d3512a7ee2f9950206b19b4239ae360731f4ba948004db164b6dc9da3f244cf5fe50bc9fe5539fa3bd89461fab666d6e9ee14df6453437e8a3d9899ee2b2065d8e0ecda5e10aa69d6a54aa68a083f9564a1bb81d0ec5ff2590f890b1f28081739ac0195bbc458035329038175a671923997dbf47e93f0a5d83e52f825b51a8b66bc63dac8ebae370ecfebe84ae85d37a4de3cfb80710db878b090e7a7d72e76bedafbfd7711d812fcfc85c7726ad5549068168de268b025f28722d337daf8ef61cafd1cb3651d01d266d8b8ee0971ac31ebf10c581ac0418c4aeaaba683b768e03be24d4e51aa5bf0becf9da9e653eb912caa99f6ec5c91031c00f118671426aa5b4299380e8c429ffc4ac690f558dddf46d09ac22d106892a8d0ba961927824a9cd70cb244325502a73cc851d90cc9de425f8efcf050ee815e4b2bbd43b4f05d77ba0bdef4540f1c62aac527ad3e69ce1af0b14df9b59d368490545f024b214e9604c743f7d406e9914c0f0fc6088ede055a5c7106fa5b81a43cdfff3eac08662540ea893ec97d4eff53d01fd55e7690f3927317d6d93d7c5f070bcc77945f37eadf8db9e31cd1abe557da05ee2d2f47bcebf31aed9405a70f7c07801c8ab0383a2eeac9ca376083b9b9c18fe1c3ac0f374a56b21bce25ab4ded76bce3a8c7118699e3e9d79a036da8a2124cead4ef2ab75ce5f35d9ab4361324c3e7781bebc0ab1d823df0f877b34b27fb3802954177da9bc4522d2f9dfa90ae6f4dd8a8c4aa119ad0b582bc8be46bdcb853b5412252e22320033ff1a04161ff84b334e4fe2ea09f1044797a0014aad0a9f450bfab0226290e70fdf5a737651391b5b6725c9ee1c2dee0e64ad5094f39b3ee4362bf40993f4cc791a838bdc62fef0254956773eacf58b2aa00363415053696661496f77b04a43eccbd54bae69841fb3f3a37567dcdf083c13fb0e3c60691140c0cf800f26bb07a18d575e034f077020e0666db4851a6b873f1e82fab91f2adf2aec348132fac7dba6f109fd5b2df77a96c2968721112426053ddf59635375f1a1b4da64e811955f68f13b4fe904aea7b6193ca25b4d4f6cc6f97b0bcda972dbcccab54d639ffebed16eaffd61f5fd530f1f60b75f64f29702f0203d2489c78"]}, @nested={0x4, 0xc5}]}]}, 0x2304}}, 0x44010) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_ENABLE_SEID(0xffffffffffffffff, 0x0, 0x2000c000) setresuid$auto(0x0, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_ADD_UEID(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r11, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@SMC_NLA_EID_TABLE_ENTRY={0x6, 0x1, '%+'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r12 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x24, r12, 0x1, 0x70bd2b, 0x25dfdbf9, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x280, 0x0) r13 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) write$auto(r13, 0x0, 0x7) r14 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, r14, 0xb01, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000084) 1.248082134s ago: executing program 2 (id=2342): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptya6\x00', 0x40001, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x802, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) ioctl$auto(r0, 0xc1205531, r1) 1.246433028s ago: executing program 4 (id=2343): r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec15\x00', 0x0, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x7ff, 0x6, 0x2, 0x9b3, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "701accf75a926ef3cf001014", "ef5ac4927ad89c5c0400"]}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r1 = socket(0x10, 0x2, 0x0) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, 0x0, 0x3, 0x0, 0x80000000, 0x8}, 0x400}, 0x7, 0x7, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x710f}, 0xa) 1.092857351s ago: executing program 2 (id=2344): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x1a, 0x3, 0x1) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r1, 0x5453, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS2\x00', 0x101000, 0x0) ioctl$auto_TIOCMSET2(r2, 0x5418, &(0x7f00000001c0)) r3 = socket(0x10, 0x2, 0x4) r4 = openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000003500), 0x40002, 0x0) write$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(r4, &(0x7f0000003540)='\a', 0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00\'a'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) prctl$auto(0x2f, 0x1, 0x8, 0x0, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xffc3, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) statmount$auto(0x0, &(0x7f0000000040)={0x5, 0x0, 0x36, 0x828, 0x9, 0x8000000000000000, 0x9f, 0x7, 0x4ce, 0x8, 0x2, 0x9, 0x3, 0x3, 0x0, 0x200000000000f, 0x100, 0x1, 0x10001, 0x2cf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0xe3c, 0x4) r5 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$auto_I2C_SLAVE(r5, 0x703, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) socket(0x1d, 0x2, 0x6) r6 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) r7 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) readv$auto(r7, &(0x7f0000000240)={0x0, 0x101}, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x40001) bind$auto(0x3, &(0x7f0000000040)=@rc={0x1f, @none, 0x8}, 0x6a) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x9}, 0x3) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x0, &(0x7f00000002c0)={0x0, 0x9}, 0x1, 0x0, 0x0, 0xa}, 0x8}, 0x5, 0xefb) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYRES8=r3, @ANYRESDEC=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x20040040}, 0x24044000) setresuid$auto(0x2, 0x7, 0x8080) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) 848.703838ms ago: executing program 3 (id=2345): mmap$auto(0x0, 0x2020009, 0x3, 0x411, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x6, 0x7ff) openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/timestamp_mode\x00', 0x480000, 0x0) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rxrpc/peers\x00', 0x402, 0x0) ioctl$auto_SNAPSHOT_S2RAM(r1, 0x330b, 0x0) r2 = socket(0x2, 0x80000, 0xc) sendmmsg$auto(r2, &(0x7f0000000040)={{&(0x7f0000000140), 0xff, &(0x7f0000000280)={0x0, 0x4e}, 0x7, 0x0, 0x0, 0x3}, 0x5}, 0x9, 0xf0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x400c895) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4004804) syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$auto_NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008040}, 0x4) statmount$auto(&(0x7f0000000040)={0x1f, @raw, 0x80000027, 0xf5ff, 0x8}, 0x0, 0x208, 0x0) r5 = signalfd$auto(0x4, 0x0, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x1ac}}, 0x20044001) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x8}, 0x7}, 0x103, 0x300) close_range$auto(r0, r0, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) msgctl$auto_IPC_INFO(0x6, 0x3, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty37\x00', 0x800, 0x0) ioctl$auto(r6, 0x5603, r6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) sysfs$auto(0x2, 0x100000000000039, 0x0) ioctl$auto_IOCTL_VMCI_CTX_ADD_NOTIFICATION(r5, 0x7af, 0x0) r7 = fsopen$auto(0x0, 0x1) ioctl$auto_dvb_demux_fops_dmxdev(r7, 0xffff, &(0x7f00000003c0)="415af86a3989dd381f4d3dadc67f5f09ccc2a226c016d9ff803608efb8ae4d88a970e07e3962b4a86d8bf8234cdcec8d236494701b1670310124cfd1cc2dea701a13d5dec84107dc24a1544ef65f48fdb65a46167f817f90d2c0ad8a344f8700000000000000c44965528a9bc930053b8645f2157f72a8c64e97a24f621e33a04c7b6f369bbe09f817cb47fa6328f5ba9e5af38df64bb2a89e62fe") close_range$auto(0x2, 0xa, 0x0) 731.50006ms ago: executing program 4 (id=2346): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x801, 0x84) r1 = getsockopt$auto(r0, 0x84, 0x6d, 0x0, &(0x7f00000002c0)=0x8) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x100000000000027, 0x0) r2 = fsopen$auto(0x0, 0x1) r3 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1, 0x8, 0xd, 0xe13, 0x81, 0xe, 0x2000000000000002, 0x0, 0x9, 0x1, 0x2, 0x80000002, 0x8627, 0x9, 0x20000800001, 0x3, 0x5, 0x7, 0x65aa, 0x6, 0x0, 0x4, 0x2a17, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, [0x18, 0xfffffffffffffffc, 0x3, 0x0, 0x33e, 0xfffffffffffffffd, 0x2, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4, 0x80000000, 0xfffffffffffffffd, 0x0, 0x93d, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2]}, 0x9, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xc090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) process_madvise$auto_MADV_PAGEOUT(r2, &(0x7f0000000380)={&(0x7f0000000100)="b0f8d378931a4bfbe30226b828ddff497a78371e06fe021bfada53aa9566bbfe34559f3892ebeb4371dce4448e5c9e8434f931fe9d26187311430f5243cff5733ac2683fa78f", 0x4}, 0xf846, 0x15, 0xc14) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) io_uring_setup$auto(0xffd, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0x8208ae63, 0x38) ioprio_set$auto(0x3, 0x0, 0x4b34) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100010004, 0x100000000, 0x0, 0x400000000001000, 0x2) setsockopt$auto_SO_DOMAIN(r1, 0xffff, 0x27, &(0x7f0000000000)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x7) close_range$auto(0x2, 0x8, 0x0) ftruncate$auto(r3, 0x1) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x14802, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 726.327037ms ago: executing program 2 (id=2347): msgctl$auto_IPC_STAT(0xd99, 0x2, 0x0) getsockopt$auto_SO_RCVTIMEO_OLD(0xffffffffffffffff, 0xffffffff, 0x14, &(0x7f00000003c0)='\x00\x00+\xa2\xc7\x92\x00\x00\x00\x00\x00\x00\x03\x90\xf9\xe8\x11\x80\a :w\xac[\xbb\xac\xe3\xe0\xff8g:\x04\x00\x00\x00\x00\x00\x00\x00=r\x03\x95\x87\xbaM\xd80=\x81\x8ez\xab\xc3^\xb0\x03Ijj\xc4\xf9\xe6\x84P\x15q\xaa\xc8\x03\xba\x8c\xe3\xc3r\xb8\x1b\x98\xe8\xbc\x11.\xd9A\xb3P\xfa\x04\x95\xfc*\v\xb8\xc5\x16Z\xb7\x82\xbc\x96o\xd2G\xf8\x0f`\xa1\x1f\xc6\xd6\xc5\xdcM\x17\x11\xd2\x12\x988\xa3`\xad[UI\xf7\xc7\xcc\x13XH\xc1\x02\x84$\x97;\xebM`\x7f\xe4\x8dbe\xd8\x901\x8e\'\x10\xf6`^\xd28Xk\x03\x8d\b\xbd\xe2d\\\x11w(\xc7D!,6\x01\x00\x9f\x8bxg\xe2\xfc~\x006\x17\x9b9?,\xd8\n\x82r\x12\xa9\xfd@\x90&\xd3l\xa7[\x9bx\xf7\xb9[m\x9a\xee\"\x9e\x81|\xa4\x8f5\xea\t\x02Axu\xe9io`\x81\xb5\x89\x01\xa0\xa8~]\xd8]\x14}\x8c\xacRc\r\xb7.\x7f\xb3\x85\xff\xf5\xb0\x11/\x80{\xab)\x05\xb3HHU\xcb\x00', 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYRESHEX=0x0, @ANYRES32=0x0, @ANYBLOB="000326bd7000fcdbdf2503000000790008805b4f2525b2dc3a73ec37e7122e6f0d55382854d419b883b7ed64bd3c7b9fb15273e78f030718751e0a22cc6cabcae114aa6448d0356183e1ca7c01536c5c6f37915b26a3ab02807fe932b8a415a581dcdc7840f91e231c001d800400d3800c002000f3000000002b3c0c7e9b52ba000000"], 0x100}, 0x1, 0x0, 0x0, 0x44041}, 0x42) r0 = syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x880125}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)={0x88, r0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x7}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_VERSION={0x8, 0x3, 0x4a7c}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x7}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x24, 0x1, '/sys/kernel/tracing/free_buffer\x00'}, @NLBL_MGMT_A_VERSION={0x8, 0x3, 0x7}]}, 0x88}}, 0x50) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x9, 0x80000, 0x0) mmap$auto(0x7, 0x400008, 0x1200400000000cd, 0x400049b72, 0xffffffffffffffff, 0x7ff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0xa, 0x1) socket(0xa, 0x1, 0x84) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000abdb) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x240007, 0x19) mmap$auto(0x0, 0x40, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x6, 0x3, 0x0, 0xa1) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) unshare$auto(0x40000080) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638828712, 0x0) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/free_buffer\x00', 0x4c000, 0xebff) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 254.642862ms ago: executing program 3 (id=2348): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x4) r1 = open(&(0x7f0000000040)='./file0\x00', 0x129001, 0x100) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004680), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_DEL(r2, &(0x7f00000049c0)={0x0, 0x0, &(0x7f0000004980)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000f6af0f8dbb5fd851b6b291c0a06d00", @ANYRES16=r3, @ANYBLOB="010026bd7000fedbdf25020000000c000480080008808592a023"], 0x20}, 0x1, 0x0, 0x0, 0x40040801}, 0x44000) sendmsg$auto_OVS_VPORT_CMD_DEL(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x14, r3, 0x10, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000001540)='/dev/audio1\x00\xf3g+\xf9Xr^\xec]4--\xb7=\xd6\xdfH|\x15\xb5X\x86<\x86F:]\xa7\x82\xc5\x0e\x1aq\xdd\xedu\xa5\x9b\xbc\xa8\xaaGR\xa2\r\xbb\xca\xb7\xfa\x103\x84\n\xd2\xd0S\x1e\r\x00\x04u\xc0\x9c\xafZ\x97\t?\x99\x9c\xb5l\x99\xfb\xb7Yn\n\xe13jD\"\xf3N\x17\xbb\xfa\xeaZ,f\xded\xd0(d0\xe2FF\xa8&\xaf u\xbb\xf5\xa3\x06\xf8\x84P\xdb\xa4\xab\x1f\xf9\x04\rQ\x9a\xf0\xf4\xd4\xa4/\xf7\x9em\x87\xda\x82\xadNR\x8a\xc3n1\xff\x81=\x8c3\x03~\xfd 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.250416][T12646] RSP: 002b:00007fd84838f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 491.250437][T12646] RAX: ffffffffffffffda RBX: 00007fd847815fa0 RCX: 00007fd84759bf79 [ 491.250452][T12646] RDX: 00004000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 491.250462][T12646] RBP: 00007fd8476327e0 R08: 0000000000000401 R09: 0000000000008000 [ 491.250474][T12646] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 491.250485][T12646] R13: 00007fd847816038 R14: 00007fd847815fa0 R15: 00007ffc067826e8 [ 491.250509][T12646] [ 491.531096][T12640] FAULT_INJECTION: forcing a failure. [ 491.531096][T12640] name failslab, interval 1, probability 0, space 0, times 0 [ 491.543947][T12640] CPU: 0 UID: 0 PID: 12640 Comm: syz.3.1624 Tainted: G U L syzkaller #0 PREEMPT(full) [ 491.543980][T12640] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 491.543988][T12640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 491.543999][T12640] Call Trace: [ 491.544006][T12640] [ 491.544014][T12640] dump_stack_lvl+0x100/0x190 [ 491.544044][T12640] should_fail_ex.cold+0x5/0xa [ 491.544071][T12640] should_failslab+0xc2/0x120 [ 491.544099][T12640] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 491.544128][T12640] ? __d_alloc+0x34/0xa80 [ 491.544159][T12640] __d_alloc+0x34/0xa80 [ 491.544189][T12640] d_alloc_pseudo+0x1c/0xc0 [ 491.544211][T12640] alloc_file_pseudo+0xcf/0x230 [ 491.544233][T12640] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 491.544253][T12640] ? alloc_fd+0x476/0x790 [ 491.544281][T12640] sock_alloc_file+0x50/0x210 [ 491.544310][T12640] __sys_socket+0x1c0/0x260 [ 491.544331][T12640] ? __pfx___sys_socket+0x10/0x10 [ 491.544358][T12640] __x64_sys_socket+0x72/0xb0 [ 491.544378][T12640] ? lockdep_hardirqs_on+0x78/0x100 [ 491.544405][T12640] do_syscall_64+0x106/0xf80 [ 491.544431][T12640] ? clear_bhb_loop+0x40/0x90 [ 491.544453][T12640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.544472][T12640] RIP: 0033:0x7f8cd179bf79 [ 491.544488][T12640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.544506][T12640] RSP: 002b:00007f8cd25f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 491.544524][T12640] RAX: ffffffffffffffda RBX: 00007f8cd1a15fa0 RCX: 00007f8cd179bf79 [ 491.544536][T12640] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000015 [ 491.544547][T12640] RBP: 00007f8cd18327e0 R08: 0000000000000000 R09: 0000000000000000 [ 491.544559][T12640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 491.544570][T12640] R13: 00007f8cd1a16038 R14: 00007f8cd1a15fa0 R15: 00007ffebf314908 [ 491.544592][T12640] [ 495.109631][T12672] netlink: Setting conntrack mark requires 'commit' flag. [ 495.838167][T12681] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 495.914730][T12681] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 495.924739][T12681] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 495.930111][T12681] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 496.387870][ T29] audit: type=1800 audit(2147483804.191:105): pid=12699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1641" name="dbroot" dev="configfs" ino=41231 res=0 errno=0 [ 497.121364][T12711] can: request_module (can-proto-4) failed. [ 497.247950][T12714] can: request_module (can-proto-4) failed. [ 497.366379][T12717] FAULT_INJECTION: forcing a failure. [ 497.366379][T12717] name failslab, interval 1, probability 0, space 0, times 0 [ 497.455903][T12717] CPU: 0 UID: 0 PID: 12717 Comm: syz.0.1644 Tainted: G U L syzkaller #0 PREEMPT(full) [ 497.455938][T12717] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 497.455946][T12717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 497.455958][T12717] Call Trace: [ 497.455965][T12717] [ 497.455974][T12717] dump_stack_lvl+0x100/0x190 [ 497.456006][T12717] should_fail_ex.cold+0x5/0xa [ 497.456027][T12717] ? lsm_blob_alloc+0x68/0x90 [ 497.456045][T12717] should_failslab+0xc2/0x120 [ 497.456074][T12717] __kmalloc_noprof+0xe0/0x850 [ 497.456097][T12717] ? down_write_nested+0x14f/0x200 [ 497.456127][T12717] lsm_blob_alloc+0x68/0x90 [ 497.456144][T12717] security_sb_alloc+0x25/0x240 [ 497.456166][T12717] alloc_super+0x24c/0xd20 [ 497.456192][T12717] ? __pfx_mqueue_fill_super+0x10/0x10 [ 497.456211][T12717] sget_fc+0x117/0xc70 [ 497.456234][T12717] ? __pfx_set_anon_super_fc+0x10/0x10 [ 497.456257][T12717] ? __pfx_mqueue_fill_super+0x10/0x10 [ 497.456276][T12717] get_tree_nodev+0x28/0x190 [ 497.456300][T12717] mqueue_get_tree+0xf1/0x130 [ 497.456320][T12717] vfs_get_tree+0x92/0x320 [ 497.456351][T12717] fc_mount_longterm+0x1a/0x270 [ 497.456377][T12717] mq_init_ns+0x482/0x820 [ 497.456402][T12717] copy_ipcs+0x3dd/0x7e0 [ 497.456426][T12717] create_new_namespaces+0x20a/0xac0 [ 497.456457][T12717] ? security_capable+0x80/0x260 [ 