last executing test programs: 11.104260829s ago: executing program 2 (id=1642): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = open(&(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x1c5082, 0x18) open_by_handle_at$auto(r0, &(0x7f0000000140)={0x8, 0x30001, "b190a905237d4b53"}, 0x42) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x20041, 0x9, 0x2}, 0x18) socket(0x1d, 0xa, 0xff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) socket(0xa, 0x5, 0x0) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCGMASK(r2, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0xffffffffffffff95}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:04.0/numa_node\x00', 0x1a3b02, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$auto_KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, 0x0) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) socket$nl_generic(0x10, 0x3, 0x10) ioperm$auto(0x5, 0x1, 0x3) tee$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x20000008000) socket(0x21, 0x2, 0x2) write$auto(0x3, 0x0, 0xffd8) 10.235397979s ago: executing program 0 (id=1645): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) r0 = socket$nl_generic(0x11, 0x3, 0x10) bind$auto(r0, &(0x7f0000000200)=@generic={0x11, "0000100000000000929e006300"}, 0x80) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x405b) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="110b27bd7000ffdbdf250900000800"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x1000) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc045}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x8000, 0x1, 0x8, 0x7, 0x5, 0xffffffffffffffff, 0x80000001, "787d66da4a620eab7f736e854ef61529", 0x0, 0xffffffffffffffff, 0x7, 0xffff4e8b, 0x2, 0x1}, 0x7) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000300)={0x5, 0x0, {0x6, @btrfs_balance_args_1_1={0x101, 0x4}, 0xffffffffffff0c3d, 0x8, 0x80, 0x8, 0x5, 0x3, 0x1, @limit=0x8, 0x5f6b, 0xd}, {0x37, @usage=0xfffffffffffffffb, 0x8, 0x30000, 0x5, 0x4, 0x0, 0x8, 0x9, @limit=0x3, 0x0, 0x4}, {0x3, @btrfs_balance_args_1_1={0x3, 0x6}, 0x9, 0x8000000000000000, 0x9, 0x7, 0xd9e, 0xfffffffffffffffb, 0x8, @limit=0x7c, 0x5, 0x80000001}, {0x6, 0x4, 0x31}}) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0xa) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mbind$auto(0x4, 0x7, 0x7, &(0x7f0000000040), 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x51a103, 0x0) io_setup$auto(0xffff, &(0x7f0000000580)) ioctl$auto_UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f0000000100)={0x8, 0x0, 0x695c831f}) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2506, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x3a32182}, 0xed7138b}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) 9.719771s ago: executing program 3 (id=1646): r0 = openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, 0x0, 0x48402, 0x0) getsockname$auto(0xffffffffffffffff, &(0x7f0000000000)=@ethernet={0x1, @broadcast}, &(0x7f00000000c0)=0x5) semtimedop$auto(0xfffffffa, &(0x7f0000001000)={0x8000, 0x2, 0x1}, 0x4, &(0x7f0000001080)={0x11, 0x6}) read$auto(r0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x22a40, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x8, 0xffffffffffffff4d, 0x5, 0x5, 0x800000000004, 0x0, 0x5, 0x19, 0x10, 0x5, 0x2dde, 0x4000000000008, 0xfffffffffffffffa, 0xab, 0x0, 0x9]}, &(0x7f0000000040)={0x0, 0x7}) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x9, 0x5, 0x5, 0xfffffffffffffff6, 0x7, 0xfffffffffffe0002, 0xdffffffffffffff8, 0x2, 0x0, 0x10000005e58296f, 0x800000000020, 0x5, 0x3, 0x200, 0x1, 0x7]}, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty48\x00', 0x40000, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@ILA_ATTR_LOCATOR_MATCH={0xc, 0x3, 0x24000000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$auto_ILA_CMD_FLUSH(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x40008c4) syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) socket(0x15, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) 8.503760128s ago: executing program 3 (id=1648): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, 0x0) sysfs$auto(0x2, 0xd, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) read$auto_usbfs_devices_fops_usb(r1, 0x0, 0x0) read$auto_regulator_summary_fops_(r1, 0x0, 0x0) read$auto_regulator_summary_fops_(r1, 0x0, 0x0) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) sendmsg$auto_NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008800}, 0x29bcaee1fc06ed6c) sendmsg$auto_NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000019c0)={&(0x7f0000000480)={0x424, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY_NAME={0x13, 0x2, '-{%{#/@(Q@\'%#]\x00'}, @NL802154_ATTR_SEC_DEVICE={0x3fa, 0x2e, 0x0, 0x1, [@nested={0x77, 0x133, 0x0, 0x1, [@generic="c4e87664598c3a557d07178986874c0ad4c8a9bec52f4cc11b7d95e88b2de3b9d21cf4d72caa0156e5389e61ebdb5efa5a707df0a09c728a463d14b78f501ccf47fb2dc7da133bf9e80b4210553606f416bbd52cd335e51e3daaced76c0685c96b80a981d886f48fd57624", @typed={0x8, 0x11d, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x28}}]}, @nested={0x49, 0x13b, 0x0, 0x1, [@nested={0x4, 0x110}, @nested={0x4, 0x53}, @generic="da9ea7f431c9b01a7829184973d5fdb47d4a07b485cdb5d7d74e36f659033aa990399b2e3a361944bfd084f7d731135a6d10c964fdd6", @generic="7ba821e6252a57"]}, @nested={0x156, 0xdf, 0x0, 0x1, [@nested={0x4, 0x1c}, @typed={0x8, 0x30, 0x0, 0x0, @fd}, @generic="a305d04aa99bf401623a7f90e953c91098f43afbf2615ad978d93e5229769db21dc7cc1a1e80123efe0060d90aa52d0fcfce5d71009f39496066342ce79073b4dea080e88a3d4827cc8c977ae8c03f7d91a9e0262d6df36527e6684d515059b650f31a2caf58a6459e3144ce0c0c536bfcd74cbe484de90966f6c43ad7428b44917134654f6617731560bc99db3ae32752f85bcc546d7cd3aec18c7d2ae188fad63ab13fdef6455b7ac2bf455a218bea9c392ed1b58eda6032402fe5121c46398e72f84da66d0626cbba62371fa5cc10863e25675b654a9d2fe6", @typed={0x8, 0xeb, 0x0, 0x0, @uid}, @typed={0x8, 0x48, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x23}}, @nested={0x4, 0x122}, @typed={0x45, 0x145, 0x0, 0x0, @binary="b3b0184b04fc7caae62a9a716e6b4c02e06461186b11fc505d42ae67fa79902fbbf473e52bd903595214dae7c467ec0a064f57610c9a4880548048bf4cb5c073ba"}, @nested={0x4, 0xb2}, @typed={0xa, 0x7a, 0x0, 0x0, @binary="77fe466513b9"}]}, @generic, @generic="f085bef3831a8a7a253e5e7b33748c64aa4fe8e38cf1d4b9540a9141ece61ed53e2f3c3cab95f288b57a755bf920d97c5c1900b32298abd81e82cfbbe6f3528a2a7db8a06b94ea9bc7e03544c3f9ad680eb566f52d8f48a3500efadcdc8ae42eb84126fbb3af0f867d2714dbc8130c1eb1024d609a921944a188e4a2c7f7e2f0e222f987133949f58bc382a48da2f3de88297aae1cb57abbe2", @generic="eb43333cd536da6b045650a72f9023ef393810a15970fe1b7a80961515c0a96c24cdff11bf440965776a10b93337604a791964f354d8732c3832d2497593c338be124b57b865f6c0525db3ffbf46974a1acc268d23d8256c882eb0d8b53752201def778d", @typed={0xc, 0x11d, 0x0, 0x0, @u64=0xfffffffffffffffd}, @generic="91f53865f4f7aa16a9bad6d13815425dbc0bd8c966367765d8ad48cd75b04a3941262d9b356a573f4099ab8ba34b2e646b3f67863a076e7cf89fd3f1206aadc22c919916c775f9c324691a0246cf22a3f6776746d4d69a81ae24b06e26c9f8540acce76d899bd8208acba9c23048c0d9e42e5076cee1f3166ab99c5ff5d97fa27155225bdf71edc46d3ba64c52193da6e7d61260c6f951cd40834d2af530eefec8d63248433ec2aa62b1e682a2974b08b123ecb1aa8dd72748b453b260ba404229936a47236ec6f0f911688b3393c68180"]}]}, 0x424}, 0x1, 0x0, 0x0, 0x804}, 0x0) 8.385073031s ago: executing program 2 (id=1650): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x11, 0x800, 0x800000d) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/admmidi2\x00', 0x450481, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, 0x0, 0x5b020f7d7a84fe6e) unshare$auto(0x40000080) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/wireless\x00', 0x80, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, r0) ioprio_set$auto(0x3, 0x0, 0x4b34) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x1000, 0x2) mmap$auto(0x0, 0x400009, 0x200, 0x9b72, 0x2, 0x6) sendmsg$auto_SMC_NETLINK_GET_SYS_INFO(r3, 0x0, 0x18) pread64$auto(r2, 0x0, 0x201, 0xc000) mmap$auto(0x2e, 0x2020009, 0x3, 0xfffffffffffffffd, r3, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0x400053, 0x9) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/bus/usb/013/001\x00', 0x331282, 0x0) close_range$auto(0x2, r1, 0x9) 8.207877363s ago: executing program 0 (id=1651): mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) kill$auto(0x0, 0x15) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000002f80), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000000040)={0x1c, r1, 0x5, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c000}, 0x80) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0x15, 0x5, 0x0) r4 = getsockopt$auto(r3, 0x114, 0x2720, 0xfffffffffffffffc, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000040), r4) r5 = getpid() r6 = gettid() rt_tgsigqueueinfo$auto(r5, r6, 0x21, 0x0) sendmsg$auto_OVS_FLOW_CMD_GET(r4, 0x0, 0x1) prctl$auto_PR_SET_MM_ENV_END(0x300, 0xb, r5, 0x1, 0x6) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r2, 0x425, 0x70bd27, 0x25dfdbfc, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_HASH={0xc, 0xb, 0x6}, @OVS_PACKET_ATTR_HASH={0xc}, @OVS_PACKET_ATTR_HASH={0xc, 0xb, 0xffffffff}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "e5a3f764a4a27a95b3a4a9c88a27"}, @OVS_PACKET_ATTR_HASH={0xc, 0xb, 0xb}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000000)) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop15/diskseq\x00', 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1300f51c230ca8d57a148353e98649c41bf6760b7a44722d45d95d1e6ce26828263b6cd180728dad0000bb8cf47a75d02b9deb7397d42716d660f3ea89bb42d7cb2ac26cae3b4d600247614007f59bc5d7c0796f9a8f6a60f7a0327fc2d82c75f49d8167439693ea98bba91ccd0f7906f84a3af16d2e1960f436e12cecfe584f075060de40ee777ee79d19b7"], 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) write$auto(0x3, 0x0, 0xfffffdef) fcntl$auto(0xffffffffffffffff, 0x20007, 0xa553) 7.431566029s ago: executing program 3 (id=1652): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) write$auto(r0, 0x0, 0x3) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000100)='//\xf2\x00cu\x102\x18\xe2\fv\xe3Tr\xa7\xa9\v\xfd\xa7:\x83O\xabL\x88#\"#\xf8<;E-\xd7z\b\x00\x00\x00\x00@\x00\x00])@\xe30\x95>^kw\x83~\xbe\xa0jZ\xa4', 0x80000000) mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x3, 0x100000000) r2 = socket(0xa, 0x1, 0x84) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20800, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xf15a}, 0x6, 0x8, 0x5) io_cancel$auto(0x7, 0xfffffffffffffffc, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x7, 0x5, 0x1007181, 0x8a0d, 0x6, 0x7, 0x7ff, 0x10089, 0x26, 0x4, 0x200000000001, 0x384, 0x6, 0x8, 0x0, 0x30, 0x0, 0x864, 0xe, 0x22000, 0x9, 0x0, 0x84, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, [0x0, 0x0, 0x20, 0x0, 0x0, 0xbf1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x5a9, 0x4000000000000000, 0x0, 0x0, 0x0, 0x10000, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x4, 0xd) ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0xfffffff7effffd05, &(0x7f00000001c0)) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000400)=ANY=[@ANYRES16=r3, @ANYBLOB="01002bbd7c9a031dab849f7000fedb0019000d0101000000000000001800100000a2abb5828e4500000000"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket(0x2, 0x1, 0x0) listen$auto(0x3, 0x81) getsockopt$auto(r4, 0x6, 0x23, 0x0, &(0x7f00000000c0)=0x28000) sendmsg$auto_NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000825bd7000fddbdf2559000000060066004e22000004001180"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000095) 7.288106395s ago: executing program 1 (id=1653): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x189400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x5}, 0x3, 0xf8, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) mmap$auto(0xfffffffffffffffc, 0x1002000d, 0xdf, 0x20eb1, 0x40000000000a5, 0xffffffffffffff49) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) ioctl$auto_FIFREEZE(r1, 0xc0045878, 0x12) socket(0x37, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x2, 0x0) write$auto_ftrace_subsystem_filter_fops_trace_events(r2, &(0x7f00000000c0)="7220bc50dde37129", 0x8) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) 7.19334785s ago: executing program 0 (id=1654): mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00", @ANYRES16=r0, @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40800) r1 = gettid() kill$auto(r1, 0x31) syz_clone(0x0, &(0x7f0000000680), 0x0, 0x0, &(0x7f0000000740), 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x103003, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, 0x0, 0x80200, 0x0) 5.930078527s ago: executing program 0 (id=1655): r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r0, 0x41015500, &(0x7f0000000080)={"44cb9bf73ee4f7d17375d0a20200fc097204973ce5c568f45cf3a37f00073e797cd85f52c60300259f0f496b584d7480859a383753a492b262cd2e665fea37decc05000020000000001eee4def7500006344c1b5ba8cd74d78b58200000000001000000001000004000000004000", "780700e6cfac240fa640931102b4c630bc5601fb47fa67124586bd24165be85c89ed2955a83b4f3993c0f4f3a6e054fed14a933119c64d9d923ef32ce561acad10f499213cd61be3b68dcaf3e5f074ce961d6a33c481d540e5282df56757d500", 0x5}) ioctl$auto_USB_RAW_IOCTL_RUN(r0, 0x5501, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000580)='/proc/self/fail-nth\x00', 0x5ef402, 0x0) sendmmsg$auto(r1, &(0x7f0000000540)={{&(0x7f0000000300)="a2d04fada76e4f441e72e96b403a5238a9f8f148de8d16fbccd7e1ddcc5b3d5e6e9acfb826e935", 0x3, 0x0, 0x3, &(0x7f0000000440)="f499fce9bbc7cfbf6ed65626687ce99a1ab2ed98cfc77919218c8329aa2863b2131a5ce2d53ee98d8e0ac7a3064c7828e76675d8a142135d6d2eb49f2e9e9920d7146cf1e607b415e730a13ab622dca38c3575881996a533f4f212004e3f64dac8098d15c96dddcd00c90e74718b39ba0c03bd20e9dc18d1dce60ef091deb67491e410a2b03772bbdc0a95911b1369c7b92bd00d5a27112061f7d42b099d62a33493b67b171ae9d902c1bd25164cb1f4fb6c66fe962056b43c34338b8f3f1a7997e70c8ebfe01a439a7e147d3af78243f5ef18f15c835d20ae108804528f03184d5f0c78ba2844b527e20dde", 0x8, 0x9}, 0xfffffffa}, 0x0, 0x6dcf) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8800, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000240)={0x44, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_RADIO_NAME={0x2d, 0x11, '/P\x13jE\f\xf9r\xf5\xa3\xd2\x84y\xf9*\x9b\"\x1c\xa4l-\x19\xfd\xa4\xf4y\x02\xc2\x96\xfa\x84L\x12\xcd\x83\xf7\x12\xd3\xc4\x1e]'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(r3, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, 0x0, 0x20004000) unshare$auto(0x40000080) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) pread64$auto(r5, 0x0, 0x0, 0x9) read$auto_mon_fops_text_t_mon_text(r5, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x0, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r6, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x1dfbdb30) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/current_tracer\x00', 0x41, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/037/001\x00', 0x630001, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 5.929332931s ago: executing program 3 (id=1656): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$auto_SO_RCVTIMEO_NEW(r0, 0xd2a, 0x42, &(0x7f00000004c0)='/proc/sys/fs/file-nr\x00', &(0x7f0000000500)) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0xf87b, 0x7000000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) r3 = accept$auto(r2, 0x0, 0x0) write$auto_tty_fops_tty_io(r2, &(0x7f00000001c0)="976f09bd689a850edbe36136c8535f59333128", 0x13) sched_get_priority_min$auto(0x40) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, 0x0, 0xb49dc2, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000002140)='/proc/sys/fs/file-nr\x00', 0x0, 0x0) socket(0x1e, 0x2, 0x80000000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/usb/drivers/snd-usb-6fire/new_id\x00', 0x800, 0x0) read$auto(r4, 0x0, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x10084) waitid$auto_P_PID(0x1, 0x0, &(0x7f0000000380)={@siginfo_0_0={0x9, 0x0, 0xf7fffff8, @_sigsys={&(0x7f0000000300)="6aeb039c15e548c404e5d081d65b790d6d4bfe153bb566ee57ae092e2a1bc573988309f09e93b51dbde41fe8a6cdd1cae85585948e97ec8bbe5be41aa5cc71f3327c57af91c28912da0369e3bea8f59ed07b8190400444eb334412ef869cef72de48502c4fd5", 0x5, 0x9}}}, 0xfffff800, &(0x7f0000000400)={{0x9, 0x8}, {0x10}, 0xde, 0x100000000, 0x10001, 0x8008, 0x10001, 0x1, 0x2, 0x3, 0x1, 0x0, 0x3b5f0d3, 0x1, 0x100, 0x2}) sendmmsg$auto(0x3, 0x0, 0x2, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = open(&(0x7f0000000800)='./file0\x00', 0xa2240, 0x154) fcntl$auto(r5, 0x400, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aa38) close_range$auto(r3, 0x8000, 0xfffffffe) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop6\x00', 0x14f682, 0x0) fsync$auto(r6) mkdir$auto(&(0x7f0000000280)='./cgroup.net/\f\x00\x00\x00\x00', 0xa3) select$auto(0x9, &(0x7f0000000140)={[0xca, 0x9, 0x3, 0x4, 0x80000001, 0x97c, 0x4, 0x800, 0x80000000, 0x200, 0x0, 0x2fac, 0x5, 0xb7, 0x9, 0x6]}, &(0x7f0000000540)={[0x8, 0xffff, 0x80000000, 0xa8, 0x8, 0x5, 0xffffffffffffff9e, 0x5, 0x4, 0x1, 0x5, 0x1ff, 0x1, 0x8001, 0x5, 0x8000000000000000]}, &(0x7f0000000280)={[0x1, 0x2, 0x60, 0x5, 0x7ffffffe, 0x4, 0x46c2, 0x2, 0x7, 0x0, 0x0, 0x3, 0x4, 0x664, 0x1, 0x200]}, &(0x7f0000000200)={0x5, 0xfffffffffffffffc}) 5.673491667s ago: executing program 1 (id=1657): mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r0 = socket(0x2, 0x1, 0x106) setsockopt$auto(r0, 0x6, 0x1e, 0x0, 0x7) syz_genetlink_get_family_id$auto_tipcv2(0x0, r0) socket$nl_generic(0x10, 0x3, 0x10) setrlimit$auto(0x0, &(0x7f0000000000)={0x1, 0xfb3}) sigaltstack$auto(&(0x7f0000000180)={0x0, 0x80000001, 0x40b4}, 0x0) sigaltstack$auto(&(0x7f0000000080)={0x0, 0x2, 0x4}, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = semctl$auto(0x2, 0x9, 0x939, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000009c0)={0x274, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_KEY={0x242, 0x30, 0x0, 0x1, [@nested={0x5a, 0x148, 0x0, 0x1, [@generic="ed570a541f7b1c0bd1b0d7ebcd27eb80936e986826c82f23607e0804923887f0237976de9dc348dcf05bc7252e7610f4e94d", @nested={0x4, 0x14a}, @typed={0x8, 0x9a, 0x0, 0x0, @ipv4=@local}, @typed={0x17, 0x110, 0x0, 0x0, @str='/proc/self/pagemap\x00'}]}, @generic="2a37d9cf718fd26f87e9fd12bcd871f79069e0af57e4d00636a415ecc9b0819c20fa8b2e6fcc621fcae2e16dd56383aa15a5696b93a5b393e47cfcb1634ed805152b36f53235e401931d5662dd7586a02db9ab28466f2b80baa1e4d06861f14c51ee866bfe18f689d9eea1fa5a0599d07c070f61b9bc1e25fcef211ed03c", @nested={0x24, 0x92, 0x0, 0x1, [@typed={0x8, 0x42, 0x0, 0x0, @pid}, @typed={0x14, 0xb8, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x4, 0x11c}]}, @generic="bc4e", @generic, @nested={0xfd, 0x1f, 0x0, 0x1, [@typed={0x8, 0x82, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @generic="229b4d5838c462be6eaec64306d31af4b2fc20a498184cc853188352ddc391a82b0e3945baa39f0a0e0058ab275ba62ffac80bcaff36a46499f0e155be9b289627027dee5e57a99bbd039b1e7f349da46627c1ea3dcb4b1e3821516bd1ae80ad94960b564d711aaa9996d0803e605aabcfdbcd96de8faa9458e8501f4ca669912b5a7a5381730acadf0c67f4dc4d48b49dbceeaae65ef123ac0af12e08d7c30e7ee83e49fb5fa645292d95193d32e5a5174ff15147c63442b9656cc2cf153ba59d4c32a4f000e91413d0e0ae76b4c34566e3f3060d6081054d76ddf8d3be32ae97", @nested={0x4, 0xc9}, @typed={0x4, 0x140}, @typed={0x8, 0x2d, 0x0, 0x0, @pid=r1}]}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x14}}, @generic="09f2b646bf9ce14b00a95f667a064a99faa891d93fe26c2b527de138c78733e7324d24123bd5837bc83a"]}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_LEVEL={0x4}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0xc9e6}]}, 0x274}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone3(&(0x7f0000000400)={0x1045100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execveat$auto(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) io_uring_setup$auto(0x1, &(0x7f0000000140)={0x9, 0x0, 0x4, 0x4cbd, 0x10, 0x4, r2, [0x2, 0x7, 0x5], {0x4, 0x2, 0x3, 0x20000000, 0x2, 0x4, 0xff, 0xfff, 0x6}, {0x7, 0xedea, 0x4f, 0xe7ab, 0x1ff, 0x6, 0x1, 0xd, 0xa1f}}) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, r2, 0x8004) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x4d, 0x0) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x6, 0x0, 0x0, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) 4.877347753s ago: executing program 2 (id=1658): mmap$auto(0xfffffffffffffffa, 0x1, 0xdf, 0xeb1, 0x401, 0x8003) rseq$auto(0x0, 0x1a, 0x5d7, 0x2) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendto$auto(0x3, 0x0, 0x2000f, 0x0, 0x0, 0x1c) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x8000800) copy_file_range$auto(0xffffffffffffffff, &(0x7f0000000340)=0x5, r1, &(0x7f0000000380)=0xd62, 0x7, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/034/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x18, 0x10, 0x808, 0x7fb, &(0x7f0000000340)}) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), r2) sendmsg$auto_NFC_CMD_DISABLE_SE(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r4, 0xc08, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x9}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008094}, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r5 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) writev$auto(r5, &(0x7f0000000140)={0x0, 0x5}, 0x5) r6 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE_OLD(0xffffffffffffffff, 0x5423, &(0x7f0000000440)="002f80ce438dc7e603f0b7a6067f41576cc19dc24b459e69b05dfa9eba540b47fd877cd9a9cbe1ce996aca0cf78f8dd358e105183018bbd49e72a48e06e80a63c0591e726372310c6e7384e48fcb6b67e16e53766708eebda1240d48cc109058cb288be330e82b55c58e344cdbcd072798e325e59e5195f5ad19ada69accd4b4577a6e4ecef8889e8686fd042f97a79a6874353ec9cede4744c079526aa5fdd69d11c3e9281214eea7600c1f0134267f8c3214ac4964a8ab1902dcab2a35bf483b0913a2fff749ca0f8aa7297200"/221) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x2}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) ioctl$auto_SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r7 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/io\x00', 0x800, 0x0) read$auto_proc_single_file_operations_base(r7, &(0x7f00000000c0)=""/14, 0xe) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x40401, 0x0) 4.762753853s ago: executing program 3 (id=1659): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = open(&(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x1c5082, 0x18) open_by_handle_at$auto(r0, &(0x7f0000000140)={0x8, 0x30001, "b190a905237d4b53"}, 0x42) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x20041, 0x9, 0x2}, 0x18) socket(0x1d, 0xa, 0xff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) socket(0xa, 0x5, 0x0) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCGMASK(r2, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0xffffffffffffff95}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:04.0/numa_node\x00', 0x1a3b02, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$auto_KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, 0x0) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) socket$nl_generic(0x10, 0x3, 0x10) ioperm$auto(0x5, 0x1, 0x3) tee$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x20000008000) socket(0x21, 0x2, 0x2) write$auto(0x3, 0x0, 0xffd8) 3.67702499s ago: executing program 0 (id=1660): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f0000000cc0)='/sys/kernel/tracing/trace_options\x00', 0x442, 0x0) mknod$auto(0x0, 0xcb, 0xfffffffa) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) preadv2$auto(r1, 0x0, 0x6, 0xffffffffffffffff, 0x4, 0x2e) timerfd_create$auto(0x0, 0x0) socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) io_uring_setup$auto(0x86, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) r4 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000240), 0x75d801, 0x0) ioctl$auto_LOOP_CTL_ADD(r4, 0x4c80, 0xfffffffffffffffd) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000001280)='/dev/v4l-subdev0\x00', 0x101000, 0x0) mount$auto(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\x1ei$\xc45\xed\b\xf2\xc5Ts\x17t!