last executing test programs: 3m9.261337052s ago: executing program 3 (id=436): madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pipe2$auto(0x0, 0x80) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x8) r0 = socket(0x2c, 0x3, 0x0) listen$auto(0x3, 0x83) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000080)='[') r2 = socket(0xa, 0x60f181cddb6f5df0, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x81, 0x4, 0x9d81, 0x6) r3 = openat$auto_autofs_root_operations_autofs_i(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bluetooth/hci1/hci1:201\x00', 0x2, 0x0) ioctl$auto_AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, &(0x7f0000000180)=0x401) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0xffff, 0x7f, 0x0, 0x90) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x6) bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0xae30, 0x8, 0xfff, r0, 0x2b, 0x7ff}, 0x6f4) close_range$auto(r2, r4, 0x2) 3m8.219015191s ago: executing program 3 (id=439): mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x80000001) (async) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x80000001) mmap$auto(0x0, 0x8, 0xdc, 0x9b72, 0x2, 0x8000) r0 = socket(0x15, 0x5, 0x0) setsockopt$auto(0x3, 0x114, 0x3f, 0x0, 0x4) creat$auto(&(0x7f0000000000)='./file0\x00', 0x9) (async) creat$auto(&(0x7f0000000000)='./file0\x00', 0x9) socket(0xa, 0x1, 0x84) sendmsg$auto_NL80211_CMD_TDLS_MGMT(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="1e000000", @ANYRES16=0x0, @ANYBLOB="080028bd7000ffdbdf25520000000600950008000000"], 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x90) (async) sendmsg$auto_NL80211_CMD_TDLS_MGMT(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="1e000000", @ANYRES16=0x0, @ANYBLOB="080028bd7000ffdbdf25520000000600950008000000"], 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x90) r1 = pidfd_open$auto(0x1, 0x0) move_mount$auto(0xffffffffffffffff, 0x0, r1, 0x0, 0x273) unshare$auto(0x40000080) socket(0x2, 0x3, 0x6) (async) socket(0x2, 0x3, 0x6) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bus/usb/003/001\x00', 0x40101, 0x0) (async) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bus/usb/003/001\x00', 0x40101, 0x0) ioctl$auto_USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000000c0)={0xa1, 0x0, 0x29, 0x0, 0xfff8, 0xfffffffe, 0x0}) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_bridges_fops_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/dri/vkms/encoder-1/bridges\x00', 0x0, 0x0) bpf$auto_BPF_LINK_GET_NEXT_ID(0x1f, &(0x7f0000000580)=@link_detach={r3}, 0x5) (async) bpf$auto_BPF_LINK_GET_NEXT_ID(0x1f, &(0x7f0000000580)=@link_detach={r3}, 0x5) mincore$auto(0x0, 0x10000, 0x0) shmctl$auto_SHM_INFO(0x2, 0xe, &(0x7f0000000180)={{0x8, 0xffffffffffffffff, 0xee00, 0x6, 0x10001, 0x2, 0x7}, 0x3, 0x5, 0x6, 0x9, @inferred, @raw=0x40000006, 0xfff9, 0x0, &(0x7f0000000500)="0a76d4153b259a3e4c54e89a3c4c2d181d8375d3a53a58df75397b1c721573e7d4a66f55a58800da5c5409f9bb373a9c64f435e9538231b602558d0425ec15093110e8a016ce8bfdacf33d6b7a7739c6f5ae99055582d9b4dd53eab63e045312f34072e8566ec74fcfaff494", &(0x7f00000000c0)="26cc19ecc36f960629e5e45dc0050f0c3d598860ebee97ad7310ab626518c633d9d51d2d191d1cb60c5922de7276653d45efe22753568911e073ea9c8fb49882ba894d76775b8e18dd724cd731c07d98495ed3ce20b5675c2ab369e9cb590c5c31d093c7737d33265ccf483043fbe42579c9881cbb90a3ecbbd504a8aff4696f4a90062e6c7731e844557e117c9777d50c81aec890d8759005fd1c9a76e3de50c3d2227e7614029f"}) msgctl$auto_IPC_SET(0x5, 0x1, &(0x7f0000000280)={{0x1, 0xee00, 0xee00, 0x80000000, 0xffffff81, 0x2, 0x927d}, &(0x7f0000000200)=0x9, &(0x7f0000000240)=0x6d, 0x7, 0x3, 0x2, 0x8, 0x3, 0xfff8, 0xc, 0xfffa}) (async) msgctl$auto_IPC_SET(0x5, 0x1, &(0x7f0000000280)={{0x1, 0xee00, 0xee00, 0x80000000, 0xffffff81, 0x2, 0x927d}, &(0x7f0000000200)=0x9, &(0x7f0000000240)=0x6d, 0x7, 0x3, 0x2, 0x8, 0x3, 0xfff8, 0xc, 0xfffa}) msgctl$auto_IPC_INFO(0x1ff, 0x3, &(0x7f0000000380)={{0x60, r4, r5, 0xfffffffb, 0x4, 0x7, 0x100}, &(0x7f0000000300)=0x3, &(0x7f0000000340)=0x6, 0x7, 0x10, 0x2, 0x4, 0x5, 0x0, 0x4, 0x2, @raw=0x403, @inferred=0xffffffffffffffff}) setsockopt$auto(0x3, 0x0, 0x31, 0x0, 0x28) setsockopt$auto(0x3, 0x10000000084, 0x4, 0x0, 0xd) r6 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x0, 0x0) read$auto_ftrace_event_filter_fops_trace_events(r6, 0x0, 0x0) bpf$auto(0x12, 0x0, 0x26) 3m7.553170799s ago: executing program 3 (id=441): bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x5, 0x21ea, 0x7ff, 0x3, 0x9, 0x7, 0x2e, 0x3f00}, 0x6f4) 3m7.328497599s ago: executing program 3 (id=442): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x1a) mmap$auto(0x0, 0x2020006, 0x3, 0x18, 0xfffffffffffffffa, 0x7) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) r1 = openat$auto_ht40allow_map_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/ieee80211/phy17/ht40allow_map\x00', 0x80000, 0x0) r2 = prctl$auto_SECCOMP_MODE_STRICT(0x2, 0x1, 0x0, 0xa, 0x7fff) close_range$auto(r1, r0, 0x80006) socket(0x2, 0x4, 0x100) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f00000000c0)={0x0, 0x1a, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRES8=r1], 0x1ac}, 0x1, 0x0, 0x0, 0x4011}, 0x40000) mmap$auto(0x0, 0x2000a, 0xdf, 0xe31, 0x40000000000a5, 0x8000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8040, 0x0) mmap$auto(0x0, 0x7, 0x8, 0x16, 0xffffffffffffffff, 0x100000000008000) landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x4000000000009}, 0x7, 0x0) mmap$auto(0x9, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x2020009, 0x2, 0xfa, 0xfffffffffffffffa, 0x8000) prctl$auto(0x4e, 0x1, 0x0, 0x0, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/vlan/config\x00', 0x103000, 0x0) pread64$auto(r4, 0x0, 0x3, 0x5ef6) prctl$auto(0x4e, 0x1, 0x0, 0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(&(0x7f0000000100)={0x20080522, 0x0}, 0x0) socket(0x5, 0x2, 0x9) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) readv$auto(0x3, &(0x7f0000000040)={0x0, 0xfffb}, 0x1) prctl$auto(0x8, 0x4, r5, 0x2, 0x7f) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_test\x00', 0x20461, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000080)='-)f', 0x3) 3m6.269226706s ago: executing program 3 (id=446): r0 = open(&(0x7f0000000000)='./file0\x00', 0x1, 0x190) fcntl$auto_F_OFD_SETLK(r0, 0x25, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$auto_NCSI_CMD_CLEAR_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0x10001}, @NCSI_ATTR_IFINDEX={0x8, 0x1, r1}, @NCSI_ATTR_CHANNEL_ID={0x8, 0x4, 0x7}, @NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0x200}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60000005}, 0x400c003) (async) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), r0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'\x00', 0x0}) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4000000) (async) capget$auto(&(0x7f0000000300)={0x71, 0xffffffffffffffff}, &(0x7f0000000340)={0x4, 0x1c000000, 0x8}) r5 = prctl$auto_PR_SET_MM_BRK(0xfffffd6b, 0x7, r4, 0x20, 0x26) r6 = ioctl$auto_TIOCGPTPEER(r5, 0x5441, 0x0) sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r6, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r2, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SCAN_DONE_REASON={0x5, 0x25, 0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x238}, @NL802154_ATTR_PID={0x8, 0x1c, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3ff}]}, 0x38}}, 0x40) (async) r7 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f00000004c0), r6) sendmsg$auto_SMC_PNETID_GET(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r7, 0x200, 0x70bd26, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x9}, @SMC_PNETID_IBNAME={0x5, 0x3, '\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x64000051}, 0x50) setsockopt$auto(r5, 0x400, 0x0, &(0x7f00000005c0)='\x00', 0x1ff) (async) r8 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000640), r5) sendmsg$auto_MACSEC_CMD_DEL_TXSA(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001700)={&(0x7f0000000680)={0x1060, r8, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x1044, 0x2, 0x0, 0x1, [@generic="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", @typed={0x8, 0x121, 0x0, 0x0, @pid=r4}, @generic="77fcc5db6f378efa920dfab72ddd54bffe05cc818f25e34210811b1742b97427433c0ee63c0ae190", @typed={0x4, 0xbc}, @typed={0xc, 0x7a, 0x0, 0x0, @u64=0x7}]}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r1}]}, 0x1060}, 0x1, 0x0, 0x0, 0xc0}, 0x4004000) fanotify_mark$auto(r6, 0x0, 0x80000000, r0, &(0x7f0000001780)='./file0\x00') (async) r9 = getpid() write$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(r0, &(0x7f00000017c0)="2fc6d257ee3116cca7768bcdf939ada078a03823b9d27592d456f2c2dc16eb113b0d03faccfb6757c068231863ac1aae2af1dca7da139204cfe3f03aa6bd8a23679678f72b9aebb33ff583e6", 0x4c) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000001880), r6) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000018c0)={'dvmrp0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_DEL(r10, &(0x7f0000001980)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r11, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@OVS_DP_ATTR_IFINDEX={0x8, 0x9, r3}, @OVS_DP_ATTR_IFINDEX={0x8, 0x9, r12}, @OVS_DP_ATTR_USER_FEATURES={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x41) (async) ioctl$auto_PPPIOCSPASS(r5, 0x40107447, &(0x7f0000001a00)={0x0, &(0x7f00000019c0)={0x86d0, 0x4, 0x3, @raw=0x9}}) (async) r13 = syz_genetlink_get_family_id$auto_nlbl_calipso(&(0x7f0000001a80), r0) sendmsg$auto_NLBL_CALIPSO_C_LISTALL(r5, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x2c, r13, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10804}, 0x4000000) syz_clone3(&(0x7f0000001d40)={0x44000000, &(0x7f0000001b80)=0xffffffffffffffff, &(0x7f0000001bc0), &(0x7f0000001c00), {0x3b}, &(0x7f0000001c40)=""/91, 0x5b, &(0x7f0000001cc0)=""/44, &(0x7f0000001d00)=[r4, r4, r9, r4, r4, r9, r9, 0xffffffffffffffff, 0x0, r4], 0xa, {r5}}, 0x58) process_madvise$auto_MADV_KEEPONFORK(r14, &(0x7f0000001ec0)={&(0x7f0000001dc0)="daea01dcbb349a846c05b7e08784d5490a1ab6f2548599d7ab3911aa8454ff8b15c811d8ca889ca641f763df9c2d2fd27c6977d5ffa1b0f4f1a3b1cb0185df3a83209e68a6c177f523fa65225077d371ed46deb93720b2e89dc87ccf89b02575898055bd4258b8c76cb0680916fa237c1b52de1e82c72c765ae01f333677134668dc140342b3f9fd9e437ddb4a8f15e1ffcac4cfa8aea0f6b168e050681dcd9f7e55f07e94a52d1e0e0669a1271588b8d0108e93963c98b8c61d27a021eb406010ea781f08c0e4e2", 0x58}, 0x101, 0x13, 0x9) (async) r15 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000001f40), r0) sendmsg$auto_IEEE802154_SET_MACPARAMS(r14, &(0x7f0000002000)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x1c, r15, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0xa6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 3m5.476923689s ago: executing program 3 (id=449): r0 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="020027bd7000fddbdf2525000000050019009a000000060004000000000005002300080000003566ca2e7ce8e02b4f3aac6302c7fa3e483c90375aeb3d70008f14bae39cb08ee304e1ac864f6b96459a56356ead3f8f5d1b9f71288edad8ffe347074d3c703c0de2438c331b417fcdd06fb38aaac50b2505b4816590884e9cc67c2ce29515ca2b79c6b803bf98c6a1101619adeff3ae9226caa0e561e9d33b0d345f8e32c4f625926c97ca1c4075ac17714a09dbfbd8313ca91658e5bccad54b17d4803824f501943b540792e0363f7c2f08f2ee76834f08eea9d7a36a0c08c7e6216fbe48c0713d37478aa304fe0531be7c061c7f6e163e5041be29927f80ad0a76"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) (async) sendmsg$auto_IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r1, 0x0, 0x7, 0x4cbd5d) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec10\x00', 0x101901, 0x0) (async) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec10\x00', 0x101901, 0x0) r3 = openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) fsconfig$auto_FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000000)='#-$@(,\'H.]&]-[$\x00', 0x0, 0x7fff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) epoll_create$auto(0x1) (async) r4 = epoll_create$auto(0x1) capset$auto(0x0, 0x0) epoll_ctl$auto(r4, 0x1, 0x8000000000000000, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x2, 0x9b3, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]}) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000480)={'\x00', 0x8, 0x4, 0x10, 0x0, 0x20000001, "0573830014ae6d1c64f0c9cfc40a01", "354d40de", ' \x00', "0bea5a5a", ["8844f3d239ba5a2b00d1d4f1", "39eb04fad47fb285746e614c", '\x00', "19c57f7fee8d089a10cdd8c3"]}) write$auto(0x3, 0x0, 0x400000000000050) (async) write$auto(0x3, 0x0, 0x400000000000050) r5 = socket(0xa, 0x1, 0x84) getsockopt$auto(r5, 0x0, 0x53, 0x0, 0x0) (async) getsockopt$auto(r5, 0x0, 0x53, 0x0, 0x0) mmap$auto(0x9, 0x810004, 0xb, 0x20000000000010, 0x3, 0x8000) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) socket(0x29, 0x2, 0x0) socket(0xa, 0x1, 0x84) getpid() (async) r6 = getpid() process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x800000005, &(0x7f0000000500)={&(0x7f0000000080), 0x1ffffffff}, 0x2, 0x0) (async) process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x800000005, &(0x7f0000000500)={&(0x7f0000000080), 0x1ffffffff}, 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/comm\x00', 0x480002, 0x0) (async) r7 = openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/comm\x00', 0x480002, 0x0) write$auto_proc_pid_set_comm_operations_base(r7, &(0x7f0000000000)="bc", 0x1) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x800000000, 0x2020009, 0x200, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) waitid$auto_P_PIDFD(0x3, r1, &(0x7f0000000000)={@siginfo_0_0={0x7ff, 0x7, 0xa, @_timer={0x0, 0x5, @sival_ptr=&(0x7f0000000600)="7912be3a5670b8f293525cc181ee78eccdbe5e35ba0b53a1e31aa24fef06e5402027078f029778d7d17e68692e916accc536a02d36827b867bc3589937d27d1b5b5c324235f531309d2f07aa1aade2132f2ec3109a1a37b7da94f169a0161881db0a3ecbd95e6e77a471d7b0e48b8add68bec8e8e8ad461c6c08f87beb93824c39549b267f2de300c3e122644061c88c4cfdc0b2373afc1199c8f5f74560bc9ad49cf2ca08b800fa187a1e692471ab723f590e38242bad687b958e2da985c79850d87a9b1d5a7d4c4bee7b3f21", 0x5}}}, 0x53, 0x0) (async) waitid$auto_P_PIDFD(0x3, r1, &(0x7f0000000000)={@siginfo_0_0={0x7ff, 0x7, 0xa, @_timer={0x0, 0x5, @sival_ptr=&(0x7f0000000600)="7912be3a5670b8f293525cc181ee78eccdbe5e35ba0b53a1e31aa24fef06e5402027078f029778d7d17e68692e916accc536a02d36827b867bc3589937d27d1b5b5c324235f531309d2f07aa1aade2132f2ec3109a1a37b7da94f169a0161881db0a3ecbd95e6e77a471d7b0e48b8add68bec8e8e8ad461c6c08f87beb93824c39549b267f2de300c3e122644061c88c4cfdc0b2373afc1199c8f5f74560bc9ad49cf2ca08b800fa187a1e692471ab723f590e38242bad687b958e2da985c79850d87a9b1d5a7d4c4bee7b3f21", 0x5}}}, 0x53, 0x0) 2m50.249426678s ago: executing program 32 (id=449): r0 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) (async) sendmsg$auto_IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="020027bd7000fddbdf2525000000050019009a000000060004000000000005002300080000003566ca2e7ce8e02b4f3aac6302c7fa3e483c90375aeb3d70008f14bae39cb08ee304e1ac864f6b96459a56356ead3f8f5d1b9f71288edad8ffe347074d3c703c0de2438c331b417fcdd06fb38aaac50b2505b4816590884e9cc67c2ce29515ca2b79c6b803bf98c6a1101619adeff3ae9226caa0e561e9d33b0d345f8e32c4f625926c97ca1c4075ac17714a09dbfbd8313ca91658e5bccad54b17d4803824f501943b540792e0363f7c2f08f2ee76834f08eea9d7a36a0c08c7e6216fbe48c0713d37478aa304fe0531be7c061c7f6e163e5041be29927f80ad0a76"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r1, 0x0, 0x7, 0x4cbd5d) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec10\x00', 0x101901, 0x0) (async) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec10\x00', 0x101901, 0x0) r3 = openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) fsconfig$auto_FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000000)='#-$@(,\'H.]&]-[$\x00', 0x0, 0x7fff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) epoll_create$auto(0x1) (async) r4 = epoll_create$auto(0x1) capset$auto(0x0, 0x0) epoll_ctl$auto(r4, 0x1, 0x8000000000000000, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x2, 0x9b3, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]}) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000480)={'\x00', 0x8, 0x4, 0x10, 0x0, 0x20000001, "0573830014ae6d1c64f0c9cfc40a01", "354d40de", ' \x00', "0bea5a5a", ["8844f3d239ba5a2b00d1d4f1", "39eb04fad47fb285746e614c", '\x00', "19c57f7fee8d089a10cdd8c3"]}) write$auto(0x3, 0x0, 0x400000000000050) (async) write$auto(0x3, 0x0, 0x400000000000050) r5 = socket(0xa, 0x1, 0x84) getsockopt$auto(r5, 0x0, 0x53, 0x0, 0x0) (async) getsockopt$auto(r5, 0x0, 0x53, 0x0, 0x0) mmap$auto(0x9, 0x810004, 0xb, 0x20000000000010, 0x3, 0x8000) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) socket(0x29, 0x2, 0x0) socket(0xa, 0x1, 0x84) getpid() (async) r6 = getpid() process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x800000005, &(0x7f0000000500)={&(0x7f0000000080), 0x1ffffffff}, 0x2, 0x0) (async) process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x800000005, &(0x7f0000000500)={&(0x7f0000000080), 0x1ffffffff}, 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/comm\x00', 0x480002, 0x0) (async) r7 = openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/comm\x00', 0x480002, 0x0) write$auto_proc_pid_set_comm_operations_base(r7, &(0x7f0000000000)="bc", 0x1) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x800000000, 0x2020009, 0x200, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) waitid$auto_P_PIDFD(0x3, r1, &(0x7f0000000000)={@siginfo_0_0={0x7ff, 0x7, 0xa, @_timer={0x0, 0x5, @sival_ptr=&(0x7f0000000600)="7912be3a5670b8f293525cc181ee78eccdbe5e35ba0b53a1e31aa24fef06e5402027078f029778d7d17e68692e916accc536a02d36827b867bc3589937d27d1b5b5c324235f531309d2f07aa1aade2132f2ec3109a1a37b7da94f169a0161881db0a3ecbd95e6e77a471d7b0e48b8add68bec8e8e8ad461c6c08f87beb93824c39549b267f2de300c3e122644061c88c4cfdc0b2373afc1199c8f5f74560bc9ad49cf2ca08b800fa187a1e692471ab723f590e38242bad687b958e2da985c79850d87a9b1d5a7d4c4bee7b3f21", 0x5}}}, 0x53, 0x0) (async) waitid$auto_P_PIDFD(0x3, r1, &(0x7f0000000000)={@siginfo_0_0={0x7ff, 0x7, 0xa, @_timer={0x0, 0x5, @sival_ptr=&(0x7f0000000600)="7912be3a5670b8f293525cc181ee78eccdbe5e35ba0b53a1e31aa24fef06e5402027078f029778d7d17e68692e916accc536a02d36827b867bc3589937d27d1b5b5c324235f531309d2f07aa1aade2132f2ec3109a1a37b7da94f169a0161881db0a3ecbd95e6e77a471d7b0e48b8add68bec8e8e8ad461c6c08f87beb93824c39549b267f2de300c3e122644061c88c4cfdc0b2373afc1199c8f5f74560bc9ad49cf2ca08b800fa187a1e692471ab723f590e38242bad687b958e2da985c79850d87a9b1d5a7d4c4bee7b3f21", 0x5}}}, 0x53, 0x0) 8.587495407s ago: executing program 0 (id=885): mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) inotify_init1$auto(0xa992) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x3, 0x5, 0x8000000000000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x309, 0x70bd2d, 0x25dedbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) close_range$auto(0x0, 0xffffeffe, 0x2) openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, 0x0, 0x181441, 0x0) socket(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x6) setsockopt$auto(0x3, 0x6, 0x24, 0x0, 0x80005) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$auto(r2, 0x0, 0x45c) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202640, 0x0) unshare$auto(0x40000080) socket(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1c, 0x200, 0x8, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x6) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) close_range$auto(0x2, 0xa, 0x0) socket(0xf, 0x5, 0x1) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x100000000, 0x1ff, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/smaps_rollup\x00', 0x280282, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4ad00, 0x0) 7.865371978s ago: executing program 2 (id=889): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/route\x00', 0x8a200, 0x0) pread64$auto(r0, &(0x7f0000000540)='veth1\x00\xe0,\x17\xa0\xf7\x89Pl\x84K?\x01\x84\xa1i\xe00\x81p\xa0U \f\xdbP`:\xe2\'\xa7\xbf\xbd\x04\x18\xad\x90I^\x99M\xe0W\x14\x11\xf4\xeb\x90:\v\xc5\x13*\xfe\x90\xb1\xa9O\xa5\x05\xaa\x8fTi\xd6\x88Q\xda\xca', 0x200000000005, 0xa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x4003, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:03.0/resource1\x00', 0x0, 0x0) mmap$auto(0x0, 0x3, 0x1000000000001, 0x8000000008011, 0x3, 0x0) r1 = socket(0x2, 0x3, 0x3b) mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) mprotect$auto(0x0, 0x806121, 0x6) prctl$auto(0xbe, 0x1, 0x0, 0x1, 0x0) io_uring_setup$auto(0xf0, &(0x7f0000000180)={0x6, 0x18, 0xd64, 0xc852, 0x6, 0x7, r1, [0x1, 0x401, 0x1000], {0x7, 0x5, 0x1, 0x4, 0x95, 0xf4c, 0x7fff, 0xfffffffb, 0x65f29f6d}, {0x3, 0xadc, 0x10000, 0x0, 0x5, 0xffffffff, 0x1000, 0x400, 0x5}}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="deb50000", @ANYRES16=0x0], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) write$auto(0xffffffffffffffff, &(0x7f0000000040)='Fm_\xbd\xc3!\x00', 0x7) mmap$auto(0x0, 0x4020009, 0x3, 0xeb1, 0x401, 0x200008000) socket(0x5, 0x1, 0x84) ioctl$auto_ep0_operations_inode(r2, 0xd, &(0x7f0000000200)) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x28641, 0x0) write$auto(r3, 0x0, 0x101) ioctl$auto_SG_GET_NUM_WAITING(r3, 0x227d, 0x0) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x20) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_nodes_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000080), 0x600, 0x0) 7.718029821s ago: executing program 1 (id=890): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x1a, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto_SHMEM_HUGE_NEVER(r0, 0x1, &(0x7f0000000000)='-\x00', &(0x7f0000000040), 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setresuid$auto(0x909b, 0x1, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x3c, 0x0, 0x7) sendmsg$auto_MACSEC_CMD_ADD_TXSA(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x2a8}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040811) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyd3\x00', 0x161203, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x20b42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socket(0x10, 0x2, 0xc) socketpair$auto(0x4004, 0x2, 0xfff, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) sendmsg$auto_TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2c, 0x0, 0xd35, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x61cf770a5abe6d4a}, 0x8010) sendmsg$auto_TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fcdbdf2508000000c400018070004e800400c1800800f2000500000010001c00282c2a295b7d2e2f67243a002a003e00de7ca192b277103622cb714038667d8edb2c6deecbac5093d4545fe464317655b60be035e0b7000008003100", @ANYRES32, @ANYBLOB="08005100ac1414400400128008000800", @ANYRES32=0x0, @ANYBLOB="e3ffffd4", @ANYRES32=0x0, @ANYBLOB="098b35028035a70a4efc322862c0f52956196be568a3acb15641c7955520f2f098f7f4a0a75740be144b014f69a0575b0e8c739ece07083a3d3dfe7e93facc91853bcd6d12da6f88ce0c16a606408e31"], 0xd8}, 0x1, 0x0, 0x0, 0x40c0}, 0x20048000) sendmsg$auto_TIPC_NL_ADDR_LEGACY_GET(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x8c, 0x0, 0x802, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x76, 0x1, 0x0, 0x1, [@generic="3dba512758a7214ddef0f2ad49030035cf2ff4661137b27119b4cc6d6e85f2c2aa5a86016238fbbd145129cc324e3d2bd10ac1825447ca7428094158fcaa5928074cc7ac5d9986168fff2783dd84b6c689ce0e7d62dce03a6d0436cd5095855b6029b5a97f6a47cbe5c7", @typed={0x8, 0x51, 0x0, 0x0, @fd=r1}]}]}, 0x8c}}, 0x40000) write$auto(r4, 0x0, 0xfdef) 7.422931546s ago: executing program 1 (id=891): pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdds\x1cJ\x99\x00:/\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\xadCl\x9e\xeb\xcd\vp\x99\x00\xc8eX\xdc3\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0A\x94\xa3\xaef\x87\xd8\x95I\xfd\xa8\t\xac\x87\xb7\x1d\xd5\x83\xdcyu]\xde\xbe\xbf$<.