497.456480][T12717] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 497.456502][T12717] ksys_unshare+0x455/0xab0 [ 497.456526][T12717] ? __pfx_ksys_unshare+0x10/0x10 [ 497.456556][T12717] __x64_sys_unshare+0x31/0x40 [ 497.456578][T12717] do_syscall_64+0x106/0xf80 [ 497.456604][T12717] ? clear_bhb_loop+0x40/0x90 [ 497.456627][T12717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.456646][T12717] RIP: 0033:0x7f0983f9bf79 [ 497.456662][T12717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.456680][T12717] RSP: 002b:00007f0984d8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 497.456699][T12717] RAX: ffffffffffffffda RBX: 00007f0984215fa0 RCX: 00007f0983f9bf79 [ 497.456712][T12717] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 497.456723][T12717] RBP: 00007f09840327e0 R08: 0000000000000000 R09: 0000000000000000 [ 497.456735][T12717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 497.456746][T12717] R13: 00007f0984216038 R14: 00007f0984215fa0 R15: 00007ffe9320c1b8 [ 497.456770][T12717] [ 498.059108][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout [ 498.065232][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 498.072127][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 498.078387][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout [ 499.465524][T12747] netlink: 'syz.4.1651': attribute type 1 has an invalid length. [ 500.311365][T12767] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1652'. [ 500.397908][T12770] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1654'. [ 500.821620][T12772] can: request_module (can-proto-4) failed. [ 501.295205][ T29] audit: type=1800 audit(2147483809.101:106): pid=12792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1658" name="dbroot" dev="configfs" ino=41962 res=0 errno=0 [ 501.581368][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.587692][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.296976][T12825] ptp ptp0: delete virtual clock ptp3 [ 503.364849][T12825] ptp ptp0: delete virtual clock ptp2 [ 503.419532][T12825] ptp ptp0: guarantee physical clock free running [ 503.477554][T12828] ptp ptp0: delete virtual clock ptp1 [ 503.551479][T12828] ptp ptp0: only physical clock in use now [ 505.432151][T12858] snd_virmidi snd_virmidi.0: control 61678:131081:3:yŖ:4 is already present [ 505.544032][T12857] FAULT_INJECTION: forcing a failure. [ 505.544032][T12857] name failslab, interval 1, probability 0, space 0, times 0 [ 505.649423][T12857] CPU: 0 UID: 0 PID: 12857 Comm: syz.4.1672 Tainted: G U L syzkaller #0 PREEMPT(full) [ 505.649458][T12857] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 505.649466][T12857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 505.649477][T12857] Call Trace: [ 505.649485][T12857] [ 505.649493][T12857] dump_stack_lvl+0x100/0x190 [ 505.649527][T12857] should_fail_ex.cold+0x5/0xa [ 505.649551][T12857] should_failslab+0xc2/0x120 [ 505.649579][T12857] __kmalloc_cache_noprof+0x7a/0x6f0 [ 505.649600][T12857] ? snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 505.649629][T12857] snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 505.649654][T12857] ? __mutex_lock+0x26a/0x1b90 [ 505.649684][T12857] ? snd_pcm_oss_make_ready+0xcb/0x1b0 [ 505.649710][T12857] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 505.649734][T12857] ? __pfx___mutex_lock+0x10/0x10 [ 505.649769][T12857] ? __fsnotify_parent+0x2b4/0xca0 [ 505.649802][T12857] snd_pcm_oss_make_ready+0xeb/0x1b0 [ 505.649827][T12857] snd_pcm_oss_sync+0x1de/0x840 [ 505.649853][T12857] snd_pcm_oss_release+0x238/0x300 [ 505.649878][T12857] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 505.649900][T12857] __fput+0x3ff/0xb40 [ 505.649923][T12857] task_work_run+0x150/0x240 [ 505.649949][T12857] ? __pfx_task_work_run+0x10/0x10 [ 505.649980][T12857] exit_to_user_mode_loop+0x100/0x4a0 [ 505.650006][T12857] do_syscall_64+0x668/0xf80 [ 505.650031][T12857] ? clear_bhb_loop+0x40/0x90 [ 505.650054][T12857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.650073][T12857] RIP: 0033:0x7fa95859bf79 [ 505.650089][T12857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.650106][T12857] RSP: 002b:00007fa95939f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 505.650125][T12857] RAX: 0000000000000000 RBX: 00007fa958815fa0 RCX: 00007fa95859bf79 [ 505.650137][T12857] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 505.650147][T12857] RBP: 00007fa9586327e0 R08: 0000000000000000 R09: 0000000000000000 [ 505.650158][T12857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 505.650169][T12857] R13: 00007fa958816038 R14: 00007fa958815fa0 R15: 00007fff1f775228 [ 505.650191][T12857] [ 507.444365][T12882] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1676'. [ 507.560469][T12885] ptp ptp0: only physical clock in use now [ 508.207667][T12900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1683'. [ 508.495380][T12897] zswap: compressor ū not available [ 509.450505][T12916] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1684'. [ 509.533894][T12914] bond0: invalid ARP target specified [ 509.576608][T12917] FAULT_INJECTION: forcing a failure. [ 509.576608][T12917] name failslab, interval 1, probability 0, space 0, times 0 [ 509.697196][T12917] CPU: 0 UID: 0 PID: 12917 Comm: syz.2.1684 Tainted: G U L syzkaller #0 PREEMPT(full) [ 509.697232][T12917] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 509.697240][T12917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 509.697251][T12917] Call Trace: [ 509.697258][T12917] [ 509.697266][T12917] dump_stack_lvl+0x100/0x190 [ 509.697299][T12917] should_fail_ex.cold+0x5/0xa [ 509.697321][T12917] should_failslab+0xc2/0x120 [ 509.697350][T12917] __kmalloc_cache_noprof+0x7a/0x6f0 [ 509.697370][T12917] ? bpf_prog_store_orig_filter+0x7b/0x1d0 [ 509.697400][T12917] bpf_prog_store_orig_filter+0x7b/0x1d0 [ 509.697427][T12917] bpf_prog_create_from_user+0x1c3/0x2f0 [ 509.697457][T12917] ? __pfx_seccomp_check_filter+0x10/0x10 [ 509.697480][T12917] do_seccomp+0x7f7/0x2740 [ 509.697506][T12917] ? __pfx_do_seccomp+0x10/0x10 [ 509.697528][T12917] ? __x64_sys_openat+0x12d/0x210 [ 509.697550][T12917] ? xfd_validate_state+0x129/0x190 [ 509.697583][T12917] do_syscall_64+0x106/0xf80 [ 509.697608][T12917] ? clear_bhb_loop+0x40/0x90 [ 509.697631][T12917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.697650][T12917] RIP: 0033:0x7fd84759bf79 [ 509.697666][T12917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.697685][T12917] RSP: 002b:00007fd8457f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 509.697704][T12917] RAX: ffffffffffffffda RBX: 00007fd847816180 RCX: 00007fd84759bf79 [ 509.697716][T12917] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000000000000001 [ 509.697727][T12917] RBP: 00007fd8476327e0 R08: 0000000000000000 R09: 0000000000000000 [ 509.697738][T12917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.697749][T12917] R13: 00007fd847816218 R14: 00007fd847816180 R15: 00007ffc067826e8 [ 509.697777][T12917] [ 510.801191][T12916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 510.846886][T12916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.918932][T12916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 510.953601][T12916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 511.921761][T12951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1690'. [ 513.817688][T12971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1687'. [ 514.798556][T12981] FAULT_INJECTION: forcing a failure. [ 514.798556][T12981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.905148][T12964] Process accounting paused [ 514.960074][T12981] CPU: 0 UID: 0 PID: 12981 Comm: syz.4.1695 Tainted: G U L syzkaller #0 PREEMPT(full) [ 514.960108][T12981] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 514.960115][T12981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 514.960127][T12981] Call Trace: [ 514.960134][T12981] [ 514.960141][T12981] dump_stack_lvl+0x100/0x190 [ 514.960174][T12981] should_fail_ex.cold+0x5/0xa [ 514.960196][T12981] _copy_from_user+0x2e/0xd0 [ 514.960222][T12981] ____sys_sendmsg+0x1d1/0xc30 [ 514.960245][T12981] ? __pfx_____sys_sendmsg+0x10/0x10 [ 514.960274][T12981] ___sys_sendmsg+0x190/0x1e0 [ 514.960297][T12981] ? __pfx____sys_sendmsg+0x10/0x10 [ 514.960341][T12981] __sys_sendmsg+0x170/0x220 [ 514.960368][T12981] ? __pfx___sys_sendmsg+0x10/0x10 [ 514.960407][T12981] do_syscall_64+0x106/0xf80 [ 514.960434][T12981] ? clear_bhb_loop+0x40/0x90 [ 514.960456][T12981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.960476][T12981] RIP: 0033:0x7fa95859bf79 [ 514.960492][T12981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.960512][T12981] RSP: 002b:00007fa9567f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 514.960530][T12981] RAX: ffffffffffffffda RBX: 00007fa958816180 RCX: 00007fa95859bf79 [ 514.960543][T12981] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 514.960555][T12981] RBP: 00007fa9567f6090 R08: 0000000000000000 R09: 0000000000000000 [ 514.960565][T12981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.960576][T12981] R13: 00007fa958816218 R14: 00007fa958816180 R15: 00007fff1f775228 [ 514.960598][T12981] [ 516.533048][T12989] nfs4: Unknown parameter ' ' [ 516.630148][T12998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1700'. [ 516.819064][T12986] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1698'. [ 517.130802][T12986] : renamed from ip_vti0 (while UP) [ 517.366135][ T29] audit: type=1800 audit(2147483825.161:107): pid=13010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1702" name="dbroot" dev="configfs" ino=51046 res=0 errno=0 [ 520.990848][T13038] FAULT_INJECTION: forcing a failure. [ 520.990848][T13038] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 521.104566][T13021] kexec: Could not allocate control_code_buffer [ 521.256081][T13037] zswap: compressor ū not available [ 521.261617][T13040] Setting dangerous option i915.mitigations - tainting kernel [ 521.271896][T13038] CPU: 0 UID: 0 PID: 13038 Comm: syz.0.1707 Tainted: G U L syzkaller #0 PREEMPT(full) [ 521.271928][T13038] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 521.271935][T13038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 521.271947][T13038] Call Trace: [ 521.271953][T13038] [ 521.271961][T13038] dump_stack_lvl+0x100/0x190 [ 521.271992][T13038] should_fail_ex.cold+0x5/0xa [ 521.272014][T13038] _copy_to_iter+0x1f3/0x1720 [ 521.272044][T13038] ? __pfx__copy_to_iter+0x10/0x10 [ 521.272068][T13038] ? kernfs_seq_stop+0xcd/0x120 [ 521.272099][T13038] ? kernfs_put_active+0x93/0xe0 [ 521.272125][T13038] seq_read_iter+0xdab/0x1270 [ 521.272158][T13038] kernfs_fop_read_iter+0x46c/0x610 [ 521.272186][T13038] ? rw_verify_area+0xce/0x6d0 [ 521.272208][T13038] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 521.272237][T13038] vfs_read+0x825/0xb30 [ 521.272264][T13038] ? __pfx_vfs_read+0x10/0x10 [ 521.272302][T13038] ksys_read+0x12a/0x250 [ 521.272325][T13038] ? __pfx_ksys_read+0x10/0x10 [ 521.272355][T13038] do_syscall_64+0x106/0xf80 [ 521.272381][T13038] ? clear_bhb_loop+0x40/0x90 [ 521.272403][T13038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.272422][T13038] RIP: 0033:0x7f0983f9bf79 [ 521.272438][T13038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 521.272456][T13038] RSP: 002b:00007f0984d8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 521.272474][T13038] RAX: ffffffffffffffda RBX: 00007f0984215fa0 RCX: 00007f0983f9bf79 [ 521.272486][T13038] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000003 [ 521.272497][T13038] RBP: 00007f0984d8a090 R08: 0000000000000000 R09: 0000000000000000 [ 521.272507][T13038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.272517][T13038] R13: 00007f0984216038 R14: 00007f0984215fa0 R15: 00007ffe9320c1b8 [ 521.272540][T13038] [ 523.148833][T13049] can: request_module (can-proto-0) failed. [ 524.176076][T13066] ptp ptp0: only physical clock in use now [ 525.801975][T13090] ptp ptp0: only physical clock in use now [ 527.736015][T13117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1726'. [ 528.878489][ T29] audit: type=1800 audit(2147483836.681:108): pid=13137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1729" name="dbroot" dev="configfs" ino=57315 res=0 errno=0 [ 529.406527][T13140] can: request_module (can-proto-4) failed. [ 530.558886][T13168] FAULT_INJECTION: forcing a failure. [ 530.558886][T13168] name failslab, interval 1, probability 0, space 0, times 0 [ 530.679155][T13168] CPU: 0 UID: 0 PID: 13168 Comm: syz.4.1734 Tainted: G U L syzkaller #0 PREEMPT(full) [ 530.679189][T13168] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 530.679197][T13168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 530.679208][T13168] Call Trace: [ 530.679215][T13168] [ 530.679224][T13168] dump_stack_lvl+0x100/0x190 [ 530.679255][T13168] should_fail_ex.cold+0x5/0xa [ 530.679276][T13168] should_failslab+0xc2/0x120 [ 530.679304][T13168] __kmalloc_cache_noprof+0x7a/0x6f0 [ 530.679324][T13168] ? rds_cong_from_addr+0x50/0x540 [ 530.679351][T13168] rds_cong_from_addr+0x50/0x540 [ 530.679377][T13168] rds_cong_get_maps+0x21/0xe0 [ 530.679398][T13168] ? __ipv6_addr_type+0xe8/0x2e0 [ 530.679427][T13168] __rds_conn_create+0xa86/0x2590 [ 530.679468][T13168] ? __pfx___rds_conn_create+0x10/0x10 [ 530.679492][T13168] ? rcu_is_watching+0x12/0xc0 [ 530.679517][T13168] ? trace_kmalloc+0x101/0x130 [ 530.679543][T13168] ? lockdep_init_map_type+0x5c/0x250 [ 530.679569][T13168] rds_conn_create_outgoing+0x44/0x60 [ 530.679598][T13168] rds_sendmsg+0x10bc/0x33d0 [ 530.679626][T13168] ? __pfx_rds_sendmsg+0x10/0x10 [ 530.679648][T13168] ? __pfx_aa_sk_perm+0x10/0x10 [ 530.679684][T13168] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 530.679707][T13168] ? ____sys_sendmsg+0xa54/0xc30 [ 530.679726][T13168] ____sys_sendmsg+0xa54/0xc30 [ 530.679754][T13168] ? __pfx_____sys_sendmsg+0x10/0x10 [ 530.679783][T13168] ___sys_sendmsg+0x190/0x1e0 [ 530.679805][T13168] ? __pfx____sys_sendmsg+0x10/0x10 [ 530.679851][T13168] __sys_sendmsg+0x170/0x220 [ 530.679877][T13168] ? __pfx___sys_sendmsg+0x10/0x10 [ 530.679916][T13168] do_syscall_64+0x106/0xf80 [ 530.679942][T13168] ? clear_bhb_loop+0x40/0x90 [ 530.679965][T13168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.679984][T13168] RIP: 0033:0x7fa95859bf79 [ 530.680001][T13168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.680019][T13168] RSP: 002b:00007fa9567f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 530.680038][T13168] RAX: ffffffffffffffda RBX: 00007fa958816180 RCX: 00007fa95859bf79 [ 530.680050][T13168] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 530.680060][T13168] RBP: 00007fa9567f6090 R08: 0000000000000000 R09: 0000000000000000 [ 530.680071][T13168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.680082][T13168] R13: 00007fa958816218 R14: 00007fa958816180 R15: 00007fff1f775228 [ 530.680105][T13168] [ 531.728011][T13173] ptp ptp0: only physical clock in use now [ 532.337489][T13179] tipc: Started in network mode [ 532.488817][T13179] tipc: Node identity ee00, cluster identity 4711 [ 532.557191][T13179] tipc: Node number set to 60928 [ 532.770130][T13190] FAULT_INJECTION: forcing a failure. [ 532.770130][T13190] name failslab, interval 1, probability 0, space 0, times 0 [ 532.893675][T13190] CPU: 0 UID: 0 PID: 13190 Comm: syz.0.1739 Tainted: G U L syzkaller #0 PREEMPT(full) [ 532.893709][T13190] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 532.893717][T13190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 532.893728][T13190] Call Trace: [ 532.893735][T13190] [ 532.893743][T13190] dump_stack_lvl+0x100/0x190 [ 532.893783][T13190] should_fail_ex.cold+0x5/0xa [ 532.893804][T13190] should_failslab+0xc2/0x120 [ 532.893832][T13190] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 532.893855][T13190] ? alloc_empty_file+0x55/0x1c0 [ 532.893879][T13190] alloc_empty_file+0x55/0x1c0 [ 532.893898][T13190] alloc_file_pseudo+0x13a/0x230 [ 532.893919][T13190] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 532.893938][T13190] ? alloc_fd+0x476/0x790 [ 532.893965][T13190] ? do_raw_spin_unlock+0x145/0x1e0 [ 532.893993][T13190] __anon_inode_getfile+0xe8/0x280 [ 532.894028][T13190] anon_inode_getfile_fmode+0x37/0xa0 [ 532.894059][T13190] __do_sys_fanotify_init+0xa79/0xe50 [ 532.894086][T13190] do_syscall_64+0x106/0xf80 [ 532.894113][T13190] ? clear_bhb_loop+0x40/0x90 [ 532.894136][T13190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.894158][T13190] RIP: 0033:0x7f0983f9bf79 [ 532.894174][T13190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.894192][T13190] RSP: 002b:00007f0984d8a028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 532.894212][T13190] RAX: ffffffffffffffda RBX: 00007f0984215fa0 RCX: 00007f0983f9bf79 [ 532.894224][T13190] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 532.894235][T13190] RBP: 00007f09840327e0 R08: 0000000000000000 R09: 0000000000000000 [ 532.894246][T13190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.894257][T13190] R13: 00007f0984216038 R14: 00007f0984215fa0 R15: 00007ffe9320c1b8 [ 532.894279][T13190] [ 533.502052][ T29] audit: type=1800 audit(2147483841.251:109): pid=13193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1740" name="dbroot" dev="configfs" ino=58542 