last executing test programs: 6.320325077s ago: executing program 0 (id=1338): openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r0 = gettid() rt_sigqueueinfo$auto(r0, 0x11, &(0x7f0000000000)={@siginfo_0_0={0x76bb, 0x3, 0x4, @_sigfault={0x0, @_trapno=0xfffffffe}}}) futex$auto(0x0, 0x4, 0x2, 0x0, 0x0, 0x40) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) r1 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) socket(0xf, 0x3, 0x2) getsockopt$auto(0x3, 0x200000000001, 0x1d, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/queue/scheduler\x00', 0x103a42, 0x0) write$auto(0x3, 0x0, 0x7fffffff) ioctl$auto_NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000e40)=ANY=[@ANYBLOB="880a0000", @ANYRES16=r4, @ANYBLOB="2f212cbd7000fcdbdf2521000000060065004000000006001200070000001000e80045cdae7db28a705c4d0800a50002000000f00475801000698008003c00000000b4381ea129d7e3e080e853d3dfc05aa1f4a0425d2d54b4e3844a15b3bbf561b07b00"/113, @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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"], 0xa88}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r5) sendmsg$auto_TIPC_NL_NET_SET(r5, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRESOCT=r2, @ANYBLOB="01002cbd7000ffdbdf250f0000000c00078008000200", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x44050}, 0x2) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) mmap$auto(0x4, 0x2, 0x3, 0xeb1, r1, 0x6) setresgid$auto(0xffffffffffffffff, 0x0, 0x0) 5.977697902s ago: executing program 0 (id=1343): socket(0x2d, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x28641, 0x0) ioctl$auto_SG_GET_NUM_WAITING(r0, 0x227d, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nbd7\x00', 0x80283, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x1ff, 0xa, 0x1000000000000eb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r2, 0x4b66, r2) getsockopt$auto(r1, 0x1, 0xd, &(0x7f0000000300)='\x00', &(0x7f0000000340)=0x6) ioctl$auto(0x3, 0x89e0, 0x91) ioctl$auto(0x3, 0x89e2, 0x91) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x89e0, 0x91) 5.851681268s ago: executing program 0 (id=1344): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSMAXCID(r0, 0x40047451, 0x0) mknod$auto(&(0x7f0000000100)='./file0\x00', 0x1001, 0x4) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0xa3) open$dir(&(0x7f00000001c0)='./file0\x00', 0x40a01, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(0x0, r2) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x800, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x88542, 0x0) write$auto(r3, 0x0, 0x8000000000000) read$auto_mon_fops_text_t_mon_text(r1, &(0x7f0000000200)=""/81, 0x51) preadv$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x8000}, 0x9, 0xff, 0x1) timerfd_settime$auto(0xffffffffffffffff, 0x4, &(0x7f0000000140)={{0x6ec}, {0x4, 0x6}}, &(0x7f0000000180)={{0x2, 0x1}, {0x1, 0x5}}) madvise$auto(0x110c230000, 0x1fffffe, 0x9) close_range$auto(0x2, 0x8, 0x0) 5.352951738s ago: executing program 0 (id=1347): mmap$auto(0xb9, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x20008000) r0 = getpid() process_vm_readv$auto(r0, 0x0, 0x200000000000001, &(0x7f00000000c0)={0x0, 0xffff}, 0x4, 0x0) r1 = socket(0xa, 0x5, 0x84) r2 = socket(0xa, 0x1, 0x84) setsockopt$auto(r2, 0x0, 0x40, 0x0, 0x6f7250c4) r3 = getsockopt$auto(r2, 0x84, 0x40006c, 0x0, &(0x7f0000000000)=0x1000c4) r4 = prctl$auto_PR_SET_MM_ENV_START(0x2, 0xa, 0xffffffffffffffff, 0xf3, 0xffff) process_madvise$auto_MADV_UNMERGEABLE(r3, &(0x7f0000000300)={&(0x7f0000000200)="f933e2c242e667a7a9bf78d3d681041f85e734f7e4e76c5c6153d9f129602d98e55d3fb0d08a5a82a9b1f47471d2f5e21f370c6e3b323c4124fcf64919d129ba7ddb3a7c372c3c7b012456e50a8cd3c9e417d1f6373981c72c35e13bff19719988dbe16486afdcb3003b371f9064387b2809fff07edfb80246786e77b538bd94d6ab8114f3b116781c86537f380d5a3a82f8867cf91f6a3af020cf0c78828116e82b3c904f94a85eb0c4752d5563d3033f383525f1c7a538cd97598a7ee896947df7c49dc40a182567835ac3d0a1e039d15d5e4b7142c95b0d98b7fbe444fd6124c2688f5abba63ab6a531c4c938931715e3f8", 0x1}, 0x1, 0xd, 0x5) bpf$auto_BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)=@task_fd_query={r0, r1, 0x3, 0xe4, 0x43, 0xabe5, r4, 0xffff, 0x5}, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x3, 0xfffffff7fdff0006, 0x15) r5 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000001140), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x0, 0x21, 0x0, 0x28) r8 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp6\x00', 0x0, 0x0) pread64$auto(r8, &(0x7f0000000040)='veth1\x00', 0x200000000006, 0x8) sendmsg$auto_WG_CMD_GET_DEVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="c50b7587", @ANYRES16=r7, @ANYBLOB="210728bd7000fddbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x4000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) execveat$auto(r5, 0x0, 0x0, 0x0, 0x7) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) remap_file_pages$auto(0x0, 0xf3a4, 0xfffffffffffffffc, 0x5, 0x15) 3.819460347s ago: executing program 2 (id=1356): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) mmap$auto(0x0, 0x7fffffffffffffff, 0x3, 0x17, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x5, 0xf633, 0x40eb2, 0xffffffffffffffff, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4020009, 0x2, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0xb5, 0x2010, 0xb, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x7, 0x6, 0xffffffffffffffff}, 0x10) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) r5 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0xc2000, 0x0) ioctl$auto(r5, 0x4611, r5) mmap$auto(0x0, 0x8, 0x3, 0xeb2, 0xffffffffffffffff, 0x1008000) socket(0x29, 0x2, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x400, 0x0) r6 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r4) ioctl$auto_XFS_IOC_ALLOCSP(r1, 0x4030580a, &(0x7f0000000100)={0xfffa, 0x8, 0x800000000000000, 0xff, 0x7fffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'veth0_to_batadv\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_SET(r3, &(0x7f0000001680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001640)={&(0x7f0000000380)={0x1234, r7, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_TSCONFIG_TX_TYPES={0x109c, 0x3, 0x0, 0x1, [@typed={0x14, 0xb9, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x1079, 0xab, 0x0, 0x1, [@generic="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", @typed={0x8, 0x86, 0x0, 0x0, @u32=0x1}, @nested={0x4, 0x2c}, @nested={0x4, 0xa5}, @nested={0x4, 0xaf}, @generic="c07e157f199337080734f8bd307f46f82967e719fe60253d6a10a4a3a6ad175f44f447b3daea1cc4c27e3b1e7643993c972a2229c73b47e6a26336aa9a6cd73263e17c9ecfe74fb892a15c4ffc8c653f6708321569f5d60cabfe9c9c818ba0db8c"]}, @typed={0x8, 0x27, 0x0, 0x0, @pid=r8}]}, @ETHTOOL_A_TSCONFIG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @ETHTOOL_A_TSCONFIG_RX_FILTERS={0xfd, 0x4, 0x0, 0x1, [@typed={0xc, 0x6f, 0x0, 0x0, @u64=0x3}, @generic="37b78db01da5e03b7e1756506f5aee66932d7091aaa8a7ff9f063b1a4a14a5bb002268147a78d436dbd41586627476cbbc1b530957b0c2ea27c6401309df70ec8333c38fb11ea3290e5147029d651dd5bcb0835a4d7876b124d3b75abb4ef3ccbd1625f76de4cb6609e8791e083d52f8cb15ca6a12ddca351f492020b2d09d265a64e34504a29f47ab7eebc3eb7be397db4ad0a9e8d49b33c72fdea595ba2060f2beba277e7fa50863aacdbdeb80d45cc77ec69c646f6ad16b83e191e34b0fafde54d227e14cf583a40883628683f573cfae4d0d72d63178e7d00b2d92bfcbe17a6e7112bcff991d12", @typed={0x4, 0xc1, 0x0, 0x0, @binary}]}, @ETHTOOL_A_TSCONFIG_HWTSTAMP_FLAGS={0x55, 0x5, 0x0, 0x1, [@generic="ff181b3a6473e5504e2efea1dc", @nested={0x8, 0x15b, 0x0, 0x1, [@nested={0x4, 0x12a}]}, @typed={0x2b, 0x66, 0x0, 0x0, @binary="5b159d0d5e1791b74c4c0a45ce340610097737bf30d90e73b91fdbf505ef100c25f3b3eac6bd55"}, @typed={0x8, 0x10b, 0x0, 0x0, @u32=0x6}, @typed={0x8, 0x52, 0x0, 0x0, @ipv4=@multicast1}]}, @ETHTOOL_A_TSCONFIG_HEADER={0x4}]}, 0x1234}, 0x1, 0x0, 0x0, 0x10}, 0x8010) ioctl$auto(r6, 0xc05c5340, 0x38) ioctl$auto_PPPIOCSMAXCID(r0, 0x40047451, 0x0) mknod$auto(&(0x7f0000000100)='./file0\x00', 0x1001, 0x4) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0xa3) open$dir(&(0x7f00000001c0)='./file0\x00', 0x40a01, 0x14) 3.397455072s ago: executing program 2 (id=1357): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24004804) r2 = socketpair$auto(0x6, 0x6, 0x2, &(0x7f0000000000)=0x2) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r2, 0xc1004111, &(0x7f0000000040)={0x1, [0x8000, 0xda6, 0x943], [{0x2, 0x401, 0x1, 0x0, 0x0, 0x1}, {0x6, 0x9806, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x77, 0x0, 0x1}, {0x400, 0x8, 0x1, 0x0, 0x1}, {0xa46, 0x34, 0x0, 0x1, 0x0, 0x1}, {0x200, 0x3, 0x1, 0x1, 0x1}, {0x8, 0x796, 0x1, 0x0, 0x1, 0x1}, {0x3, 0x401, 0x0, 0x0, 0x0, 0x1}, {0x1, 0x25af, 0x0, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x10, 0x0, 0x0, 0x1, 0x1}, {0x979, 0x3}], 0x5, 0x6, 0x400, 0x8, 0x8df, 0x3, 0x3, "65426fa237e8f1d675eba3dc25d6c63aa78ea280a9a1e0b8e9a6d93bb647418e192cd62b8c0fdef8a3f3ceaa55dca3aa43c16da3644d80ab9b81c810c606cc9d"}) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r3 = waitid$auto_P_PGID(0x2, 0x0, &(0x7f00000007c0)={@_si_pad}, 0x3, &(0x7f0000000840)={{0x638, 0x2}, {0x8000, 0x1}, 0x8000000000000000, 0xd, 0x100000000, 0x5, 0x7fff, 0xffffffffffffffff, 0xff, 0x1, 0x0, 0x1, 0x10001, 0x4, 0x409, 0x1}) sendmsg$auto_NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000dc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000900)=ANY=[@ANYBLOB="68040000", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fddbdf253700000008002700ffffff7f060043011a0200000800c300c1000000060010000700000020002801341746e695105a6fd00d5ed3de34662a68603ea16892c470763948611404a68008006200", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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"], 0x468}, 0x1, 0x0, 0x0, 0x4000891}, 0x4000005) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) preadv2$auto(0xffffffffffffffff, 0x0, 0x6, 0x3, 0x4, 0x2e) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xac, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7fffffff}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffffff}, @NL80211_ATTR_BSSID={0x76, 0xf5, "1603e41c317cdad268256d1214cd579473dea0159ee7ff5525abe94abe11bbf371b368333f8c47f0d4a41ca93fa90cdd6c39e4b71a2461039fa118cb2068ba228d1d4be47b0ae32054b6e682f703818744b2df82d57e04e39d0d349b5bbb61329a2e85e416eed28278ab5e39ffa0320d653e"}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x9}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) landlock_create_ruleset$auto(&(0x7f0000000740)={0x80, 0x3, 0x3}, 0x4, 0x80) r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) r5 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000280), r1) sendmsg$auto_IPVS_CMD_GET_INFO(r4, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB='HB\x00\x00', @ANYRES16=r5, @ANYBLOB="000429bd7000fcdbdf250f00000008000600080000000f0202801c008a800400ce8008001700", @ANYRES32=r4, @ANYBLOB="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"], 0x248}, 0x1, 0x0, 0x0, 0x4040040}, 0x90) madvise$auto(0x9, 0x4, 0x3) 2.830071963s ago: executing program 2 (id=1358): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) read$auto(r0, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0xbad7, 0x100000000000eb1, r0, 0x8000) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_0={0x9, 0xb5, 0x4, 0x48d0, 0x4, 0xffffffffffffffff, 0x74b, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x4, 0xe5, 0x3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x2000040080000004, 0xe) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec8\x00', 0x0, 0x0) ioctl$auto_CEC_DQEVENT(r1, 0xc0506107, 0x0) ioctl$auto_CEC_DQEVENT(r1, 0xc0506107, 0x0) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 2.610640665s ago: executing program 1 (id=1359): r0 = socket(0x10, 0x2, 0x4) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/workqueue/nvmet-wq/affinity_scope\x00', 0x562, 0x0) write$auto(r1, &(0x7f00000005c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xe1\x903\x9e\xca\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81\xe4\xab\xc5\x8da\vr\xb91\xfe\x9a\xf0\x0f\x03\x12m/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\xf4\r\x19$\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbbc\xb9\xd0\x1f\xd9\x8e`\xba\xd0\xa4\xf5\x00\x00\x00\x00\x00\x00\x00\x00', 0x98c7) write$auto(r0, &(0x7f0000000000)='-\x00', 0xfdef) mmap$auto(0x0, 0x420009, 0x400, 0xeb0, r0, 0x8000) r2 = syz_clone(0x5000400, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid$auto(r2, r2) get_robust_list$auto(r2, 0xffffffffffffffff, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto_IOCTL_VMCI_VERSION(r3, 0x79f, 0x0) ioctl$auto_RTC_AIE_OFF(r3, 0x7002, 0x0) socket(0x10, 0x2, 0x4) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/workqueue/nvmet-wq/affinity_scope\x00', 0x562, 0x0) (async) write$auto(r1, &(0x7f00000005c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xe1\x903\x9e\xca\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81\xe4\xab\xc5\x8da\vr\xb91\xfe\x9a\xf0\x0f\x03\x12m/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\xf4\r\x19$\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbbc\xb9\xd0\x1f\xd9\x8e`\xba\xd0\xa4\xf5\x00\x00\x00\x00\x00\x00\x00\x00', 0x98c7) (async) write$auto(r0, &(0x7f0000000000)='-\x00', 0xfdef) (async) mmap$auto(0x0, 0x420009, 0x400, 0xeb0, r0, 0x8000) (async) syz_clone(0x5000400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setpgid$auto(r2, r2) (async) get_robust_list$auto(r2, 0xffffffffffffffff, 0x0) (async) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION(r3, 0x79f, 0x0) (async) ioctl$auto_RTC_AIE_OFF(r3, 0x7002, 0x0) (async) 2.289517365s ago: executing program 1 (id=1362): unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mtd0\x00', 0x601, 0x0) ioctl$auto_MEMSETBADBLOCK(r0, 0x40084d0c, &(0x7f0000000100)=0x40) (async) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/pcm1p/sub3/xrun_injection\x00', 0x1cb842, 0x0) write$auto(r1, 0x0, 0x7) (async) close_range$auto(0x2, 0x8, 0x0) (async) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x5844c2, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, 0x0) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async, rerun: 32) r3 = socket(0x37, 