\xcd\x18\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9\xe8\xb2\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6E*\xc9\xdd\tq\xdbAX\xf6\xfaD\xcdz\xbc~\xf30LE\xb5\x18Wf\xd3\x9b\\\x1c\xbb^\xfb9\xe5\x1b:\xa4\xdd\x81\x91\\\xbc\x1fUl\xfa)\xbf\x9dPV\xae\xa9\x9c)\x01|\xfe\xd0!Rx\a\xc4\xb1$\x8eE\xc2j\x83sLS\xa8H\xf6\xf2,R\x90:\x8fx\xab\x90\xfe$h\x80!\xe2\nY#\xee\x1b}O=\x8bn\xd7zZ\x18\xa7\x9e~\x94k\x8e\xdba\xf2\xc3G\x8egR3\x1d\x01J\x87\x14(}\f\xb1}%N|z,\xbe\x1fB\xd3\xeb\xec\x81X\x8f\x97\x95\xfd\xed\xe6wt\x1d\xb3\xa8\xfb)L~}\x9f\xbf\xd0\xc9\x9d\x82-C\xc3Ez@\x8c\xbf\xa2 \x88\\\r6M\x83', 0x4, 0x0) r5 = ioctl$auto_SIOCSIFHWADDR2(0xffffffffffffffff, 0x8924, &(0x7f0000000080)="462d01365d2e118c003758e78bb803e4ef268e6e5fd4d50b0e2f3905f5f05577da3da026a56d8ba6362498c29cd8b4b1b53836ddf449c692caf2957f103cf91a9d6dc43289aa453ed5767c92706ab80de49182bbbf68803461576dbfd7ba8c2da027e690a7642adb2adfc5e50b000c28f62159b5891e46c2c4a318dae679") r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_SET(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001700)={0x18, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004014}, 0xc050) sendmsg$auto_TIPC_NL_KEY_FLUSH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r7, 0x300, 0x70bd28, 0x25dfdbfe}, 0x14}}, 0x80c0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x77, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$auto_FITHAW(r0, 0xc0045878, 0xc3b1) ioctl$auto(0x3, 0x40047452, 0x1) 3.435011939s ago: executing program 2 (id=1661): mmap$auto(0x0, 0x400008, 0xdf, 0xfffffffffffffc10, 0xffffffffffffffff, 0x800008000) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r1 = fcntl$auto(r0, 0x400, 0x1) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fcntl$auto(0x3, 0x8, 0x9ebfffffffffffff) fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cpu.pressure\x00', 0x183142, 0x0) sendfile$auto(r1, r2, 0x0, 0xc01) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb5, 0xffffffffffffffff, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) keyctl$auto(0x4, 0xfffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0x8000000e) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) r3 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000f40), 0x2100, 0x0) ioctl$auto_BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f0000000f80)=[{0x3ff, 0x2, 0x8000000000000000}, {0x5, 0x5, 0x2}, {0xa6, 0x1, 0x2}]) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x51c, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) mmap$auto(0x3, 0x9, 0x7, 0xeb1, 0x404, 0x10008000) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r4, &(0x7f0000000840)="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", 0xdd4) write$auto(0x3, 0x0, 0xfffffdef) 2.585761497s ago: executing program 1 (id=1662): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, 0x0) sysfs$auto(0x2, 0xd, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) read$auto_usbfs_devices_fops_usb(r1, 0x0, 0x0) read$auto_regulator_summary_fops_(r1, 0x0, 0x0) read$auto_regulator_summary_fops_(r1, 0x0, 0x0) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) sendmsg$auto_NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008800}, 0x29bcaee1fc06ed6c) sendmsg$auto_NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000019c0)={&(0x7f0000000480)={0x43c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY_NAME={0x13, 0x2, '-{%{#/@(Q@\'%#]\x00'}, @NL802154_ATTR_SEC_DEVICE={0x413, 0x2e, 0x0, 0x1, [@nested={0x77, 0x133, 0x0, 0x1, [@generic="c4e87664598c3a557d07178986874c0ad4c8a9bec52f4cc11b7d95e88b2de3b9d21cf4d72caa0156e5389e61ebdb5efa5a707df0a09c728a463d14b78f501ccf47fb2dc7da133bf9e80b4210553606f416bbd52cd335e51e3daaced76c0685c96b80a981d886f48fd57624", @typed={0x8, 0x11d, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x28}}]}, @nested={0x49, 0x13b, 0x0, 0x1, [@nested={0x4, 0x110}, @nested={0x4, 0x53}, @generic="da9ea7f431c9b01a7829184973d5fdb47d4a07b485cdb5d7d74e36f659033aa990399b2e3a361944bfd084f7d731135a6d10c964fdd6", @generic="7ba821e6252a57"]}, @nested={0x156, 0xdf, 0x0, 0x1, [@nested={0x4, 0x1c}, @typed={0x8, 0x30, 0x0, 0x0, @fd}, @generic="a305d04aa99bf401623a7f90e953c91098f43afbf2615ad978d93e5229769db21dc7cc1a1e80123efe0060d90aa52d0fcfce5d71009f39496066342ce79073b4dea080e88a3d4827cc8c977ae8c03f7d91a9e0262d6df36527e6684d515059b650f31a2caf58a6459e3144ce0c0c536bfcd74cbe484de90966f6c43ad7428b44917134654f6617731560bc99db3ae32752f85bcc546d7cd3aec18c7d2ae188fad63ab13fdef6455b7ac2bf455a218bea9c392ed1b58eda6032402fe5121c46398e72f84da66d0626cbba62371fa5cc10863e25675b654a9d2fe6", @typed={0x8, 0xeb, 0x0, 0x0, @uid}, @typed={0x8, 0x48, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x23}}, @nested={0x4, 0x122}, @typed={0x45, 0x145, 0x0, 0x0, @binary="b3b0184b04fc7caae62a9a716e6b4c02e06461186b11fc505d42ae67fa79902fbbf473e52bd903595214dae7c467ec0a064f57610c9a4880548048bf4cb5c073ba"}, @nested={0x4, 0xb2}, @typed={0xa, 0x7a, 0x0, 0x0, @binary="77fe466513b9"}]}, @generic, @generic="f085bef3831a8a7a253e5e7b33748c64aa4fe8e38cf1d4b9540a9141ece61ed53e2f3c3cab95f288b57a755bf920d97c5c1900b32298abd81e82cfbbe6f3528a2a7db8a06b94ea9bc7e03544c3f9ad680eb566f52d8f48a3500efadcdc8ae42eb84126fbb3af0f867d2714dbc8130c1eb1024d609a921944a188e4a2c7f7e2f0e222f987133949f58bc382a48da2f3de88297aae1cb57abbe211f84aa039b8be3c9ec6fce931acf2c93e64b98417562ce48d", @generic="eb43333cd536da6b045650a72f9023ef393810a15970fe1b7a80961515c0a96c24cdff11bf440965776a10b93337604a791964f354d8732c3832d2497593c338be124b57b865f6c0525db3ffbf46974a1acc268d23d8256c882eb0d8b53752201def778d", @typed={0xc, 0x11d, 0x0, 0x0, @u64=0xfffffffffffffffd}, @generic="91f53865f4f7aa16a9bad6d13815425dbc0bd8c966367765d8ad48cd75b04a3941262d9b356a573f4099ab8ba34b2e646b3f67863a076e7cf89fd3f1206aadc22c919916c775f9c324691a0246cf22a3f6776746d4d69a81ae24b06e26c9f8540acce76d899bd8208acba9c23048c0d9e42e5076cee1f3166ab99c5ff5d97fa27155225bdf71edc46d3ba64c52193da6e7d61260c6f951cd40834d2af530eefec8d63248433ec2aa62b1e682a2974b08b123ecb1aa8dd72748b453b260ba404229936a47236ec6f0f911688b3393c68180"]}]}, 0x43c}, 0x1, 0x0, 0x0, 0x804}, 0x0) 2.364940148s ago: executing program 2 (id=1663): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x301200, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4068aea3, &(0x7f0000000040)={0x80}) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) r3 = socket(0x2, 0x1, 0x0) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x5, 0x20000000) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/available_events\x00', 0x8000, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) sendmsg$auto_NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="01002cbd7000ffdbdf25120000003c012c809400028024000080080002000603000008000100ff000000080002000700000008000200090000001c00008008000100ffff000008000200050000000800010005000000240000800800020002000000080002000c000000080001000000000008000100070000002c0000800800020007000000080001000900000008000100080000000800020001000000080002000010000008000100010000000800010004000000940002801c0000800800010001000000080002000900000008000100020000000c00008008000200030000002c00008008000100060000000800020000000000080002004d2bffff08000100e700000008000100010000000c000080080002000900000014000080080002000900000008000200050000001c00008008000100ff01000008000100090000000800010027000000"], 0x150}, 0x1, 0x0, 0x0, 0x40010}, 0x20048004) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\b\x00', @ANYRES16=r4, @ANYBLOB="00012cbd7000fcdbdf255f00000008002700090000000600120106000000050030010c"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x44004) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x1c00, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x5}, 0x3, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0xa) write$auto(0x3, 0x0, 0x100085) 2.122007372s ago: executing program 1 (id=1664): mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00", @ANYRES16=r0, @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40800) r2 = gettid() kill$auto(r2, 0x31) syz_clone(0x0, &(0x7f0000000680), 0x0, 0x0, &(0x7f0000000740), 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x103003, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, 0x0, 0x80200, 0x0) 2.080975759s ago: executing program 0 (id=1665): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getcwd$auto(0x0, 0x7) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000) connect$auto(0x3, &(0x7f0000000080)=@qipcrtr={0x2a, 0x0, 0x8000}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x1e, 0x0, 0xfffffeff) socket(0xa, 0x801, 0x106) mmap$auto(0x0, 0x40, 0x40000e2, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) r0 = fcntl$auto(0x0, 0x407, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xcb1, r0, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty51\x00', 0x80, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0xf3, 0x4, 0x8000000000000000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyp6\x00', 0xa0102, 0x0) read$auto(r1, 0x0, 0x6) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) sendmsg$auto_IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={0x0}, 0x1, 0x0, 0x0, 0x400c040}, 0x1000c0d5) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x2404c800) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, 0x0, 0x84080, 0x0) mlockall$auto(0x7) socket(0x15, 0x5, 0x0) 1.278503602s ago: executing program 3 (id=1666): waitid$auto(0x8, 0xffffffffffffffff, &(0x7f0000000100)={@siginfo_0_0={0x5, 0x98, 0x10, @_timer={0x0, 0x2, @sival_int=0x7, 0x2}}}, 0x3, &(0x7f0000000180)={{0xfffffffffffffff9, 0x80}, {0x2, 0x6}, 0x4, 0x8, 0x1, 0x3, 0x0, 0x8000, 0x800000080000000, 0x7, 0xb7, 0x5d9, 0x5, 0x7ff, 0xf}) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x31) mmap$auto(0x0, 0x1, 0xfd5, 0x12, r1, 0x0) ioctl$auto_USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000040)=0x6ae) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r2, 0x4008af25, 0x0) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x9416, 0x1, 0x7, 0x6, "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"}, 0x6, 0x3, 0xff) rseq$auto(&(0x7f0000000b80)={0x2, 0x7, 0x9, 0x9, 0x10001, 0x2}, 0x2, 0x871, 0x2e0e) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0xa, 0x1, 0x84) getsockopt$auto(r3, 0x84, 0x3, 0x0, 0x0) r4 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r4, 0x0, 0xfffffdf1) linkat$auto(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) r5 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x250202, 0x0) timer_create$auto_CLOCK_BOOTTIME(0x7, &(0x7f00000003c0)={@sival_ptr=&(0x7f0000000240)="4fa110d7712f55a82b2fffe2326caef0392be26695a49217aaecee2c7d6140125ba08680c87ffd5c60c3928cbd412feb89ba0d4a1a", @inferred=r5, 0x4, @_sigev_thread={&(0x7f0000000300)=&(0x7f00000002c0)=0xe, &(0x7f0000000340)="840321bda1bc8aa3d538e4ff8cca4f5e0d682d9ad20602cd9a111fb9251fd72b3933189a422bf40136ac6c1907b69411dee306973d12b4995840f7943c60da00f8f846f973c99fc248dd238f381806ea1a9b0a0e"}}, &(0x7f0000000400)=0xfffffc01) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x154) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x0) mprotect$auto(0x0, 0x8000000000000001, 0x8) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x8600, 0x0) fcntl$auto(0x3, 0x4, 0xa553) 953.988508ms ago: executing program 1 (id=1667): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, 0x0) sysfs$auto(0x2, 0xd, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) read$auto_usbfs_devices_fops_usb(r1, 0x0, 0x0) read$auto_regulator_summary_fops_(r1, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto_regulator_summary_fops_(r1, 0x0, 0x0) r2 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, 0x0, 0x123000, 0x0) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) mkdir$auto(0x0, 0x8001) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r1) sendmsg$auto_NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="84060000", @ANYRES16=r3, @ANYBLOB="04002cbd7000fddbdf253500000010010e8078000300eacb8ae75dcd20b156bca088b2b073aaec3f7152b07a3a431dfd3b67706bea773a468fbe596384b7e2b4775d4fb7edad266780a010169189d86230e298a341b580461b13e79e74b2894528c5fba68a021404761cba2351cb30c6100f6194078d2836262a220a9387fd893bfb1c1ca0eff41eab928b000200b81ce990d543d95d6c9751a41d38578fb81a8c658fb272a7a7919b62883972fc1ac2f382faca525798156b382af838afaff77490ef5e05e4487a3482bcdb512a1a52782f950bcafddaf5db764dd0539e8ab0ff055fbbfcc97d3ca81d77e46aba95c0eee4263e35ca8ec476e9e882617a3d6dd3fb09feba95e8980d944bf847782391b71fc4d0780004000100040001000400410020001b8004000200040002000400020004000300050001000e000000040003003c00818005000100e20000000500010007000000050002000000000005000100ff000000050002007000000005000100010000000500010006000000"], 0x184}, 0x1, 0x0, 0x0, 0x20008800}, 0x29bcaee1fc06ed6c) mkdir$auto(&(0x7f0000004440)='./file0\x00', 0x1) r4 = eventfd$auto(0xf70b) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000440), r1) socketcall$auto_SYS_SOCKET(0x1, &(0x7f0000001540)=0x4) sendmsg$auto_NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000001a00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000019c0)={&(0x7f0000000480)={0x454, r5, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY_NAME={0x13, 0x2, '-{%{#/@(Q@\'%#]\x00'}, @NL802154_ATTR_SEC_DEVICE={0x42c, 0x2e, 0x0, 0x1, [@nested={0x77, 0x133, 0x0, 0x1, [@generic="c4e87664598c3a557d07178986874c0ad4c8a9bec52f4cc11b7d95e88b2de3b9d21cf4d72caa0156e5389e61ebdb5efa5a707df0a09c728a463d14b78f501ccf47fb2dc7da133bf9e80b4210553606f416bbd52cd335e51e3daaced76c0685c96b80a981d886f48fd57624", @typed={0x8, 0x11d, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x28}}]}, @nested={0x49, 0x13b, 0x0, 0x1, [@nested={0x4, 0x110}, @nested={0x4, 0x53}, @generic="da9ea7f431c9b01a7829184973d5fdb47d4a07b485cdb5d7d74e36f659033aa990399b2e3a361944bfd084f7d731135a6d10c964fdd6", @generic="7ba821e6252a57"]}, @nested={0x156, 0xdf, 0x0, 0x1, [@nested={0x4, 0x1c}, @typed={0x8, 0x30, 0x0, 0x0, @fd=r2}, @generic="a305d04aa99bf401623a7f90e953c91098f43afbf2615ad978d93e5229769db21dc7cc1a1e80123efe0060d90aa52d0fcfce5d71009f39496066342ce79073b4dea080e88a3d4827cc8c977ae8c03f7d91a9e0262d6df36527e6684d515059b650f31a2caf58a6459e3144ce0c0c536bfcd74cbe484de90966f6c43ad7428b44917134654f6617731560bc99db3ae32752f85bcc546d7cd3aec18c7d2ae188fad63ab13fdef6455b7ac2bf455a218bea9c392ed1b58eda6032402fe5121c46398e72f84da66d0626cbba62371fa5cc10863e25675b654a9d2fe6", @typed={0x8, 0xeb, 0x0, 0x0, @uid}, @typed={0x8, 0x48, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x23}}, @nested={0x4, 0x122}, @typed={0x45, 0x145, 0x0, 0x0, @binary="b3b0184b04fc7caae62a9a716e6b4c02e06461186b11fc505d42ae67fa79902fbbf473e52bd903595214dae7c467ec0a064f57610c9a4880548048bf4cb5c073ba"}, @nested={0x4, 0xb2}, @typed={0xa, 0x7a, 0x0, 0x0, @binary="77fe466513b9"}]}, @generic, @generic="f085bef3831a8a7a253e5e7b33748c64aa4fe8e38cf1d4b9540a9141ece61ed53e2f3c3cab95f288b57a755bf920d97c5c1900b32298abd81e82cfbbe6f3528a2a7db8a06b94ea9bc7e03544c3f9ad680eb566f52d8f48a3500efadcdc8ae42eb84126fbb3af0f867d2714dbc8130c1eb1024d609a921944a188e4a2c7f7e2f0e222f987133949f58bc382a48da2f3de88297aae1cb57abbe211f84aa039b8be3c9ec6fce931acf2c93e64b98417562ce48d1639e49b6cfb2b75cd8e0e115c7980ea1ece2e168ee6cec703", @generic="eb43333cd536da6b045650a72f9023ef393810a15970fe1b7a80961515c0a96c24cdff11bf440965776a10b93337604a791964f354d8732c3832d2497593c338be124b57b865f6c0525db3ffbf46974a1acc268d23d8256c882eb0d8b53752201def778d", @typed={0xc, 0x11d, 0x0, 0x0, @u64=0xfffffffffffffffd}, @generic="91f53865f4f7aa16a9bad6d13815425dbc0bd8c966367765d8ad48cd75b04a3941262d9b356a573f4099ab8ba34b2e646b3f67863a076e7cf89fd3f1206aadc22c919916c775f9c324691a0246cf22a3f6776746d4d69a81ae24b06e26c9f8540acce76d899bd8208acba9c23048c0d9e42e5076cee1f3166ab99c5ff5d97fa27155225bdf71edc46d3ba64c52193da6e7d61260c6f951cd40834d2af530eefec8d63248433ec2aa62b1e682a2974b08b123ecb1aa8dd72748b453b260ba404229936a47236ec6f0f911688b3393c68180"]}]}, 0x454}, 0x1, 0x0, 0x0, 0x804}, 0x0) mount$auto(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x5, 0x0) ioctl$auto_FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) 877.368722ms ago: executing program 2 (id=1668): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cpu.max\x00', 0x20b02, 0x0) io_uring_register$auto_IORING_UNREGISTER_FILES(r0, 0x3, &(0x7f0000000080)="193f32b995f0ecb4ddf8cd83baeda5c352a745214ad880cc4c561670de2d13131c656d339507302cd18f379f551569932d17bb17195ecfc677eb23ac801128003ef54e78817f1a", 0x3) sendfile$auto(r0, r0, &(0x7f0000000000)=0x3, 0xad6) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r4 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={0x5, 0x21ea, 0x7ff, 0x3, 0x0, 0x80000001, r4}, 0x6f4) read$auto(r3, 0x0, 0x20) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x48041, 0x0) write$auto(r5, 0x0, 0x6) unshare$auto(0x40000080) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001180)='/sys/devices/virtual/block/zram0/compact\x00', 0x20001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000000)="b2", 0x1) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) sendfile$auto(r1, r7, 0x0, 0x1) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x1, 0x4a, 0x0, 0x9) socket(0x10, 0x80002, 0x0) bind$auto(r2, &(0x7f0000000140)=@generic={0x1a, "9300000004000000000000000091"}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/vhci_hcd.0/usb9/9-0:1.0/usb9-port7/over_current_count\x00', 0x400000, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) 0s ago: executing program 1 (id=1669): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/teql0/queues/tx-0/byte_queue_limits/limit_min\x00', 0x88282, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) r1 = fcntl$auto(0xffffffffffffffff, 0x20007, 0xa553) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) getsockopt$auto_SO_MEMINFO(r1, 0x8, 0x37, 0x0, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) timer_delete$auto(0x1) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x1e, 0x1, 0x0) close_range$auto(0x0, 0x5, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) ioctl$auto_KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000180)={0x7}) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r4, 0xc0045004, &(0x7f0000000000)) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0xfffffffffffffffe, 0x240007, 0x17) madvise$auto(0x0, 0x2003f2, 0x15) r5 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYRES8=r3], 0x3c}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) kernel console output (not intermixed with test programs): 28][ T7044] l2tp_nl_cmd_tunnel_create+0x47a/0x990 [ 199.410693][ T7044] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 199.410760][ T7044] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 