res=0 errno=0 [ 533.940090][T13201] ptp ptp0: only physical clock in use now [ 534.230038][T13206] bcache: register_bcache() error : failed to open device [ 534.488064][T13214] FAULT_INJECTION: forcing a failure. [ 534.488064][T13214] name failslab, interval 1, probability 0, space 0, times 0 [ 534.655620][T13214] CPU: 0 UID: 0 PID: 13214 Comm: syz.4.1745 Tainted: G U L syzkaller #0 PREEMPT(full) [ 534.655655][T13214] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 534.655663][T13214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 534.655674][T13214] Call Trace: [ 534.655682][T13214] [ 534.655690][T13214] dump_stack_lvl+0x100/0x190 [ 534.655738][T13214] should_fail_ex.cold+0x5/0xa [ 534.655761][T13214] should_failslab+0xc2/0x120 [ 534.655790][T13214] __kmalloc_cache_noprof+0x7a/0x6f0 [ 534.655812][T13214] ? sctp_endpoint_new+0xfc/0xb20 [ 534.655841][T13214] ? __debug_object_init+0x2de/0x3d0 [ 534.655866][T13214] sctp_endpoint_new+0xfc/0xb20 [ 534.655896][T13214] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 534.655926][T13214] ? lockdep_init_map_type+0x5c/0x250 [ 534.655949][T13214] ? lockdep_init_map_type+0x5c/0x250 [ 534.655971][T13214] ? lockdep_init_map_type+0x5c/0x250 [ 534.655997][T13214] sctp_init_sock+0xe2b/0x1300 [ 534.656024][T13214] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 534.656059][T13214] sctp_v6_init_sock+0x16/0x70 [ 534.656085][T13214] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 534.656112][T13214] inet6_create+0xb21/0x12b0 [ 534.656141][T13214] ? inet6_create+0x7f/0x12b0 [ 534.656169][T13214] __sock_create+0x339/0x860 [ 534.656195][T13214] __sys_socket+0x14d/0x260 [ 534.656216][T13214] ? __pfx___sys_socket+0x10/0x10 [ 534.656244][T13214] __x64_sys_socket+0x72/0xb0 [ 534.656264][T13214] ? lockdep_hardirqs_on+0x78/0x100 [ 534.656298][T13214] do_syscall_64+0x106/0xf80 [ 534.656323][T13214] ? clear_bhb_loop+0x40/0x90 [ 534.656345][T13214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.656364][T13214] RIP: 0033:0x7fa95859bf79 [ 534.656380][T13214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.656399][T13214] RSP: 002b:00007fa95937e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 534.656420][T13214] RAX: ffffffffffffffda RBX: 00007fa958816090 RCX: 00007fa95859bf79 [ 534.656433][T13214] RDX: 0000000000000084 RSI: 0000000000000801 RDI: 000000000000000a [ 534.656446][T13214] RBP: 00007fa9586327e0 R08: 0000000000000000 R09: 0000000000000000 [ 534.656458][T13214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 534.656469][T13214] R13: 00007fa958816128 R14: 00007fa958816090 R15: 00007fff1f775228 [ 534.656492][T13214] [ 536.033078][ T29] audit: type=1800 audit(2147483843.841:110): pid=13236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1751" name="dbroot" dev="configfs" ino=59783 res=0 errno=0 [ 536.250516][T13238] ptp ptp0: only physical clock in use now [ 536.855515][T13248] Unable to find swap-space signature [ 537.095323][T13258] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(51817136.321043237.4055731454), cmd(3) [ 537.815760][T13274] netlink: 'syz.3.1759': attribute type 11 has an invalid length. [ 537.892117][T13274] netlink: 'syz.3.1759': attribute type 11 has an invalid length. [ 537.955412][T13274] netlink: 'syz.3.1759': attribute type 11 has an invalid length. [ 538.072457][T13268] zswap: compressor not available [ 538.541850][T13287] ptp ptp0: new virtual clock ptp1 [ 538.614872][T13287] ptp ptp0: new virtual clock ptp2 [ 538.682598][T13287] ptp ptp0: new virtual clock ptp3 [ 538.750444][T13287] ptp ptp0: guarantee physical clock free running [ 540.073836][ T7428] netdevsim netdevsim100 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.206563][ T29] audit: type=1326 audit(2147483849.011:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13325 comm="syz.4.1767" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa95859bf79 code=0x0 [ 541.326506][T13332] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 541.326506][T13332] The task syz.4.1767 (13332) triggered the difference, watch for misbehavior. [ 543.322066][T13360] ptp ptp0: guarantee physical clock free running [ 543.369039][T13362] FAULT_INJECTION: forcing a failure. [ 543.369039][T13362] name failslab, interval 1, probability 0, space 0, times 0 [ 543.452597][T13362] CPU: 0 UID: 0 PID: 13362 Comm: syz.4.1772 Tainted: G U L syzkaller #0 PREEMPT(full) [ 543.452629][T13362] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 543.452637][T13362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 543.452648][T13362] Call Trace: [ 543.452654][T13362] [ 543.452662][T13362] dump_stack_lvl+0x100/0x190 [ 543.452692][T13362] should_fail_ex.cold+0x5/0xa [ 543.452713][T13362] should_failslab+0xc2/0x120 [ 543.452741][T13362] __kmalloc_cache_noprof+0x7a/0x6f0 [ 543.452762][T13362] ? rds_cong_from_addr+0x50/0x540 [ 543.452790][T13362] rds_cong_from_addr+0x50/0x540 [ 543.452816][T13362] rds_cong_get_maps+0x49/0xe0 [ 543.452838][T13362] ? __ipv6_addr_type+0xe8/0x2e0 [ 543.452860][T13362] __rds_conn_create+0xa86/0x2590 [ 543.452893][T13362] ? __pfx___rds_conn_create+0x10/0x10 [ 543.452918][T13362] ? rcu_is_watching+0x12/0xc0 [ 543.452944][T13362] ? trace_kmalloc+0x101/0x130 [ 543.452979][T13362] ? lockdep_init_map_type+0x5c/0x250 [ 543.453005][T13362] rds_conn_create_outgoing+0x44/0x60 [ 543.453035][T13362] rds_sendmsg+0x10bc/0x33d0 [ 543.453063][T13362] ? __pfx_rds_sendmsg+0x10/0x10 [ 543.453085][T13362] ? __pfx_aa_sk_perm+0x10/0x10 [ 543.453115][T13362] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 543.453138][T13362] ? ____sys_sendmsg+0xa54/0xc30 [ 543.453161][T13362] ____sys_sendmsg+0xa54/0xc30 [ 543.453183][T13362] ? __pfx_____sys_sendmsg+0x10/0x10 [ 543.453212][T13362] ___sys_sendmsg+0x190/0x1e0 [ 543.453233][T13362] ? __pfx____sys_sendmsg+0x10/0x10 [ 543.453280][T13362] __sys_sendmsg+0x170/0x220 [ 543.453306][T13362] ? __pfx___sys_sendmsg+0x10/0x10 [ 543.453345][T13362] do_syscall_64+0x106/0xf80 [ 543.453371][T13362] ? clear_bhb_loop+0x40/0x90 [ 543.453393][T13362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.453412][T13362] RIP: 0033:0x7fa95859bf79 [ 543.453427][T13362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.453445][T13362] RSP: 002b:00007fa9567f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 543.453463][T13362] RAX: ffffffffffffffda RBX: 00007fa958816180 RCX: 00007fa95859bf79 [ 543.453474][T13362] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 543.453485][T13362] RBP: 00007fa9567f6090 R08: 0000000000000000 R09: 0000000000000000 [ 543.453495][T13362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 543.453506][T13362] R13: 00007fa958816218 R14: 00007fa958816180 R15: 00007fff1f775228 [ 543.453528][T13362] [ 545.698752][T13381] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1778'. [ 545.869062][T13378] zswap: compressor ū not available [ 546.989198][T13405] ptp ptp0: guarantee physical clock free running [ 547.036276][T13381] Process accounting resumed [ 547.640116][ T29] audit: type=1800 audit(2147483855.451:112): pid=13414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1786" name="dbroot" dev="configfs" ino=66181 res=0 errno=0 [ 550.599224][T13447] synth uevent: /devices/virtual/tty/ttywc: unknown uevent action string [ 550.683025][T13447] tty ttywc: uevent: failed to send synthetic uevent: -22 [ 551.280065][T13452] ptp ptp0: guarantee physical clock free running [ 551.933017][ T29] audit: type=1800 audit(2147483859.741:113): pid=13462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1796" name="dbroot" dev="configfs" ino=68996 res=0 errno=0 [ 553.365199][T13475] scsi_strcpy_devinfo: vendor string 'ķŁ/&c˛Ą~n] ņ | [ 553.365199][T13475] MÅ' is too long [ 553.463086][T13475] scsi_strcpy_devinfo: model string '’Dd5‚ ÕK€2bŪ [ 553.463086][T13475] ††½W¯Ļõ›ś «ś' is too long [ 555.281591][T13501] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1804'. [ 556.453365][T13507] snd_aloop snd_aloop.0: Parsing timer source 'emote_address st tx_queue rx_queue tr tm' failed with -22 [ 558.642429][T13535] blktrace: Concurrent blktraces are not allowed on loop2 [ 563.022303][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.028841][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.602612][T13641] futex_wake_op: syz.4.1838 tries to shift op by -2048; fix this program [ 565.671945][T13641] futex_wake_op: syz.4.1838 tries to shift op by -2048; fix this program [ 565.737378][T13642] 0x000000000001-0x000000020000 : "" [ 565.908885][T13642] ftl_cs: FTL header corrupt! [ 566.519937][ T29] audit: type=1800 audit(2147483874.331:114): pid=13653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1841" name="dbroot" dev="configfs" ino=78200 res=0 errno=0 [ 567.474011][T13670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1845'. [ 568.008177][T13676] snd_aloop snd_aloop.0: Parsing timer source 'emote_address st tx_queue rx_queue tr tm' failed with -22 [ 568.806816][T13686] zswap: compressor ¸„1Ўø not available [ 570.372199][T13707] ptp ptp0: guarantee physical clock free running [ 573.318387][T13740] snd_aloop snd_aloop.0: Parsing timer source 'emote_address st tx_queue rx_queue tr tm' failed with -22 [ 574.348374][T13755] can0: slcan on pty83. [ 574.942883][T13769] futex_wake_op: syz.4.1865 tries to shift op by -2048; fix this program [ 574.989754][T13770] kvm: kvm [13763]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000012) [ 575.042375][T13769] futex_wake_op: syz.4.1865 tries to shift op by -2048; fix this program [ 575.104717][T13775] 0x000000000001-0x000000020000 : "" [ 575.120534][T13755] can0 (unregistered): slcan off pty83. [ 575.171893][T13775] ftl_cs: FTL header corrupt! [ 575.996596][T13794] netlink: 146 bytes leftover after parsing attributes in process `syz.4.1868'. [ 576.286894][T13798] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1870'. [ 576.357688][T13798] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1870'. [ 576.471146][T13798] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1870'. [ 578.005310][T13815] Process accounting paused [ 578.210609][T13839] snd_aloop snd_aloop.0: Parsing timer source 'emote_address st tx_queue rx_queue tr tm' failed with -22 [ 578.803711][ T29] audit: type=1800 audit(2147483886.611:115): pid=13859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1879" name="dbroot" dev="configfs" ino=85250 res=0 errno=0 [ 580.608886][T13881] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1882'. [ 581.836895][ T29] audit: type=1806 audit(2147483889.641:116): xattr="" res=-22 [ 582.951468][ T29] audit: type=1800 audit(2147483890.761:117): pid=13899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1888" name="dbroot" dev="configfs" ino=87279 res=0 errno=0 [ 584.835640][T13924] ptp ptp0: delete virtual clock ptp3 [ 584.900314][T13924] ptp ptp0: delete virtual clock ptp2 [ 584.950440][T13924] ptp ptp0: guarantee physical clock free running [ 584.991360][T13925] ptp ptp0: guarantee physical clock free running [ 585.020073][T11135] Bluetooth: hci1: command 0x0c1a tx timeout [ 585.026748][T13893] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 585.871806][T13893] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 585.910476][T13893] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 585.952809][T13893] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 586.789930][T13940] snd_aloop snd_aloop.0: Parsing timer source 'emote_address st tx_queue rx_queue tr tm' failed with -22 [ 587.177934][T11135] Bluetooth: hci2: command 0x0c1a tx timeout [ 587.868212][T13959] futex_wake_op: syz.4.1901 tries to shift op by -2048; fix this program [ 587.876804][T13959] futex_wake_op: syz.4.1901 tries to shift op by -2048; fix this program [ 587.971287][T13958] ptp ptp0: new virtual clock ptp2 [ 587.981399][T11135] Bluetooth: hci0: command 0x0c1a tx timeout [ 587.987428][T11135] Bluetooth: hci3: command 0x0c1a tx timeout [ 588.056083][T13959] 0x000000000001-0x000000020000 : "" [ 588.061849][T13958] ptp ptp0: new virtual clock ptp3 [ 588.097653][T13958] ptp ptp0: guarantee physical clock free running [ 588.119148][T13959] ftl_cs: FTL header corrupt! [ 588.767662][T13973] snd_aloop snd_aloop.0: Parsing timer source 'emote_address st tx_queue rx_queue tr tm' failed with -22 [ 588.914829][T11135] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 588.914858][T11135] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 588.930725][T11135] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 588.930751][T11135] Bluetooth: hci0: adv larger than maximum supported [ 588.938352][T11135] Bluetooth: hci0: adv larger than maximum supported [ 588.945281][T11135] Bluetooth: hci0: Malformed LE Event: 0x0d [ 589.449261][T13983] i2c i2c-0: delete_device: Can't find device in list [ 590.349210][T13996] syz.2.1909(13996): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 593.788388][ T29] audit: type=1326 audit(2147483901.601:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14026 comm="syz.2.1916" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd84759bf79 code=0x0 [ 593.912407][T14035] FAULT_INJECTION: forcing a failure. [ 593.912407][T14035] name failslab, interval 1, probability 0, space 0, times 0 [ 593.998999][T14035] CPU: 0 UID: 0 PID: 14035 Comm: syz.4.1919 Tainted: G U L syzkaller #0 PREEMPT(full) [ 593.999035][T14035] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 593.999043][T14035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 593.999054][T14035] Call Trace: [ 593.999060][T14035] [ 593.999068][T14035] dump_stack_lvl+0x100/0x190 [ 593.999101][T14035] should_fail_ex.cold+0x5/0xa [ 593.999123][T14035] should_failslab+0xc2/0x120 [ 593.999153][T14035] __kmalloc_cache_noprof+0x7a/0x6f0 [ 593.999173][T14035] ? rfkill_fop_open+0x1b6/0x750 [ 593.999195][T14035] ? mark_held_locks+0x40/0x70 [ 593.999222][T14035] rfkill_fop_open+0x1b6/0x750 [ 593.999248][T14035] ? __pfx_rfkill_fop_open+0x10/0x10 [ 593.999273][T14035] misc_open+0x26d/0x450 [ 593.999299][T14035] ? __pfx_misc_open+0x10/0x10 [ 593.999323][T14035] chrdev_open+0x234/0x6a0 [ 593.999359][T14035] ? __pfx_apparmor_file_open+0x10/0x10 [ 593.999383][T14035] ? __pfx_chrdev_open+0x10/0x10 [ 593.999412][T14035] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 593.999446][T14035] do_dentry_open+0x6d8/0x1660 [ 593.999473][T14035] ? __pfx_chrdev_open+0x10/0x10 [ 593.999506][T14035] vfs_open+0x82/0x3f0 [ 593.999529][T14035] path_openat+0x208c/0x31a0 [ 593.999564][T14035] ? __pfx_path_openat+0x10/0x10 [ 593.999601][T14035] do_file_open+0x20e/0x430 [ 593.999630][T14035] ? __pfx_do_file_open+0x10/0x10 [ 593.999678][T14035] ? alloc_fd+0x476/0x790 [ 593.999707][T14035] ? do_getname+0x191/0x390 [ 593.999728][T14035] do_sys_openat2+0x10d/0x1e0 [ 593.999749][T14035] ? __pfx_do_sys_openat2+0x10/0x10 [ 593.999771][T14035] ? __fget_files+0x21f/0x3d0 [ 593.999801][T14035] __x64_sys_openat+0x12d/0x210 [ 593.999823][T14035] ? __pfx___x64_sys_openat+0x10/0x10 [ 593.999853][T14035] do_syscall_64+0x106/0xf80 [ 593.999879][T14035] ? clear_bhb_loop+0x40/0x90 [ 593.999902][T14035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.999921][T14035] RIP: 0033:0x7fa95859bf79 [ 593.999937][T14035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 593.999955][T14035] RSP: 002b:00007fa95939f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 593.999973][T14035] RAX: ffffffffffffffda RBX: 00007fa958815fa0 RCX: 00007fa95859bf79 [ 593.999985][T14035] RDX: 0000000000000000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 593.999997][T14035] RBP: 00007fa9586327e0 R08: 0000000000000000 R09: 0000000000000000 [ 594.000008][T14035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 594.000018][T14035] R13: 00007fa958816038 R14: 00007fa958815fa0 R15: 00007fff1f775228 [ 594.000043][T14035] [ 594.738701][ T29] audit: type=1800 audit(2147483902.491:119): pid=14045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1921" name="dbroot" dev="configfs" ino=93444 res=0 errno=0 [ 594.968610][T14048] ptp ptp0: guarantee physical clock free running [ 597.371988][T14075] zswap: compressor ¸„1Ўø not available [ 597.692482][ T29] audit: type=1800 audit(2147483905.501:120): pid=14083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1931" name="dbroot" dev="configfs" ino=95064 res=0 errno=0 [ 598.537821][ T29] audit: type=1326 audit(2147483906.341:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14084 comm="syz.3.1932" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8cd179bf79 code=0x0 [ 600.510310][T14103] snd_aloop snd_aloop.0: Parsing timer source 'emote_address st tx_queue rx_queue tr tm' failed with -22 [ 600.943073][T14118] ptp ptp0: guarantee physical clock free running [ 601.595069][T14123] zswap: compressor ¸„1Ўø not available [ 601.813117][ T29] audit: type=1800 audit(2147483909.621:122): pid=14132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1942" name="dbroot" dev="configfs" ino=97647 res=0 errno=0 [ 602.007563][T14138] netlink: 'syz.2.1944': attribute type 1 has an invalid length. [ 602.089810][T14138] netlink: 322 bytes leftover after parsing attributes in process `syz.2.1944'. [ 602.194732][T14140] snd_aloop snd_aloop.0: Parsing timer source 'emote_address st tx_queue rx_queue tr tm' failed with -22 [ 603.328457][ T29] audit: type=1326 audit(2147483911.141:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14151 comm="syz.2.1946" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd84759bf79 code=0x0 [ 604.275111][T14174] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 605.042903][T14181] zswap: compressor ¸„1Ўø not available [ 605.324682][T14195] snd_aloop snd_aloop.0: Parsing timer source 'emote_address st tx_queue rx_queue tr tm' failed with -22 [ 607.718314][T14234] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1963'. [ 610.852860][T14207] Process accounting resumed [ 611.230522][T14262] ptp ptp0: guarantee physical clock free running [ 611.684680][T14256] snd_aloop snd_aloop.0: Parsing timer source 'emote_address st tx_queue rx_queue tr tm' failed with -22 [ 612.192286][ T29] audit: type=1326 audit(2147483920.001:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14269 comm="syz.3.1972" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8cd179bf79 code=0x0 [ 612.928377][T14281] nbd: must specify a device to reconfigure [ 613.762755][T14290] ptp ptp0: guarantee physical clock free running [ 613.818753][T14294] ptp ptp0: guarantee physical clock free running [ 614.892725][ T29] audit: type=1326 audit(2147483922.691:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14317 comm="syz.3.1984" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8cd179bf79 code=0x0 [ 615.264271][T14340] futex_wake_op: syz.0.1986 tries to shift op by -2048; fix this program [ 615.335149][T14340] futex_wake_op: syz.0.1986 tries to shift op by -2048; fix this program [ 615.396828][T14343] 0x000000000001-0x000000020000 : "" [ 615.459881][T14343] ftl_cs: FTL header corrupt! [ 615.816527][ T29] audit: type=1326 audit(2147483923.601:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14341 comm="syz.4.1987" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa95859bf79 code=0x0 [ 616.075686][T14346] snd_aloop snd_aloop.0: Parsing timer source 'emote_address st tx_queue rx_queue tr tm' failed with -22 [ 616.350406][T14353] Ā: entered promiscuous mode [ 621.042619][T14421] futex_wake_op: syz.2.2003 tries to shift op by -2048; fix this program [ 624.305451][T14470] ptp ptp0: delete virtual clock ptp3 [ 624.406292][T14470] ptp ptp0: delete virtual clock ptp2 [ 624.464136][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.482006][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.500842][T14326] sl0: compressed packet ignored [ 624.568806][T14470] ptp ptp0: guarantee physical clock free running [ 624.816478][T14478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2011'. [ 624.997445][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c69c000: rx timeout, send abort [ 625.498472][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c69c000: abort rx timeout. Force session deactivation [ 625.532401][T14490] futex_wake_op: syz.2.2013 tries to shift op by -2048; fix this program [ 626.470486][ T29] audit: type=1326 audit(2147483934.271:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14489 comm="syz.4.2014" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa95859bf79 code=0x0 [ 626.596745][T14498] snd_aloop snd_aloop.0: Parsing timer source 'emote_address st tx_queue rx_queue tr tm' failed with -22 [ 626.597209][T14509] snd_aloop snd_aloop.0: Parsing timer source 'emote_address st tx_queue rx_queue tr tm' failed with -22 [ 629.070579][T14529] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 629.496600][T14531] zswap: compressor ¸„1Ўø not available [ 631.127879][ T29] audit: type=1326 audit(2147483938.931:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14548 comm="syz.4.2026" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa95859bf79 code=0x0 [ 635.535421][T14577] FAULT_INJECTION: forcing a failure. [ 635.535421][T14577] name failslab, interval 1, probability 0, space 0, times 0 [ 635.862556][T14577] CPU: 0 UID: 0 PID: 14577 Comm: syz.4.2031 Tainted: G U L syzkaller #0 PREEMPT(full) [ 635.862592][T14577] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 635.862599][T14577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 635.862610][T14577] Call Trace: [ 635.862617][T14577] [ 635.862625][T14577] dump_stack_lvl+0x100/0x190 [ 635.862657][T14577] should_fail_ex.cold+0x5/0xa [ 635.862679][T14577] ? tomoyo_encode2+0xfb/0x3c0 [ 635.862706][T14577] should_failslab+0xc2/0x120 [ 635.862735][T14577] __kmalloc_noprof+0xe0/0x850 [ 635.862758][T14577] ? rcu_is_watching+0x12/0xc0 [ 635.862789][T14577] tomoyo_encode2+0xfb/0x3c0 [ 635.862820][T14577] tomoyo_encode+0x29/0x50 [ 635.862846][T14577] tomoyo_realpath_from_path+0x18c/0x690 [ 635.862880][T14577] tomoyo_check_open_permission+0x2af/0x3c0 [ 635.862906][T14577] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 635.862952][T14577] ? do_raw_spin_lock+0x128/0x260 [ 635.862988][T14577] ? path_get+0x61/0x80 [ 635.863019][T14577] tomoyo_file_open+0x6b/0x90 [ 635.863040][T14577] security_file_open+0xb5/0x1e0 [ 635.863068][T14577] do_dentry_open+0x5aa/0x1660 [ 635.863096][T14577] ? security_inode_permission+0xbf/0x250 [ 635.863125][T14577] vfs_open+0x82/0x3f0 [ 635.863148][T14577] path_openat+0x208c/0x31a0 [ 635.863183][T14577] ? __pfx_path_openat+0x10/0x10 [ 635.863219][T14577] do_file_open+0x20e/0x430 [ 635.863247][T14577] ? __pfx_do_file_open+0x10/0x10 [ 635.863290][T14577] ? alloc_fd+0x476/0x790 [ 635.863318][T14577] ? do_getname+0x191/0x390 [ 635.863339][T14577] do_sys_openat2+0x10d/0x1e0 [ 635.863360][T14577] ? __pfx_do_sys_openat2+0x10/0x10 [ 635.863382][T14577] ? __x64_sys_close_range+0x2d9/0x5d0 [ 635.863415][T14577] __x64_sys_openat+0x12d/0x210 [ 635.863436][T14577] ? __pfx___x64_sys_openat+0x10/0x10 [ 635.863466][T14577] do_syscall_64+0x106/0xf80 [ 635.863492][T14577] ? clear_bhb_loop+0x40/0x90 [ 635.863515][T14577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.863534][T14577] RIP: 0033:0x7fa95859bf79 [ 635.863550][T14577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.863568][T14577] RSP: 002b:00007fa95937e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 635.863592][T14577] RAX: ffffffffffffffda RBX: 00007fa958816090 RCX: 00007fa95859bf79 [ 635.863604][T14577] RDX: 0000000000000200 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 635.863615][T14577] RBP: 00007fa9586327e0 R08: 0000000000000000 R09: 0000000000000000 [ 635.863626][T14577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 635.863637][T14577] R13: 00007fa958816128 R14: 00007fa958816090 R15: 00007fff1f775228 [ 635.863661][T14577] [ 636.818004][T14577] ERROR: Out of memory at tomoyo_realpath_from_path. [ 637.221620][T14588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2034'. [ 637.388623][T14591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2034'. [ 640.147074][T14631] ptp ptp0: guarantee physical clock free running [ 640.788074][T14637] futex_wake_op: syz.0.2044 tries to shift op by -2048; fix this program [ 640.949906][T14637] futex_wake_op: syz.0.2044 tries to shift op by -2048; fix this program [ 641.008225][T14642] 0x000000000001-0x000000020000 : "" [ 641.179410][T14642] ftl_cs: FTL header corrupt! [ 641.517570][T14632] Process accounting paused [ 642.897197][T14664] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2048'. [ 643.797795][ T29] audit: type=1326 audit(2147483951.601:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14669 comm="syz.0.2050" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0983f9bf79 code=0x0 [ 644.353497][T14686] ptp ptp0: guarantee physical clock free running [ 644.405776][T14686] ptp ptp0: guarantee physical clock free running [ 647.909694][T11135] Bluetooth: hci0: unexpected event 0x3e length: 508 > 260 [ 647.909725][T11135] Bluetooth: hci0: unexpected subevent 0x02 length: 507 > 260 [ 647.925969][T11135] Bluetooth: hci0: Dropping invalid advertising data [ 647.932818][T11135] Bluetooth: hci0: unknown advertising packet type: 0xe9 [ 650.334257][T14745] HfR: entered promiscuous mode [ 651.230751][T14772] netlink: 472 bytes leftover after parsing attributes in process `syz.4.2066'. [ 651.322169][T14772] snd_aloop snd_aloop.0: Parsing timer source 'emote_address st tx_queue rx_queue tr tm' failed with -22 [ 652.248055][ T29] audit: type=1326 audit(2147483960.051:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14777 comm="syz.4.2068" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa95859bf79 code=0x0 [ 652.569536][T14784] Invalid ELF header magic: != ELF [ 653.370287][T14788] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2069'. [ 655.301302][T14805] snd_aloop snd_aloop.0: Parsing timer source 'emote_address st tx_queue rx_queue tr tm' failed with -22 [ 658.093813][ T29] audit: type=1326 audit(2147483965.901:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14828 comm="syz.0.2079" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0983f9bf79 code=0x0 [ 658.246404][T14834] FAULT_INJECTION: forcing a failure. [ 658.246404][T14834] name failslab, interval 1, probability 0, space 0, times 0 [ 658.288027][T14834] CPU: 0 UID: 0 PID: 14834 Comm: syz.4.2080 Tainted: G U L syzkaller #0 PREEMPT(full) [ 658.288064][T14834] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 658.288071][T14834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 658.288082][T14834] Call Trace: [ 658.288090][T14834] [ 658.288098][T14834] dump_stack_lvl+0x100/0x190 [ 658.288131][T14834] should_fail_ex.cold+0x5/0xa [ 658.288155][T14834] should_failslab+0xc2/0x120 [ 658.288184][T14834] __kmalloc_cache_noprof+0x7a/0x6f0 [ 658.288205][T14834] ? kobject_uevent_env+0x263/0x18b0 [ 658.288226][T14834] ? kernfs_remove_by_name_ns+0xd5/0xf0 [ 658.288258][T14834] kobject_uevent_env+0x263/0x18b0 [ 658.288283][T14834] ? kernfs_remove_by_name_ns+0x9f/0xf0 [ 658.288312][T14834] __kobject_del+0x168/0x220 [ 658.288332][T14834] kobject_put+0x348/0x640 [ 658.288352][T14834] net_rx_queue_update_kobjects+0x544/0x760 [ 658.288391][T14834] netdev_unregister_kobject+0x154/0x540 [ 658.288409][T14834] ? rtmsg_ifinfo_send+0xcc/0x110 [ 658.288430][T14834] unregister_netdevice_many_notify+0x1817/0x2580 [ 658.288467][T14834] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 658.288507][T14834] unregister_netdevice_queue+0x30b/0x3c0 [ 658.288537][T14834] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 658.288566][T14834] ? __pfx_locks_remove_file+0x10/0x10 [ 658.288599][T14834] ppp_release+0x211/0x230 [ 658.288627][T14834] ? __pfx_ppp_release+0x10/0x10 [ 658.288652][T14834] __fput+0x3ff/0xb40 [ 658.288674][T14834] task_work_run+0x150/0x240 [ 658.288700][T14834] ? __pfx_task_work_run+0x10/0x10 [ 658.288730][T14834] exit_to_user_mode_loop+0x100/0x4a0 [ 658.288763][T14834] do_syscall_64+0x668/0xf80 [ 658.288789][T14834] ? clear_bhb_loop+0x40/0x90 [ 658.288812][T14834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.288831][T14834] RIP: 0033:0x7fa95859bf79 [ 658.288848][T14834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 658.288867][T14834] RSP: 002b:00007fa95939f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 658.288886][T14834] RAX: 0000000000000000 RBX: 00007fa958815fa0 RCX: 00007fa95859bf79 [ 658.288898][T14834] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 658.288910][T14834] RBP: 00007fa9586327e0 R08: 0000000000000000 R09: 0000000000000000 [ 658.288922][T14834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 658.288933][T14834] R13: 00007fa958816038 R14: 00007fa958815fa0 R15: 00007fff1f775228 [ 658.288956][T14834] [ 659.998821][T14853] futex_wake_op: syz.4.2084 tries to shift op by -2048; fix this program [ 660.007510][T14853] futex_wake_op: syz.4.2084 tries to shift op by -2048; fix this program [ 660.140399][T14853] 0x000000000001-0x000000020000 : "" [ 660.226412][T14853] ftl_cs: FTL header corrupt! [ 660.699542][T14857] futex_wake_op: syz.4.2085 tries to shift op by -2048; fix this program [ 660.747906][T14857] futex_wake_op: syz.4.2085 tries to shift op by -2048; fix this program [ 660.811516][T14857] 0x000000000001-0x000000020000 : "" [ 660.871723][T14858] FAULT_INJECTION: forcing a failure. [ 660.871723][T14858] name failslab, interval 1, probability 0, space 0, times 0 [ 660.978907][T14858] CPU: 0 UID: 0 PID: 14858 Comm: syz.4.2085 Tainted: G U L syzkaller #0 PREEMPT(full) [ 660.978941][T14858] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 660.978948][T14858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 660.978959][T14858] Call Trace: [ 660.978966][T14858] [ 660.978973][T14858] dump_stack_lvl+0x100/0x190 [ 660.979004][T14858] should_fail_ex.cold+0x5/0xa [ 660.979026][T14858] should_failslab+0xc2/0x120 [ 660.979053][T14858] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 660.979076][T14858] ? do_getname+0x35/0x390 [ 660.979093][T14858] ? find_held_lock+0x2b/0x80 [ 660.979124][T14858] do_getname+0x35/0x390 [ 660.979144][T14858] do_sys_openat2+0xc5/0x1e0 [ 660.979164][T14858] ? __pfx_do_sys_openat2+0x10/0x10 [ 660.979182][T14858] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 660.979214][T14858] ? __fget_files+0x21f/0x3d0 [ 660.979242][T14858] __x64_sys_openat+0x12d/0x210 [ 660.979262][T14858] ? __pfx___x64_sys_openat+0x10/0x10 [ 660.979282][T14858] ? ksys_write+0x1ac/0x250 [ 660.979312][T14858] do_syscall_64+0x106/0xf80 [ 660.979338][T14858] ? clear_bhb_loop+0x40/0x90 [ 660.979360][T14858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.979379][T14858] RIP: 0033:0x7fa95859bf79 [ 660.979395][T14858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 660.979413][T14858] RSP: 002b:00007fa95937e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 660.979432][T14858] RAX: ffffffffffffffda RBX: 00007fa958816090 RCX: 00007fa95859bf79 [ 660.979443][T14858] RDX: 0000000000028082 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 660.979454][T14858] RBP: 00007fa95937e090 R08: 0000000000000000 R09: 0000000000000000 [ 660.979465][T14858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.979475][T14858] R13: 00007fa958816128 R14: 00007fa958816090 R15: 00007fff1f775228 [ 660.979497][T14858] [ 663.522309][T14857] ftl_cs: FTL header corrupt! [ 666.098992][T14889] zswap: compressor ¸„1Ўø not available [ 667.540527][T14925] FAULT_INJECTION: forcing a failure. [ 667.540527][T14925] name failslab, interval 1, probability 0, space 0, times 0 [ 667.667905][T14925] CPU: 0 UID: 0 PID: 14925 Comm: syz.2.2103 Tainted: G U L syzkaller #0 PREEMPT(full) [ 667.667940][T14925] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 667.667947][T14925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 667.667959][T14925] Call Trace: [ 667.667966][T14925] [ 667.667974][T14925] dump_stack_lvl+0x100/0x190 [ 667.668006][T14925] should_fail_ex.cold+0x5/0xa [ 667.668029][T14925] should_failslab+0xc2/0x120 [ 667.668058][T14925] __kmalloc_cache_noprof+0x7a/0x6f0 [ 667.668079][T14925] ? rfkill_fop_open+0x1b6/0x750 [ 667.668100][T14925] ? mark_held_locks+0x40/0x70 [ 667.668125][T14925] rfkill_fop_open+0x1b6/0x750 [ 667.668151][T14925] ? __pfx_rfkill_fop_open+0x10/0x10 [ 667.668175][T14925] misc_open+0x26d/0x450 [ 667.668199][T14925] ? __pfx_misc_open+0x10/0x10 [ 667.668223][T14925] chrdev_open+0x234/0x6a0 [ 667.668249][T14925] ? __pfx_apparmor_file_open+0x10/0x10 [ 667.668272][T14925] ? __pfx_chrdev_open+0x10/0x10 [ 667.668300][T14925] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 667.668333][T14925] do_dentry_open+0x6d8/0x1660 [ 667.668359][T14925] ? __pfx_chrdev_open+0x10/0x10 [ 667.668390][T14925] vfs_open+0x82/0x3f0 [ 667.668412][T14925] path_openat+0x208c/0x31a0 [ 667.668446][T14925] ? __pfx_path_openat+0x10/0x10 [ 667.668481][T14925] do_file_open+0x20e/0x430 [ 667.668510][T14925] ? __pfx_do_file_open+0x10/0x10 [ 667.668552][T14925] ? alloc_fd+0x476/0x790 [ 667.668579][T14925] ? do_getname+0x191/0x390 [ 667.668600][T14925] do_sys_openat2+0x10d/0x1e0 [ 667.668621][T14925] ? __pfx_do_sys_openat2+0x10/0x10 [ 667.668642][T14925] ? __fget_files+0x21f/0x3d0 [ 667.668672][T14925] __x64_sys_openat+0x12d/0x210 [ 667.668694][T14925] ? __pfx___x64_sys_openat+0x10/0x10 [ 667.668778][T14925] do_syscall_64+0x106/0xf80 [ 667.668807][T14925] ? clear_bhb_loop+0x40/0x90 [ 667.668830][T14925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.668850][T14925] RIP: 0033:0x7fd84759bf79 [ 667.668866][T14925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 667.668885][T14925] RSP: 002b:00007fd84838f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 667.668904][T14925] RAX: ffffffffffffffda RBX: 00007fd847815fa0 RCX: 00007fd84759bf79 [ 667.668916][T14925] RDX: 0000000000000000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 667.668928][T14925] RBP: 00007fd8476327e0 R08: 0000000000000000 R09: 0000000000000000 [ 667.668939][T14925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 667.668950][T14925] R13: 00007fd847816038 R14: 00007fd847815fa0 R15: 00007ffc067826e8 [ 667.668974][T14925] [ 668.680269][T14938] FAULT_INJECTION: forcing a failure. [ 668.680269][T14938] name failslab, interval 1, probability 0, space 0, times 0 [ 668.751962][T14938] CPU: 0 UID: 0 PID: 14938 Comm: syz.3.2104 Tainted: G U L syzkaller #0 PREEMPT(full) [ 668.751997][T14938] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 668.752005][T14938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 668.752016][T14938] Call Trace: [ 668.752024][T14938] [ 