}\x8b`\x04\xfc\xa2\xab\xb5]\x80\x00\xb9D\xc5\xbc\xf2a\xd66\xa5\xd3\xc1r\x96\x1e\x8db\x05=`\x01\x11\x04Tz\x87A$\x115\x95PUf\xa7\xfe\x19\x00\x82go}@W\xd5\xaej\x01\xbf>5n\x17S\xc0\x8a\xaf%O\xd1W\xa3ua+sUJ\xea\xf9\xb7p-\x128\x9d\xbaM_\xff\x1c\xc3sG\x04\xf2\xd3\xf3{;\xd4\xd7\x1c\x1dZ\xe9\xe9\xc9\x9cu5\xe9\xa2\xb3N\xd2\xc1\xc8\xa5\xadt\xd5BKD\x86\xeb%\a*\x06\xbb\x1e\xfb\x11U\f&\xcbP\xf1\xcf\xccb\xe8Wb\xc5ae\xe3\xf9l\xa9vK\xed\x8cL\xfb%g\x83;\xe1\xe2w\xd6\xaa6\x16\x8fx\x1a\xd7\xc8\xf4[\xbc\b\xe1Z\x92\x14Q\xdef\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/fs/netfs/requests\x00', 0x4dc480, 0x0) pread64$auto(r3, 0x0, 0x810000003d, 0x8) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) socket(0x1d, 0x2, 0x6) r4 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r5, 0xfd}, 0x6a) select$auto(0x5, &(0x7f0000000080)={[0x20000009, 0xfffffffffffffffc, 0x9, 0x0, 0xc, 0x400, 0x3, 0x1ffe000, 0xcad, 0x3, 0x9, 0xf, 0xa657, 0x202, 0x6, 0x1]}, 0x0, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x6}, 0x1, 0x0, 0x3, 0xa}, 0x8}, 0x5, 0xffb) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) openat$auto_u32_array_fops_file(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/netdevsim/netdevsim5/ports/0/udp_ports_table0\x00', 0x472881, 0x0) waitid$auto_P_PIDFD(0x3, r2, &(0x7f0000000040)={@siginfo_0_0={0x2, 0x8, 0xf8, @_rt={0xffffffffffffffff, 0x0, @sival_ptr=&(0x7f0000000280)="79ca6170c72c9b5affac767c0127e58e38f3f407303ed544651fc514ea2bf3a8d8ec1b5efc99d62cbb8043d4582607afd440f400a4fdcd74a0d6cc759ee437d05a5a149e70f79615cb36ed421aea340b2fe6"}}}, 0x20f5, &(0x7f0000000440)={{0x0, 0x82}, {0x8, 0x2}, 0xc2, 0xfffffffffffffff1, 0x80000001, 0x9, 0x1, 0x3, 0x3, 0x501, 0xfff, 0x0, 0x3, 0x9, 0xc, 0xfffffffffffffffa}) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0x4, 0x4000000000df, 0x1010, 0x4, 0x9) socket(0xb, 0x0, 0x84) 6.685142187s ago: executing program 0 (id=892): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x1, 0x0) ioctl$auto_SOUND_MIXER_READ_DEVMASK2(r0, 0x80044dfe, &(0x7f0000000040)) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) umount2$auto(&(0x7f0000000040)='.\x00', 0x5) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) listxattrat$auto(r1, &(0x7f0000000080)='./file0\x00', 0x7, &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x10000) 6.578012785s ago: executing program 2 (id=893): r0 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) r1 = ioctl$auto_TUNSETSNDBUF2(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)=0x7) r2 = open_tree_attr$auto(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x9, &(0x7f0000000100)={0xffffffffffffff2a, 0x80, 0x7, @inferred=0xffffffffffffffff}, 0x8) sendmsg$auto_TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x134, r0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x10e, 0x1, 0x0, 0x1, [@nested={0x2c, 0xf5, 0x0, 0x1, [@typed={0x4, 0xd5}, @typed={0x14, 0xdb, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @typed={0x5, 0xd3, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0xca}, @nested={0x4, 0x8}]}, @nested={0xc, 0x6c, 0x0, 0x1, [@nested={0x4, 0x13d}, @typed={0x4, 0x5f}]}, @generic="b1b95191167974f40c95bc7b453d6fc1130f6dc9c1ece2f524ca4dba53e692bd106fafeb1891f0372a78110d", @typed={0x8, 0x14d, 0x0, 0x0, @fd=r1}, @generic="b4c98ada8bd33e787b89cdf49314bf28fb0d410d8603c0ecd67f92902ccdbebf720b89dbb5dd5aa16d4d9c0720f65d898b40bc83c39121cc057995d18383fad30ebe443224b281dfe1f0e6c87880fd277daff96b158348da0ab93d7122784fa053f6cbe182ae82d92c6ca3d7dca16f2a1ca6ab22513e5a3618edff449dda7099c9d1c94414019bd95cd60bf568d8", @nested={0x10, 0x88, 0x0, 0x1, [@typed={0x8, 0x7f, 0x0, 0x0, @fd=r2}, @nested={0x4, 0x61}]}]}, @TIPC_NLA_UNSPEC={0xf, 0x0, "58e5394bbc392f1fa797bf"}]}, 0x134}, 0x1, 0x0, 0x0, 0x4c814}, 0x1) ioctl$auto_RNDCLEARPOOL(r2, 0x5206, 0x0) setsockopt$auto_SO_SNDTIMEO_NEW(r3, 0xffff, 0x43, &(0x7f0000000300)='TIPCv2\x00', 0xad) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000340), 0x149001, 0x0) ioctl$auto_USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000400)={0xffffffff, 0xffffff83, &(0x7f0000000380)="2ebeff483b489d72c8125ed9580b1508face5001389ae06567e37d06de1c833464b017faa5a0b89d34e9b69fead7a7e072d8e061e5517ba29b33e6c85b0b4714537fc68d4aea6363f7f34d30428911c488271fd5"}) io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000440)="892846175d0b29f2c9ae2b4dcac407a572f80422fc2c6631709c109cc76e7a87631b82c134753a041c03d2629a92da8c2aa92471d468ee63163987cba48647b5d8a5c7dd4074df6723636ee94ffe1ce29df60fba743866470bd9bb35c1af6e9c477efd31b934721f565aa7c17f1894d2cbfa6bb671f28d7fba8d89993fd81c23581098b00b528c1e819643f9afc06583d864a14641b644c6209718959441a8f216ed4086e90c3c6e5e7f36666e9fff60ac1c45d0b78cf4db4f08c66dd6536c5f5bcb01de7960e02d05599fd8736c59bc", 0x20819095) ioctl$auto_PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000540)=0x9) process_madvise$auto_MADV_DONTNEED(r2, &(0x7f0000000600)={&(0x7f0000000580)="18ec0d8d26f644668e05cae78be1a6edb945c5d2ebce416491f8fb6d63c7d645852f7e0c02738301e3069438d848f375e759e3cc2e1c0ffb70040ce135da6d91b38e89fff4de983f6aa2ddfd3d1ee27d67edc265057bdbfeb089f63a7d1aa2432965e21871c7e29178528018462218bc75fa55e13fb8a8", 0xa}, 0xcd, 0x4, 0x8) r5 = io_uring_setup$auto(0x0, &(0x7f0000000640)={0x6, 0x9, 0x7743, 0xc4, 0x1, 0x9, r4, [0x7f, 0x10, 0x7], {0xd, 0x1, 0x517364f7, 0x4, 0x3, 0x8, 0x2, 0x0, 0x4}, {0xffffffff, 0x3, 0xfff, 0x4, 0x8, 0xc, 0x4, 0x8, 0xa02}}) write$auto_console_fops_tty_io(r1, &(0x7f00000006c0)="2bd861d54644dd24a1b2b370b28a7da683be316dc1ff9360bf01c43e07fd70e1c280ae7c68c036ecbed59d5274a52589540541f4316c12bff1ff86ed2c9bb082cd4c6a1af7be4f14b28d282fcfd20b844100ac6510e62061e7f359033ce50f4fae3ebe238129baca11befae3474127f2446a96c8550eaa7b9c406cf3443c074a960891d7c422ec4d95fc36f28a3cae1a0daf1149fd80835abd7f768e", 0x9c) ioctl$auto_TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000780)=0x5ac) getsockname$auto(r5, &(0x7f00000007c0)=@l2tp={0x2, 0x0, @broadcast, 0x2}, &(0x7f0000000800)=0xfffffff4) sendmsg$auto_NL80211_CMD_GET_KEY(r1, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x38, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_PMK={0x21, 0xfe, "6dfd3beebf2c23c3816002d58efc13fe327371ea68f1de69aa85f0acdf"}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000980), r3) sendmsg$auto_NL80211_CMD_TDLS_OPER(r5, &(0x7f0000000e80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e40)={&(0x7f00000009c0)={0x458, r6, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xffdc}, @NL80211_ATTR_SCAN_SSIDS={0x430, 0x2d, 0x0, 0x1, [@typed={0xc, 0x3f, 0x0, 0x0, @u64=0xf}, @generic="5986ce7a45b32276133855135c8f74989113dc485310b3d97b87abcad041a7b5abd275983e0145e8cf43ec9140d086ab79074b522fae6efdd41cb4019b25f63362b9f57eb09fbf2e3667d7a72417e9db0703cfff1a41ff69d538585df913177d35279ab79aa5549d6826bdd9cae9643d6fcd4d6acf0a67aa9f7dfe512197422551b5aa5b08e8fec33ff591f0160e9fda935e16a55e8c5a18f11291f019d0dcd40ce059c0ed95e149aeb594a27f21d322a1c28cb928c2501e26a7d1fecf941242a766f0635b3d9c2eab0c5ab2e75347fce8af2514d2c2cba45d7a4353e1650131350531d0dc5b08e189237c0ace91eb2d621b65eb", @nested={0x17b, 0xf6, 0x0, 0x1, [@nested={0x4, 0x43}, @nested={0x4, 0x11e}, @nested={0x4, 0xf1}, @generic="c7ff9b1ef163287ea11100d01135d921be926797c5ef72847fc5baddabeb7d69c91bfee058dd3dd0e0a0f601478b061a831add7109a3fc1346b786e6e23a6a04c2cde0bd152547aafd2a9cc78fdb6c8bdfa236f7079999da", @generic="e15bc028605c1be36605fcf2e64e980b0132e13fa6d50f68db7e77495c446b221f37d65ffbf0003591fb74a449e7473e4c1a3614fd2d327ca4b6e52086b87672e721eb08b2b62281d70a921b322b260993727f", @typed={0xc0, 0x62, 0x0, 0x0, @binary="d6534ef9a13b206efbddef30c8df4c3a6f77a5e661340a942de4db8e7b53748b6ee9383b711e0ffa077c0effd7bf74e2d0def91958a8146943fc099b5142d0c9babbd0a3ca012ce2c246f0b41b9f22d86428636ae3bd31eaf9e71a85fa02b3cc653b6134d0f84716172a821a1e03b12843f58ddcdcbbad48aebd70f5900e86f2b870da3be48ce9fd60919380b634695a13165a7acc7de10a21f171eea0ce55c8fbdd6f44863e0177e1383df068ddc602b12467073a30acae4b91d403"}]}, @nested={0x1ae, 0x61, 0x0, 0x1, [@nested={0x4, 0x42}, @generic="ef1a7790644adca145405163986c3b98e4cc22f9544e464391415c4b5e5ad60020f18c3fb43299307d47a0d698d10478d510ee8b831e58cc36d2e4f2288c0051c5cd87380821da703d5340547af3418dca82c3c5253c31e8160b90bd5add33abc823c9cc2d257f9073b165f03cc0bf9878c4819937465d9d83b00e03cd8c792741b58511951296e276bac929949fe9ee01c755effc0e1d7fbe9af7278f96eb5d32c96abb288f90320aa923058352ab1e9279f4edb31bc086bfc20258752fd17377786983bcf33a4e82ee1e", @nested={0x4, 0x1d}, @generic="486544d0680fa628af74e8a381e05c0fe57103", @typed={0x14, 0x19, 0x0, 0x0, @ipv6=@remote}, @nested={0x4, 0x8e}, @nested={0x4, 0x168}, @nested={0x4, 0x7b}, @nested={0x4, 0xbd}, @typed={0x9f, 0xa4, 0x0, 0x0, @binary="80313c7e7a82163ea613e1b08f65d4df63c3ef550abb51247c008756c8fcdc510921af896e77687720730a6f39a9e5abf5a85afd2c7bc50c93552da02d5ce75f51a5990624e43f0a3ac79e058460fd728c1a73d6fe07a408ace8221ea5b5da745ed052ee5faf8ac9aa7e1ce5a2e36b4f83a8eea7d23399ada6e665aed86a93e8037303e8a33d5e2c6714618f83903ff6ec89417b93a622775bb435"}]}]}, @NL80211_ATTR_COLOR_CHANGE_ELEMS={0xc, 0x131, 0x0, 0x1, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x6}]}]}, 0x458}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000ec0)='/sys/devices/virtual/tty/tty11/dev\x00', 0x501000, 0x0) bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000f00)=@token_create={0x4, r7}, 0x100) r9 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001000), r8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001040)={'macvlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001080)={'ip_vti0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GET(r3, &(0x7f00000011c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001180)={&(0x7f00000010c0)={0xbc, r9, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NET_SHAPER_A_IFINDEX={0x8, 0x8, r10}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r11}, @NET_SHAPER_A_HANDLE={0x34, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x7}, @NET_SHAPER_A_HANDLE_ID={0x8}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x1}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x3}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x8}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0xdcf}]}, @NET_SHAPER_A_HANDLE={0x14, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0xfce}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0xae}]}, @NET_SHAPER_A_HANDLE={0x3c, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x4}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x7}, @NET_SHAPER_A_HANDLE_SCOPE={0x8}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x9}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x101}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x1}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x6}]}, @NET_SHAPER_A_HANDLE={0x14, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0xbb}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x6}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8084}, 0x20048010) r12 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000001240), r1) sendmsg$auto_SMC_NETLINK_ENABLE_HS_LIMITATION(r5, &(0x7f0000001400)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000013c0)={&(0x7f0000001280)={0x108, r12, 0x2, 0x70bd27, 0x25dfdbfe, {}, "3b3e42107d0fb3cd4d68bdf3fb5d5864bf67f365e7e2192e18f8131b4b10a6e1c87ea633ffe1d79425930aab51c33f61e33989917315459296e0fa2b39a422860f368c6365e0b8137d494d18e938e563e45d43262e63b7064538562369de84c2bb0f71a9728f06907b2c2b5eafd36dffece8b0bf8f29140a867b6f52367db6048efcbde2a2534ae8185d48db1ef3ac213f498095a8a149e994f9107c184227339ea5fc2d7053afcb588e24f858c453e5d917fc4054ac8dca4ca24f13062753c8226627767c601ffaee0ffdb86134a7ed7ff27ae48f28b056ca4c98ccfeca52985e16e5f8ac2956699d4bb2ddc22ee43638"}, 0x108}, 0x1, 0x0, 0x0, 0x2000001}, 0x20000004) r13 = getsockopt$auto_SO_PEERPIDFD(r2, 0x10000, 0x4d, &(0x7f0000001440)='/sys/devices/virtual/tty/tty11/dev\x00', &(0x7f0000001480)=0x9) sendmsg$auto_NL80211_CMD_PEER_MEASUREMENT_START(r13, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x18, r6, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) epoll_ctl$auto(r1, 0x2, r4, &(0x7f00000015c0)={0x8000, 0xe21}) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000001600), r13) 6.421713715s ago: executing program 0 (id=894): mmap$auto(0x0, 0x20009, 0x4000000001df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) (async) socket(0x2, 0x1, 0x106) (async) r0 = io_uring_setup$auto(0x6, 0x0) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) socket(0x28, 0x5, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), r3) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="00a64beb8887ad8e80e8b8cdbe6951abd2adf54c6d177e3216d9c97855dafddc789b25e476c433ead4a6b306ff8267bb8c7ed93da455ee84329dfce34ce00ff57a1477f4efeb9a5ba1cab642706c34137abb5786e7c657c1f38a2e6a1572a8af7ee049b2055aadd8328cc360e5f4fe4a5b0a436f0ad338d94e77a510a0cab66f", @ANYRES16=r4, @ANYBLOB="01002dbd7000ffdbdf251400000008000300", @ANYRES32=0x0, @ANYBLOB="0800010006000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000c00}, 0x4000000) (async, rerun: 64) sendmsg$auto_NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20044814) (rerun: 64) ioctl$auto_RTC_IRQP_READ(r2, 0x8008700b, &(0x7f00000001c0)=0xff) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0x800000b, 0x9, 0x2, 0xd8]}, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x800, 0x3, 0xff, 0x10001, 0x2, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x80000000, 0x9, 0xffffdfffffffff81, 0x4]}, 0x0) (async) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="72010000", @ANYRESHEX], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv6/conf/veth1_macvtap/mc_forwarding\x00', 0x28640, 0x0) (async) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x40000, 0x0) io_uring_setup$auto(0x4, 0x0) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async) close_range$auto(0x2, 0x8, 0x0) r5 = socket(0x10, 0x3, 0x6) fcntl$auto_F_DUPFD(0xffffffffffffffff, 0x0, r0) (async) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000e200", @ANYRES16, @ANYBLOB="010026bd7000ffdbdf25050000000c00010007000000000000000c00010004000000000000000c00010040000000000000000c00200004000000000000000c0001000000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) openat$auto_fault_around_bytes_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x100000, 0x0) 6.267684964s ago: executing program 2 (id=895): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) io_uring_setup$auto(0x2, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0x4020aed2, r0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32"], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c001b"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x7}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 5.726301866s ago: executing program 1 (id=896): shmctl$auto_SHM_LOCK(0x2, 0xb, &(0x7f0000000080)={{0x8, 0xee00, 0xee00, 0x1, 0x4, 0x7, 0x1}, 0x8607e5b3, 0x80000001, 0x800, 0x1, @raw=0x5, @raw=0x10, 0x6, 0x0, &(0x7f0000000000)="f6ebfa9200936d002b2446b4f619ec19460860a88bad5438f1f615b46cd3cfc90f78ffe6fdc1358790815581", &(0x7f0000000040)="9a3829"}) (async) msgctl$auto_IPC_RMID(0x5, 0x0, &(0x7f0000000180)={{0x6, 0x0, 0xffffffffffffffff, 0x10001, 0x7f, 0x5, 0xbb67}, &(0x7f0000000100)=0x3, &(0x7f0000000140)=0x2e, 0x49f5, 0x2, 0x10000, 0xf, 0x5a1, 0xfec, 0xef1, 0x40, @raw=0x9, @raw=0x7ff}) (async) r3 = waitid$auto(0x2, 0xffffffffffffffff, &(0x7f0000000280)={@siginfo_0_0={0x6, 0xb6, 0xffff, @_sigpoll={0x9, 0xffffffffffffffff}}}, 0xf82, &(0x7f0000000300)={{0x9, 0xffffffffffffffff}, {0x7, 0x6}, 0xffffffffffffffc0, 0x6, 0x0, 0x100000001, 0x4, 0x100, 0x8, 0x81, 0x4, 0x8, 0x0, 0x5, 0x4, 0x2}) msgctl$auto_IPC_INFO(0xd7ae, 0x3, &(0x7f00000003c0)={{0x2, r0, r2, 0x7, 0x7ae, 0x7000000, 0x7}, &(0x7f0000000200)=0xf, &(0x7f0000000240)=0xc, 0x10, 0x6, 0x1, 0x8000, 0x0, 0x6, 0x200, 0xfff, @inferred=r3, @raw=0x6}) msgctl$auto_IPC_INFO(0xbb99, 0x3, &(0x7f00000004c0)={{0x1, 0xee00, r1, 0x2, 0x1, 0x7fffffff, 0x9}, &(0x7f0000000440)=0x6, &(0x7f0000000480)=0x48, 0x8001, 0x207, 0xa, 0x3, 0x7, 0x5, 0x4, 0x7, @raw=0x3, @raw=0x6}) ioctl$auto_XFS_IOC_ALLOCSP64(r4, 0x40305824, &(0x7f00000005c0)={0x7, 0x239b, 0x1, 0x80000001, 0x0, r5}) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000600)={{0x4, r6, r2, 0xf4c, 0x7, 0x0, 0x3}, &(0x7f0000000540)=0x5, &(0x7f0000000580)=0x8d, 0x8, 0x7, 0x80000001, 0x4, 0x3, 0x1, 0x2, 0x5, @inferred=r7, @inferred=r5}) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000880)={{&(0x7f0000000680)="74775f155ee62866399a0c44a734c40e0dc988969e488ebf8916fca84117e44ebbc283f5818af2580af2874b7649ac4327f3601ecda4d3f87cc841740df62132d3f5854efc046e4ac8002b4bf0eea1833edb76d0f6826cdf188115d453843436aec2a764dde98de8987fbf888ad2944c57c8fcef4fb2424a05e63d72563d99f7ce29575fd876f12c89ea8a106e053455919e62d0de9456ed915ad2c6c80dc09c0a567a47008725b01e3cc4ecf3e7b7aafd960533630083aed3567d184901", 0x3, &(0x7f0000000780)={&(0x7f0000000740)="70c87556567591b89460d8b02a0f356f86068a1224947c94930c5907d77f68d69ce8e31816ce8d91b03bbc8c35a45b74faad02f0b21c93209a1f3743", 0xbfa}, 0x6, &(0x7f00000007c0)="c386148130a223f5f95ff3e0636f32c4530dd5264597fa35976e5ca83312f91d800251b7e84740e605e20505c04a9f02f86e27b3e4ef334567419496e3081093d25273c804df6110f026b6fe1b29d2ff4eb16a61e41e27d24211627a9928500eb5320642196fe248b1b6ecbd2f0d36ef605b47cbbf2290ae63e0845cf720fc6f3aacfaab77214f78df", 0x0, 0x6}}, 0xffff8000, 0x7) r8 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f00000008c0), 0x400000, 0x0) (async) r9 = fanotify_init$auto(0x7, 0x1) r10 = openat$auto_clear_warn_once_fops_(0xffffffffffffff9c, &(0x7f0000000900), 0x8802, 0x0) (async) r11 = set_tid_address$auto(&(0x7f0000000940)) shmctl$auto_SHM_STAT_ANY(0x8, 0xf, &(0x7f0000000a40)={{0x3, 0xffffffffffffffff, r2, 0xfffffffa, 0x7fff00, 0x4, 0x4a}, 0x8001, 0x5, 0x0, 0x40, @inferred=r11, @inferred=r7, 0x3, 0x0, &(0x7f0000000980)="c8c6f278c7da5fe22f22c0c96ce86fdbf1f2b1e70469ed1be70ded3f7654577f70a930389c2f3e7a6d55985a7a0d28f25b96edfaf8216d34247a842847c854ead30337bcf89b24626a93280098005601960e2e001ac33cead12270d7a58fcb1681bd37b068f63f217ac4d0", &(0x7f0000000a00)="ea37942c9281a7594c108e32d82ecfce4ed9243d79222a4a40e6b58a24"}) (async) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS(r9, 0xc2604111, &(0x7f0000000ac0)={0x7fffffff, [{[0x80, 0x0, 0x4, 0x29f9, 0x9, 0x10001, 0x7, 0x80000000]}, {[0x0, 0x18df56c2, 0x7, 0x7ff, 0x0, 0x9, 0xeaa, 0xb8]}, {[0x1, 0x4, 0xa, 0x3, 0x6, 0x1, 0x0, 0x7]}], [{[0xff, 0x8, 0x7fff, 0x7f, 0x8, 0x6, 0xfffff325, 0x32]}, {[0x7, 0x6, 0x1, 0x6, 0x2, 0x2, 0x8, 0x800]}, {[0x6, 0xedc, 0x4, 0x3, 0x8000, 0x1, 0x5]}, {[0x4be620fc, 0x6, 0x3, 0x8, 0x7ff, 0x2, 0x40, 0x2065]}, {[0x8, 0x3, 0x9, 0xfffffffa, 0x1, 0x1, 0xfffffffa, 0x5]}], [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x2, 0x5, 0x0, 0x1}, {0x3, 0xfffffffe, 0x1, 0x1, 0x1, 0x1}, {0x1, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x3, 0x7, 0x1, 0x1}, {0x22a3, 0x4d2895c7}, {0x6000, 0x401, 0x0, 0x1, 0x1}, {0x7, 0xe, 0x0, 0x1, 0x0, 0x1}, {0x7, 0x7fdf, 0x1, 0x1, 0x1}, {0x8, 0x80000001, 0x0, 0x0, 0x1, 0x1}, {0x81, 0x9, 0x0, 0x0, 0x1, 0x1}, {0xa, 0x1, 0x1, 0x1, 0x1}], [{0x0, 0x5, 0x1, 0x1, 0x1, 0x1}, {0x4, 0x6, 0x0, 0x0, 0x0, 0x1}, {0x800, 0x49, 0x1, 0x0, 0x0, 0x1}, {0x5, 0xffffffff, 0x0, 0x1, 0x1}, {0x7b7, 0x4, 0x0, 0x1}, {0x0, 0x200, 0x0, 0x0, 0x1}, {0x8, 0x8000, 0x1}, {0x0, 0x9, 0x0, 0x1, 0x1}, {0x80000001, 0x1, 0x0, 0x0, 0x1}], 0x2, 0x4, 0x8, 0xda, 0x73, 0x1, 0x7, "6f8b6b0fe03201031dde29e21927e333", "a68a2541d4e25eeb58e13b6a18ce60d30523b34993885060db6ae930476df63eaaedadd1fb67c6ac17d080be9d3d978c"}) (async) sched_setparam$auto(r11, &(0x7f0000000d40)={0x15}) rt_sigtimedwait$auto(&(0x7f0000000d80)={0x300000000000000}, &(0x7f0000000ec0)={@siginfo_0_0={0x4, 0x10001, 0x7, @_sigfault={&(0x7f0000000dc0)="9b1ef4552800954d9c2da8c2fdfb0e0071e7896c7e8ab82d0612bc947d61c5bf9f6c05dc34fd796d819040c41c3b54df9a4e56f6404ae2038c4e374d66610fce8dc87046f32f85ecfb27035c70676d1e260be0c2c96683f0e8af5c643d6788698a05cd295ddb610f462c9dc23a97319eadf997adcf9a02cb6f815fdc25d6eae893a278e5f5393e2efadb87f8e785ef4c2bc43bdd8e4031b9a62628a896981c3cf0436e80564b2c768d21bd7ea46d2a9fc3745e92c9c89afa8a0d8761f1fc14a81a2bae53b5b7e7a1a7785de67f681c99e0f3ad49915d635e2171d961271453967995764e3b402361f216445ffd31e4ad6795e33ba0", @_trapno=0x5}}}, &(0x7f0000000f40)={0x4, 0xf5}, 0x8) r12 = openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000f80), 0x80000, 0x0) sendfile$auto(r12, r4, &(0x7f0000000fc0)=0x3, 0x7) r13 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000001000)='/dev/mtd0ro\x00', 0x800, 0x0) io_submit$auto(0x75, 0x8000, &(0x7f0000001080)=&(0x7f0000001040)={0x80000001, 0x6a9, 0x9, 0x7f, 0x4, r13, 0x2d0c, 0x8, 0xfff, 0x0, 0x5, r8}) (async) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f00000013c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001100)={0x250, 0x0, 0x208, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x5}, @NL80211_ATTR_FILS_ERP_USERNAME={0x6, 0xf9, "9dbd"}, @NL80211_ATTR_PROBE_RESP={0x1c0, 0x91, "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"}, @NL80211_ATTR_SUPPORTED_SELECTORS={0x62, 0x14e, "fa9b72335339d8d2d7aa25d20c3385da96ccfee8f2d33db555acb9da6763ad5890cf760d585427aa23091102eed3dc6a125e122f5485d0e70e84234a26adfb461d879d630c7b49ce1838016b3c8066f7924d7ca49469eaa774089a91d123"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x401}]}, 0x250}, 0x1, 0x0, 0x0, 0x80}, 0x8001) getsockopt$auto_SO_INCOMING_CPU(r9, 0xfffffe01, 0x31, &(0x7f0000001400)='\x00', &(0x7f0000001440)=0x31b) ioctl$auto(r10, 0x7fffffff, r14) write$auto_seq_oss_f_ops_seq_oss(r4, &(0x7f0000001480)="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", 0x1000) prlimit64$auto(r11, 0x7, &(0x7f0000002480)={0x8, 0xf1}, &(0x7f00000024c0)={0x9, 0x1d}) (async) r16 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000002500), 0x400, 0x0) dup2$auto(r8, r16) fcntl$auto_F_GET_RW_HINT(r15, 0x40b, 0x400) (async) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000002540), r9) (async) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r9, &(0x7f0000002680)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002640)={&(0x7f0000002600)={0x18, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) 5.471101346s ago: executing program 4 (id=897): r0 = socket(0x80000000000000a, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x80003, 0x300) sendto$auto(0x3, 0x0, 0xfdef, 0xfffffff8, &(0x7f0000000440)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x3}}, 0x22) setsockopt$auto_SO_PEEK_OFF(r0, 0x0, 0x2a, 0x0, 0x6) 5.402884657s ago: executing program 2 (id=898): r0 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r0], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x40013) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/btrfs/features/rmdir_subvol\x00', 0x40000, 0x0) preadv$auto(r3, &(0x7f0000000080)={0x0, 0x6}, 0x7, 0xbbf, 0x69bf) ioctl$auto_SNDRV_CTL_IOCTL_POWER(r2, 0xc00455d0, &(0x7f00000001c0)=0x81) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r5 = landlock_create_ruleset$auto(&(0x7f0000000000)={0xff, 0x2, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000380), r0) r8 = socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0xe883, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}}, 0x24004000) bpf$auto(0x3, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x8, 0x10035, 0x80208000008, 0x2, r8, 0x20000000000803}, 0x6f0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r7, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}, @NL802154_ATTR_IFNAME={0x14, 0x4, 'wlan1\x00'}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20004006) r9 = socket(0x2, 0x1, 0x0) connect$auto(r9, &(0x7f00000000c0)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 5.233299949s ago: executing program 4 (id=899): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/fs/cifs/cifsFYI\x00', 0x2000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f00000002c0)=""/4096, 0x1000) openat$auto_gpiolib_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x119980, 0x0) 5.105083389s ago: executing program 0 (id=900): open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) (async) r0 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r0) mkdir$auto(0x0, 0x2) (async) mkdir$auto(0x0, 0x2) getegid() (async) getegid() mmap$auto(0x3, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x0) open(0x0, 0x0, 0x57e) (async) r1 = open(0x0, 0x0, 0x57e) fcntl$auto_F_ADD_SEALS(r1, 0x410, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40400, 0x48) fchmod$auto(r2, 0x7439) io_uring_setup$auto(0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, 0x0, 0xc0880, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/hid_cougar/parameters/g6_is_space\x00', 0x129102, 0x0) write$auto(r3, &(0x7f0000000380)='\x00\x00\xe7\r\xca\xe3_\x89yL\xe4\x97(b\xd2hM\xdb\x90\x04\x0e3\xb2\xad\x12\xeaj\xd0\xef\xf6m\xa6\xa2\xee\xe95\x03\xc3\xb1d\xfb=\xb8a\xc9\xa3\xea\xa7\xde\x00'/61, 0x6) (async) write$auto(r3, &(0x7f0000000380)='\x00\x00\xe7\r\xca\xe3_\x89yL\xe4\x97(b\xd2hM\xdb\x90\x04\x0e3\xb2\xad\x12\xeaj\xd0\xef\xf6m\xa6\xa2\xee\xe95\x03\xc3\xb1d\xfb=\xb8a\xc9\xa3\xea\xa7\xde\x00'/61, 0x6) close_range$auto(0x0, 0xfffffffffffff001, 0x2) (async) close_range$auto(0x0, 0xfffffffffffff001, 0x2) r4 = socket(0xa, 0x2, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x240202, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0) (async) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) (async) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(r5, 0x4048aecb, 0x0) close_range$auto(r1, 0xffffffffffffffff, 0x88) (async) close_range$auto(r1, 0xffffffffffffffff, 0x88) lsm_list_modules$auto(0x0, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty6\x00', 0x0, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty6\x00', 0x0, 0x0) mkdir$auto(0x0, 0x353) 5.057572713s ago: executing program 4 (id=901): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/route\x00', 0x8a200, 0x0) pread64$auto(r0, &(0x7f0000000540)='veth1\x00\xe0,\x17\xa0\xf7\x89Pl\x84K?