199.410798][ T7044] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 199.410843][ T7044] genl_family_rcv_msg_doit+0x209/0x2f0 [ 199.410880][ T7044] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 199.410916][ T7044] ? genl_get_cmd+0x194/0x580 [ 199.410979][ T7044] ? bpf_lsm_capable+0x9/0x10 [ 199.411029][ T7044] ? security_capable+0x7e/0x260 [ 199.411087][ T7044] ? ns_capable+0xd7/0x110 [ 199.411134][ T7044] genl_rcv_msg+0x55c/0x800 [ 199.411174][ T7044] ? __pfx_genl_rcv_msg+0x10/0x10 [ 199.411210][ T7044] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 199.411279][ T7044] netlink_rcv_skb+0x158/0x420 [ 199.411331][ T7044] ? __pfx_genl_rcv_msg+0x10/0x10 [ 199.411368][ T7044] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 199.411438][ T7044] ? netlink_deliver_tap+0x1ae/0xd30 [ 199.411496][ T7044] genl_rcv+0x28/0x40 [ 199.411524][ T7044] netlink_unicast+0x5aa/0x870 [ 199.411582][ T7044] ? __pfx_netlink_unicast+0x10/0x10 [ 199.411651][ T7044] netlink_sendmsg+0x8c8/0xdd0 [ 199.411719][ T7044] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.411779][ T7044] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 199.411845][ T7044] ____sys_sendmsg+0xa5d/0xc30 [ 199.411879][ T7044] ? copy_msghdr_from_user+0x10a/0x160 [ 199.411926][ T7044] ? __pfx_____sys_sendmsg+0x10/0x10 [ 199.411971][ T7044] ? __pfx_futex_wake_mark+0x10/0x10 [ 199.412031][ T7044] ___sys_sendmsg+0x134/0x1d0 [ 199.412081][ T7044] ? __pfx____sys_sendmsg+0x10/0x10 [ 199.412128][ T7044] ? futex_private_hash_put+0x160/0x1b0 [ 199.412213][ T7044] __sys_sendmsg+0x16d/0x220 [ 199.412260][ T7044] ? __pfx___sys_sendmsg+0x10/0x10 [ 199.412305][ T7044] ? __x64_sys_futex+0x1e0/0x4c0 [ 199.412372][ T7044] do_syscall_64+0xcd/0xf80 [ 199.412454][ T7044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.412489][ T7044] RIP: 0033:0x7f6583d8f7c9 [ 199.412516][ T7044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.412550][ T7044] RSP: 002b:00007f6584b3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.412582][ T7044] RAX: ffffffffffffffda RBX: 00007f6583fe6090 RCX: 00007f6583d8f7c9 [ 199.412604][ T7044] RDX: 0000000004000000 RSI: 0000200000000140 RDI: 000000000000000d [ 199.412624][ T7044] RBP: 00007f6583e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 199.412644][ T7044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.412663][ T7044] R13: 00007f6583fe6128 R14: 00007f6583fe6090 R15: 00007ffddebf9b98 [ 199.412715][ T7044] [ 200.016913][ T7053] ptrace attach of "./syz-executor exec"[5831] was attempted by ""[7053] [ 202.214064][ T7078] FAULT_INJECTION: forcing a failure. [ 202.214064][ T7078] name fail_futex, interval 1, probability 0, space 0, times 0 [ 202.317787][ T7078] CPU: 1 UID: 0 PID: 7078 Comm: syz.0.221 Not tainted syzkaller #0 PREEMPT(full) [ 202.317830][ T7078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 202.317846][ T7078] Call Trace: [ 202.317856][ T7078] [ 202.317867][ T7078] dump_stack_lvl+0x16c/0x1f0 [ 202.317923][ T7078] should_fail_ex+0x512/0x640 [ 202.317965][ T7078] get_futex_key+0x1d0/0x15f0 [ 202.318000][ T7078] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 202.318044][ T7078] ? __pfx_get_futex_key+0x10/0x10 [ 202.318083][ T7078] ? blk_finish_plug+0x53/0xa0 [ 202.318121][ T7078] ? madvise_do_behavior+0x1f4/0x530 [ 202.318158][ T7078] futex_wake+0xea/0x530 [ 202.318204][ T7078] ? __pfx___up_read+0x10/0x10 [ 202.318241][ T7078] ? __pfx_futex_wake+0x10/0x10 [ 202.318284][ T7078] ? madvise_unlock+0x16d/0x220 [ 202.318346][ T7078] ? madvise_unlock+0x7c/0x220 [ 202.318406][ T7078] do_futex+0x1e3/0x350 [ 202.318448][ T7078] ? __pfx_do_futex+0x10/0x10 [ 202.318490][ T7078] __x64_sys_futex+0x1e0/0x4c0 [ 202.318529][ T7078] ? __pfx___x64_sys_futex+0x10/0x10 [ 202.318563][ T7078] ? xfd_validate_state+0x61/0x180 [ 202.318589][ T7078] ? __pfx_ksys_write+0x10/0x10 [ 202.318642][ T7078] do_syscall_64+0xcd/0xf80 [ 202.318690][ T7078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.318720][ T7078] RIP: 0033:0x7fb38678f7c9 [ 202.318742][ T7078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.318769][ T7078] RSP: 002b:00007fb3849d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 202.318802][ T7078] RAX: ffffffffffffffda RBX: 00007fb3869e6188 RCX: 00007fb38678f7c9 [ 202.318822][ T7078] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb3869e618c [ 202.318842][ T7078] RBP: 00007fb3869e6180 R08: 00007fb387545000 R09: 0000000000000000 [ 202.318866][ T7078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.318884][ T7078] R13: 00007fb3869e6218 R14: 00007ffd1bb63820 R15: 00007ffd1bb63908 [ 202.318926][ T7078] [ 202.785106][ T7087] __vm_enough_memory: pid: 7087, comm: syz.0.214, bytes: 4398046511104 not enough memory for the allocation [ 204.750821][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.757379][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.379791][ T7118] ptrace attach of "./syz-executor exec"[5832] was attempted by ""[7118] [ 206.313910][ T7130] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 206.819383][ T7141] __vm_enough_memory: pid: 7141, comm: syz.0.226, bytes: 4398046511104 not enough memory for the allocation [ 208.352663][ T7160] usbcore.quirks: string doesn't fit in 127 chars. [ 208.385048][ T7158] binder: 7157:7158 ioctl c018620c 0 returned -1 [ 208.421198][ T7158] netlink: 28 bytes leftover after parsing attributes in process `syz.0.230'. [ 209.755416][ T7170] ptrace attach of "./syz-executor exec"[5834] was attempted by ""[7170] [ 210.558101][ T7181] nvme_fcloop: unknown parameter or missing value '7' [ 211.008516][ T7187] ptrace attach of "./syz-executor exec"[5833] was attempted by ""[7187] [ 213.296828][ T7215] cifs: Unknown parameter 'T.ŸÜÛæ¨Å¼c[ŸÐê€$âæµÈ)ü±UóÑnEó-Ê™¾l®öÚ-ºŒ -¾_€™¯Ôåáª5Z äoåé¢mžÐfwYÍhº*/ÿxDlÝ©Š×ígÕkÇAí³ùÏ7ÍØØ9’ôXöa/fê_ÿAR£ˆ™‘ÈxM ‚v¬—pÿ±$^;ôØq‡3±«£n졵-6©+e„k„¾ñÇ<°kœcÔ)n.üeMÍ÷Na¨t®ÐSMÎÆ1,' [ 213.327366][ T7215] CIFS mount error: No usable UNC path provided in device string! [ 213.327366][ T7215] [ 213.337520][ T7215] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 214.041825][ T7220] cifs: Unknown parameter 'T.ŸÜÛæ¨Å¼c[ŸÐê€$âæµÈ)ü±UóÑnEó-Ê™¾l®öÚ-ºŒ -¾_€™¯Ôåáª5Z äoåé¢mžÐfwYÍhº*/ÿxDlÝ©Š×ígÕkÇAí³ùÏ7ÍØØ9’ôXöa/fê_ÿAR£ˆ™‘ÈxM ‚v¬—pÿ±$^;ôØq‡3±«£n졵-6©+e„k„¾ñÇ<°kœcÔ)n.üeMÍ÷Na¨t®ÐSMÎÆ1,' [ 214.127374][ T7220] CIFS mount error: No usable UNC path provided in device string! [ 214.127374][ T7220] [ 214.173064][ T7224] binder: 7223:7224 ioctl c018620c 0 returned -1 [ 214.181783][ T7220] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 214.202632][ T7224] netlink: 28 bytes leftover after parsing attributes in process `syz.0.243'. [ 215.356500][ T7239] __vm_enough_memory: pid: 7239, comm: syz.3.246, bytes: 4398046511104 not enough memory for the allocation [ 216.473395][ T7253] __vm_enough_memory: pid: 7253, comm: syz.0.249, bytes: 4398046511104 not enough memory for the allocation [ 217.558254][ T7264] ptrace attach of "./syz-executor exec"[5832] was attempted by ""[7264] [ 218.500345][ T7272] binder: 7271:7272 ioctl c018620c 0 returned -1 [ 218.566201][ T7272] netlink: 28 bytes leftover after parsing attributes in process `syz.1.257'. [ 221.169293][ T7315] FAULT_INJECTION: forcing a failure. [ 221.169293][ T7315] name fail_futex, interval 1, probability 0, space 0, times 0 [ 221.208867][ T7315] CPU: 1 UID: 0 PID: 7315 Comm: syz.3.261 Not tainted syzkaller #0 PREEMPT(full) [ 221.208899][ T7315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 221.208913][ T7315] Call Trace: [ 221.208926][ T7315] [ 221.208935][ T7315] dump_stack_lvl+0x16c/0x1f0 [ 221.208977][ T7315] should_fail_ex+0x512/0x640 [ 221.209008][ T7315] get_futex_key+0x1d0/0x15f0 [ 221.209033][ T7315] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 221.209057][ T7315] ? __pfx_get_futex_key+0x10/0x10 [ 221.209083][ T7315] ? blk_finish_plug+0x53/0xa0 [ 221.209109][ T7315] ? madvise_do_behavior+0x1f4/0x530 [ 221.209133][ T7315] futex_wake+0xea/0x530 [ 221.209165][ T7315] ? __pfx___up_read+0x10/0x10 [ 221.209245][ T7315] ? __pfx_futex_wake+0x10/0x10 [ 221.209285][ T7315] ? madvise_unlock+0x16d/0x220 [ 221.209353][ T7315] ? madvise_unlock+0x7c/0x220 [ 221.209447][ T7315] do_futex+0x1e3/0x350 [ 221.209486][ T7315] ? __pfx_do_futex+0x10/0x10 [ 221.209537][ T7315] __x64_sys_futex+0x1e0/0x4c0 [ 221.209576][ T7315] ? __pfx___x64_sys_futex+0x10/0x10 [ 221.209605][ T7315] ? xfd_validate_state+0x61/0x180 [ 221.209625][ T7315] ? __pfx_ksys_write+0x10/0x10 [ 221.209670][ T7315] do_syscall_64+0xcd/0xf80 [ 221.209712][ T7315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.209735][ T7315] RIP: 0033:0x7fdd4d98f7c9 [ 221.209753][ T7315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.209774][ T7315] RSP: 002b:00007fdd4e7580e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 221.209794][ T7315] RAX: ffffffffffffffda RBX: 00007fdd4dbe5fa8 RCX: 00007fdd4d98f7c9 [ 221.209808][ T7315] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fdd4dbe5fac [ 221.209821][ T7315] RBP: 00007fdd4dbe5fa0 R08: 00007fdd4e759000 R09: 0000000000000000 [ 221.209835][ T7315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.209847][ T7315] R13: 00007fdd4dbe6038 R14: 00007ffd60a4fb00 R15: 00007ffd60a4fbe8 [ 221.209876][ T7315] [ 223.817376][ T7350] FAULT_INJECTION: forcing a failure. [ 223.817376][ T7350] name failslab, interval 1, probability 0, space 0, times 0 [ 223.900604][ T7350] CPU: 1 UID: 0 PID: 7350 Comm: syz.1.273 Not tainted syzkaller #0 PREEMPT(full) [ 223.900647][ T7350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 223.900668][ T7350] Call Trace: [ 223.900678][ T7350] [ 223.900691][ T7350] dump_stack_lvl+0x16c/0x1f0 [ 223.900750][ T7350] should_fail_ex+0x512/0x640 [ 223.900788][ T7350] ? kmem_cache_alloc_noprof+0x62/0x770 [ 223.900834][ T7350] should_failslab+0xc2/0x120 [ 223.900887][ T7350] kmem_cache_alloc_noprof+0x83/0x770 [ 223.900928][ T7350] ? __proc_create+0x2c8/0x8d0 [ 223.900982][ T7350] ? __proc_create+0x2c8/0x8d0 [ 223.901024][ T7350] __proc_create+0x2c8/0x8d0 [ 223.901071][ T7350] ? __pfx___proc_create+0x10/0x10 [ 223.901122][ T7350] ? irqentry_exit+0x1dd/0x8c0 [ 223.901151][ T7350] ? lockdep_hardirqs_on+0x7c/0x110 [ 223.901208][ T7350] proc_create_reg+0x7d/0x180 [ 223.901259][ T7350] proc_create_data+0x86/0x110 [ 223.901307][ T7350] ? __pfx_proc_create_data+0x10/0x10 [ 223.901367][ T7350] cache_register_net+0x1e0/0x5e0 [ 223.901405][ T7350] nfsd_idmap_init+0xb6/0x250 [ 223.901444][ T7350] ? __pfx_nfsd_net_init+0x10/0x10 [ 223.901496][ T7350] nfsd_net_init+0x69/0x3d0 [ 223.901558][ T7350] ? __pfx_nfsd_net_init+0x10/0x10 [ 223.901611][ T7350] ops_init+0x1e2/0x5f0 [ 223.901663][ T7350] setup_net+0x11d/0x3a0 [ 223.901712][ T7350] ? __pfx_setup_net+0x10/0x10 [ 223.901757][ T7350] ? lockdep_init_map_type+0x5c/0x270 [ 223.901791][ T7350] ? mutex_init_lockep+0x110/0x150 [ 223.901832][ T7350] copy_net_ns+0x351/0x7c0 [ 223.901888][ T7350] create_new_namespaces+0x3ea/0xab0 [ 223.901944][ T7350] copy_namespaces+0x468/0x570 [ 223.901992][ T7350] copy_process+0x2a70/0x7430 [ 223.902059][ T7350] ? __pfx_copy_process+0x10/0x10 [ 223.902117][ T7350] ? futex_private_hash_put+0x160/0x1b0 [ 223.902160][ T7350] kernel_clone+0xfc/0x910 [ 223.902212][ T7350] ? __pfx_kernel_clone+0x10/0x10 [ 223.902284][ T7350] __do_sys_clone+0xce/0x120 [ 223.902334][ T7350] ? __pfx___do_sys_clone+0x10/0x10 [ 223.902382][ T7350] ? find_held_lock+0x2b/0x80 [ 223.902442][ T7350] ? syscall_user_dispatch+0x78/0x140 [ 223.902495][ T7350] do_syscall_64+0xcd/0xf80 [ 223.902558][ T7350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.902592][ T7350] RIP: 0033:0x7fdd9638f7c9 [ 223.902618][ T7350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.902649][ T7350] RSP: 002b:00007fdd972d5fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 223.902678][ T7350] RAX: ffffffffffffffda RBX: 00007fdd965e6090 RCX: 00007fdd9638f7c9 [ 223.902699][ T7350] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040180211 [ 223.902718][ T7350] RBP: 00007fdd96413f91 R08: 0000000000000000 R09: 0000000000000000 [ 223.902737][ T7350] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 223.902756][ T7350] R13: 00007fdd965e6128 R14: 00007fdd965e6090 R15: 00007fffcc3ab5c8 [ 223.902799][ T7350] [ 226.364565][ T7293] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 228.096282][ T7407] ptrace attach of "./syz-executor exec"[5834] was attempted by ""[7407] [ 228.481979][ T7411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.276'. [ 228.565975][ T7420] netlink: 5 bytes leftover after parsing attributes in process `syz.1.276'. [ 229.398279][ T7430] futex_wake_op: syz.3.281 tries to shift op by -2048; fix this program [ 229.438067][ T7430] futex_wake_op: syz.3.281 tries to shift op by -2048; fix this program [ 229.518795][ T7430] 0x000000000001-0x000000020000 : "" [ 229.573238][ T7430] ftl_cs: FTL header corrupt! [ 229.774441][ T7437] __vm_enough_memory: pid: 7437, comm: syz.2.282, bytes: 4398046511104 not enough memory for the allocation [ 230.703857][ T5923] smpboot: CPU 1 is now offline [ 231.953452][ T7462] __vm_enough_memory: pid: 7462, comm: syz.3.287, bytes: 4398046511104 not enough memory for the allocation [ 232.684918][ T7471] ptrace attach of "./syz-executor exec"[5834] was attempted by ""[7471] [ 232.714093][ T7469] FAULT_INJECTION: forcing a failure. [ 232.714093][ T7469] name failslab, interval 1, probability 0, space 0, times 0 [ 232.986559][ T7469] CPU: 0 UID: 0 PID: 7469 Comm: syz.1.288 Not tainted syzkaller #0 PREEMPT(full) [ 232.986592][ T7469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 232.986606][ T7469] Call Trace: [ 232.986613][ T7469] [ 232.986622][ T7469] dump_stack_lvl+0x16c/0x1f0 [ 232.986666][ T7469] should_fail_ex+0x512/0x640 [ 232.986694][ T7469] ? __kmalloc_noprof+0xca/0x910 [ 232.986723][ T7469] should_failslab+0xc2/0x120 [ 232.986761][ T7469] __kmalloc_noprof+0xeb/0x910 [ 232.986793][ T7469] ? splice_from_pipe_next+0x1f7/0x5d0 [ 232.986832][ T7469] ? copy_splice_read+0x1a8/0xc20 [ 232.986872][ T7469] ? copy_splice_read+0x1a8/0xc20 [ 232.986907][ T7469] copy_splice_read+0x1a8/0xc20 [ 232.986943][ T7469] ? __pfx_pipe_to_null+0x10/0x10 [ 232.986985][ T7469] ? __pfx_copy_splice_read+0x10/0x10 [ 232.987019][ T7469] ? pipe_unlock+0x4a/0x70 [ 232.987055][ T7469] ? __pfx_splice_from_pipe+0x10/0x10 [ 232.987098][ T7469] ? find_held_lock+0x2b/0x80 [ 232.987133][ T7469] ? __pfx_copy_splice_read+0x10/0x10 [ 232.987173][ T7469] do_splice_read+0x285/0x370 [ 232.987212][ T7469] splice_direct_to_actor+0x2a1/0xa30 [ 232.987250][ T7469] ? __pfx_direct_splice_actor+0x10/0x10 [ 232.987293][ T7469] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 232.987338][ T7469] do_splice_direct+0x174/0x240 [ 232.987375][ T7469] ? __pfx_do_splice_direct+0x10/0x10 [ 232.987412][ T7469] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 232.987450][ T7469] ? bpf_lsm_file_permission+0x9/0x10 [ 232.987478][ T7469] ? security_file_permission+0x71/0x210 [ 232.987511][ T7469] ? rw_verify_area+0xcf/0x6c0 [ 232.987545][ T7469] do_sendfile+0xb06/0xe50 [ 232.987583][ T7469] ? __pfx_do_sendfile+0x10/0x10 [ 232.987616][ T7469] ? __fget_files+0x204/0x3c0 [ 232.987654][ T7469] ? __x64_sys_futex+0x1e0/0x4c0 [ 232.987681][ T7469] ? __x64_sys_futex+0x1e9/0x4c0 [ 232.987711][ T7469] __x64_sys_sendfile64+0x1d8/0x220 [ 232.987736][ T7469] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 232.987759][ T7469] ? syscall_user_dispatch+0x78/0x140 [ 232.987803][ T7469] do_syscall_64+0xcd/0xf80 [ 232.987844][ T7469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.987869][ T7469] RIP: 0033:0x7fdd9638f7c9 [ 232.987888][ T7469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.987910][ T7469] RSP: 002b:00007fdd972d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 232.987932][ T7469] RAX: ffffffffffffffda RBX: 00007fdd965e6090 RCX: 00007fdd9638f7c9 [ 232.987948][ T7469] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000009 [ 232.987962][ T7469] RBP: 00007fdd96413f91 R08: 0000000000000000 R09: 0000000000000000 [ 232.987976][ T7469] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 232.987991][ T7469] R13: 00007fdd965e6128 R14: 00007fdd965e6090 R15: 00007fffcc3ab5c8 [ 232.988021][ T7469] [ 233.894056][ T7482] __vm_enough_memory: pid: 7482, comm: syz.3.291, bytes: 4398046511104 not enough memory for the allocation [ 234.326141][ T7478] : Can't lookup blockdev [ 234.717672][ T7488] cifs: Unknown parameter 'T.ŸÜÛæ¨Å¼c[ŸÐê€$âæµÈ)ü±UóÑnEó-Ê™¾l®öÚ-ºŒ -¾_€™¯Ôåáª5Z äoåé¢mžÐfwYÍhº*/ÿxDlÝ©Š×ígÕkÇAí³ùÏ7ÍØØ9’ôXöa/fê_ÿAR£ˆ™‘ÈxM ‚v¬—pÿ±$^;ôØq‡3±«£n졵-6©+e„k„¾ñÇ<°kœcÔ)n.üeMÍ÷Na¨t®ÐSMÎÆ1,' [ 234.837458][ T7488] CIFS mount error: No usable UNC path provided in device string! [ 234.837458][ T7488] [ 234.869822][ T7488] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 237.228804][ T7510] Invalid ELF header magic: != ELF [ 238.238401][ T7505] delete_channel: no stack [ 238.701887][ T7536] netlink: 28 bytes leftover after parsing attributes in process `syz.2.301'. [ 238.903733][ T7536] ipvlan0: entered promiscuous mode [ 238.930573][ T7539] binder: 7538:7539 ioctl c018620c 0 returned -1 [ 239.027474][ T7536] ipvlan0: entered allmulticast mode [ 239.127769][ T7536] veth0_vlan: entered allmulticast mode [ 239.736370][ T7544] binder: 7543:7544 ioctl c018620c 0 returned -1 [ 239.763061][ T7544] netlink: 28 bytes leftover after parsing attributes in process `syz.0.303'. [ 242.435958][ T7579] FAULT_INJECTION: forcing a failure. [ 242.435958][ T7579] name failslab, interval 1, probability 0, space 0, times 0 [ 242.498568][ T7579] CPU: 0 UID: 0 PID: 7579 Comm: syz.0.310 Not tainted syzkaller #0 PREEMPT(full) [ 242.498601][ T7579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 242.498619][ T7579] Call Trace: [ 242.498627][ T7579] [ 242.498638][ T7579] dump_stack_lvl+0x16c/0x1f0 [ 242.498681][ T7579] should_fail_ex+0x512/0x640 [ 242.498709][ T7579] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 242.498749][ T7579] should_failslab+0xc2/0x120 [ 242.498787][ T7579] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 242.498824][ T7579] ? create_filter_start.constprop.0+0x16a/0x300 [ 242.498863][ T7579] ? kstrdup+0x53/0x100 [ 242.498889][ T7579] kstrdup+0x53/0x100 [ 242.498918][ T7579] create_filter_start.constprop.0+0x16a/0x300 [ 242.498956][ T7579] create_filter+0xb5/0x210 [ 242.498988][ T7579] ? __pfx_create_filter+0x10/0x10 [ 242.499023][ T7579] ? find_held_lock+0x2b/0x80 [ 242.499057][ T7579] apply_event_filter+0x220/0x500 [ 242.499099][ T7579] ? __pfx_apply_event_filter+0x10/0x10 [ 242.499140][ T7579] ? __pfx_event_filter_write+0x10/0x10 [ 242.499162][ T7579] event_filter_write+0x16d/0x290 [ 242.499188][ T7579] vfs_writev+0x5df/0xde0 [ 242.499229][ T7579] ? __pfx_vfs_writev+0x10/0x10 [ 242.499261][ T7579] ? fdget_pos+0x2a2/0x370 [ 242.499318][ T7579] ? __fget_files+0x20e/0x3c0 [ 242.499359][ T7579] ? do_writev+0x132/0x340 [ 242.499389][ T7579] do_writev+0x132/0x340 [ 242.499421][ T7579] ? __pfx_do_writev+0x10/0x10 [ 242.499462][ T7579] do_syscall_64+0xcd/0xf80 [ 242.499503][ T7579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.499536][ T7579] RIP: 0033:0x7fb38678f7c9 [ 242.499559][ T7579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.499582][ T7579] RSP: 002b:00007fb387544038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 242.499604][ T7579] RAX: ffffffffffffffda RBX: 00007fb3869e5fa0 RCX: 00007fb38678f7c9 [ 242.499620][ T7579] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 242.499634][ T7579] RBP: 00007fb386813f91 R08: 0000000000000000 R09: 0000000000000000 [ 242.499648][ T7579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.499662][ T7579] R13: 00007fb3869e6038 R14: 00007fb3869e5fa0 R15: 00007ffd1bb63908 [ 242.499693][ T7579] [ 243.962099][ T7599] zswap: compressor ïþO\“q •q‚VÐÜJ´tÐßñ(%¥¬úþ䤻£äÌÏöø%³Û.