668.752032][T14938] dump_stack_lvl+0x100/0x190 [ 668.752064][T14938] should_fail_ex.cold+0x5/0xa [ 668.752088][T14938] should_failslab+0xc2/0x120 [ 668.752116][T14938] __kmalloc_cache_noprof+0x7a/0x6f0 [ 668.752138][T14938] ? rfkill_fop_open+0x1b6/0x750 [ 668.752159][T14938] ? mark_held_locks+0x40/0x70 [ 668.752185][T14938] rfkill_fop_open+0x1b6/0x750 [ 668.752211][T14938] ? __pfx_rfkill_fop_open+0x10/0x10 [ 668.752235][T14938] misc_open+0x26d/0x450 [ 668.752260][T14938] ? __pfx_misc_open+0x10/0x10 [ 668.752284][T14938] chrdev_open+0x234/0x6a0 [ 668.752310][T14938] ? __pfx_apparmor_file_open+0x10/0x10 [ 668.752333][T14938] ? __pfx_chrdev_open+0x10/0x10 [ 668.752360][T14938] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 668.752392][T14938] do_dentry_open+0x6d8/0x1660 [ 668.752418][T14938] ? __pfx_chrdev_open+0x10/0x10 [ 668.752457][T14938] vfs_open+0x82/0x3f0 [ 668.752478][T14938] path_openat+0x208c/0x31a0 [ 668.752512][T14938] ? __pfx_path_openat+0x10/0x10 [ 668.752547][T14938] do_file_open+0x20e/0x430 [ 668.752575][T14938] ? __pfx_do_file_open+0x10/0x10 [ 668.752617][T14938] ? alloc_fd+0x476/0x790 [ 668.752646][T14938] ? do_getname+0x191/0x390 [ 668.752667][T14938] do_sys_openat2+0x10d/0x1e0 [ 668.752688][T14938] ? __pfx_do_sys_openat2+0x10/0x10 [ 668.752829][T14938] ? __fget_files+0x21f/0x3d0 [ 668.752859][T14938] __x64_sys_openat+0x12d/0x210 [ 668.752881][T14938] ? __pfx___x64_sys_openat+0x10/0x10 [ 668.752910][T14938] do_syscall_64+0x106/0xf80 [ 668.752937][T14938] ? clear_bhb_loop+0x40/0x90 [ 668.752960][T14938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.752981][T14938] RIP: 0033:0x7f8cd179bf79 [ 668.752997][T14938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 668.753016][T14938] RSP: 002b:00007f8cd25f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 668.753035][T14938] RAX: ffffffffffffffda RBX: 00007f8cd1a15fa0 RCX: 00007f8cd179bf79 [ 668.753048][T14938] RDX: 0000000000000000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 668.753059][T14938] RBP: 00007f8cd18327e0 R08: 0000000000000000 R09: 0000000000000000 [ 668.753070][T14938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 668.753081][T14938] R13: 00007f8cd1a16038 R14: 00007f8cd1a15fa0 R15: 00007ffebf314908 [ 668.753104][T14938] [ 669.974813][ T29] audit: type=1326 audit(2147483977.781:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14946 comm="syz.4.2105" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa95859bf79 code=0x0 [ 671.836596][T14936] Process accounting resumed [ 672.023141][ T29] audit: type=1800 audit(2147483979.821:133): pid=14973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2106" name="dbroot" dev="configfs" ino=137965 res=0 errno=0 [ 672.180851][T14977] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2108'. [ 672.480697][T14985] NFSD: Failed to start, no listeners configured. [ 672.586353][T14977] hsr_slave_0: left promiscuous mode [ 672.665179][T14977] hsr_slave_1: left promiscuous mode [ 672.827208][T14982] cgroup: fork rejected by pids controller in /syz0 [ 673.498202][T15019] ptp ptp0: new virtual clock ptp2 [ 673.554674][T15019] ptp ptp0: new virtual clock ptp3 [ 673.621721][T15019] ptp ptp0: guarantee physical clock free running [ 674.349830][T15027] zswap: compressor ¸„ not available [ 677.668660][T15057] ptp ptp0: delete virtual clock ptp3 [ 678.940918][T15057] ptp ptp0: delete virtual clock ptp2 [ 679.242602][T15065] snd_aloop snd_aloop.0: Parsing timer source 'emote_address st tx_queue rx_queue tr tm' failed with -22 [ 680.037540][T15057] ptp ptp0: guarantee physical clock free running [ 680.148304][T15068] ptp ptp0: new virtual clock ptp2 [ 680.258347][T15068] ptp ptp0: new virtual clock ptp3 [ 680.360553][T15068] ptp ptp0: guarantee physical clock free running [ 680.649029][T15078] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2124'. [ 680.839857][T15081] futex_wake_op: syz.3.2125 tries to shift op by -2048; fix this program [ 681.051836][T15085] FAULT_INJECTION: forcing a failure. [ 681.051836][T15085] name failslab, interval 1, probability 0, space 0, times 0 [ 681.120976][T15086] nvme_fcloop: unknown parameter or missing value 'Ł' [ 681.153601][T15081] futex_wake_op: syz.3.2125 tries to shift op by -2048; fix this program [ 681.310685][T15085] CPU: 0 UID: 0 PID: 15085 Comm: syz.3.2125 Tainted: G U L syzkaller #0 PREEMPT(full) [ 681.310726][T15085] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 681.310734][T15085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 681.310745][T15085] Call Trace: [ 681.310752][T15085] [ 681.310760][T15085] dump_stack_lvl+0x100/0x190 [ 681.310793][T15085] should_fail_ex.cold+0x5/0xa [ 681.310814][T15085] ? tomoyo_realpath_from_path+0xb6/0x690 [ 681.310843][T15085] should_failslab+0xc2/0x120 [ 681.310871][T15085] __kmalloc_noprof+0xe0/0x850 [ 681.310899][T15085] tomoyo_realpath_from_path+0xb6/0x690 [ 681.310932][T15085] tomoyo_check_open_permission+0x2af/0x3c0 [ 681.310958][T15085] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 681.311004][T15085] ? do_raw_spin_lock+0x128/0x260 [ 681.311037][T15085] ? path_get+0x61/0x80 [ 681.311067][T15085] tomoyo_file_open+0x6b/0x90 [ 681.311088][T15085] security_file_open+0xb5/0x1e0 [ 681.311115][T15085] do_dentry_open+0x5aa/0x1660 [ 681.311143][T15085] ? security_inode_permission+0xbf/0x250 [ 681.311171][T15085] vfs_open+0x82/0x3f0 [ 681.311192][T15085] path_openat+0x208c/0x31a0 [ 681.311225][T15085] ? __pfx_path_openat+0x10/0x10 [ 681.311259][T15085] do_file_open+0x20e/0x430 [ 681.311287][T15085] ? __pfx_do_file_open+0x10/0x10 [ 681.311328][T15085] ? alloc_fd+0x476/0x790 [ 681.311355][T15085] ? do_getname+0x191/0x390 [ 681.311376][T15085] do_sys_openat2+0x10d/0x1e0 [ 681.311396][T15085] ? __pfx_do_sys_openat2+0x10/0x10 [ 681.311414][T15085] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 681.311446][T15085] ? __fget_files+0x21f/0x3d0 [ 681.311474][T15085] __x64_sys_openat+0x12d/0x210 [ 681.311495][T15085] ? __pfx___x64_sys_openat+0x10/0x10 [ 681.311514][T15085] ? ksys_write+0x1ac/0x250 [ 681.311545][T15085] do_syscall_64+0x106/0xf80 [ 681.311576][T15085] ? clear_bhb_loop+0x40/0x90 [ 681.311598][T15085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.311617][T15085] RIP: 0033:0x7f8cd179bf79 [ 681.311633][T15085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 681.311651][T15085] RSP: 002b:00007f8cd25b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 681.311669][T15085] RAX: ffffffffffffffda RBX: 00007f8cd1a16180 RCX: 00007f8cd179bf79 [ 681.311681][T15085] RDX: 0000000000028082 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 681.311693][T15085] RBP: 00007f8cd25b7090 R08: 0000000000000000 R09: 0000000000000000 [ 681.311704][T15085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 681.311719][T15085] R13: 00007f8cd1a16218 R14: 00007f8cd1a16180 R15: 00007ffebf314908 [ 681.311742][T15085] [ 681.311795][T15085] ERROR: Out of memory at tomoyo_realpath_from_path. [ 685.901485][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.908097][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 692.782426][T15119] FAULT_INJECTION: forcing a failure. [ 692.782426][T15119] name fail_futex, interval 1, probability 0, space 0, times 0 [ 692.855706][T15119] CPU: 0 UID: 0 PID: 15119 Comm: syz.3.2133 Tainted: G U L syzkaller #0 PREEMPT(full) [ 692.855744][T15119] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 692.855751][T15119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 692.855763][T15119] Call Trace: [ 692.855769][T15119] [ 692.855776][T15119] dump_stack_lvl+0x100/0x190 [ 692.855807][T15119] should_fail_ex.cold+0x5/0xa [ 692.855828][T15119] get_futex_key+0x1d2/0x1620 [ 692.855852][T15119] ? __pfx_get_futex_key+0x10/0x10 [ 692.855879][T15119] futex_wait_setup+0x81/0x500 [ 692.855910][T15119] __futex_wait+0x19f/0x300 [ 692.855936][T15119] ? __pfx___futex_wait+0x10/0x10 [ 692.855960][T15119] ? __blk_flush_plug+0x2f3/0x4b0 [ 692.855990][T15119] ? __pfx_futex_wake_mark+0x10/0x10 [ 692.856018][T15119] ? futex_hash+0x2c5/0x380 [ 692.856043][T15119] futex_wait+0xed/0x380 [ 692.856068][T15119] ? __pfx_futex_wait+0x10/0x10 [ 692.856090][T15119] ? madvise_unlock+0x172/0x220 [ 692.856124][T15119] ? madvise_unlock+0xa9/0x220 [ 692.856154][T15119] do_futex+0x1ef/0x350 [ 692.856175][T15119] ? __pfx_do_futex+0x10/0x10 [ 692.856202][T15119] __x64_sys_futex+0x34f/0x4d0 [ 692.856226][T15119] ? __pfx___x64_sys_futex+0x10/0x10 [ 692.856256][T15119] do_syscall_64+0x106/0xf80 [ 692.856282][T15119] ? clear_bhb_loop+0x40/0x90 [ 692.856304][T15119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.856323][T15119] RIP: 0033:0x7f8cd179bf79 [ 692.856340][T15119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 692.856358][T15119] RSP: 002b:00007f8cd25f90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 692.856375][T15119] RAX: ffffffffffffffda RBX: 00007f8cd1a15fa8 RCX: 00007f8cd179bf79 [ 692.856387][T15119] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8cd1a15fa8 [ 692.856398][T15119] RBP: 00007f8cd1a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 692.856409][T15119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 692.856420][T15119] R13: 00007f8cd1a16038 R14: 00007ffebf314820 R15: 00007ffebf314908 [ 692.856442][T15119] [ 693.637805][ T29] audit: type=1800 audit(2147484001.421:134): pid=15129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2135" name="dbroot" dev="configfs" ino=153314 res=0 errno=0 [ 695.217435][T15131] delete_channel: no stack [ 697.016171][T15162] vivid-007: ================= START STATUS ================= [ 697.063114][T15162] vivid-007: Generate PTS: true [ 697.090336][T15162] vivid-007: Generate SCR: true [ 697.115972][T15162] tpg source WxH: 320x240 (Y'CbCr) [ 697.146261][T15162] tpg field: 1 [ 697.241299][T15162] tpg crop: (0,0)/320x240 [ 697.245662][T15162] tpg compose: (0,0)/320x240 [ 697.341673][T15162] tpg colorspace: 8 [ 697.345517][T15162] tpg transfer function: 0/0 [ 697.459539][ T29] audit: type=1800 audit(2147484005.271:135): pid=15167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2145" name="dbroot" dev="configfs" ino=156004 res=0 errno=0 [ 697.531684][T15162] tpg Y'CbCr encoding: 0/0 [ 697.536400][T15162] tpg quantization: 0/0 [ 697.640216][T15162] tpg RGB range: 0/2 [ 697.710853][T15162] vivid-007: ================== END STATUS ================== [ 701.114603][ T29] audit: type=1326 audit(2147484008.921:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15197 comm="syz.3.2153" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8cd179bf79 code=0x0 [ 701.892029][T15205] snd_aloop snd_aloop.0: Parsing timer source 'emote_address st tx_queue rx_queue tr tm' failed with -22 [ 702.656540][T15209] zswap: compressor ¸„ not available [ 704.393163][T14998] syz.0.2109 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 705.233456][T14998] CPU: 0 UID: 0 PID: 14998 Comm: syz.0.2109 Tainted: G U L syzkaller #0 PREEMPT(full) [ 705.233489][T14998] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 705.233497][T14998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 705.233507][T14998] Call Trace: [ 705.233514][T14998] [ 705.233521][T14998] dump_stack_lvl+0x100/0x190 [ 705.233553][T14998] dump_header+0xfb/0x606 [ 705.233574][T14998] oom_kill_process.cold+0xd/0x330 [ 705.233595][T14998] out_of_memory+0x340/0x14f0 [ 705.233624][T14998] ? __pfx_out_of_memory+0x10/0x10 [ 705.233654][T14998] mem_cgroup_out_of_memory+0xc6/0x130 [ 705.233676][T14998] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 705.233696][T14998] ? find_held_lock+0x2b/0x80 [ 705.233727][T14998] ? do_raw_spin_unlock+0x145/0x1e0 [ 705.233752][T14998] ? _raw_spin_unlock+0x28/0x50 [ 705.233779][T14998] try_charge_memcg+0x652/0xc90 [ 705.233810][T14998] ? __pfx_try_charge_memcg+0x10/0x10 [ 705.233837][T14998] ? find_held_lock+0x2b/0x80 [ 705.233863][T14998] ? rcu_read_unlock+0x17/0x60 [ 705.233889][T14998] ? rcu_read_unlock+0x17/0x60 [ 705.233924][T14998] charge_memcg+0xa6/0x280 [ 705.233950][T14998] __mem_cgroup_charge+0x2b/0x1e0 [ 705.233970][T14998] shmem_alloc_and_add_folio+0x451/0xd40 [ 705.233999][T14998] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 705.234025][T14998] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 705.234054][T14998] shmem_get_folio_gfp+0x6ab/0x1900 [ 705.234082][T14998] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 705.234117][T14998] shmem_write_begin+0x1a4/0x420 [ 705.234144][T14998] ? __pfx_shmem_write_begin+0x10/0x10 [ 705.234174][T14998] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 705.234216][T14998] ? lockdep_hardirqs_on+0x78/0x100 [ 705.234251][T14998] generic_perform_write+0x292/0xa40 [ 705.234282][T14998] ? __pfx_generic_perform_write+0x10/0x10 [ 705.234309][T14998] ? file_update_time_flags+0x373/0x500 [ 705.234331][T14998] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 705.234358][T14998] shmem_file_write_iter+0x10e/0x140 [ 705.234387][T14998] __kernel_write_iter+0x2ac/0x920 [ 705.234422][T14998] ? __pfx___kernel_write_iter+0x10/0x10 [ 705.234447][T14998] ? __up_read+0x2c5/0x700 [ 705.234473][T14998] ? dump_user_range+0x73b/0xb50 [ 705.234506][T14998] dump_user_range+0x3f9/0xb50 [ 705.234539][T14998] ? __pfx_dump_user_range+0x10/0x10 [ 705.234574][T14998] ? __pfx_writenote+0x10/0x10 [ 705.234598][T14998] elf_core_dump+0x2d16/0x3c60 [ 705.234629][T14998] ? __pfx_elf_core_dump+0x10/0x10 [ 705.234649][T14998] ? trace_ignore_this_task+0x6b/0x100 [ 705.234674][T14998] ? event_filter_pid_sched_wakeup_probe_pre+0x130/0x280 [ 705.234703][T14998] ? __pfx_event_filter_pid_sched_wakeup_probe_post+0x10/0x10 [ 705.234733][T14998] ? find_held_lock+0x2b/0x80 [ 705.234760][T14998] ? 0xffffffffff600000 [ 705.234778][T14998] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 705.234802][T14998] ? lockdep_hardirqs_on+0x78/0x100 [ 705.234861][T14998] ? vfs_coredump+0x27b4/0x5570 [ 705.234887][T14998] vfs_coredump+0x27b4/0x5570 [ 705.234923][T14998] ? __pfx_vfs_coredump+0x10/0x10 [ 705.234953][T14998] ? __lock_acquire+0x4a5/0x2630 [ 705.234983][T14998] ? lock_acquire+0x1cf/0x380 [ 705.235021][T14998] ? is_bpf_text_address+0x8a/0x1a0 [ 705.235047][T14998] ? bpf_ksym_find+0x124/0x1c0 [ 705.235071][T14998] ? __kernel_text_address+0xd/0x30 [ 705.235097][T14998] ? unwind_get_return_address+0x59/0xa0 [ 705.235116][T14998] ? arch_stack_walk+0xa6/0xf0 [ 705.235141][T14998] ? __sigqueue_free+0xbe/0x2a0 [ 705.235164][T14998] ? stack_trace_save+0x8e/0xc0 [ 705.235192][T14998] ? __pfx_stack_trace_save+0x10/0x10 [ 705.235219][T14998] ? kasan_save_stack+0x3f/0x50 [ 705.235243][T14998] ? stack_depot_save_flags+0x27/0x9d0 [ 705.235270][T14998] ? __lock_acquire+0x4a5/0x2630 [ 705.235329][T14998] ? proc_coredump_connector+0x2d3/0x4f0 [ 705.235358][T14998] ? __pfx_proc_coredump_connector+0x10/0x10 [ 705.235391][T14998] ? rcu_is_watching+0x12/0xc0 [ 705.235427][T14998] get_signal+0x1f2a/0x21e0 [ 705.235454][T14998] ? __pfx_get_signal+0x10/0x10 [ 705.235469][T14998] ? find_held_lock+0x2b/0x80 [ 705.235495][T14998] ? bad_area_access_error+0xab/0x1d0 [ 705.235521][T14998] ? fixup_vdso_exception+0x2d1/0x370 [ 705.235547][T14998] arch_do_signal_or_restart+0x91/0x770 [ 705.235571][T14998] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 705.235599][T14998] ? do_user_addr_fault+0x8d6/0x12f0 [ 705.235632][T14998] irqentry_exit+0x1f8/0x670 [ 705.235660][T14998] asm_exc_page_fault+0x26/0x30 [ 705.235678][T14998] RIP: 0033:0x0 [ 705.235691][T14998] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 705.235699][T14998] RSP: 002b:000000000000000a EFLAGS: 00010217 [ 705.235714][T14998] RAX: 0000000000000000 RBX: 00007f0984216090 RCX: 00007f0983f9bf79 [ 705.235726][T14998] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 705.235737][T14998] RBP: 00007f09840327e0 R08: 0000000000000002 R09: 0000000000000000 [ 705.235747][T14998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 705.235758][T14998] R13: 00007f0984216128 R14: 00007f0984216090 R15: 00007ffe9320c1b8 [ 705.235781][T14998] [ 705.759677][T14998] memory: usage 307200kB, limit 307200kB, failcnt 29322 [ 705.766756][T14998] memory+swap: usage 431864kB, limit 9007199254740988kB, failcnt 0 [ 705.775001][T14998] kmem: usage 6404kB, limit 9007199254740988kB, failcnt 0 [ 705.782156][T14998] Memory cgroup stats for /syz0: [ 705.782455][T14998] cache 306589696 [ 705.791303][T14998] rss 1400832 [ 705.794954][T14998] rss_huge 0 [ 705.798234][T14998] shmem 306585600 [ 705.801897][T14998] mapped_file 13324288 [ 705.805993][T14998] dirty 0 [ 705.809987][T14998] writeback 0 [ 705.813277][T14998] workingset_refault_anon 5730 [ 705.818100][T14998] workingset_refault_file 486 [ 705.822793][T14998] swap 127655936 [ 705.826335][T14998] swapcached 176128000 [ 705.830458][T14998] pgpgin 653564 [ 705.833915][T14998] pgpgout 581942 [ 705.837473][T14998] pgfault 479577 [ 705.841225][T14998] pgmajfault 631 [ 705.844782][T14998] inactive_anon 174747648 [ 705.849269][T14998] active_anon 133263360 [ 705.853450][T14998] inactive_file 4096 [ 705.857354][T14998] active_file 0 [ 705.861406][T14998] unevictable 0 [ 705.864870][T14998] hierarchical_memory_limit 314572800 [ 705.870308][T14998] hierarchical_memsw_limit 9223372036854771712 [ 705.876459][T14998] total_cache 306589696 [ 705.880750][T14998] total_rss 1400832 [ 