\x01\x84\xa1i\xe00\x81p\xa0U \f\xdbP`:\xe2\'\xa7\xbf\xbd\x04\x18\xad\x90I^\x99M\xe0W\x14\x11\xf4\xeb\x90:\v\xc5\x13*\xfe\x90\xb1\xa9O\xa5\x05\xaa\x8fTi\xd6\x88Q\xda\xca', 0x200000000005, 0xa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x4003, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:03.0/resource1\x00', 0x0, 0x0) mmap$auto(0x0, 0x3, 0x1000000000001, 0x8000000008011, 0x3, 0x0) r1 = socket(0x2, 0x3, 0x3b) mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) mprotect$auto(0x0, 0x806121, 0x6) prctl$auto(0xbe, 0x1, 0x0, 0x1, 0x0) io_uring_setup$auto(0xf0, &(0x7f0000000180)={0x6, 0x18, 0xd64, 0xc852, 0x6, 0x7, r1, [0x1, 0x401, 0x1000], {0x7, 0x5, 0x1, 0x4, 0x95, 0xf4c, 0x7fff, 0xfffffffb, 0x65f29f6d}, {0x3, 0xadc, 0x10000, 0x0, 0x5, 0xffffffff, 0x1000, 0x400, 0x5}}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="deb50000", @ANYRES16=0x0], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) write$auto(0xffffffffffffffff, &(0x7f0000000040)='Fm_\xbd\xc3!\x00', 0x7) mmap$auto(0x0, 0x4020009, 0x3, 0xeb1, 0x401, 0x200008000) socket(0x5, 0x1, 0x84) ioctl$auto_ep0_operations_inode(r2, 0xd, &(0x7f0000000200)) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x28641, 0x0) write$auto(r3, 0x0, 0x101) ioctl$auto_SG_GET_NUM_WAITING(r3, 0x227d, 0x0) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x20) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_nodes_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000080), 0x600, 0x0) 4.126346735s ago: executing program 1 (id=902): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0\x00', 0x101000, 0x0) ioctl$auto_MEMGETOOBSEL(r1, 0x80c84d0a, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x600347, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) io_uring_setup$auto(0x2, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80040, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab82, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) socketpair$auto(0x3, 0x1, 0x8, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r2, 0x5437, 0x0) statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x2, 0x5ae, 0x5, 0x7, 0x6, 0x10000, 0x1, 0xa, 0x8, 0x6, 0x9, 0x5, 0x4, 0x1ff, 0x2, 0x8, 0x10000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2325de0e}, 0x6, 0x1000000) r4 = socket(0xa, 0x2, 0x3a) bind$auto(r4, &(0x7f0000000040)=@generic={0xa, "2c551d000000fe8000"}, 0x66) write$auto(r0, &(0x7f0000000340)='/Eedio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xed\xf8\xe1\xbc\x1d\x91D\xe7R\x12\xc4\xcd\xc6\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\x81\x00U\x14w\xb4\x14\x1d\x0f\xab\"4\x8a\xbbY2@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xcd\xee,\xe2\xbe\x1bBAIA\x9fv\xedP\x84\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\x00\x00\x00\x00\x00\x00\x00\x00V\xd7\xee\x8b?}r\n\xb3\'R\xda\xb2v\x94\xad\xe6\x1fu\xc4\xe7+\x93\xedT\xbd\xb8p\xb3\x16\xa2\a\xd7\xfcQF\x81\xb3\xd7\b\x87\x8c\xde\xa7\b\xce<\xf8i\xcd\x812\f>\xdcHj\xc2\xfc\xa7\xbe\x11\xc8\xd6\\T\xa76S\xef\x13\xfb9\x96\xc1\x0f\xaf\xa2\x84\xe1k\xf5En\xc7\xf6\xb1-\xc1\xb8\x8bH\x01\xa5X/\x98\xc6W\xa8\xb6S\xf34]\'\x0e\x85\xc3\xef\xdf\xf4\x889\x8be\x1f&\x88\xe6\xdd\x7f\x8c\x10\xdb>>U3\x84\xe5i\x98#\xc6q\xac\xe1\xc4\xb4\xb9\xafC\x1f}{-\xbf\xa1Y\xb9\xe4\xf2`m|RQ`\x14\xdb\xad\x14\xecvc\xe8i\xd2\xb2\xed\xad\x00\x00\x00\x00\x00\x00', 0x100000a3dd) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x281, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/profile\x00', 0x48802, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0xc0100, 0x0) socket(0x1d, 0x3, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/pci0000:00/0000:00:01.3/enable\x00', 0x20f01, 0x0) write$auto(r5, &(0x7f0000000040)='0\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) 4.120834643s ago: executing program 4 (id=903): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x770, 0xfffffffe, 0x8, 0x4, 0x4005, 0x6, 0x5, 0x400, 0x3, 0x9, 0x6, 0x0, 0x4, 0x11ffffffffffb, 0xe3, 0x400002, 0x6, 0x10, 0x80, 0x7ff, 0x8000, 0x1, 0x1, 0x202, 0xd, 0xbca7, 0x4, 0x0, 0x0, 0x0, 0x694, [0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x20000000000, 0x4, 0x4, 0x0, 0x2, 0x0, 0x3, 0xfffffffffffffc01, 0x7fffffff, 0xfffffbfffffffffb, 0x0, 0x9, 0x2000000, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0x0, 0x3, 0x8000000000000000, 0x0, 0x1, 0x1, 0x7fffffff, 0x101, 0x0, 0x20000000000000, 0x0, 0x1000000000000200, 0x0, 0x400, 0x96, 0x20005, 0x4, 0xe17, 0x0, 0x6]}, 0x1fe, 0x1) mmap$auto(0x5, 0x20009, 0x9, 0xeb0, 0xffffffffffffffff, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) read$auto(r0, 0x0, 0x1ff) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000040), 0x101002, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dri/card0\x00', 0x28900, 0x0) socket(0xa, 0x5, 0x0) timer_create$auto(0x0, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$auto(r2, 0x110, 0x4, 0x0, 0xfff) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0x10000, 0xfffff0b6, 0xfffd, 0x400084, 0x8000000000000ac1, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x7, 0xffff, 0x6, 0x81, 0x68198}, 0x6f3) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r4 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(r4, &(0x7f0000000080)=@llc={0x1a, 0x102, 0x3, 0x0, 0x5, 0x40, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x54) r5 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000804) mmap$auto(0x0, 0x2020005, 0x8, 0x10011, 0xfffffffffffffffa, 0x2007fff) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r3, @ANYBLOB="010c27bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x8841) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) read$auto(0x4, 0x0, 0xfdef) 3.988821884s ago: executing program 2 (id=904): ioctl$auto_EXT4_IOC_SETVERSION_OLD(0xffffffffffffffff, 0x40087602, &(0x7f0000000100)="f9c6db73364934578d51601d132b20dd82ae0781f6cb18c55fb7ed811a498af961a2ba35abcb2a9e90cb1318a4e844fa36d450dd94feeb082f1df20f92ccf13a81a57128c3747e32049e83c577e1acbc77ae0592cdbc051382debcaa0dc8ed6a464e67d65d0fe51909b6301747549e056844706522e452069bc58cceba3c6f41643ea20806562e91ca8a2cc01217c98f9dbad36dd49ba0ac6b5eac96f27ca3511f2ead40050e4c") r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/kernel/kexec_load_limit_panic\x00', 0x101202, 0x0) sendfile$auto(r0, 0x3, 0x0, 0xd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r1 = socket(0x2, 0x3, 0x100) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'veth0_to_bond\x00'}) sendmsg$auto_BATADV_CMD_TP_METER(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/rcutree/parameters/rcu_resched_ns\x00', 0x1a1302, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x23, 0x0) open(0x0, 0x22040, 0x75) utimes$auto(0x0, 0x0) mprotect$auto(0x0, 0x8000000000000001, 0x8) unshare$auto(0x40000080) acct$auto(&(0x7f0000000000)='/dev/sequencer2\x00') mmap$auto(0x0, 0x128008, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) shmget$auto(0x0, 0x7b, 0x100) madvise$auto(0x108000, 0x2, 0xa) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x2) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x100842, 0x0) ioctl$auto_SNDCTL_TMR_CONTINUE(r3, 0x5404, 0x0) ioctl$auto_SNDCTL_TMR_TEMPO(r3, 0xc0045405, &(0x7f0000000140)) sendfile$auto(r2, r2, 0x0, 0x43) socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x84) 3.164925971s ago: executing program 4 (id=905): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x10001) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000240)={0x0, 0x7}, 0x2) socket(0x1a, 0x2, 0x0) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) (async) sendmsg$auto_IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x21, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000003b40)={'veth0_to_hsr\x00'}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x40001) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x40001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) sendmmsg$auto(r3, 0x0, 0x81, 0x4008) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x49402, 0x0) openat$auto_mgts_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x10080, 0x0) read$auto(r4, 0x0, 0x9a28) (async) read$auto(r4, 0x0, 0x9a28) openat$auto_rfcomm_dlc_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x101201, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004) (async) finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/hugepages/hugepages-2048kB/nr_hugepages_mempolicy\x00', 0xa001, 0x0) write$auto(r5, 0x0, 0x81) (async) write$auto(r5, 0x0, 0x81) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r6 = socket(0xa, 0x3, 0x3b) getsockopt$auto(r6, 0x29, 0x3d, 0x0, 0x0) mmap$auto(0x0, 0x402020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) 2.236971231s ago: executing program 0 (id=906): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, 0x0) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f00000006c0), 0x604002, 0x0) r1 = fcntl$auto(0xffffffffffffffff, 0x0, 0xa8) mkdir$auto(&(0x7f0000000000)='}[,&*}\x00', 0x2) mmap$auto(0x0, 0x20006, 0x5, 0xeb1, 0x4, 0x8000000000000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r2, 0x0, 0xfffffdf1) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2) sendmsg$auto_NL80211_CMD_VENDOR(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0xfffb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x881) linkat$auto(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) sysfs$auto(0x2, 0x23, 0x0) open(0x0, 0x524c0, 0x191) utimes$auto(0x0, 0x0) clone$auto(0x20003b46, 0x7, 0x0, 0x0, 0x2) mprotect$auto(0x0, 0x8000000000000001, 0x8) sendmmsg$auto(r2, &(0x7f0000000680)={{&(0x7f0000000400)="812d7fd5b59e4cd1740f2828a9c3bc02da4baabf7d31511391a30dbf32e58060a08ed539e6210bb62ab6f349db97869d4ec1f760b534ca1de74ac2ac9683cde2db492def10d92dfea5724d396cd93b0ce0ec66eebb8dd0d0fedb15762a1f41cfdd9905d72fa11c062b25f8d70731b0cfbd8e3319235021a47947a43cbe43a79d381fc1b18e900f057a59964c860b1bf1007aef8e0010a80759b1d2f64f45c30106af87ffecb2bb41a094e0e6e40c25067a9bfd14dc7913993653fb1d8402b96f329a73a072c263", 0x488, &(0x7f0000000540)={&(0x7f0000000500)="b0b83c8be729a41082a8f7", 0x80000000}, 0x3, &(0x7f0000000580)="5663d36dc78d376584921fca70f8046e15742aa9786b9d9d6f60e1c8ed04e8f21ddc045907c3d4b4567a9f986a2b2ec3d0f11791d390de0294147492950e4adbdb50680c43891d38bcc84a2e6ada0b00e1945df08860eead78cae6442a3e4bbaa4c7dd4ee722ac18b305083a5a91a87615798d15a22e616b220256c8497ae42ca4c7a5e8391f2d061b64ec46e8a4dbad80dd49768e891c11b4337324b4b0664aec4d34ee577b7a80ee6875703bcc7a8f81734eda25295610da5196227633ef6a2534ca4a8d71dafcff3a17e14b001f7111de6f5778143f0fd20b3a57505a3784b1", 0x8, 0x400}, 0x7fffffff}, 0x5, 0xf0b) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f00000001c0)=""/244, 0xf4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) io_uring_register$auto(r0, 0x1, 0x0, 0x8) syz_genetlink_get_family_id$auto_nbd(&(0x7f00000000c0), r1) mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00', &(0x7f00000002c0)='.\xcf\xa7\xcdz\f\f\xe8T\x8eX\xf6\xc9y\xb7\xe3\x91\x02a\xa8\xe1p),\xc9}r\x84\xa1\xed\xb8\xab\xb2\xc1\xf59%\xc8S\xdb\xb4\xb6\x1as\x19\xd4\x1d!H8-m\x8e=\xa2j@\x16\x95\x05\xef@\xf0\xfb*\xd7k\x00', 0x8, &(0x7f0000000200)) r4 = socket(0x15, 0x5, 0x1) bind$auto(r4, &(0x7f0000000040)=@generic={0xa, "986d17a55d9b07bcc94c4e3770c4"}, 0x6a) 2.148491126s ago: executing program 1 (id=907): mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x40000b, 0xdf, 0x9b72, 0x2, 0x108000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) futex$auto(0x0, 0x1, 0x40000006, 0x0, 0x0, 0x80000001) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r1 = socket(0xa, 0x3, 0xff) connect$auto(r1, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) write$auto_proc_mem_operations_base(r0, &(0x7f0000001680)="a7", 0xfffffc96) mmap$auto(0x0, 0x400, 0xfffffffffffffffa, 0xeb1, 0x401, 0x8000) madvise$auto(0x4, 0x2004, 0x15) bpf$auto_BPF_OBJ_GET(0x7, &(0x7f0000000000)=@bpf_attr_4={0x9, 0xffffffffffffffff, 0x7, 0xffffffffffffffff}, 0x6) getsockopt$auto(r2, 0x5, 0xd, &(0x7f00000000c0)='\x00', &(0x7f0000000100)=0x7) seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0x36, 0x0) 856.941635ms ago: executing program 4 (id=908): socket$nl_generic(0x10, 0x3, 0x10) openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0x2082, 0x0) write$auto(0x3, 0x0, 0x100082) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x2, 0x0) socket(0x2, 0x804, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xfffffbffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) pselect6$auto(0x8eb, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0) close$auto(r0) syz_genetlink_get_family_id$auto_802_15_4_mac(0x0, 0xffffffffffffffff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket(0x11, 0xa, 0x9) sendmsg$auto_SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0xb, 0x1, 'dummy0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20041040}, 0x44c0) unshare$auto(0x40000080) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x1d, 0x800, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r1, @ANYRES8=r2], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r3) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf254a00000008005700050000090cbf8cd62b043270a39338e8b88400990005000002000000", @ANYRES32=0x0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x40000b5) write$auto(r3, &(0x7f0000000000)='-\x00', 0xfdef) 672.64128ms ago: executing program 0 (id=909): r0 = socket(0x2, 0x3, 0xa) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0xc, @multicast1}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) setsockopt$auto(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x800) r1 = socket(0x2, 0x3, 0xa) memfd_create$auto(&(0x7f0000000300)='/sys/kernel/debug/x86/boot_params/data\x00\"F\xb6\xcd\x06\xd6\x97\\L\xe1\xb2\xee\xb8\x8e\xd6O\xa1j\x90w\xc7\x94\xb7yi\x01&\x04b/\xaa\xfb#s\xc4\xa3\xa7\xacj\xc6\x8e\xf4L\x9a\xf8\xcc\xdcy\x9f\x93\xbc\xf6\xc8\xdb\x05w,|B\xfc\x04\x97\xd3\x0f\x8b\x81\xe8\xbc\x81\x0e\xd7o\xd2\xcd\x18z\xc2\xb7|\xe1\xa6\x9a~\x96\x10rnLnt\xdb\xdb-\x1b\x99\xd4\xed;\xf8\x13a\r\xf2\a\x85%\xef\xa7\x7f#\x96\xf2S\xb0\xf1Hq\x0f;\x83\xb7\x0fz\x9dN\xc9\x1e\x15r\x97|\xbfE\xce\"', 0xc) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) fallocate$auto(0x8000000000000003, 0x3, 0xf, 0x200000004) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/current_tracer\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0xffffffffffffffff, &(0x7f0000000100)=@in={0x2, 0x3, @remote}, 0x69) bind$auto(0x3, 0x0, 0x6a) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x8) listen$auto(0x3, 0x83) mmap$auto(0xfffffffffffffc, 0xd8f0, 0x7, 0xeb1, 0xffffffffffffffff, 0xbf47) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x34b883, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x111203, 0x0) readv$auto(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x40200}, 0x3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) unshare$auto(0x20000) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(r1, 0x0, 0x10000, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/orangefs/slot_timeout_secs\x00', 0x102, 0x0) write$auto(r2, &(0x7f0000000480)='7\x00\\\xa0\x04\x9c\"\xa9Nd_\xff\xa0k\xd8\xc9\xba\x00\xb5\x89\x8cg\xa84\xd8D)\xfdcR8\xdb\x98\xc5\xd7\x94\x94\xda\xc0r\x8f)\xbb_r\xac\x98\xa2k\x9bu=>\xce\x8d\xa2\fZ\xfa\x0f\x87R\xf7\x05OA\xfak\xba0\xab\xe1\xffm\xf9t\x012A\xc8%H\x88\xaej\xda\xae\x1dO\xd7\x88?\x19\xf3\x068\xb4e\xb5\x93\x9a\xb9|Kh\xc2d\xda\xb7\xe5\x1fb~8\xf2q\x0e\x98A[\xbb\xa9\xdc[8\xfc\xc6\x9f\xa3\xb5\xdf\x1a', 0x84) sendmsg$auto_GTP_CMD_NEWPDP(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000065}, 0x3c004094) lstat$auto(0x0, &(0x7f0000000180)={0xe, 0xfffffffffffffffe, 0x100000001, 0x1000, 0x0, 0x0, 0x0, 0x200fa98, 0x8, 0x7fffffffffffffff, 0x8000000004, 0x100000007fffffff, 0x5, 0x0, 0x7, 0x4, 0xb}) socket$nl_generic(0x10, 0x3, 0x10) 126.714715ms ago: executing program 2 (id=910): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/queue/scheduler\x00', 0x103a42, 0x0) sendfile$auto(r0, r0, 0x0, 0xb) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000400)={{0x0, 0x5a7, &(0x7f0000000000)={&(0x7f0000000180)="af1934d3e4e7fd131e6eb3558e9c9b22185cc74c110857f6eea4ce49e5b9d84c3091e238e3b66ba89f547243e7dbde65c8a88100d7347d9f75a5fdfe55b1f16aaa6204a2a53ecb7122728206b62d8b6aef7d05ffe2bb5651db9884965dfa11304195a6947955f8dc6fa74d5125d0c56cad1f6aaa324d48b96e092a4d41e5eec32a54519b300beda5d5", 0x28}, 0x1, 0x0, 0x2864, 0x100001}, 0x2}, 0x2, 0x800008) close_range$auto(0x2, 0xa, 0x0) r1 = socket(0xa, 0x1, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/queue/scheduler\x00', 0x103a42, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r2 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa1\x00', 0x101041, 0x0) poll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x8, 0x4}, 0x8a, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = socket(0x2, 0x801, 0x106) getsockopt$auto(r3, 0x6, 0x2, 0x0, 0x0) write$auto(r2, &(0x7f0000000000)='/sys/kernel/security/integrity/evm/evm_xattrs\x00', 0x20000003) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) r4 = socket(0x2a, 0x2, 0x1) mmap$auto(0x7fff, 0x2020009, 0xffff, 0xeb1, 0xfffffffffffffffa, 0x8000) connect$auto(r4, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x57) write$auto(0x3, 0x0, 0x3f00) write$auto_fops_ulong_ro_(0xffffffffffffffff, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) io_uring_register$auto(0x2, 0x80000a, 0x0, 0xfffd) r5 = timerfd_create$auto(0x0, 0x0) close_range$auto(r1, r5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r6 = socket(0x15, 0x5, 0x0) getsockopt$auto(r6, 0x114, 0x2716, 0xfffffffffffffffc, 0x0) ioctl$auto(0x1, 0x890c, 0x8) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/netfilter/nf_hooks_lwtunnel\x00', 0x101001, 0x0) write$auto(r7, 0x0, 0x7) wait4$auto(0xffffffffffffffff, 0x0, 0x2, 0x0) 0s ago: executing program 1 (id=911): madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = pipe2$auto(0x0, 0x80) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x8) r1 = socket(0x2c, 0x3, 0x0) listen$auto(0x3, 0x83) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000080)='[') r3 = socket(0xa, 0x60f181cddb6f5df0, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x81, 0x4, 0x9d81, 0x6) r4 = openat$auto_autofs_root_operations_autofs_i(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bluetooth/hci1/hci1:201\x00', 0x2, 0x0) ioctl$auto_AUTOFS_IOC_PROTOSUBVER(r4, 0x80049367, &(0x7f0000000180)=0x401) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000000), r0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0xffff, 0x7f, 0x0, 0x90) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x6) bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0xae30, 0x8, 0xfff, r1, 0x2b, 0x7ff}, 0x6f4) close_range$auto(r3, r5, 0x2) kernel console output (not intermixed with test programs): 418] R13: 00007f7c3ae16038 R14: 00007f7c3ae15fa0 R15: 00007fffc00bf6e8 [ 205.359894][ T7418] [ 206.151051][ T7437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.303'. [ 208.903957][ T7455] syz.3.307 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 209.344000][ T7461] netlink: 28 bytes leftover after parsing attributes in process `syz.2.310'. [ 210.926295][ T7493] netlink: 172 bytes leftover after parsing attributes in process `syz.0.313'. [ 214.715483][ T7533] zswap: compressor not available [ 217.706600][ T7572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.328'. [ 218.080334][ T7582] netlink: 12 bytes leftover after parsing attributes in process `syz.3.332'. [ 219.659248][ T7605] random: crng reseeded on system resumption [ 219.905297][ T7606] hub 1-0:1.0: USB hub found [ 220.091709][ T7606] hub 1-0:1.0: 1 port detected [ 220.505436][ T7617] netlink: 16 bytes leftover after parsing attributes in process `syz.0.340'. [ 223.010287][ T7633] FAULT_INJECTION: forcing a failure. [ 223.010287][ T7633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.160138][ T7633] CPU: 0 UID: 0 PID: 7633 Comm: syz.0.344 Not tainted syzkaller #0 PREEMPT(full) [ 223.160169][ T7633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 223.160183][ T7633] Call Trace: [ 223.160191][ T7633] [ 223.160199][ T7633] dump_stack_lvl+0x100/0x190 [ 223.160230][ T7633] should_fail_ex.cold+0x5/0xa [ 223.160260][ T7633] strncpy_from_user+0x3b/0x2d0 [ 223.160290][ T7633] do_getname+0x78/0x390 [ 223.160329][ T7633] do_sys_openat2+0xc5/0x1e0 [ 223.160366][ T7633] ? __pfx_do_sys_openat2+0x10/0x10 [ 223.160413][ T7633] __x64_sys_openat+0x12d/0x210 [ 223.160451][ T7633] ? __pfx___x64_sys_openat+0x10/0x10 [ 223.160494][ T7633] ? rcu_is_watching+0x12/0xc0 [ 223.160526][ T7633] do_syscall_64+0x10b/0xf80 [ 223.160547][ T7633] ? clear_bhb_loop+0x40/0x90 [ 223.160581][ T7633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.160604][ T7633] RIP: 0033:0x7f7c3ab9ce59 [ 223.160622][ T7633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.160663][ T7633] RSP: 002b:00007f7c38dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 223.160685][ T7633] RAX: ffffffffffffffda RBX: 00007f7c3ae16090 RCX: 00007f7c3ab9ce59 [ 223.160701][ T7633] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 223.160716][ T7633] RBP: 00007f7c3ac32d6f R08: 0000000000000000 R09: 0000000000000000 [ 223.160730][ T7633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.160744][ T7633] R13: 00007f7c3ae16128 R14: 00007f7c3ae16090 R15: 00007fffc00bf6e8 [ 223.160773][ T7633] [ 223.666404][ T7639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.346'. [ 225.792936][ T7657] FAULT_INJECTION: forcing a failure. [ 225.792936][ T7657] name failslab, interval 1, probability 0, space 0, times 0 [ 225.910496][ T7658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.349'. [ 226.001564][ T7657] CPU: 0 UID: 0 PID: 7657 Comm: syz.2.349 Not tainted syzkaller #0 PREEMPT(full) [ 226.001596][ T7657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 226.001610][ T7657] Call Trace: [ 226.001617][ T7657] [ 226.001626][ T7657] dump_stack_lvl+0x100/0x190 [ 226.001657][ T7657] should_fail_ex.cold+0x5/0xa [ 226.001687][ T7657] should_failslab+0xc2/0x120 [ 226.001717][ T7657] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 226.001756][ T7657] ? prepare_creds+0x2c/0x950 [ 226.001781][ T7657] ? apparmor_capable+0x1d7/0x4d0 [ 226.001803][ T7657] ? __x64_sys_futex+0x358/0x4d0 [ 226.001835][ T7657] prepare_creds+0x2c/0x950 [ 226.001863][ T7657] __sys_setresuid+0x458/0x1280 [ 226.001898][ T7657] do_syscall_64+0x10b/0xf80 [ 226.001920][ T7657] ? clear_bhb_loop+0x40/0x90 [ 226.001948][ T7657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.001973][ T7657] RIP: 0033:0x7fa85cb9ce59 [ 226.001992][ T7657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.002016][ T7657] RSP: 002b:00007fa85db07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 226.002038][ T7657] RAX: ffffffffffffffda RBX: 00007fa85ce15fa0 RCX: 00007fa85cb9ce59 [ 226.002053][ T7657] RDX: 0000000000000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 226.002067][ T7657] RBP: 00007fa85cc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 