Ÿ6"ü¯ç¤AmˆÑڣϰ;¦g3&n3Ûœ]ÉtñÎ(%§o&Æ°ÕÚlPí not available [ 247.984283][ T7650] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 248.028291][ T7293] Bluetooth: hci1: unexpected event 0x1d length: 6 > 5 [ 249.041181][ T7659] futex_wake_op: syz.1.323 tries to shift op by -2048; fix this program [ 249.120620][ T7659] futex_wake_op: syz.1.323 tries to shift op by -2048; fix this program [ 249.160141][ T7660] 0x000000000001-0x000000020000 : "" [ 249.228321][ T7660] ftl_cs: FTL header corrupt! [ 250.278803][ T7665] Invalid ELF header magic: != ELF [ 250.298876][ T7664] delete_channel: no stack [ 250.799658][ T7673] binder: BINDER_SET_CONTEXT_MGR already set [ 250.826469][ T7673] binder: 7672:7673 ioctl 4018620d 9 returned -16 [ 252.026174][ T7686] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 252.026174][ T7686] The task syz.3.327 (7686) triggered the difference, watch for misbehavior. [ 254.244408][ T7720] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 254.423809][ T7720] futex_wake_op: syz.0.334 tries to shift op by -1; fix this program [ 254.514662][ T7725] FAULT_INJECTION: forcing a failure. [ 254.514662][ T7725] name failslab, interval 1, probability 0, space 0, times 0 [ 254.722004][ T7725] CPU: 0 UID: 0 PID: 7725 Comm: syz.1.333 Not tainted syzkaller #0 PREEMPT(full) [ 254.722046][ T7725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 254.722060][ T7725] Call Trace: [ 254.722068][ T7725] [ 254.722078][ T7725] dump_stack_lvl+0x16c/0x1f0 [ 254.722122][ T7725] should_fail_ex+0x512/0x640 [ 254.722149][ T7725] ? kmem_cache_alloc_noprof+0x62/0x770 [ 254.722183][ T7725] should_failslab+0xc2/0x120 [ 254.722221][ T7725] kmem_cache_alloc_noprof+0x83/0x770 [ 254.722250][ T7725] ? ptlock_alloc+0x1f/0x70 [ 254.722281][ T7725] ? ptlock_alloc+0x1f/0x70 [ 254.722304][ T7725] ptlock_alloc+0x1f/0x70 [ 254.722328][ T7725] pte_alloc_one+0x84/0x3d0 [ 254.722363][ T7725] do_fault+0x8b8/0x1ad0 [ 254.722399][ T7725] ? __pfx_filemap_map_pages+0x10/0x10 [ 254.722429][ T7725] ? __pmd_alloc+0x6aa/0x9c0 [ 254.722469][ T7725] __handle_mm_fault+0x1919/0x2bb0 [ 254.722502][ T7725] ? __pfx___handle_mm_fault+0x10/0x10 [ 254.722543][ T7725] ? find_vma+0xbf/0x140 [ 254.722575][ T7725] ? __pfx_find_vma+0x10/0x10 [ 254.722612][ T7725] handle_mm_fault+0x3fe/0xad0 [ 254.722642][ T7725] do_user_addr_fault+0x7a6/0x1370 [ 254.722674][ T7725] ? rcu_is_watching+0x12/0xc0 [ 254.722713][ T7725] exc_page_fault+0x64/0xc0 [ 254.722751][ T7725] asm_exc_page_fault+0x26/0x30 [ 254.722774][ T7725] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 254.722805][ T7725] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 254.722827][ T7725] RSP: 0018:ffffc9000b6d7da0 EFLAGS: 00050216 [ 254.722846][ T7725] RAX: 0000000000000001 RBX: 0000000000001298 RCX: 0000000000000020 [ 254.722860][ T7725] RDX: fffff520016dafcc RSI: 0000000000001298 RDI: ffffc9000b6d7e40 [ 254.722875][ T7725] RBP: 0000000000000020 R08: 0000000000000001 R09: fffff520016dafcb [ 254.722890][ T7725] R10: ffffc9000b6d7e5f R11: ffff88807c5f29b0 R12: 0000000000000000 [ 254.722904][ T7725] R13: ffffc9000b6d7e40 R14: ffffc9000b6d7e40 R15: dffffc0000000000 [ 254.722934][ T7725] _copy_from_user+0x98/0xd0 [ 254.722962][ T7725] do_fcntl+0x410/0x1660 [ 254.722989][ T7725] ? __pfx_do_fcntl+0x10/0x10 [ 254.723026][ T7725] ? tomoyo_file_fcntl+0x6c/0xc0 [ 254.723076][ T7725] __x64_sys_fcntl+0x163/0x200 [ 254.723106][ T7725] do_syscall_64+0xcd/0xf80 [ 254.723147][ T7725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.723170][ T7725] RIP: 0033:0x7fdd9638f7c9 [ 254.723189][ T7725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.723211][ T7725] RSP: 002b:00007fdd97273038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 254.723231][ T7725] RAX: ffffffffffffffda RBX: 00007fdd965e6360 RCX: 00007fdd9638f7c9 [ 254.723247][ T7725] RDX: 0000000000001298 RSI: 0000000000000026 RDI: 000000000000000b [ 254.723261][ T7725] RBP: 00007fdd96413f91 R08: 0000000000000000 R09: 0000000000000000 [ 254.723275][ T7725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.723289][ T7725] R13: 00007fdd965e63f8 R14: 00007fdd965e6360 R15: 00007fffcc3ab5c8 [ 254.723320][ T7725] [ 256.468218][ T7736] binder: 7735:7736 ioctl c018620c 0 returned -1 [ 257.069517][ T7744] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 257.346798][ T7749] random: crng reseeded on system resumption [ 257.638774][ T7745] hub 1-0:1.0: USB hub found [ 257.687443][ T7745] hub 1-0:1.0: 1 port detected [ 259.046201][ T7775] __vm_enough_memory: pid: 7775, comm: syz.1.344, bytes: 4398046511104 not enough memory for the allocation [ 260.416989][ T7795] __vm_enough_memory: pid: 7795, comm: syz.3.349, bytes: 4398046511104 not enough memory for the allocation [ 260.914197][ T7805] __vm_enough_memory: pid: 7805, comm: syz.3.351, bytes: 4398046511104 not enough memory for the allocation [ 261.351886][ T7809] usbcore.quirks: string doesn't fit in 127 chars. [ 262.312104][ T7822] zswap: compressor ïþO\“q •q‚VÐÜJ´tÐßñ(%¥¬úþ䤻£äÌÏöø%³Û.Ÿ6"ü¯ç¤AmˆÑڣϰ;¦g3&n3Ûœ]ÉtñÎ(%§o&Æ°ÕÚlPí not available [ 262.636781][ T7827] __vm_enough_memory: pid: 7827, comm: syz.0.355, bytes: 4398046511104 not enough memory for the allocation [ 264.900783][ T7860] zswap: compressor ûW–îë“;Å0못„?u=8å}Öƒ•L­Ö(£E‘¤¤Ö¹‰jj–8+ÕÄxp¥—Èœ‹ŒNkR³¦°¤uoêÇo‹ÿ¬<µSÔH ¾}ïEd }¡ìöP¢…8a [ 297.625818][ T8239] dump_stack_lvl+0x16c/0x1f0 [ 297.625861][ T8239] should_fail_ex+0x512/0x640 [ 297.625889][ T8239] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 297.625922][ T8239] should_failslab+0xc2/0x120 [ 297.625962][ T8239] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 297.625993][ T8239] ? __d_alloc+0x35/0xa80 [ 297.626019][ T8239] ? __d_alloc+0x35/0xa80 [ 297.626038][ T8239] __d_alloc+0x35/0xa80 [ 297.626062][ T8239] d_alloc_pseudo+0x1c/0xc0 [ 297.626091][ T8239] alloc_file_pseudo+0xcf/0x230 [ 297.626120][ T8239] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 297.626147][ T8239] ? alloc_fd+0x471/0x7d0 [ 297.626187][ T8239] sock_alloc_file+0x50/0x210 [ 297.626224][ T8239] __sys_socket+0x1c0/0x260 [ 297.626248][ T8239] ? __pfx___sys_socket+0x10/0x10 [ 297.626275][ T8239] ? do_user_addr_fault+0x843/0x1370 [ 297.626310][ T8239] __x64_sys_socket+0x72/0xb0 [ 297.626333][ T8239] ? lockdep_hardirqs_on+0x7c/0x110 [ 297.626373][ T8239] do_syscall_64+0xcd/0xf80 [ 297.626414][ T8239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.626438][ T8239] RIP: 0033:0x7fb3867916e7 [ 297.626457][ T8239] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.626480][ T8239] RSP: 002b:00007fb387542fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 297.626502][ T8239] RAX: ffffffffffffffda RBX: 00007fb3869e5fa0 RCX: 00007fb3867916e7 [ 297.626517][ T8239] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 297.626531][ T8239] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 297.626545][ T8239] R10: 0000200000000140 R11: 0000000000000286 R12: 0000000000000000 [ 297.626560][ T8239] R13: 00007fb3869e6038 R14: 00007fb3869e5fa0 R15: 00007ffd1bb63908 [ 297.626590][ T8239] [ 298.179478][ T8237] Invalid ELF header magic: != ELF [ 300.358642][ T8278] GUP no longer grows the stack in syz.0.431 (8278): 5000-401000 (4000) [ 300.408332][ T8278] CPU: 0 UID: 0 PID: 8278 Comm: syz.0.431 Tainted: G L syzkaller #0 PREEMPT(full) [ 300.408370][ T8278] Tainted: [L]=SOFTLOCKUP [ 300.408378][ T8278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 300.408393][ T8278] Call Trace: [ 300.408400][ T8278] [ 300.408416][ T8278] dump_stack_lvl+0x16c/0x1f0 [ 300.408460][ T8278] gup_vma_lookup+0x1d2/0x220 [ 300.408496][ T8278] __get_user_pages+0x241/0x3590 [ 300.408541][ T8278] ? find_held_lock+0x2b/0x80 [ 300.408574][ T8278] ? __pfx___get_user_pages+0x10/0x10 [ 300.408619][ T8278] get_user_pages_remote+0x243/0xab0 [ 300.408669][ T8278] ? __pfx_get_user_pages_remote+0x10/0x10 [ 300.408708][ T8278] ? __pfx___might_resched+0x10/0x10 [ 300.408743][ T8278] ? noop_dirty_folio+0x5e/0xb0 [ 300.408779][ T8278] __access_remote_vm+0x24d/0x850 [ 300.408821][ T8278] ? __pfx___access_remote_vm+0x10/0x10 [ 300.408862][ T8278] mem_rw+0x20e/0x640 [ 300.408902][ T8278] ? __pfx_mem_write+0x10/0x10 [ 300.408935][ T8278] vfs_writev+0x5df/0xde0 [ 300.408975][ T8278] ? __pfx_vfs_writev+0x10/0x10 [ 300.409007][ T8278] ? fdget_pos+0x2a2/0x370 [ 300.409063][ T8278] ? __fget_files+0x20e/0x3c0 [ 300.409104][ T8278] ? do_writev+0x132/0x340 [ 300.409134][ T8278] do_writev+0x132/0x340 [ 300.409166][ T8278] ? __pfx_do_writev+0x10/0x10 [ 300.409207][ T8278] do_syscall_64+0xcd/0xf80 [ 300.409247][ T8278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.409272][ T8278] RIP: 0033:0x7fb38678f7c9 [ 300.409291][ T8278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.409314][ T8278] RSP: 002b:00007fb387544038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 300.409336][ T8278] RAX: ffffffffffffffda RBX: 00007fb3869e5fa0 RCX: 00007fb38678f7c9 [ 300.409352][ T8278] RDX: 0000000000000008 RSI: 0000200000000180 RDI: 0000000000000003 [ 300.409366][ T8278] RBP: 00007fb386813f91 R08: 0000000000000000 R09: 0000000000000000 [ 300.409381][ T8278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.409395][ T8278] R13: 00007fb3869e6038 R14: 00007fb3869e5fa0 R15: 00007ffd1bb63908 [ 300.409431][ T8278] [ 301.812208][ T8302] zswap: compressor ûW–îë“;Å0못„?u=8å}Öƒ•L­Ö(£E‘¤¤Ö¹‰jj–8+ÕÄxp¥—Èœ‹ŒNkR³¦°¤uoêÇo‹ÿ¬<µSÔH ¾}ïEd }¡ìöP¢…8a [ 674.777388][T13121] dump_stack_lvl+0x16c/0x1f0 [ 674.777431][T13121] should_fail_ex+0x512/0x640 [ 674.777460][T13121] ? __kvmalloc_node_noprof+0x129/0xa40 [ 674.777498][T13121] should_failslab+0xc2/0x120 [ 674.777537][T13121] __kvmalloc_node_noprof+0x14a/0xa40 [ 674.777571][T13121] ? do_raw_spin_lock+0x12c/0x2b0 [ 674.777601][T13121] ? bucket_table_alloc.isra.0+0x88/0x460 [ 674.777641][T13121] ? find_held_lock+0x2b/0x80 [ 674.777677][T13121] ? bucket_table_alloc.isra.0+0x88/0x460 [ 674.777716][T13121] bucket_table_alloc.isra.0+0x88/0x460 [ 674.777759][T13121] rhashtable_init_noprof+0x41a/0x7e0 [ 674.777786][T13121] ipc_init_ids+0x92/0x280 [ 674.777818][T13121] msg_init_ns+0x13d/0x190 [ 674.777840][T13121] copy_ipcs+0x592/0x7d0 [ 674.777869][T13121] create_new_namespaces+0x20a/0xab0 [ 674.777903][T13121] ? security_capable+0x7e/0x260 [ 674.777948][T13121] copy_namespaces+0x468/0x570 [ 674.777982][T13121] copy_process+0x2a70/0x7430 [ 674.778032][T13121] ? __pfx_copy_process+0x10/0x10 [ 674.778089][T13121] ? _copy_from_user+0x59/0xd0 [ 674.778119][T13121] kernel_clone+0xfc/0x910 [ 674.778158][T13121] ? __pfx_kernel_clone+0x10/0x10 [ 674.778193][T13121] ? futex_private_hash_put+0x160/0x1b0 [ 674.778225][T13121] ? __pfx_futex_wait+0x10/0x10 [ 674.778266][T13121] __do_sys_clone3+0x212/0x290 [ 674.778304][T13121] ? __pfx___do_sys_clone3+0x10/0x10 [ 674.778354][T13121] ? find_held_lock+0x2b/0x80 [ 674.778408][T13121] do_syscall_64+0xcd/0xf80 [ 674.778449][T13121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.778475][T13121] RIP: 0033:0x7fdd9638f7c9 [ 674.778494][T13121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 674.778518][T13121] RSP: 002b:00007fdd972f6f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 674.778541][T13121] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fdd9638f7c9 [ 674.778557][T13121] RDX: 00007fdd972f6f20 RSI: 0000000000000058 RDI: 00007fdd972f6f20 [ 674.778573][T13121] RBP: 00007fdd96413f91 R08: 0000000000000000 R09: 0000000000000058 [ 674.778588][T13121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 674.778603][T13121] R13: 00007fdd965e6038 R14: 00007fdd965e5fa0 R15: 00007fffcc3ab5c8 [ 674.778634][T13121] [ 675.320905][T13124] futex_wake_op: syz.0.1317 tries to shift op by -2048; fix this program [ 675.329486][T13124] futex_wake_op: syz.0.1317 tries to shift op by -2048; fix this program [ 675.423359][T13124] 0x000000000001-0x000000020000 : "" [ 675.512441][T13124] ftl_cs: FTL header corrupt! [ 676.091167][T13129] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1309'. [ 676.780477][T13139] NFSD: Failed to start, no listeners configured. [ 678.029012][T13168] __vm_enough_memory: pid: 13168, comm: syz.2.1319, bytes: 4398046511104 not enough memory for the allocation [ 678.466467][T13174] FAULT_INJECTION: forcing a failure. [ 678.466467][T13174] name failslab, interval 1, probability 0, space 0, times 0 [ 678.542809][T13174] CPU: 0 UID: 0 PID: 13174 Comm: syz.1.1321 Tainted: G L syzkaller #0 PREEMPT(full) [ 678.542848][T13174] Tainted: [L]=SOFTLOCKUP [ 678.542856][T13174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 678.542871][T13174] Call Trace: [ 678.542879][T13174] [ 678.542888][T13174] dump_stack_lvl+0x16c/0x1f0 [ 678.542932][T13174] should_fail_ex+0x512/0x640 [ 678.542960][T13174] ? __kmalloc_cache_noprof+0x5f/0x800 [ 678.542992][T13174] should_failslab+0xc2/0x120 [ 678.543031][T13174] __kmalloc_cache_noprof+0x80/0x800 [ 678.543059][T13174] ? ip_vs_est_add_kthread+0x1d5/0x850 [ 678.543105][T13174] ? ip_vs_est_add_kthread+0x1d5/0x850 [ 678.543146][T13174] ip_vs_est_add_kthread+0x1d5/0x850 [ 678.543192][T13174] ip_vs_start_estimator+0x250/0x430 [ 678.543236][T13174] ip_vs_control_net_init+0x158c/0x1d20 [ 678.543272][T13174] __ip_vs_init+0x217/0x520 [ 678.543306][T13174] ? __pfx___ip_vs_init+0x10/0x10 [ 678.543338][T13174] ops_init+0x1e2/0x5f0 [ 678.543376][T13174] setup_net+0x11d/0x3a0 [ 678.543412][T13174] ? __pfx_setup_net+0x10/0x10 [ 678.543446][T13174] ? lockdep_init_map_type+0x5c/0x270 [ 678.543472][T13174] ? mutex_init_lockep+0x110/0x150 [ 678.543501][T13174] copy_net_ns+0x351/0x7c0 [ 678.543554][T13174] create_new_namespaces+0x3ea/0xab0 [ 678.543599][T13174] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 678.543636][T13174] ksys_unshare+0x45b/0xa40 [ 678.543676][T13174] ? __pfx_ksys_unshare+0x10/0x10 [ 678.543717][T13174] ? xfd_validate_state+0x61/0x180 [ 678.543748][T13174] __x64_sys_unshare+0x31/0x40 [ 678.543769][T13174] do_syscall_64+0xcd/0xf80 [ 678.543810][T13174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.543840][T13174] RIP: 0033:0x7fdd9638f7c9 [ 678.543858][T13174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 678.543883][T13174] RSP: 002b:00007fdd972d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 678.543905][T13174] RAX: ffffffffffffffda RBX: 00007fdd965e6090 RCX: 00007fdd9638f7c9 [ 678.543921][T13174] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 678.543936][T13174] RBP: 00007fdd96413f91 R08: 0000000000000000 R09: 0000000000000000 [ 678.543951][T13174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 678.543965][T13174] R13: 00007fdd965e6128 R14: 00007fdd965e6090 R15: 00007fffcc3ab5c8 [ 678.543997][T13174] [ 679.802241][T13189] __vm_enough_memory: pid: 13189, comm: syz.1.1324, bytes: 4398046511104 not enough memory for the allocation [ 682.141351][T13217] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1328'. [ 683.019228][T13228] __vm_enough_memory: pid: 13228, comm: syz.3.1330, bytes: 4398046511104 not enough memory for the allocation [ 685.148301][ T7294] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 1345 with max blocks 20 with error 117 [ 685.218647][ T7294] EXT4-fs (sda1): This should not happen!! Data will be lost [ 685.218647][ T7294] [ 685.264144][ T7294] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1340 with max blocks 17 with error 117 [ 685.418467][ T7294] EXT4-fs (sda1): This should not happen!! Data will be lost [ 685.418467][ T7294] [ 688.102108][T13282] __vm_enough_memory: pid: 13282, comm: syz.3.1339, bytes: 4398046511104 not enough memory for the allocation [ 690.016959][ T30] audit: type=1800 audit(1768093902.833:25): pid=13311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1344" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 690.282865][T13315] FAULT_INJECTION: forcing a failure. [ 690.282865][T13315] name failslab, interval 1, probability 0, space 0, times 0 [ 690.402624][T13315] CPU: 0 UID: 0 PID: 13315 Comm: syz.3.1346 Tainted: G L syzkaller #0 PREEMPT(full) [ 690.402664][T13315] Tainted: [L]=SOFTLOCKUP [ 690.402671][T13315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 690.402685][T13315] Call Trace: [ 690.402692][T13315] [ 690.402719][T13315] dump_stack_lvl+0x16c/0x1f0 [ 690.402763][T13315] should_fail_ex+0x512/0x640 [ 690.402790][T13315] ? kmem_cache_alloc_noprof+0x62/0x770 [ 690.402830][T13315] should_failslab+0xc2/0x120 [ 690.402873][T13315] kmem_cache_alloc_noprof+0x83/0x770 [ 690.402902][T13315] ? sk_prot_alloc+0x60/0x2a0 [ 690.402947][T13315] ? sk_prot_alloc+0x60/0x2a0 [ 690.402982][T13315] sk_prot_alloc+0x60/0x2a0 [ 690.403023][T13315] sk_alloc+0x36/0xe30 [ 690.403053][T13315] inet6_create+0x381/0x12b0 [ 690.403093][T13315] ? inet6_create+0x7f/0x12b0 [ 690.403135][T13315] __sock_create+0x339/0x8a0 [ 690.403163][T13315] inet_ctl_sock_create+0x94/0x230 [ 690.403193][T13315] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 690.403222][T13315] ? ndisc_net_init+0x1bc/0x250 [ 690.403249][T13315] ? __pfx_ndisc_net_init+0x10/0x10 [ 690.403280][T13315] igmp6_net_init+0x1b2/0x470 [ 690.403309][T13315] ? __pfx_igmp6_net_init+0x10/0x10 [ 690.403336][T13315] ops_init+0x1e2/0x5f0 [ 690.403373][T13315] setup_net+0x11d/0x3a0 [ 690.403408][T13315] ? __pfx_setup_net+0x10/0x10 [ 690.403441][T13315] ? lockdep_init_map_type+0x5c/0x270 [ 690.403466][T13315] ? mutex_init_lockep+0x110/0x150 [ 690.403513][T13315] copy_net_ns+0x351/0x7c0 [ 690.403557][T13315] create_new_namespaces+0x3ea/0xab0 [ 690.403599][T13315] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 690.403641][T13315] ksys_unshare+0x45b/0xa40 [ 690.403681][T13315] ? __pfx_ksys_unshare+0x10/0x10 [ 690.403722][T13315] ? xfd_validate_state+0x61/0x180 [ 690.403754][T13315] __x64_sys_unshare+0x31/0x40 [ 690.403775][T13315] do_syscall_64+0xcd/0xf80 [ 690.403817][T13315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.403846][T13315] RIP: 0033:0x7fdd4d98f7c9 [ 690.403865][T13315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 690.403889][T13315] RSP: 002b:00007fdd4bbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 690.403912][T13315] RAX: ffffffffffffffda RBX: 00007fdd4dbe6090 RCX: 00007fdd4d98f7c9 [ 690.403928][T13315] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 690.403942][T13315] RBP: 00007fdd4da13f91 R08: 0000000000000000 R09: 0000000000000000 [ 690.403957][T13315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 690.403971][T13315] R13: 00007fdd4dbe6128 R14: 00007fdd4dbe6090 R15: 00007ffd60a4fbe8 [ 690.404002][T13315] [ 690.404132][T13315] Failed to initialize the IGMP6 autojoin socket (err -105) [ 691.175118][ T7291] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1340 with max blocks 1 with error 117 [ 691.238862][ T7291] EXT4-fs (sda1): This should not happen!! Data will be lost [ 691.238862][ T7291] [ 691.459502][T13334] FAULT_INJECTION: forcing a failure. [ 691.459502][T13334] name failslab, interval 1, probability 0, space 0, times 0 [ 691.510080][T13334] CPU: 0 UID: 0 PID: 13334 Comm: syz.2.1348 Tainted: G L syzkaller #0 PREEMPT(full) [ 691.510120][T13334] Tainted: [L]=SOFTLOCKUP [ 691.510129][T13334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 691.510144][T13334] Call Trace: [ 691.510151][T13334] [ 691.510160][T13334] dump_stack_lvl+0x16c/0x1f0 [ 691.510203][T13334] should_fail_ex+0x512/0x640 [ 691.510232][T13334] ? __kmalloc_cache_noprof+0x5f/0x800 [ 691.510262][T13334] should_failslab+0xc2/0x120 [ 691.510301][T13334] __kmalloc_cache_noprof+0x80/0x800 [ 691.510328][T13334] ? do_raw_spin_unlock+0x172/0x230 [ 691.510357][T13334] ? snd_rawmidi_open+0x3c3/0xbf0 [ 691.510388][T13334] ? snd_card_file_add+0x26e/0x340 [ 691.510417][T13334] ? snd_rawmidi_open+0x3c3/0xbf0 [ 691.510446][T13334] snd_rawmidi_open+0x3c3/0xbf0 [ 691.510488][T13334] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 691.510525][T13334] ? kobject_get_unless_zero+0x156/0x1e0 [ 691.510554][T13334] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 691.510585][T13334] snd_open+0x22d/0x4c0 [ 691.510608][T13334] ? __pfx_snd_open+0x10/0x10 [ 691.510641][T13334] chrdev_open+0x234/0x6a0 [ 691.510677][T13334] ? __pfx_apparmor_file_open+0x10/0x10 [ 691.510703][T13334] ? __pfx_chrdev_open+0x10/0x10 [ 691.510747][T13334] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 691.510793][T13334] do_dentry_open+0x748/0x1590 [ 691.510828][T13334] ? __pfx_chrdev_open+0x10/0x10 [ 691.510874][T13334] vfs_open+0x82/0x3f0 [ 691.510903][T13334] path_openat+0x2078/0x3140 [ 691.510950][T13334] ? __pfx_path_openat+0x10/0x10 [ 691.510998][T13334] do_filp_open+0x20b/0x470 [ 691.511036][T13334] ? __pfx_do_filp_open+0x10/0x10 [ 691.511094][T13334] ? alloc_fd+0x471/0x7d0 [ 691.511138][T13334] do_sys_openat2+0x121/0x290 [ 691.511165][T13334] ? __pfx_do_sys_openat2+0x10/0x10 [ 691.511204][T13334] __x64_sys_openat+0x174/0x210 [ 691.511233][T13334] ? __pfx___x64_sys_openat+0x10/0x10 [ 691.511284][T13334] do_syscall_64+0xcd/0xf80 [ 691.511324][T13334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.511350][T13334] RIP: 0033:0x7f6583d8f7c9 [ 691.511370][T13334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 691.511393][T13334] RSP: 002b:00007f6584b3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 691.511416][T13334] RAX: ffffffffffffffda RBX: 00007f6583fe6090 RCX: 00007f6583d8f7c9 [ 691.511431][T13334] RDX: 0000000000000001 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 691.511447][T13334] RBP: 00007f6583e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 691.511467][T13334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 691.511481][T13334] R13: 00007f6583fe6128 R14: 00007f6583fe6090 R15: 00007ffddebf9b98 [ 691.511512][T13334] [ 692.331029][T13342] __vm_enough_memory: pid: 13342, comm: syz.3.1350, bytes: 4398046511104 not enough memory for the allocation [ 693.514357][T13362] binder: 13361:13362 ioctl c018620c 0 returned -1 [ 693.579860][T13365] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input25 [ 693.781693][T10842] Bluetooth: hci3: unexpected event 0x36 length: 123 > 7 [ 693.888530][T13369] block nbd7: not configured, cannot reconfigure [ 694.049867][T13373] __vm_enough_memory: pid: 13373, comm: syz.2.1358, bytes: 4398046511104 not enough memory for the allocation [ 695.290254][T13391] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1370'. [ 696.354712][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 696.361069][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 696.927193][T13410] FAULT_INJECTION: forcing a failure. [ 696.927193][T13410] name failslab, interval 1, probability 0, space 0, times 0 [ 697.007408][T13410] CPU: 0 UID: 0 PID: 13410 Comm: syz.1.1363 Tainted: G L syzkaller #0 PREEMPT(full) [ 697.007446][T13410] Tainted: [L]=SOFTLOCKUP [ 697.007454][T13410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 697.007469][T13410] Call Trace: [ 697.007476][T13410] [ 