705.884565][T14998] total_rss_huge 0 [ 705.888432][T14998] total_shmem 306585600 [ 705.892610][T14998] total_mapped_file 13324288 [ 705.897199][T14998] total_dirty 0 [ 705.900772][T14998] total_writeback 0 [ 705.904604][T14998] total_workingset_refault_anon 5730 [ 705.911073][T14998] total_workingset_refault_file 486 [ 705.916486][T14998] total_swap 127655936 [ 705.920738][T14998] total_swapcached 176128000 [ 705.925420][T14998] total_pgpgin 653564 [ 705.929471][T14998] total_pgpgout 581942 [ 705.933636][T14998] total_pgfault 479577 [ 705.937937][T14998] total_pgmajfault 631 [ 705.942095][T14998] total_inactive_anon 174747648 [ 705.947024][T14998] total_active_anon 133263360 [ 705.951777][T14998] total_inactive_file 4096 [ 705.956204][T14998] total_active_file 0 [ 705.960217][T14998] total_unevictable 0 [ 705.964285][T14998] anon_cost 1184 [ 705.967944][T14998] file_cost 352 [ 705.971490][T14998] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2109,pid=15014,uid=0 [ 705.988491][T14998] Memory cgroup out of memory: Killed process 15014 (syz.0.2109) total-vm:131676kB, anon-rss:2384kB, file-rss:21684kB, shmem-rss:13004kB, UID:0 pgtables:172kB oom_score_adj:1000 [ 709.261814][T14995] syz.0.2109 (14995) used greatest stack depth: 17944 bytes left [ 709.717860][T15225] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 709.877804][T15225] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 709.898867][T15201] Process accounting paused [ 709.964768][T15225] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 709.978756][T15230] openvswitch: netlink: Key type 99 is out of range max 32 [ 710.068782][T15230] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2158'. [ 710.179731][T15225] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 711.428689][T15249] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 711.539310][T15249] vhci_hcd vhci_hcd.1: default hub control req: 0000 v0000 i0000 l0 [ 711.739762][T11135] Bluetooth: hci2: command 0x0c1a tx timeout [ 711.745887][T11135] Bluetooth: hci1: command 0x0c1a tx timeout [ 711.977934][T15256] Bluetooth: hci3: command 0x0c1a tx timeout [ 712.223813][T15256] Bluetooth: hci0: command 0x0c1a tx timeout [ 715.467869][ T29] audit: type=1800 audit(2147484023.271:137): pid=15288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2170" name="dbroot" dev="configfs" ino=168827 res=0 errno=0 [ 715.546474][T15290] ptp ptp0: guarantee physical clock free running [ 716.017947][T15285] snd_aloop snd_aloop.0: Parsing timer source 'emote_address st tx_queue rx_queue tr tm' failed with -22 [ 719.879051][T15352] snd_aloop snd_aloop.0: Parsing timer source 'emote_address st tx_queue rx_queue tr tm' failed with -22 [ 720.432045][T15360] futex_wake_op: syz.3.2179 tries to shift op by -2048; fix this program [ 720.508863][T15360] futex_wake_op: syz.3.2179 tries to shift op by -2048; fix this program [ 720.603889][T15360] 0x000000000001-0x000000020000 : "" [ 720.650905][T15360] ftl_cs: FTL header corrupt! [ 721.615061][T15381] FAULT_INJECTION: forcing a failure. [ 721.615061][T15381] name failslab, interval 1, probability 0, space 0, times 0 [ 721.682763][T15374] FAULT_INJECTION: forcing a failure. [ 721.682763][T15374] name failslab, interval 1, probability 0, space 0, times 0 [ 721.728764][T15381] CPU: 0 UID: 0 PID: 15381 Comm: syz.3.2186 Tainted: G U L syzkaller #0 PREEMPT(full) [ 721.728799][T15381] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 721.728806][T15381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 721.728818][T15381] Call Trace: [ 721.728825][T15381] [ 721.728832][T15381] dump_stack_lvl+0x100/0x190 [ 721.728864][T15381] should_fail_ex.cold+0x5/0xa [ 721.728887][T15381] should_failslab+0xc2/0x120 [ 721.728916][T15381] __kmalloc_cache_noprof+0x7a/0x6f0 [ 721.728937][T15381] ? rfkill_fop_open+0x1b6/0x750 [ 721.728958][T15381] ? mark_held_locks+0x40/0x70 [ 721.728984][T15381] rfkill_fop_open+0x1b6/0x750 [ 721.729009][T15381] ? __pfx_rfkill_fop_open+0x10/0x10 [ 721.729033][T15381] misc_open+0x26d/0x450 [ 721.729059][T15381] ? __pfx_misc_open+0x10/0x10 [ 721.729082][T15381] chrdev_open+0x234/0x6a0 [ 721.729108][T15381] ? __pfx_apparmor_file_open+0x10/0x10 [ 721.729136][T15381] ? __pfx_chrdev_open+0x10/0x10 [ 721.729164][T15381] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 721.729197][T15381] do_dentry_open+0x6d8/0x1660 [ 721.729223][T15381] ? __pfx_chrdev_open+0x10/0x10 [ 721.729257][T15381] vfs_open+0x82/0x3f0 [ 721.729280][T15381] path_openat+0x208c/0x31a0 [ 721.729314][T15381] ? __pfx_path_openat+0x10/0x10 [ 721.729350][T15381] do_file_open+0x20e/0x430 [ 721.729379][T15381] ? __pfx_do_file_open+0x10/0x10 [ 721.729423][T15381] ? alloc_fd+0x476/0x790 [ 721.729451][T15381] ? do_getname+0x191/0x390 [ 721.729472][T15381] do_sys_openat2+0x10d/0x1e0 [ 721.729492][T15381] ? __pfx_do_sys_openat2+0x10/0x10 [ 721.729515][T15381] ? __fget_files+0x21f/0x3d0 [ 721.729553][T15381] __x64_sys_openat+0x12d/0x210 [ 721.729575][T15381] ? __pfx___x64_sys_openat+0x10/0x10 [ 721.729606][T15381] do_syscall_64+0x106/0xf80 [ 721.729633][T15381] ? clear_bhb_loop+0x40/0x90 [ 721.729656][T15381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.729676][T15381] RIP: 0033:0x7f8cd179bf79 [ 721.729703][T15381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 721.729722][T15381] RSP: 002b:00007f8cd25f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 721.729742][T15381] RAX: ffffffffffffffda RBX: 00007f8cd1a15fa0 RCX: 00007f8cd179bf79 [ 721.729753][T15381] RDX: 0000000000000000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 721.729765][T15381] RBP: 00007f8cd18327e0 R08: 0000000000000000 R09: 0000000000000000 [ 721.729776][T15381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 721.729787][T15381] R13: 00007f8cd1a16038 R14: 00007f8cd1a15fa0 R15: 00007ffebf314908 [ 721.729812][T15381] [ 722.042797][T15374] CPU: 0 UID: 0 PID: 15374 Comm: syz.4.2184 Tainted: G U L syzkaller #0 PREEMPT(full) [ 722.042834][T15374] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 722.042845][T15374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 722.042856][T15374] Call Trace: [ 722.042863][T15374] [ 722.042871][T15374] dump_stack_lvl+0x100/0x190 [ 722.042902][T15374] should_fail_ex.cold+0x5/0xa [ 722.042924][T15374] should_failslab+0xc2/0x120 [ 722.042953][T15374] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 722.042979][T15374] ? security_file_alloc+0x34/0x2c0 [ 722.043005][T15374] ? trace_kmem_cache_alloc+0xf3/0x120 [ 722.043037][T15374] security_file_alloc+0x34/0x2c0 [ 722.043064][T15374] init_file+0x95/0x480 [ 722.043082][T15374] alloc_empty_file+0x73/0x1c0 [ 722.043102][T15374] alloc_file_pseudo+0x13a/0x230 [ 722.043123][T15374] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 722.043144][T15374] ? alloc_fd+0x476/0x790 [ 722.043174][T15374] sock_alloc_file+0x50/0x210 [ 722.043203][T15374] __sys_socket+0x1c0/0x260 [ 722.043225][T15374] ? __pfx___sys_socket+0x10/0x10 [ 722.043252][T15374] __x64_sys_socket+0x72/0xb0 [ 722.043273][T15374] ? lockdep_hardirqs_on+0x78/0x100 [ 722.043301][T15374] do_syscall_64+0x106/0xf80 [ 722.043338][T15374] ? clear_bhb_loop+0x40/0x90 [ 722.043362][T15374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.043382][T15374] RIP: 0033:0x7fa95859bf79 [ 722.043405][T15374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 722.043425][T15374] RSP: 002b:00007fa95939f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 722.043444][T15374] RAX: ffffffffffffffda RBX: 00007fa958815fa0 RCX: 00007fa95859bf79 [ 722.043458][T15374] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 722.043469][T15374] RBP: 00007fa9586327e0 R08: 0000000000000000 R09: 0000000000000000 [ 722.043481][T15374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 722.043493][T15374] R13: 00007fa958816038 R14: 00007fa958815fa0 R15: 00007fff1f775228 [ 722.043516][T15374] [ 722.740087][T15388] futex_wake_op: syz.0.2187 tries to shift op by -2048; fix this program [ 722.791578][T15388] futex_wake_op: syz.0.2187 tries to shift op by -2048; fix this program [ 722.841812][T15388] 0x000000000001-0x000000020000 : "" [ 723.252181][T15388] ftl_cs: FTL header corrupt! [ 723.520235][T15395] FAULT_INJECTION: forcing a failure. [ 723.520235][T15395] name failslab, interval 1, probability 0, space 0, times 0 [ 723.623715][T15395] CPU: 0 UID: 0 PID: 15395 Comm: syz.4.2189 Tainted: G U L syzkaller #0 PREEMPT(full) [ 723.623750][T15395] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 723.623757][T15395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 723.623768][T15395] Call Trace: [ 723.623775][T15395] [ 723.623783][T15395] dump_stack_lvl+0x100/0x190 [ 723.623814][T15395] should_fail_ex.cold+0x5/0xa [ 723.623834][T15395] ? lsm_blob_alloc+0x68/0x90 [ 723.623852][T15395] should_failslab+0xc2/0x120 [ 723.623879][T15395] __kmalloc_noprof+0xe0/0x850 [ 723.623903][T15395] ? trace_kmalloc+0x101/0x130 [ 723.623933][T15395] lsm_blob_alloc+0x68/0x90 [ 723.623951][T15395] security_sk_alloc+0x2d/0x290 [ 723.623973][T15395] sk_prot_alloc+0x12a/0x2a0 [ 723.623994][T15395] sk_alloc+0x36/0xe80 [ 723.624019][T15395] __netlink_create+0x5e/0x2c0 [ 723.624042][T15395] ? __wake_up+0x3f/0x60 [ 723.624062][T15395] netlink_create+0x293/0x610 [ 723.624088][T15395] ? __pfx_genl_bind+0x10/0x10 [ 723.624105][T15395] ? __pfx_genl_unbind+0x10/0x10 [ 723.624122][T15395] ? __pfx_genl_release+0x10/0x10 [ 723.624144][T15395] __sock_create+0x339/0x860 [ 723.624168][T15395] __sys_socket+0x14d/0x260 [ 723.624188][T15395] ? exc_page_fault+0x6f/0xd0 [ 723.624214][T15395] ? __pfx___sys_socket+0x10/0x10 [ 723.624241][T15395] ? do_user_addr_fault+0x8d6/0x12f0 [ 723.624272][T15395] __x64_sys_socket+0x72/0xb0 [ 723.624292][T15395] ? lockdep_hardirqs_on+0x78/0x100 [ 723.624327][T15395] do_syscall_64+0x106/0xf80 [ 723.624353][T15395] ? clear_bhb_loop+0x40/0x90 [ 723.624376][T15395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.624396][T15395] RIP: 0033:0x7fa95859d807 [ 723.624414][T15395] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 723.624432][T15395] RSP: 002b:00007fa95939df98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 723.624451][T15395] RAX: ffffffffffffffda RBX: 00007fa958815fa0 RCX: 00007fa95859d807 [ 723.624464][T15395] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 723.624475][T15395] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 723.624487][T15395] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 723.624497][T15395] R13: 00007fa958816038 R14: 00007fa958815fa0 R15: 00007fff1f775228 [ 723.624519][T15395] [ 724.279172][T15395] kAFS: Invalid Command on /proc/fs/afs/cells file [ 724.808966][T15408] netlink: 'syz.0.2193': attribute type 5 has an invalid length. [ 724.857178][T15408] netlink: 4158 bytes leftover after parsing attributes in process `syz.0.2193'. [ 726.728026][ T29] audit: type=1800 audit(2147484034.531:138): pid=15438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2197" name="dbroot" dev="configfs" ino=176298 res=0 errno=0 [ 728.459571][T15472] ptp ptp0: delete virtual clock ptp3 [ 728.660248][T15472] ptp ptp0: delete virtual clock ptp2 [ 728.775867][ T29] audit: type=1800 audit(2147484036.581:139): pid=15480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2206" name="lu_gp_id" dev="configfs" ino=177356 res=0 errno=0 [ 728.819766][T15480] kstrtoul() returned -22 for lu_gp_id [ 728.847895][T15472] ptp ptp0: guarantee physical clock free running [ 729.008219][T15473] zswap: compressor not available [ 729.170550][T15487] ima: Unable to open file: /surit‹ÆRņy/integrity?iqa/policy (-2) [ 729.300659][ T29] audit: type=1800 audit(2147484037.111:140): pid=15489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2210" name="dbroot" dev="configfs" ino=177633 res=0 errno=0 [ 729.755971][T15482] ima: policy update failed [ 729.794056][ T29] audit: type=1802 audit(2147484037.601:141): pid=15482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.2208" res=0 errno=0 [ 730.003970][T15502] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2212'. [ 730.361091][T15508] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2214'. [ 730.432003][T15509] FAULT_INJECTION: forcing a failure. [ 730.432003][T15509] name failslab, interval 1, probability 0, space 0, times 0 [ 730.432059][T15509] CPU: 0 UID: 0 PID: 15509 Comm: syz.4.2215 Tainted: G U L syzkaller #0 PREEMPT(full) [ 730.432087][T15509] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 730.432094][T15509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 730.432105][T15509] Call Trace: [ 730.432112][T15509] [ 730.432120][T15509] dump_stack_lvl+0x100/0x190 [ 730.432151][T15509] should_fail_ex.cold+0x5/0xa [ 730.432173][T15509] should_failslab+0xc2/0x120 [ 730.432216][T15509] __kmalloc_cache_noprof+0x7a/0x6f0 [ 730.432238][T15509] ? rfkill_fop_open+0x1b6/0x750 [ 730.432259][T15509] ? mark_held_locks+0x40/0x70 [ 730.432285][T15509] rfkill_fop_open+0x1b6/0x750 [ 730.432313][T15509] ? __pfx_rfkill_fop_open+0x10/0x10 [ 730.432337][T15509] misc_open+0x26d/0x450 [ 730.432362][T15509] ? __pfx_misc_open+0x10/0x10 [ 730.432386][T15509] chrdev_open+0x234/0x6a0 [ 730.432412][T15509] ? __pfx_apparmor_file_open+0x10/0x10 [ 730.432434][T15509] ? __pfx_chrdev_open+0x10/0x10 [ 730.432462][T15509] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 730.432495][T15509] do_dentry_open+0x6d8/0x1660 [ 730.432521][T15509] ? __pfx_chrdev_open+0x10/0x10 [ 730.432553][T15509] vfs_open+0x82/0x3f0 [ 730.432575][T15509] path_openat+0x208c/0x31a0 [ 730.432608][T15509] ? __pfx_path_openat+0x10/0x10 [ 730.432643][T15509] do_file_open+0x20e/0x430 [ 730.432672][T15509] ? __pfx_do_file_open+0x10/0x10 [ 730.432715][T15509] ? alloc_fd+0x476/0x790 [ 730.432744][T15509] ? do_getname+0x191/0x390 [ 730.432764][T15509] do_sys_openat2+0x10d/0x1e0 [ 730.432785][T15509] ? __pfx_do_sys_openat2+0x10/0x10 [ 730.432807][T15509] ? __fget_files+0x21f/0x3d0 [ 730.432837][T15509] __x64_sys_openat+0x12d/0x210 [ 730.432866][T15509] ? __pfx___x64_sys_openat+0x10/0x10 [ 730.432895][T15509] do_syscall_64+0x106/0xf80 [ 730.432923][T15509] ? clear_bhb_loop+0x40/0x90 [ 730.432947][T15509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.432966][T15509] RIP: 0033:0x7fa95859bf79 [ 730.432982][T15509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 730.433000][T15509] RSP: 002b:00007fa95939f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 730.433019][T15509] RAX: ffffffffffffffda RBX: 00007fa958815fa0 RCX: 00007fa95859bf79 [ 730.433039][T15509] RDX: 0000000000000000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 730.433051][T15509] RBP: 00007fa9586327e0 R08: 0000000000000000 R09: 0000000000000000 [ 730.433062][T15509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 730.433073][T15509] R13: 00007fa958816038 R14: 00007fa958815fa0 R15: 00007fff1f775228 [ 730.433096][T15509] [ 731.234448][T15524] ptp ptp0: guarantee physical clock free running [ 731.495102][ T29] audit: type=1800 audit(2147484039.301:142): pid=15527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2220" name="dbroot" dev="configfs" ino=179118 res=0 errno=0 [ 731.906691][T15529] zswap: compressor ¸„ not available [ 731.909074][T15531] FAULT_INJECTION: forcing a failure. [ 731.909074][T15531] name failslab, interval 1, probability 0, space 0, times 0 [ 731.909131][T15531] CPU: 0 UID: 0 PID: 15531 Comm: syz.3.2221 Tainted: G U L syzkaller #0 PREEMPT(full) [ 731.909159][T15531] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 731.909166][T15531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 731.909177][T15531] Call Trace: [ 731.909183][T15531] [ 731.909190][T15531] dump_stack_lvl+0x100/0x190 [ 731.909231][T15531] should_fail_ex.cold+0x5/0xa [ 731.909252][T15531] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 731.909279][T15531] should_failslab+0xc2/0x120 [ 731.909305][T15531] __kmalloc_noprof+0xe0/0x850 [ 731.909328][T15531] ? trace_kmalloc+0x101/0x130 [ 731.909358][T15531] kernfs_fop_write_iter+0x26a/0x5f0 [ 731.909387][T15531] iter_file_splice_write+0x82b/0x10a0 [ 731.909425][T15531] ? __pfx_iter_file_splice_write+0x10/0x10 [ 731.909456][T15531] ? __pfx_copy_splice_read+0x10/0x10 [ 731.909492][T15531] ? __pfx_iter_file_splice_write+0x10/0x10 [ 731.909519][T15531] direct_splice_actor+0x192/0x6c0 [ 731.909547][T15531] splice_direct_to_actor+0x345/0xa30 [ 731.909573][T15531] ? __pfx_direct_splice_actor+0x10/0x10 [ 731.909603][T15531] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 731.909634][T15531] do_splice_direct+0x174/0x240 [ 731.909659][T15531] ? __pfx_do_splice_direct+0x10/0x10 [ 731.909687][T15531] ? common_file_perm+0x1ab/0x4f0 [ 731.909711][T15531] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 731.909740][T15531] ? rw_verify_area+0xce/0x6d0 [ 731.909764][T15531] do_sendfile+0xadc/0xe20 [ 731.909792][T15531] ? __pfx_do_sendfile+0x10/0x10 [ 731.909815][T15531] ? __fget_files+0x21f/0x3d0 [ 731.909846][T15531] __x64_sys_sendfile64+0x1d8/0x220 [ 731.909873][T15531] ? ksys_write+0x1ac/0x250 [ 731.909897][T15531] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 731.909932][T15531] do_syscall_64+0x106/0xf80 [ 731.909957][T15531] ? clear_bhb_loop+0x40/0x90 [ 731.909980][T15531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.909998][T15531] RIP: 0033:0x7f8cd179bf79 [ 731.910014][T15531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 731.910031][T15531] RSP: 002b:00007f8cd25d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 731.910049][T15531] RAX: ffffffffffffffda RBX: 00007f8cd1a16090 RCX: 00007f8cd179bf79 [ 731.910061][T15531] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 731.910071][T15531] RBP: 00007f8cd25d8090 R08: 0000000000000000 R09: 0000000000000000 [ 731.910082][T15531] R10: 0000000000007fff R11: 0000000000000246 R12: 0000000000000001 [ 731.910092][T15531] R13: 00007f8cd1a16128 R14: 00007f8cd1a16090 R15: 00007ffebf314908 [ 731.910115][T15531] [ 735.157880][T15562] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2228'. [ 735.301292][T15562] nbd: must specify at least one socket [ 735.384741][T15566] ptp ptp0: guarantee physical clock free running [ 735.616153][T15562] snd_aloop snd_aloop.0: Parsing timer source 'emote_address st tx_queue rx_queue tr tm' failed with -22 [ 735.738339][T15573] futex_wake_op: syz.0.2231 tries to shift op by -2048; fix this program [ 735.746991][T15573] futex_wake_op: syz.0.2231 tries to shift op by -2048; fix this program [ 737.235558][T15598] random: crng reseeded on system resumption [ 739.477596][T15615] vivid-007: ================= START STATUS ================= [ 739.520956][T15615] vivid-007: Generate PTS: true [ 739.526076][T15615] vivid-007: Generate SCR: true [ 739.539610][T15618] ptp ptp0: guarantee physical clock free running [ 739.586298][T15615] tpg source WxH: 320x240 (Y'CbCr) [ 739.619918][T15615] tpg field: 1 [ 739.623340][T15615] tpg crop: (0,0)/320x240 [ 739.773753][T15615] tpg compose: (0,0)/320x240 [ 739.805640][T15615] tpg colorspace: 8 [ 739.904318][T15615] tpg transfer function: 0/0 [ 739.933483][T15615] tpg Y'CbCr encoding: 0/0 [ 740.049269][T15615] tpg quantization: 0/0 [ 740.053484][T15615] tpg RGB range: 0/2 [ 740.057382][T15615] vivid-007: ================== END STATUS ================== [ 740.492256][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 740.504096][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 740.514734][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 740.529515][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 740.568192][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 741.478187][ T29] audit: type=1326 audit(2147484049.291:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15636 comm="syz.0.2243" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0983f9bf79 code=0x0 [ 742.627819][ T5832] Bluetooth: hci4: command tx timeout [ 742.875985][T15623] Process accounting resumed [ 743.167004][T15628] chnl_net:caif_netlink_parms(): no params data found [ 743.493979][T14320] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.584106][T14320] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.697961][ T5832] Bluetooth: hci4: command tx timeout [ 744.892089][T15628] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.929325][T15628] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.969270][T15628] bridge_slave_0: entered allmulticast mode [ 744.997373][T15628] bridge_slave_0: entered promiscuous mode [ 745.451355][T15628] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.483004][T15628] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.532077][T15628] bridge_slave_1: entered allmulticast mode [ 745.571633][T15628] bridge_slave_1: entered promiscuous mode [ 745.793612][T14320] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.261027][T14320] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.390547][T15628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 746.439846][T15628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 746.659407][T15628] team0: Port device team_slave_0 added [ 746.712074][T15628] team0: Port device team_slave_1 added [ 746.777833][ T5832] Bluetooth: hci4: command tx timeout [ 746.874207][T15628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 746.953477][T15628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 747.127757][T15628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 747.217058][ T29] audit: type=1800 audit(2147484055.021:144): pid=15673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2251" name="dbroot" dev="configfs" ino=190765 res=0 errno=0 [ 747.348126][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.354455][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.642468][T15628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 747.687308][T15628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 747.833637][T15628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 748.176950][T15628] hsr_slave_0: entered promiscuous mode [ 748.252167][T15628] hsr_slave_1: entered promiscuous mode [ 748.559156][ T29] audit: type=1800 audit(2147484056.371:145): pid=15693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2254" name="dbroot" dev="configfs" ino=191767 res=0 errno=0 [ 748.638463][T15691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2254'. [ 748.723233][T15693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2254'. [ 748.857894][ T5832] Bluetooth: hci4: command tx timeout [ 749.301066][T14320] vlan0: left allmulticast mode [ 749.306071][T14320] veth0_vlan: left allmulticast mode [ 749.407850][T14320] vlan0: left promiscuous mode [ 749.414244][T14320] bridge0: port 3(vlan0) entered disabled state [ 750.448515][T14320] bridge_slave_1: left allmulticast mode [ 750.508658][T14320] bridge_slave_1: left promiscuous mode [ 750.536725][T14320] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.868624][T14320] bridge_slave_0: left allmulticast mode [ 750.874319][T14320] bridge_slave_0: left promiscuous mode [ 750.939995][T14320] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.946090][T14320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 754.128321][T14320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 754.282998][T14320] bond0 (unregistering): Released all slaves [ 755.075638][T14320] .^: left promiscuous mode [ 755.848086][T14320] HfR: left promiscuous mode [ 755.893851][T15750] FAULT_INJECTION: forcing a failure. [ 755.893851][T15750] name failslab, interval 1, probability 0, space 0, times 0 [ 756.117862][T15750] CPU: 0 UID: 0 PID: 15750 Comm: syz.0.2261 Tainted: G U L syzkaller #0 PREEMPT(full) [ 756.117901][T15750] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 756.117908][T15750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 756.117921][T15750] Call Trace: [ 756.117929][T15750] [ 756.117937][T15750] dump_stack_lvl+0x100/0x190 [ 756.117972][T15750] should_fail_ex.cold+0x5/0xa [ 756.117996][T15750] should_failslab+0xc2/0x120 [ 756.118034][T15750] __kmalloc_cache_noprof+0x7a/0x6f0 [ 756.118057][T15750] ? rfkill_fop_open+0x1b6/0x750 [ 756.118080][T15750] ? mark_held_locks+0x40/0x70 [ 756.118107][T15750] rfkill_fop_open+0x1b6/0x750 [ 756.118134][T15750] ? __pfx_rfkill_fop_open+0x10/0x10 [ 756.118159][T15750] misc_open+0x26d/0x450 [ 756.118186][T15750] ? __pfx_misc_open+0x10/0x10 [ 756.118211][T15750] chrdev_open+0x234/0x6a0 [ 756.118240][T15750] ? __pfx_apparmor_file_open+0x10/0x10 [ 756.118264][T15750] ? __pfx_chrdev_open+0x10/0x10 [ 756.118293][T15750] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 756.118328][T15750] do_dentry_open+0x6d8/0x1660 [ 756.118357][T15750] ? __pfx_chrdev_open+0x10/0x10 [ 756.118391][T15750] vfs_open+0x82/0x3f0 [ 756.118414][T15750] path_openat+0x208c/0x31a0 [ 756.118451][T15750] ? __pfx_path_openat+0x10/0x10 [ 756.118488][T15750] do_file_open+0x20e/0x430 [ 756.118519][T15750] ? __pfx_do_file_open+0x10/0x10 [ 756.118564][T15750] ? alloc_fd+0x476/0x790 [ 756.118594][T15750] ? do_getname+0x191/0x390 [ 756.118617][T15750] do_sys_openat2+0x10d/0x1e0 [ 756.118639][T15750] ? __pfx_do_sys_openat2+0x10/0x10 [ 756.118663][T15750] ? __fget_files+0x21f/0x3d0 [ 756.118695][T15750] __x64_sys_openat+0x12d/0x210 [ 756.118718][T15750] ? __pfx___x64_sys_openat+0x10/0x10 [ 756.118749][T15750] do_syscall_64+0x106/0xf80 [ 756.118778][T15750] ? clear_bhb_loop+0x40/0x90 [ 756.118802][T15750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.118824][T15750] RIP: 0033:0x7f0983f9bf79 [ 756.118842][T15750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 756.118863][T15750] RSP: 002b:00007f0984d8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 756.118883][T15750] RAX: ffffffffffffffda RBX: 00007f0984215fa0 RCX: 00007f0983f9bf79 [ 756.118896][T15750] RDX: 0000000000000000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 756.118909][T15750] RBP: 00007f09840327e0 R08: 0000000000000000 R09: 0000000000000000 [ 756.118921][T15750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 756.118933][T15750] R13: 00007f0984216038 R14: 00007f0984215fa0 R15: 00007ffe9320c1b8 [ 756.118958][T15750] [ 757.518354][T15763] loop6: detected capacity change from 0 to 4194304 [ 758.568403][T15771] FAULT_INJECTION: forcing a failure. [ 758.568403][T15771] name failslab, interval 1, probability 0, space 0, times 0 [ 758.646559][T15771] CPU: 0 UID: 0 PID: 15771 Comm: syz.2.2265 Tainted: G U L syzkaller #0 PREEMPT(full) [ 758.646593][T15771] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 758.646600][T15771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 758.646610][T15771] Call Trace: [ 758.646616][T15771] [ 758.646624][T15771] dump_stack_lvl+0x100/0x190 [ 758.646655][T15771] should_fail_ex.cold+0x5/0xa [ 758.646676][T15771] should_failslab+0xc2/0x120 [ 758.646703][T15771] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 758.646727][T15771] ? alloc_empty_file+0x55/0x1c0 [ 758.646745][T15771] ? __pfx_stack_trace_save+0x10/0x10 [ 758.646776][T15771] alloc_empty_file+0x55/0x1c0 [ 758.646796][T15771] path_openat+0xe8/0x31a0 [ 758.646820][T15771] ? kasan_save_stack+0x3f/0x50 [ 758.646842][T15771] ? kasan_save_stack+0x30/0x50 [ 758.646864][T15771] ? kasan_save_track+0x14/0x30 [ 758.646886][T15771] ? __kasan_slab_alloc+0x89/0x90 [ 758.646910][T15771] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 758.646932][T15771] ? do_getname+0x35/0x390 [ 758.646948][T15771] ? do_sys_openat2+0xc5/0x1e0 [ 758.646967][T15771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.646996][T15771] ? __pfx_path_openat+0x10/0x10 [ 758.647029][T15771] do_file_open+0x20e/0x430 [ 758.647057][T15771] ? __pfx_do_file_open+0x10/0x10 [ 758.647097][T15771] ? alloc_fd+0x476/0x790 [ 758.647124][T15771] ? do_getname+0x191/0x390 [ 758.647144][T15771] do_sys_openat2+0x10d/0x1e0 [ 758.647164][T15771] ? __pfx_do_sys_openat2+0x10/0x10 [ 758.647182][T15771] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 758.647214][T15771] ? __fget_files+0x21f/0x3d0 [ 758.647241][T15771] __x64_sys_openat+0x12d/0x210 [ 758.647262][T15771] ? __pfx___x64_sys_openat+0x10/0x10 [ 758.647281][T15771] ? ksys_write+0x1ac/0x250 [ 758.647312][T15771] do_syscall_64+0x106/0xf80 [ 758.647337][T15771] ? clear_bhb_loop+0x40/0x90 [ 758.647359][T15771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.647378][T15771] RIP: 0033:0x7fd84759bf79 [ 758.647394][T15771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 758.647412][T15771] RSP: 002b:00007fd84838f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 758.647431][T15771] RAX: ffffffffffffffda RBX: 00007fd847815fa0 RCX: 00007fd84759bf79 [ 758.647443][T15771] RDX: 0000000000000000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 758.647454][T15771] RBP: 00007fd84838f090 R08: 0000000000000000 R09: 0000000000000000 [ 758.647465][T15771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 758.647476][T15771] R13: 00007fd847816038 R14: 00007fd847815fa0 R15: 00007ffc067826e8 [ 758.647497][T15771] [ 760.442253][T15785] FAULT_INJECTION: forcing a failure. [ 760.442253][T15785] name failslab, interval 1, probability 0, space 0, times 0 [ 760.532551][T15785] CPU: 0 UID: 0 PID: 15785 Comm: syz.2.2268 Tainted: G U L syzkaller #0 PREEMPT(full) [ 760.532585][T15785] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 760.532593][T15785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 760.532604][T15785] Call Trace: [ 760.532611][T15785] [ 760.532620][T15785] dump_stack_lvl+0x100/0x190 [ 760.532652][T15785] should_fail_ex.cold+0x5/0xa [ 760.532675][T15785] should_failslab+0xc2/0x120 [ 760.532703][T15785] __kmalloc_cache_noprof+0x7a/0x6f0 [ 760.532724][T15785] ? rfkill_fop_open+0x1b6/0x750 [ 760.532745][T15785] ? mark_held_locks+0x40/0x70 [ 760.532770][T15785] rfkill_fop_open+0x1b6/0x750 [ 760.532796][T15785] ? __pfx_rfkill_fop_open+0x10/0x10 [ 760.532819][T15785] misc_open+0x26d/0x450 [ 760.532844][T15785] ? __pfx_misc_open+0x10/0x10 [ 760.532868][T15785] chrdev_open+0x234/0x6a0 [ 760.532894][T15785] ? __pfx_apparmor_file_open+0x10/0x10 [ 760.532916][T15785] ? __pfx_chrdev_open+0x10/0x10 [ 760.532944][T15785] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 760.532977][T15785] do_dentry_open+0x6d8/0x1660 [ 760.533003][T15785] ? __pfx_chrdev_open+0x10/0x10 [ 760.533036][T15785] vfs_open+0x82/0x3f0 [ 760.533058][T15785] path_openat+0x208c/0x31a0 [ 760.533092][T15785] ? __pfx_path_openat+0x10/0x10 [ 760.533127][T15785] do_file_open+0x20e/0x430 [ 760.533156][T15785] ? __pfx_do_file_open+0x10/0x10 [ 760.533198][T15785] ? alloc_fd+0x476/0x790 [ 760.533225][T15785] ? do_getname+0x191/0x390 [ 760.533246][T15785] do_sys_openat2+0x10d/0x1e0 [ 760.533266][T15785] ? __pfx_do_sys_openat2+0x10/0x10 [ 760.533318][T15785] ? __fget_files+0x21f/0x3d0 [ 760.533349][T15785] __x64_sys_openat+0x12d/0x210 [ 760.533370][T15785] ? __pfx___x64_sys_openat+0x10/0x10 [ 760.533401][T15785] do_syscall_64+0x106/0xf80 [ 760.533428][T15785] ? clear_bhb_loop+0x40/0x90 [ 760.533452][T15785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.533471][T15785] RIP: 0033:0x7fd84759bf79 [ 760.533488][T15785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 760.533505][T15785] RSP: 002b:00007fd84838f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 760.533523][T15785] RAX: ffffffffffffffda RBX: 00007fd847815fa0 RCX: 00007fd84759bf79 [ 760.533535][T15785] RDX: 0000000000000000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 760.533547][T15785] RBP: 00007fd8476327e0 R08: 0000000000000000 R09: 0000000000000000 [ 760.533557][T15785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 760.533569][T15785] R13: 00007fd847816038 R14: 00007fd847815fa0 R15: 00007ffc067826e8 [ 760.533592][T15785] [ 761.069762][T15782] Invalid ELF header magic: != ELF [ 762.882443][T15628] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 763.399910][T15628] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 763.754725][T15628] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 764.299383][T15628] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 766.841477][T15628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 766.946440][T15628] 8021q: adding VLAN 0 to HW filter on device team0 [ 767.088452][T14323] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.095593][T14323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 767.195870][T14323] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.203049][T14323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 767.316948][T15628] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 767.436604][T15628] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 767.875901][T15861] vivid-007: ================= START STATUS ================= [ 767.918042][T15861] vivid-007: Generate PTS: true [ 767.962787][T15861] vivid-007: Generate SCR: true [ 767.994735][T15861] tpg source WxH: 320x240 (Y'CbCr) [ 768.045759][T15861] tpg field: 1 [ 768.055480][T15861] tpg crop: (0,0)/320x240 [ 768.086214][T15861] tpg compose: (0,0)/320x240 [ 768.166710][T15861] tpg colorspace: 8 [ 768.258382][T15861] tpg transfer function: 0/0 [ 768.276402][T15861] tpg Y'CbCr encoding: 0/0 [ 768.357815][T15861] tpg quantization: 0/0 [ 768.362073][T15861] tpg RGB range: 0/2 [ 768.365975][T15861] vivid-007: ================== END STATUS ================== [ 768.723803][T15628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 768.790212][T15872] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2276'. [ 769.950430][T15887] bridge0: port 5(team0) entered blocking state [ 769.956769][T15887] bridge0: port 5(team0) entered disabled state [ 770.086153][T15887] team0: entered allmulticast mode [ 770.268513][T15887] team_slave_0: entered allmulticast mode [ 770.431335][T15887] team_slave_1: entered allmulticast mode [ 770.525627][T15906] netlink: 'syz.2.2279': attribute type 4 has an invalid length. [ 770.554916][T15887] team0: entered promiscuous mode [ 770.568790][T15909] netlink: 'syz.3.2280': attribute type 10 has an invalid length. [ 770.609219][T15909] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2280'. [ 770.637896][T15906] netlink: 'syz.2.2279': attribute type 32 has an invalid length. [ 770.683702][T15906] netlink: 46 bytes leftover after parsing attributes in process `syz.2.2279'. [ 770.712858][T15887] team_slave_0: entered promiscuous mode [ 770.861585][T15887] team_slave_1: entered promiscuous mode [ 770.977450][T15887] bridge0: port 5(team0) entered blocking state [ 770.983947][T15887] bridge0: port 5(team0) entered forwarding state [ 771.813727][T15628] veth0_vlan: entered promiscuous mode [ 772.036544][T15628] veth1_vlan: entered promiscuous mode [ 