226.002081][ T7657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.002095][ T7657] R13: 00007fa85ce16038 R14: 00007fa85ce15fa0 R15: 00007ffefac06d38 [ 226.002124][ T7657] [ 226.166258][ T7661] FAULT_INJECTION: forcing a failure. [ 226.166258][ T7661] name failslab, interval 1, probability 0, space 0, times 0 [ 226.180745][ T7661] CPU: 0 UID: 0 PID: 7661 Comm: syz.1.351 Not tainted syzkaller #0 PREEMPT(full) [ 226.180776][ T7661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 226.180790][ T7661] Call Trace: [ 226.180798][ T7661] [ 226.180806][ T7661] dump_stack_lvl+0x100/0x190 [ 226.180837][ T7661] should_fail_ex.cold+0x5/0xa [ 226.180872][ T7661] should_failslab+0xc2/0x120 [ 226.180901][ T7661] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 226.180925][ T7661] ? copy_process+0x69a/0x7ed0 [ 226.180965][ T7661] copy_process+0x69a/0x7ed0 [ 226.180997][ T7661] ? __futex_wait+0x256/0x300 [ 226.181032][ T7661] ? __pfx___futex_wait+0x10/0x10 [ 226.181064][ T7661] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 226.181111][ T7661] ? __pfx_copy_process+0x10/0x10 [ 226.181145][ T7661] ? find_held_lock+0x2b/0x80 [ 226.181188][ T7661] kernel_clone+0x12e/0x9c0 [ 226.181221][ T7661] ? __pfx_futex_wait+0x10/0x10 [ 226.181262][ T7661] ? __pfx_kernel_clone+0x10/0x10 [ 226.181312][ T7661] __do_sys_clone+0xd9/0x120 [ 226.181346][ T7661] ? __pfx___do_sys_clone+0x10/0x10 [ 226.181381][ T7661] ? find_held_lock+0x2b/0x80 [ 226.181429][ T7661] ? rcu_is_watching+0x12/0xc0 [ 226.181462][ T7661] do_syscall_64+0x10b/0xf80 [ 226.181483][ T7661] ? clear_bhb_loop+0x40/0x90 [ 226.181512][ T7661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.181537][ T7661] RIP: 0033:0x7efd7cf9ce59 [ 226.181557][ T7661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.181580][ T7661] RSP: 002b:00007efd7de7dfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 226.181602][ T7661] RAX: ffffffffffffffda RBX: 00007efd7d215fa0 RCX: 00007efd7cf9ce59 [ 226.181618][ T7661] RDX: 0000000000000000 RSI: 0000000000020010 RDI: 0000000000000011 [ 226.181632][ T7661] RBP: 00007efd7d032d6f R08: 0000000000000000 R09: 0000000000000000 [ 226.181646][ T7661] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 226.181659][ T7661] R13: 00007efd7d216038 R14: 00007efd7d215fa0 R15: 00007ffe7421a9b8 [ 226.181689][ T7661] [ 227.444064][ T7674] random: crng reseeded on system resumption [ 227.494848][ T7674] FAULT_INJECTION: forcing a failure. [ 227.494848][ T7674] name failslab, interval 1, probability 0, space 0, times 0 [ 227.598669][ T7674] CPU: 0 UID: 0 PID: 7674 Comm: syz.0.354 Not tainted syzkaller #0 PREEMPT(full) [ 227.598701][ T7674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 227.598715][ T7674] Call Trace: [ 227.598722][ T7674] [ 227.598731][ T7674] dump_stack_lvl+0x100/0x190 [ 227.598762][ T7674] should_fail_ex.cold+0x5/0xa [ 227.598793][ T7674] should_failslab+0xc2/0x120 [ 227.598823][ T7674] __kmalloc_cache_noprof+0x7a/0x6f0 [ 227.598860][ T7674] ? create_basic_memory_bitmaps+0xeb/0x350 [ 227.598900][ T7674] create_basic_memory_bitmaps+0xeb/0x350 [ 227.598940][ T7674] snapshot_open+0x230/0x2a0 [ 227.598976][ T7674] ? __pfx_snapshot_open+0x10/0x10 [ 227.599014][ T7674] misc_open+0x26d/0x450 [ 227.599047][ T7674] ? __pfx_misc_open+0x10/0x10 [ 227.599078][ T7674] chrdev_open+0x234/0x6a0 [ 227.599110][ T7674] ? __pfx_apparmor_file_open+0x10/0x10 [ 227.599142][ T7674] ? __pfx_chrdev_open+0x10/0x10 [ 227.599175][ T7674] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 227.599215][ T7674] do_dentry_open+0x6d8/0x1660 [ 227.599245][ T7674] ? __pfx_chrdev_open+0x10/0x10 [ 227.599284][ T7674] vfs_open+0x82/0x3f0 [ 227.599324][ T7674] path_openat+0x208c/0x31a0 [ 227.599365][ T7674] ? __pfx_path_openat+0x10/0x10 [ 227.599407][ T7674] do_file_open+0x20e/0x430 [ 227.599441][ T7674] ? __pfx_do_file_open+0x10/0x10 [ 227.599493][ T7674] ? alloc_fd+0x476/0x790 [ 227.599526][ T7674] ? do_getname+0x191/0x390 [ 227.599565][ T7674] do_sys_openat2+0x10d/0x1e0 [ 227.599603][ T7674] ? __pfx_do_sys_openat2+0x10/0x10 [ 227.599644][ T7674] ? __pfx_restore_altstack+0x10/0x10 [ 227.599689][ T7674] __x64_sys_openat+0x12d/0x210 [ 227.599734][ T7674] ? __pfx___x64_sys_openat+0x10/0x10 [ 227.599772][ T7674] ? __do_sys_rt_sigreturn+0x1da/0x2c0 [ 227.599814][ T7674] ? rcu_is_watching+0x12/0xc0 [ 227.599848][ T7674] do_syscall_64+0x10b/0xf80 [ 227.599870][ T7674] ? clear_bhb_loop+0x40/0x90 [ 227.599899][ T7674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.599924][ T7674] RIP: 0033:0x7f7c3ab9ce59 [ 227.599943][ T7674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.599966][ T7674] RSP: 002b:00007f7c38dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 227.599988][ T7674] RAX: ffffffffffffffda RBX: 00007f7c3ae16090 RCX: 00007f7c3ab9ce59 [ 227.600004][ T7674] RDX: 0000000000008001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 227.600019][ T7674] RBP: 00007f7c3ac32d6f R08: 0000000000000000 R09: 0000000000000000 [ 227.600033][ T7674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.600047][ T7674] R13: 00007f7c3ae16128 R14: 00007f7c3ae16090 R15: 00007fffc00bf6e8 [ 227.600077][ T7674] [ 228.365102][ T7662] FAULT_INJECTION: forcing a failure. [ 228.365102][ T7662] name fail_futex, interval 1, probability 0, space 0, times 0 [ 228.658585][ T7662] CPU: 0 UID: 0 PID: 7662 Comm: syz.2.349 Not tainted syzkaller #0 PREEMPT(full) [ 228.658618][ T7662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 228.658632][ T7662] Call Trace: [ 228.658640][ T7662] [ 228.658649][ T7662] dump_stack_lvl+0x100/0x190 [ 228.658680][ T7662] should_fail_ex.cold+0x5/0xa [ 228.658710][ T7662] get_futex_key+0x1d2/0x1510 [ 228.658738][ T7662] ? __pfx_get_futex_key+0x10/0x10 [ 228.658772][ T7662] futex_wake+0xea/0x530 [ 228.658804][ T7662] ? rcu_is_watching+0x12/0xc0 [ 228.658835][ T7662] ? __pfx_futex_wake+0x10/0x10 [ 228.658870][ T7662] ? putname+0xb1/0x110 [ 228.658902][ T7662] ? kmem_cache_free+0x127/0x6c0 [ 228.658945][ T7662] do_futex+0x32b/0x350 [ 228.658972][ T7662] ? __pfx_do_futex+0x10/0x10 [ 228.659003][ T7662] ? __pfx_do_sys_openat2+0x10/0x10 [ 228.659044][ T7662] ? do_raw_spin_lock+0x128/0x260 [ 228.659076][ T7662] __x64_sys_futex+0x34f/0x4d0 [ 228.659105][ T7662] ? __x64_sys_openat+0x12d/0x210 [ 228.659145][ T7662] ? __pfx___x64_sys_futex+0x10/0x10 [ 228.659178][ T7662] ? rcu_is_watching+0x12/0xc0 [ 228.659211][ T7662] do_syscall_64+0x10b/0xf80 [ 228.659232][ T7662] ? clear_bhb_loop+0x40/0x90 [ 228.659262][ T7662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.659287][ T7662] RIP: 0033:0x7fa85cb9ce59 [ 228.659306][ T7662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.659329][ T7662] RSP: 002b:00007fa85daa40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 228.659351][ T7662] RAX: ffffffffffffffda RBX: 00007fa85ce16278 RCX: 00007fa85cb9ce59 [ 228.659367][ T7662] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa85ce1627c [ 228.659381][ T7662] RBP: 00007fa85ce16270 R08: 0000000000000001 R09: 0000000000000000 [ 228.659395][ T7662] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 228.659409][ T7662] R13: 00007fa85ce16308 R14: 00007ffefac06c50 R15: 00007ffefac06d38 [ 228.659439][ T7662] [ 231.265185][ T7680] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 231.304950][ T7680] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 231.313123][ T1326] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 231.346106][ T7680] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 231.371075][ T7680] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 231.606348][ T5646] Bluetooth: hci0: command 0x0c1a tx timeout [ 233.073559][ T7719] FAULT_INJECTION: forcing a failure. [ 233.073559][ T7719] name fail_futex, interval 1, probability 0, space 0, times 0 [ 233.204725][ T7719] CPU: 0 UID: 0 PID: 7719 Comm: syz.1.361 Not tainted syzkaller #0 PREEMPT(full) [ 233.204763][ T7719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 233.204778][ T7719] Call Trace: [ 233.204785][ T7719] [ 233.204794][ T7719] dump_stack_lvl+0x100/0x190 [ 233.204825][ T7719] should_fail_ex.cold+0x5/0xa [ 233.204859][ T7719] get_futex_key+0x1d2/0x1510 [ 233.204888][ T7719] ? __pfx_get_futex_key+0x10/0x10 [ 233.204911][ T7719] ? do_raw_spin_lock+0x128/0x260 [ 233.204940][ T7719] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 233.204976][ T7719] futex_wait_setup+0x83/0x510 [ 233.205016][ T7719] __futex_wait+0x19f/0x300 [ 233.205050][ T7719] ? __pfx___futex_wait+0x10/0x10 [ 233.205087][ T7719] ? __pfx_futex_wake_mark+0x10/0x10 [ 233.205132][ T7719] ? futex_hash+0x2ad/0x370 [ 233.205167][ T7719] ? __futex_hash+0x263/0x810 [ 233.205223][ T7719] ? futex_hash+0x141/0x370 [ 233.205248][ T7719] ? futex_hash+0x2b7/0x370 [ 233.205273][ T7719] futex_wait+0xe6/0x370 [ 233.205306][ T7719] ? __pfx_futex_wait+0x10/0x10 [ 233.205354][ T7719] do_futex+0x1ef/0x350 [ 233.205381][ T7719] ? __pfx_do_futex+0x10/0x10 [ 233.205407][ T7719] ? __pfx_var_wake_function+0x10/0x10 [ 233.205453][ T7719] __x64_sys_futex+0x34f/0x4d0 [ 233.205484][ T7719] ? __pfx___x64_sys_futex+0x10/0x10 [ 233.205517][ T7719] ? rcu_is_watching+0x12/0xc0 [ 233.205550][ T7719] do_syscall_64+0x10b/0xf80 [ 233.205572][ T7719] ? clear_bhb_loop+0x40/0x90 [ 233.205602][ T7719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.205626][ T7719] RIP: 0033:0x7efd7cf9ce59 [ 233.205653][ T7719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.205676][ T7719] RSP: 002b:00007efd7de5d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 233.205707][ T7719] RAX: ffffffffffffffda RBX: 00007efd7d216098 RCX: 00007efd7cf9ce59 [ 233.205723][ T7719] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007efd7d216098 [ 233.205737][ T7719] RBP: 00007efd7d216090 R08: 0000000000000000 R09: 0000000000000000 [ 233.205770][ T7719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.205784][ T7719] R13: 00007efd7d216128 R14: 00007ffe7421a8d0 R15: 00007ffe7421a9b8 [ 233.205814][ T7719] [ 233.783713][ T5646] Bluetooth: hci2: command 0x0c1a tx timeout [ 233.795383][ T5646] Bluetooth: hci3: command 0x0c1a tx timeout [ 233.801480][ T5646] Bluetooth: hci1: command 0x0c1a tx timeout [ 234.007668][ T7730] FAULT_INJECTION: forcing a failure. [ 234.007668][ T7730] name failslab, interval 1, probability 0, space 0, times 0 [ 234.053993][ T7730] CPU: 0 UID: 0 PID: 7730 Comm: syz.2.362 Not tainted syzkaller #0 PREEMPT(full) [ 234.054025][ T7730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 234.054040][ T7730] Call Trace: [ 234.054048][ T7730] [ 234.054057][ T7730] dump_stack_lvl+0x100/0x190 [ 234.054088][ T7730] should_fail_ex.cold+0x5/0xa [ 234.054118][ T7730] should_failslab+0xc2/0x120 [ 234.054148][ T7730] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 234.054173][ T7730] ? copy_process+0x69a/0x7ed0 [ 234.054212][ T7730] copy_process+0x69a/0x7ed0 [ 234.054245][ T7730] ? __futex_wait+0x256/0x300 [ 234.054280][ T7730] ? __pfx___futex_wait+0x10/0x10 [ 234.054322][ T7730] ? __pfx_copy_process+0x10/0x10 [ 234.054363][ T7730] ? futex_hash+0x141/0x370 [ 234.054392][ T7730] kernel_clone+0x12e/0x9c0 [ 234.054425][ T7730] ? __pfx_futex_wait+0x10/0x10 [ 234.054464][ T7730] ? __pfx_kernel_clone+0x10/0x10 [ 234.054515][ T7730] __do_sys_clone+0xd9/0x120 [ 234.054551][ T7730] ? __pfx___do_sys_clone+0x10/0x10 [ 234.054585][ T7730] ? find_held_lock+0x2b/0x80 [ 234.054634][ T7730] ? rcu_is_watching+0x12/0xc0 [ 234.054667][ T7730] do_syscall_64+0x10b/0xf80 [ 234.054689][ T7730] ? clear_bhb_loop+0x40/0x90 [ 234.054719][ T7730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.054743][ T7730] RIP: 0033:0x7fa85cb9ce59 [ 234.054763][ T7730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.054786][ T7730] RSP: 002b:00007fa85db06fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 234.054808][ T7730] RAX: ffffffffffffffda RBX: 00007fa85ce15fa0 RCX: 00007fa85cb9ce59 [ 234.054824][ T7730] RDX: 0000000000000000 RSI: 0000000000020200 RDI: 0000000000000011 [ 234.054838][ T7730] RBP: 00007fa85cc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 234.054852][ T7730] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 234.054866][ T7730] R13: 00007fa85ce16038 R14: 00007fa85ce15fa0 R15: 00007ffefac06d38 [ 234.054896][ T7730] [ 234.599518][ T7714] FAULT_INJECTION: forcing a failure. [ 234.599518][ T7714] name failslab, interval 1, probability 0, space 0, times 0 [ 234.630991][ T7714] CPU: 0 UID: 0 PID: 7714 Comm: syz.3.360 Not tainted syzkaller #0 PREEMPT(full) [ 234.631023][ T7714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 234.631038][ T7714] Call Trace: [ 234.631045][ T7714] [ 234.631054][ T7714] dump_stack_lvl+0x100/0x190 [ 234.631084][ T7714] should_fail_ex.cold+0x5/0xa [ 234.631115][ T7714] should_failslab+0xc2/0x120 [ 234.631145][ T7714] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 234.631185][ T7714] ? do_getname+0x35/0x390 [ 234.631227][ T7714] do_getname+0x35/0x390 [ 234.631267][ T7714] do_sys_openat2+0xc5/0x1e0 [ 234.631305][ T7714] ? __pfx_do_sys_openat2+0x10/0x10 [ 234.631345][ T7714] ? find_held_lock+0x2b/0x80 [ 234.631384][ T7714] __x64_sys_openat+0x12d/0x210 [ 234.631430][ T7714] ? __pfx___x64_sys_openat+0x10/0x10 [ 234.631474][ T7714] ? rcu_is_watching+0x12/0xc0 [ 234.631508][ T7714] do_syscall_64+0x10b/0xf80 [ 234.631530][ T7714] ? clear_bhb_loop+0x40/0x90 [ 234.631559][ T7714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.631584][ T7714] RIP: 0033:0x7f72f139ce59 [ 234.631603][ T7714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.631626][ T7714] RSP: 002b:00007f72f22d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 234.631648][ T7714] RAX: ffffffffffffffda RBX: 00007f72f1616180 RCX: 00007f72f139ce59 [ 234.631664][ T7714] RDX: 0000000000090800 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 234.631679][ T7714] RBP: 00007f72f1432d6f R08: 0000000000000000 R09: 0000000000000000 [ 234.631693][ T7714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.631707][ T7714] R13: 00007f72f1616218 R14: 00007f72f1616180 R15: 00007ffcab8a3298 [ 234.631736][ T7714] [ 237.768013][ T7757] FAULT_INJECTION: forcing a failure. [ 237.768013][ T7757] name fail_futex, interval 1, probability 0, space 0, times 0 [ 237.880208][ T7757] CPU: 0 UID: 0 PID: 7757 Comm: syz.0.368 Not tainted syzkaller #0 PREEMPT(full) [ 237.880240][ T7757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 237.880269][ T7757] Call Trace: [ 237.880278][ T7757] [ 237.880286][ T7757] dump_stack_lvl+0x100/0x190 [ 237.880319][ T7757] should_fail_ex.cold+0x5/0xa [ 237.880349][ T7757] get_futex_key+0x1d2/0x1510 [ 237.880377][ T7757] ? __pfx_get_futex_key+0x10/0x10 [ 237.880400][ T7757] ? pick_eevdf+0x198/0x860 [ 237.880436][ T7757] ? update_se+0x94/0x770 [ 237.880480][ T7757] futex_wait_setup+0x83/0x510 [ 237.880521][ T7757] __futex_wait+0x19f/0x300 [ 237.880555][ T7757] ? __pfx___futex_wait+0x10/0x10 [ 237.880587][ T7757] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 237.880629][ T7757] ? __pfx_futex_wake_mark+0x10/0x10 [ 237.880666][ T7757] ? find_held_lock+0x2b/0x80 [ 237.880698][ T7757] ? futex_wake+0x456/0x530 [ 237.880735][ T7757] futex_wait+0xe6/0x370 [ 237.880768][ T7757] ? __pfx_futex_wait+0x10/0x10 [ 237.880815][ T7757] do_futex+0x1ef/0x350 [ 237.880842][ T7757] ? __pfx_do_futex+0x10/0x10 [ 237.880869][ T7757] ? __pfx_var_wake_function+0x10/0x10 [ 237.880915][ T7757] __x64_sys_futex+0x34f/0x4d0 [ 237.880946][ T7757] ? __pfx___x64_sys_futex+0x10/0x10 [ 237.880978][ T7757] ? rcu_is_watching+0x12/0xc0 [ 237.881011][ T7757] do_syscall_64+0x10b/0xf80 [ 237.881039][ T7757] ? clear_bhb_loop+0x40/0x90 [ 237.881068][ T7757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.881093][ T7757] RIP: 0033:0x7f7c3ab9ce59 [ 237.881112][ T7757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.881134][ T7757] RSP: 002b:00007f7c38dd50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 237.881160][ T7757] RAX: ffffffffffffffda RBX: 00007f7c3ae16098 RCX: 00007f7c3ab9ce59 [ 237.881176][ T7757] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7c3ae16098 [ 237.881190][ T7757] RBP: 00007f7c3ae16090 R08: 0000000000000000 R09: 0000000000000000 [ 237.881205][ T7757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.881218][ T7757] R13: 00007f7c3ae16128 R14: 00007fffc00bf600 R15: 00007fffc00bf6e8 [ 237.881248][ T7757] [ 238.311225][ T7750] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 239.075233][ T7772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.372'. [ 239.177488][ T7768] FAULT_INJECTION: forcing a failure. [ 239.177488][ T7768] name fail_futex, interval 1, probability 0, space 0, times 0 [ 239.200893][ T7768] CPU: 0 UID: 0 PID: 7768 Comm: syz.3.370 Not tainted syzkaller #0 PREEMPT(full) [ 239.200926][ T7768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 239.200940][ T7768] Call Trace: [ 239.200953][ T7768] [ 239.200962][ T7768] dump_stack_lvl+0x100/0x190 [ 239.200994][ T7768] should_fail_ex.cold+0x5/0xa [ 239.201024][ T7768] get_futex_key+0x1d2/0x1510 [ 239.201052][ T7768] ? __pfx_get_futex_key+0x10/0x10 [ 239.201075][ T7768] ? do_raw_spin_lock+0x128/0x260 [ 239.201105][ T7768] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 239.201139][ T7768] futex_wait_setup+0x83/0x510 [ 239.201179][ T7768] __futex_wait+0x19f/0x300 [ 239.201214][ T7768] ? __pfx___futex_wait+0x10/0x10 [ 239.201251][ T7768] ? __pfx_futex_wake_mark+0x10/0x10 [ 239.201286][ T7768] ? futex_hash+0x2ad/0x370 [ 239.201308][ T7768] ? __futex_hash+0x263/0x810 [ 239.201347][ T7768] ? futex_hash+0x141/0x370 [ 239.201368][ T7768] ? futex_hash+0x2b7/0x370 [ 239.201393][ T7768] futex_wait+0xe6/0x370 [ 239.201426][ T7768] ? __pfx_futex_wait+0x10/0x10 [ 239.201473][ T7768] do_futex+0x1ef/0x350 [ 239.201499][ T7768] ? __pfx_do_futex+0x10/0x10 [ 239.201525][ T7768] ? __pfx_var_wake_function+0x10/0x10 [ 239.201571][ T7768] __x64_sys_futex+0x34f/0x4d0 [ 239.201601][ T7768] ? __pfx___x64_sys_futex+0x10/0x10 [ 239.201634][ T7768] ? rcu_is_watching+0x12/0xc0 [ 239.201667][ T7768] do_syscall_64+0x10b/0xf80 [ 239.201689][ T7768] ? clear_bhb_loop+0x40/0x90 [ 239.201718][ T7768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.201742][ T7768] RIP: 0033:0x7f72f139ce59 [ 239.201761][ T7768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.201784][ T7768] RSP: 002b:00007f72f22fa0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 239.201806][ T7768] RAX: ffffffffffffffda RBX: 00007f72f1616098 RCX: 00007f72f139ce59 [ 239.201822][ T7768] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f72f1616098 [ 239.201836][ T7768] RBP: 00007f72f1616090 R08: 0000000000000000 R09: 0000000000000000 [ 239.201850][ T7768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.201864][ T7768] R13: 00007f72f1616128 R14: 00007ffcab8a31b0 R15: 00007ffcab8a3298 [ 239.201893][ T7768] [ 239.690745][ T7780] FAULT_INJECTION: forcing a failure. [ 239.690745][ T7780] name fail_futex, interval 1, probability 0, space 0, times 0 [ 239.862505][ T7780] CPU: 0 UID: 0 PID: 7780 Comm: syz.2.371 Not tainted syzkaller #0 PREEMPT(full) [ 239.862538][ T7780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 239.862552][ T7780] Call Trace: [ 239.862560][ T7780] [ 239.862570][ T7780] dump_stack_lvl+0x100/0x190 [ 239.862600][ T7780] should_fail_ex.cold+0x5/0xa [ 239.862631][ T7780] get_futex_key+0x1d2/0x1510 [ 239.862659][ T7780] ? __pfx_get_futex_key+0x10/0x10 [ 239.862682][ T7780] ? do_raw_spin_lock+0x128/0x260 [ 239.862712][ T7780] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 239.862746][ T7780] futex_wait_setup+0x83/0x510 [ 239.862787][ T7780] __futex_wait+0x19f/0x300 [ 239.862829][ T7780] ? __pfx___futex_wait+0x10/0x10 [ 239.862866][ T7780] ? __pfx_futex_wake_mark+0x10/0x10 [ 239.862902][ T7780] ? futex_hash+0x2ad/0x370 [ 239.862924][ T7780] ? __futex_hash+0x263/0x810 [ 239.862963][ T7780] ? futex_hash+0x141/0x370 [ 239.862985][ T7780] ? futex_hash+0x2b7/0x370 [ 239.863010][ T7780] futex_wait+0xe6/0x370 [ 239.863042][ T7780] ? __pfx_futex_wait+0x10/0x10 [ 239.863089][ T7780] do_futex+0x1ef/0x350 [ 239.863116][ T7780] ? __pfx_do_futex+0x10/0x10 [ 239.863142][ T7780] ? __pfx_var_wake_function+0x10/0x10 [ 239.863188][ T7780] __x64_sys_futex+0x34f/0x4d0 [ 239.863218][ T7780] ? __pfx___x64_sys_futex+0x10/0x10 [ 239.863251][ T7780] ? rcu_is_watching+0x12/0xc0 [ 239.863284][ T7780] do_syscall_64+0x10b/0xf80 [ 239.863312][ T7780] ? clear_bhb_loop+0x40/0x90 [ 239.863343][ T7780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.863368][ T7780] RIP: 0033:0x7fa85cb9ce59 [ 239.863387][ T7780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.863411][ T7780] RSP: 002b:00007fa85dae60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 239.863434][ T7780] RAX: ffffffffffffffda RBX: 00007fa85ce16098 RCX: 00007fa85cb9ce59 [ 239.863450][ T7780] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa85ce16098 [ 239.863464][ T7780] RBP: 00007fa85ce16090 R08: 0000000000000000 R09: 0000000000000000 [ 239.863478][ T7780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.863492][ T7780] R13: 00007fa85ce16128 R14: 00007ffefac06c50 R15: 00007ffefac06d38 [ 239.863521][ T7780] [ 240.897251][ T7760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.369'. [ 249.222307][ T7888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.394'. [ 250.126247][ T7898] futex_wake_op: syz.2.396 tries to shift op by -2048; fix this program [ 250.315739][ T7898] futex_wake_op: syz.2.396 tries to shift op by -2048; fix this program [ 250.940107][ T7899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.396'. [ 251.337751][ T7918] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 251.695304][ T7913] FAULT_INJECTION: forcing a failure. [ 251.695304][ T7913] name fail_futex, interval 1, probability 0, space 0, times 0 [ 251.717936][ T7919] syz.3.401 uses obsolete (PF_INET,SOCK_PACKET) [ 251.922707][ T7913] CPU: 0 UID: 0 PID: 7913 Comm: syz.1.400 Not tainted syzkaller #0 PREEMPT(full) [ 251.922739][ T7913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 251.922753][ T7913] Call Trace: [ 251.922761][ T7913] [ 251.922770][ T7913] dump_stack_lvl+0x100/0x190 [ 251.922801][ T7913] should_fail_ex.cold+0x5/0xa [ 251.922831][ T7913] get_futex_key+0x1d2/0x1510 [ 251.922859][ T7913] ? __pfx_get_futex_key+0x10/0x10 [ 251.922884][ T7913] ? __fget_files+0x215/0x3d0 [ 251.922913][ T7913] ? __fget_files+0x215/0x3d0 [ 251.922948][ T7913] futex_wake+0xea/0x530 [ 251.922983][ T7913] ? __pfx_futex_wake+0x10/0x10 [ 251.923015][ T7913] ? __sys_sendmmsg+0x367/0x430 [ 251.923049][ T7913] ? __pfx___sys_sendmmsg+0x10/0x10 [ 251.923078][ T7913] ? do_vfs_ioctl+0x226/0x13e0 [ 251.923106][ T7913] do_futex+0x32b/0x350 [ 251.923133][ T7913] ? __pfx_do_futex+0x10/0x10 [ 251.923167][ T7913] __x64_sys_futex+0x34f/0x4d0 [ 251.923197][ T7913] ? __pfx___x64_sys_futex+0x10/0x10 [ 251.923226][ T7913] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 251.923265][ T7913] ? syscall_user_dispatch+0x76/0x130 [ 251.923296][ T7913] do_syscall_64+0x10b/0xf80 [ 251.923317][ T7913] ? clear_bhb_loop+0x40/0x90 [ 251.923347][ T7913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.923372][ T7913] RIP: 0033:0x7efd7cf9ce59 [ 251.923391][ T7913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.923414][ T7913] RSP: 002b:00007efd7de3c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 251.923436][ T7913] RAX: ffffffffffffffda RBX: 00007efd7d216188 RCX: 00007efd7cf9ce59 [ 251.923457][ T7913] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007efd7d21618c [ 251.923471][ T7913] RBP: 00007efd7d216180 R08: 0000000000000001 R09: 0000000000000000 [ 251.923485][ T7913] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 251.923500][ T7913] R13: 00007efd7d216218 R14: 00007ffe7421a8d0 R15: 00007ffe7421a9b8 [ 251.923529][ T7913] [ 255.848703][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.855257][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.617183][ T7976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.415'. [ 257.240419][ T7979] zram: Removed device: zram0 [ 258.845274][ T30] audit: type=1806 audit(1779617267.070:4): xattr="" res=-22 [ 259.152549][ T8013] netlink: 20 bytes leftover after parsing attributes in process `syz.0.424'. [ 259.599420][ T8022] block2mtd: device name too long [ 261.749605][ T8059] FAULT_INJECTION: forcing a failure. [ 261.749605][ T8059] name failslab, interval 1, probability 0, space 0, times 0 [ 261.805855][ T8059] CPU: 0 UID: 0 PID: 8059 Comm: syz.2.433 Not tainted syzkaller #0 PREEMPT(full) [ 261.805888][ T8059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 261.805902][ T8059] Call Trace: [ 261.805910][ T8059] [ 261.805919][ T8059] dump_stack_lvl+0x100/0x190 [ 261.805949][ T8059] should_fail_ex.cold+0x5/0xa [ 261.805981][ T8059] should_failslab+0xc2/0x120 [ 261.806010][ T8059] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 261.806050][ T8059] ? do_getname+0x35/0x390 [ 261.806088][ T8059] ? ksys_write+0x190/0x250 [ 261.806119][ T8059] do_getname+0x35/0x390 [ 261.806158][ T8059] do_sys_openat2+0xc5/0x1e0 [ 261.806197][ T8059] ? __pfx_do_sys_openat2+0x10/0x10 [ 261.806247][ T8059] __x64_sys_openat+0x12d/0x210 [ 261.806286][ T8059] ? __pfx___x64_sys_openat+0x10/0x10 [ 261.806324][ T8059] ? ksys_write+0x1ac/0x250 [ 261.806356][ T8059] ? rcu_is_watching+0x12/0xc0 [ 261.806389][ T8059] do_syscall_64+0x10b/0xf80 [ 261.806412][ T8059] ? clear_bhb_loop+0x40/0x90 [ 261.806441][ T8059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.806466][ T8059] RIP: 0033:0x7fa85cb9ce59 [ 261.806485][ T8059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.806508][ T8059] RSP: 002b:00007fa85dae6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 261.806531][ T8059] RAX: ffffffffffffffda RBX: 00007fa85ce16090 RCX: 00007fa85cb9ce59 [ 261.806546][ T8059] RDX: 000000000008a042 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 261.806561][ T8059] RBP: 00007fa85cc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 261.806575][ T8059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.806589][ T8059] R13: 00007fa85ce16128 R14: 00007fa85ce16090 R15: 00007ffefac06d38 [ 261.806618][ T8059] [ 262.122026][ T8062] nfs: Unknown parameter '# -@x"h젚y'ʚ6E-I!JOf~t`e9VBa~is' [ 264.476193][ T8093] FAULT_INJECTION: forcing a failure. [ 264.476193][ T8093] name fail_futex, interval 1, probability 0, space 0, times 0 [ 264.540707][ T8093] CPU: 0 UID: 0 PID: 8093 Comm: syz.3.442 Not tainted syzkaller #0 PREEMPT(full) [ 264.540740][ T8093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 264.540754][ T8093] Call Trace: [ 264.540762][ T8093] [ 264.540771][ T8093] dump_stack_lvl+0x100/0x190 [ 264.540802][ T8093] should_fail_ex.cold+0x5/0xa [ 264.540832][ T8093] get_futex_key+0x1d2/0x1510 [ 264.540860][ T8093] ? __pfx_get_futex_key+0x10/0x10 [ 264.540886][ T8093] ? pick_eevdf+0x198/0x860 [ 264.540923][ T8093] ? update_se+0x94/0x770 [ 264.540968][ T8093] futex_wait_setup+0x83/0x510 [ 264.541009][ T8093] __futex_wait+0x19f/0x300 [ 264.541044][ T8093] ? __pfx___futex_wait+0x10/0x10 [ 264.541075][ T8093] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 264.541117][ T8093] ? __pfx_futex_wake_mark+0x10/0x10 [ 264.541155][ T8093] ? find_held_lock+0x2b/0x80 [ 264.541186][ T8093] ? futex_wake+0x456/0x530 [ 264.541223][ T8093] futex_wait+0xe6/0x370 [ 264.541256][ T8093] ? __pfx_futex_wait+0x10/0x10 [ 264.541303][ T8093] do_futex+0x1ef/0x350 [ 264.541336][ T8093] ? __pfx_do_futex+0x10/0x10 [ 264.541362][ T8093] ? __pfx_var_wake_function+0x10/0x10 [ 264.541408][ T8093] __x64_sys_futex+0x34f/0x4d0 [ 264.541439][ T8093] ? __pfx___x64_sys_futex+0x10/0x10 [ 264.541471][ T8093] ? rcu_is_watching+0x12/0xc0 [ 264.541505][ T8093] do_syscall_64+0x10b/0xf80 [ 264.541526][ T8093] ? clear_bhb_loop+0x40/0x90 [ 264.541555][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.541580][ T8093] RIP: 0033:0x7f72f139ce59 [ 264.541599][ T8093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.541622][ T8093] RSP: 002b:00007f72f22fa0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 264.541645][ T8093] RAX: ffffffffffffffda RBX: 00007f72f1616098 RCX: 00007f72f139ce59 [ 264.541660][ T8093] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f72f1616098 [ 264.541674][ T8093] RBP: 00007f72f1616090 R08: 0000000000000000 R09: 0000000000000000 [ 264.541688][ T8093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.541702][ T8093] R13: 00007f72f1616128 R14: 00007ffcab8a31b0 R15: 00007ffcab8a3298 [ 264.541732][ T8093] [ 265.045378][ T8105] netlink: 2553 bytes leftover after parsing attributes in process `syz.0.443'. [ 270.371824][ T8168] bridge0: port 3(veth1) entered blocking state [ 270.424694][ T8168] bridge0: port 3(veth1) entered disabled state [ 270.486732][ T8168] veth1: entered allmulticast mode [ 270.562082][ T8168] veth1: entered promiscuous mode [ 270.603384][ T8168] bridge0: port 3(veth1) entered blocking state [ 270.611126][ T8168] bridge0: port 3(veth1) entered listening state [ 271.101250][ T8184] FAULT_INJECTION: forcing a failure. [ 271.101250][ T8184] name fail_futex, interval 1, probability 0, space 0, times 0 [ 271.246179][ T8184] CPU: 0 UID: 0 PID: 8184 Comm: syz.0.461 Not tainted syzkaller #0 PREEMPT(full) [ 271.246212][ T8184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 271.246227][ T8184] Call Trace: [ 271.246235][ T8184] [ 271.246244][ T8184] dump_stack_lvl+0x100/0x190 [ 271.246274][ T8184] should_fail_ex.cold+0x5/0xa [ 271.246305][ T8184] get_futex_key+0x1d2/0x1510 [ 271.246333][ T8184] ? __pfx_get_futex_key+0x10/0x10 [ 271.246356][ T8184] ? futex_hash+0x2ad/0x370 [ 271.246387][ T8184] futex_wake+0xea/0x530 [ 271.246417][ T8184] ? __fget_files+0x215/0x3d0 [ 271.246449][ T8184] ? __pfx_futex_wake+0x10/0x10 [ 271.246492][ T8184] do_futex+0x32b/0x350 [ 271.246525][ T8184] ? __pfx_do_futex+0x10/0x10 [ 271.246567][ T8184] __x64_sys_futex+0x34f/0x4d0 [ 271.246598][ T8184] ? __pfx___x64_sys_futex+0x10/0x10 [ 271.246630][ T8184] ? rcu_is_watching+0x12/0xc0 [ 271.246664][ T8184] do_syscall_64+0x10b/0xf80 [ 271.246686][ T8184] ? clear_bhb_loop+0x40/0x90 [ 271.246715][ T8184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.246740][ T8184] RIP: 0033:0x7f7c3ab9ce59 [ 271.246758][ T8184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.246781][ T8184] RSP: 002b:00007f7c38df60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 271.246804][ T8184] RAX: ffffffffffffffda RBX: 00007f7c3ae15fa8 RCX: 00007f7c3ab9ce59 [ 271.246820][ T8184] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7c3ae15fac [ 271.246834][ T8184] RBP: 00007f7c3ae15fa0 R08: 0000000000000001 R09: 0000000000000000 [ 271.246848][ T8184] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 271.246863][ T8184] R13: 00007f7c3ae16038 R14: 00007fffc00bf600 R15: 00007fffc00bf6e8 [ 271.246892][ T8184] [ 272.894802][ T8191] netlink: 342 bytes leftover after parsing attributes in process `syz.2.463'. [ 279.045775][ T8247] FAULT_INJECTION: forcing a failure. [ 279.045775][ T8247] name failslab, interval 1, probability 0, space 0, times 0 [ 279.198984][ T8247] CPU: 0 UID: 0 PID: 8247 Comm: syz.1.476 Not tainted syzkaller #0 PREEMPT(full) [ 279.199017][ T8247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 279.199031][ T8247] Call Trace: [ 279.199039][ T8247] [ 279.199048][ T8247] dump_stack_lvl+0x100/0x190 [ 279.199080][ T8247] should_fail_ex.cold+0x5/0xa [ 279.199111][ T8247] ? tomoyo_realpath_from_path+0xb6/0x690 [ 279.199145][ T8247] should_failslab+0xc2/0x120 [ 279.199174][ T8247] __kmalloc_noprof+0xe0/0x850 [ 279.199196][ T8247] ? kfree+0x1dd/0x6c0 [ 279.199235][ T8247] tomoyo_realpath_from_path+0xb6/0x690 [ 279.199276][ T8247] tomoyo_path_perm+0x276/0x460 [ 279.199301][ T8247] ? tomoyo_path_perm+0x262/0x460 [ 279.199330][ T8247] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 279.199385][ T8247] ? __pfx_ima_file_check+0x10/0x10 [ 279.199427][ T8247] ? hook_file_truncate+0xc3/0x240 [ 279.199462][ T8247] security_file_truncate+0xb5/0x1e0 [ 279.199494][ T8247] path_openat+0x1c6e/0x31a0 [ 279.199535][ T8247] ? __pfx_path_openat+0x10/0x10 [ 279.199578][ T8247] do_file_open+0x20e/0x430 [ 279.199611][ T8247] ? __pfx_do_file_open+0x10/0x10 [ 279.199663][ T8247] ? alloc_fd+0x476/0x790 [ 279.199696][ T8247] ? do_getname+0x191/0x390 [ 279.199735][ T8247] do_sys_openat2+0x10d/0x1e0 [ 279.199781][ T8247] ? __pfx_do_sys_openat2+0x10/0x10 [ 279.199822][ T8247] ? __fget_files+0x21f/0x3d0 [ 279.199857][ T8247] __x64_sys_openat+0x12d/0x210 [ 279.199898][ T8247] ? __pfx___x64_sys_openat+0x10/0x10 [ 279.199942][ T8247] ? rcu_is_watching+0x12/0xc0 [ 279.199976][ T8247] do_syscall_64+0x10b/0xf80 [ 279.199998][ T8247] ? clear_bhb_loop+0x40/0x90 [ 279.200028][ T8247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.200052][ T8247] RIP: 0033:0x7efd7cf9ce59 [ 279.200072][ T8247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.200096][ T8247] RSP: 002b:00007efd7de5d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 279.200120][ T8247] RAX: ffffffffffffffda RBX: 00007efd7d216090 RCX: 00007efd7cf9ce59 [ 279.200136][ T8247] RDX: 0000000000000600 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 279.200152][ T8247] RBP: 00007efd7d032d6f R08: 0000000000000000 R09: 0000000000000000 [ 279.200166][ T8247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.200180][ T8247] R13: 00007efd7d216128 R14: 00007efd7d216090 R15: 00007ffe7421a9b8 [ 279.200212][ T8247] [ 279.730850][ T8247] ERROR: Out of memory at tomoyo_realpath_from_path. [ 280.512331][ T8254] program syz.0.479 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 281.867476][ T5646] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 281.881148][ T5646] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 281.895257][ T5646] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 281.914285][ T5646] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 281.922926][ T5646] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 281.961996][ T8269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.486'. [ 282.013562][ T8274] netlink: 25 bytes leftover after parsing attributes in process `syz.0.484'. [ 283.905229][ T8299] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 284.007865][ T5646] Bluetooth: hci4: command tx timeout [ 284.823609][ T5646] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 284.910906][ T8313] netlink: 28 bytes leftover after parsing attributes in process `syz.0.493'. [ 285.065488][ T8314] netlink: 342 bytes leftover after parsing attributes in process `syz.0.493'. [ 285.926460][ C0] bridge0: port 3(veth1) entered learning state [ 286.084708][ T5646] Bluetooth: hci4: command tx timeout [ 286.363308][ T8276] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.402622][ T8276] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.452659][ T8276] bridge_slave_0: entered allmulticast mode [ 286.497337][ T8276] bridge_slave_0: entered promiscuous mode [ 286.835473][ T8276] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.887789][ T4945] Bluetooth: hci0: command 0x0c1a tx timeout [ 286.899206][ T8276] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.940352][ T8276] bridge_slave_1: entered allmulticast mode [ 286.989453][ T8276] bridge_slave_1: entered promiscuous mode [ 287.432056][ T8276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.488369][ T8276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.681072][ T8276] team0: Port device team_slave_0 added [ 287.746852][ T8276] team0: Port device team_slave_1 added [ 287.955723][ T8276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.986264][ T8276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.118231][ T8276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.165128][ T5646] Bluetooth: hci4: command tx timeout [ 288.172386][ T8351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.500'. [ 288.214655][ T8276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.261331][ T8276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.407055][ T8276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.873380][ T8276] hsr_slave_0: entered promiscuous mode [ 288.909780][ T8276] hsr_slave_1: entered promiscuous mode [ 288.944591][ T8276] debugfs: 'hsr0' already exists in 'hsr' [ 288.968393][ T5646] Bluetooth: hci0: command 0x0c1a tx timeout [ 288.993405][ T8276] Cannot create hsr debugfs directory [ 289.288943][ T8366] FAULT_INJECTION: forcing a failure. [ 289.288943][ T8366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.367049][ T8366] CPU: 0 UID: 0 PID: 8366 Comm: syz.0.504 Not tainted syzkaller #0 PREEMPT(full) [ 289.367081][ T8366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 289.367096][ T8366] Call Trace: [ 289.367104][ T8366] [ 289.367114][ T8366] dump_stack_lvl+0x100/0x190 [ 289.367146][ T8366] should_fail_ex.cold+0x5/0xa [ 289.367177][ T8366] strncpy_from_user+0x3b/0x2d0 [ 289.367215][ T8366] do_getname+0x78/0x390 [ 289.367256][ T8366] do_sys_openat2+0xc5/0x1e0 [ 289.367300][ T8366] ? __pfx_do_sys_openat2+0x10/0x10 [ 289.367349][ T8366] __x64_sys_openat+0x12d/0x210 [ 289.367389][ T8366] ? __pfx___x64_sys_openat+0x10/0x10 [ 289.367434][ T8366] ? rcu_is_watching+0x12/0xc0 [ 289.367467][ T8366] do_syscall_64+0x10b/0xf80 [ 289.367489][ T8366] ? clear_bhb_loop+0x40/0x90 [ 289.367519][ T8366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.367544][ T8366] RIP: 0033:0x7f7c3ab9ce59 [ 289.367564][ T8366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.367588][ T8366] RSP: 002b:00007f7c38dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 289.367611][ T8366] RAX: ffffffffffffffda RBX: 00007f7c3ae16090 RCX: 00007f7c3ab9ce59 [ 289.367627][ T8366] RDX: 0000000000103000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 289.367642][ T8366] RBP: 00007f7c3ac32d6f R08: 0000000000000000 R09: 0000000000000000 [ 289.367657][ T8366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.367671][ T8366] R13: 00007f7c3ae16128 R14: 00007f7c3ae16090 R15: 00007fffc00bf6e8 [ 289.367701][ T8366] [ 289.741823][ T8368] FAULT_INJECTION: forcing a failure. [ 289.741823][ T8368] name failslab, interval 1, probability 0, space 0, times 0 [ 289.805376][ T8368] CPU: 0 UID: 0 PID: 8368 Comm: syz.1.505 Not tainted syzkaller #0 PREEMPT(full) [ 289.805411][ T8368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 289.805426][ T8368] Call Trace: [ 289.805434][ T8368] [ 289.805443][ T8368] dump_stack_lvl+0x100/0x190 [ 289.805476][ T8368] should_fail_ex.cold+0x5/0xa [ 289.805506][ T8368] ? tomoyo_realpath_from_path+0xb6/0x690 [ 289.805541][ T8368] should_failslab+0xc2/0x120 [ 289.805570][ T8368] __kmalloc_noprof+0xe0/0x850 [ 289.805592][ T8368] ? kfree+0x1dd/0x6c0 [ 289.805631][ T8368] tomoyo_realpath_from_path+0xb6/0x690 [ 289.805678][ T8368] tomoyo_path_perm+0x276/0x460 [ 289.805703][ T8368] ? tomoyo_path_perm+0x262/0x460 [ 289.805733][ T8368] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 289.805789][ T8368] ? __pfx_ima_file_check+0x10/0x10 [ 289.805828][ T8368] ? hook_file_truncate+0xc3/0x240 [ 289.805863][ T8368] security_file_truncate+0xb5/0x1e0 [ 289.805896][ T8368] path_openat+0x1c6e/0x31a0 [ 289.805937][ T8368] ? __pfx_path_openat+0x10/0x10 [ 289.805979][ T8368] do_file_open+0x20e/0x430 [ 289.806013][ T8368] ? __pfx_do_file_open+0x10/0x10 [ 289.806065][ T8368] ? alloc_fd+0x476/0x790 [ 289.806099][ T8368] ? do_getname+0x191/0x390 [ 289.806138][ T8368] do_sys_openat2+0x10d/0x1e0 [ 289.806178][ T8368] ? __pfx_do_sys_openat2+0x10/0x10 [ 289.806219][ T8368] ? __fget_files+0x21f/0x3d0 [ 289.806254][ T8368] __x64_sys_openat+0x12d/0x210 [ 289.806294][ T8368] ? __pfx___x64_sys_openat+0x10/0x10 [ 289.806339][ T8368] ? rcu_is_watching+0x12/0xc0 [ 289.806372][ T8368] do_syscall_64+0x10b/0xf80 [ 289.806394][ T8368] ? clear_bhb_loop+0x40/0x90 [ 289.806424][ T8368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.806449][ T8368] RIP: 0033:0x7efd7cf9ce59 [ 289.806468][ T8368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.806493][ T8368] RSP: 002b:00007efd7de7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 289.806515][ T8368] RAX: ffffffffffffffda RBX: 00007efd7d215fa0 RCX: 00007efd7cf9ce59 [ 289.806531][ T8368] RDX: 0000000000000600 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 289.806546][ T8368] RBP: 00007efd7d032d6f R08: 0000000000000000 R09: 0000000000000000 [ 289.806561][ T8368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.806575][ T8368] R13: 00007efd7d216038 R14: 00007efd7d215fa0 R15: 00007ffe7421a9b8 [ 289.806606][ T8368] [ 289.806615][ T8368] ERROR: Out of memory at tomoyo_realpath_from_path. [ 290.349185][ T4945] Bluetooth: hci4: command tx timeout [ 290.401424][ T8376] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 291.481808][ T30] audit: type=1806 audit(1779617299.720:5): xattr="" res=-22 [ 292.261432][ T8276] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 292.376137][ T8276] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 292.715148][ T8409] ubi0: attaching mtd0 [ 292.762512][ T8276] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 292.776557][ T8409] ubi0: scanning is finished [ 292.843566][ T8409] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 292.876998][ T8276] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 292.914034][ T8276] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 293.000618][ T8276] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 293.137645][ T8276] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 293.209935][ T8276] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 293.410278][ T8409] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 293.665945][ T8420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.515'. [ 294.673413][ T8276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.701079][ T8431] sg_write: data in/out 131052/209 bytes for SCSI command 0x67-- guessing data in; [ 294.701079][ T8431] program syz.1.516 not setting count and/or reply_len properly [ 294.845816][ T8276] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.910044][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.917367][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.997707][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.004944][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.092173][ T30] audit: type=1806 audit(1779617304.330:6): xattr="" res=-22 [ 296.941568][ T8454] bridge0: port 3(team0) entered blocking state [ 297.012098][ T8454] bridge0: port 3(team0) entered disabled state [ 297.074837][ T8454] team0: entered allmulticast mode [ 297.117217][ T8454] team_slave_0: entered allmulticast mode [ 297.167960][ T8454] team_slave_1: entered allmulticast mode [ 297.270508][ T8454] team0: entered promiscuous mode [ 297.326897][ T8454] team_slave_0: entered promiscuous mode [ 297.382652][ T8454] team_slave_1: entered promiscuous mode [ 297.441046][ T8454] bridge0: port 3(team0) entered blocking state [ 297.448517][ T8454] bridge0: port 3(team0) entered forwarding state [ 298.725900][ T8276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.181618][ T8476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.525'. [ 299.403512][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.403030][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.911172][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.284653][ C0] bridge0: port 3(veth1) entered forwarding state [ 301.291175][ C0] bridge0: topology change detected, propagating [ 301.661996][ T30] audit: type=1806 audit(1779617309.900:7): xattr="" res=-22 [ 301.724302][ T4945] Bluetooth: hci3: unexpected event 0x3e length: 508 > 260 [ 301.724420][ T4945] Bluetooth: hci3: unexpected subevent 0x02 length: 507 > 260 [ 301.739462][ T4945] Bluetooth: hci3: Dropping invalid advertising data [ 301.749852][ T4945] Bluetooth: hci3: unknown advertising packet type: 0xe9 [ 301.749888][ T4945] Bluetooth: hci3: unknown advertising packet type: 0x8b [ 301.758943][ T4945] Bluetooth: hci3: unknown advertising packet type: 0xee [ 301.800550][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.453721][ T8276] veth0_vlan: entered promiscuous mode [ 302.550688][ T8276] veth1_vlan: entered promiscuous mode [ 303.212389][ T12] bridge_slave_1: left allmulticast mode [ 303.245994][ T12] bridge_slave_1: left promiscuous mode [ 303.284579][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.353690][ T12] bridge_slave_0: left allmulticast mode [ 303.383533][ T12] bridge_slave_0: left promiscuous mode [ 303.409715][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.249733][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.285785][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.301479][ T8521] netlink: 198 bytes leftover after parsing attributes in process `syz.0.537'. [ 304.327039][ T12] bond0 (unregistering): Released all slaves [ 304.381101][ T8276] veth0_macvtap: entered promiscuous mode [ 304.483076][ T8522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.536'. [ 304.497997][ T8276] veth1_macvtap: entered promiscuous mode [ 305.140887][ T8276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.464033][ T8276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.715853][ T65] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.725941][ T4945] Bluetooth: hci3: Unexpected cc 0x7c89 with no status [ 305.782842][ T65] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.859061][ T65] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.981474][ T12] hsr_slave_0: left promiscuous mode [ 306.020589][ T12] hsr_slave_1: left promiscuous mode [ 306.055622][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.098212][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.148328][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.179673][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.197459][ T30] audit: type=1806 audit(1779617314.440:8): xattr="" res=-22 [ 306.220069][ T8547] netlink: 20 bytes leftover after parsing attributes in process `syz.1.540'. [ 306.270662][ T12] veth1_macvtap: left promiscuous mode [ 306.299078][ T12] veth0_macvtap: left promiscuous mode [ 306.332347][ T12] veth1_vlan: left promiscuous mode [ 306.352791][ T12] veth0_vlan: left promiscuous mode [ 306.985780][ T12] team0 (unregistering): Port device team_slave_1 removed [ 307.022206][ T12] team0 (unregistering): Port device team_slave_0 removed [ 307.281873][ T65] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.319314][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 307.366272][ T8552] netlink: 206 bytes leftover after parsing attributes in process `syz.2.541'. [ 308.070538][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.129724][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.635788][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.680733][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.967045][ T8560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.542'. [ 309.167738][ T8576] No such timeout policy "" [ 309.769659][ T8588] netlink: 16 bytes leftover after parsing attributes in process `syz.4.548'. [ 309.897186][ T8588] vivid-007: ================= START STATUS ================= [ 309.966379][ T30] audit: type=1800 audit(1779617318.210:9): pid=8583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.547" name="features" dev="configfs" ino=25695 res=0 errno=0 [ 310.035773][ T8588] vivid-007: Generate PTS: true [ 310.142166][ T8588] vivid-007: Generate SCR: true [ 310.173956][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 310.227905][ T8588] tpg source WxH: 320x240 (Y'CbCr) [ 310.281481][ T8588] tpg field: 1 [ 310.307697][ T8588] tpg crop: (0,0)/320x240 [ 310.367228][ T8588] tpg compose: (0,0)/320x240 [ 310.421034][ T8588] tpg colorspace: 8 [ 310.489282][ T8588] tpg transfer function: 0/0 [ 310.539018][ T8588] tpg Y'CbCr encoding: 0/0 [ 310.611247][ T8588] tpg quantization: 0/0 [ 310.667823][ T8588] tpg RGB range: 0/2 [ 310.694280][ T8588] vivid-007: ================== END STATUS ================== [ 310.797401][ T8588] netlink: 16 bytes leftover after parsing attributes in process `syz.4.548'. [ 312.014940][ T8619] netlink: 32 bytes leftover after parsing attributes in process `syz.0.551'. [ 312.150457][ T8642] usb usb39: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 312.842073][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 312.880111][ T8650] binder: 8648:8650 unknown command 0 [ 312.945436][ T8650] binder: 8648:8650 ioctl c0306201 2000000000c0 returned -22 [ 313.328066][ T8650] input