697.007485][T13410] dump_stack_lvl+0x16c/0x1f0 [ 697.007529][T13410] should_fail_ex+0x512/0x640 [ 697.007557][T13410] ? __kmalloc_noprof+0xca/0x910 [ 697.007586][T13410] should_failslab+0xc2/0x120 [ 697.007623][T13410] __kmalloc_noprof+0xeb/0x910 [ 697.007649][T13410] ? lsm_blob_alloc+0x68/0x90 [ 697.007689][T13410] ? lsm_blob_alloc+0x68/0x90 [ 697.007723][T13410] lsm_blob_alloc+0x68/0x90 [ 697.007759][T13410] security_sk_alloc+0x2f/0x270 [ 697.007786][T13410] sk_prot_alloc+0xfb/0x2a0 [ 697.007827][T13410] sk_alloc+0x36/0xe30 [ 697.007857][T13410] unix_create1+0xa6/0x700 [ 697.007884][T13410] unix_create+0x110/0x270 [ 697.007909][T13410] __sock_create+0x339/0x8a0 [ 697.007938][T13410] __sys_socketpair+0x25c/0x5a0 [ 697.007965][T13410] ? __pfx___sys_socketpair+0x10/0x10 [ 697.007993][T13410] ? fput+0x70/0xf0 [ 697.008023][T13410] ? xfd_validate_state+0x61/0x180 [ 697.008052][T13410] ? __pfx_do_writev+0x10/0x10 [ 697.008089][T13410] __x64_sys_socketpair+0x96/0x100 [ 697.008115][T13410] ? lockdep_hardirqs_on+0x7c/0x110 [ 697.008154][T13410] do_syscall_64+0xcd/0xf80 [ 697.008194][T13410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.008218][T13410] RIP: 0033:0x7fdd9638f7c9 [ 697.008237][T13410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 697.008261][T13410] RSP: 002b:00007fdd972d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 697.008284][T13410] RAX: ffffffffffffffda RBX: 00007fdd965e6090 RCX: 00007fdd9638f7c9 [ 697.008299][T13410] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 697.008314][T13410] RBP: 00007fdd96413f91 R08: 0000000000000000 R09: 0000000000000000 [ 697.008329][T13410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 697.008343][T13410] R13: 00007fdd965e6128 R14: 00007fdd965e6090 R15: 00007fffcc3ab5c8 [ 697.008373][T13410] [ 698.542132][T13429] futex_wake_op: syz.3.1367 tries to shift op by -2048; fix this program [ 698.714603][T13429] futex_wake_op: syz.3.1367 tries to shift op by -2048; fix this program [ 698.762978][T13431] 0x000000000001-0x000000020000 : "" [ 698.866064][T13431] ftl_cs: FTL header corrupt! [ 699.629611][T13441] __vm_enough_memory: pid: 13441, comm: syz.1.1369, bytes: 4398046511104 not enough memory for the allocation [ 699.889555][T13445] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1368'. [ 700.067078][T13448] __vm_enough_memory: pid: 13448, comm: syz.3.1373, bytes: 4398046511104 not enough memory for the allocation [ 700.616978][T13459] __vm_enough_memory: pid: 13459, comm: syz.3.1377, bytes: 4398046511104 not enough memory for the allocation [ 701.601774][T13475] vivid-007: ================= START STATUS ================= [ 701.741582][T13475] vivid-007: Generate PTS: true [ 701.810112][T13475] vivid-007: Generate SCR: true [ 701.888423][T13475] tpg source WxH: 320x240 (Y'CbCr) [ 701.995490][T13475] tpg field: 1 [ 702.034354][T13475] tpg crop: (0,0)/320x240 [ 702.160642][T13475] tpg compose: (0,0)/320x240 [ 702.298186][T13475] tpg colorspace: 8 [ 702.302044][T13475] tpg transfer function: 0/0 [ 702.459087][T13475] tpg Y'CbCr encoding: 0/0 [ 702.575730][T13475] tpg quantization: 0/0 [ 702.646568][T13475] tpg RGB range: 0/2 [ 702.650511][T13475] vivid-007: ================== END STATUS ================== [ 703.826856][T13497] could not allocate digest TFM handle 0 [ 703.826856][T13497] [ 703.967919][T13506] __vm_enough_memory: pid: 13506, comm: syz.2.1384, bytes: 4398046511104 not enough memory for the allocation [ 704.350314][T13512] __vm_enough_memory: pid: 13512, comm: syz.3.1386, bytes: 4398046511104 not enough memory for the allocation [ 704.877903][T13524] batman_adv: Routing algorithm '7' is not supported [ 705.004849][ T7294] netdevsim netdevsim511 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.229022][T13528] FAULT_INJECTION: forcing a failure. [ 705.229022][T13528] name failslab, interval 1, probability 0, space 0, times 0 [ 705.273386][T13528] CPU: 0 UID: 0 PID: 13528 Comm: syz.0.1390 Tainted: G L syzkaller #0 PREEMPT(full) [ 705.273427][T13528] Tainted: [L]=SOFTLOCKUP [ 705.273436][T13528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 705.273450][T13528] Call Trace: [ 705.273458][T13528] [ 705.273467][T13528] dump_stack_lvl+0x16c/0x1f0 [ 705.273512][T13528] should_fail_ex+0x512/0x640 [ 705.273540][T13528] ? __kmalloc_noprof+0xca/0x910 [ 705.273569][T13528] should_failslab+0xc2/0x120 [ 705.273608][T13528] __kmalloc_noprof+0xeb/0x910 [ 705.273635][T13528] ? lsm_blob_alloc+0x68/0x90 [ 705.273677][T13528] ? lsm_blob_alloc+0x68/0x90 [ 705.273711][T13528] lsm_blob_alloc+0x68/0x90 [ 705.273748][T13528] security_sk_alloc+0x2f/0x270 [ 705.273775][T13528] sk_prot_alloc+0x1c7/0x2a0 [ 705.273817][T13528] sk_alloc+0x36/0xe30 [ 705.273848][T13528] __netlink_create+0x5e/0x2c0 [ 705.273881][T13528] __netlink_kernel_create+0xed/0x750 [ 705.273921][T13528] ? __pfx___netlink_kernel_create+0x10/0x10 [ 705.273958][T13528] ? find_held_lock+0x2b/0x80 [ 705.273990][T13528] ? audit_net_init+0x190/0x440 [ 705.274024][T13528] audit_net_init+0x1ae/0x440 [ 705.274052][T13528] ? __pfx_audit_net_init+0x10/0x10 [ 705.274081][T13528] ? rcu_is_watching+0x12/0xc0 [ 705.274115][T13528] ? __pfx_audit_receive+0x10/0x10 [ 705.274147][T13528] ? __pfx_audit_multicast_bind+0x10/0x10 [ 705.274181][T13528] ? __pfx_audit_multicast_unbind+0x10/0x10 [ 705.274215][T13528] ? __pfx_genl_unbind+0x10/0x10 [ 705.274236][T13528] ? ops_init+0x77/0x5f0 [ 705.274274][T13528] ? __pfx_audit_net_init+0x10/0x10 [ 705.274301][T13528] ops_init+0x1e2/0x5f0 [ 705.274339][T13528] setup_net+0x11d/0x3a0 [ 705.274385][T13528] ? __pfx_setup_net+0x10/0x10 [ 705.274418][T13528] ? lockdep_init_map_type+0x5c/0x270 [ 705.274443][T13528] ? mutex_init_lockep+0x110/0x150 [ 705.274472][T13528] copy_net_ns+0x351/0x7c0 [ 705.274513][T13528] create_new_namespaces+0x3ea/0xab0 [ 705.274554][T13528] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 705.274591][T13528] ksys_unshare+0x45b/0xa40 [ 705.274631][T13528] ? __pfx_ksys_unshare+0x10/0x10 [ 705.274672][T13528] ? xfd_validate_state+0x61/0x180 [ 705.274703][T13528] __x64_sys_unshare+0x31/0x40 [ 705.274724][T13528] do_syscall_64+0xcd/0xf80 [ 705.274766][T13528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.274791][T13528] RIP: 0033:0x7fb38678f7c9 [ 705.274811][T13528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 705.274834][T13528] RSP: 002b:00007fb3849f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 705.274857][T13528] RAX: ffffffffffffffda RBX: 00007fb3869e6090 RCX: 00007fb38678f7c9 [ 705.274873][T13528] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 705.274887][T13528] RBP: 00007fb386813f91 R08: 0000000000000000 R09: 0000000000000000 [ 705.274902][T13528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 705.274917][T13528] R13: 00007fb3869e6128 R14: 00007fb3869e6090 R15: 00007ffd1bb63908 [ 705.274948][T13528] [ 705.606057][T13528] audit: cannot initialize netlink socket in namespace [ 705.746927][T13536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1392'. [ 705.799405][T13536] FAULT_INJECTION: forcing a failure. [ 705.799405][T13536] name failslab, interval 1, probability 0, space 0, times 0 [ 705.857066][T13540] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 705.873375][T13540] i2c i2c-0: new_device: Invalid device name [ 705.882196][T13536] CPU: 0 UID: 0 PID: 13536 Comm: syz.1.1392 Tainted: G L syzkaller #0 PREEMPT(full) [ 705.882236][T13536] Tainted: [L]=SOFTLOCKUP [ 705.882244][T13536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 705.882259][T13536] Call Trace: [ 705.882267][T13536] [ 705.882275][T13536] dump_stack_lvl+0x16c/0x1f0 [ 705.882318][T13536] should_fail_ex+0x512/0x640 [ 705.882354][T13536] ? __kmalloc_cache_noprof+0x5f/0x800 [ 705.882384][T13536] should_failslab+0xc2/0x120 [ 705.882423][T13536] __kmalloc_cache_noprof+0x80/0x800 [ 705.882450][T13536] ? rcu_is_watching+0x12/0xc0 [ 705.882482][T13536] ? __request_module+0x2ad/0x660 [ 705.882513][T13536] ? lockdep_hardirqs_on+0x7c/0x110 [ 705.882555][T13536] ? __request_module+0x2ad/0x660 [ 705.882585][T13536] __request_module+0x2ad/0x660 [ 705.882617][T13536] ? __pfx___request_module+0x10/0x10 [ 705.882661][T13536] ? find_held_lock+0x2b/0x80 [ 705.882701][T13536] inet_create+0xa97/0x1040 [ 705.882732][T13536] ? inet_create+0x93/0x1040 [ 705.882766][T13536] __sock_create+0x339/0x8a0 [ 705.882796][T13536] __sys_socket+0x14d/0x260 [ 705.882819][T13536] ? fput+0x70/0xf0 [ 705.882842][T13536] ? __pfx___sys_socket+0x10/0x10 [ 705.882866][T13536] ? xfd_validate_state+0x61/0x180 [ 705.882888][T13536] ? __pfx_ksys_write+0x10/0x10 [ 705.882928][T13536] __x64_sys_socket+0x72/0xb0 [ 705.882952][T13536] ? lockdep_hardirqs_on+0x7c/0x110 [ 705.882991][T13536] do_syscall_64+0xcd/0xf80 [ 705.883031][T13536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.883057][T13536] RIP: 0033:0x7fdd9638f7c9 [ 705.883076][T13536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 705.883100][T13536] RSP: 002b:00007fdd972f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 705.883122][T13536] RAX: ffffffffffffffda RBX: 00007fdd965e5fa0 RCX: 00007fdd9638f7c9 [ 705.883138][T13536] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000002 [ 705.883152][T13536] RBP: 00007fdd96413f91 R08: 0000000000000000 R09: 0000000000000000 [ 705.883166][T13536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 705.883185][T13536] R13: 00007fdd965e6038 R14: 00007fdd965e5fa0 R15: 00007fffcc3ab5c8 [ 705.883216][T13536] [ 706.788348][T13555] futex_wake_op: syz.2.1395 tries to shift op by -2048; fix this program [ 706.952109][T13555] futex_wake_op: syz.2.1395 tries to shift op by -2048; fix this program [ 706.997830][T13557] 0x000000000001-0x000000020000 : "" [ 707.156225][T13557] ftl_cs: FTL header corrupt! [ 707.230013][T13563] __vm_enough_memory: pid: 13563, comm: syz.3.1397, bytes: 4398046511104 not enough memory for the allocation [ 707.365700][T13566] __vm_enough_memory: pid: 13566, comm: syz.1.1398, bytes: 4398046511104 not enough memory for the allocation [ 707.914781][T13572] netlink: 186 bytes leftover after parsing attributes in process `syz.0.1399'. [ 709.719616][T13586] FAULT_INJECTION: forcing a failure. [ 709.719616][T13586] name fail_futex, interval 1, probability 0, space 0, times 0 [ 709.838233][T13586] CPU: 0 UID: 0 PID: 13586 Comm: syz.2.1402 Tainted: G L syzkaller #0 PREEMPT(full) [ 709.838273][T13586] Tainted: [L]=SOFTLOCKUP [ 709.838287][T13586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 709.838301][T13586] Call Trace: [ 709.838308][T13586] [ 709.838317][T13586] dump_stack_lvl+0x16c/0x1f0 [ 709.838360][T13586] should_fail_ex+0x512/0x640 [ 709.838392][T13586] get_futex_key+0x1085/0x15f0 [ 709.838421][T13586] ? __pfx_get_futex_key+0x10/0x10 [ 709.838455][T13586] futex_wake+0xea/0x530 [ 709.838490][T13586] ? __pfx_futex_wake+0x10/0x10 [ 709.838534][T13586] do_futex+0x1e3/0x350 [ 709.838563][T13586] ? __pfx_do_futex+0x10/0x10 [ 709.838588][T13586] ? __might_fault+0xe3/0x190 [ 709.838623][T13586] mm_release+0x24e/0x300 [ 709.838656][T13586] do_exit+0x69e/0x2bd0 [ 709.838689][T13586] ? __pfx_do_exit+0x10/0x10 [ 709.838711][T13586] ? do_raw_spin_lock+0x12c/0x2b0 [ 709.838739][T13586] ? find_held_lock+0x2b/0x80 [ 709.838774][T13586] do_group_exit+0xd3/0x2a0 [ 709.838799][T13586] get_signal+0x2671/0x26d0 [ 709.838839][T13586] ? __mm_populate+0x299/0x380 [ 709.838877][T13586] ? __pfx_get_signal+0x10/0x10 [ 709.838913][T13586] ? do_futex+0x122/0x350 [ 709.838942][T13586] arch_do_signal_or_restart+0x8f/0x7a0 [ 709.838976][T13586] ? do_mlock+0x38e/0x800 [ 709.839059][T13586] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 709.839099][T13586] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 709.839140][T13586] ? __pfx___x64_sys_futex+0x10/0x10 [ 709.839172][T13586] exit_to_user_mode_loop+0x8c/0x540 [ 709.839205][T13586] do_syscall_64+0x4ee/0xf80 [ 709.839245][T13586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.839268][T13586] RIP: 0033:0x7f6583d8f7c9 [ 709.839287][T13586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 709.839309][T13586] RSP: 002b:00007f6584b5f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 709.839330][T13586] RAX: fffffffffffffe00 RBX: 00007f6583fe5fa8 RCX: 00007f6583d8f7c9 [ 709.839346][T13586] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6583fe5fa8 [ 709.839359][T13586] RBP: 00007f6583fe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 709.839376][T13586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 709.839390][T13586] R13: 00007f6583fe6038 R14: 00007ffddebf9ab0 R15: 00007ffddebf9b98 [ 709.839420][T13586] [ 712.002613][T13629] __vm_enough_memory: pid: 13629, comm: syz.3.1409, bytes: 4398046511104 not enough memory for the allocation [ 712.284498][ T9073] netdevsim netdevsim1335 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.738863][T13632] zswap: compressor not available [ 712.870360][T13642] netlink: 'syz.3.1411': attribute type 1 has an invalid length. [ 713.063243][T13632] Invalid ELF header magic: != ELF [ 714.284655][T13657] FAULT_INJECTION: forcing a failure. [ 714.284655][T13657] name failslab, interval 1, probability 0, space 0, times 0 [ 714.417999][T13657] CPU: 0 UID: 0 PID: 13657 Comm: syz.2.1414 Tainted: G L syzkaller #0 PREEMPT(full) [ 714.418038][T13657] Tainted: [L]=SOFTLOCKUP [ 714.418046][T13657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 714.418061][T13657] Call Trace: [ 714.418068][T13657] [ 714.418077][T13657] dump_stack_lvl+0x16c/0x1f0 [ 714.418121][T13657] should_fail_ex+0x512/0x640 [ 714.418149][T13657] ? __kmalloc_noprof+0xca/0x910 [ 714.418187][T13657] should_failslab+0xc2/0x120 [ 714.418225][T13657] __kmalloc_noprof+0xeb/0x910 [ 714.418252][T13657] ? __register_sysctl_table+0xe8e/0x1900 [ 714.418286][T13657] ? __register_sysctl_table+0xea2/0x1900 [ 714.418324][T13657] ? __register_sysctl_table+0xea2/0x1900 [ 714.418357][T13657] __register_sysctl_table+0xea2/0x1900 [ 714.418398][T13657] ? __pfx___register_sysctl_table+0x10/0x10 [ 714.418431][T13657] ? kfree+0x271/0x6e0 [ 714.418458][T13657] ? __asan_memcpy+0x3c/0x60 [ 714.418490][T13657] setup_mq_sysctls+0x13d/0x230 [ 714.418524][T13657] copy_ipcs+0x51a/0x7d0 [ 714.418553][T13657] create_new_namespaces+0x20a/0xab0 [ 714.418587][T13657] ? security_capable+0x7e/0x260 [ 714.418630][T13657] copy_namespaces+0x468/0x570 [ 714.418671][T13657] copy_process+0x2a70/0x7430 [ 714.418721][T13657] ? __pfx_copy_process+0x10/0x10 [ 714.418764][T13657] ? _copy_from_user+0x59/0xd0 [ 714.418795][T13657] kernel_clone+0xfc/0x910 [ 714.418833][T13657] ? __pfx_kernel_clone+0x10/0x10 [ 714.418868][T13657] ? futex_private_hash_put+0x160/0x1b0 [ 714.418899][T13657] ? __pfx_futex_wait+0x10/0x10 [ 714.418939][T13657] __do_sys_clone3+0x212/0x290 [ 714.418976][T13657] ? __pfx___do_sys_clone3+0x10/0x10 [ 714.419028][T13657] ? find_held_lock+0x2b/0x80 [ 714.419086][T13657] do_syscall_64+0xcd/0xf80 [ 714.419127][T13657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.419152][T13657] RIP: 0033:0x7f6583d8f7c9 [ 714.419171][T13657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 714.419195][T13657] RSP: 002b:00007f6584b5ef08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 714.419218][T13657] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f6583d8f7c9 [ 714.419234][T13657] RDX: 00007f6584b5ef20 RSI: 0000000000000058 RDI: 00007f6584b5ef20 [ 714.419251][T13657] RBP: 00007f6583e13f91 R08: 0000000000000000 R09: 0000000000000058 [ 714.419266][T13657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 714.419281][T13657] R13: 00007f6583fe6038 R14: 00007f6583fe5fa0 R15: 00007ffddebf9b98 [ 714.419312][T13657] [ 714.419323][T13657] sysctl could not get directory: /fs -12 [ 714.885846][T13656] FAULT_INJECTION: forcing a failure. [ 714.885846][T13656] name failslab, interval 1, probability 0, space 0, times 0 [ 714.935346][T13656] CPU: 0 UID: 0 PID: 13656 Comm: syz.1.1415 Tainted: G L syzkaller #0 PREEMPT(full) [ 714.935386][T13656] Tainted: [L]=SOFTLOCKUP [ 714.935395][T13656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 714.935410][T13656] Call Trace: [ 714.935418][T13656] [ 714.935427][T13656] dump_stack_lvl+0x16c/0x1f0 [ 714.935470][T13656] should_fail_ex+0x512/0x640 [ 714.935499][T13656] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 714.935533][T13656] should_failslab+0xc2/0x120 [ 714.935572][T13656] kmem_cache_alloc_node_noprof+0x86/0x800 [ 714.935609][T13656] ? alloc_io_context+0x21/0x2f0 [ 714.935632][T13656] ? create_new_namespaces+0x60c/0xab0 [ 714.935671][T13656] ? alloc_io_context+0x21/0x2f0 [ 714.935694][T13656] alloc_io_context+0x21/0x2f0 [ 714.935718][T13656] __copy_io+0xdc/0x210 [ 714.935744][T13656] copy_process+0x2acd/0x7430 [ 714.935794][T13656] ? __pfx_copy_process+0x10/0x10 [ 714.935831][T13656] ? find_held_lock+0x2b/0x80 [ 714.935870][T13656] ? futex_private_hash_put+0x160/0x1b0 [ 714.935902][T13656] kernel_clone+0xfc/0x910 [ 714.935941][T13656] ? __pfx_kernel_clone+0x10/0x10 [ 714.935994][T13656] __do_sys_clone+0xce/0x120 [ 714.936030][T13656] ? __pfx___do_sys_clone+0x10/0x10 [ 714.936080][T13656] ? xfd_validate_state+0x61/0x180 [ 714.936101][T13656] ? __pfx_do_writev+0x10/0x10 [ 714.936141][T13656] do_syscall_64+0xcd/0xf80 [ 714.936182][T13656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.936206][T13656] RIP: 0033:0x7fdd9638f7c9 [ 714.936225][T13656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 714.936248][T13656] RSP: 002b:00007fdd972f6fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 714.936271][T13656] RAX: ffffffffffffffda RBX: 00007fdd965e5fa0 RCX: 00007fdd9638f7c9 [ 714.936287][T13656] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 714.936302][T13656] RBP: 00007fdd96413f91 R08: 0000000000000000 R09: 0000000000000000 [ 714.936317][T13656] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 714.936332][T13656] R13: 00007fdd965e6038 R14: 00007fdd965e5fa0 R15: 00007fffcc3ab5c8 [ 714.936362][T13656] [ 716.243837][T13671] binder: 13670:13671 ioctl c018620c 0 returned -1 [ 716.286032][T13671] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1418'. [ 716.430990][T13678] __vm_enough_memory: pid: 13678, comm: syz.3.1420, bytes: 4398046511104 not enough memory for the allocation [ 717.717857][T13691] random: crng reseeded on system resumption [ 718.379285][T13695] ptrace attach of "./syz-executor exec"[5832] was attempted by ""[13695] [ 718.657426][T13698] vivid-007: ================= START STATUS ================= [ 718.717615][T13698] vivid-007: Generate PTS: true [ 718.821465][T13698] vivid-007: Generate SCR: true [ 718.882494][T13698] tpg source WxH: 320x240 (Y'CbCr) [ 718.962960][T13707] futex_wake_op: syz.1.1426 tries to shift op by -2048; fix this program [ 718.989334][T13698] tpg field: 1 [ 719.022444][T13698] tpg crop: (0,0)/320x240 [ 719.041576][T13707] futex_wake_op: syz.1.1426 tries to shift op by -2048; fix this program [ 719.080003][T13698] tpg compose: (0,0)/320x240 [ 719.115605][T13698] tpg colorspace: 8 [ 719.147075][T13710] 0x000000000001-0x000000020000 : "" [ 719.233257][T13710] ftl_cs: FTL header corrupt! [ 719.252880][T13698] tpg transfer function: 0/0 [ 719.331428][T13698] tpg Y'CbCr encoding: 0/0 [ 719.407006][T13698] tpg quantization: 0/0 [ 719.533195][T13698] tpg RGB range: 0/2 [ 719.584901][T13698] vivid-007: ================== END STATUS ================== [ 720.577601][T13723] vhci_hcd vhci_hcd.0: invalid port number 16 [ 721.091167][T13731] __vm_enough_memory: pid: 13731, comm: syz.3.1429, bytes: 4398046511104 not enough memory for the allocation [ 721.160007][T13733] erspan0: entered allmulticast mode [ 721.735383][ T7298] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 1308 with max blocks 57 with error 117 [ 721.735494][ T7298] EXT4-fs (sda1): This should not happen!! Data will be lost [ 721.735494][ T7298] [ 721.737326][ T7298] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1340 with max blocks 17 with error 117 [ 721.737355][ T7298] EXT4-fs (sda1): This should not happen!! Data will be lost [ 721.737355][ T7298] [ 721.830348][T13744] binder: 13743:13744 ioctl c018620c 0 returned -1 [ 721.843597][T13744] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1433'. [ 723.733475][T13767] random: crng reseeded on system resumption [ 724.279468][ T7425] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 1351 with max blocks 14 with error 117 [ 724.348233][T13784] ptrace attach of "./syz-executor exec"[5831] was attempted by ""[13784] [ 724.369923][ T7425] EXT4-fs (sda1): This should not happen!! Data will be lost [ 724.369923][ T7425] [ 724.422818][ T7425] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1327 with max blocks 13 with error 117 [ 724.448051][T13782] netlink: 'syz.2.1440': attribute type 1 has an invalid length. [ 724.519466][ T7425] EXT4-fs (sda1): This should not happen!! Data will be lost [ 724.519466][ T7425] [ 730.883499][T13836] __vm_enough_memory: pid: 13836, comm: syz.1.1450, bytes: 4398046511104 not enough memory for the allocation [ 731.173206][T13841] binder: 13840:13841 ioctl c018620c 0 returned -1 [ 731.213087][T13841] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1451'. [ 731.636177][T13849] futex_wake_op: syz.1.1452 tries to shift op by -2048; fix this program [ 731.740360][T13849] futex_wake_op: syz.1.1452 tries to shift op by -2048; fix this