0x3, 0x9) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0x3, 0x9b72, 0x2, 0x8000) (async, rerun: 64) io_uring_setup$auto(0x7, 0x0) (rerun: 64) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r6, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r7) ioctl$auto_KVM_CREATE_VM(r6, 0x4040aea0, 0x0) (async) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000015c0), r5) sendmsg$auto_NL80211_CMD_GET_STATION(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000740)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="4d5f28bd7000fddbdf25110000001c0038801800108013009d0094f142bc9f1224905b592b6a1683fa00"], 0x30}, 0x1, 0x0, 0x0, 0x4001c005}, 0x800) (async, rerun: 64) sendmsg$auto_NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r8, 0x400, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4050}, 0x1) (async, rerun: 64) sendmsg$auto_NL80211_CMD_GET_FTM_RESPONDER_STATS(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r8, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_STATUS_CODE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x20040840) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 2.121632074s ago: executing program 0 (id=1364): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x10000, 0x1, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0xfb, 0x1001, 0x10001, 0x7, 0x1, 0x40, 0x176c5, 0x400005, 0x100000005}}) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x169000, 0x0) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x80000, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/event1\x00', 0x40000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x201, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0xffffffffffffffff, 0x1, 0x5, 0x4, 0x15f4da0e, 0xffffffff, 0x9, 0x100000000000000c, 0x8, 0xfffffffffffffffe, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r0, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/nilfs2/features/revision\x00', 0x400, 0x0) sigaltstack$auto(&(0x7f0000000140)={0x0, 0x1, 0x800000000dc}, 0x0) getpid() timer_settime$auto(0x2, 0x2, &(0x7f0000000040)={{0x10000}, {0x100, 0x100000000}}, &(0x7f0000000180)={{0x5, 0x3}, {0x7fffffff, 0x7}}) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/crash_elfcorehdr_size\x00', 0x688140, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0xffffffffffffffff, 0x200, r1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x4a801, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) 1.854144779s ago: executing program 3 (id=1367): r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/maps\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0x91a0, 0xc86) 1.73140539s ago: executing program 3 (id=1368): r0 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@OVS_PACKET_ATTR_PACKET={0x12, 0x1, "8f2c9f8b06d2cf16e13d3c06384f"}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000180), 0xffffffffffffffff) (async) r3 = openat$auto_page_owner_stack_operations_page_owner(0xffffffffffffff9c, &(0x7f00000001c0), 0x10100, 0x0) (async) r4 = openat$auto_hwsim_fops_group_(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/ieee80211/phy11/hwsim/group\x00', 0x200000, 0x0) sendmsg$auto_NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000000740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f0000000240)={0x488, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x1}, @NFC_ATTR_RF_MODE={0x5, 0xb, 0x3}, @NFC_ATTR_LLC_SDP={0x442, 0x13, 0x0, 0x1, [@nested={0x1e5, 0x8c, 0x0, 0x1, [@typed={0x8, 0x2a, 0x0, 0x0, @fd=r3}, @typed={0x14, 0xc6, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @typed={0x8, 0xae, 0x0, 0x0, @str='\x11&/\x00'}, @generic="4110a8307b1bc1445e77961a2e58f05344cc447565e6122d3390092cbbb5a1cab074d8f4b479c8872594c2f377234482f06a7fef10946a80edf2877fd9d100c2d9d1451fb363245709e7fb29c6eef0d21665684da21e53484085b7aef6ae21b7dd7067b94a6df9a16363379e2a34dc298ea8b3c0af2f1b2f4aa4729979c86b9fdb7d2015e19e75c4dace59b0329f832a4ce54cf05bfcf1bae5f1fe08e57a3a1a0e99500c378864aad220d4278c1b385464d5a45592e89d48524192f2a921cb6f9b78435d64562dc036828c4260f21af474d5df41faeb788af6cf7ceaf1da52bd750fb5373b6312", @generic="d4d908b9b79c3c0ed6d29a8d04d3f3280f29ea28999359c1e098567aff3cedb61eae53d98804e45d1a9d7592024e7817bc2ae2f3d8ba04933e421acf0c45b408b9d19e80d099b365f3629fb493b8b71645ec974b2fcd23a3009db734839d16b75e914512140873365a5ae75b1187b3ddc85dd8a90a77cc979206a1cfa405fa6de7844c71f0240d8357fec8c3ec077048f3e7969a1c0280f6aaf88643f846826fc35cfb67370147d6f3fa5cbdfe8ab881339eb59ade6dba7985d8", @typed={0xc, 0x2f, 0x0, 0x0, @u64=0x3}, @typed={0x8, 0xca, 0x0, 0x0, @fd=r4}, @typed={0x6, 0x1f, 0x0, 0x0, @str='^\x00'}]}, @typed={0x8, 0x121, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0xd1, 0x0, 0x0, @ipv4=@broadcast}, @generic="73ab6e0165acc7406a5c9b229396ca536de7fc0047c85e217e5df71751b419bc92537d5b4949453649267819a62b0973e2bfb0130f34ec935ef570238d9e30e98e318887fadd3c34fbdda9cfdf374dd82b603d2eabdcfc3d169bf955181c66d575a9a070ff4af7f7b5c9fd4e43100cf7edb4fdd7960499a33aed3ca199e6780c77904b129c323c6b0ada1c0d6c00e6bb8df0c4e6390aee9c2efb2911d38cf6a65e81150771b4abfa8da56df4d323c627f64a760c8d53d224b362eb04f13e2216a226225b0886d70c37bb5d140486db0c238ba297a891e5807e4f5cc00aaf5a3e3eda675d3783c3", @generic="4008483b5ff022c61eb0cca2fff93efb0bbb2046483e139fbd9b919d78237c316dfe36a4e984cf10f4c042f89f716136cb369ad6f42faa9ba83282d40bbe1498526bed30f513a80bdd732ac53437119be4ee295c6345d7f40e61cde30ef44c1591ac326470ca7793057bb00907275d94700290bfd0a3532b9c2ae5ca8a4f169ea0ddb332b9db6877f81887bb74daea8e8402e2815227c7f9fab1e04fd538230a87ef078c4818", @typed={0x14, 0x3f, 0x0, 0x0, @ipv6=@remote}, @generic="f0108eda9d979c33ae42039d472de7de016f08c8e4391184a3971c398c662968f69b50707975d71e96a487f988493cead98f2e93a4fb6d6da654bdde0aaf7f624f1cd225066bede0e7b651a497feaab7fc3c6420de6b2178490a14fb81cd14561eeecebad3faa6412d667de223eb7b75c00c430cd474a05757018d401993975af71d15130c49ae832f45c35a7bf77659d22c05d245fe622fd4cffb41da", @typed={0x8, 0x3e, 0x0, 0x0, @ipv4=@private=0xa010101}]}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x7}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x8}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x5}]}, 0x488}}, 0x20000000) (async) r5 = fcntl$getown(r4, 0x9) setpriority$auto_PRIO_PGRP(0x1, r5, 0x80) ppoll$auto(&(0x7f0000000780)={r3, 0x4fa2, 0x400}, 0x1ff, &(0x7f00000007c0)={0x9, 0x81}, &(0x7f0000000800)={0x1}, 0x8) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000880), r1) shmctl$auto_IPC_SET(0xeac, 0x1, &(0x7f0000000940)={{0x2, 0x0, 0xee00, 0x2, 0x3, 0x7, 0x4}, 0xe, 0x7fff, 0x8, 0x5, @inferred=r5, @inferred=r5, 0x85, 0x0, &(0x7f00000008c0)="0d26d16f29194220a1cb2952f0a091ef9f07708cf27967bbd9", &(0x7f0000000900)="8e71bb9a79951634081c5f"}) sendmsg$auto_NL80211_CMD_ASSOCIATE(r6, &(0x7f0000000dc0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d80)={&(0x7f00000009c0)={0x3b0, r7, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x394, 0x75, 0x0, 0x1, [@nested={0xc2, 0xf1, 0x0, 0x1, [@generic="a194fb5c0da61e5aa3196b", @generic="011e9be2684b92ac81d712b51592c7f49fbbe599b4bda4f2c92dd28b06ce0ad635b5333a893c5608ac8ed514d7437c3a7378909722b2236a37c8f1347942207270fa3d163cf8", @typed={0x2f, 0xac, 0x0, 0x0, @binary="a91af56aa5d763c7eaaba74f2f51da8e8abcd83382aeb9ff03ffa1ff78a32187e197570c5afd069604035a"}, @generic="cc2af5d9d9ecf5c02f49bf415f79ff02ee6b4fc4434ce78c73ae22629a4647a298f49958250441e9eb506f854c4e738a6c", @typed={0x8, 0x1e, 0x0, 0x0, @u32=0x3}, @typed={0x4, 0x5c}]}, @nested={0x195, 0x11c, 0x0, 0x1, [@nested={0x4, 0xa2}, @nested={0x4, 0x44}, @nested={0x4, 0xa7}, @generic="0574d1e4c4b4fe2b12f3b85d30dbadca750c47ff1a282bd09320414657efd7b7bebb2991d3b1e3232f9dccb48e32f2975a68a87880f599ea105811919091675f51f6accaab642e6e169d2e9be730078022116c1583e0c1c7bbfe41cd85a1380a7db220114a19f16aa9aa4851e75de9dd06c7ac1b2ed7cf9c405326785259093d8dc53c908b2dc17cbf7b036f2f896d91cd8c3e30fccd16c0508284c4e378d300b9ecbc96590f6b6526fcf659842ee81f7e4c69f04a96f8076117193dc0b952a8c01c35b645b87efefdd1b4d7d2a79d1c208c1f197e79d049aa508424ff63605207092fc3ff667cbb777b11dc458b885c1c", @typed={0x78, 0x13c, 0x0, 0x0, @binary="f2485849ec0540ad5bab2c9b3a24ab5dcddf19d87a88eaf6d186444df1f40f12ab004f953bedae7762ec8dfa7211ac53aa04d9c3efb031acafc2ab47602a70bcc643366d2ef20e269fac99d22ea0059c312662bb5f9ccb244f7e99dd38e330b983136fccb5bdedec9695d75982f3e1886a3aedc8"}, @typed={0x8, 0x14e, 0x0, 0x0, @pid=r5}, @nested={0x4, 0x107}, @nested={0x4, 0x148}, @nested={0x4, 0x116}, @typed={0x8, 0xb1, 0x0, 0x0, @u32=0x5}]}, @nested={0x133, 0x12d, 0x0, 0x1, [@typed={0x8, 0x64, 0x0, 0x0, @uid=r8}, @generic="24207551f043232bd78d446180237b908d9696130c674e887c14b5d716186729f89bc94ad15f22f9a8f1b3789b223fd59405680fb0f9b2f1dcc3d4504f43effcfff14e1e2b584242229d7bdbd887ea78d7ee7bd5a471edc2bbf6583da6b2fc02faae5333d017e3612cf82efebf326c0845ff5172dfff3b68317a527a44bf88d5c4d0fbf154de555371e2583e667b1c5c4ad3f4916e108e6a04333d7d", @generic="89952de73200e66a6c1253ea4acca214aedb4c1647e25d59a32deb1131b85cd6c8fa5c869d0114f1321ff5c3b975d9012a1fa954aa8b6f8904118c28434ef75b109916201971862476324806200848e5ca6bb26e352b8fcca898b3e03ad1460289da79efed885f8c510964bec25bc39a75d749ccd31ed05cfba65f773a330668c88281a5a8be0d", @nested={0x4, 0x23}]}]}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}]}, 0x3b0}, 0x1, 0x0, 0x0, 0x4000000}, 0x84800) (async) r9 = ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000e00)={'veth1_macvtap\x00', 0x0}) (async) setsockopt$auto_SO_TIMESTAMPNS_NEW(r6, 0xffff7fff, 0x40, &(0x7f0000000e40)='veth1_macvtap\x00', 0x5) (async) sendmsg$auto_ETHTOOL_MSG_PLCA_SET_CFG(r9, &(0x7f0000001000)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0xd8, 0x0, 0x0, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_PLCA_ENABLED={0x5, 0x3, 0x1}, @ETHTOOL_A_PLCA_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0xc2}]}, @ETHTOOL_A_PLCA_BURST_CNT={0x8, 0x8, 0x3}, @ETHTOOL_A_PLCA_NODE_CNT={0x8, 0x5, 0xfffffffc}, @ETHTOOL_A_PLCA_NODE_CNT={0x8, 0x5, 0x400}, @ETHTOOL_A_PLCA_TO_TMR={0x8, 0x7, 0x94}, @ETHTOOL_A_PLCA_BURST_CNT={0x8, 0x8, 0x9}, @ETHTOOL_A_PLCA_HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0xd899}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xe4c0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x1) (async) r11 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000001040), 0x8000, 0x0) r12 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f00000010c0), r6) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001900)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000018c0)={&(0x7f0000001100)={0x7b4, r12, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@MAC802154_HWSIM_ATTR_RADIO_EDGES={0xc3, 0x3, 0x0, 0x1, [@typed={0xba, 0x123, 0x0, 0x0, @binary="0deccfebd1750e04faa0e1b0f855a462772cdeef458c3bb7c4b95fb83383ca01d7ad2be0adfaa12df39cc0a4239252478baa390a193279521196f8756ef3a5a313fe083692ebb34f101bd191119f321c1b9e1aed90be0eb56ed1e0e33f02899e754941c9f49e39dab08ea0e00224a15a54c2c5292d8242223696f3c7b331394859b90dca07655632ae8396a7aae80fe4b500539ea469182c0613d63c575df761c0d5de592960662dde04526d40aa02119dddebe6301a"}, @generic='@pK']}, @MAC802154_HWSIM_ATTR_RADIO_EDGE={0x1e7, 0x2, 0x0, 0x1, [@typed={0x9, 0x107, 0x0, 0x0, @str='[8#+\x00'}, @generic="2c3675a7ee06c19671dc5ee2707d2048ae23825f891deb96421f1e2f570550cbc0e700152aea4b20a8865a6ef048eaeb66a4b0a549eef249cedd6b067d42343e1637e29cc85e1e24e01f895df04b485a64249e3773fc752a72cd260db5e4bc345ff043501dd4cf04cc5eae", @nested={0x14e, 0xc6, 0x0, 0x1, [@generic="102c8720e38fe327817b301a8408e1bafc1eaeef6757ca1a8f09f0cf1791dccddc6e614ebef7b5098986c12754729f8fa99c9963b3c84001e2f44a19f8c4a4b80aa0acded1ad183824ff596f8c1d69d5a4fd78de8b5e442f264fa8f2df3b71e73d7cb21462c4c3d4d74e338f971575bdb2be93331f794bb5120c54788e26a26dec3f263306bfd068bb6f21b1ead11fb018ee488f8c3687f9adfd28f49238cd0228abe7041fd2aca18d3411fdbeebd4ff0db72011f8f638fa336492a1100a34e44e6d08", @nested={0x4, 0xcf}, @nested={0x4, 0x3b}, @nested={0x4, 0x39}, @generic="aca38ced500d4e996be0fa8b679655527a77786f349d51fe3d729f3c1d6138d9d1fdde385c44a44e5e7408822b835abbc217c6076bd249c240722fa178f13f05f6fb3c0392fc0b2d9d72ff00b39549a2ee14a3b93a7966089705178f3f06c7c6493874dffd6808df754a1b40defbec4b3326b5bd6824fb", @nested={0x4, 0x32}]}, @typed={0x8, 0x141, 0x0, 0x0, @fd=r1}, @typed={0x14, 0xd6, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x25}}]}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0x2d6, 0x3, 0x0, 0x1, [@typed={0xc, 0x4, 0x0, 0x0, @u64=0x80000001}, @typed={0x8, 0x151, 0x0, 0x0, @ipv4=@remote}, @nested={0x1ce, 0x4e, 0x0, 0x1, [@generic="a28784a5315c2311bed738d026a44dd998ead305cfcae8a8a6447b3038a6cbef7e2a96fc951979121ecac6275dd09a2e03160b3ca391b88a105190b86215397a8da2597fbef98497e09085074c9e7d81a327274e8d722bca7a86c45fc171f3a4b38f658af729e1c9d01fecc14ba4299532af0008277efac37fb5e56fcaa9923265c18d0a7e", @generic="57c2ba2c08d9d30c87b488aae6ccf0a2d13c236dde13cdae56cf427106b5ea6868d36759471b378fe8ea0672aa5da680298d5f4b23c1100fbf2c25e8515d55061ec9a395bc7b", @typed={0xc, 0x118, 0x0, 0x0, @u64=0x68000000000000}, @nested={0x4, 0x7c}, @generic="32b6fbc93dca93587a9b227cb8aed99187e6bb4de51bce73c73f958147e40a2118fdda1b15aa489e496337f2ddf7a18e5fbcfa49d5a52480e2d6f035d1b2b83153c91773bdcfc9984125fa22e998d4ff5dce4000d4f610a29e70aa214987f15c499e0d2eb363b4a348f2a0adc79c1cd4ac628f179d663a347c6eb872", @typed={0x11, 0x117, 0x0, 0x0, @binary="27ab653b11d8340f39f848b683"}, @generic="f44fe74b3ac244200aa1995ede09bba406827423f205dad6b245e3f82df84440f824fdbf7e29a02a94b5c2a18b3446281a0ae1c4a75f3e1674937be711a047cfa680dc23a9ed12d5b3c9faa68bf1e9626d965dd06b5c05b38a2cc79c734fc5"]}, @generic="2e641998e0c9f4604591806df267cbd747bb754da4dd96cd94a520b93c76eb7035628f8cb631ffb2c838f82d2f62fdc01863a1326f85c6515481b4e08b6d0a99b7c496bf953427c68a1a6d512230261ebe1e852a27a5952e0ce808aa7be438a6486c871b1c46598a0b91a4ec9815e1b58ce1e1ec2591d4e4c0d8b406cad97ded416aad444c631d6d3022dd22b334a38ce6c02ac75bcbea2327a1be8305d8ff91dfd3274bcc8ebf60e05a1d6f46e09fae50fcbeadadfb191dd88e528596077b7091825c7ad96c32869f240ebb7fe95c81ef1d45de231b4d98b51610f93af7a2104b88d4492493", @typed={0x8, 0x83, 0x0, 0x0, @uid=r8}]}, @MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0x7}, @MAC802154_HWSIM_ATTR_RADIO_EDGE={0x40, 0x2, 0x0, 0x1, [@typed={0x1a, 0x9c, 0x0, 