772.318842][T15917] zswap: compressor ¸„ not available [ 772.478997][T15628] veth0_macvtap: entered promiscuous mode [ 772.679272][T15628] veth1_macvtap: entered promiscuous mode [ 772.925903][ T5915] Process accounting paused [ 773.176522][T14320] hsr_slave_0: left promiscuous mode [ 773.210323][T14320] hsr_slave_1: left promiscuous mode [ 773.248025][T14320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 773.255516][T14320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 773.360317][T14320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 773.402047][T14320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 773.507749][T14320] veth1_macvtap: left promiscuous mode [ 773.554722][T14320] veth0_macvtap: left promiscuous mode [ 773.609245][T14320] veth1_vlan: left promiscuous mode [ 773.614521][T14320] veth0_vlan: left promiscuous mode [ 774.423028][T15936] snd_aloop snd_aloop.0: Parsing timer source 'emote_address st tx_queue rx_queue tr tm' failed with -22 [ 774.616774][T14320] team0 (unregistering): Port device team_slave_1 removed [ 774.684912][T14320] team0 (unregistering): Port device team_slave_0 removed [ 775.235734][T15628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 775.305225][T15628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 775.370203][T15928] Process accounting resumed [ 775.604472][T14326] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.656839][T14326] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.843368][T14326] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.893861][T14326] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.921386][T15949] vivid-007: ================= START STATUS ================= [ 775.980875][T15949] vivid-007: Generate PTS: true [ 775.985821][T15949] vivid-007: Generate SCR: true [ 776.062510][T15949] tpg source WxH: 320x240 (Y'CbCr) [ 776.115447][T15949] tpg field: 1 [ 776.148426][T15949] tpg crop: (0,0)/320x240 [ 776.218278][T15949] tpg compose: (0,0)/320x240 [ 776.222923][T15949] tpg colorspace: 8 [ 776.226837][T15949] tpg transfer function: 0/0 [ 776.419357][T15949] tpg Y'CbCr encoding: 0/0 [ 776.423811][T15949] tpg quantization: 0/0 [ 776.542940][T15949] tpg RGB range: 0/2 [ 776.546892][T15949] vivid-007: ================== END STATUS ================== [ 776.769869][T14328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 776.820499][T14328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 778.035207][T14326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.083004][T14326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.658888][T15986] vivid-007: ================= START STATUS ================= [ 779.666578][T15986] vivid-007: Generate PTS: true [ 779.852509][T15986] vivid-007: Generate SCR: true [ 780.038555][T15986] tpg source WxH: 320x240 (Y'CbCr) [ 780.200126][T15986] tpg field: 1 [ 780.260861][T15986] tpg crop: (0,0)/320x240 [ 780.347920][T15986] tpg compose: (0,0)/320x240 [ 780.448128][T15986] tpg colorspace: 8 [ 780.616906][T15986] tpg transfer function: 0/0 [ 780.677535][T15986] tpg Y'CbCr encoding: 0/0 [ 780.692568][T15995] snd_aloop snd_aloop.0: Parsing timer source 'emote_address st tx_queue rx_queue tr tm' failed with -22 [ 780.773740][T15986] tpg quantization: 0/0 [ 780.887918][T15986] tpg RGB range: 0/2 [ 780.961356][T15986] vivid-007: ================== END STATUS ================== [ 782.543511][T16010] futex_wake_op: syz.0.2300 tries to shift op by -1; fix this program [ 783.950206][T16010] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 783.962761][T16019] FAULT_INJECTION: forcing a failure. [ 783.962761][T16019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 784.348694][T16019] CPU: 0 UID: 0 PID: 16019 Comm: syz.2.2302 Tainted: G U L syzkaller #0 PREEMPT(full) [ 784.348730][T16019] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 784.348738][T16019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 784.348749][T16019] Call Trace: [ 784.348756][T16019] [ 784.348763][T16019] dump_stack_lvl+0x100/0x190 [ 784.348795][T16019] should_fail_ex.cold+0x5/0xa [ 784.348817][T16019] _copy_from_user+0x2e/0xd0 [ 784.348844][T16019] copy_mount_options+0x76/0x190 [ 784.348867][T16019] __x64_sys_mount+0x1ab/0x310 [ 784.348885][T16019] ? __pfx___x64_sys_mount+0x10/0x10 [ 784.348910][T16019] do_syscall_64+0x106/0xf80 [ 784.348936][T16019] ? clear_bhb_loop+0x40/0x90 [ 784.348959][T16019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.348979][T16019] RIP: 0033:0x7fd84759bf79 [ 784.348995][T16019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 784.349014][T16019] RSP: 002b:00007fd84836e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 784.349043][T16019] RAX: ffffffffffffffda RBX: 00007fd847816090 RCX: 00007fd84759bf79 [ 784.349056][T16019] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 0000200000000180 [ 784.349068][T16019] RBP: 00007fd8476327e0 R08: 0000200000000280 R09: 0000000000000000 [ 784.349079][T16019] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 784.349090][T16019] R13: 00007fd847816128 R14: 00007fd847816090 R15: 00007ffc067826e8 [ 784.349114][T16019] [ 785.512792][T16027] zswap: compressor ¸„ not available [ 786.739245][ T29] audit: type=1800 audit(2147484094.551:146): pid=16052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2307" name="dbroot" dev="configfs" ino=216164 res=0 errno=0 [ 788.128060][T16063] input: f¬ as /devices/virtual/input/input14 [ 788.581858][T16063] zram: Removed device: zram0 [ 790.265111][T16083] ptp ptp0: guarantee physical clock free running [ 794.696203][T16119] random: crng reseeded on system resumption [ 794.757117][T16120] ptp ptp0: guarantee physical clock free running [ 796.662450][ T29] audit: type=1326 audit(2147484104.471:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16140 comm="syz.2.2329" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd84759bf79 code=0x0 [ 797.747047][ T29] audit: type=1800 audit(2147484105.551:148): pid=16161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2332" name="dbroot" dev="configfs" ino=222796 res=0 errno=0 [ 799.933038][T16188] netlink: 186 bytes leftover after parsing attributes in process `syz.3.2339'. [ 800.144684][T16195] FAULT_INJECTION: forcing a failure. [ 800.144684][T16195] name failslab, interval 1, probability 0, space 0, times 0 [ 800.416737][T16195] CPU: 0 UID: 8 PID: 16195 Comm: syz.4.2338 Tainted: G U L syzkaller #0 PREEMPT(full) [ 800.416773][T16195] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 800.416781][T16195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 800.416792][T16195] Call Trace: [ 800.416799][T16195] [ 800.416807][T16195] dump_stack_lvl+0x100/0x190 [ 800.416839][T16195] should_fail_ex.cold+0x5/0xa [ 800.416862][T16195] should_failslab+0xc2/0x120 [ 800.416890][T16195] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 800.416915][T16195] ? __d_alloc+0x34/0xa80 [ 800.416951][T16195] ? lockdep_init_map_type+0x5c/0x250 [ 800.416978][T16195] __d_alloc+0x34/0xa80 [ 800.417008][T16195] d_alloc_pseudo+0x1c/0xc0 [ 800.417030][T16195] alloc_file_pseudo+0xcf/0x230 [ 800.417052][T16195] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 800.417072][T16195] ? alloc_fd+0x476/0x790 [ 800.417101][T16195] sock_alloc_file+0x50/0x210 [ 800.417130][T16195] __sys_socket+0x1c0/0x260 [ 800.417152][T16195] ? __pfx___sys_socket+0x10/0x10 [ 800.417179][T16195] __x64_sys_socket+0x72/0xb0 [ 800.417199][T16195] ? lockdep_hardirqs_on+0x78/0x100 [ 800.417242][T16195] do_syscall_64+0x106/0xf80 [ 800.417268][T16195] ? clear_bhb_loop+0x40/0x90 [ 800.417291][T16195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.417310][T16195] RIP: 0033:0x7fb0f059bf79 [ 800.417326][T16195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 800.417344][T16195] RSP: 002b:00007fb0f1428028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 800.417364][T16195] RAX: ffffffffffffffda RBX: 00007fb0f0815fa0 RCX: 00007fb0f059bf79 [ 800.417376][T16195] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 800.417387][T16195] RBP: 00007fb0f06327e0 R08: 0000000000000000 R09: 0000000000000000 [ 800.417399][T16195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 800.417410][T16195] R13: 00007fb0f0816038 R14: 00007fb0f0815fa0 R15: 00007ffd33f237d8 [ 800.417433][T16195] [ 801.206997][ T29] audit: type=1800 audit(2147484108.951:149): pid=16206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2341" name="dbroot" dev="configfs" ino=224637 res=0 errno=0 [ 801.421985][T16212] random: crng reseeded on system resumption [ 801.725548][T16221] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2346'. [ 802.011857][T16221] bridge_slave_1: left allmulticast mode [ 802.182848][T16221] bridge_slave_1: left promiscuous mode [ 802.342696][T16221] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.475299][T16233] snd_aloop snd_aloop.0: Parsing timer source 'emote_address st tx_queue rx_queue tr tm' failed with -22 [ 802.648752][T16234] snd_aloop snd_aloop.0: Parsing timer source 'emote_address st tx_queue rx_queue tr tm' failed with -22 [ 802.688929][T16221] bridge_slave_0: left allmulticast mode [ 802.823883][T16221] bridge_slave_0: left promiscuous mode [ 802.982362][T16221] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.685996][ T5915] ------------[ cut here ]------------ [ 803.686033][ T5915] ODEBUG: free active (active state 0) object: ffff888077b0d460 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0 [ 803.686076][ T5915] WARNING: lib/debugobjects.c:612 at debug_print_object+0x18e/0x2a0, CPU#0: kworker/0:5/5915 [ 803.686105][ T5915] Modules linked in: [ 803.686150][ T5915] CPU: 0 UID: 0 PID: 5915 Comm: kworker/0:5 Tainted: G U L syzkaller #0 PREEMPT(full) [ 803.686178][ T5915] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 803.686186][ T5915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 803.686200][ T5915] Workqueue: events devcd_del [ 803.686223][ T5915] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 803.686244][ T5915] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 42 56 e9 0b 41 56 48 8b 14 dd e0 f6 1a 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 dc f5 de 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 803.686264][ T5915] RSP: 0018:ffffc900042e7858 EFLAGS: 00010246 [ 803.686280][ T5915] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 803.686292][ T5915] RDX: ffffffff8c1af620 RSI: ffffffff8c1af240 RDI: ffffffff90e41370 [ 803.686305][ T5915] RBP: 0000000000000001 R08: ffff888077b0d460 R09: ffffffff8bb2b800 [ 803.686318][ T5915] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1af240 [ 803.686330][ T5915] R13: ffffffff8bb2b840 R14: ffffffff8a952990 R15: ffffc900042e7958 [ 803.686343][ T5915] FS: 0000000000000000(0000) GS:ffff888124354000(0000) knlGS:0000000000000000 [ 803.686363][ T5915] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 803.686376][ T5915] CR2: 0000000004021000 CR3: 000000007cf22000 CR4: 00000000003526f0 [ 803.686388][ T5915] Call Trace: [ 803.686395][ T5915] [ 803.686402][ T5915] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 803.686427][ T5915] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 803.686456][ T5915] debug_check_no_obj_freed+0x4da/0x630 [ 803.686485][ T5915] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 803.686508][ T5915] ? __page_table_check_zero+0x333/0x410 [ 803.686540][ T5915] ? __page_table_check_zero+0x338/0x410 [ 803.686571][ T5915] __free_frozen_pages+0x36b/0x10a0 [ 803.686597][ T5915] hci_release_dev+0x4ef/0x630 [ 803.686620][ T5915] ? __pfx_hci_release_dev+0x10/0x10 [ 803.686642][ T5915] ? device_release+0x69/0x240 [ 803.686669][ T5915] ? rcu_is_watching+0x12/0xc0 [ 803.686695][ T5915] ? device_release+0x69/0x240 [ 803.686722][ T5915] ? kfree+0x2ec/0x6b0 [ 803.686744][ T5915] bt_host_release+0x6a/0xb0 [ 803.686770][ T5915] ? __pfx_bt_host_release+0x10/0x10 [ 803.686797][ T5915] device_release+0xa4/0x240 [ 803.686825][ T5915] kobject_put+0x1f7/0x640 [ 803.686845][ T5915] put_device+0x1f/0x30 [ 803.686873][ T5915] devcd_dev_release+0x122/0x170 [ 803.686895][ T5915] ? __pfx_devcd_dev_release+0x10/0x10 [ 803.686917][ T5915] device_release+0xa4/0x240 [ 803.686945][ T5915] kobject_put+0x1f7/0x640 [ 803.686972][ T5915] put_device+0x1f/0x30 [ 803.686999][ T5915] devcd_del+0xaf/0xd0 [ 803.687021][ T5915] process_one_work+0x9d7/0x1920 [ 803.687055][ T5915] ? __pfx_process_one_work+0x10/0x10 [ 803.687086][ T5915] ? __pfx_devcd_del+0x10/0x10 [ 803.687111][ T5915] worker_thread+0x5da/0xe40 [ 803.687141][ T5915] ? __pfx_worker_thread+0x10/0x10 [ 803.687167][ T5915] ? kthread+0x13a/0x450 [ 803.687189][ T5915] ? __pfx_worker_thread+0x10/0x10 [ 803.687213][ T5915] kthread+0x370/0x450 [ 803.687235][ T5915] ? __pfx_kthread+0x10/0x10 [ 803.687259][ T5915] ret_from_fork+0x754/0xd80 [ 803.687288][ T5915] ? __pfx_ret_from_fork+0x10/0x10 [ 803.687316][ T5915] ? __switch_to+0x7b4/0x1120 [ 803.687336][ T5915] ? __pfx_kthread+0x10/0x10 [ 803.687361][ T5915] ret_from_fork_asm+0x1a/0x30 [ 803.687391][ T5915] [ 803.687401][ T5915] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 803.687415][ T5915] CPU: 0 UID: 0 PID: 5915 Comm: kworker/0:5 Tainted: G U L syzkaller #0 PREEMPT(full) [ 803.687441][ T5915] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 803.687448][ T5915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 803.687461][ T5915] Workqueue: events devcd_del [ 803.687480][ T5915] Call Trace: [ 803.687487][ T5915] [ 803.687495][ T5915] dump_stack_lvl+0x100/0x190 [ 803.687521][ T5915] vpanic+0x552/0x970 [ 803.687540][ T5915] ? __pfx_vpanic+0x10/0x10 [ 803.687564][ T5915] panic+0xd1/0xe0 [ 803.687582][ T5915] ? __pfx_panic+0x10/0x10 [ 803.687605][ T5915] ? check_panic_on_warn+0x1f/0x90 [ 803.687638][ T5915] check_panic_on_warn.cold+0x19/0x34 [ 803.687658][ T5915] ? debug_print_object+0x18e/0x2a0 [ 803.687677][ T5915] __warn.cold+0x191/0x348 [ 803.687698][ T5915] __report_bug+0x296/0x3d0 [ 803.687721][ T5915] ? debug_print_object+0x18e/0x2a0 [ 803.687742][ T5915] ? __pfx___report_bug+0x10/0x10 [ 803.687772][ T5915] ? __lock_acquire+0x4a5/0x2630 [ 803.687794][ T5915] ? unwind_next_frame+0x3c8/0x1ea0 [ 803.687816][ T5915] report_bug_entry+0xe1/0x290 [ 803.687840][ T5915] ? debug_print_object+0x19b/0x2a0 [ 803.687860][ T5915] handle_bug+0x1c9/0x2a0 [ 803.687878][ T5915] exc_invalid_op+0x17/0x50 [ 803.687897][ T5915] asm_exc_invalid_op+0x1a/0x20 [ 803.687915][ T5915] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 803.687935][ T5915] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 42 56 e9 0b 41 56 48 8b 14 dd e0 f6 1a 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 dc f5 de 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 803.687958][ T5915] RSP: 0018:ffffc900042e7858 EFLAGS: 00010246 [ 803.687972][ T5915] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 803.687984][ T5915] RDX: ffffffff8c1af620 RSI: ffffffff8c1af240 RDI: ffffffff90e41370 [ 803.687995][ T5915] RBP: 0000000000000001 R08: ffff888077b0d460 R09: ffffffff8bb2b800 [ 803.688007][ T5915] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1af240 [ 803.688018][ T5915] R13: ffffffff8bb2b840 R14: ffffffff8a952990 R15: ffffc900042e7958 [ 803.688031][ T5915] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 803.688063][ T5915] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 803.688086][ T5915] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 803.688114][ T5915] debug_check_no_obj_freed+0x4da/0x630 [ 803.688143][ T5915] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 803.688165][ T5915] ? __page_table_check_zero+0x333/0x410 [ 803.688195][ T5915] ? __page_table_check_zero+0x338/0x410 [ 803.688225][ T5915] __free_frozen_pages+0x36b/0x10a0 [ 803.688251][ T5915] hci_release_dev+0x4ef/0x630 [ 803.688273][ T5915] ? __pfx_hci_release_dev+0x10/0x10 [ 803.688294][ T5915] ? device_release+0x69/0x240 [ 803.688321][ T5915] ? rcu_is_watching+0x12/0xc0 [ 803.688346][ T5915] ? device_release+0x69/0x240 [ 803.688372][ T5915] ? kfree+0x2ec/0x6b0 [ 803.688393][ T5915] bt_host_release+0x6a/0xb0 [ 803.688418][ T5915] ? __pfx_bt_host_release+0x10/0x10 [ 803.688444][ T5915] device_release+0xa4/0x240 [ 803.688472][ T5915] kobject_put+0x1f7/0x640 [ 803.688492][ T5915] put_device+0x1f/0x30 [ 803.688519][ T5915] devcd_dev_release+0x122/0x170 [ 803.688540][ T5915] ? __pfx_devcd_dev_release+0x10/0x10 [ 803.688561][ T5915] device_release+0xa4/0x240 [ 803.688589][ T5915] kobject_put+0x1f7/0x640 [ 803.688608][ T5915] put_device+0x1f/0x30 [ 803.688635][ T5915] devcd_del+0xaf/0xd0 [ 803.688656][ T5915] process_one_work+0x9d7/0x1920 [ 803.688689][ T5915] ? __pfx_process_one_work+0x10/0x10 [ 803.688721][ T5915] ? __pfx_devcd_del+0x10/0x10 [ 803.688744][ T5915] worker_thread+0x5da/0xe40 [ 803.688774][ T5915] ? __pfx_worker_thread+0x10/0x10 [ 803.688800][ T5915] ? kthread+0x13a/0x450 [ 803.688821][ T5915] ? __pfx_worker_thread+0x10/0x10 [ 803.688844][ T5915] kthread+0x370/0x450 [ 803.688865][ T5915] ? __pfx_kthread+0x10/0x10 [ 803.688889][ T5915] ret_from_fork+0x754/0xd80 [ 803.688915][ T5915] ? __pfx_ret_from_fork+0x10/0x10 [ 803.688943][ T5915] ? __switch_to+0x7b4/0x1120 [ 803.688968][ T5915] ? __pfx_kthread+0x10/0x10 [ 803.688992][ T5915] ret_from_fork_asm+0x1a/0x30 [ 803.689021][ T5915] [ 803.689085][ T5915] Kernel Offset: disabled