input6: cannot allocate more than FF_MAX_EFFECTS effects [ 313.788571][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.559'. [ 314.301257][ T8673] FAULT_INJECTION: forcing a failure. [ 314.301257][ T8673] name failslab, interval 1, probability 0, space 0, times 0 [ 314.488685][ T8673] CPU: 0 UID: 0 PID: 8673 Comm: syz.0.560 Not tainted syzkaller #0 PREEMPT(full) [ 314.488719][ T8673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 314.488734][ T8673] Call Trace: [ 314.488741][ T8673] [ 314.488750][ T8673] dump_stack_lvl+0x100/0x190 [ 314.488782][ T8673] should_fail_ex.cold+0x5/0xa [ 314.488813][ T8673] should_failslab+0xc2/0x120 [ 314.488843][ T8673] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 314.488870][ T8673] ? snd_pcm_hw_rule_add+0x3b3/0x510 [ 314.488906][ T8673] ? krealloc_node_align_noprof+0x27e/0x3e0 [ 314.488930][ T8673] ? kfree+0x1dd/0x6c0 [ 314.488968][ T8673] krealloc_node_align_noprof+0x1f9/0x3e0 [ 314.489002][ T8673] snd_pcm_hw_rule_add+0x3b3/0x510 [ 314.489040][ T8673] ? __pfx_snd_pcm_hw_rule_muldivk+0x10/0x10 [ 314.489078][ T8673] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 314.489114][ T8673] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 314.489172][ T8673] ? mutex_init_lockdep+0xf1/0x120 [ 314.489199][ T8673] ? snd_pcm_attach_substream+0x287/0xd20 [ 314.489235][ T8673] snd_pcm_open_substream+0x942/0x1850 [ 314.489268][ T8673] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 314.489298][ T8673] ? rcu_is_watching+0x12/0xc0 [ 314.489334][ T8673] snd_pcm_open+0x2a3/0x710 [ 314.489365][ T8673] ? __pfx_snd_pcm_open+0x10/0x10 [ 314.489397][ T8673] ? __pfx_default_wake_function+0x10/0x10 [ 314.489439][ T8673] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 314.489469][ T8673] snd_pcm_playback_open+0x86/0xe0 [ 314.489498][ T8673] snd_open+0x201/0x450 [ 314.489535][ T8673] ? __pfx_snd_open+0x10/0x10 [ 314.489571][ T8673] chrdev_open+0x234/0x6a0 [ 314.489604][ T8673] ? __pfx_chrdev_open+0x10/0x10 [ 314.489638][ T8673] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 314.489677][ T8673] do_dentry_open+0x6d8/0x1660 [ 314.489707][ T8673] ? __pfx_chrdev_open+0x10/0x10 [ 314.489745][ T8673] vfs_open+0x82/0x3f0 [ 314.489785][ T8673] path_openat+0x208c/0x31a0 [ 314.489826][ T8673] ? __pfx_path_openat+0x10/0x10 [ 314.489869][ T8673] do_file_open+0x20e/0x430 [ 314.489903][ T8673] ? __pfx_do_file_open+0x10/0x10 [ 314.489955][ T8673] ? alloc_fd+0x476/0x790 [ 314.489988][ T8673] ? do_getname+0x191/0x390 [ 314.490028][ T8673] do_sys_openat2+0x10d/0x1e0 [ 314.490066][ T8673] ? __pfx_do_sys_openat2+0x10/0x10 [ 314.490107][ T8673] ? kfree+0x1dd/0x6c0 [ 314.490153][ T8673] __x64_sys_openat+0x12d/0x210 [ 314.490193][ T8673] ? __pfx___x64_sys_openat+0x10/0x10 [ 314.490231][ T8673] ? ksys_write+0x1ac/0x250 [ 314.490259][ T8673] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 314.490299][ T8673] ? syscall_user_dispatch+0x76/0x130 [ 314.490331][ T8673] do_syscall_64+0x10b/0xf80 [ 314.490353][ T8673] ? clear_bhb_loop+0x40/0x90 [ 314.490383][ T8673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.490408][ T8673] RIP: 0033:0x7f7c3ab9ce59 [ 314.490427][ T8673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.490451][ T8673] RSP: 002b:00007f7c38dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 314.490475][ T8673] RAX: ffffffffffffffda RBX: 00007f7c3ae16090 RCX: 00007f7c3ab9ce59 [ 314.490491][ T8673] RDX: 0000000000040000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 314.490507][ T8673] RBP: 00007f7c3ac32d6f R08: 0000000000000000 R09: 0000000000000000 [ 314.490521][ T8673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.490536][ T8673] R13: 00007f7c3ae16128 R14: 00007f7c3ae16090 R15: 00007fffc00bf6e8 [ 314.490566][ T8673] [ 316.177920][ T5289] 8021q: adding VLAN 0 to HW filter on device eth4 [ 316.226634][ T8672] FAULT_INJECTION: forcing a failure. [ 316.226634][ T8672] name failslab, interval 1, probability 0, space 0, times 0 [ 316.244660][ T8672] CPU: 0 UID: 0 PID: 8672 Comm: syz.4.559 Not tainted syzkaller #0 PREEMPT(full) [ 316.244691][ T8672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 316.244706][ T8672] Call Trace: [ 316.244713][ T8672] [ 316.244722][ T8672] dump_stack_lvl+0x100/0x190 [ 316.244754][ T8672] should_fail_ex.cold+0x5/0xa [ 316.244786][ T8672] should_failslab+0xc2/0x120 [ 316.244815][ T8672] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 316.244840][ T8672] ? __alloc_skb+0x140/0x710 [ 316.244873][ T8672] __alloc_skb+0x140/0x710 [ 316.244900][ T8672] ? __alloc_skb+0x5b7/0x710 [ 316.244927][ T8672] ? __pfx___alloc_skb+0x10/0x10 [ 316.244983][ T8672] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 316.245014][ T8672] nl80211_notify_iface+0x32/0x1c0 [ 316.245050][ T8672] _cfg80211_unregister_wdev+0xcb/0x800 [ 316.245090][ T8672] ieee80211_remove_interfaces+0x34e/0x6f0 [ 316.245130][ T8672] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 316.245176][ T8672] ieee80211_unregister_hw+0x55/0x360 [ 316.245201][ T8672] mac80211_hwsim_netlink_notify+0x868/0x16c0 [ 316.245243][ T8672] ? __pfx_mac80211_hwsim_netlink_notify+0x10/0x10 [ 316.245284][ T8672] notifier_call_chain+0x99/0x400 [ 316.245329][ T8672] blocking_notifier_call_chain+0x69/0xa0 [ 316.245372][ T8672] netlink_release+0x167a/0x2030 [ 316.245415][ T8672] ? netlink_release+0x1e0/0x2030 [ 316.245455][ T8672] ? __pfx_netlink_release+0x10/0x10 [ 316.245496][ T8672] ? __pfx_locks_remove_file+0x10/0x10 [ 316.245535][ T8672] __sock_release+0xb3/0x260 [ 316.245567][ T8672] ? __pfx_sock_close+0x10/0x10 [ 316.245598][ T8672] sock_close+0x1c/0x30 [ 316.245627][ T8672] __fput+0x3ff/0xb50 [ 316.245665][ T8672] ? _raw_spin_unlock_irq+0x23/0x50 [ 316.245704][ T8672] task_work_run+0x150/0x240 [ 316.245730][ T8672] ? __pfx_task_work_run+0x10/0x10 [ 316.245757][ T8672] ? rcu_is_watching+0x12/0xc0 [ 316.245791][ T8672] exit_to_user_mode_loop+0x107/0x4f0 [ 316.245815][ T8672] ? rcu_is_watching+0x12/0xc0 [ 316.245848][ T8672] do_syscall_64+0x6f2/0xf80 [ 316.245869][ T8672] ? clear_bhb_loop+0x40/0x90 [ 316.245899][ T8672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.245924][ T8672] RIP: 0033:0x7f7b6219ce59 [ 316.245949][ T8672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.245973][ T8672] RSP: 002b:00007f7b6308d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 316.245996][ T8672] RAX: 0000000000000000 RBX: 00007f7b62416180 RCX: 00007f7b6219ce59 [ 316.246011][ T8672] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000004 [ 316.246026][ T8672] RBP: 00007f7b62232d6f R08: 0000000000000000 R09: 0000000000000000 [ 316.246040][ T8672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.246054][ T8672] R13: 00007f7b62416218 R14: 00007f7b62416180 R15: 00007ffe9577c3b8 [ 316.246085][ T8672] [ 317.383071][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.389744][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.814091][ T8704] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [4] [ 318.900768][ T8701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.566'. [ 319.608190][ T8713] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 319.814002][ T8713] File: /dev/nullb0 PID: 8713 Comm: syz.2.569 [ 320.477279][ T8731] FAULT_INJECTION: forcing a failure. [ 320.477279][ T8731] name failslab, interval 1, probability 0, space 0, times 0 [ 320.759081][ T8731] CPU: 0 UID: 0 PID: 8731 Comm: syz.0.572 Not tainted syzkaller #0 PREEMPT(full) [ 320.759114][ T8731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 320.759129][ T8731] Call Trace: [ 320.759137][ T8731] [ 320.759146][ T8731] dump_stack_lvl+0x100/0x190 [ 320.759181][ T8731] should_fail_ex.cold+0x5/0xa [ 320.759211][ T8731] ? sk_prot_alloc+0x10b/0x2a0 [ 320.759246][ T8731] should_failslab+0xc2/0x120 [ 320.759276][ T8731] __kmalloc_noprof+0xe0/0x850 [ 320.759305][ T8731] sk_prot_alloc+0x10b/0x2a0 [ 320.759343][ T8731] sk_alloc+0x36/0xe80 [ 320.759371][ T8731] __netlink_create+0x5e/0x2c0 [ 320.759402][ T8731] ? __wake_up+0x3f/0x60 [ 320.759446][ T8731] netlink_create+0x29b/0x610 [ 320.759479][ T8731] ? __pfx_genl_bind+0x10/0x10 [ 320.759500][ T8731] ? __pfx_genl_unbind+0x10/0x10 [ 320.759521][ T8731] ? __pfx_genl_release+0x10/0x10 [ 320.759548][ T8731] __sock_create+0x339/0x860 [ 320.759593][ T8731] __sys_socket+0x14d/0x260 [ 320.759616][ T8731] ? __pfx___sys_socket+0x10/0x10 [ 320.759647][ T8731] __x64_sys_socket+0x72/0xb0 [ 320.759669][ T8731] ? lockdep_hardirqs_on+0x78/0x100 [ 320.759709][ T8731] do_syscall_64+0x10b/0xf80 [ 320.759730][ T8731] ? clear_bhb_loop+0x40/0x90 [ 320.759760][ T8731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.759785][ T8731] RIP: 0033:0x7f7c3ab9ce59 [ 320.759805][ T8731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.759829][ T8731] RSP: 002b:00007f7c38df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 320.759852][ T8731] RAX: ffffffffffffffda RBX: 00007f7c3ae15fa0 RCX: 00007f7c3ab9ce59 [ 320.759868][ T8731] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 320.759882][ T8731] RBP: 00007f7c3ac32d6f R08: 0000000000000000 R09: 0000000000000000 [ 320.759897][ T8731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.759937][ T8731] R13: 00007f7c3ae16038 R14: 00007f7c3ae15fa0 R15: 00007fffc00bf6e8 [ 320.759967][ T8731] [ 323.079113][ T8755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.578'. [ 324.484093][ T8794] FAULT_INJECTION: forcing a failure. [ 324.484093][ T8794] name failslab, interval 1, probability 0, space 0, times 0 [ 324.678856][ T8794] CPU: 0 UID: 0 PID: 8794 Comm: syz.0.583 Not tainted syzkaller #0 PREEMPT(full) [ 324.678896][ T8794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 324.678914][ T8794] Call Trace: [ 324.678922][ T8794] [ 324.678931][ T8794] dump_stack_lvl+0x100/0x190 [ 324.678962][ T8794] should_fail_ex.cold+0x5/0xa [ 324.679002][ T8794] ? tomoyo_realpath_from_path+0xb6/0x690 [ 324.679040][ T8794] should_failslab+0xc2/0x120 [ 324.679069][ T8794] __kmalloc_noprof+0xe0/0x850 [ 324.679091][ T8794] ? kfree+0x1dd/0x6c0 [ 324.679129][ T8794] tomoyo_realpath_from_path+0xb6/0x690 [ 324.679169][ T8794] tomoyo_path_perm+0x276/0x460 [ 324.679195][ T8794] ? tomoyo_path_perm+0x262/0x460 [ 324.679223][ T8794] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 324.679278][ T8794] ? __pfx_ima_file_check+0x10/0x10 [ 324.679317][ T8794] ? hook_file_truncate+0xc3/0x240 [ 324.679351][ T8794] security_file_truncate+0xb5/0x1e0 [ 324.679384][ T8794] path_openat+0x1c6e/0x31a0 [ 324.679425][ T8794] ? __pfx_path_openat+0x10/0x10 [ 324.679467][ T8794] do_file_open+0x20e/0x430 [ 324.679501][ T8794] ? __pfx_do_file_open+0x10/0x10 [ 324.679552][ T8794] ? alloc_fd+0x476/0x790 [ 324.679585][ T8794] ? do_getname+0x191/0x390 [ 324.679634][ T8794] do_sys_openat2+0x10d/0x1e0 [ 324.679674][ T8794] ? __pfx_do_sys_openat2+0x10/0x10 [ 324.679715][ T8794] ? __fget_files+0x21f/0x3d0 [ 324.679750][ T8794] __x64_sys_openat+0x12d/0x210 [ 324.679789][ T8794] ? __pfx___x64_sys_openat+0x10/0x10 [ 324.679834][ T8794] ? rcu_is_watching+0x12/0xc0 [ 324.679868][ T8794] do_syscall_64+0x10b/0xf80 [ 324.679890][ T8794] ? clear_bhb_loop+0x40/0x90 [ 324.679919][ T8794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.679944][ T8794] RIP: 0033:0x7f7c3ab9ce59 [ 324.679963][ T8794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.679987][ T8794] RSP: 002b:00007f7c38dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 324.680016][ T8794] RAX: ffffffffffffffda RBX: 00007f7c3ae16090 RCX: 00007f7c3ab9ce59 [ 324.680032][ T8794] RDX: 0000000000000600 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 324.680047][ T8794] RBP: 00007f7c3ac32d6f R08: 0000000000000000 R09: 0000000000000000 [ 324.680062][ T8794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.680076][ T8794] R13: 00007f7c3ae16128 R14: 00007f7c3ae16090 R15: 00007fffc00bf6e8 [ 324.680107][ T8794] [ 325.190079][ T8794] ERROR: Out of memory at tomoyo_realpath_from_path. [ 325.690488][ T8805] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 330.387874][ T8872] FAULT_INJECTION: forcing a failure. [ 330.387874][ T8872] name failslab, interval 1, probability 0, space 0, times 0 [ 330.543378][ T8872] CPU: 0 UID: 0 PID: 8872 Comm: syz.1.597 Not tainted syzkaller #0 PREEMPT(full) [ 330.543413][ T8872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 330.543428][ T8872] Call Trace: [ 330.543436][ T8872] [ 330.543446][ T8872] dump_stack_lvl+0x100/0x190 [ 330.543477][ T8872] should_fail_ex.cold+0x5/0xa [ 330.543512][ T8872] ? tomoyo_realpath_from_path+0xb6/0x690 [ 330.543546][ T8872] should_failslab+0xc2/0x120 [ 330.543576][ T8872] __kmalloc_noprof+0xe0/0x850 [ 330.543598][ T8872] ? kfree+0x1dd/0x6c0 [ 330.543638][ T8872] tomoyo_realpath_from_path+0xb6/0x690 [ 330.543686][ T8872] tomoyo_path_perm+0x276/0x460 [ 330.543711][ T8872] ? tomoyo_path_perm+0x262/0x460 [ 330.543740][ T8872] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 330.543797][ T8872] ? __pfx_ima_file_check+0x10/0x10 [ 330.543836][ T8872] ? hook_file_truncate+0xc3/0x240 [ 330.543872][ T8872] security_file_truncate+0xb5/0x1e0 [ 330.543905][ T8872] path_openat+0x1c6e/0x31a0 [ 330.543947][ T8872] ? __pfx_path_openat+0x10/0x10 [ 330.543989][ T8872] do_file_open+0x20e/0x430 [ 330.544023][ T8872] ? __pfx_do_file_open+0x10/0x10 [ 330.544075][ T8872] ? alloc_fd+0x476/0x790 [ 330.544108][ T8872] ? do_getname+0x191/0x390 [ 330.544148][ T8872] do_sys_openat2+0x10d/0x1e0 [ 330.544188][ T8872] ? __pfx_do_sys_openat2+0x10/0x10 [ 330.544229][ T8872] ? __fget_files+0x21f/0x3d0 [ 330.544264][ T8872] __x64_sys_openat+0x12d/0x210 [ 330.544303][ T8872] ? __pfx___x64_sys_openat+0x10/0x10 [ 330.544348][ T8872] ? rcu_is_watching+0x12/0xc0 [ 330.544382][ T8872] do_syscall_64+0x10b/0xf80 [ 330.544405][ T8872] ? clear_bhb_loop+0x40/0x90 [ 330.544435][ T8872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.544460][ T8872] RIP: 0033:0x7efd7cf9ce59 [ 330.544480][ T8872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.544504][ T8872] RSP: 002b:00007efd7de5d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 330.544527][ T8872] RAX: ffffffffffffffda RBX: 00007efd7d216090 RCX: 00007efd7cf9ce59 [ 330.544543][ T8872] RDX: 0000000000000600 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 330.544559][ T8872] RBP: 00007efd7d032d6f R08: 0000000000000000 R09: 0000000000000000 [ 330.544573][ T8872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.544587][ T8872] R13: 00007efd7d216128 R14: 00007efd7d216090 R15: 00007ffe7421a9b8 [ 330.544618][ T8872] [ 331.053258][ T8889] FAULT_INJECTION: forcing a failure. [ 331.053258][ T8889] name failslab, interval 1, probability 0, space 0, times 0 [ 331.087267][ T8889] CPU: 0 UID: 0 PID: 8889 Comm: syz.0.599 Not tainted syzkaller #0 PREEMPT(full) [ 331.087301][ T8889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 331.087316][ T8889] Call Trace: [ 331.087324][ T8889] [ 331.087333][ T8889] dump_stack_lvl+0x100/0x190 [ 331.087365][ T8889] should_fail_ex.cold+0x5/0xa [ 331.087396][ T8889] should_failslab+0xc2/0x120 [ 331.087426][ T8889] __kmalloc_cache_noprof+0x7a/0x6f0 [ 331.087472][ T8889] ? proc_self_get_link+0x189/0x1f0 [ 331.087507][ T8889] proc_self_get_link+0x189/0x1f0 [ 331.087536][ T8889] pick_link+0xac2/0x13c0 [ 331.087560][ T8889] ? __pfx_proc_self_get_link+0x10/0x10 [ 331.087592][ T8889] step_into_slowpath+0x9ba/0xf90 [ 331.087624][ T8889] ? __pfx_step_into_slowpath+0x10/0x10 [ 331.087655][ T8889] ? lookup_fast+0x2da/0x600 [ 331.087677][ T8889] ? inode_permission+0x374/0x620 [ 331.087720][ T8889] link_path_walk+0xf28/0x1cc0 [ 331.087756][ T8889] path_openat+0x1be/0x31a0 [ 331.087786][ T8889] ? kasan_save_stack+0x3f/0x50 [ 331.087809][ T8889] ? kasan_save_stack+0x30/0x50 [ 331.087832][ T8889] ? kasan_save_track+0x14/0x30 [ 331.087856][ T8889] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 331.087903][ T8889] ? __pfx_path_openat+0x10/0x10 [ 331.087945][ T8889] do_file_open+0x20e/0x430 [ 331.087979][ T8889] ? __pfx_do_file_open+0x10/0x10 [ 331.088031][ T8889] ? alloc_fd+0x476/0x790 [ 331.088063][ T8889] ? do_getname+0x191/0x390 [ 331.088103][ T8889] do_sys_openat2+0x10d/0x1e0 [ 331.088142][ T8889] ? __pfx_do_sys_openat2+0x10/0x10 [ 331.088191][ T8889] __x64_sys_openat+0x12d/0x210 [ 331.088231][ T8889] ? __pfx___x64_sys_openat+0x10/0x10 [ 331.088269][ T8889] ? ksys_write+0x1ac/0x250 [ 331.088301][ T8889] ? rcu_is_watching+0x12/0xc0 [ 331.088335][ T8889] do_syscall_64+0x10b/0xf80 [ 331.088358][ T8889] ? clear_bhb_loop+0x40/0x90 [ 331.088387][ T8889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.088413][ T8889] RIP: 0033:0x7f7c3ab9ce59 [ 331.088433][ T8889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.088463][ T8889] RSP: 002b:00007f7c38dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 331.088486][ T8889] RAX: ffffffffffffffda RBX: 00007f7c3ae16090 RCX: 00007f7c3ab9ce59 [ 331.088502][ T8889] RDX: 0000000000103000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 331.088518][ T8889] RBP: 00007f7c3ac32d6f R08: 0000000000000000 R09: 0000000000000000 [ 331.088532][ T8889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.088547][ T8889] R13: 00007f7c3ae16128 R14: 00007f7c3ae16090 R15: 00007fffc00bf6e8 [ 331.088577][ T8889] [ 331.691527][ T8895] netlink: 342 bytes leftover after parsing attributes in process `syz.2.602'. [ 332.320487][ T8899] netlink: 20 bytes leftover after parsing attributes in process `syz.4.603'. [ 332.641231][ T30] audit: type=1800 audit(1779617340.870:10): pid=8903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.604" name="lu_gp_id" dev="configfs" ino=27235 res=0 errno=0 [ 333.378377][ T8872] ERROR: Out of memory at tomoyo_realpath_from_path. [ 334.195807][ T30] audit: type=1806 audit(1779617342.430:11): xattr="" res=-22 [ 334.250570][ T8938] netlink: 20 bytes leftover after parsing attributes in process `syz.4.609'. [ 334.896491][ T8950] Format for deleting device is "id" (uint). [ 335.479824][ T8960] hub 1-0:1.0: USB hub found [ 335.516646][ T8960] hub 1-0:1.0: 1 port detected [ 337.383252][ T30] audit: type=1806 audit(1779617345.620:12): xattr="" res=-22 [ 337.441748][ T9002] netlink: 20 bytes leftover after parsing attributes in process `syz.0.621'. [ 337.873411][ T9013] FAULT_INJECTION: forcing a failure. [ 337.873411][ T9013] name failslab, interval 1, probability 0, space 0, times 0 [ 337.933074][ T9015] FAULT_INJECTION: forcing a failure. [ 337.933074][ T9015] name failslab, interval 1, probability 0, space 0, times 0 [ 338.036793][ T9015] CPU: 0 UID: 0 PID: 9015 Comm: syz.2.623 Not tainted syzkaller #0 PREEMPT(full) [ 338.036825][ T9015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 338.036841][ T9015] Call Trace: [ 338.036849][ T9015] [ 338.036858][ T9015] dump_stack_lvl+0x100/0x190 [ 338.036891][ T9015] should_fail_ex.cold+0x5/0xa [ 338.036922][ T9015] ? tomoyo_realpath_from_path+0xb6/0x690 [ 338.036956][ T9015] should_failslab+0xc2/0x120 [ 338.036985][ T9015] __kmalloc_noprof+0xe0/0x850 [ 338.037007][ T9015] ? kfree+0x1dd/0x6c0 [ 338.037047][ T9015] tomoyo_realpath_from_path+0xb6/0x690 [ 338.037091][ T9015] tomoyo_path_perm+0x276/0x460 [ 338.037116][ T9015] ? tomoyo_path_perm+0x262/0x460 [ 338.037145][ T9015] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 338.037201][ T9015] ? __pfx_ima_file_check+0x10/0x10 [ 338.037240][ T9015] ? hook_file_truncate+0xc3/0x240 [ 338.037274][ T9015] security_file_truncate+0xb5/0x1e0 [ 338.037307][ T9015] path_openat+0x1c6e/0x31a0 [ 338.037348][ T9015] ? __pfx_path_openat+0x10/0x10 [ 338.037391][ T9015] do_file_open+0x20e/0x430 [ 338.037425][ T9015] ? __pfx_do_file_open+0x10/0x10 [ 338.037478][ T9015] ? alloc_fd+0x476/0x790 [ 338.037511][ T9015] ? do_getname+0x191/0x390 [ 338.037550][ T9015] do_sys_openat2+0x10d/0x1e0 [ 338.037589][ T9015] ? __pfx_do_sys_openat2+0x10/0x10 [ 338.037636][ T9015] ? __fget_files+0x21f/0x3d0 [ 338.037671][ T9015] __x64_sys_openat+0x12d/0x210 [ 338.037711][ T9015] ? __pfx___x64_sys_openat+0x10/0x10 [ 338.037756][ T9015] ? rcu_is_watching+0x12/0xc0 [ 338.037791][ T9015] do_syscall_64+0x10b/0xf80 [ 338.037814][ T9015] ? clear_bhb_loop+0x40/0x90 [ 338.037844][ T9015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.037869][ T9015] RIP: 0033:0x7fa85cb9ce59 [ 338.037889][ T9015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.037913][ T9015] RSP: 002b:00007fa85dae6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 338.037937][ T9015] RAX: ffffffffffffffda RBX: 00007fa85ce16090 RCX: 00007fa85cb9ce59 [ 338.037953][ T9015] RDX: 0000000000000600 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 338.037968][ T9015] RBP: 00007fa85cc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 338.037983][ T9015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.037998][ T9015] R13: 00007fa85ce16128 R14: 00007fa85ce16090 R15: 00007ffefac06d38 [ 338.038028][ T9015] [ 338.038066][ T9015] ERROR: Out of memory at tomoyo_realpath_from_path. [ 338.319720][ T9013] CPU: 0 UID: 0 PID: 9013 Comm: syz.1.622 Not tainted syzkaller #0 PREEMPT(full) [ 338.319754][ T9013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 338.319768][ T9013] Call Trace: [ 338.319776][ T9013] [ 338.319785][ T9013] dump_stack_lvl+0x100/0x190 [ 338.319816][ T9013] should_fail_ex.cold+0x5/0xa [ 338.319846][ T9013] ? tomoyo_realpath_from_path+0xb6/0x690 [ 338.319880][ T9013] should_failslab+0xc2/0x120 [ 338.319910][ T9013] __kmalloc_noprof+0xe0/0x850 [ 338.319932][ T9013] ? kfree+0x1dd/0x6c0 [ 338.319971][ T9013] tomoyo_realpath_from_path+0xb6/0x690 [ 338.320012][ T9013] tomoyo_path_perm+0x276/0x460 [ 338.320037][ T9013] ? tomoyo_path_perm+0x262/0x460 [ 338.320066][ T9013] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 338.320122][ T9013] ? __pfx_ima_file_check+0x10/0x10 [ 338.320161][ T9013] ? hook_file_truncate+0xc3/0x240 [ 338.320196][ T9013] security_file_truncate+0xb5/0x1e0 [ 338.320229][ T9013] path_openat+0x1c6e/0x31a0 [ 338.320270][ T9013] ? __pfx_path_openat+0x10/0x10 [ 338.320313][ T9013] do_file_open+0x20e/0x430 [ 338.320346][ T9013] ? __pfx_do_file_open+0x10/0x10 [ 338.320399][ T9013] ? alloc_fd+0x476/0x790 [ 338.320432][ T9013] ? do_getname+0x191/0x390 [ 338.320472][ T9013] do_sys_openat2+0x10d/0x1e0 [ 338.320511][ T9013] ? __pfx_do_sys_openat2+0x10/0x10 [ 338.320552][ T9013] ? __fget_files+0x21f/0x3d0 [ 338.320587][ T9013] __x64_sys_openat+0x12d/0x210 [ 338.320627][ T9013] ? __pfx___x64_sys_openat+0x10/0x10 [ 338.320679][ T9013] ? rcu_is_watching+0x12/0xc0 [ 338.320713][ T9013] do_syscall_64+0x10b/0xf80 [ 338.320736][ T9013] ? clear_bhb_loop+0x40/0x90 [ 338.320771][ T9013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.320796][ T9013] RIP: 0033:0x7efd7cf9ce59 [ 338.320816][ T9013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.320841][ T9013] RSP: 002b:00007efd7de5d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 338.320864][ T9013] RAX: ffffffffffffffda RBX: 00007efd7d216090 RCX: 00007efd7cf9ce59 [ 338.320880][ T9013] RDX: 0000000000000600 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 338.320896][ T9013] RBP: 00007efd7d032d6f R08: 0000000000000000 R09: 0000000000000000 [ 338.320911][ T9013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.320927][ T9013] R13: 00007efd7d216128 R14: 00007efd7d216090 R15: 00007ffe7421a9b8 [ 338.320957][ T9013] [ 338.322841][ T9013] ERROR: Out of memory at tomoyo_realpath_from_path. [ 342.047515][ T9100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.638'. [ 342.432051][ T9106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.639'. [ 343.148199][ T9121] capability: warning: `syz.0.640' uses deprecated v2 capabilities in a way that may be insecure [ 346.664153][ T9171] futex_wake_op: syz.2.652 tries to shift op by -2048; fix this program [ 346.811532][ T9171] futex_wake_op: syz.2.652 tries to shift op by -2048; fix this program [ 346.888972][ T9177] netlink: 206 bytes leftover after parsing attributes in process `syz.0.655'. [ 347.853210][ T9189] FAULT_INJECTION: forcing a failure. [ 347.853210][ T9189] name failslab, interval 1, probability 0, space 0, times 0 [ 347.932228][ T9189] CPU: 0 UID: 0 PID: 9189 Comm: syz.4.654 Not tainted syzkaller #0 PREEMPT(full) [ 347.932259][ T9189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 347.932274][ T9189] Call Trace: [ 347.932281][ T9189] [ 347.932290][ T9189] dump_stack_lvl+0x100/0x190 [ 347.932319][ T9189] should_fail_ex.cold+0x5/0xa [ 347.932348][ T9189] should_failslab+0xc2/0x120 [ 347.932375][ T9189] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 347.932412][ T9189] ? __pmd_alloc+0xbf/0x950 [ 347.932447][ T9189] __pmd_alloc+0xbf/0x950 [ 347.932474][ T9189] ? mt_find+0x687/0x8e0 [ 347.932499][ T9189] huge_pte_alloc+0x5ee/0x730 [ 347.932534][ T9189] hugetlb_fault+0x369/0x1410 [ 347.932569][ T9189] ? __pfx_hugetlb_fault+0x10/0x10 [ 347.932612][ T9189] ? find_vma+0xbf/0x140 [ 347.932662][ T9189] ? __pfx_find_vma+0x10/0x10 [ 347.932691][ T9189] handle_mm_fault+0x5f1/0xa20 [ 347.932735][ T9189] do_user_addr_fault+0x74c/0x12f0 [ 347.932769][ T9189] ? trace_page_fault_kernel+0x7a/0x200 [ 347.932800][ T9189] exc_page_fault+0x6f/0xd0 [ 347.932851][ T9189] asm_exc_page_fault+0x26/0x30 [ 347.932873][ T9189] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 347.932903][ T9189] Code: 9b 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 347.932925][ T9189] RSP: 0018:ffffc90003fd7b30 EFLAGS: 00050206 [ 347.932943][ T9189] RAX: 0000000000000001 RBX: ffff888063800000 RCX: 0000000000100082 [ 347.932957][ T9189] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff888063800000 [ 347.932971][ T9189] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed100c720010 [ 347.932984][ T9189] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc90003fd7d80 [ 347.932998][ T9189] R13: 0000000000000000 R14: 0000000000100082 R15: 0000000000000000 [ 347.933025][ T9189] _copy_from_iter+0x355/0x1690 [ 347.933053][ T9189] ? rcu_is_watching+0x12/0xc0 [ 347.933083][ T9189] ? __pfx__copy_from_iter+0x10/0x10 [ 347.933107][ T9189] ? trace_kmalloc+0xe3/0x110 [ 347.933151][ T9189] ? __kmalloc_large_node_noprof+0x5d/0x70 [ 347.933185][ T9189] ? __kvmalloc_node_noprof+0x6af/0xa00 [ 347.933208][ T9189] ? proc_sys_call_handler+0x2c7/0x5a0 [ 347.933238][ T9189] ? proc_sys_call_handler+0x169/0x5a0 [ 347.933274][ T9189] proc_sys_call_handler+0x3ed/0x5a0 [ 347.933307][ T9189] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 347.933347][ T9189] vfs_write+0x6ac/0x1070 [ 347.933375][ T9189] ? __pfx_proc_sys_write+0x10/0x10 [ 347.933408][ T9189] ? __pfx_vfs_write+0x10/0x10 [ 347.933453][ T9189] ksys_write+0x12a/0x250 [ 347.933481][ T9189] ? __pfx_ksys_write+0x10/0x10 [ 347.933510][ T9189] ? rcu_is_watching+0x12/0xc0 [ 347.933542][ T9189] do_syscall_64+0x10b/0xf80 [ 347.933562][ T9189] ? clear_bhb_loop+0x40/0x90 [ 347.933590][ T9189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.933613][ T9189] RIP: 0033:0x7f7b6219ce59 [ 347.933664][ T9189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.933686][ T9189] RSP: 002b:00007f7b630cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 347.933706][ T9189] RAX: ffffffffffffffda RBX: 00007f7b62415fa0 RCX: 00007f7b6219ce59 [ 347.933721][ T9189] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 347.933735][ T9189] RBP: 00007f7b630cf090 R08: 0000000000000000 R09: 0000000000000000 [ 347.933748][ T9189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.933761][ T9189] R13: 00007f7b62416038 R14: 00007f7b62415fa0 R15: 00007ffe9577c3b8 [ 347.933791][ T9189] [ 349.823705][ T9197] nfs4: Unknown parameter '' [ 356.188408][ T30] audit: type=1806 audit(1779617364.430:13): xattr="" res=-22 [ 356.311299][ T9304] netlink: 20 bytes leftover after parsing attributes in process `syz.2.679'. [ 356.792076][ T9311] kafs: addr_prefs: Invalid Command [ 357.783522][ T30] audit: type=1806 audit(1779617366.020:14): xattr="" res=-22 [ 357.905509][ T9327] netlink: 20 bytes leftover after parsing attributes in process `syz.2.686'. [ 359.132126][ T9336] ima: policy update failed [ 359.150207][ T9344] random: crng reseeded on system resumption [ 359.174240][ T30] audit: type=1802 audit(1779617367.410:15): pid=9336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.691" res=0 errno=0 [ 359.627191][ T9351] ======================================================= [ 359.627191][ T9351] WARNING: The mand mount option has been deprecated and [ 359.627191][ T9351] and is ignored by this kernel. Remove the mand [ 359.627191][ T9351] option from the mount to silence this warning. [ 359.627191][ T9351] ======================================================= [ 360.412766][ T9369] netlink: 334 bytes leftover after parsing attributes in process `syz.1.698'. [ 360.427376][ T9365] FAULT_INJECTION: forcing a failure. [ 360.427376][ T9365] name failslab, interval 1, probability 0, space 0, times 0 [ 360.574281][ T9365] CPU: 0 UID: 0 PID: 9365 Comm: syz.4.696 Tainted: G L syzkaller #0 PREEMPT(full) [ 360.574323][ T9365] Tainted: [L]=SOFTLOCKUP [ 360.574331][ T9365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 360.574346][ T9365] Call Trace: [ 360.574353][ T9365] [ 360.574363][ T9365] dump_stack_lvl+0x100/0x190 [ 360.574394][ T9365] should_fail_ex.cold+0x5/0xa [ 360.574424][ T9365] ? sk_prot_alloc+0x10b/0x2a0 [ 360.574459][ T9365] should_failslab+0xc2/0x120 [ 360.574489][ T9365] __kmalloc_noprof+0xe0/0x850 [ 360.574518][ T9365] sk_prot_alloc+0x10b/0x2a0 [ 360.574557][ T9365] sk_alloc+0x36/0xe80 [ 360.574586][ T9365] packet_create+0x127/0x8e0 [ 360.574626][ T9365] __sock_create+0x339/0x860 [ 360.574670][ T9365] __sys_socket+0x14d/0x260 [ 360.574693][ T9365] ? __pfx___sys_socket+0x10/0x10 [ 360.574714][ T9365] ? ksys_write+0x1ac/0x250 [ 360.574750][ T9365] __x64_sys_socket+0x72/0xb0 [ 360.574772][ T9365] ? lockdep_hardirqs_on+0x78/0x100 [ 360.574812][ T9365] do_syscall_64+0x10b/0xf80 [ 360.574833][ T9365] ? clear_bhb_loop+0x40/0x90 [ 360.574863][ T9365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.574888][ T9365] RIP: 0033:0x7f7b6219ce59 [ 360.574907][ T9365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.574932][ T9365] RSP: 002b:00007f7b630cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 360.574955][ T9365] RAX: ffffffffffffffda RBX: 00007f7b62415fa0 RCX: 00007f7b6219ce59 [ 360.574970][ T9365] RDX: 0000000000000300 RSI: 0000000000080003 RDI: 0000000000000011 [ 360.574985][ T9365] RBP: 00007f7b62232d6f R08: 0000000000000000 R09: 0000000000000000 [ 360.574999][ T9365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.575013][ T9365] R13: 00007f7b62416038 R14: 00007f7b62415fa0 R15: 00007ffe9577c3b8 [ 360.575043][ T9365] [ 361.247440][ T9379] overlayfs: "check_copy_up" module option is obsolete [ 361.594934][ T9387] warning: `syz.0.702' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 364.281957][ T9407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.707'. [ 364.764117][ T9430] vivid-008: ================= START STATUS ================= [ 364.927595][ T9430] vivid-008: ================== END STATUS ================== [ 366.343727][ T9449] netlink: 330 bytes leftover after parsing attributes in process `syz.0.719'. [ 366.405002][ T9449] mac80211_hwsim hwsim6 : renamed from wlan0 (while UP) [ 367.282544][ T30] audit: type=1806 audit(1779617375.520:16): xattr="" res=-22 [ 367.372843][ T9463] netlink: 20 bytes leftover after parsing attributes in process `syz.0.721'. [ 369.722850][ T30] audit: type=1806 audit(1779617377.960:17): xattr="" res=-22 [ 369.776271][ T9499] netlink: 20 bytes leftover after parsing attributes in process `syz.0.730'. [ 370.821976][ T9503] KVM: debugfs: duplicate directory 9503-3 [ 372.286226][ T9531] vivid-008: ================= START STATUS ================= [ 372.359215][ T30] audit: type=1800 audit(1779617380.600:18): pid=9522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.734" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 372.437609][ T9531] vivid-008: ================== END STATUS ================== [ 376.492593][ T9581] FAULT_INJECTION: forcing a failure. [ 376.492593][ T9581] name failslab, interval 1, probability 0, space 0, times 0 [ 376.533098][ T9574] netlink: 330 bytes leftover after parsing attributes in process `syz.0.747'. [ 376.699081][ T9581] CPU: 0 UID: 0 PID: 9581 Comm: syz.4.746 Tainted: G L syzkaller #0 PREEMPT(full) [ 376.699119][ T9581] Tainted: [L]=SOFTLOCKUP [ 376.699128][ T9581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 376.699142][ T9581] Call Trace: [ 376.699150][ T9581] [ 376.699159][ T9581] dump_stack_lvl+0x100/0x190 [ 376.699191][ T9581] should_fail_ex.cold+0x5/0xa [ 376.699222][ T9581] ? tomoyo_realpath_from_path+0xb6/0x690 [ 376.699257][ T9581] should_failslab+0xc2/0x120 [ 376.699287][ T9581] __kmalloc_noprof+0xe0/0x850 [ 376.699309][ T9581] ? kfree+0x1dd/0x6c0 [ 376.699349][ T9581] tomoyo_realpath_from_path+0xb6/0x690 [ 376.699389][ T9581] tomoyo_path_perm+0x276/0x460 [ 376.699415][ T9581] ? tomoyo_path_perm+0x262/0x460 [ 376.699444][ T9581] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 376.699502][ T9581] ? hook_file_truncate+0xc3/0x240 [ 376.699537][ T9581] security_file_truncate+0xb5/0x1e0 [ 376.699570][ T9581] path_openat+0x1c6e/0x31a0 [ 376.699612][ T9581] ? __pfx_path_openat+0x10/0x10 [ 376.699654][ T9581] do_file_open+0x20e/0x430 [ 376.699687][ T9581] ? __pfx_do_file_open+0x10/0x10 [ 376.699748][ T9581] ? alloc_fd+0x476/0x790 [ 376.699782][ T9581] ? do_getname+0x191/0x390 [ 376.699824][ T9581] do_sys_openat2+0x10d/0x1e0 [ 376.699865][ T9581] ? __pfx_do_sys_openat2+0x10/0x10 [ 376.699906][ T9581] ? __fget_files+0x21f/0x3d0 [ 376.699940][ T9581] __x64_sys_openat+0x12d/0x210 [ 376.699980][ T9581] ? __pfx___x64_sys_openat+0x10/0x10 [ 376.700025][ T9581] ? rcu_is_watching+0x12/0xc0 [ 376.700059][ T9581] do_syscall_64+0x10b/0xf80 [ 376.700080][ T9581] ? clear_bhb_loop+0x40/0x90 [ 376.700110][ T9581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.700135][ T9581] RIP: 0033:0x7f7b6219ce59 [ 376.700154][ T9581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.700179][ T9581] RSP: 002b:00007f7b630ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 376.700202][ T9581] RAX: ffffffffffffffda RBX: 00007f7b62416090 RCX: 00007f7b6219ce59 [ 376.700218][ T9581] RDX: 0000000000000600 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 376.700234][ T9581] RBP: 00007f7b62232d6f R08: 0000000000000000 R09: 0000000000000000 [ 376.700248][ T9581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.700263][ T9581] R13: 00007f7b62416128 R14: 00007f7b62416090 R15: 00007ffe9577c3b8 [ 376.700293][ T9581] [ 377.214376][ T9581] ERROR: Out of memory at tomoyo_realpath_from_path. [ 378.730957][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.737414][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.882992][ T9607] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0 [ 379.383021][ T9613] netlink: 504 bytes leftover after parsing attributes in process `syz.4.754'. [ 379.791555][ T9621] can: request_module (can-proto-0) failed. [ 380.256589][ T9635] ubi0: attaching mtd0 [ 380.347550][ T9635] ubi0: scanning is finished [ 380.423849][ T9635] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 381.392634][ T9635] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 383.579839][ T9657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.764'. [ 386.079548][ T9714] kernel profiling enabled (shift: 3) [ 387.500531][ T9737] FAULT_INJECTION: forcing a failure. [ 387.500531][ T9737] name failslab, interval 1, probability 0, space 0, times 0 [ 387.570377][ T9737] CPU: 0 UID: 0 PID: 9737 Comm: syz.0.780 Tainted: G L syzkaller #0 PREEMPT(full) [ 387.570417][ T9737] Tainted: [L]=SOFTLOCKUP [ 387.570426][ T9737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 387.570440][ T9737] Call Trace: [ 387.570448][ T9737] [ 387.570457][ T9737] dump_stack_lvl+0x100/0x190 [ 387.570489][ T9737] should_fail_ex.cold+0x5/0xa [ 387.570526][ T9737] ? tomoyo_realpath_from_path+0xb6/0x690 [ 387.570560][ T9737] should_failslab+0xc2/0x120 [ 387.570590][ T9737] __kmalloc_noprof+0xe0/0x850 [ 387.570611][ T9737] ? kfree+0x1dd/0x6c0 [ 387.570651][ T9737] tomoyo_realpath_from_path+0xb6/0x690 [ 387.570692][ T9737] tomoyo_path_perm+0x276/0x460 [ 387.570717][ T9737] ? tomoyo_path_perm+0x262/0x460 [ 387.570746][ T9737] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 387.570801][ T9737] ? __pfx_ima_file_check+0x10/0x10 [ 387.570840][ T9737] ? hook_file_truncate+0xc3/0x240 [ 387.570875][ T9737] security_file_truncate+0xb5/0x1e0 [ 387.570908][ T9737] path_openat+0x1c6e/0x31a0 [ 387.570953][ T9737] ? __pfx_path_openat+0x10/0x10 [ 387.570995][ T9737] do_file_open+0x20e/0x430 [ 387.571029][ T9737] ? __pfx_do_file_open+0x10/0x10 [ 387.571080][ T9737] ? alloc_fd+0x476/0x790 [ 387.571113][ T9737] ? do_getname+0x191/0x390 [ 387.571153][ T9737] do_sys_openat2+0x10d/0x1e0 [ 387.571191][ T9737] ? __pfx_do_sys_openat2+0x10/0x10 [ 387.571232][ T9737] ? __fget_files+0x21f/0x3d0 [ 387.571266][ T9737] __x64_sys_openat+0x12d/0x210 [ 387.571306][ T9737] ? __pfx___x64_sys_openat+0x10/0x10 [ 387.571351][ T9737] ? rcu_is_watching+0x12/0xc0 [ 387.571384][ T9737] do_syscall_64+0x10b/0xf80 [ 387.571406][ T9737] ? clear_bhb_loop+0x40/0x90 [ 387.571435][ T9737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.571465][ T9737] RIP: 0033:0x7f7c3ab9ce59 [ 387.571484][ T9737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.571508][ T9737] RSP: 002b:00007f7c38dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 387.571536][ T9737] RAX: ffffffffffffffda RBX: 00007f7c3ae16090 RCX: 00007f7c3ab9ce59 [ 387.571552][ T9737] RDX: 0000000000000600 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 387.571568][ T9737] RBP: 00007f7c3ac32d6f R08: 0000000000000000 R09: 0000000000000000 [ 387.571583][ T9737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.571597][ T9737] R13: 00007f7c3ae16128 R14: 00007f7c3ae16090 R15: 00007fffc00bf6e8 [ 387.571628][ T9737] [ 388.084539][ T9737] ERROR: Out of memory at tomoyo_realpath_from_path. [ 390.417921][ T9759] netlink: 'syz.1.783': attribute type 9 has an invalid length. [ 390.810751][ T9756] netlink: 'syz.1.783': attribute type 9 has an invalid length. [ 392.078747][ T9779] FAULT_INJECTION: forcing a failure. [ 392.078747][ T9779] name failslab, interval 1, probability 0, space 0, times 0 [ 392.330235][ T9779] CPU: 0 UID: 0 PID: 9779 Comm: syz.1.787 Tainted: G L syzkaller #0 PREEMPT(full) [ 392.330279][ T9779] Tainted: [L]=SOFTLOCKUP [ 392.330288][ T9779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 392.330302][ T9779] Call Trace: [ 392.330310][ T9779] [ 392.330319][ T9779] dump_stack_lvl+0x100/0x190 [ 392.330351][ T9779] should_fail_ex.cold+0x5/0xa [ 392.330382][ T9779] should_failslab+0xc2/0x120 [ 392.330411][ T9779] __kmalloc_cache_noprof+0x7a/0x6f0 [ 392.330448][ T9779] ? nodes_fop_open+0xa4/0x250 [ 392.330480][ T9779] ? __pfx_nodes_fop_open+0x10/0x10 [ 392.330505][ T9779] nodes_fop_open+0xa4/0x250 [ 392.330535][ T9779] ? __pfx_nodes_fop_open+0x10/0x10 [ 392.330562][ T9779] ? __debugfs_file_get+0x1fc/0x860 [ 392.330593][ T9779] ? __pfx___debugfs_file_get+0x10/0x10 [ 392.330625][ T9779] ? __pfx_apparmor_file_open+0x10/0x10 [ 392.330649][ T9779] ? path_get+0x61/0x80 [ 392.330686][ T9779] ? __pfx_nodes_fop_open+0x10/0x10 [ 392.330889][ T9779] full_proxy_open_regular+0x1b6/0x370 [ 392.330930][ T9779] do_dentry_open+0x6d8/0x1660 [ 392.330967][ T9779] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 392.331018][ T9779] vfs_open+0x82/0x3f0 [ 392.331065][ T9779] path_openat+0x208c/0x31a0 [ 392.331106][ T9779] ? __pfx_path_openat+0x10/0x10 [ 392.331148][ T9779] do_file_open+0x20e/0x430 [ 392.331183][ T9779] ? __pfx_do_file_open+0x10/0x10 [ 392.331240][ T9779] ? alloc_fd+0x476/0x790 [ 392.331273][ T9779] ? do_getname+0x191/0x390 [ 392.331313][ T9779] do_sys_openat2+0x10d/0x1e0 [ 392.331356][ T9779] ? __pfx_do_sys_openat2+0x10/0x10 [ 392.331397][ T9779] ? __fget_files+0x21f/0x3d0 [ 392.331432][ T9779] __x64_sys_openat+0x12d/0x210 [ 392.331471][ T9779] ? __pfx___x64_sys_openat+0x10/0x10 [ 392.331516][ T9779] ? rcu_is_watching+0x12/0xc0 [ 392.331549][ T9779] do_syscall_64+0x10b/0xf80 [ 392.331572][ T9779] ? clear_bhb_loop+0x40/0x90 [ 392.331602][ T9779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.331627][ T9779] RIP: 0033:0x7efd7cf9ce59 [ 392.331648][ T9779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.331678][ T9779] RSP: 002b:00007efd7de5d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 392.331702][ T9779] RAX: ffffffffffffffda RBX: 00007efd7d216090 RCX: 00007efd7cf9ce59 [ 392.331718][ T9779] RDX: 0000000000000600 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 392.331734][ T9779] RBP: 00007efd7d032d6f R08: 0000000000000000 R09: 0000000000000000 [ 392.331749][ T9779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.331763][ T9779] R13: 00007efd7d216128 R14: 00007efd7d216090 R15: 00007ffe7421a9b8 [ 392.331794][ T9779] [ 392.991090][ T9787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.789'. [ 393.436965][ T4945] Bluetooth: hci2: unexpected subevent 0x03 length: 253 > 9 [ 394.929075][ T9801] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 394.963277][ T9801] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 394.998780][ T9801] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 395.032053][ T9801] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 395.069367][ T9801] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 395.146974][ T9801] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 396.885698][ T4945] Bluetooth: hci0: command 0x0c1a tx timeout [ 396.964491][ T4945] Bluetooth: hci3: command 0x0c1a tx timeout [ 397.044852][ T4945] Bluetooth: hci4: command 0x0c1a tx timeout [ 397.051873][ T5646] Bluetooth: hci2: command 0x0c1a tx timeout [ 399.124509][ T5646] Bluetooth: hci4: command 0x0c1a tx timeout [ 399.438575][ T30] audit: type=1806 audit(1779617407.680:19): xattr="" res=-22 [ 399.498969][ T9853] netlink: 20 bytes leftover after parsing attributes in process `syz.0.802'. [ 399.571704][ T30] audit: type=1806 audit(1779617407.810:20): xattr="" res=-22 [ 399.635130][ T9854] netlink: 20 bytes leftover after parsing attributes in process `syz.2.801'. [ 401.208259][ T5646] Bluetooth: hci4: command 0x0c1a tx timeout [ 403.049361][ T9881] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 403.206479][ T9881] pci 0000:00:01.3: PCI INT A: no GSI syzkaller syzkaller login: [ 408.778020][ T30] audit: type=1806 audit(1779617417.020:21): xattr="" res=-22 [ 408.990041][ T9972] netlink: 20 bytes leftover after parsing attributes in process `syz.1.826'. [ 409.290020][ T9976] can0: slcan on ttyS2. [ 409.738593][ T9973] can0 (unregistered): slcan off ttyS2. [ 412.323679][T10007] device-mapper: ioctl: Unable to rename non-existent device, to [ 412.421001][ T30] audit: type=1806 audit(1779617420.660:22): xattr="" res=-22 [ 412.551314][T10026] netlink: 20 bytes leftover after parsing attributes in process `syz.1.834'. [ 416.208114][T10063] ubi0: attaching mtd0 [ 416.492432][T10063] ubi0: scanning is finished [ 416.602072][T10063] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 417.864760][T10063] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 422.494433][ T30] audit: type=1806 audit(1779617430.730:23): xattr="" res=-22 [ 422.576806][T10100] netlink: 20 bytes leftover after parsing attributes in process `syz.4.847'. [ 422.799984][T10102] FAULT_INJECTION: forcing a failure. [ 422.799984][T10102] name failslab, interval 1, probability 0, space 0, times 0 [ 423.049169][T10102] CPU: 0 UID: 0 PID: 10102 Comm: syz.2.848 Tainted: G L syzkaller #0 PREEMPT(full) [ 423.049211][T10102] Tainted: [L]=SOFTLOCKUP [ 423.049219][T10102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 423.049233][T10102] Call Trace: [ 423.049241][T10102] [ 423.049250][T10102] dump_stack_lvl+0x100/0x190 [ 423.049281][T10102] should_fail_ex.cold+0x5/0xa [ 423.049312][T10102] should_failslab+0xc2/0x120 [ 423.049342][T10102] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 423.049365][T10102] ? alloc_inode+0x68/0x250 [ 423.049405][T10102] ? simple_start_creating+0xb0/0x110 [ 423.049436][T10102] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 423.049477][T10102] alloc_inode+0x68/0x250 [ 423.049515][T10102] new_inode+0x22/0x1c0 [ 423.049539][T10102] __debugfs_create_file+0x105/0x4f0 [ 423.049583][T10102] debugfs_create_file_full+0x41/0x60 [ 423.049626][T10102] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 423.049660][T10102] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 423.049692][T10102] ? ida_alloc_range+0x70d/0x830 [ 423.049740][T10102] ? lockdep_init_map_type+0x5c/0x250 [ 423.049770][T10102] preinit_net.part.0+0x252/0x920 [ 423.049812][T10102] copy_net_ns+0x339/0x7c0 [ 423.049850][T10102] create_new_namespaces+0x3ea/0xac0 [ 423.049889][T10102] unshare_nsproxy_namespaces+0xf2/0x220 [ 423.049925][T10102] ksys_unshare+0x438/0xab0 [ 423.049964][T10102] ? __pfx_ksys_unshare+0x10/0x10 [ 423.049999][T10102] ? xfd_validate_state+0x129/0x190 [ 423.050024][T10102] ? ksys_write+0x1ac/0x250 [ 423.050061][T10102] __x64_sys_unshare+0x31/0x40 [ 423.050098][T10102] do_syscall_64+0x10b/0xf80 [ 423.050119][T10102] ? clear_bhb_loop+0x40/0x90 [ 423.050149][T10102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.050174][T10102] RIP: 0033:0x7fa85cb9ce59 [ 423.050193][T10102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.050217][T10102] RSP: 002b:00007fa85dac5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 423.050240][T10102] RAX: ffffffffffffffda RBX: 00007fa85ce16180 RCX: 00007fa85cb9ce59 [ 423.050256][T10102] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 423.050270][T10102] RBP: 00007fa85cc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 423.050285][T10102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 423.050299][T10102] R13: 00007fa85ce16218 R14: 00007fa85ce16180 R15: 00007ffefac06d38 [ 423.050329][T10102] [ 424.665661][T10102] debugfs: out of free dentries, can not create file 'net_refcnt@ffff888029ead000' [ 426.197395][T10112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.850'. [ 426.449762][T10083] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.289380][T10119] FAULT_INJECTION: forcing a failure. [ 428.289380][T10119] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 428.371011][T10119] CPU: 0 UID: 0 PID: 10119 Comm: syz.4.851 Tainted: G L syzkaller #0 PREEMPT(full) [ 428.371050][T10119] Tainted: [L]=SOFTLOCKUP [ 428.371058][T10119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 428.371072][T10119] Call Trace: [ 428.371080][T10119] [ 428.371089][T10119] dump_stack_lvl+0x100/0x190 [ 428.371120][T10119] should_fail_ex.cold+0x5/0xa [ 428.371147][T10119] ? prepare_alloc_pages+0x16d/0x5f0 [ 428.371182][T10119] should_fail_alloc_page+0xeb/0x140 [ 428.371214][T10119] prepare_alloc_pages+0x1f0/0x5f0 [ 428.371251][T10119] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 428.371300][T10119] ? __lock_acquire+0x4a5/0x2630 [ 428.371327][T10119] ? __lock_acquire+0x4a5/0x2630 [ 428.371354][T10119] ? __css_rstat_updated+0x1ce/0x5a0 [ 428.371395][T10119] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 428.371440][T10119] ? do_raw_spin_lock+0x128/0x260 [ 428.371469][T10119] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 428.371497][T10119] ? find_held_lock+0x2b/0x80 [ 428.371538][T10119] ? __lock_acquire+0x4a5/0x2630 [ 428.371562][T10119] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 428.371600][T10119] ? policy_nodemask+0xed/0x4f0 [ 428.371632][T10119] alloc_pages_mpol+0x1fb/0x540 [ 428.371662][T10119] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 428.371691][T10119] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 428.371723][T10119] folio_alloc_mpol_noprof+0x36/0x260 [ 428.371759][T10119] shmem_alloc_folio+0x135/0x160 [ 428.371795][T10119] shmem_alloc_and_add_folio+0x371/0xd40 [ 428.371843][T10119] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 428.371891][T10119] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 428.371923][T10119] shmem_get_folio_gfp+0x6ab/0x1900 [ 428.371954][T10119] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 428.371979][T10119] ? filemap_map_pages+0x9c1/0x2140 [ 428.372007][T10119] shmem_fault+0x1f9/0xa20 [ 428.372033][T10119] ? __pfx_shmem_fault+0x10/0x10 [ 428.372061][T10119] ? __pfx_filemap_map_pages+0x10/0x10 [ 428.372088][T10119] ? find_held_lock+0x2b/0x80 [ 428.372123][T10119] __do_fault+0x10b/0x440 [ 428.372151][T10119] do_fault+0xa99/0x1750 [ 428.372187][T10119] __handle_mm_fault+0x187d/0x2a00 [ 428.372228][T10119] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 428.372260][T10119] ? __pfx___handle_mm_fault+0x10/0x10 [ 428.372299][T10119] ? pte_offset_map_lock+0x174/0x320 [ 428.372328][T10119] ? find_held_lock+0x2b/0x80 [ 428.372376][T10119] ? follow_page_pte+0x4d0/0x13f0 [ 428.372412][T10119] handle_mm_fault+0x36d/0xa20 [ 428.372454][T10119] __get_user_pages+0x1178/0x32a0 [ 428.372496][T10119] ? __pfx___get_user_pages+0x10/0x10 [ 428.372536][T10119] populate_vma_page_range+0x267/0x3f0 [ 428.372571][T10119] ? __pfx_populate_vma_page_range+0x10/0x10 [ 428.372605][T10119] ? __pfx_find_vma_intersection+0x10/0x10 [ 428.372636][T10119] ? do_mmap+0x93f/0x12f0 [ 428.372669][T10119] __mm_populate+0x107/0x3a0 [ 428.372703][T10119] ? __pfx___mm_populate+0x10/0x10 [ 428.372738][T10119] ? up_write+0x28c/0x4f0 [ 428.372767][T10119] __do_sys_remap_file_pages+0x835/0xa10 [ 428.372807][T10119] ? __fget_files+0x21f/0x3d0 [ 428.372837][T10119] ? __pfx___do_sys_remap_file_pages+0x10/0x10 [ 428.372870][T10119] ? __x64_sys_futex+0x34f/0x4d0 [ 428.372896][T10119] ? __x64_sys_futex+0x358/0x4d0 [ 428.372926][T10119] ? xfd_validate_state+0x129/0x190 [ 428.372957][T10119] ? rcu_is_watching+0x12/0xc0 [ 428.372990][T10119] do_syscall_64+0x10b/0xf80 [ 428.373012][T10119] ? clear_bhb_loop+0x40/0x90 [ 428.373042][T10119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.373068][T10119] RIP: 0033:0x7f7b6219ce59 [ 428.373087][T10119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.373112][T10119] RSP: 002b:00007f7b630cf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 428.373135][T10119] RAX: ffffffffffffffda RBX: 00007f7b62415fa0 RCX: 00007f7b6219ce59 [ 428.373151][T10119] RDX: 0000000000000000 RSI: 000000000000f3a4 RDI: 0000000000000000 [ 428.373166][T10119] RBP: 00007f7b62232d6f R08: 0000000100000000 R09: 0000000000000000 [ 428.373181][T10119] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 428.373195][T10119] R13: 00007f7b62416038 R14: 00007f7b62415fa0 R15: 00007ffe9577c3b8 [ 428.373226][T10119] [ 429.716146][ T5646] Bluetooth: hci2: unexpected event 0x3e length: 358 > 260 [ 429.716197][ T5646] Bluetooth: hci2: unexpected subevent 0x1b length: 357 > 260 [ 430.068750][ T5646] Bluetooth: hci4: unexpected event for opcode 0x7c89 [ 431.230647][ T30] audit: type=1806 audit(1779617439.470:24): xattr="" res=-22 [ 431.304603][T10156] netlink: 20 bytes leftover after parsing attributes in process `syz.4.859'. [ 431.865026][T10163] FAULT_INJECTION: forcing a failure. [ 431.865026][T10163] name failslab, interval 1, probability 0, space 0, times 0 [ 431.959955][T10163] CPU: 0 UID: 0 PID: 10163 Comm: syz.1.860 Tainted: G L syzkaller #0 PREEMPT(full) [ 431.959995][T10163] Tainted: [L]=SOFTLOCKUP [ 431.960003][T10163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 431.960018][T10163] Call Trace: [ 431.960026][T10163] [ 431.960035][T10163] dump_stack_lvl+0x100/0x190 [ 431.960066][T10163] should_fail_ex.cold+0x5/0xa [ 431.960096][T10163] ? tomoyo_realpath_from_path+0xb6/0x690 [ 431.960130][T10163] should_failslab+0xc2/0x120 [ 431.960160][T10163] __kmalloc_noprof+0xe0/0x850 [ 431.960181][T10163] ? kfree+0x1dd/0x6c0 [ 431.960221][T10163] tomoyo_realpath_from_path+0xb6/0x690 [ 431.960263][T10163] tomoyo_path_perm+0x276/0x460 [ 431.960289][T10163] ? tomoyo_path_perm+0x262/0x460 [ 431.960318][T10163] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 431.960373][T10163] ? __pfx_ima_file_check+0x10/0x10 [ 431.960412][T10163] ? hook_file_truncate+0xc3/0x240 [ 431.960448][T10163] security_file_truncate+0xb5/0x1e0 [ 431.960480][T10163] path_openat+0x1c6e/0x31a0 [ 431.960522][T10163] ? __pfx_path_openat+0x10/0x10 [ 431.960564][T10163] do_file_open+0x20e/0x430 [ 431.960598][T10163] ? __pfx_do_file_open+0x10/0x10 [ 431.960650][T10163] ? alloc_fd+0x476/0x790 [ 431.960683][T10163] ? do_getname+0x191/0x390 [ 431.960723][T10163] do_sys_openat2+0x10d/0x1e0 [ 431.960762][T10163] ? __pfx_do_sys_openat2+0x10/0x10 [ 431.960803][T10163] ? __fget_files+0x21f/0x3d0 [ 431.960838][T10163] __x64_sys_openat+0x12d/0x210 [ 431.960878][T10163] ? __pfx___x64_sys_openat+0x10/0x10 [ 431.960923][T10163] ? rcu_is_watching+0x12/0xc0 [ 431.960966][T10163] do_syscall_64+0x10b/0xf80 [ 431.960991][T10163] ? clear_bhb_loop+0x40/0x90 [ 431.961021][T10163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.961046][T10163] RIP: 0033:0x7efd7cf9ce59 [ 431.961066][T10163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.961090][T10163] RSP: 002b:00007efd7de5d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 431.961113][T10163] RAX: ffffffffffffffda RBX: 00007efd7d216090 RCX: 00007efd7cf9ce59 [ 431.961130][T10163] RDX: 0000000000000600 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 431.961145][T10163] RBP: 00007efd7d032d6f R08: 0000000000000000 R09: 0000000000000000 [ 431.961160][T10163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.961175][T10163] R13: 00007efd7d216128 R14: 00007efd7d216090 R15: 00007ffe7421a9b8 [ 431.961205][T10163] [ 432.479405][T10163] ERROR: Out of memory at tomoyo_realpath_from_path. [ 433.447659][T10186] dyndbg: expected <4096 bytes into control [ 433.513431][T10186] netlink: 12 bytes leftover after parsing attributes in process `syz.0.865'. [ 435.444943][T10215] FAULT_INJECTION: forcing a failure. [ 435.444943][T10215] name fail_futex, interval 1, probability 0, space 0, times 0 [ 435.500885][T10219] netlink: 330 bytes leftover after parsing attributes in process `syz.4.868'. [ 435.550031][T10215] CPU: 0 UID: 0 PID: 10215 Comm: syz.1.867 Tainted: G L syzkaller #0 PREEMPT(full) [ 435.550070][T10215] Tainted: [L]=SOFTLOCKUP [ 435.550079][T10215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 435.550093][T10215] Call Trace: [ 435.550101][T10215] [ 435.550110][T10215] dump_stack_lvl+0x100/0x190 [ 435.550141][T10215] should_fail_ex.cold+0x5/0xa [ 435.550173][T10215] get_futex_key+0x1d2/0x1510 [ 435.550201][T10215] ? __pfx_get_futex_key+0x10/0x10 [ 435.550228][T10215] ? trace_pid_list_is_set+0x22c/0x390 [ 435.550267][T10215] futex_wait_setup+0x83/0x510 [ 435.550311][T10215] __futex_wait+0x19f/0x300 [ 435.550346][T10215] ? __pfx___futex_wait+0x10/0x10 [ 435.550378][T10215] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 435.550420][T10215] ? __pfx_futex_wake_mark+0x10/0x10 [ 435.550457][T10215] ? find_held_lock+0x2b/0x80 [ 435.550489][T10215] ? futex_wake+0x456/0x530 [ 435.550534][T10215] futex_wait+0xe6/0x370 [ 435.550568][T10215] ? __pfx_futex_wait+0x10/0x10 [ 435.550616][T10215] do_futex+0x1ef/0x350 [ 435.550644][T10215] ? __pfx_do_futex+0x10/0x10 [ 435.550671][T10215] ? cap_task_prctl+0x104/0xa50 [ 435.550725][T10215] __x64_sys_futex+0x34f/0x4d0 [ 435.550756][T10215] ? __pfx___x64_sys_futex+0x10/0x10 [ 435.550785][T10215] ? __pfx___do_sys_prctl+0x10/0x10 [ 435.550814][T10215] ? rcu_is_watching+0x12/0xc0 [ 435.550847][T10215] do_syscall_64+0x10b/0xf80 [ 435.550869][T10215] ? clear_bhb_loop+0x40/0x90 [ 435.550899][T10215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.550924][T10215] RIP: 0033:0x7efd7cf9ce59 [ 435.550942][T10215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.550966][T10215] RSP: 002b:00007efd7de5d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 435.550990][T10215] RAX: ffffffffffffffda RBX: 00007efd7d216098 RCX: 00007efd7cf9ce59 [ 435.551006][T10215] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007efd7d216098 [ 435.551021][T10215] RBP: 00007efd7d216090 R08: 0000000000000000 R09: 0000000000000000 [ 435.551035][T10215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.551049][T10215] R13: 00007efd7d216128 R14: 00007ffe7421a8d0 R15: 00007ffe7421a9b8 [ 435.551079][T10215] [ 439.554590][T10257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.874'. [ 439.823000][T10274] netlink: 28 bytes leftover after parsing attributes in process `syz.1.877'. [ 440.168408][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.174911][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.532247][T10298] syz.0.881 (10298): drop_caches: 0 [ 441.617858][T10290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.879'. [ 442.368281][T10314] netlink: 25 bytes leftover after parsing attributes in process `syz.1.883'. [ 443.998926][T10339] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 444.031665][T10348] FAULT_INJECTION: forcing a failure. [ 444.031665][T10348] name failslab, interval 1, probability 0, space 0, times 0 [ 444.046781][T10339] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 444.072989][T10339] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 444.109784][T10339] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 444.186171][T10348] CPU: 0 UID: 0 PID: 10348 Comm: syz.2.889 Tainted: G L syzkaller #0 PREEMPT(full) [ 444.186210][T10348] Tainted: [L]=SOFTLOCKUP [ 444.186219][T10348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 444.186233][T10348] Call Trace: [ 444.186241][T10348] [ 444.186250][T10348] dump_stack_lvl+0x100/0x190 [ 444.186281][T10348] should_fail_ex.cold+0x5/0xa [ 444.186311][T10348] ? tomoyo_realpath_from_path+0xb6/0x690 [ 444.186345][T10348] should_failslab+0xc2/0x120 [ 444.186374][T10348] __kmalloc_noprof+0xe0/0x850 [ 444.186396][T10348] ? kfree+0x1dd/0x6c0 [ 444.186435][T10348] tomoyo_realpath_from_path+0xb6/0x690 [ 444.186476][T10348] tomoyo_path_perm+0x276/0x460 [ 444.186501][T10348] ? tomoyo_path_perm+0x262/0x460 [ 444.186530][T10348] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 444.186590][T10348] ? __pfx_ima_file_check+0x10/0x10 [ 444.186629][T10348] ? hook_file_truncate+0xc3/0x240 [ 444.186670][T10348] security_file_truncate+0xb5/0x1e0 [ 444.186703][T10348] path_openat+0x1c6e/0x31a0 [ 444.186744][T10348] ? __pfx_path_openat+0x10/0x10 [ 444.186787][T10348] do_file_open+0x20e/0x430 [ 444.186820][T10348] ? __pfx_do_file_open+0x10/0x10 [ 444.186873][T10348] ? alloc_fd+0x476/0x790 [ 444.186905][T10348] ? do_getname+0x191/0x390 [ 444.186945][T10348] do_sys_openat2+0x10d/0x1e0 [ 444.186985][T10348] ? __pfx_do_sys_openat2+0x10/0x10 [ 444.187025][T10348] ? __fget_files+0x21f/0x3d0 [ 444.187060][T10348] __x64_sys_openat+0x12d/0x210 [ 444.187100][T10348] ? __pfx___x64_sys_openat+0x10/0x10 [ 444.187145][T10348] ? rcu_is_watching+0x12/0xc0 [ 444.187179][T10348] do_syscall_64+0x10b/0xf80 [ 444.187200][T10348] ? clear_bhb_loop+0x40/0x90 [ 444.187230][T10348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.187255][T10348] RIP: 0033:0x7fa85cb9ce59 [ 444.187274][T10348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 444.187298][T10348] RSP: 002b:00007fa85dae6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 444.187321][T10348] RAX: ffffffffffffffda RBX: 00007fa85ce16090 RCX: 00007fa85cb9ce59 [ 444.187337][T10348] RDX: 0000000000000600 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 444.187353][T10348] RBP: 00007fa85cc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 444.187367][T10348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 444.187381][T10348] R13: 00007fa85ce16128 R14: 00007fa85ce16090 R15: 00007ffefac06d38 [ 444.187413][T10348] [ 444.699786][T10348] ERROR: Out of memory at tomoyo_realpath_from_path. [ 446.006257][ T5646] Bluetooth: hci0: command 0x0c1a tx timeout [ 446.084453][ T5646] Bluetooth: hci2: command 0x0c1a tx timeout [ 446.090781][ T5646] Bluetooth: hci3: command 0x0c1a tx timeout [ 446.165057][T10374] Bluetooth: hci4: command 0x0c1a tx timeout [ 446.651724][T10389] FAULT_INJECTION: forcing a failure. [ 446.651724][T10389] name failslab, interval 1, probability 0, space 0, times 0 [ 446.710226][T10389] CPU: 0 UID: 0 PID: 10389 Comm: syz.4.901 Tainted: G L syzkaller #0 PREEMPT(full) [ 446.710265][T10389] Tainted: [L]=SOFTLOCKUP [ 446.710273][T10389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 446.710288][T10389] Call Trace: [ 446.710295][T10389] [ 446.710304][T10389] dump_stack_lvl+0x100/0x190 [ 446.710335][T10389] should_fail_ex.cold+0x5/0xa [ 446.710366][T10389] ? tomoyo_realpath_from_path+0xb6/0x690 [ 446.710400][T10389] should_failslab+0xc2/0x120 [ 446.710437][T10389] __kmalloc_noprof+0xe0/0x850 [ 446.710459][T10389] ? kfree+0x1dd/0x6c0 [ 446.710502][T10389] tomoyo_realpath_from_path+0xb6/0x690 [ 446.710551][T10389] tomoyo_path_perm+0x276/0x460 [ 446.710577][T10389] ? tomoyo_path_perm+0x262/0x460 [ 446.710606][T10389] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 446.710663][T10389] ? __pfx_ima_file_check+0x10/0x10 [ 446.710702][T10389] ? hook_file_truncate+0xc3/0x240 [ 446.710737][T10389] security_file_truncate+0xb5/0x1e0 [ 446.710769][T10389] path_openat+0x1c6e/0x31a0 [ 446.710811][T10389] ? __pfx_path_openat+0x10/0x10 [ 446.710853][T10389] do_file_open+0x20e/0x430 [ 446.710887][T10389] ? __pfx_do_file_open+0x10/0x10 [ 446.710939][T10389] ? alloc_fd+0x476/0x790 [ 446.710974][T10389] ? do_getname+0x191/0x390 [ 446.711014][T10389] do_sys_openat2+0x10d/0x1e0 [ 446.711053][T10389] ? __pfx_do_sys_openat2+0x10/0x10 [ 446.711094][T10389] ? __fget_files+0x21f/0x3d0 [ 446.711129][T10389] __x64_sys_openat+0x12d/0x210 [ 446.711168][T10389] ? __pfx___x64_sys_openat+0x10/0x10 [ 446.711213][T10389] ? rcu_is_watching+0x12/0xc0 [ 446.711246][T10389] do_syscall_64+0x10b/0xf80 [ 446.711268][T10389] ? clear_bhb_loop+0x40/0x90 [ 446.711297][T10389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.711323][T10389] RIP: 0033:0x7f7b6219ce59 [ 446.711342][T10389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.711366][T10389] RSP: 002b:00007f7b630ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 446.711389][T10389] RAX: ffffffffffffffda RBX: 00007f7b62416090 RCX: 00007f7b6219ce59 [ 446.711405][T10389] RDX: 0000000000000600 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 446.711426][T10389] RBP: 00007f7b62232d6f R08: 0000000000000000 R09: 0000000000000000 [ 446.711440][T10389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 446.711454][T10389] R13: 00007f7b62416128 R14: 00007f7b62416090 R15: 00007ffe9577c3b8 [ 446.711485][T10389] [ 447.214537][T10389] ERROR: Out of memory at tomoyo_realpath_from_path. [ 449.303869][T10410] FAULT_INJECTION: forcing a failure. [ 449.303869][T10410] name failslab, interval 1, probability 0, space 0, times 0 [ 449.412112][T10410] CPU: 0 UID: 0 PID: 10410 Comm: syz.4.905 Tainted: G L syzkaller #0 PREEMPT(full) [ 449.412156][T10410] Tainted: [L]=SOFTLOCKUP [ 449.412164][T10410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 449.412178][T10410] Call Trace: [ 449.412186][T10410] [ 449.412195][T10410] dump_stack_lvl+0x100/0x190 [ 449.412226][T10410] should_fail_ex.cold+0x5/0xa [ 449.412255][T10410] ? __register_sysctl_table+0xac/0x1650 [ 449.412287][T10410] should_failslab+0xc2/0x120 [ 449.412315][T10410] __kmalloc_noprof+0xe0/0x850 [ 449.412342][T10410] __register_sysctl_table+0xac/0x1650 [ 449.412373][T10410] ? is_module_address+0x5f/0xf0 [ 449.412402][T10410] ? __pfx___register_sysctl_table+0x10/0x10 [ 449.412433][T10410] ? is_module_address+0x69/0xf0 [ 449.412456][T10410] ? register_net_sysctl_sz+0x222/0x430 [ 449.412483][T10410] ? __asan_memcpy+0x3c/0x60 [ 449.412522][T10410] devinet_init_net+0x369/0x8d0 [ 449.412547][T10410] ? __pfx_devinet_init_net+0x10/0x10 [ 449.412569][T10410] ops_init+0x1e2/0x5f0 [ 449.412603][T10410] setup_net+0x118/0x3a0 [ 449.412634][T10410] ? __pfx_setup_net+0x10/0x10 [ 449.412664][T10410] ? mutex_init_lockdep+0xf1/0x120 [ 449.412694][T10410] copy_net_ns+0x46f/0x7c0 [ 449.412730][T10410] create_new_namespaces+0x3ea/0xac0 [ 449.412768][T10410] unshare_nsproxy_namespaces+0xf2/0x220 [ 449.412802][T10410] ksys_unshare+0x438/0xab0 [ 449.412839][T10410] ? __pfx_ksys_unshare+0x10/0x10 [ 449.412873][T10410] ? xfd_validate_state+0x129/0x190 [ 449.412907][T10410] __x64_sys_unshare+0x31/0x40 [ 449.412942][T10410] do_syscall_64+0x10b/0xf80 [ 449.412963][T10410] ? clear_bhb_loop+0x40/0x90 [ 449.412995][T10410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.413019][T10410] RIP: 0033:0x7f7b6219ce59 [ 449.413038][T10410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.413060][T10410] RSP: 002b:00007f7b630cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 449.413082][T10410] RAX: ffffffffffffffda RBX: 00007f7b62415fa0 RCX: 00007f7b6219ce59 [ 449.413097][T10410] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 449.413111][T10410] RBP: 00007f7b62232d6f R08: 0000000000000000 R09: 0000000000000000 [ 449.413131][T10410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 449.413144][T10410] R13: 00007f7b62416038 R14: 00007f7b62415fa0 R15: 00007ffe9577c3b8 [ 449.413173][T10410] [ 451.891814][T10443] ================================================================== [ 451.891841][T10443] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 451.891898][T10443] Write of size 8 at addr ffffc90004b29be0 by task syz.2.910/10443 [ 451.891919][T10443] [ 451.891933][T10443] CPU: 0 UID: 0 PID: 10443 Comm: syz.2.910 Tainted: G L syzkaller #0 PREEMPT(full) [ 451.891967][T10443] Tainted: [L]=SOFTLOCKUP [ 451.891976][T10443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 451.891991][T10443] Call Trace: [ 451.891999][T10443] [ 451.892009][T10443] dump_stack_lvl+0x100/0x190 [ 451.892035][T10443] print_report+0x13d/0x4b0 [ 451.892069][T10443] ? _raw_spin_lock_irqsave+0x52/0x60 [ 451.892109][T10443] ? sys_imageblit+0x19fb/0x1d60 [ 451.892149][T10443] kasan_report+0xdf/0x1d0 [ 451.892177][T10443] ? sys_imageblit+0x19fb/0x1d60 [ 451.892219][T10443] sys_imageblit+0x19fb/0x1d60 [ 451.892259][T10443] ? queue_work_on+0x13b/0x1e0 [ 451.892285][T10443] ? __pfx_sys_imageblit+0x10/0x10 [ 451.892326][T10443] ? drm_fb_helper_damage_area+0xb4/0xe0 [ 451.892367][T10443] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 451.892399][T10443] soft_cursor+0x524/0xa10 [ 451.892434][T10443] ? fb_get_color_depth+0x120/0x250 [ 451.892465][T10443] bit_cursor+0xca1/0x1490 [ 451.892501][T10443] ? __pfx_bit_cursor+0x10/0x10 [ 451.892536][T10443] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 451.892573][T10443] ? get_color+0x1da/0x450 [ 451.892599][T10443] ? __pfx_bit_cursor+0x10/0x10 [ 451.892629][T10443] fbcon_cursor+0x43c/0x5e0 [ 451.892657][T10443] ? add_softcursor+0x150/0x290 [ 451.892691][T10443] set_cursor+0x1db/0x250 [ 451.892725][T10443] vcs_write+0xba9/0xd60 [ 451.892757][T10443] ? __bpf_trace_sched_exit_tp+0x20/0xc0 [ 451.892789][T10443] ? __pfx_vcs_write+0x10/0x10 [ 451.892820][T10443] ? apparmor_file_permission+0x13f/0x1c0 [ 451.892847][T10443] ? bpf_lsm_file_permission+0x9/0x10 [ 451.892872][T10443] ? security_file_permission+0x76/0x210 [ 451.892912][T10443] ? rw_verify_area+0xce/0x6d0 [ 451.892938][T10443] vfs_write+0x2aa/0x1070 [ 451.892966][T10443] ? __pfx_vcs_write+0x10/0x10 [ 451.892999][T10443] ? __pfx_vfs_write+0x10/0x10 [ 451.893025][T10443] ? find_held_lock+0x2b/0x80 [ 451.893057][T10443] ? __fget_files+0x215/0x3d0 [ 451.893085][T10443] ? __fget_files+0x215/0x3d0 [ 451.893116][T10443] ? __fget_files+0x21f/0x3d0 [ 451.893150][T10443] ksys_write+0x12a/0x250 [ 451.893177][T10443] ? __pfx_ksys_write+0x10/0x10 [ 451.893207][T10443] ? rcu_is_watching+0x12/0xc0 [ 451.893239][T10443] do_syscall_64+0x10b/0xf80 [ 451.893260][T10443] ? clear_bhb_loop+0x40/0x90 [ 451.893288][T10443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.893313][T10443] RIP: 0033:0x7fa85cb9ce59 [ 451.893332][T10443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.893356][T10443] RSP: 002b:00007fa85db07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 451.893380][T10443] RAX: ffffffffffffffda RBX: 00007fa85ce15fa0 RCX: 00007fa85cb9ce59 [ 451.893396][T10443] RDX: 0000000020000003 RSI: 0000200000000000 RDI: 0000000000000005 [ 451.893411][T10443] RBP: 00007fa85cc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 451.893426][T10443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 451.893441][T10443] R13: 00007fa85ce16038 R14: 00007fa85ce15fa0 R15: 00007ffefac06d38 [ 451.893465][T10443] [ 451.893474][T10443] [ 451.893480][T10443] The buggy address belongs to a vmalloc virtual mapping [ 451.893504][T10443] Memory state around the buggy address: [ 451.893517][T10443] ffffc90004b29a80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 451.893538][T10443] ffffc90004b29b00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 451.893555][T10443] >ffffc90004b29b80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 451.893569][T10443] ^ [ 451.893583][T10443] ffffc90004b29c00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 451.893600][T10443] ffffc90004b29c80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 451.893614][T10443] ================================================================== [ 451.916706][T10443] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 451.916731][T10443] CPU: 0 UID: 0 PID: 10443 Comm: syz.2.910 Tainted: G L syzkaller #0 PREEMPT(full) [ 451.916768][T10443] Tainted: [L]=SOFTLOCKUP [ 451.916777][T10443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 451.916792][T10443] Call Trace: [ 451.916800][T10443] [ 451.916811][T10443] dump_stack_lvl+0x100/0x190 [ 451.916840][T10443] vpanic+0x552/0x970 [ 451.916863][T10443] ? __pfx_vpanic+0x10/0x10 [ 451.916894][T10443] ? mark_held_locks+0x40/0x70 [ 451.916919][T10443] ? sys_imageblit+0x19fb/0x1d60 [ 451.916958][T10443] panic+0xd1/0xe0 [ 451.916980][T10443] ? __pfx_panic+0x10/0x10 [ 451.917004][T10443] ? sys_imageblit+0x19fb/0x1d60 [ 451.917042][T10443] ? preempt_schedule_common+0x42/0xc0 [ 451.917085][T10443] check_panic_on_warn.cold+0x19/0x34 [ 451.917111][T10443] end_report.part.0+0x3a/0x90 [ 451.917146][T10443] kasan_report.cold+0xe/0x18 [ 451.917182][T10443] ? sys_imageblit+0x19fb/0x1d60 [ 451.917224][T10443] sys_imageblit+0x19fb/0x1d60 [ 451.917265][T10443] ? queue_work_on+0x13b/0x1e0 [ 451.917291][T10443] ? __pfx_sys_imageblit+0x10/0x10 [ 451.917333][T10443] ? drm_fb_helper_damage_area+0xb4/0xe0 [ 451.917374][T10443] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 451.917407][T10443] soft_cursor+0x524/0xa10 [ 451.917442][T10443] ? fb_get_color_depth+0x120/0x250 [ 451.917474][T10443] bit_cursor+0xca1/0x1490 [ 451.917510][T10443] ? __pfx_bit_cursor+0x10/0x10 [ 451.917546][T10443] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 451.917584][T10443] ? get_color+0x1da/0x450 [ 451.917610][T10443] ? __pfx_bit_cursor+0x10/0x10 [ 451.917645][T10443] fbcon_cursor+0x43c/0x5e0 [ 451.917673][T10443] ? add_softcursor+0x150/0x290 [ 451.917709][T10443] set_cursor+0x1db/0x250 [ 451.917743][T10443] vcs_write+0xba9/0xd60 [ 451.917775][T10443] ? __bpf_trace_sched_exit_tp+0x20/0xc0 [ 451.917808][T10443] ? __pfx_vcs_write+0x10/0x10 [ 451.917839][T10443] ? apparmor_file_permission+0x13f/0x1c0 [ 451.917869][T10443] ? bpf_lsm_file_permission+0x9/0x10 [ 451.917901][T10443] ? security_file_permission+0x76/0x210 [ 451.917932][T10443] ? rw_verify_area+0xce/0x6d0 [ 451.917958][T10443] vfs_write+0x2aa/0x1070 [ 451.917986][T10443] ? __pfx_vcs_write+0x10/0x10 [ 451.918019][T10443] ? __pfx_vfs_write+0x10/0x10 [ 451.918046][T10443] ? find_held_lock+0x2b/0x80 [ 451.918077][T10443] ? __fget_files+0x215/0x3d0 [ 451.918106][T10443] ? __fget_files+0x215/0x3d0 [ 451.918137][T10443] ? __fget_files+0x21f/0x3d0 [ 451.918169][T10443] ksys_write+0x12a/0x250 [ 451.918197][T10443] ? __pfx_ksys_write+0x10/0x10 [ 451.918226][T10443] ? rcu_is_watching+0x12/0xc0 [ 451.918257][T10443] do_syscall_64+0x10b/0xf80 [ 451.918279][T10443] ? clear_bhb_loop+0x40/0x90 [ 451.918307][T10443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.918332][T10443] RIP: 0033:0x7fa85cb9ce59 [ 451.918351][T10443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.918389][T10443] RSP: 002b:00007fa85db07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 451.918412][T10443] RAX: ffffffffffffffda RBX: 00007fa85ce15fa0 RCX: 00007fa85cb9ce59 [ 451.918428][T10443] RDX: 0000000020000003 RSI: 0000200000000000 RDI: 0000000000000005 [ 451.918443][T10443] RBP: 00007fa85cc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 451.918458][T10443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 451.918473][T10443] R13: 00007fa85ce16038 R14: 00007fa85ce15fa0 R15: 00007ffefac06d38 [ 451.918496][T10443] [ 451.918565][T10443] Kernel Offset: disabled