0x0, @binary="2ff9e84159c112f27f4b5d38aa50412a3b254a479cc1"}, @typed={0x8, 0xe8, 0x0, 0x0, @fd=r11}, @nested={0x18, 0x13a, 0x0, 0x1, [@typed={0x14, 0x12b, 0x0, 0x0, @ipv6=@private2}]}]}, @MAC802154_HWSIM_ATTR_RADIO_EDGE={0x1d4, 0x2, 0x0, 0x1, [@nested={0x1bb, 0xc2, 0x0, 0x1, [@generic="d13a6edffaecd7a5dfbc073b3c1d83093becf8a7d01e7ca027a78e210842ed12f9cd5885e65bbe3a8a423a199ab3bb68c6b9a5ef70d4913da2674ba185d0027fcac7919067900a999accdc605ecdc02080f3325ea498443de4eb9177d36dba1c93c72dd22852bd384d7accb02975431a5121d16e06db08933e57cde1e225a2ee905a36a7a10f31738ae5d4d3360ddf6260b22e53438fb31ce2571e37e26bc780388c0eccbd37f02490c83209ae6f403f4a03c90601205109f4dfd91fbcf088fae2a6276a46ae2107f93b495e660c3a728cd475", @generic, @typed={0x8, 0xf1, 0x0, 0x0, @u32=0xf5d5}, @generic="000d82ff3a6bd11718103e795d8a3204cea840c1a012a5c973c75c097468b52a60f600019c6ba0124f78d84f42ce8c909e37e9c75a034187e31260bcdbb6e8935c5b641bfe7ea4a47a4364b2e8d047a69cc313429ede95b9401859bfada52b9062a76b62dd7246f472ec86bf5db1441fa575274accaf4be503f182314eafe50390973e47fbd05e0f13e8ffa945b6d45016029e56fad000e6af30de0ae68d41c37fbf5ed73bd555f10bf02037e0edf10e9c32e7f6baaac4d5110f96bcc451bd8290d63bb7766b4eac543602b3e480a163", @typed={0x8, 0x80, 0x0, 0x0, @fd=r1}, @nested={0x4, 0x153}]}, @typed={0x14, 0x132, 0x0, 0x0, @ipv6=@remote}]}]}, 0x7b4}, 0x1, 0x0, 0x0, 0x40015}, 0x5) fsconfig$auto_FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000001940)='}+\'\x00', &(0x7f0000001980)="e4d39afaad3f4caa3fce22ca0aefb6662574a86a2e0414ceda40954fc3581758f9ce2d20ee3a7631efcc8a945bc2c20fcd296333e2d941d8", 0x9) (async) r13 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001a00), r6) (async) r14 = getpid() sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000001c00)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001a40)={0x150, r13, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, r5}, @NL80211_ATTR_SAE_PASSWORD={0x68, 0x115, "9e239d688a9fbd0be4a2b0cf640df5e57ed77209f3014720e0e77c20fa5681d03b1cee7fe5ae82880cb84b1642c85b6287c51c5a10698e53a06629492e73124f0ebdd0a5b3725b07890c7a4aa5976cbeb04afebfca5a1dcfcd8b434796e19e5357229a19"}, @NL80211_ATTR_PID={0x8, 0x52, r14}, @NL80211_ATTR_FRAME_MATCH={0xc3, 0x5b, "14e7e4ccf8dc1943787dc0597371c307b72adf745791cb73113726822a696970e5e5f250d4c921e24a5cc8766de28e4d1bfb6394e79dcf2b77392d1f64357e45e2eaae9671a1eb5b872a6dff12a8bc233325b1dbe7e675c73beb4e2e7ba563157287a65fad50120a0a860653cd1f5921db24e6aa7d1145cfd7fcbfecaeac6562ae96d94d116419aedc5e60275666f2c9a14345fa95274ad7199b4f0fdd6b9939e9aed0f4e34cf685395e0be81c2e6cdaf4e7f750bef263ae3c19019099f429"}]}, 0x150}, 0x1, 0x0, 0x0, 0x4011}, 0x20004000) (async) r15 = openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f0000001c40)='/sys/kernel/tracing/README\x00', 0x80000, 0x0) (async) r16 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000001c80), 0x400000, 0x0) read$auto_ocfs2_control_fops_stack_user(r16, &(0x7f0000001cc0)=""/164, 0xa4) (async) fgetxattr$auto(r15, &(0x7f0000001d80)='dummy0\x00', &(0x7f0000001dc0)="70005e639199825f986cb6f6ee6dc0ca060204f05a26e81e1da6918cf37ac7f082372078edc365eea97c56be4beeceaea79cbd69f540f06ef20a48aafc825ee53c82cb2d5c0a136abe2aae7bb1cb23405bc567ac52f4676201487be5d79ddbecaf93b85c80ba31efb21cf62305676a04d8b4274108958b11a8ae7a0540d3549d015ff3ce88ee3dc1cc302bf69e5fb37ca487418a76598f9869ca7093a67aa2c8ecb2d97473387b6605f76e1e1d0fd6efc818e8a36073d77f860c49e8e99ece0b815c4a18895ccbbb9c2a33352a886bbfe50614bb89113446dd51965e5f5786596394c6c3b2ffe7cd0e0353ee5b256cbf2d79c881f2c3fb", 0x14f) (async) r17 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001f00), r1) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f00000020c0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x4040}, 0xc, &(0x7f0000002080)={&(0x7f0000001f80)={0xc4, r17, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7ff}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x18bb6c43}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @ETHTOOL_A_LINKINFO_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5d0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8001}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xea}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x7}]}, 0xc4}}, 0x8001) 1.62556411s ago: executing program 1 (id=1369): fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x80000001, 0x0, 0x100, 0xee01, 0x0, 0x0, 0xffffffffffffff91, 0xfd3, 0x2, 0xec, 0x4, 0x80000000081, 0x8, 0x2, 0xfffffffffffffff8}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="1b0026bd7000fddbdf25030000000400080008000380090012"], 0x20}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r1 = socket(0x10, 0x2, 0x4) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a62c7026", @ANYRES16=r2, @ANYBLOB="00012dbd7000fcdbdf251f00000004009300"], 0x18}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.529865975s ago: executing program 3 (id=1370): mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) epoll_create$auto(0x3e) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = socket(0x18, 0x3, 0x2) setsockopt$auto_SO_LINGER(r0, 0x1, 0xd, &(0x7f0000000180)='(,\x00:\x00\\\xb3\xc7\xaf\x19\x7f\x82S%h*SI', 0x3) bind$auto(r0, &(0x7f0000000180)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x6a) mq_notify$auto(0xffffffffffffffff, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@hci={0x1f, 0x2}, 0x55) 1.427131566s ago: executing program 2 (id=1371): mmap$auto(0x0, 0x2, 0x7d, 0x16, 0x401, 0x800) unshare$auto(0x40000080) unshare$auto(0x40000080) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x402, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mremap$auto(0x200001000000, 0x4, 0x4, 0x3, 0x100000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram14\x00', 0x0, 0x0) (async) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram14\x00', 0x0, 0x0) mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, r1, 0x8000) (async) mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, r1, 0x8000) madvise$auto(0x0, 0x400052, 0x1) futex$auto(&(0x7f00000000c0)=0x1, 0x8c, 0x1, 0x0, 0x0, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) (async) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/dynamic_debug/control\x00', 0x0, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/dynamic_debug/control\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x100) socket(0x10, 0x2, 0x4) open(&(0x7f0000000800)='./file0\x00', 0x22641, 0x154) (async) open(&(0x7f0000000800)='./file0\x00', 0x22641, 0x154) mount$auto(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) (async) mount$auto(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x12) mmap$auto(0x0, 0x40006, 0xe2, 0x200009b72, 0x7, 0x20000) io_uring_setup$auto(0x6, 0x0) ustat$auto(0x801, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) 1.355735038s ago: executing program 1 (id=1372): r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_local_port_range\x00', 0x20202, 0x0) sendfile$auto(r1, r1, 0x0, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x582, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0xa, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) close_range$auto(0x2, 0x8, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000001240), 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638828712, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) pwrite64$auto(r0, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) 1.308605585s ago: executing program 3 (id=1373): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xed\xf8\xe1\xbc\x1d\x91D\xe7R\x12\xc4\xcd\xc6\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY2@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(', 0x100000a3dd) (rerun: 32) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f00000001c0)=""/218, 0xda) (async) write$auto(0xffffffffffffffff, 0x0, 0x8) write$auto(0xca, &(0x7f00000000c0)='\x04>\x01\x01\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c\f\xb6,NS\xa2(Q\xcc', 0x7f) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) socket(0xa, 0x801, 0x100) (async) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async, rerun: 64) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) statmount$auto(0x0, 0x0, 0x9, 0xd) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 32) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) (async) epoll_create$auto(0x5f) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async, rerun: 32) r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) (rerun: 32) pread64$auto(r4, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x00\x00\xf4\x00\x00\x00\x00\xf4\x00\x00\x00\x00\x00\x00', 0x100000002, 0x100000001) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) (async) futex$auto(0x0, 0x85, 0xa, 0x0, 0x0, 0xa0800002) (async) symlinkat$auto(&(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000180)='.\x00') (async) close_range$auto(0x2, 0x8, 0x80000000) 974.853226ms ago: executing program 1 (id=1374): ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xf4, 0x0, 0x2, 0x0, 0x0}) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4140aecd, &(0x7f0000000180)={0x7}) mmap$auto(0x81, 0xec9, 0xc, 0x8000000001c, r0, 0x6) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) connect$auto(r2, 0x0, 0x54) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) statmount$auto(0x0, &(0x7f0000000700)={0x8, 0x1, 0x4, 0x734f, 0x33, 0x4, 0x2, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x9, 0x83ad, 0x9, 0x6, 0x6, 0x81, 0x4, 0x1cd7, 0x8, 0x2000, 0x203, 0x0, 0x84, 0xfffffffffffffffa, 0x0, 0x0, 0x2, 0x101, [0x0, 0x2, 0x8003, 0x0, 0x0, 0x0, 0x7, 0x20, 0xfffffffffffffffe, 0x40000000000000, 0x0, 0x0, 0xa04, 0x0, 0xfffffffffffffffc, 0x3, 0x4, 0x1ff, 0x0, 0x9, 0x0, 0x40000000, 0x0, 0x7, 0x0, 0x8, 0x7ff, 0x5, 0x0, 0x3, 0x40000000000000, 0x0, 0x0, 0x0, 0xff, 0x0, 0xb, 0x0, 0x3c3, 0x0, 0x2], "172f5bbb1ef6595e453b8e3008199cc97573a36f1551ad3a83031ecd9bcf47837c9f8b83a7dfb7e6823d63faadb502777c4748a07ddb5be9d604bf5c1d30e282d656146753f4e50127494a72826e82d8d3242f6a5e71512cfa6a28cfafde65bf5c30ccb6fdd1990d8ce51614c601037a9e550084747e8ed3b924a392c4823ae578be7f44bef590f6cd370512a960d8c1d71636597f787f17d9d37d148d24e2cff7e2c573fe9ad000"/182}, 0x8000001fe, 0x2) rename$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) r3 = socket(0x10, 0x2, 0x0) mmap$auto(0x3, 0x9, 0xdf, 0x9bf2, r3, 0xb9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) write$auto_nsim_pp_hold_fops_netdev(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000140)='/dev/binderfs/binder1\x00', 0x0, 0x0) ioctl$auto_BINDER_SET_MAX_THREADS(r4, 0x40046205, 0x0) ioctl$auto_BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)="fc06c1f730b9d2867a8ba29f242cf38f59f712fcd917fee796") close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(&(0x7f0000000100)='./file0\x00', 0x161342, 0x13f) lsetxattr$auto(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\x96\xa3\xc0\xf29\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xa1Yi\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\x12\x8d\x84K\xf0\xd0\x0f\x13)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G', &(0x7f0000001340), 0x2, 0x0) listxattr$auto(&(0x7f0000000080)='./file0\x00', &(0x7f00000004c0)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\x96\xa3\xc0\xf29\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xa1Yi\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\x12\x8d\x84K\xf0\xd0\x0f\x13)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G', 0x86bd) ioctl$auto(0x3, 0x40085400, r4) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) 636.935234ms ago: executing program 0 (id=1375): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x2008, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpgid(r0) waitid$auto_P_PGID(0x2, r1, 0x0, 0x6, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffff7fffffe01, 0x8051, 0x3, 0x0) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000580)='/sys/devices/virtual/thermal/cooling_device0/max_state\x00', 0x500, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000005c0)=""/8, 0x8) ioctl$auto_SG_GET_RESERVED_SIZE2(r2, 0x2272, &(0x7f00000001c0)="fe530a59fbae9604f9035c73eb3ba04d29fbda45a7eaa756f07b29caa80ed94839be7dd990b4df9907bc743dec72ae97a7324f29d864682ef38cd63394628e1c5ad57995a54c828bde7f5604f5ea93da13dcd69794f8582b46a18eccc880f2e0400036486a6b67baa0f58ae8cde3ffdfc8ccc80b8baf70001f48cf64a73a26fd3d2d4834048ce53d31c571ae1a6ebee37d") ioctl$auto_SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000040)) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) sendmsg$auto(r2, &(0x7f0000000480)={&(0x7f0000000300)="740b438a1eaaefc73c90822c0359c5c0a56339d5983601b6cb98627567a0d8db462c248b456f3c0178e86b4ad287f70efeada229d1dfe97242374bd782288296499d1b62029448", 0xc00000, &(0x7f0000000400)={&(0x7f0000000380)="8a01db8e96a0e779d725f243", 0x1000}, 0x4, &(0x7f0000000440)="885b9d714ea53c1927a1835fb5f86276ea", 0x8, 0xcd6}, 0xfffffff7) write$auto(0xffffffffffffffff, &(0x7f0000000100)='d>*\xd2x\xc7\xbf\xff\x9a\xc01(\x00iM\x9c\bAa\x9e\xe98\xee\x15\xd3\xc5v\x99\f|\xe3\xbf\xd9\xf4C\x14A\xe6k\x105\xee\xc5\xaa$\x16\t?g\xb8b\x12\v*\xf9@B\xd0\xd2\x99{\x8b^\xff@\x83\x02Tvt\xc1_\x98\x9f\x16\xd5Is', 0x100000a3da) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) mlockall$auto(0x800000000000005) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mtd0\x00', 0x2, 0x0) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, 0x0, 0x400, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) setitimer$auto_ITIMER_PROF(0x2, 0x0, 0x0) 493.655309ms ago: executing program 3 (id=1376): r0 = socket(0x2, 0x2, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\a\x00'], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xfa}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) connect$auto(r0, &(0x7f00000000c0)=@in={0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x42}}, 0x55) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) 351.032763ms ago: executing program 3 (id=1377): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/smbd_send_credit_target\x00', 0x28102, 0x0) r1 = socket(0x11, 0x3, 0x9) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r1) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x801, 0x106) r2 = ioctl$auto_TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/adsp1\x00', 0x2042, 0x0) ioctl$auto_SNDCTL_DSP_SETDUPLEX(r3, 0x5016, 0x0) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, r2, 0x28000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) pread64$auto(r0, 0x0, 0x75, 0xffffffff) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/smbd_send_credit_target\x00', 0x28102, 0x0) (async) socket(0x11, 0x3, 0x9) (async) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r1) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) (async) close_range$auto(0x2, 0xa, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x801, 0x106) (async) ioctl$auto_TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/adsp1\x00', 0x2042, 0x0) (async) ioctl$auto_SNDCTL_DSP_SETDUPLEX(r3, 0x5016, 0x0) (async) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, r2, 0x28000) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) pread64$auto(r0, 0x0, 0x75, 0xffffffff) (async) 277.078092ms ago: executing program 2 (id=1378): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x315, 0x1, 0x401bf, 0x7352, 0x3c, 0x65f, 0x1ffde, 0x7ff, 0x3, 0x2, 0x9, 0xfffffffe, 0x4000006, 0x4, 0xb6, 0x80000000009, 0x6, 0x10003, 0xb, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x9, 0x6, 0x0, 0xa, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x3ad, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x0, 0x1]}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x82, 0x0) lseek$auto(0x3, 0x2, 0x4) sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf256700000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x90) sendmsg$auto_NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x884) socket(0x2, 0x3, 0x100) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/hid_magicmouse/parameters/scroll_speed\x00', 0x1e2142, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x20) write$auto(r4, 0x0, 0xfdec) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 25.074265ms ago: executing program 1 (id=1379): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) futex$auto(&(0x7f0000000040)=0x4, 0x4, 0x9, 0x0, &(0x7f00000003c0)=0x8000000, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (async) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/nfsd.export/content\x00', 0x2, 0x0) clock_nanosleep$auto(0xfffffffc, 0x81, &(0x7f0000000000)={0x2, 0x5}, &(0x7f0000000200)={0x3, 0x8}) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f00000000c0)=""/163, 0xa3) (async, rerun: 32) r4 = waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000340)={@siginfo_0_0={0xc, 0x6, 0x21cd, @_sigpoll={0x2, r0}}}, 0x5, &(0x7f0000000400)={{0x2, 0xefe}, {0x2, 0x3}, 0x7, 0x5, 0x100000000, 0xffffffffffffffff, 0x100000001, 0x7, 0xe53c, 0xfffffffffffffffa, 0x2, 0x40, 0x6, 0x5}) (rerun: 32) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x140, r1, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_SCAN_SSIDS={0x124, 0x2d, 0x0, 0x1, [@typed={0x8, 0x113, 0x0, 0x0, @uid=0xee00}, @typed={0x14, 0xa7, 0x0, 0x0, @ipv6=@loopback}, @typed={0x14, 0x151, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x8, 0xda, 0x0, 0x0, @pid=r4}, @nested={0xe8, 0x113, 0x0, 0x1, [@generic="23162f5f4113fab5be66d36fd8409e361cc57eb5523b70903445b5144ef5e752894aeeefb67c5b412f26e36ae18abe554644cbda217faf3b2900e48225efe4102352a6ab588fc5a755aa009895427103e8e47506b6000f8b3956dc6e8f680c947a12cd38fee98ccce2e00508ece8124902d3a735256436e0e500a82f3b3486b6b656189d156c58927d50809b6c0741254151817deb86235b758425190d1923e1838f14efbce7c4d817e72ffe74909a0c48ede14138d39bfabd2282eb64132a29d2d99587ac80290a3b62a78c99c447653c88a2eb718abcc0722d5493db0dd47ec35f5324"]}]}]}, 0x140}}, 0x4000000) 0s ago: executing program 2 (id=1380): openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/ns/cgroup\x00', 0xf81e09f4e322f53a, 0x0) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x820181, 0x0) r0 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) mmap$auto(0x0, 0x2020009, 0x2000000000000006, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(r0, 0xc0bc5310, 0x38) write$auto(0xca, &(0x7f0000000040)='\x04\x1c\xdc\xec7z\xdf3\xf2\xd3!\v\xb0M\xf8Q\x15\f', 0x2d8) madvise$auto(0x9, 0xadf, 0xa) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) capset$auto(&(0x7f0000000100)={0x20080522, 0x0}, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) chroot$auto(&(0x7f0000000080)='}[,&*}\x00') unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x2200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$auto(r2, 0x0, 0x10001) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000240)={0x0, 0x7}, 0x2) shmctl$auto_SHM_UNLOCK(0x63, 0xc, &(0x7f0000000180)={{0xfffff19c, 0x0, 0xee01, 0x3, 0x8, 0x5b6f, 0x1}, 0xe5a8, 0x0, 0xffff, 0x1000, @raw=0x8, @raw, 0x2, 0x0, &(0x7f00000000c0)="b5a4a58f9e535078b8957775b39446757ac8c88fd6a9a1a6b84c4a54147cc266e6ade4c4959d6bbde4e5b1db7ece3806eaa8cac794d866dafe", &(0x7f0000000140)="4db6852109737a5fe7d5f573a7895e960b49608875f26d5c2c19280f5a3b5a7cfc89382de71969f5ff83b9c8"}) fstat$auto(r0, &(0x7f0000000280)={0x9, 0x8, 0xedc9, 0x70, 0xee01, 0x0, 0x0, 0x3ff, 0x9, 0x1, 0x1a, 0xfffffffffffffffd, 0x40, 0x41f, 0x4, 0x8000000000000001, 0xffffffffffffffff}) msgctl$auto(0x1, 0x1, &(0x7f0000000400)={{0x26d, 0xffffffffffffffff, 0x0, 0x5, 0x7, 0x2, 0x4}, &(0x7f0000000340)=0x9, &(0x7f0000000380)=0x4, 0x3e25, 0x0, 0x2, 0x0, 0x4, 0xc, 0x5, 0x8, @inferred=r1, @raw=0xb}) keyctl$auto(0x8, r4, r5, r6, 0x4) close_range$auto(0x2, 0x8, 0x0) r7 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r7, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) kernel console output (not intermixed with test programs): ce53f5780 RSI: 0000000000000000 RDI: 0000000000000000 [ 159.198313][ T7164] RBP: 00007f8b7ee17da0 R08: 0000000000000000 R09: 0000000000000000 [ 159.198327][ T7164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000027057 [ 159.198342][ T7164] R13: 00007f8b7ee1609c R14: 0000000000026d6b R15: 00007f8b7ee16090 [ 159.198374][ T7164] [ 159.391073][ T7170] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 159.990135][ T7190] __vm_enough_memory: pid: 7190, comm: syz.2.292, bytes: 4398046457856 not enough memory for the allocation [ 160.870483][ T7224] FAULT_INJECTION: forcing a failure. [ 160.870483][ T7224] name failslab, interval 1, probability 0, space 0, times 0 [ 160.961173][ T7224] CPU: 1 UID: 0 PID: 7224 Comm: syz.3.298 Tainted: G U syzkaller #0 PREEMPT(full) [ 160.961199][ T7224] Tainted: [U]=USER [ 160.961204][ T7224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 160.961213][ T7224] Call Trace: [ 160.961218][ T7224] [ 160.961224][ T7224] dump_stack_lvl+0x100/0x190 [ 160.961245][ T7224] should_fail_ex.cold+0x5/0xa [ 160.961265][ T7224] should_failslab+0xc2/0x120 [ 160.961282][ T7224] __kmalloc_cache_noprof+0x7a/0x6f0 [ 160.961303][ T7224] ? blk_mq_init_allocated_queue+0xcf/0x1440 [ 160.961327][ T7224] blk_mq_init_allocated_queue+0xcf/0x1440 [ 160.961349][ T7224] ? blk_alloc_queue+0x627/0x790 [ 160.961365][ T7224] ? blk_alloc_queue+0x1a3/0x790 [ 160.961382][ T7224] blk_mq_alloc_queue+0x1bd/0x290 [ 160.961401][ T7224] ? __pfx_blk_mq_alloc_queue+0x10/0x10 [ 160.961430][ T7224] ? blk_mq_alloc_tag_set+0xe2c/0x1330 [ 160.961461][ T7224] __blk_mq_alloc_disk+0x29/0x120 [ 160.961481][ T7224] loop_add+0x498/0xb60 [ 160.961509][ T7224] ? __pfx_loop_add+0x10/0x10 [ 160.961568][ T7224] ? find_held_lock+0x2b/0x80 [ 160.961603][ T7224] ? __fget_files+0x215/0x3d0 [ 160.961638][ T7224] loop_control_ioctl+0xae/0x620 [ 160.961680][ T7224] ? __pfx_loop_control_ioctl+0x10/0x10 [ 160.961729][ T7224] ? __pfx_loop_control_ioctl+0x10/0x10 [ 160.961774][ T7224] __x64_sys_ioctl+0x18e/0x210 [ 160.961805][ T7224] do_syscall_64+0x10b/0xf80 [ 160.961844][ T7224] ? clear_bhb_loop+0x40/0x90 [ 160.961874][ T7224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.961901][ T7224] RIP: 0033:0x7f8b7eb9cdd9 [ 160.961923][ T7224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.961949][ T7224] RSP: 002b:00007f8b7cdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 160.961972][ T7224] RAX: ffffffffffffffda RBX: 00007f8b7ee16090 RCX: 00007f8b7eb9cdd9 [ 160.961989][ T7224] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 000000000000000b [ 160.962003][ T7224] RBP: 00007f8b7ec32d69 R08: 0000000000000000 R09: 0000000000000000 [ 160.962019][ T7224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.962031][ T7224] R13: 00007f8b7ee16128 R14: 00007f8b7ee16090 R15: 00007ffce53f5648 [ 160.962050][ T7224] [ 163.178393][ T7268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.305'. [ 163.451318][ T7277] kafs: addr_prefs: Invalid Command [ 163.478411][ T7279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.310'. [ 165.376659][ T7316] block2mtd: illegal erase size [ 165.399018][ T7319] block2mtd: illegal erase size [ 165.527586][ T7320] random: crng reseeded on system resumption [ 165.660376][ T7320] syz.0.320 (7320) used greatest stack depth: 18328 bytes left [ 166.279414][ T7335] sctp: [Deprecated]: syz.3.324 (pid 7335) Use of int in max_burst socket option. [ 166.279414][ T7335] Use struct sctp_assoc_value instead [ 166.979711][ T7358] netlink: 82 bytes leftover after parsing attributes in process `syz.1.328'. [ 167.365944][ T7373] zram: Removed device: zram0 [ 168.260214][ T7399] openvswitch: netlink: Key 2 has unexpected len 85 expected 4 [ 168.311015][ T7400] FAULT_INJECTION: forcing a failure. [ 168.311015][ T7400] name fail_futex, interval 1, probability 0, space 0, times 0 [ 168.351887][ T7400] CPU: 0 UID: 0 PID: 7400 Comm: syz.1.338 Tainted: G U syzkaller #0 PREEMPT(full) [ 168.351922][ T7400] Tainted: [U]=USER [ 168.351927][ T7400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 168.351935][ T7400] Call Trace: [ 168.351940][ T7400] [ 168.351946][ T7400] dump_stack_lvl+0x100/0x190 [ 168.351972][ T7400] should_fail_ex.cold+0x5/0xa [ 168.351991][ T7400] get_futex_key+0xf78/0x1510 [ 168.352009][ T7400] ? __pfx_get_futex_key+0x10/0x10 [ 168.352023][ T7400] ? lock_acquire+0x1b1/0x370 [ 168.352042][ T7400] futex_wake+0xea/0x530 [ 168.352062][ T7400] ? __pfx_futex_wake+0x10/0x10 [ 168.352083][ T7400] ? exit_mm_release+0x19/0x30 [ 168.352109][ T7400] do_futex+0x32b/0x350 [ 168.352125][ T7400] ? __pfx_do_futex+0x10/0x10 [ 168.352139][ T7400] ? __might_fault+0xc5/0x140 [ 168.352166][ T7400] mm_release+0x24a/0x2f0 [ 168.352184][ T7400] do_exit+0x707/0x2a60 [ 168.352208][ T7400] ? __pfx_do_exit+0x10/0x10 [ 168.352230][ T7400] ? do_raw_spin_lock+0x128/0x260 [ 168.352246][ T7400] ? find_held_lock+0x2b/0x80 [ 168.352263][ T7400] ? get_signal+0x7e0/0x21e0 [ 168.352283][ T7400] do_group_exit+0xd5/0x2a0 [ 168.352297][ T7400] get_signal+0x1ec7/0x21e0 [ 168.352322][ T7400] ? __pfx_get_signal+0x10/0x10 [ 168.352342][ T7400] ? do_futex+0x192/0x350 [ 168.352358][ T7400] arch_do_signal_or_restart+0x91/0x7a0 [ 168.352381][ T7400] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 168.352407][ T7400] ? fdget_pos+0x2c0/0x380 [ 168.352426][ T7400] ? rcu_is_watching+0x12/0xc0 [ 168.352445][ T7400] exit_to_user_mode_loop+0x8b/0x4f0 [ 168.352462][ T7400] ? rcu_is_watching+0x12/0xc0 [ 168.352481][ T7400] do_syscall_64+0x6f2/0xf80 [ 168.352501][ T7400] ? clear_bhb_loop+0x40/0x90 [ 168.352518][ T7400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.352533][ T7400] RIP: 0033:0x7fea2459cdd9 [ 168.352546][ T7400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.352559][ T7400] RSP: 002b:00007fea254650e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 168.352574][ T7400] RAX: fffffffffffffe00 RBX: 00007fea24816098 RCX: 00007fea2459cdd9 [ 168.352583][ T7400] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fea24816098 [ 168.352591][ T7400] RBP: 00007fea24816090 R08: 0000000000000000 R09: 0000000000000000 [ 168.352600][ T7400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.352608][ T7400] R13: 00007fea24816128 R14: 00007fff65969650 R15: 00007fff65969738 [ 168.352626][ T7400] [ 168.961037][ T7419] netlink: 20 bytes leftover after parsing attributes in process `syz.1.342'. [ 169.664576][ T7443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.347'. [ 169.814931][ T7443] ovs_: entered promiscuous mode [ 170.492394][ T7460] netlink: 354 bytes leftover after parsing attributes in process `syz.2.351'. [ 170.564665][ T7460] netlink: 354 bytes leftover after parsing attributes in process `syz.2.351'. [ 170.766457][ T7467] netlink: 228 bytes leftover after parsing attributes in process `syz.0.352'. [ 171.576800][ T4944] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 171.758307][ T7499] random: crng reseeded on system resumption [ 171.898870][ T7508] FAULT_INJECTION: forcing a failure. [ 171.898870][ T7508] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 171.922509][ T7508] CPU: 0 UID: 0 PID: 7508 Comm: syz.0.361 Tainted: G U syzkaller #0 PREEMPT(full) [ 171.922553][ T7508] Tainted: [U]=USER [ 171.922562][ T7508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 171.922578][ T7508] Call Trace: [ 171.922587][ T7508] [ 171.922598][ T7508] dump_stack_lvl+0x100/0x190 [ 171.922635][ T7508] should_fail_ex.cold+0x5/0xa [ 171.922666][ T7508] ? prepare_alloc_pages+0x16d/0x5f0 [ 171.922705][ T7508] should_fail_alloc_page+0xeb/0x140 [ 171.922741][ T7508] prepare_alloc_pages+0x1f0/0x5f0 [ 171.922783][ T7508] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 171.922829][ T7508] ? mark_held_locks+0x41/0x70 [ 171.922856][ T7508] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 171.922894][ T7508] ? lockdep_hardirqs_on+0x78/0x100 [ 171.922935][ T7508] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 171.922975][ T7508] ? rcu_is_watching+0x12/0xc0 [ 171.923010][ T7508] ? trace_sched_exit_tp+0x11c/0x160 [ 171.923050][ T7508] ? __schedule+0x12a7/0x67a0 [ 171.923088][ T7508] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 171.923137][ T7508] ? __lock_acquire+0x4a5/0x2630 [ 171.923161][ T7508] ? __lock_acquire+0x4a5/0x2630 [ 171.923185][ T7508] ? css_rstat_updated+0x1ce/0x5a0 [ 171.923243][ T7508] ? lock_acquire+0x1b1/0x370 [ 171.923285][ T7508] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 171.923328][ T7508] ? policy_nodemask+0xed/0x4f0 [ 171.923360][ T7508] alloc_pages_mpol+0x1fb/0x540 [ 171.923393][ T7508] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 171.923428][ T7508] ? __lock_acquire+0x4a5/0x2630 [ 171.923457][ T7508] folio_alloc_mpol_noprof+0x36/0x260 [ 171.923505][ T7508] vma_alloc_folio_noprof+0xed/0x1d0 [ 171.923540][ T7508] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 171.923583][ T7508] do_anonymous_page+0xb46/0x2050 [ 171.923620][ T7508] ? rcu_read_unlock+0x2d/0xb0 [ 171.923666][ T7508] __handle_mm_fault+0x1d2c/0x2a00 [ 171.923709][ T7508] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 171.923741][ T7508] ? __pfx___handle_mm_fault+0x10/0x10 [ 171.923781][ T7508] ? pte_offset_map_lock+0x174/0x320 [ 171.923813][ T7508] ? find_held_lock+0x2b/0x80 [ 171.923860][ T7508] ? follow_page_pte+0x4d0/0x13f0 [ 171.923898][ T7508] handle_mm_fault+0x36d/0xa20 [ 171.923945][ T7508] __get_user_pages+0x1178/0x32a0 [ 171.923993][ T7508] ? __pfx___get_user_pages+0x10/0x10 [ 171.924039][ T7508] populate_vma_page_range+0x267/0x3f0 [ 171.924079][ T7508] ? __pfx_populate_vma_page_range+0x10/0x10 [ 171.924115][ T7508] ? __pfx_find_vma_intersection+0x10/0x10 [ 171.924151][ T7508] ? do_mmap+0x93f/0x12f0 [ 171.924188][ T7508] __mm_populate+0x107/0x3a0 [ 171.924227][ T7508] ? __pfx___mm_populate+0x10/0x10 [ 171.924266][ T7508] ? up_write+0x28c/0x4f0 [ 171.924301][ T7508] vm_mmap_pgoff+0x37f/0x470 [ 171.924342][ T7508] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 171.924380][ T7508] ? do_futex+0x192/0x350 [ 171.924411][ T7508] ? __pfx_do_futex+0x10/0x10 [ 171.924440][ T7508] ? sock_ioctl+0x2dc/0x6b0 [ 171.924490][ T7508] ksys_mmap_pgoff+0xe4/0x610 [ 171.924524][ T7508] ? __x64_sys_futex+0x358/0x4d0 [ 171.924554][ T7508] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 171.924582][ T7508] ? xfd_validate_state+0x129/0x190 [ 171.924619][ T7508] __x64_sys_mmap+0x125/0x190 [ 171.924656][ T7508] do_syscall_64+0x10b/0xf80 [ 171.924694][ T7508] ? clear_bhb_loop+0x40/0x90 [ 171.924729][ T7508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.924757][ T7508] RIP: 0033:0x7f1adc19cdd9 [ 171.924781][ T7508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.924806][ T7508] RSP: 002b:00007f1add111028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 171.924832][ T7508] RAX: ffffffffffffffda RBX: 00007f1adc415fa0 RCX: 00007f1adc19cdd9 [ 171.924850][ T7508] RDX: 00000000000000df RSI: 0000000000400005 RDI: 0000000000000000 [ 171.924864][ T7508] RBP: 00007f1adc232d69 R08: ffffffffffffffff R09: 0000000000000000 [ 171.924880][ T7508] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 171.924897][ T7508] R13: 00007f1adc416038 R14: 00007f1adc415fa0 R15: 00007ffd8770d608 [ 171.924935][ T7508] [ 173.150537][ T7522] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 173.187476][ T7522] pci 0000:00:01.3: PCI INT A: no GSI [ 173.641520][ T4944] Bluetooth: hci0: command 0x0c1a tx timeout [ 173.860128][ T29] audit: type=1800 audit(1778431724.777:3): pid=7541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.366" name="dbroot" dev="configfs" ino=17047 res=0 errno=0 [ 173.884269][ T7535] zswap: compressor not available [ 175.722672][ T4944] Bluetooth: hci0: command 0x0c1a tx timeout [ 178.298623][ T7610] smpboot: CPU 1 is now offline [ 178.929589][ T7611] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 178.952215][ T7611] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 178.977404][ T7611] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 179.000900][ T7611] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 179.727822][ T7645] netlink: 330 bytes leftover after parsing attributes in process `syz.0.387'. [ 179.796930][ T7645] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.806035][ T7645] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.605228][ T5635] Bluetooth: hci2: command 0x0c1a tx timeout [ 181.005130][ T5635] Bluetooth: hci1: command 0x0c1a tx timeout [ 181.011427][ T4944] Bluetooth: hci3: command 0x0c1a tx timeout [ 181.017858][ T5634] Bluetooth: hci0: command 0x0c1a tx timeout [ 181.300679][ T4944] Bluetooth: hci1: unexpected event 0x05 length: 43 > 4 [ 181.409704][ T7694] zram: Added device: zram0 [ 182.293072][ T7732] FAULT_INJECTION: forcing a failure. [ 182.293072][ T7732] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.324645][ T7732] CPU: 0 UID: 0 PID: 7732 Comm: syz.1.404 Tainted: G U syzkaller #0 PREEMPT(full) [ 182.324673][ T7732] Tainted: [U]=USER [ 182.324679][ T7732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 182.324688][ T7732] Call Trace: [ 182.324694][ T7732] [ 182.324700][ T7732] dump_stack_lvl+0x100/0x190 [ 182.324722][ T7732] should_fail_ex.cold+0x5/0xa [ 182.324742][ T7732] _copy_to_user+0x32/0xd0 [ 182.324759][ T7732] do_pages_stat+0x559/0x7f0 [ 182.324784][ T7732] ? __pfx_do_pages_stat+0x10/0x10 [ 182.324805][ T7732] ? find_held_lock+0x2b/0x80 [ 182.324835][ T7732] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 182.324855][ T7732] ? lockdep_hardirqs_on+0x78/0x100 [ 182.324875][ T7732] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 182.324897][ T7732] kernel_move_pages+0xecf/0x13f0 [ 182.324918][ T7732] ? do_futex+0x192/0x350 [ 182.324934][ T7732] ? __pfx_do_futex+0x10/0x10 [ 182.324949][ T7732] ? _raw_spin_unlock+0x28/0x50 [ 182.324967][ T7732] ? __pfx_kernel_move_pages+0x10/0x10 [ 182.324985][ T7732] ? __pfx_do_set_mempolicy+0x10/0x10 [ 182.325004][ T7732] ? __x64_sys_futex+0x34f/0x4d0 [ 182.325019][ T7732] ? __x64_sys_futex+0x358/0x4d0 [ 182.325036][ T7732] ? xfd_validate_state+0x129/0x190 [ 182.325055][ T7732] __x64_sys_move_pages+0xe0/0x1c0 [ 182.325074][ T7732] ? do_syscall_64+0x90/0xf80 [ 182.325094][ T7732] ? lockdep_hardirqs_on+0x78/0x100 [ 182.325114][ T7732] do_syscall_64+0x10b/0xf80 [ 182.325133][ T7732] ? clear_bhb_loop+0x40/0x90 [ 182.325150][ T7732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.325165][ T7732] RIP: 0033:0x7fea2459cdd9 [ 182.325179][ T7732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.325192][ T7732] RSP: 002b:00007fea25486028 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 182.325207][ T7732] RAX: ffffffffffffffda RBX: 00007fea24815fa0 RCX: 00007fea2459cdd9 [ 182.325216][ T7732] RDX: 0000000000000000 RSI: 0000000000001001 RDI: 0000000000000000 [ 182.325224][ T7732] RBP: 00007fea24632d69 R08: 0000000000000000 R09: 0000000000000000 [ 182.325233][ T7732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.325241][ T7732] R13: 00007fea24816038 R14: 00007fea24815fa0 R15: 00007fff65969738 [ 182.325260][ T7732] [ 184.132442][ T7770] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 184.387648][ T7773] futex_wake_op: syz.3.413 tries to shift op by -2048; fix this program [ 184.447733][ T7773] futex_wake_op: syz.3.413 tries to shift op by -2048; fix this program [ 184.538906][ T7773] futex_wake_op: syz.3.413 tries to shift op by -2048; fix this program [ 185.623928][ T7805] ovs_: entered promiscuous mode [ 185.644298][ T7811] FAULT_INJECTION: forcing a failure. [ 185.644298][ T7811] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 185.701819][ T7811] CPU: 0 UID: 0 PID: 7811 Comm: syz.2.421 Tainted: G U syzkaller #0 PREEMPT(full) [ 185.701845][ T7811] Tainted: [U]=USER [ 185.701850][ T7811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 185.701859][ T7811] Call Trace: [ 185.701865][ T7811] [ 185.701871][ T7811] dump_stack_lvl+0x100/0x190 [ 185.701892][ T7811] should_fail_ex.cold+0x5/0xa [ 185.701908][ T7811] ? prepare_alloc_pages+0x16d/0x5f0 [ 185.701931][ T7811] should_fail_alloc_page+0xeb/0x140 [ 185.701950][ T7811] prepare_alloc_pages+0x1f0/0x5f0 [ 185.701972][ T7811] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 185.702014][ T7811] ? __lock_acquire+0x4a5/0x2630 [ 185.702030][ T7811] ? trace_mm_page_alloc+0x163/0x1d0 [ 185.702050][ T7811] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 185.702076][ T7811] ? lock_acquire+0x1b1/0x370 [ 185.702090][ T7811] ? find_held_lock+0x2b/0x80 [ 185.702108][ T7811] ? page_table_check_set+0x477/0x920 [ 185.702129][ T7811] ? page_table_check_set+0x486/0x920 [ 185.702146][ T7811] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 185.702169][ T7811] ? policy_nodemask+0xed/0x4f0 [ 185.702187][ T7811] alloc_pages_mpol+0x1fb/0x540 [ 185.702205][ T7811] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 185.702221][ T7811] ? filemap_map_pages+0x950/0x2140 [ 185.702247][ T7811] folio_alloc_mpol_noprof+0x36/0x260 [ 185.702268][ T7811] vma_alloc_folio_noprof+0xed/0x1d0 [ 185.702287][ T7811] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 185.702305][ T7811] ? rcu_read_unlock+0x2d/0xb0 [ 185.702326][ T7811] ? rcu_read_unlock+0x2d/0xb0 [ 185.702351][ T7811] do_wp_page+0x1ee1/0x4350 [ 185.702381][ T7811] ? __pfx_do_wp_page+0x10/0x10 [ 185.702402][ T7811] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 185.702424][ T7811] __handle_mm_fault+0x1ab6/0x2a00 [ 185.702450][ T7811] ? reacquire_held_locks+0xce/0x1e0 [ 185.702465][ T7811] ? __pfx___handle_mm_fault+0x10/0x10 [ 185.702490][ T7811] ? lock_vma_under_rcu+0x17c/0x590 [ 185.702521][ T7811] handle_mm_fault+0x36d/0xa20 [ 185.702546][ T7811] do_user_addr_fault+0x5a3/0x12f0 [ 185.702569][ T7811] exc_page_fault+0x6f/0xd0 [ 185.702590][ T7811] asm_exc_page_fault+0x26/0x30 [ 185.702606][ T7811] RIP: 0033:0x7fb2b9f5cbc5 [ 185.702619][ T7811] Code: 00 00 00 66 90 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 1d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 0f c1 03 83 c0 08 85 c0 0f 88 0c 01 00 00 a8 01 0f 85 84 00 00 [ 185.702633][ T7811] RSP: 002b:00007fb2baea7de0 EFLAGS: 00010293 [ 185.702646][ T7811] RAX: 0000000000000008 RBX: 00007fb2bad47e20 RCX: 0000000000000000 [ 185.702655][ T7811] RDX: 0000000000000000 RSI: 00007fb2ba05002f RDI: 00007fb2bad47e20 [ 185.702664][ T7811] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000005 [ 185.702672][ T7811] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2ba04fd47 [ 185.702681][ T7811] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007fb2ba05002f [ 185.702701][ T7811] [ 185.988315][ T7811] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 186.733983][ T7820] zswap: compressor not available [ 188.208103][ T7850] netlink: 330 bytes leftover after parsing attributes in process `syz.1.429'. [ 190.436651][ T7926] Unable to find swap-space signature [ 190.596968][ T7929] random: crng reseeded on system resumption [ 193.015155][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.026590][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.354393][ T7995] zswap: compressor not available [ 194.422148][ T4944] Bluetooth: hci0: unexpected subevent 0x0c length: 118 > 5 [ 194.823281][ T8029] netlink: 28 bytes leftover after parsing attributes in process `syz.0.470'. [ 194.836260][ T8038] netlink: 342 bytes leftover after parsing attributes in process `syz.3.472'. [ 194.890180][ T8037] FAULT_INJECTION: forcing a failure. [ 194.890180][ T8037] name failslab, interval 1, probability 0, space 0, times 0 [ 194.931121][ T8037] CPU: 0 UID: 0 PID: 8037 Comm: syz.3.472 Tainted: G U syzkaller #0 PREEMPT(full) [ 194.931146][ T8037] Tainted: [U]=USER [ 194.931150][ T8037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 194.931158][ T8037] Call Trace: [ 194.931163][ T8037] [ 194.931169][ T8037] dump_stack_lvl+0x100/0x190 [ 194.931190][ T8037] should_fail_ex.cold+0x5/0xa [ 194.931209][ T8037] ? get_callchain_buffers+0x123/0x380 [ 194.931228][ T8037] should_failslab+0xc2/0x120 [ 194.931245][ T8037] __kmalloc_noprof+0xe0/0x850 [ 194.931258][ T8037] ? rcu_is_cpu_rrupt_from_idle+0x1c0/0x270 [ 194.931280][ T8037] get_callchain_buffers+0x123/0x380 [ 194.931299][ T8037] ? bpf_lsm_capable+0x9/0x10 [ 194.931314][ T8037] ? security_capable+0x80/0x260 [ 194.931337][ T8037] stack_map_alloc+0x316/0x610 [ 194.931355][ T8037] ? __pfx_stack_map_mem_usage+0x10/0x10 [ 194.931372][ T8037] map_create+0x84e/0x2bc0 [ 194.931393][ T8037] ? futex_unqueue+0x13d/0x2c0 [ 194.931409][ T8037] ? __futex_wait+0x256/0x300 [ 194.931431][ T8037] ? __pfx_map_create+0x10/0x10 [ 194.931455][ T8037] ? __might_fault+0xc5/0x140 [ 194.931477][ T8037] ? __might_fault+0xc5/0x140 [ 194.931505][ T8037] __sys_bpf+0x2091/0x4b90 [ 194.931522][ T8037] ? __pfx___sys_bpf+0x10/0x10 [ 194.931537][ T8037] ? __pfx_futex_wait+0x10/0x10 [ 194.931559][ T8037] ? ksys_write+0x190/0x250 [ 194.931580][ T8037] ? do_futex+0x192/0x350 [ 194.931612][ T8037] ? xfd_validate_state+0x129/0x190 [ 194.931632][ T8037] __x64_sys_bpf+0x7b/0xc0 [ 194.931647][ T8037] ? lockdep_hardirqs_on+0x78/0x100 [ 194.931669][ T8037] do_syscall_64+0x10b/0xf80 [ 194.931689][ T8037] ? clear_bhb_loop+0x40/0x90 [ 194.931707][ T8037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.931721][ T8037] RIP: 0033:0x7f8b7eb9cdd9 [ 194.931734][ T8037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.931747][ T8037] RSP: 002b:00007f8b7cdd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 194.931762][ T8037] RAX: ffffffffffffffda RBX: 00007f8b7ee16180 RCX: 00007f8b7eb9cdd9 [ 194.931771][ T8037] RDX: 00000000000006f4 RSI: 0000200000000580 RDI: 0000000000000000 [ 194.931779][ T8037] RBP: 00007f8b7ec32d69 R08: 0000000000000000 R09: 0000000000000000 [ 194.931788][ T8037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.931796][ T8037] R13: 00007f8b7ee16218 R14: 00007f8b7ee16180 R15: 00007ffce53f5648 [ 194.931814][ T8037] [ 196.260495][ T8029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.309907][ T8029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.390196][ T8052] FAULT_INJECTION: forcing a failure. [ 196.390196][ T8052] name failslab, interval 1, probability 0, space 0, times 0 [ 196.440135][ T8052] CPU: 0 UID: 0 PID: 8052 Comm: syz.2.475 Tainted: G U syzkaller #0 PREEMPT(full) [ 196.440163][ T8052] Tainted: [U]=USER [ 196.440168][ T8052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 196.440177][ T8052] Call Trace: [ 196.440183][ T8052] [ 196.440189][ T8052] dump_stack_lvl+0x100/0x190 [ 196.440211][ T8052] should_fail_ex.cold+0x5/0xa [ 196.440231][ T8052] should_failslab+0xc2/0x120 [ 196.440249][ T8052] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 196.440272][ T8052] ? __kernfs_new_node+0xd2/0x9f0 [ 196.440288][ T8052] ? kstrdup+0xb3/0xe0 [ 196.440305][ T8052] __kernfs_new_node+0xd2/0x9f0 [ 196.440322][ T8052] ? __lock_acquire+0x4a5/0x2630 [ 196.440336][ T8052] ? __pfx___kernfs_new_node+0x10/0x10 [ 196.440357][ T8052] ? find_held_lock+0x2b/0x80 [ 196.440375][ T8052] ? kernfs_root+0xee/0x2a0 [ 196.440389][ T8052] ? kernfs_root+0xee/0x2a0 [ 196.440409][ T8052] kernfs_new_node+0x11b/0x1a0 [ 196.440430][ T8052] __kernfs_create_file+0x53/0x350 [ 196.440460][ T8052] cgroup_addrm_files+0x4ef/0xdb0 [ 196.440494][ T8052] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 196.440523][ T8052] ? css_next_child+0xcf/0x2e0 [ 196.440542][ T8052] ? css_next_descendant_pre+0x58/0x1a0 [ 196.440562][ T8052] css_populate_dir+0x3c4/0x590 [ 196.440579][ T8052] cgroup_mkdir+0x580/0x1310 [ 196.440602][ T8052] ? __pfx_cgroup_mkdir+0x10/0x10 [ 196.440623][ T8052] kernfs_iop_mkdir+0x111/0x190 [ 196.440641][ T8052] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 196.440663][ T8052] vfs_mkdir+0x361/0x850 [ 196.440680][ T8052] filename_mkdirat+0x48b/0x5e0 [ 196.440701][ T8052] ? __pfx_filename_mkdirat+0x10/0x10 [ 196.440720][ T8052] ? strncpy_from_user+0x19d/0x2d0 [ 196.440737][ T8052] ? do_getname+0x191/0x390 [ 196.440760][ T8052] __x64_sys_mkdir+0x6b/0x90 [ 196.440779][ T8052] do_syscall_64+0x10b/0xf80 [ 196.440799][ T8052] ? clear_bhb_loop+0x40/0x90 [ 196.440817][ T8052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.440832][ T8052] RIP: 0033:0x7fb2b9f9cdd9 [ 196.440845][ T8052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.440859][ T8052] RSP: 002b:00007fb2bae88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 196.440873][ T8052] RAX: ffffffffffffffda RBX: 00007fb2ba216090 RCX: 00007fb2b9f9cdd9 [ 196.440883][ T8052] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000040 [ 196.440891][ T8052] RBP: 00007fb2ba032d69 R08: 0000000000000000 R09: 0000000000000000 [ 196.440900][ T8052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.440908][ T8052] R13: 00007fb2ba216128 R14: 00007fb2ba216090 R15: 00007fffa7ee05f8 [ 196.440927][ T8052] [ 196.785082][ T8052] cgroup: cgroup_addrm_files: failed to add cgroup.type, err=-12 [ 196.968125][ T8029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.975943][ T8029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.245637][ T8060] FAULT_INJECTION: forcing a failure. [ 197.245637][ T8060] name failslab, interval 1, probability 0, space 0, times 0 [ 197.280250][ T8060] CPU: 0 UID: 0 PID: 8060 Comm: syz.0.479 Tainted: G U syzkaller #0 PREEMPT(full) [ 197.280276][ T8060] Tainted: [U]=USER [ 197.280280][ T8060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 197.280289][ T8060] Call Trace: [ 197.280294][ T8060] [ 197.280300][ T8060] dump_stack_lvl+0x100/0x190 [ 197.280321][ T8060] should_fail_ex.cold+0x5/0xa [ 197.280340][ T8060] should_failslab+0xc2/0x120 [ 197.280358][ T8060] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 197.280393][ T8060] ? security_inode_alloc+0x3b/0x2c0 [ 197.280407][ T8060] ? lockdep_init_map_type+0x5c/0x250 [ 197.280426][ T8060] security_inode_alloc+0x3b/0x2c0 [ 197.280440][ T8060] inode_init_always_gfp+0xcc0/0x1000 [ 197.280461][ T8060] alloc_inode+0x8e/0x250 [ 197.280483][ T8060] new_inode+0x22/0x1c0 [ 197.280506][ T8060] shmem_get_inode+0x1e3/0xfb0 [ 197.280528][ T8060] ? __pfx_shmem_get_inode+0x10/0x10 [ 197.280552][ T8060] __shmem_file_setup+0x382/0x460 [ 197.280572][ T8060] ? __pfx___shmem_file_setup+0x10/0x10 [ 197.280594][ T8060] ? vm_area_alloc+0x1f/0x160 [ 197.280618][ T8060] shmem_zero_setup+0x96/0x1b0 [ 197.280634][ T8060] __mmap_region+0x24e9/0x2da0 [ 197.280660][ T8060] ? __pfx___mmap_region+0x10/0x10 [ 197.280685][ T8060] ? rcu_is_watching+0x12/0xc0 [ 197.280702][ T8060] ? trace_pelt_se_tp+0x13b/0x190 [ 197.280724][ T8060] ? __lock_acquire+0x4a5/0x2630 [ 197.280739][ T8060] ? do_raw_spin_unlock+0x145/0x1e0 [ 197.280756][ T8060] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 197.280783][ T8060] ? __lock_acquire+0x4a5/0x2630 [ 197.280797][ T8060] ? rcu_is_watching+0x12/0xc0 [ 197.280822][ T8060] ? rcu_is_watching+0x12/0xc0 [ 197.280839][ T8060] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 197.280858][ T8060] ? lockdep_hardirqs_on+0x78/0x100 [ 197.280921][ T8060] mmap_region+0x35d/0x620 [ 197.280936][ T8060] ? rcu_is_watching+0x12/0xc0 [ 197.280952][ T8060] ? __pfx_mmap_region+0x10/0x10 [ 197.280968][ T8060] ? cap_mmap_addr+0x4b/0x120 [ 197.280988][ T8060] ? bpf_lsm_mmap_addr+0x9/0x30 [ 197.281002][ T8060] ? security_mmap_addr+0x71/0x1e0 [ 197.281019][ T8060] ? __get_unmapped_area+0x255/0x3e0 [ 197.281041][ T8060] do_mmap+0xc63/0x12f0 [ 197.281062][ T8060] ? __pfx_do_mmap+0x10/0x10 [ 197.281080][ T8060] ? __pfx_down_write_killable+0x10/0x10 [ 197.281098][ T8060] vm_mmap_pgoff+0x29e/0x470 [ 197.281120][ T8060] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 197.281139][ T8060] ? do_futex+0x192/0x350 [ 197.281155][ T8060] ? __pfx_do_futex+0x10/0x10 [ 197.281174][ T8060] ksys_mmap_pgoff+0xe4/0x610 [ 197.281192][ T8060] ? __x64_sys_futex+0x358/0x4d0 [ 197.281208][ T8060] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 197.281224][ T8060] ? xfd_validate_state+0x129/0x190 [ 197.281239][ T8060] ? ksys_write+0x1ac/0x250 [ 197.281258][ T8060] __x64_sys_mmap+0x125/0x190 [ 197.281277][ T8060] do_syscall_64+0x10b/0xf80 [ 197.281297][ T8060] ? clear_bhb_loop+0x40/0x90 [ 197.281314][ T8060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.281329][ T8060] RIP: 0033:0x7f1adc19cdd9 [ 197.281341][ T8060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.281354][ T8060] RSP: 002b:00007f1add111028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 197.281369][ T8060] RAX: ffffffffffffffda RBX: 00007f1adc415fa0 RCX: 00007f1adc19cdd9 [ 197.281383][ T8060] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 197.281392][ T8060] RBP: 00007f1adc232d69 R08: fffffffffffffffa R09: 0000000000008000 [ 197.281400][ T8060] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 197.281409][ T8060] R13: 00007f1adc416038 R14: 00007f1adc415fa0 R15: 00007ffd8770d608 [ 197.281427][ T8060] [ 198.505876][ T8099] netlink: 25 bytes leftover after parsing attributes in process `syz.0.486'. [ 198.617952][ T8095] can0: slcan on pty238. [ 198.743665][ T8094] can0 (unregistered): slcan off pty238. [ 198.807628][ T8097] can: request_module (can-proto-0) failed. [ 199.103716][ T8112] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 199.360837][ T8121] : entered promiscuous mode [ 200.068289][ T8153] Console: switching to colour VGA+ 80x25 [ 200.779753][ T8179] QAT: failed to copy from user cfg_data. [ 202.306937][ T8228] nvme_fabrics: unknown parameter or missing value 'Jcf8X}ժ㡐zzU{N' in ctrl creation request [ 202.342733][ T8224] zswap: compressor not available [ 202.379490][ T8228] netlink: 504 bytes leftover after parsing attributes in process `syz.3.512'. [ 202.501545][ T8233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.513'. [ 202.545210][ T8233] i: entered promiscuous mode syzkaller syzkaller login: [ 204.784083][ T8292] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 204.892936][ T29] audit: type=1800 audit(1778431755.781:4): pid=8295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.529" name=22050820 dev="tmpfs" ino=695 res=0 errno=0 [ 206.362277][ T8331] Format for adding new port is "id [perm_addr]" (uint MAC). [ 208.941177][ T8347] netlink: 326 bytes leftover after parsing attributes in process `syz.3.538'. [ 209.027584][ T8347] FAULT_INJECTION: forcing a failure. [ 209.027584][ T8347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.050579][ T8350] netlink: 334 bytes leftover after parsing attributes in process `syz.0.539'. [ 209.093605][ T8353] FAULT_INJECTION: forcing a failure. [ 209.093605][ T8353] name failslab, interval 1, probability 0, space 0, times 0 [ 209.161502][ T8347] CPU: 0 UID: 0 PID: 8347 Comm: syz.3.538 Tainted: G U syzkaller #0 PREEMPT(full) [ 209.161528][ T8347] Tainted: [U]=USER [ 209.161533][ T8347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 209.161542][ T8347] Call Trace: [ 209.161547][ T8347] [ 209.161553][ T8347] dump_stack_lvl+0x100/0x190 [ 209.161575][ T8347] should_fail_ex.cold+0x5/0xa [ 209.161594][ T8347] _copy_from_user+0x2e/0xd0 [ 209.161610][ T8347] core_sys_select+0x2d0/0xbb0 [ 209.161633][ T8347] ? __pfx_core_sys_select+0x10/0x10 [ 209.161669][ T8347] ? ktime_get_ts64+0x306/0x420 [ 209.161693][ T8347] ? ktime_get_ts64+0x318/0x420 [ 209.161713][ T8347] ? ktime_get_ts64+0x257/0x420 [ 209.161737][ T8347] kern_select+0x20c/0x270 [ 209.161758][ T8347] ? __pfx_kern_select+0x10/0x10 [ 209.161775][ T8347] ? xfd_validate_state+0x129/0x190 [ 209.161795][ T8347] __x64_sys_select+0xbd/0x160 [ 209.161811][ T8347] ? do_syscall_64+0x90/0xf80 [ 209.161831][ T8347] ? lockdep_hardirqs_on+0x78/0x100 [ 209.161852][ T8347] do_syscall_64+0x10b/0xf80 [ 209.161871][ T8347] ? clear_bhb_loop+0x40/0x90 [ 209.161889][ T8347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.161904][ T8347] RIP: 0033:0x7f8b7eb9cdd9 [ 209.161917][ T8347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.161930][ T8347] RSP: 002b:00007f8b7f974028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 209.161945][ T8347] RAX: ffffffffffffffda RBX: 00007f8b7ee15fa0 RCX: 00007f8b7eb9cdd9 [ 209.161954][ T8347] RDX: 00002000000000c0 RSI: 0000200000000040 RDI: 0000000000000001 [ 209.161968][ T8347] RBP: 00007f8b7ec32d69 R08: 00002000000001c0 R09: 0000000000000000 [ 209.161978][ T8347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 209.161986][ T8347] R13: 00007f8b7ee16038 R14: 00007f8b7ee15fa0 R15: 00007ffce53f5648 [ 209.162006][ T8347] [ 209.583885][ T8353] CPU: 0 UID: 0 PID: 8353 Comm: syz.3.538 Tainted: G U syzkaller #0 PREEMPT(full) [ 209.583911][ T8353] Tainted: [U]=USER [ 209.583917][ T8353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 209.583932][ T8353] Call Trace: [ 209.583937][ T8353] [ 209.583943][ T8353] dump_stack_lvl+0x100/0x190 [ 209.583964][ T8353] should_fail_ex.cold+0x5/0xa [ 209.583985][ T8353] should_failslab+0xc2/0x120 [ 209.584002][ T8353] __kmalloc_cache_noprof+0x7a/0x6f0 [ 209.584023][ T8353] ? call_usermodehelper_setup+0xaf/0x360 [ 209.584043][ T8353] ? __pfx_free_modprobe_argv+0x10/0x10 [ 209.584060][ T8353] call_usermodehelper_setup+0xaf/0x360 [ 209.584079][ T8353] __request_module+0x3d3/0x6c0 [ 209.584096][ T8353] ? __pfx___request_module+0x10/0x10 [ 209.584117][ T8353] ? __get_fs_type+0x12c/0x170 [ 209.584137][ T8353] ? __get_fs_type+0x12c/0x170 [ 209.584163][ T8353] get_fs_type+0xd7/0x190 [ 209.584183][ T8353] __x64_sys_fsopen+0xca/0x220 [ 209.584206][ T8353] do_syscall_64+0x10b/0xf80 [ 209.584226][ T8353] ? clear_bhb_loop+0x40/0x90 [ 209.584244][ T8353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.584259][ T8353] RIP: 0033:0x7f8b7eb9cdd9 [ 209.584272][ T8353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.584285][ T8353] RSP: 002b:00007f8b7cdf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 209.584300][ T8353] RAX: ffffffffffffffda RBX: 00007f8b7ee16090 RCX: 00007f8b7eb9cdd9 [ 209.584309][ T8353] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 209.584317][ T8353] RBP: 00007f8b7ec32d69 R08: 0000000000000000 R09: 0000000000000000 [ 209.584325][ T8353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 209.584333][ T8353] R13: 00007f8b7ee16128 R14: 00007f8b7ee16090 R15: 00007ffce53f5648 [ 209.584353][ T8353] [ 210.655577][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.548'. [ 212.716979][ T8426] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 215.421011][ T8481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.572'. [ 218.292078][ T8538] netlink: 342 bytes leftover after parsing attributes in process `syz.3.586'. [ 218.924270][ T8548] FAULT_INJECTION: forcing a failure. [ 218.924270][ T8548] name failslab, interval 1, probability 0, space 0, times 0 [ 219.072149][ T8548] CPU: 0 UID: 0 PID: 8548 Comm: syz.3.587 Tainted: G U syzkaller #0 PREEMPT(full) [ 219.072176][ T8548] Tainted: [U]=USER [ 219.072181][ T8548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 219.072190][ T8548] Call Trace: [ 219.072195][ T8548] [ 219.072202][ T8548] dump_stack_lvl+0x100/0x190 [ 219.072224][ T8548] should_fail_ex.cold+0x5/0xa [ 219.072244][ T8548] should_failslab+0xc2/0x120 [ 219.072261][ T8548] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 219.072284][ T8548] ? __mpol_dup+0x74/0x390 [ 219.072306][ T8548] __mpol_dup+0x74/0x390 [ 219.072324][ T8548] ? __pfx___mpol_dup+0x10/0x10 [ 219.072342][ T8548] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 219.072363][ T8548] ? sp_alloc+0x27/0x160 [ 219.072385][ T8548] sp_alloc+0x4d/0x160 [ 219.072403][ T8548] mpol_set_shared_policy+0xa5/0x890 [ 219.072426][ T8548] ? __pfx_shmem_set_policy+0x10/0x10 [ 219.072444][ T8548] mbind_range+0x339/0x550 [ 219.072465][ T8548] do_mbind+0x7dc/0xfd0 [ 219.072489][ T8548] ? __pfx_do_mbind+0x10/0x10 [ 219.072508][ T8548] ? ksys_write+0x190/0x250 [ 219.072533][ T8548] ? __pfx_get_nodes+0x10/0x10 [ 219.072554][ T8548] kernel_mbind+0x1b7/0x200 [ 219.072575][ T8548] ? __pfx_kernel_mbind+0x10/0x10 [ 219.072596][ T8548] ? rcu_is_watching+0x12/0xc0 [ 219.072616][ T8548] do_syscall_64+0x10b/0xf80 [ 219.072636][ T8548] ? clear_bhb_loop+0x40/0x90 [ 219.072654][ T8548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.072668][ T8548] RIP: 0033:0x7f8b7eb9cdd9 [ 219.072681][ T8548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.072696][ T8548] RSP: 002b:00007f8b7cdf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 219.072711][ T8548] RAX: ffffffffffffffda RBX: 00007f8b7ee16090 RCX: 00007f8b7eb9cdd9 [ 219.072720][ T8548] RDX: 0000000000000004 RSI: 00000000002091d2 RDI: 0000000000000000 [ 219.072729][ T8548] RBP: 00007f8b7ec32d69 R08: 0000002000000006 R09: 0000000000000002 [ 219.072737][ T8548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.072745][ T8548] R13: 00007f8b7ee16128 R14: 00007f8b7ee16090 R15: 00007ffce53f5648 [ 219.072764][ T8548] [ 222.196263][ T8609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.604'. [ 222.841208][ T8649] type: 768 invalid [ 224.178518][ T8677] netlink: 'syz.3.619': attribute type 10 has an invalid length. [ 224.285950][ T8677] netlink: 330 bytes leftover after parsing attributes