program [ 731.821359][T13850] 0x000000000001-0x000000020000 : "" [ 731.990016][T13850] ftl_cs: FTL header corrupt! [ 733.683319][T13877] __vm_enough_memory: pid: 13877, comm: syz.3.1458, bytes: 4398046511104 not enough memory for the allocation [ 733.955149][T13865] sd 0:0:1:0: PR command failed: 1026 [ 733.976677][T13865] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 734.013859][T13865] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 735.067384][T13885] Invalid ELF header magic: != ELF [ 738.391792][T13934] block nbd2: not configured, cannot reconfigure [ 738.450981][T13931] hub 1-0:1.0: USB hub found [ 738.478165][T13931] hub 1-0:1.0: 1 port detected [ 738.558914][T13937] hub 1-0:1.0: USB hub found [ 738.619632][T13937] hub 1-0:1.0: 1 port detected [ 739.296575][T13958] __vm_enough_memory: pid: 13958, comm: syz.2.1472, bytes: 4398046511104 not enough memory for the allocation [ 739.847142][ T7328] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1317 with max blocks 40 with error 117 [ 739.907985][ T7328] EXT4-fs (sda1): This should not happen!! Data will be lost [ 739.907985][ T7328] [ 739.963021][T13966] Console: switching to colour VGA+ 80x25 [ 741.480272][T13983] zswap: compressor not available [ 741.500800][T13994] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input26 [ 741.615866][T13983] FAULT_INJECTION: forcing a failure. [ 741.615866][T13983] name failslab, interval 1, probability 0, space 0, times 0 [ 741.906499][T13983] CPU: 0 UID: 0 PID: 13983 Comm: syz.0.1480 Tainted: G L syzkaller #0 PREEMPT(full) [ 741.906545][T13983] Tainted: [L]=SOFTLOCKUP [ 741.906553][T13983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 741.906569][T13983] Call Trace: [ 741.906576][T13983] [ 741.906585][T13983] dump_stack_lvl+0x16c/0x1f0 [ 741.906630][T13983] should_fail_ex+0x512/0x640 [ 741.906659][T13983] ? fs_reclaim_acquire+0xae/0x150 [ 741.906701][T13983] should_failslab+0xc2/0x120 [ 741.906740][T13983] kmem_cache_alloc_noprof+0x83/0x770 [ 741.906769][T13983] ? __pfx_map_id_range_down+0x10/0x10 [ 741.906806][T13983] ? security_inode_alloc+0x3b/0x2b0 [ 741.906838][T13983] ? security_inode_alloc+0x3b/0x2b0 [ 741.906862][T13983] security_inode_alloc+0x3b/0x2b0 [ 741.906890][T13983] inode_init_always_gfp+0xced/0x1040 [ 741.906932][T13983] alloc_inode+0x86/0x240 [ 741.906959][T13983] sock_alloc+0x40/0x280 [ 741.906997][T13983] sock_create_lite+0x82/0x120 [ 741.907037][T13983] __netlink_kernel_create+0xbd/0x750 [ 741.907077][T13983] ? __pfx___netlink_kernel_create+0x10/0x10 [ 741.907124][T13983] uevent_net_init+0xf8/0x350 [ 741.907152][T13983] ? __pfx_uevent_net_init+0x10/0x10 [ 741.907179][T13983] ? rcu_is_watching+0x12/0xc0 [ 741.907214][T13983] ? __pfx_uevent_net_rcv+0x10/0x10 [ 741.907243][T13983] ? ops_init+0x77/0x5f0 [ 741.907281][T13983] ? __pfx_uevent_net_init+0x10/0x10 [ 741.907308][T13983] ops_init+0x1e2/0x5f0 [ 741.907345][T13983] setup_net+0x11d/0x3a0 [ 741.907380][T13983] ? __pfx_setup_net+0x10/0x10 [ 741.907414][T13983] ? lockdep_init_map_type+0x5c/0x270 [ 741.907447][T13983] ? mutex_init_lockep+0x110/0x150 [ 741.907476][T13983] copy_net_ns+0x351/0x7c0 [ 741.907518][T13983] create_new_namespaces+0x3ea/0xab0 [ 741.907559][T13983] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 741.907597][T13983] ksys_unshare+0x45b/0xa40 [ 741.907636][T13983] ? __pfx_ksys_unshare+0x10/0x10 [ 741.907677][T13983] ? xfd_validate_state+0x61/0x180 [ 741.907708][T13983] __x64_sys_unshare+0x31/0x40 [ 741.907730][T13983] do_syscall_64+0xcd/0xf80 [ 741.907771][T13983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.907796][T13983] RIP: 0033:0x7fb38678f7c9 [ 741.907816][T13983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 741.907839][T13983] RSP: 002b:00007fb387544038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 741.907862][T13983] RAX: ffffffffffffffda RBX: 00007fb3869e5fa0 RCX: 00007fb38678f7c9 [ 741.907878][T13983] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 741.907892][T13983] RBP: 00007fb386813f91 R08: 0000000000000000 R09: 0000000000000000 [ 741.907907][T13983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 741.907921][T13983] R13: 00007fb3869e6038 R14: 00007fb3869e5fa0 R15: 00007ffd1bb63908 [ 741.907952][T13983] [ 741.907989][T13983] kobject_uevent: unable to create netlink socket! [ 742.350622][T14000] lo: entered allmulticast mode [ 743.138219][T14001] lo: left allmulticast mode [ 743.368175][T14017] __vm_enough_memory: pid: 14017, comm: syz.3.1484, bytes: 4398046511104 not enough memory for the allocation [ 745.715720][T14047] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 745.756661][T14047] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 745.777023][T10842] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 745.784564][T10842] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 747.869746][T14070] lo: entered allmulticast mode [ 748.188675][T14071] zswap: compressor not available [ 748.318416][T14071] FAULT_INJECTION: forcing a failure. [ 748.318416][T14071] name failslab, interval 1, probability 0, space 0, times 0 [ 748.337679][T14075] lo: left allmulticast mode [ 748.487053][T14071] CPU: 0 UID: 0 PID: 14071 Comm: syz.1.1496 Tainted: G L syzkaller #0 PREEMPT(full) [ 748.487093][T14071] Tainted: [L]=SOFTLOCKUP [ 748.487102][T14071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 748.487122][T14071] Call Trace: [ 748.487130][T14071] [ 748.487140][T14071] dump_stack_lvl+0x16c/0x1f0 [ 748.487184][T14071] should_fail_ex+0x512/0x640 [ 748.487212][T14071] ? __kmalloc_noprof+0xca/0x910 [ 748.487241][T14071] should_failslab+0xc2/0x120 [ 748.487280][T14071] __kmalloc_noprof+0xeb/0x910 [ 748.487306][T14071] ? lockdep_init_map_type+0x5c/0x270 [ 748.487329][T14071] ? ops_init+0x77/0x5f0 [ 748.487367][T14071] ? ops_init+0x77/0x5f0 [ 748.487401][T14071] ops_init+0x77/0x5f0 [ 748.487438][T14071] setup_net+0x11d/0x3a0 [ 748.487473][T14071] ? __pfx_setup_net+0x10/0x10 [ 748.487506][T14071] ? lockdep_init_map_type+0x5c/0x270 [ 748.487531][T14071] ? mutex_init_lockep+0x110/0x150 [ 748.487559][T14071] copy_net_ns+0x351/0x7c0 [ 748.487599][T14071] create_new_namespaces+0x3ea/0xab0 [ 748.487639][T14071] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 748.487675][T14071] ksys_unshare+0x45b/0xa40 [ 748.487714][T14071] ? __pfx_ksys_unshare+0x10/0x10 [ 748.487754][T14071] ? xfd_validate_state+0x61/0x180 [ 748.487784][T14071] __x64_sys_unshare+0x31/0x40 [ 748.487805][T14071] do_syscall_64+0xcd/0xf80 [ 748.487845][T14071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.487870][T14071] RIP: 0033:0x7fdd9638f7c9 [ 748.487896][T14071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 748.487919][T14071] RSP: 002b:00007fdd972f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 748.487942][T14071] RAX: ffffffffffffffda RBX: 00007fdd965e5fa0 RCX: 00007fdd9638f7c9 [ 748.487958][T14071] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 748.487972][T14071] RBP: 00007fdd96413f91 R08: 0000000000000000 R09: 0000000000000000 [ 748.487986][T14071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 748.488000][T14071] R13: 00007fdd965e6038 R14: 00007fdd965e5fa0 R15: 00007fffcc3ab5c8 [ 748.488031][T14071] [ 748.975482][T14089] __vm_enough_memory: pid: 14089, comm: syz.3.1499, bytes: 4398046511104 not enough memory for the allocation [ 749.604222][T14097] __vm_enough_memory: pid: 14097, comm: syz.3.1501, bytes: 4398046511104 not enough memory for the allocation [ 750.090558][T14095] : Can't lookup blockdev [ 751.549650][T14131] __vm_enough_memory: pid: 14131, comm: syz.0.1509, bytes: 4398046511104 not enough memory for the allocation [ 752.159987][T14144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1511'. [ 752.218608][T14145] __vm_enough_memory: pid: 14145, comm: syz.0.1512, bytes: 4398046511104 not enough memory for the allocation [ 753.394709][T14166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1516'. [ 753.660392][T14173] i2c i2c-0: new_device: Invalid device name [ 753.717285][T14166] FAULT_INJECTION: forcing a failure. [ 753.717285][T14166] name failslab, interval 1, probability 0, space 0, times 0 [ 753.739838][T14161] zswap: compressor not available [ 753.823063][T14171] FAULT_INJECTION: forcing a failure. [ 753.823063][T14171] name failslab, interval 1, probability 0, space 0, times 0 [ 753.884368][T14166] CPU: 0 UID: 0 PID: 14166 Comm: syz.0.1516 Tainted: G L syzkaller #0 PREEMPT(full) [ 753.884407][T14166] Tainted: [L]=SOFTLOCKUP [ 753.884415][T14166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 753.884430][T14166] Call Trace: [ 753.884437][T14166] [ 753.884447][T14166] dump_stack_lvl+0x16c/0x1f0 [ 753.884490][T14166] should_fail_ex+0x512/0x640 [ 753.884518][T14166] ? __kmalloc_cache_noprof+0x5f/0x800 [ 753.884549][T14166] should_failslab+0xc2/0x120 [ 753.884594][T14166] __kmalloc_cache_noprof+0x80/0x800 [ 753.884621][T14166] ? rcu_is_watching+0x12/0xc0 [ 753.884654][T14166] ? __request_module+0x2ad/0x660 [ 753.884684][T14166] ? lockdep_hardirqs_on+0x7c/0x110 [ 753.884727][T14166] ? __request_module+0x2ad/0x660 [ 753.884757][T14166] __request_module+0x2ad/0x660 [ 753.884789][T14166] ? __pfx___request_module+0x10/0x10 [ 753.884834][T14166] ? find_held_lock+0x2b/0x80 [ 753.884873][T14166] inet_create+0xa97/0x1040 [ 753.884904][T14166] ? inet_create+0x93/0x1040 [ 753.884939][T14166] __sock_create+0x339/0x8a0 [ 753.884969][T14166] __sys_socket+0x14d/0x260 [ 753.884992][T14166] ? fput+0x70/0xf0 [ 753.885015][T14166] ? __pfx___sys_socket+0x10/0x10 [ 753.885040][T14166] ? xfd_validate_state+0x61/0x180 [ 753.885061][T14166] ? __pfx_ksys_write+0x10/0x10 [ 753.885102][T14166] __x64_sys_socket+0x72/0xb0 [ 753.885126][T14166] ? lockdep_hardirqs_on+0x7c/0x110 [ 753.885164][T14166] do_syscall_64+0xcd/0xf80 [ 753.885210][T14166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.885236][T14166] RIP: 0033:0x7fb38678f7c9 [ 753.885254][T14166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 753.885278][T14166] RSP: 002b:00007fb387544038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 753.885301][T14166] RAX: ffffffffffffffda RBX: 00007fb3869e5fa0 RCX: 00007fb38678f7c9 [ 753.885318][T14166] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000002 [ 753.885332][T14166] RBP: 00007fb386813f91 R08: 0000000000000000 R09: 0000000000000000 [ 753.885347][T14166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 753.885362][T14166] R13: 00007fb3869e6038 R14: 00007fb3869e5fa0 R15: 00007ffd1bb63908 [ 753.885394][T14166] [ 754.760811][T14171] CPU: 0 UID: 0 PID: 14171 Comm: syz.0.1516 Tainted: G L syzkaller #0 PREEMPT(full) [ 754.760851][T14171] Tainted: [L]=SOFTLOCKUP [ 754.760860][T14171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 754.760875][T14171] Call Trace: [ 754.760883][T14171] [ 754.760893][T14171] dump_stack_lvl+0x16c/0x1f0 [ 754.760936][T14171] should_fail_ex+0x512/0x640 [ 754.760964][T14171] ? __kmalloc_noprof+0xca/0x910 [ 754.760994][T14171] should_failslab+0xc2/0x120 [ 754.761032][T14171] __kmalloc_noprof+0xeb/0x910 [ 754.761058][T14171] ? rcu_is_watching+0x12/0xc0 [ 754.761091][T14171] ? eeprom_prepare_data+0x1ce/0x920 [ 754.761134][T14171] ? eeprom_prepare_data+0x1ce/0x920 [ 754.761170][T14171] eeprom_prepare_data+0x1ce/0x920 [ 754.761212][T14171] ? __pfx_eeprom_prepare_data+0x10/0x10 [ 754.761249][T14171] ? __pfx___mutex_lock+0x10/0x10 [ 754.761275][T14171] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 754.761313][T14171] ? skb_put+0x138/0x1b0 [ 754.761349][T14171] ethnl_default_dump_one+0x29b/0xa20 [ 754.761389][T14171] ethnl_default_dumpit+0x28d/0x6c0 [ 754.761437][T14171] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 754.761481][T14171] genl_dumpit+0x125/0x230 [ 754.761506][T14171] netlink_dump+0x539/0xd30 [ 754.761544][T14171] ? __pfx_netlink_dump+0x10/0x10 [ 754.761579][T14171] ? __pfx_eeprom_parse_request+0x10/0x10 [ 754.761628][T14171] ? __pfx_ethnl_default_start+0x10/0x10 [ 754.761660][T14171] ? genl_start+0x67f/0x980 [ 754.761686][T14171] __netlink_dump_start+0x6d6/0x990 [ 754.761726][T14171] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 754.761753][T14171] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 754.761779][T14171] ? consume_skb+0xcc/0x100 [ 754.761820][T14171] ? __pfx_genl_start+0x10/0x10 [ 754.761840][T14171] ? __pfx_genl_dumpit+0x10/0x10 [ 754.761861][T14171] ? __pfx_genl_done+0x10/0x10 [ 754.761885][T14171] ? bpf_lsm_capable+0x9/0x10 [ 754.761917][T14171] ? security_capable+0x7e/0x260 [ 754.761957][T14171] ? ns_capable+0xd7/0x110 [ 754.761991][T14171] genl_rcv_msg+0x46e/0x800 [ 754.762018][T14171] ? __pfx_genl_rcv_msg+0x10/0x10 [ 754.762042][T14171] ? __pfx_ethnl_default_start+0x10/0x10 [ 754.762074][T14171] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 754.762106][T14171] ? __pfx_ethnl_default_done+0x10/0x10 [ 754.762149][T14171] netlink_rcv_skb+0x158/0x420 [ 754.762189][T14171] ? __pfx_genl_rcv_msg+0x10/0x10 [ 754.762215][T14171] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 754.762265][T14171] ? netlink_deliver_tap+0x1ae/0xd30 [ 754.762305][T14171] genl_rcv+0x28/0x40 [ 754.762325][T14171] netlink_unicast+0x5aa/0x870 [ 754.762367][T14171] ? __pfx_netlink_unicast+0x10/0x10 [ 754.762420][T14171] netlink_sendmsg+0x8c8/0xdd0 [ 754.762462][T14171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 754.762503][T14171] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 754.762551][T14171] ____sys_sendmsg+0xa5d/0xc30 [ 754.762574][T14171] ? copy_msghdr_from_user+0x10a/0x160 [ 754.762621][T14171] ? __pfx_____sys_sendmsg+0x10/0x10 [ 754.762650][T14171] ? __pfx_futex_wake_mark+0x10/0x10 [ 754.762687][T14171] ___sys_sendmsg+0x134/0x1d0 [ 754.762721][T14171] ? __pfx____sys_sendmsg+0x10/0x10 [ 754.762753][T14171] ? futex_private_hash_put+0x160/0x1b0 [ 754.762810][T14171] __sys_sendmsg+0x16d/0x220 [ 754.762862][T14171] ? __pfx___sys_sendmsg+0x10/0x10 [ 754.762894][T14171] ? __x64_sys_futex+0x1e0/0x4c0 [ 754.762939][T14171] do_syscall_64+0xcd/0xf80 [ 754.762980][T14171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.763005][T14171] RIP: 0033:0x7fb38678f7c9 [ 754.763024][T14171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 754.763049][T14171] RSP: 002b:00007fb3849f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 754.763071][T14171] RAX: ffffffffffffffda RBX: 00007fb3869e6090 RCX: 00007fb38678f7c9 [ 754.763088][T14171] RDX: 0000000004004840 RSI: 0000200000001780 RDI: 000000000000000a [ 754.763102][T14171] RBP: 00007fb386813f91 R08: 0000000000000000 R09: 0000000000000000 [ 754.763117][T14171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 754.763132][T14171] R13: 00007fb3869e6128 R14: 00007fb3869e6090 R15: 00007ffd1bb63908 [ 754.763164][T14171] [ 756.824499][T14193] vhci_hcd vhci_hcd.0: invalid port number 16 [ 757.308505][T14192] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.830995][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 757.838852][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 758.284272][T14192] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.641219][T14192] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.701143][T14268] random: crng reseeded on system resumption [ 765.229055][T14306] blktrace: Concurrent blktraces are not allowed on loop2 [ 765.496611][T14303] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 766.191970][T14306] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 912 with max blocks 20 with error 117 [ 766.362997][T14306] EXT4-fs (sda1): This should not happen!! Data will be lost [ 766.362997][T14306] [ 766.542507][T14312] : Can't lookup blockdev [ 768.746938][ T7293] Bluetooth: hci2: unexpected event 0x3e length: 728 > 260 [ 768.746969][ T7293] Bluetooth: hci2: unexpected subevent 0x0c length: 727 > 5 [ 769.339572][T14349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1548'. [ 771.501736][T14363] Invalid ELF header magic: != ELF [ 772.519841][T14381] : Can't lookup blockdev [ 773.172707][T14394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.222917][T14394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.303797][T14394] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' [ 773.393086][T14394] CPU: 0 UID: 0 PID: 14394 Comm: syz.2.1559 Tainted: G L syzkaller #0 PREEMPT(full) [ 773.393125][T14394] Tainted: [L]=SOFTLOCKUP [ 773.393134][T14394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 773.393148][T14394] Call Trace: [ 773.393155][T14394] [ 773.393165][T14394] dump_stack_lvl+0x16c/0x1f0 [ 773.393209][T14394] sysfs_warn_dup+0x7f/0xa0 [ 773.393237][T14394] sysfs_do_create_link_sd+0x124/0x140 [ 773.393267][T14394] sysfs_create_link+0x61/0xc0 [ 773.393295][T14394] device_add+0x652/0x1980 [ 773.393335][T14394] ? __pfx_device_add+0x10/0x10 [ 773.393370][T14394] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 773.393410][T14394] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 773.393455][T14394] wiphy_register+0x1ea1/0x2cc0 [ 773.393480][T14394] ? __rtnl_unlock+0x68/0xf0 [ 773.393519][T14394] ? net_rx_action+0xac0/0xfa0 [ 773.393554][T14394] ? __pfx_wiphy_register+0x10/0x10 [ 773.393580][T14394] ? __asan_memset+0x23/0x50 [ 773.393619][T14394] ? ieee80211_init_rate_ctrl_alg+0x125/0x680 [ 773.393647][T14394] ieee80211_register_hw+0x2bb2/0x4160 [ 773.393684][T14394] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 773.393709][T14394] ? __pfx___debug_object_init+0x10/0x10 [ 773.393756][T14394] ? find_held_lock+0x2b/0x80 [ 773.393790][T14394] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 773.393828][T14394] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 773.393867][T14394] ? __hrtimer_setup+0x176/0x280 [ 773.393904][T14394] mac80211_hwsim_new_radio+0x3323/0x5150 [ 773.393956][T14394] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 773.393990][T14394] ? __asan_memcpy+0x3c/0x60 [ 773.394031][T14394] hwsim_new_radio_nl+0xba2/0x1330 [ 773.394064][T14394] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 773.394102][T14394] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 773.394130][T14394] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 773.394163][T14394] genl_family_rcv_msg_doit+0x209/0x2f0 [ 773.394191][T14394] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 773.394216][T14394] ? genl_get_cmd+0x194/0x580 [ 773.394262][T14394] ? bpf_lsm_capable+0x9/0x10 [ 773.394295][T14394] ? security_capable+0x7e/0x260 [ 773.394335][T14394] ? ns_capable+0xd7/0x110 [ 773.394368][T14394] genl_rcv_msg+0x55c/0x800 [ 773.394396][T14394] ? __pfx_genl_rcv_msg+0x10/0x10 [ 773.394421][T14394] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 773.394453][T14394] ? __lock_acquire+0x436/0x2890 [ 773.394481][T14394] netlink_rcv_skb+0x158/0x420 [ 773.394518][T14394] ? __pfx_genl_rcv_msg+0x10/0x10 [ 773.394544][T14394] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 773.394593][T14394] ? netlink_deliver_tap+0x1ae/0xd30 [ 773.394632][T14394] genl_rcv+0x28/0x40 [ 773.394652][T14394] netlink_unicast+0x5aa/0x870 [ 773.394693][T14394] ? __pfx_netlink_unicast+0x10/0x10 [ 773.394730][T14394] ? __pfx___might_resched+0x10/0x10 [ 773.394763][T14394] ? __lock_acquire+0x436/0x2890 [ 773.394793][T14394] netlink_sendmsg+0x8c8/0xdd0 [ 773.394835][T14394] ? __pfx_netlink_sendmsg+0x10/0x10 [ 773.394876][T14394] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 773.394923][T14394] ____sys_sendmsg+0xa5d/0xc30 [ 773.394947][T14394] ? copy_msghdr_from_user+0x10a/0x160 [ 773.394980][T14394] ? __pfx_____sys_sendmsg+0x10/0x10 [ 773.395007][T14394] ? preempt_schedule_thunk+0x16/0x30 [ 773.395037][T14394] ? try_to_wake_up+0xa67/0x1860 [ 773.395075][T14394] ___sys_sendmsg+0x134/0x1d0 [ 773.395111][T14394] ? __pfx____sys_sendmsg+0x10/0x10 [ 773.395144][T14394] ? futex_private_hash_put+0x160/0x1b0 [ 773.395205][T14394] __sys_sendmsg+0x16d/0x220 [ 773.395240][T14394] ? __pfx___sys_sendmsg+0x10/0x10 [ 773.395273][T14394] ? __x64_sys_futex+0x1e0/0x4c0 [ 773.395320][T14394] do_syscall_64+0xcd/0xf80 [ 773.395362][T14394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.395387][T14394] RIP: 0033:0x7f6583d8f7c9 [ 773.395407][T14394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 773.395432][T14394] RSP: 002b:00007f6584b5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 773.395454][T14394] RAX: ffffffffffffffda RBX: 00007f6583fe5fa0 RCX: 00007f6583d8f7c9 [ 773.395471][T14394] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000005 [ 773.395486][T14394] RBP: 00007f6583e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 773.395500][T14394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 773.395514][T14394] R13: 00007f6583fe6038 R14: 00007f6583fe5fa0 R15: 00007ffddebf9b98 [ 773.395545][T14394] [ 774.198743][T14408] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1561'. [ 774.312621][T14404] FAULT_INJECTION: forcing a failure. [ 774.312621][T14404] name failslab, interval 1, probability 0, space 0, times 0 [ 774.312679][T14404] CPU: 0 UID: 0 PID: 14404 Comm: syz.1.1561 Tainted: G L syzkaller #0 PREEMPT(full) [ 774.312714][T14404] Tainted: [L]=SOFTLOCKUP [ 774.312722][T14404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 774.312736][T14404] Call Trace: [ 774.312744][T14404] [ 774.312753][T14404] dump_stack_lvl+0x16c/0x1f0 [ 774.312796][T14404] should_fail_ex+0x512/0x640 [ 774.312824][T14404] ? fs_reclaim_acquire+0xae/0x150 [ 774.312865][T14404] should_failslab+0xc2/0x120 [ 774.312949][T14404] __kmalloc_noprof+0xeb/0x910 [ 774.312978][T14404] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 774.313019][T14404] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 774.313052][T14404] tomoyo_realpath_from_path+0xc2/0x6e0 [ 774.313097][T14404] tomoyo_check_open_permission+0x2ab/0x3c0 [ 774.313128][T14404] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 774.313184][T14404] ? lock_acquire+0x179/0x330 [ 774.313207][T14404] ? find_held_lock+0x2b/0x80 [ 774.313239][T14404] ? mnt_get_write_access+0x52/0x2f0 [ 774.313269][T14404] tomoyo_file_open+0x6b/0x90 [ 774.313309][T14404] security_file_open+0x84/0x1e0 [ 774.313341][T14404] do_dentry_open+0x597/0x1590 [ 774.313380][T14404] ? security_inode_permission+0xbf/0x260 [ 774.313413][T14404] vfs_open+0x82/0x3f0 [ 774.313443][T14404] path_openat+0x2078/0x3140 [ 774.313488][T14404] ? __pfx_path_openat+0x10/0x10 [ 774.313536][T14404] do_filp_open+0x20b/0x470 [ 774.313574][T14404] ? __pfx_do_filp_open+0x10/0x10 [ 774.313632][T14404] ? alloc_fd+0x471/0x7d0 [ 774.313675][T14404] do_sys_openat2+0x121/0x290 [ 774.313702][T14404] ? __pfx_do_sys_openat2+0x10/0x10 [ 774.313740][T14404] __x64_sys_openat+0x174/0x210 [ 774.313769][T14404] ? __pfx___x64_sys_openat+0x10/0x10 [ 774.313798][T14404] ? syscall_user_dispatch+0x78/0x140 [ 774.313838][T14404] do_syscall_64+0xcd/0xf80 [ 774.313878][T14404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.313910][T14404] RIP: 0033:0x7fdd9638f7c9 [ 774.313930][T14404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 774.313955][T14404] RSP: 002b:00007fdd972f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 774.313978][T14404] RAX: ffffffffffffffda RBX: 00007fdd965e5fa0 RCX: 00007fdd9638f7c9 [ 774.313994][T14404] RDX: 0000000000004282 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 774.314009][T14404] RBP: 00007fdd96413f91 R08: 0000000000000000 R09: 0000000000000000 [ 774.314025][T14404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 774.314038][T14404] R13: 00007fdd965e6038 R14: 00007fdd965e5fa0 R15: 00007fffcc3ab5c8 [ 774.314069][T14404] [ 774.314078][T14404] ERROR: Out of memory at tomoyo_realpath_from_path. [ 775.683609][T14422] __vm_enough_memory: pid: 14422, comm: syz.2.1563, bytes: 4398046511104 not enough memory for the allocation [ 777.542920][T14444] hub 1-0:1.0: USB hub found [ 777.612574][T14444] hub 1-0:1.0: 1 port detected [ 777.747881][T14446] hub 1-0:1.0: USB hub found [ 777.823054][T14446] hub 1-0:1.0: 1 port detected [ 780.544522][T14473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1573'. [ 781.350477][T14473] : Can't lookup blockdev [ 782.233779][T14483] __vm_enough_memory: pid: 14483, comm: syz.2.1575, bytes: 4398046511104 not enough memory for the allocation [ 782.632382][T14493] __vm_enough_memory: pid: 14493, comm: syz.2.1585, bytes: 4398046511104 not enough memory for the allocation [ 782.745112][T14497] blktrace: Concurrent blktraces are not allowed on loop2 [ 782.855992][T14502] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 782.989654][T14498] nvme_fabrics: missing parameter 'transport=%s' [ 783.067984][T14498] nvme_fabrics: missing parameter 'nqn=%s' [ 783.716977][T14510] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1580: iget: checksum invalid [ 783.800988][T14510] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 783.940738][T14510] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1580: iget: checksum invalid [ 783.940959][T14510] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 783.941124][T14510] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1580: iget: checksum invalid [ 783.941288][T14510] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 783.941437][T14510] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1580: iget: checksum invalid [ 783.941598][T14510] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 783.941634][T14510] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 783.941668][T14510] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 784.109860][T14524] __vm_enough_memory: pid: 14524, comm: syz.3.1583, bytes: 4398046511104 not enough memory for the allocation [ 784.605824][T14530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1586'. [ 784.857792][T14536] : Can't lookup blockdev [ 786.275792][T14552] __vm_enough_memory: pid: 14552, comm: syz.1.1589, bytes: 4398046511104 not enough memory for the allocation [ 787.356669][T14558] : Can't lookup blockdev [ 792.346278][T14638] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.1605: iget: checksum invalid [ 792.416268][T14638] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 792.539237][T14638] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.1605: iget: checksum invalid [ 792.649725][T14638] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 792.771191][T14638] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.1605: iget: checksum invalid [ 792.914692][T14638] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 793.044750][T14638] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.1605: iget: checksum invalid [ 793.177875][T14638] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 793.221484][T14638] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 793.274762][T14654] hub 1-0:1.0: USB hub found [ 793.360467][T14654] hub 1-0:1.0: 1 port detected [ 793.367194][T14638] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 793.461543][T14650] hub 1-0:1.0: USB hub found [ 793.490888][T14650] hub 1-0:1.0: 1 port detected [ 794.181022][T14664] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1609'. [ 794.538720][T14664] FAULT_INJECTION: forcing a failure. [ 794.538720][T14664] name failslab, interval 1, probability 0, space 0, times 0 [ 794.589586][T14664] CPU: 0 UID: 0 PID: 14664 Comm: syz.3.1609 Tainted: G L syzkaller #0 PREEMPT(full) [ 794.589625][T14664] Tainted: [L]=SOFTLOCKUP [ 794.589633][T14664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 794.589648][T14664] Call Trace: [ 794.589655][T14664] [ 794.589664][T14664] dump_stack_lvl+0x16c/0x1f0 [ 794.589709][T14664] should_fail_ex+0x512/0x640 [ 794.589737][T14664] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 794.589772][T14664] should_failslab+0xc2/0x120 [ 794.589812][T14664] kmem_cache_alloc_node_noprof+0x86/0x800 [ 794.589842][T14664] ? __alloc_skb+0x156/0x410 [ 794.589877][T14664] ? __alloc_skb+0x156/0x410 [ 794.589904][T14664] __alloc_skb+0x156/0x410 [ 794.589930][T14664] ? __alloc_skb+0x35d/0x410 [ 794.589958][T14664] ? __pfx___alloc_skb+0x10/0x10 [ 794.589987][T14664] ? __rcu_read_unlock+0x2b5/0x5a0 [ 794.590018][T14664] ? fib_nlmsg_size+0x90/0xaa0 [ 794.590048][T14664] ? call_fib_notifiers+0x5a/0x70 [ 794.590089][T14664] rtmsg_fib+0x13e/0x520 [ 794.590121][T14664] ? __pfx_rtmsg_fib+0x10/0x10 [ 794.590157][T14664] ? lockdep_rtnl_is_held+0x26/0x40 [ 794.590184][T14664] ? fib_find_node+0x22b/0x2b0 [ 794.590219][T14664] fib_table_delete+0x60c/0x8f0 [ 794.590257][T14664] ? lock_acquire+0x120/0x330 [ 794.590287][T14664] ? __pfx_fib_table_delete+0x10/0x10 [ 794.590335][T14664] ? find_held_lock+0x2b/0x80 [ 794.590368][T14664] ? fib_magic+0x1a7/0x5c0 [ 794.590390][T14664] ? fib_new_table+0x109/0x3f0 [ 794.590420][T14664] fib_magic+0x362/0x5c0 [ 794.590446][T14664] ? __pfx_fib_magic+0x10/0x10 [ 794.590484][T14664] ? __pfx___schedule+0x10/0x10 [ 794.590519][T14664] ? lockdep_hardirqs_on+0x7c/0x110 [ 794.590562][T14664] fib_del_ifaddr+0xd22/0x1510 [ 794.590595][T14664] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 794.590624][T14664] fib_inetaddr_event+0xb9/0x270 [ 794.590655][T14664] notifier_call_chain+0xbc/0x3e0 [ 794.590695][T14664] ? __pfx_fib_inetaddr_event+0x10/0x10 [ 794.590729][T14664] blocking_notifier_call_chain+0x69/0xa0 [ 794.590756][T14664] __inet_del_ifa+0x3dc/0xf50 [ 794.590789][T14664] inetdev_event+0x593/0x1870 [ 794.590816][T14664] ? ib_netdevice_event+0xfc/0x330 [ 794.590848][T14664] ? __pfx_inetdev_event+0x10/0x10 [ 794.590875][T14664] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 794.590917][T14664] notifier_call_chain+0xbc/0x3e0 [ 794.590956][T14664] ? __pfx_inetdev_event+0x10/0x10 [ 794.590987][T14664] call_netdevice_notifiers_info+0xbe/0x110 [ 794.591014][T14664] unregister_netdevice_many_notify+0xf81/0x2590 [ 794.591064][T14664] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 794.591108][T14664] ? __pfx___might_resched+0x10/0x10 [ 794.591151][T14664] macsec_notify+0x405/0x680 [ 794.591184][T14664] ? ipvtap_device_event+0xcd/0x3e0 [ 794.591220][T14664] ? __pfx_macsec_notify+0x10/0x10 [ 794.591254][T14664] ? bond_netdev_event+0xe7/0xe00 [ 794.591294][T14664] notifier_call_chain+0xbc/0x3e0 [ 794.591339][T14664] ? __pfx_macsec_notify+0x10/0x10 [ 794.591377][T14664] call_netdevice_notifiers_info+0xbe/0x110 [ 794.591403][T14664] unregister_netdevice_many_notify+0xf81/0x2590 [ 794.591453][T14664] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 794.591495][T14664] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 794.591547][T14664] rtnl_dellink+0x45f/0xad0 [ 794.591579][T14664] ? __pfx_veth_dellink+0x10/0x10 [ 794.591611][T14664] ? kmem_cache_free+0x2d8/0x770 [ 794.591641][T14664] ? kfree_skbmem+0x1a4/0x1f0 [ 794.591662][T14664] ? consume_skb+0xcc/0x100 [ 794.591695][T14664] ? nlmon_xmit+0xa5/0xe0 [ 794.591729][T14664] ? __pfx_rtnl_dellink+0x10/0x10 [ 794.591761][T14664] ? netlink_unicast+0x64c/0x870 [ 794.591797][T14664] ? netlink_sendmsg+0x8c8/0xdd0 [ 794.591831][T14664] ? ____sys_sendmsg+0xa5d/0xc30 [ 794.591860][T14664] ? __x64_sys_sendmmsg+0x9c/0x100 [ 794.591893][T14664] ? do_syscall_64+0xcd/0xf80 [ 794.591988][T14664] ? __lock_acquire+0x436/0x2890 [ 794.592015][T14664] ? find_held_lock+0x2b/0x80 [ 794.592046][T14664] ? __dev_queue_xmit+0x782/0x46b0 [ 794.592083][T14664] ? find_held_lock+0x2b/0x80 [ 794.592114][T14664] ? __pfx_rtnl_dellink+0x10/0x10 [ 794.592147][T14664] ? __pfx_rtnl_dellink+0x10/0x10 [ 794.592180][T14664] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 794.592218][T14664] ? __pfx_rtnl_dellink+0x10/0x10 [ 794.592253][T14664] rtnetlink_rcv_msg+0x95e/0xe90 [ 794.592293][T14664] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 794.592343][T14664] ? ref_tracker_free+0x37c/0x830 [ 794.592378][T14664] netlink_rcv_skb+0x158/0x420 [ 794.592415][T14664] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 794.592453][T14664] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 794.592501][T14664] ? netlink_deliver_tap+0x1ae/0xd30 [ 794.592542][T14664] netlink_unicast+0x5aa/0x870 [ 794.592582][T14664] ? __pfx_netlink_unicast+0x10/0x10 [ 794.592619][T14664] ? __pfx___might_resched+0x10/0x10 [ 794.592653][T14664] ? __lock_acquire+0x436/0x2890 [ 794.592682][T14664] netlink_sendmsg+0x8c8/0xdd0 [ 794.592724][T14664] ? __pfx_netlink_sendmsg+0x10/0x10 [ 794.592765][T14664] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 794.592812][T14664] ____sys_sendmsg+0xa5d/0xc30 [ 794.592835][T14664] ? copy_msghdr_from_user+0x10a/0x160 [ 794.592867][T14664] ? __pfx_____sys_sendmsg+0x10/0x10 [ 794.592894][T14664] ? find_held_lock+0x2b/0x80 [ 794.592938][T14664] ___sys_sendmsg+0x134/0x1d0 [ 794.592973][T14664] ? __pfx____sys_sendmsg+0x10/0x10 [ 794.593033][T14664] ? __pfx___might_resched+0x10/0x10 [ 794.593074][T14664] __sys_sendmmsg+0x200/0x420 [ 794.593111][T14664] ? __pfx___sys_sendmmsg+0x10/0x10 [ 794.593154][T14664] ? __pfx_do_futex+0x10/0x10 [ 794.593194][T14664] ? __x64_sys_openat+0x174/0x210 [ 794.593223][T14664] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 794.593267][T14664] ? syscall_user_dispatch+0x78/0x140 [ 794.593310][T14664] __x64_sys_sendmmsg+0x9c/0x100 [ 794.593345][T14664] do_syscall_64+0xcd/0xf80 [ 794.593386][T14664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.593410][T14664] RIP: 0033:0x7fdd4d98f7c9 [ 794.593431][T14664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 794.593454][T14664] RSP: 002b:00007fdd4e758038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 794.593477][T14664] RAX: ffffffffffffffda RBX: 00007fdd4dbe5fa0 RCX: 00007fdd4d98f7c9 [ 794.593492][T14664] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000005 [ 794.593507][T14664] RBP: 00007fdd4da13f91 R08: 0000000000000000 R09: 0000000000000000 [ 794.593522][T14664] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000000 [ 794.593536][T14664] R13: 00007fdd4dbe6038 R14: 00007fdd4dbe5fa0 R15: 00007ffd60a4fbe8 [ 794.593566][T14664] [ 796.357098][T14691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1615'. [ 796.684885][T14691] : Can't lookup blockdev [ 797.620377][T14712] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.1619: iget: checksum invalid [ 797.667806][T14712] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 797.717211][T14712] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.1619: iget: checksum invalid [ 797.812549][T14712] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 797.869754][T14712] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.1619: iget: checksum invalid [ 797.927377][T14712] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 798.044328][T14712] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.1619: iget: checksum invalid [ 798.069286][ T30] audit: type=1800 audit(1768094010.829:26): pid=14717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1629" name="discovery_nqn" dev="configfs" ino=54758 res=0 errno=0 [ 798.122048][T14712] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 798.211893][T14712] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 798.305972][T14712] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 798.477769][T14720] zswap: compressor not available [ 800.890423][T14751] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1626'. [ 801.087209][T14751] FAULT_INJECTION: forcing a failure. [ 801.087209][T14751] name failslab, interval 1, probability 0, space 0, times 0 [ 801.144630][T14751] CPU: 0 UID: 0 PID: 14751 Comm: syz.2.1626 Tainted: G L syzkaller #0 PREEMPT(full) [ 801.144671][T14751] Tainted: [L]=SOFTLOCKUP [ 801.144679][T14751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 801.144694][T14751] Call Trace: [ 801.144701][T14751] [ 801.144710][T14751] dump_stack_lvl+0x16c/0x1f0 [ 801.144773][T14751] should_fail_ex+0x512/0x640 [ 801.144805][T14751] ? fs_reclaim_acquire+0xae/0x150 [ 801.144848][T14751] should_failslab+0xc2/0x120 [ 801.144887][T14751] __kmalloc_noprof+0xeb/0x910 [ 801.144914][T14751] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 801.144955][T14751] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 801.144989][T14751] tomoyo_realpath_from_path+0xc2/0x6e0 [ 801.145031][T14751] tomoyo_check_open_permission+0x2ab/0x3c0 [ 801.145062][T14751] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 801.145119][T14751] ? lock_acquire+0x179/0x330 [ 801.145142][T14751] ? find_held_lock+0x2b/0x80 [ 801.145174][T14751] ? mnt_get_write_access+0x52/0x2f0 [ 801.145204][T14751] tomoyo_file_open+0x6b/0x90 [ 801.145244][T14751] security_file_open+0x84/0x1e0 [ 801.145277][T14751] do_dentry_open+0x597/0x1590 [ 801.145315][T14751] ? security_inode_permission+0xbf/0x260 [ 801.145348][T14751] vfs_open+0x82/0x3f0 [ 801.145377][T14751] path_openat+0x2078/0x3140 [ 801.145424][T14751] ? __pfx_path_openat+0x10/0x10 [ 801.145471][T14751] do_filp_open+0x20b/0x470 [ 801.145508][T14751] ? __pfx_do_filp_open+0x10/0x10 [ 801.145567][T14751] ? alloc_fd+0x471/0x7d0 [ 801.145609][T14751] do_sys_openat2+0x121/0x290 [ 801.145636][T14751] ? __pfx_do_sys_openat2+0x10/0x10 [ 801.145675][T14751] __x64_sys_openat+0x174/0x210 [ 801.145703][T14751] ? __pfx___x64_sys_openat+0x10/0x10 [ 801.145732][T14751] ? syscall_user_dispatch+0x78/0x140 [ 801.145772][T14751] do_syscall_64+0xcd/0xf80 [ 801.145819][T14751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.145844][T14751] RIP: 0033:0x7f6583d8f7c9 [ 801.145864][T14751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 801.145888][T14751] RSP: 002b:00007f6584b5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 801.145914][T14751] RAX: ffffffffffffffda RBX: 00007f6583fe5fa0 RCX: 00007f6583d8f7c9 [ 801.145931][T14751] RDX: 0000000000004282 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 801.145946][T14751] RBP: 00007f6583e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 801.145961][T14751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 801.145976][T14751] R13: 00007f6583fe6038 R14: 00007f6583fe5fa0 R15: 00007ffddebf9b98 [ 801.146009][T14751] [ 801.146018][T14751] ERROR: Out of memory at tomoyo_realpath_from_path. [ 801.690483][T14763] hub 1-0:1.0: USB hub found [ 801.734273][T14763] hub 1-0:1.0: 1 port detected [ 801.880572][T14761] hub 1-0:1.0: USB hub found [ 801.880868][T14761] hub 1-0:1.0: 1 port detected [ 803.078266][T14771] : Can't lookup blockdev [ 804.750706][T14814] FAULT_INJECTION: forcing a failure. [ 804.750706][T14814] name failslab, interval 1, probability 0, space 0, times 0 [ 804.837021][T14814] CPU: 0 UID: 0 PID: 14814 Comm: syz.1.1643 Tainted: G L syzkaller #0 PREEMPT(full) [ 804.837061][T14814] Tainted: [L]=SOFTLOCKUP [ 804.837069][T14814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 804.837083][T14814] Call Trace: [ 804.837091][T14814] [ 804.837100][T14814] dump_stack_lvl+0x16c/0x1f0 [ 804.837143][T14814] should_fail_ex+0x512/0x640 [ 804.837171][T14814] ? __kmalloc_noprof+0xca/0x910 [ 804.837200][T14814] should_failslab+0xc2/0x120 [ 804.837240][T14814] __kmalloc_noprof+0xeb/0x910 [ 804.837265][T14814] ? trace_kmalloc+0x2b/0xb0 [ 804.837301][T14814] ? __kmalloc_noprof+0x35d/0x910 [ 804.837326][T14814] ? devlink_fmsg_put_value+0xaa/0x2d0 [ 804.837356][T14814] ? devlink_fmsg_put_value+0xaa/0x2d0 [ 804.837380][T14814] devlink_fmsg_put_value+0xaa/0x2d0 [ 804.837409][T14814] devlink_fmsg_string_pair_put+0xc1/0x1b0 [ 804.837447][T14814] nsim_dev_dummy_reporter_dump+0x54/0xa0 [ 804.837487][T14814] devlink_health_do_dump+0x243/0x620 [ 804.837519][T14814] devlink_health_report+0x6c3/0xaa0 [ 804.837552][T14814] ? __pfx_devlink_health_report+0x10/0x10 [ 804.837583][T14814] ? _copy_from_user+0x59/0xd0 [ 804.837613][T14814] nsim_dev_health_break_write+0x166/0x210 [ 804.837653][T14814] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 804.837701][T14814] full_proxy_write+0x131/0x1a0 [ 804.837737][T14814] ? __pfx_full_proxy_write+0x10/0x10 [ 804.837770][T14814] vfs_write+0x2a0/0x11d0 [ 804.837807][T14814] ? __pfx___mutex_lock+0x10/0x10 [ 804.837833][T14814] ? __pfx_vfs_write+0x10/0x10 [ 804.837876][T14814] ? __fget_files+0x20e/0x3c0 [ 804.837920][T14814] ksys_write+0x12a/0x250 [ 804.837955][T14814] ? __pfx_ksys_write+0x10/0x10 [ 804.837999][T14814] do_syscall_64+0xcd/0xf80 [ 804.838041][T14814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.838065][T14814] RIP: 0033:0x7fdd9638f7c9 [ 804.838084][T14814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 804.838108][T14814] RSP: 002b:00007fdd972f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 804.838130][T14814] RAX: ffffffffffffffda RBX: 00007fdd965e5fa0 RCX: 00007fdd9638f7c9 [ 804.838146][T14814] RDX: 0000000000000006 RSI: 0000200000005900 RDI: 0000000000000009 [ 804.838160][T14814] RBP: 00007fdd96413f91 R08: 0000000000000000 R09: 0000000000000000 [ 804.838174][T14814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 804.838187][T14814] R13: 00007fdd965e6038 R14: 00007fdd965e5fa0 R15: 00007fffcc3ab5c8 [ 804.838218][T14814] [ 805.347443][ T30] audit: type=1326 audit(1768094018.105:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14824 comm="syz.1.1636" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdd9638f7c9 code=0x0 [ 806.090983][T14839] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1634: iget: checksum invalid [ 806.186479][T14839] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 806.293719][T14839] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1634: iget: checksum invalid [ 806.360453][T14841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.409197][T14841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.423892][T14839] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 806.492765][T14839] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1634: iget: checksum invalid [ 806.603003][T14841] debugfs: '!