in process `syz.3.619'. [ 224.669783][ T8683] zswap: compressor not available [ 224.742641][ T8696] netlink: 334 bytes leftover after parsing attributes in process `syz.1.623'. [ 228.487486][ T8785] sd 0:0:1:0: PR command failed: 1026 [ 228.518368][ T8785] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 228.564537][ T8785] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 228.813257][ T8785] [U] ^R [ 233.176734][ T8848] nfs4: Unknown parameter '>ozҚ%"IӐxPt!q{e JM7+z#;)4pUX.J' [ 233.542289][ T8858] netlink: 350 bytes leftover after parsing attributes in process `syz.0.657'. [ 234.258731][ T8877] FAULT_INJECTION: forcing a failure. [ 234.258731][ T8877] name failslab, interval 1, probability 0, space 0, times 0 [ 234.358030][ T8877] CPU: 0 UID: 0 PID: 8877 Comm: syz.3.662 Tainted: G U syzkaller #0 PREEMPT(full) [ 234.358055][ T8877] Tainted: [U]=USER [ 234.358060][ T8877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 234.358069][ T8877] Call Trace: [ 234.358074][ T8877] [ 234.358080][ T8877] dump_stack_lvl+0x100/0x190 [ 234.358102][ T8877] should_fail_ex.cold+0x5/0xa [ 234.358122][ T8877] should_failslab+0xc2/0x120 [ 234.358140][ T8877] __kmalloc_cache_noprof+0x7a/0x6f0 [ 234.358161][ T8877] ? nexthop_net_init+0x73/0x140 [ 234.358179][ T8877] ? lockdep_init_map_type+0x5c/0x250 [ 234.358197][ T8877] ? __pfx_nexthop_net_init+0x10/0x10 [ 234.358215][ T8877] nexthop_net_init+0x73/0x140 [ 234.358230][ T8877] ? tcf_net_init+0x55/0x150 [ 234.358247][ T8877] ops_init+0x1e2/0x5f0 [ 234.358265][ T8877] setup_net+0x118/0x3a0 [ 234.358282][ T8877] ? __pfx_setup_net+0x10/0x10 [ 234.358299][ T8877] ? mutex_init_lockdep+0xf1/0x120 [ 234.358319][ T8877] copy_net_ns+0x46f/0x7c0 [ 234.358340][ T8877] create_new_namespaces+0x3ea/0xac0 [ 234.358363][ T8877] unshare_nsproxy_namespaces+0xf2/0x220 [ 234.358384][ T8877] ksys_unshare+0x438/0xab0 [ 234.358406][ T8877] ? __pfx_ksys_unshare+0x10/0x10 [ 234.358426][ T8877] ? xfd_validate_state+0x129/0x190 [ 234.358440][ T8877] ? exit_to_user_mode_loop+0xe2/0x4f0 [ 234.358461][ T8877] __x64_sys_unshare+0x31/0x40 [ 234.358481][ T8877] do_syscall_64+0x10b/0xf80 [ 234.358502][ T8877] ? clear_bhb_loop+0x40/0x90 [ 234.358519][ T8877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.358539][ T8877] RIP: 0033:0x7f8b7eb9cdd9 [ 234.358552][ T8877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.358567][ T8877] RSP: 002b:00007f8b7f974028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 234.358581][ T8877] RAX: ffffffffffffffda RBX: 00007f8b7ee15fa0 RCX: 00007f8b7eb9cdd9 [ 234.358591][ T8877] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 234.358600][ T8877] RBP: 00007f8b7ec32d69 R08: 0000000000000000 R09: 0000000000000000 [ 234.358617][ T8877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.358626][ T8877] R13: 00007f8b7ee16038 R14: 00007f8b7ee15fa0 R15: 00007ffce53f5648 [ 234.358646][ T8877] [ 234.629903][ T8882] vivid-008: ================= START STATUS ================= [ 234.629957][ T8882] vivid-008: ================== END STATUS ================== [ 235.386344][ T8901] random: crng reseeded on system resumption [ 235.453015][ T8901] Restarting kernel threads ... [ 235.483703][ T8901] Done restarting kernel threads. [ 239.032693][ T8968] FAULT_INJECTION: forcing a failure. [ 239.032693][ T8968] name fail_futex, interval 1, probability 0, space 0, times 0 [ 239.107943][ T8968] CPU: 0 UID: 0 PID: 8968 Comm: syz.2.678 Tainted: G U L syzkaller #0 PREEMPT(full) [ 239.107972][ T8968] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 239.107978][ T8968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 239.107990][ T8968] Call Trace: [ 239.107997][ T8968] [ 239.108003][ T8968] dump_stack_lvl+0x100/0x190 [ 239.108026][ T8968] should_fail_ex.cold+0x5/0xa [ 239.108047][ T8968] get_futex_key+0x1d2/0x1510 [ 239.108065][ T8968] ? __pfx_get_futex_key+0x10/0x10 [ 239.108086][ T8968] futex_wake+0xea/0x530 [ 239.108106][ T8968] ? __pfx_futex_wake+0x10/0x10 [ 239.108124][ T8968] ? __pfx___might_resched+0x10/0x10 [ 239.108141][ T8968] ? __kasan_slab_alloc+0x89/0x90 [ 239.108158][ T8968] ? lockdep_init_map_type+0x5c/0x250 [ 239.108184][ T8968] do_futex+0x32b/0x350 [ 239.108201][ T8968] ? __pfx_do_futex+0x10/0x10 [ 239.108222][ T8968] __x64_sys_futex+0x34f/0x4d0 [ 239.108239][ T8968] ? fd_install+0x223/0x580 [ 239.108256][ T8968] ? __pfx___x64_sys_futex+0x10/0x10 [ 239.108277][ T8968] ? rcu_is_watching+0x12/0xc0 [ 239.108297][ T8968] do_syscall_64+0x10b/0xf80 [ 239.108317][ T8968] ? clear_bhb_loop+0x40/0x90 [ 239.108335][ T8968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.108349][ T8968] RIP: 0033:0x7fb2b9f9cdd9 [ 239.108362][ T8968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.108376][ T8968] RSP: 002b:00007fb2baea90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 239.108390][ T8968] RAX: ffffffffffffffda RBX: 00007fb2ba215fa8 RCX: 00007fb2b9f9cdd9 [ 239.108400][ T8968] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb2ba215fac [ 239.108409][ T8968] RBP: 00007fb2ba215fa0 R08: 0000000000000001 R09: 0000000000000000 [ 239.108417][ T8968] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 239.108425][ T8968] R13: 00007fb2ba216038 R14: 00007fffa7ee0510 R15: 00007fffa7ee05f8 [ 239.108443][ T8968] [ 239.655759][ T8968] netlink: 28 bytes leftover after parsing attributes in process `syz.2.678'. [ 240.864977][ T8996] can: request_module (can-proto-3) failed. [ 240.964623][ T9003] Unable to find swap-space signature [ 241.113051][ T8990] netlink: 342 bytes leftover after parsing attributes in process `syz.2.684'. [ 241.140165][ T9003] FAULT_INJECTION: forcing a failure. [ 241.140165][ T9003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.255123][ T9003] CPU: 0 UID: 0 PID: 9003 Comm: syz.0.687 Tainted: G U L syzkaller #0 PREEMPT(full) [ 241.255151][ T9003] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 241.255157][ T9003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 241.255166][ T9003] Call Trace: [ 241.255172][ T9003] [ 241.255178][ T9003] dump_stack_lvl+0x100/0x190 [ 241.255200][ T9003] should_fail_ex.cold+0x5/0xa [ 241.255219][ T9003] _copy_from_user+0x2e/0xd0 [ 241.255236][ T9003] move_addr_to_kernel+0x65/0x170 [ 241.255259][ T9003] copy_msghdr_from_user+0x417/0x4f0 [ 241.255284][ T9003] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 241.255309][ T9003] ? futex_unqueue+0x133/0x2c0 [ 241.255328][ T9003] ___sys_sendmsg+0x106/0x1e0 [ 241.255350][ T9003] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.255370][ T9003] ? __pfx___futex_wait+0x10/0x10 [ 241.255396][ T9003] ? find_held_lock+0x2b/0x80 [ 241.255426][ T9003] __sys_sendmmsg+0x205/0x430 [ 241.255445][ T9003] ? __pfx___sys_sendmmsg+0x10/0x10 [ 241.255466][ T9003] ? __pfx_do_futex+0x10/0x10 [ 241.255490][ T9003] ? xfd_validate_state+0x129/0x190 [ 241.255504][ T9003] ? exit_to_user_mode_loop+0xe2/0x4f0 [ 241.255523][ T9003] __x64_sys_sendmmsg+0x9c/0x100 [ 241.255539][ T9003] ? lockdep_hardirqs_on+0x78/0x100 [ 241.255560][ T9003] do_syscall_64+0x10b/0xf80 [ 241.255580][ T9003] ? clear_bhb_loop+0x40/0x90 [ 241.255598][ T9003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.255613][ T9003] RIP: 0033:0x7f1adc19cdd9 [ 241.255626][ T9003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.255640][ T9003] RSP: 002b:00007f1add111028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 241.255654][ T9003] RAX: ffffffffffffffda RBX: 00007f1adc415fa0 RCX: 00007f1adc19cdd9 [ 241.255664][ T9003] RDX: 0000000002000004 RSI: 0000200000000140 RDI: 0000000000000005 [ 241.255673][ T9003] RBP: 00007f1adc232d69 R08: 0000000000000000 R09: 0000000000000000 [ 241.255682][ T9003] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000000 [ 241.255690][ T9003] R13: 00007f1adc416038 R14: 00007f1adc415fa0 R15: 00007ffd8770d608 [ 241.255709][ T9003] [ 243.299904][ T9047] netlink: 274 bytes leftover after parsing attributes in process `syz.3.696'. [ 243.663809][ T9052] FAULT_INJECTION: forcing a failure. [ 243.663809][ T9052] name failslab, interval 1, probability 0, space 0, times 0 [ 243.743366][ T9052] CPU: 0 UID: 0 PID: 9052 Comm: syz.2.697 Tainted: G U L syzkaller #0 PREEMPT(full) [ 243.743394][ T9052] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 243.743400][ T9052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 243.743409][ T9052] Call Trace: [ 243.743414][ T9052] [ 243.743420][ T9052] dump_stack_lvl+0x100/0x190 [ 243.743441][ T9052] should_fail_ex.cold+0x5/0xa [ 243.743462][ T9052] should_failslab+0xc2/0x120 [ 243.743480][ T9052] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 243.743506][ T9052] ? __proc_create+0x2cb/0x8c0 [ 243.743528][ T9052] __proc_create+0x2cb/0x8c0 [ 243.743547][ T9052] ? __pfx___proc_create+0x10/0x10 [ 243.743567][ T9052] ? _raw_write_unlock+0x28/0x50 [ 243.743587][ T9052] ? proc_register+0x559/0x8a0 [ 243.743608][ T9052] proc_create_reg+0x75/0x170 [ 243.743628][ T9052] ? __pfx_fib_triestat_seq_show+0x10/0x10 [ 243.743646][ T9052] proc_create_net_single+0x86/0x180 [ 243.743666][ T9052] ? __pfx_proc_create_net_single+0x10/0x10 [ 243.743686][ T9052] ? __pfx___netlink_kernel_create+0x10/0x10 [ 243.743711][ T9052] fib_proc_init+0xa9/0x1d0 [ 243.743729][ T9052] fib_net_init+0x2af/0x3f0 [ 243.743748][ T9052] ? is_module_address+0x69/0xf0 [ 243.743763][ T9052] ? __pfx_fib_net_init+0x10/0x10 [ 243.743782][ T9052] ? timer_init_key+0x155/0x330 [ 243.743802][ T9052] ? __pfx_nl_fib_input+0x10/0x10 [ 243.743830][ T9052] ? devinet_init_net+0x56c/0x8d0 [ 243.743855][ T9052] ? __pfx_fib_net_init+0x10/0x10 [ 243.743874][ T9052] ops_init+0x1e2/0x5f0 [ 243.743893][ T9052] setup_net+0x118/0x3a0 [ 243.743910][ T9052] ? __pfx_setup_net+0x10/0x10 [ 243.743927][ T9052] ? mutex_init_lockdep+0xf1/0x120 [ 243.743946][ T9052] copy_net_ns+0x46f/0x7c0 [ 243.743966][ T9052] create_new_namespaces+0x3ea/0xac0 [ 243.743989][ T9052] unshare_nsproxy_namespaces+0xf2/0x220 [ 243.744010][ T9052] ksys_unshare+0x438/0xab0 [ 243.744032][ T9052] ? __pfx_ksys_unshare+0x10/0x10 [ 243.744052][ T9052] ? xfd_validate_state+0x129/0x190 [ 243.744073][ T9052] __x64_sys_unshare+0x31/0x40 [ 243.744094][ T9052] do_syscall_64+0x10b/0xf80 [ 243.744114][ T9052] ? clear_bhb_loop+0x40/0x90 [ 243.744131][ T9052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.744146][ T9052] RIP: 0033:0x7fb2b9f9cdd9 [ 243.744159][ T9052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.744172][ T9052] RSP: 002b:00007fb2baea9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 243.744187][ T9052] RAX: ffffffffffffffda RBX: 00007fb2ba215fa0 RCX: 00007fb2b9f9cdd9 [ 243.744196][ T9052] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 243.744205][ T9052] RBP: 00007fb2ba032d69 R08: 0000000000000000 R09: 0000000000000000 [ 243.744214][ T9052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.744223][ T9052] R13: 00007fb2ba216038 R14: 00007fb2ba215fa0 R15: 00007fffa7ee05f8 [ 243.744242][ T9052] [ 244.640020][ T9061] zswap: compressor not available [ 246.081289][ T9097] futex_wake_op: syz.2.704 tries to shift op by -2048; fix this program [ 248.347901][ T9140] bond0: invalid ARP target specified [ 251.456671][ T9199] netlink: 342 bytes leftover after parsing attributes in process `syz.2.727'. [ 251.583805][ T9195] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.784375][ T9204] netlink: 8390 bytes leftover after parsing attributes in process `syz.3.729'. [ 252.774505][ T9222] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 253.991949][ T9237] vmstat_refresh: nr_hugetlb -512 [ 255.765532][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.776742][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.179581][ T9315] netlink: 28 bytes leftover after parsing attributes in process `syz.0.753'. [ 257.790907][ T29] audit: type=1800 audit(1778431808.665:5): pid=9320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.755" name="dbroot" dev="configfs" ino=27332 res=0 errno=0 [ 258.185448][ T9330] zswap: compressor not available [ 258.381024][ T9341] netlink: 342 bytes leftover after parsing attributes in process `syz.2.760'. [ 260.200622][ T9388] ovs_: entered promiscuous mode [ 260.252710][ T9388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.770'. [ 261.579356][ T9387] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 263.723065][ T9452] : entered promiscuous mode [ 265.174467][ T9482] openvswitch: netlink: Key 20 has unexpected len 12 expected 4 [ 265.298197][ T9488] netlink: 'syz.1.789': attribute type 11 has an invalid length. [ 266.243627][ T9511] zswap: compressor not available [ 266.851001][ T9534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.798'. [ 266.961604][ T9536] netlink: 342 bytes leftover after parsing attributes in process `syz.3.799'. [ 266.993155][ T9537] netlink: 342 bytes leftover after parsing attributes in process `syz.3.799'. [ 267.317071][ T9543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.802'. [ 267.389804][ T4944] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 267.516763][ T9553] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 273.905261][ T9685] netlink: 342 bytes leftover after parsing attributes in process `syz.1.829'. [ 274.066085][ T9689] device-mapper: ioctl: Unable to rename non-existent device, to uuid [ 274.109168][ T9683] Console: switching to colour frame buffer device 128x48 [ 277.401641][ T9736] FAULT_INJECTION: forcing a failure. [ 277.401641][ T9736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.639676][ T9736] CPU: 0 UID: 0 PID: 9736 Comm: syz.2.837 Tainted: G U L syzkaller #0 PREEMPT(full) [ 277.639703][ T9736] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 277.639709][ T9736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 277.639718][ T9736] Call Trace: [ 277.639723][ T9736] [ 277.639729][ T9736] dump_stack_lvl+0x100/0x190 [ 277.639751][ T9736] should_fail_ex.cold+0x5/0xa [ 277.639770][ T9736] copy_folio_from_iter_atomic+0x5c8/0x2000 [ 277.639796][ T9736] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 277.639812][ T9736] ? shmem_write_begin+0x1ba/0x420 [ 277.639828][ T9736] ? __pfx_shmem_write_begin+0x10/0x10 [ 277.639844][ T9736] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 