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' already exists in 'ieee80211' [ 806.641260][T14839] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 806.727348][T14839] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1634: iget: checksum invalid [ 806.844409][T14839] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 806.987855][T14839] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 807.060051][T14839] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 808.698650][T14868] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1645'. [ 810.706430][T14898] FAULT_INJECTION: forcing a failure. [ 810.706430][T14898] name failslab, interval 1, probability 0, space 0, times 0 [ 810.792800][T14898] CPU: 0 UID: 0 PID: 14898 Comm: syz.1.1649 Tainted: G L syzkaller #0 PREEMPT(full) [ 810.792840][T14898] Tainted: [L]=SOFTLOCKUP [ 810.792848][T14898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 810.792862][T14898] Call Trace: [ 810.792871][T14898] [ 810.792881][T14898] dump_stack_lvl+0x16c/0x1f0 [ 810.792923][T14898] should_fail_ex+0x512/0x640 [ 810.792956][T14898] should_failslab+0xc2/0x120 [ 810.792995][T14898] kmem_cache_alloc_node_noprof+0x86/0x800 [ 810.793026][T14898] ? __alloc_skb+0x156/0x410 [ 810.793061][T14898] ? __alloc_skb+0x35d/0x410 [ 810.793094][T14898] ? __alloc_skb+0x156/0x410 [ 810.793120][T14898] __alloc_skb+0x156/0x410 [ 810.793146][T14898] ? __alloc_skb+0x35d/0x410 [ 810.793173][T14898] ? __pfx___alloc_skb+0x10/0x10 [ 810.793207][T14898] ? __pfx_aa_file_perm+0x10/0x10 [ 810.793245][T14898] new_skb+0x21/0x230 [ 810.793280][T14898] aoecmd_cfg+0x21c/0x7d0 [ 810.793320][T14898] ? __pfx_aoecmd_cfg+0x10/0x10 [ 810.793365][T14898] ? common_file_perm+0x1b1/0x500 [ 810.793400][T14898] ? __pfx_aoechr_write+0x10/0x10 [ 810.793434][T14898] ? aoechr_write+0x120/0x160 [ 810.793467][T14898] aoechr_write+0x120/0x160 [ 810.793503][T14898] vfs_writev+0x5df/0xde0 [ 810.793543][T14898] ? __pfx_vfs_writev+0x10/0x10 [ 810.793577][T14898] ? putname+0xf5/0x1a0 [ 810.793614][T14898] ? __fget_files+0x20e/0x3c0 [ 810.793656][T14898] ? do_writev+0x132/0x340 [ 810.793686][T14898] do_writev+0x132/0x340 [ 810.793717][T14898] ? __pfx_do_writev+0x10/0x10 [ 810.793758][T14898] do_syscall_64+0xcd/0xf80 [ 810.793804][T14898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.793829][T14898] RIP: 0033:0x7fdd9638f7c9 [ 810.793848][T14898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 810.793871][T14898] RSP: 002b:00007fdd972d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 810.793893][T14898] RAX: ffffffffffffffda RBX: 00007fdd965e6090 RCX: 00007fdd9638f7c9 [ 810.793909][T14898] RDX: 0000000000000004 RSI: 0000200000000140 RDI: 0000000000000007 [ 810.793923][T14898] RBP: 00007fdd96413f91 R08: 0000000000000000 R09: 0000000000000000 [ 810.793938][T14898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 810.793952][T14898] R13: 00007fdd965e6128 R14: 00007fdd965e6090 R15: 00007fffcc3ab5c8 [ 810.793983][T14898] [ 811.070029][T14898] aoe: skb alloc failure [ 811.293006][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 811.328863][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.888375][T14922] __vm_enough_memory: pid: 14922, comm: syz.3.1652, bytes: 4398046511104 not enough memory for the allocation [ 812.658756][T14932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 812.701397][T14932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 812.764952][T14932] debugfs: '!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' already exists in 'ieee80211' [ 813.956214][T14952] vhci_hcd vhci_hcd.0: invalid port number 16 [ 815.332116][T14961] FAULT_INJECTION: forcing a failure. [ 815.332116][T14961] name failslab, interval 1, probability 0, space 0, times 0 [ 815.404814][T14961] CPU: 0 UID: 0 PID: 14961 Comm: syz.0.1660 Tainted: G L syzkaller #0 PREEMPT(full) [ 815.404860][T14961] Tainted: [L]=SOFTLOCKUP [ 815.404869][T14961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 815.404884][T14961] Call Trace: [ 815.404892][T14961] [ 815.404903][T14961] dump_stack_lvl+0x16c/0x1f0 [ 815.404948][T14961] should_fail_ex+0x512/0x640 [ 815.404976][T14961] ? __kmalloc_cache_noprof+0x5f/0x800 [ 815.405006][T14961] should_failslab+0xc2/0x120 [ 815.405045][T14961] __kmalloc_cache_noprof+0x80/0x800 [ 815.405073][T14961] ? lockdep_init_map_type+0x5c/0x270 [ 815.405097][T14961] ? snd_seq_prioq_new+0x3f/0x110 [ 815.405134][T14961] ? snd_seq_prioq_new+0x3f/0x110 [ 815.405164][T14961] snd_seq_prioq_new+0x3f/0x110 [ 815.405195][T14961] snd_seq_queue_alloc+0x12b/0x5a0 [ 815.405227][T14961] snd_seq_ioctl_create_queue+0xa9/0x390 [ 815.405266][T14961] call_seq_client_ctl+0xa3/0x130 [ 815.405305][T14961] snd_seq_kernel_client_ctl+0x7a/0xc0 [ 815.405345][T14961] alloc_seq_queue+0xda/0x180 [ 815.405367][T14961] ? __pfx_alloc_seq_queue+0x10/0x10 [ 815.405403][T14961] ? mark_held_locks+0x49/0x80 [ 815.405425][T14961] ? _raw_spin_unlock_irq+0x23/0x50 [ 815.405460][T14961] ? lockdep_hardirqs_on+0x7c/0x110 [ 815.405501][T14961] snd_seq_oss_open+0x38c/0xa40 [ 815.405529][T14961] odev_open+0x79/0xc0 [ 815.405563][T14961] ? __pfx_odev_open+0x10/0x10 [ 815.405599][T14961] soundcore_open+0x40c/0x580 [ 815.405648][T14961] ? __pfx_soundcore_open+0x10/0x10 [ 815.405686][T14961] chrdev_open+0x234/0x6a0 [ 815.405724][T14961] ? __pfx_apparmor_file_open+0x10/0x10 [ 815.405750][T14961] ? __pfx_chrdev_open+0x10/0x10 [ 815.405788][T14961] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 815.405834][T14961] do_dentry_open+0x748/0x1590 [ 815.405869][T14961] ? __pfx_chrdev_open+0x10/0x10 [ 815.405915][T14961] vfs_open+0x82/0x3f0 [ 815.405945][T14961] path_openat+0x2078/0x3140 [ 815.405992][T14961] ? __pfx_path_openat+0x10/0x10 [ 815.406040][T14961] do_filp_open+0x20b/0x470 [ 815.406078][T14961] ? __pfx_do_filp_open+0x10/0x10 [ 815.406137][T14961] ? alloc_fd+0x471/0x7d0 [ 815.406181][T14961] do_sys_openat2+0x121/0x290 [ 815.406208][T14961] ? __pfx_do_sys_openat2+0x10/0x10 [ 815.406247][T14961] __x64_sys_openat+0x174/0x210 [ 815.406276][T14961] ? __pfx___x64_sys_openat+0x10/0x10 [ 815.406316][T14961] do_syscall_64+0xcd/0xf80 [ 815.406358][T14961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.406383][T14961] RIP: 0033:0x7fb38678f7c9 [ 815.406403][T14961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 815.406433][T14961] RSP: 002b:00007fb387544038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 815.406456][T14961] RAX: ffffffffffffffda RBX: 00007fb3869e5fa0 RCX: 00007fb38678f7c9 [ 815.406472][T14961] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 815.406487][T14961] RBP: 00007fb386813f91 R08: 0000000000000000 R09: 0000000000000000 [ 815.406501][T14961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 815.406515][T14961] R13: 00007fb3869e6038 R14: 00007fb3869e5fa0 R15: 00007ffd1bb63908 [ 815.406546][T14961] [ 816.352343][T14978] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1663: iget: checksum invalid [ 816.522911][T14978] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 816.609607][T14978] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1663: iget: checksum invalid [ 816.747733][T14978] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 816.863200][T14978] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1663: iget: checksum invalid [ 817.005606][T14978] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 817.089343][T14978] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1663: iget: checksum invalid [ 817.167785][T14978] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 817.254194][T14978] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 817.314841][T14978] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 818.300913][T14999] : Can't lookup blockdev [ 818.497456][T15002] ================================================================== [ 818.497474][T15002] BUG: KASAN: slab-use-after-free in fbcon_prepare_logo+0xa03/0xc70 [ 818.497515][T15002] Read of size 256 at addr ffff888038e163c0 by task syz.2.1668/15002 [ 818.497536][T15002] [ 818.497551][T15002] CPU: 0 UID: 0 PID: 15002 Comm: syz.2.1668 Tainted: G L syzkaller #0 PREEMPT(full) [ 818.497588][T15002] Tainted: [L]=SOFTLOCKUP [ 818.497596][T15002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 818.497611][T15002] Call Trace: [ 818.497618][T15002] [ 818.497627][T15002] dump_stack_lvl+0x116/0x1f0 [ 818.497666][T15002] print_report+0xcd/0x630 [ 818.497704][T15002] ? __virt_addr_valid+0x81/0x610 [ 818.497742][T15002] ? __phys_addr+0xe8/0x180 [ 818.497780][T15002] ? fbcon_prepare_logo+0xa03/0xc70 [ 818.497806][T15002] kasan_report+0xe0/0x110 [ 818.497844][T15002] ? fbcon_prepare_logo+0xa03/0xc70 [ 818.497874][T15002] kasan_check_range+0x100/0x1b0 [ 818.497899][T15002] __asan_memcpy+0x23/0x60 [ 818.497929][T15002] fbcon_prepare_logo+0xa03/0xc70 [ 818.497962][T15002] fbcon_init+0xda0/0x1930 [ 818.497990][T15002] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 818.498021][T15002] visual_init+0x320/0x620 [ 818.498052][T15002] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 818.498090][T15002] store_bind+0x61d/0x760 [ 818.498124][T15002] ? sysfs_file_kobj+0xe4/0x290 [ 818.498148][T15002] ? __pfx_store_bind+0x10/0x10 [ 818.498180][T15002] dev_attr_store+0x58/0x80 [ 818.498213][T15002] ? __pfx_dev_attr_store+0x10/0x10 [ 818.498245][T15002] sysfs_kf_write+0xf2/0x150 [ 818.498269][T15002] kernfs_fop_write_iter+0x3af/0x570 [ 818.498306][T15002] ? __pfx_sysfs_kf_write+0x10/0x10 [ 818.498331][T15002] iter_file_splice_write+0xa24/0x12b0 [ 818.498385][T15002] ? __pfx_iter_file_splice_write+0x10/0x10 [ 818.498426][T15002] ? __pfx_copy_splice_read+0x10/0x10 [ 818.498469][T15002] ? __pfx_iter_file_splice_write+0x10/0x10 [ 818.498508][T15002] direct_splice_actor+0x192/0x6c0 [ 818.498546][T15002] splice_direct_to_actor+0x345/0xa30 [ 818.498582][T15002] ? __pfx_direct_splice_actor+0x10/0x10 [ 818.498622][T15002] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 818.498663][T15002] do_splice_direct+0x174/0x240 [ 818.498698][T15002] ? __pfx_do_splice_direct+0x10/0x10 [ 818.498734][T15002] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 818.498772][T15002] ? rw_verify_area+0xcf/0x6c0 [ 818.498803][T15002] do_sendfile+0xb06/0xe50 [ 818.498838][T15002] ? __pfx_do_sendfile+0x10/0x10 [ 818.498872][T15002] ? __x64_sys_futex+0x1e0/0x4c0 [ 818.498899][T15002] ? __x64_sys_futex+0x1e9/0x4c0 [ 818.498928][T15002] __x64_sys_sendfile64+0x1d8/0x220 [ 818.498951][T15002] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 818.498980][T15002] do_syscall_64+0xcd/0xf80 [ 818.499019][T15002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.499044][T15002] RIP: 0033:0x7f6583d8f7c9 [ 818.499064][T15002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 818.499088][T15002] RSP: 002b:00007f6584b5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 818.499110][T15002] RAX: ffffffffffffffda RBX: 00007f6583fe5fa0 RCX: 00007f6583d8f7c9 [ 818.499127][T15002] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000004 [ 818.499141][T15002] RBP: 00007f6583e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 818.499156][T15002] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 818.499171][T15002] R13: 00007f6583fe6038 R14: 00007f6583fe5fa0 R15: 00007ffddebf9b98 [ 818.499195][T15002] [ 818.499203][T15002] [ 818.499208][T15002] Allocated by task 14883: [ 818.499219][T15002] kasan_save_stack+0x33/0x60 [ 818.499250][T15002] kasan_save_track+0x14/0x30 [ 818.499281][T15002] __kasan_slab_alloc+0x89/0x90 [ 818.499314][T15002] kmem_cache_alloc_noprof+0x25e/0x770 [ 818.499341][T15002] skb_clone+0x190/0x3f0 [ 818.499386][T15002] dev_queue_xmit_nit+0x25b/0xac0 [ 818.499420][T15002] dev_hard_start_xmit+0x56b/0x6e0 [ 818.499445][T15002] sch_direct_xmit+0x1b2/0xcd0 [ 818.499474][T15002] __dev_queue_xmit+0x14a6/0x46b0 [ 818.499499][T15002] ip_finish_output2+0xc38/0x21a0 [ 818.499520][T15002] __ip_finish_output.part.0+0x1b4/0x350 [ 818.499542][T15002] ip_output+0x35f/0xa90 [ 818.499561][T15002] __ip_queue_xmit+0x1bee/0x2330 [ 818.499583][T15002] __tcp_transmit_skb+0x2cae/0x48b0 [ 818.499614][T15002] __tcp_send_ack.part.0+0x4ca/0x910 [ 818.499645][T15002] tcp_send_ack+0x84/0xa0 [ 818.499677][T15002] __tcp_ack_snd_check+0x1fe/0xa00 [ 818.499711][T15002] tcp_rcv_established+0xb94/0x36e0 [ 818.499737][T15002] tcp_v4_do_rcv+0xc65/0x10a0 [ 818.499763][T15002] tcp_v4_rcv+0x3077/0x4db0 [ 818.499791][T15002] ip_protocol_deliver_rcu+0xba/0x4c0 [ 818.499823][T15002] ip_local_deliver_finish+0x3f2/0x720 [ 818.499856][T15002] ip_local_deliver+0x18e/0x1f0 [ 818.499887][T15002] ip_sublist_rcv_finish+0x2ce/0x660 [ 818.499920][T15002] ip_list_rcv_finish+0x590/0x780 [ 818.499952][T15002] ip_list_rcv+0x335/0x450 [ 818.499983][T15002] __netif_receive_skb_list_core+0x752/0x950 [ 818.500010][T15002] netif_receive_skb_list_internal+0x75f/0xdc0 [ 818.500039][T15002] napi_complete_done+0x231/0x990 [ 818.500066][T15002] virtnet_poll+0x1cf5/0x3e00 [ 818.500100][T15002] __napi_poll.constprop.0+0xb3/0x540 [ 818.500127][T15002] net_rx_action+0x9f9/0xfa0 [ 818.500153][T15002] handle_softirqs+0x219/0x950 [ 818.500184][T15002] __irq_exit_rcu+0x109/0x170 [ 818.500215][T15002] irq_exit_rcu+0x9/0x30 [ 818.500246][T15002] common_interrupt+0xbf/0xe0 [ 818.500272][T15002] asm_common_interrupt+0x26/0x40 [ 818.500295][T15002] [ 818.500300][T15002] Freed by task 14883: [ 818.500310][T15002] kasan_save_stack+0x33/0x60 [ 818.500340][T15002] kasan_save_track+0x14/0x30 [ 818.500421][T15002] kasan_save_free_info+0x3b/0x60 [ 818.500445][T15002] __kasan_slab_free+0x5f/0x80 [ 818.500477][T15002] kmem_cache_free+0x2d8/0x770 [ 818.500505][T15002] kfree_skbmem+0x1a4/0x1f0 [ 818.500526][T15002] sk_skb_reason_drop+0x136/0x1a0 [ 818.500559][T15002] packet_rcv+0x16c/0x17a0 [ 818.500584][T15002] dev_queue_xmit_nit+0x75a/0xac0 [ 818.500617][T15002] dev_hard_start_xmit+0x56b/0x6e0 [ 818.500642][T15002] sch_direct_xmit+0x1b2/0xcd0 [ 818.500670][T15002] __dev_queue_xmit+0x14a6/0x46b0 [ 818.500694][T15002] ip_finish_output2+0xc38/0x21a0 [ 818.500715][T15002] __ip_finish_output.part.0+0x1b4/0x350 [ 818.500737][T15002] ip_output+0x35f/0xa90 [ 818.500756][T15002] __ip_queue_xmit+0x1bee/0x2330 [ 818.500777][T15002] __tcp_transmit_skb+0x2cae/0x48b0 [ 818.500808][T15002] __tcp_send_ack.part.0+0x4ca/0x910 [ 818.500838][T15002] tcp_send_ack+0x84/0xa0 [ 818.500870][T15002] __tcp_ack_snd_check+0x1fe/0xa00 [ 818.500904][T15002] tcp_rcv_established+0xb94/0x36e0 [ 818.500931][T15002] tcp_v4_do_rcv+0xc65/0x10a0 [ 818.500958][T15002] tcp_v4_rcv+0x3077/0x4db0 [ 818.500985][T15002] ip_protocol_deliver_rcu+0xba/0x4c0 [ 818.501018][T15002] ip_local_deliver_finish+0x3f2/0x720 [ 818.501050][T15002] ip_local_deliver+0x18e/0x1f0 [ 818.501082][T15002] ip_sublist_rcv_finish+0x2ce/0x660 [ 818.501114][T15002] ip_list_rcv_finish+0x590/0x780 [ 818.501146][T15002] ip_list_rcv+0x335/0x450 [ 818.501177][T15002] __netif_receive_skb_list_core+0x752/0x950 [ 818.501205][T15002] netif_receive_skb_list_internal+0x75f/0xdc0 [ 818.501234][T15002] napi_complete_done+0x231/0x990 [ 818.501260][T15002] virtnet_poll+0x1cf5/0x3e00 [ 818.501293][T15002] __napi_poll.constprop.0+0xb3/0x540 [ 818.501321][T15002] net_rx_action+0x9f9/0xfa0 [ 818.501352][T15002] handle_softirqs+0x219/0x950 [ 818.501384][T15002] __irq_exit_rcu+0x109/0x170 [ 818.501414][T15002] irq_exit_rcu+0x9/0x30 [ 818.501445][T15002] common_interrupt+0xbf/0xe0 [ 818.501471][T15002] asm_common_interrupt+0x26/0x40 [ 818.501493][T15002] [ 818.501499][T15002] The buggy address belongs to the object at ffff888038e163c0 [ 818.501499][T15002] which belongs to the cache skbuff_head_cache of size 240 [ 818.501519][T15002] The buggy address is located 0 bytes inside of [ 818.501519][T15002] freed 240-byte region [ffff888038e163c0, ffff888038e164b0) [ 818.501543][T15002] [ 818.501548][T15002] The buggy address belongs to the physical page: [ 818.501560][T15002] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x38e16 [ 818.501581][T15002] memcg:ffff88803095ed81 [ 818.501591][T15002] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 818.501610][T15002] page_type: f5(slab) [ 818.501633][T15002] raw: 00fff00000000000 ffff88823be08f00 ffffea0001efd480 dead000000000002 [ 818.501654][T15002] raw: 0000000000000000 00000000000c000c 00000000f5000000 ffff88803095ed81 [ 818.501667][T15002] page dumped because: kasan: bad access detected [ 818.501678][T15002] page_owner tracks the page as allocated [ 818.501686][T15002] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 10319, tgid 10317 (syz.2.789), ts 458870492491, free_ts 458829691688 [ 818.501724][T15002] post_alloc_hook+0x1af/0x220 [ 818.501746][T15002] get_page_from_freelist+0xd0b/0x31a0 [ 818.501771][T15002] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 818.501797][T15002] alloc_pages_mpol+0x1fb/0x550 [ 818.501829][T15002] new_slab+0x2c3/0x430 [ 818.501848][T15002] ___slab_alloc+0xe18/0x1c90 [ 818.501869][T15002] __slab_alloc.constprop.0+0x63/0x110 [ 818.501892][T15002] kmem_cache_alloc_node_noprof+0x44a/0x800 [ 818.501917][T15002] __alloc_skb+0x156/0x410 [ 818.501940][T15002] __pskb_copy_fclone+0xef/0xb50 [ 818.501971][T15002] tipc_sk_mcast_rcv+0x52d/0xfa0 [ 818.501998][T15002] tipc_mcast_xmit+0x711/0xfe0 [ 818.502022][T15002] tipc_send_group_bcast+0x803/0xa50 [ 818.502041][T15002] __tipc_sendmsg+0x4ab/0x1970 [ 818.502065][T15002] tipc_sendmsg+0x4f/0x70 [ 818.502087][T15002] ____sys_sendmsg+0xa5d/0xc30 [ 818.502106][T15002] page last free pid 10336 tgid 10327 stack trace: [ 818.502117][T15002] __free_frozen_pages+0x7df/0x1170 [ 818.502137][T15002] vfree+0x1fd/0xb50 [ 818.502168][T15002] snd_dma_free_pages+0xd2/0x130 [ 818.502201][T15002] snd_pcm_lib_free_pages+0x172/0x390 [ 818.502227][T15002] snd_pcm_release_substream.part.0+0x2a8/0x340 [ 818.502255][T15002] snd_pcm_release_substream+0x5b/0x70 [ 818.502282][T15002] snd_pcm_oss_release+0x135/0x310 [ 818.502303][T15002] __fput+0x402/0xb70 [ 818.502323][T15002] task_work_run+0x150/0x240 [ 818.502344][T15002] exit_to_user_mode_loop+0xfb/0x540 [ 818.502377][T15002] do_syscall_64+0x4ee/0xf80 [ 818.502413][T15002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.502441][T15002] [ 818.502446][T15002] Memory state around the buggy address: [ 818.502458][T15002] ffff888038e16280: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 818.502475][T15002] ffff888038e16300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 818.502492][T15002] >ffff888038e16380: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 818.502505][T15002] ^ [ 818.502518][T15002] ffff888038e16400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 818.502536][T15002] ffff888038e16480: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 818.502549][T15002] ================================================================== [ 818.631358][T15002] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 818.631383][T15002] CPU: 0 UID: 0 PID: 15002 Comm: syz.2.1668 Tainted: G L syzkaller #0 PREEMPT(full) [ 818.631425][T15002] Tainted: [L]=SOFTLOCKUP [ 818.631434][T15002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 818.631449][T15002] Call Trace: [ 818.631457][T15002] [ 818.631467][T15002] dump_stack_lvl+0x3d/0x1f0 [ 818.631509][T15002] vpanic+0x640/0x6f0 [ 818.631535][T15002] panic+0xca/0xd0 [ 818.631557][T15002] ? __pfx_panic+0x10/0x10 [ 818.631582][T15002] ? fbcon_prepare_logo+0xa03/0xc70 [ 818.631609][T15002] ? preempt_schedule_common+0x44/0xc0 [ 818.631645][T15002] ? preempt_schedule_thunk+0x16/0x30 [ 818.631670][T15002] check_panic_on_warn+0xab/0xb0 [ 818.631694][T15002] end_report+0x107/0x160 [ 818.631729][T15002] kasan_report+0xee/0x110 [ 818.631764][T15002] ? fbcon_prepare_logo+0xa03/0xc70 [ 818.631792][T15002] kasan_check_range+0x100/0x1b0 [ 818.631816][T15002] __asan_memcpy+0x23/0x60 [ 818.631845][T15002] fbcon_prepare_logo+0xa03/0xc70 [ 818.631878][T15002] fbcon_init+0xda0/0x1930 [ 818.631905][T15002] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 818.631937][T15002] visual_init+0x320/0x620 [ 818.631965][T15002] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 818.632002][T15002] store_bind+0x61d/0x760 [ 818.632034][T15002] ? sysfs_file_kobj+0xe4/0x290 [ 818.632056][T15002] ? __pfx_store_bind+0x10/0x10 [ 818.632086][T15002] dev_attr_store+0x58/0x80 [ 818.632117][T15002] ? __pfx_dev_attr_store+0x10/0x10 [ 818.632148][T15002] sysfs_kf_write+0xf2/0x150 [ 818.632171][T15002] kernfs_fop_write_iter+0x3af/0x570 [ 818.632205][T15002] ? __pfx_sysfs_kf_write+0x10/0x10 [ 818.632228][T15002] iter_file_splice_write+0xa24/0x12b0 [ 818.632274][T15002] ? __pfx_iter_file_splice_write+0x10/0x10 [ 818.632312][T15002] ? __pfx_copy_splice_read+0x10/0x10 [ 818.632353][T15002] ? __pfx_iter_file_splice_write+0x10/0x10 [ 818.632394][T15002] direct_splice_actor+0x192/0x6c0 [ 818.632436][T15002] splice_direct_to_actor+0x345/0xa30 [ 818.632473][T15002] ? __pfx_direct_splice_actor+0x10/0x10 [ 818.632513][T15002] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 818.632554][T15002] do_splice_direct+0x174/0x240 [ 818.632590][T15002] ? __pfx_do_splice_direct+0x10/0x10 [ 818.632626][T15002] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 818.632663][T15002] ? rw_verify_area+0xcf/0x6c0 [ 818.632696][T15002] do_sendfile+0xb06/0xe50 [ 818.632731][T15002] ? __pfx_do_sendfile+0x10/0x10 [ 818.632766][T15002] ? __x64_sys_futex+0x1e0/0x4c0 [ 818.632794][T15002] ? __x64_sys_futex+0x1e9/0x4c0 [ 818.632823][T15002] __x64_sys_sendfile64+0x1d8/0x220 [ 818.632846][T15002] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 818.632873][T15002] do_syscall_64+0xcd/0xf80 [ 818.632910][T15002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.632934][T15002] RIP: 0033:0x7f6583d8f7c9 [ 818.632952][T15002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 818.632974][T15002] RSP: 002b:00007f6584b5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 818.632996][T15002] RAX: ffffffffffffffda RBX: 00007f6583fe5fa0 RCX: 00007f6583d8f7c9 [ 818.633012][T15002] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000004 [ 818.633025][T15002] RBP: 00007f6583e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 818.633040][T15002] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 818.633053][T15002] R13: 00007f6583fe6038 R14: 00007f6583fe5fa0 R15: 00007ffddebf9b98 [ 818.633077][T15002] [ 818.633150][T15002] Kernel Offset: disabled