277.639866][ T9736] generic_perform_write+0x4cb/0xa40 [ 277.639893][ T9736] ? __pfx_generic_perform_write+0x10/0x10 [ 277.639913][ T9736] ? __mark_inode_dirty+0x55c/0x1720 [ 277.639929][ T9736] ? mnt_put_write_access_file+0x4e/0x100 [ 277.639947][ T9736] ? file_update_time_flags+0x373/0x500 [ 277.639971][ T9736] shmem_file_write_iter+0x10e/0x140 [ 277.639994][ T9736] vfs_write+0x6ac/0x1070 [ 277.640011][ T9736] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 277.640030][ T9736] ? __pfx_vfs_write+0x10/0x10 [ 277.640058][ T9736] ksys_write+0x12a/0x250 [ 277.640075][ T9736] ? __pfx_ksys_write+0x10/0x10 [ 277.640090][ T9736] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 277.640112][ T9736] ? syscall_user_dispatch+0x76/0x130 [ 277.640132][ T9736] do_syscall_64+0x10b/0xf80 [ 277.640152][ T9736] ? clear_bhb_loop+0x40/0x90 [ 277.640170][ T9736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.640184][ T9736] RIP: 0033:0x7fb2b9f9cdd9 [ 277.640197][ T9736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.640210][ T9736] RSP: 002b:00007fb2bae67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 277.640224][ T9736] RAX: ffffffffffffffda RBX: 00007fb2ba216180 RCX: 00007fb2b9f9cdd9 [ 277.640234][ T9736] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 277.640242][ T9736] RBP: 00007fb2ba032d69 R08: 0000000000000000 R09: 0000000000000000 [ 277.640251][ T9736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.640259][ T9736] R13: 00007fb2ba216218 R14: 00007fb2ba216180 R15: 00007fffa7ee05f8 [ 277.640278][ T9736] [ 279.447228][ T9770] netlink: 342 bytes leftover after parsing attributes in process `syz.1.843'. [ 280.871910][ T9809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.848'. [ 280.928786][ T9810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.848'. [ 281.409372][ T9829] futex_wake_op: syz.3.855 tries to shift op by -2048; fix this program [ 281.510105][ T9831] 0x000000000001-0x000000020000 : "" [ 281.613576][ T9831] ftl_cs: FTL header corrupt! [ 284.044319][ T9880] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 284.088185][ T9880] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 284.117352][ T9880] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 284.140197][ T9880] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 284.607606][ T9888] FAULT_INJECTION: forcing a failure. [ 284.607606][ T9888] name failslab, interval 1, probability 0, space 0, times 0 [ 284.869660][ T9888] CPU: 0 UID: 0 PID: 9888 Comm: syz.1.863 Tainted: G U L syzkaller #0 PREEMPT(full) [ 284.869687][ T9888] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 284.869693][ T9888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 284.869702][ T9888] Call Trace: [ 284.869708][ T9888] [ 284.869714][ T9888] dump_stack_lvl+0x100/0x190 [ 284.869736][ T9888] should_fail_ex.cold+0x5/0xa [ 284.869757][ T9888] should_failslab+0xc2/0x120 [ 284.869774][ T9888] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 284.869791][ T9888] ? key_alloc+0x423/0x1310 [ 284.869807][ T9888] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 284.869833][ T9888] kmemdup_noprof+0x29/0x60 [ 284.869849][ T9888] key_alloc+0x423/0x1310 [ 284.869873][ T9888] ? __pfx_key_alloc+0x10/0x10 [ 284.869888][ T9888] ? __pfx_key_default_cmp+0x10/0x10 [ 284.869907][ T9888] ? __pfx_keyring_search_iterator+0x10/0x10 [ 284.869928][ T9888] keyring_alloc+0x44/0xc0 [ 284.869948][ T9888] look_up_user_keyrings+0x465/0x790 [ 284.869967][ T9888] ? __pfx_look_up_user_keyrings+0x10/0x10 [ 284.869996][ T9888] lookup_user_key+0xbb1/0x1300 [ 284.870014][ T9888] ? __pfx_lookup_user_key+0x10/0x10 [ 284.870031][ T9888] ? __pfx_do_futex+0x10/0x10 [ 284.870051][ T9888] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 284.870071][ T9888] ? xfd_validate_state+0x129/0x190 [ 284.870086][ T9888] ? ksys_write+0x1ac/0x250 [ 284.870105][ T9888] keyctl_keyring_unlink+0x1f/0x1b0 [ 284.870127][ T9888] __do_sys_keyctl+0x3dd/0x5a0 [ 284.870142][ T9888] do_syscall_64+0x10b/0xf80 [ 284.870162][ T9888] ? clear_bhb_loop+0x40/0x90 [ 284.870183][ T9888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.870199][ T9888] RIP: 0033:0x7fea2459cdd9 [ 284.870212][ T9888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.870225][ T9888] RSP: 002b:00007fea25423028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 284.870240][ T9888] RAX: ffffffffffffffda RBX: 00007fea24816270 RCX: 00007fea2459cdd9 [ 284.870250][ T9888] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000009 [ 284.870259][ T9888] RBP: 00007fea24632d69 R08: 0000000000000008 R09: 0000000000000000 [ 284.870268][ T9888] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 284.870277][ T9888] R13: 00007fea24816308 R14: 00007fea24816270 R15: 00007fff65969738 [ 284.870296][ T9888] [ 285.727319][ T4944] Bluetooth: hci2: command 0x0c1a tx timeout [ 286.099238][ T4944] Bluetooth: hci0: command 0x0c1a tx timeout [ 286.177882][ T4944] Bluetooth: hci1: command 0x0c1a tx timeout [ 286.183918][ T4944] Bluetooth: hci3: command 0x0c1a tx timeout [ 286.322525][ T9910] i2c i2c-0: new_device: Missing parameters [ 288.105800][ T9974] sd 0:0:1:0: PR command failed: 1026 [ 288.133223][ T9974] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 288.162715][ T9974] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 290.470084][T10054] netlink: 342 bytes leftover after parsing attributes in process `syz.3.896'. [ 291.723597][T10093] NFSD: Failed to start, no listeners configured. [ 292.588839][T10117] netlink: 342 bytes leftover after parsing attributes in process `syz.3.912'. [ 292.682677][T10117] FAULT_INJECTION: forcing a failure. [ 292.682677][T10117] name failslab, interval 1, probability 0, space 0, times 0 [ 292.789524][T10117] CPU: 0 UID: 0 PID: 10117 Comm: syz.3.912 Tainted: G U L syzkaller #0 PREEMPT(full) [ 292.789550][T10117] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 292.789556][T10117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 292.789564][T10117] Call Trace: [ 292.789569][T10117] [ 292.789575][T10117] dump_stack_lvl+0x100/0x190 [ 292.789596][T10117] should_fail_ex.cold+0x5/0xa [ 292.789615][T10117] should_failslab+0xc2/0x120 [ 292.789632][T10117] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 292.789655][T10117] ? __d_alloc+0x34/0xa40 [ 292.789678][T10117] __d_alloc+0x34/0xa40 [ 292.789699][T10117] d_alloc+0x4a/0x1e0 [ 292.789718][T10117] lookup_one_qstr_excl+0x171/0x250 [ 292.789745][T10117] start_dirop+0x59/0xb0 [ 292.789762][T10117] simple_start_creating+0xf9/0x110 [ 292.789780][T10117] ? __pfx_simple_start_creating+0x10/0x10 [ 292.789798][T10117] ? mntput+0x70/0xa0 [ 292.789813][T10117] ? simple_pin_fs+0xa3/0x190 [ 292.789829][T10117] debugfs_start_creating.part.0+0x82/0x170 [ 292.789852][T10117] __debugfs_create_file+0xb3/0x4f0 [ 292.789877][T10117] debugfs_create_file_full+0x41/0x60 [ 292.789900][T10117] kvm_dev_ioctl+0x1492/0x1a50 [ 292.789928][T10117] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 292.789954][T10117] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 292.789975][T10117] __x64_sys_ioctl+0x18e/0x210 [ 292.789995][T10117] do_syscall_64+0x10b/0xf80 [ 292.790016][T10117] ? clear_bhb_loop+0x40/0x90 [ 292.790034][T10117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.790048][T10117] RIP: 0033:0x7f8b7eb9cdd9 [ 292.790061][T10117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.790074][T10117] RSP: 002b:00007f8b7f974028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 292.790089][T10117] RAX: ffffffffffffffda RBX: 00007f8b7ee15fa0 RCX: 00007f8b7eb9cdd9 [ 292.790098][T10117] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 292.790106][T10117] RBP: 00007f8b7ec32d69 R08: 0000000000000000 R09: 0000000000000000 [ 292.790114][T10117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.790122][T10117] R13: 00007f8b7ee16038 R14: 00007f8b7ee15fa0 R15: 00007ffce53f5648 [ 292.790141][T10117] [ 294.719295][ T4944] Bluetooth: hci3: unexpected event 0x08 length: 6 > 4 [ 296.864571][T10204] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 296.938154][T10204] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 296.967186][T10204] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 296.995190][T10204] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 298.903939][ T4944] Bluetooth: hci2: command 0x0c1a tx timeout [ 298.985420][ T4944] Bluetooth: hci3: command 0x0c1a tx timeout [ 298.991479][ T5634] Bluetooth: hci0: command 0x0c1a tx timeout [ 299.063994][ T4944] Bluetooth: hci1: command 0x0c1a tx timeout [ 302.173943][T10349] syz.0.957 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 303.779070][T10399] ecryptfs_miscdev_response: (sizeof(*msg) + msg->data_len) = [1067213646]; data_size = [146]. Invalid packet. [ 303.854403][T10399] ecryptfs_miscdev_write: Failed to deliver miscdev response to requesting operation; rc = [-22] [ 305.355812][T10424] usbcore.quirks: string doesn't fit in 127 chars. [ 305.392789][T10427] usbcore.quirks: string doesn't fit in 127 chars. [ 306.788557][T10472] netlink: 29 bytes leftover after parsing attributes in process `syz.3.979'. [ 307.532065][T10504] MTRR 1 not used [ 307.596869][T10500] netlink: 'syz.3.983': attribute type 1 has an invalid length. [ 308.543881][T10527] FAULT_INJECTION: forcing a failure. [ 308.543881][T10527] name failslab, interval 1, probability 0, space 0, times 0 [ 308.543934][T10527] CPU: 0 UID: 0 PID: 10527 Comm: syz.0.989 Tainted: G U L syzkaller #0 PREEMPT(full) [ 308.543958][T10527] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 308.543963][T10527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 308.543975][T10527] Call Trace: [ 308.543980][T10527] [ 308.543986][T10527] dump_stack_lvl+0x100/0x190 [ 308.544007][T10527] should_fail_ex.cold+0x5/0xa [ 308.544028][T10527] should_failslab+0xc2/0x120 [ 308.544046][T10527] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 308.544062][T10527] ? kvasprintf_const+0x66/0x1a0 [ 308.544082][T10527] kvasprintf+0xbc/0x150 [ 308.544097][T10527] ? __pfx_kvasprintf+0x10/0x10 [ 308.544113][T10527] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 308.544135][T10527] ? lockdep_init_map_type+0x5c/0x250 [ 308.544154][T10527] kvasprintf_const+0x66/0x1a0 [ 308.544171][T10527] kobject_set_name_vargs+0x5a/0x140 [ 308.544188][T10527] device_create_groups_vargs+0x1b1/0x270 [ 308.544212][T10527] device_create+0xed/0x130 [ 308.544232][T10527] ? __pfx_device_create+0x10/0x10 [ 308.544250][T10527] ? do_raw_spin_lock+0x128/0x260 [ 308.544268][T10527] ? is_console_locked+0x9/0x20 [ 308.544288][T10527] ? con_is_visible+0x65/0x150 [ 308.544306][T10527] ? csi_J+0x57e/0xad0 [ 308.544329][T10527] vcs_make_sysfs+0x32/0x80 [ 308.544347][T10527] vc_allocate+0x539/0x880 [ 308.544368][T10527] ? __pfx_vc_allocate+0x10/0x10 [ 308.544394][T10527] con_install+0xa1/0x620 [ 308.544416][T10527] ? __pfx_con_install+0x10/0x10 [ 308.544440][T10527] ? __pfx_con_install+0x10/0x10 [ 308.544461][T10527] tty_init_dev.part.0+0x9e/0x470 [ 308.544477][T10527] tty_open+0xa63/0xfa0 [ 308.544494][T10527] ? __pfx_tty_open+0x10/0x10 [ 308.544506][T10527] ? chrdev_open+0x10b/0x6a0 [ 308.544523][T10527] ? chrdev_open+0x10b/0x6a0 [ 308.544543][T10527] ? __pfx_tty_open+0x10/0x10 [ 308.544556][T10527] chrdev_open+0x234/0x6a0 [ 308.544573][T10527] ? __pfx_apparmor_file_open+0x10/0x10 [ 308.544596][T10527] ? __pfx_chrdev_open+0x10/0x10 [ 308.544616][T10527] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 308.544639][T10527] do_dentry_open+0x6d8/0x1660 [ 308.544656][T10527] ? __pfx_chrdev_open+0x10/0x10 [ 308.544679][T10527] vfs_open+0x82/0x3f0 [ 308.544702][T10527] path_openat+0x208c/0x31a0 [ 308.544727][T10527] ? __pfx_path_openat+0x10/0x10 [ 308.544758][T10527] do_file_open+0x20e/0x430 [ 308.544779][T10527] ? __pfx_do_file_open+0x10/0x10 [ 308.544812][T10527] ? alloc_fd+0x476/0x790 [ 308.544833][T10527] ? do_getname+0x191/0x390 [ 308.544856][T10527] do_sys_openat2+0x10d/0x1e0 [ 308.544878][T10527] ? __pfx_do_sys_openat2+0x10/0x10 [ 308.544901][T10527] ? __x64_sys_close_range+0x2d9/0x5d0 [ 308.544924][T10527] __x64_sys_openat+0x12d/0x210 [ 308.544947][T10527] ? __pfx___x64_sys_openat+0x10/0x10 [ 308.544972][T10527] ? rcu_is_watching+0x12/0xc0 [ 308.544992][T10527] do_syscall_64+0x10b/0xf80 [ 308.545013][T10527] ? clear_bhb_loop+0x40/0x90 [ 308.545030][T10527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.545045][T10527] RIP: 0033:0x7f1adc19cdd9 [ 308.545058][T10527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.545072][T10527] RSP: 002b:00007f1add0f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 308.545090][T10527] RAX: ffffffffffffffda RBX: 00007f1adc416090 RCX: 00007f1adc19cdd9 [ 308.545100][T10527] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 308.545109][T10527] RBP: 00007f1adc232d69 R08: 0000000000000000 R09: 0000000000000000 [ 308.545118][T10527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.545127][T10527] R13: 00007f1adc416128 R14: 00007f1adc416090 R15: 00007ffd8770d608 [ 308.545147][T10527] [ 308.770007][T10531] netlink: 62 bytes leftover after parsing attributes in process `syz.2.991'. [ 310.799369][T10554] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 311.635189][T10589] FAULT_INJECTION: forcing a failure. [ 311.635189][T10589] name failslab, interval 1, probability 0, space 0, times 0 [ 311.754714][T10589] CPU: 0 UID: 0 PID: 10589 Comm: syz.2.1002 Tainted: G U L syzkaller #0 PREEMPT(full) [ 311.754742][T10589] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 311.754747][T10589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 311.754756][T10589] Call Trace: [ 311.754762][T10589] [ 311.754768][T10589] dump_stack_lvl+0x100/0x190 [ 311.754790][T10589] should_fail_ex.cold+0x5/0xa [ 311.754810][T10589] should_failslab+0xc2/0x120 [ 311.754828][T10589] __kmalloc_cache_noprof+0x7a/0x6f0 [ 311.754849][T10589] ? snd_seq_oss_readq_new+0x4a/0x290 [ 311.754869][T10589] snd_seq_oss_readq_new+0x4a/0x290 [ 311.754886][T10589] snd_seq_oss_open+0x476/0xa10 [ 311.754913][T10589] odev_open+0x6f/0x90 [ 311.754930][T10589] ? __pfx_odev_open+0x10/0x10 [ 311.754948][T10589] soundcore_open+0x2e3/0x5a0 [ 311.754969][T10589] ? __pfx_soundcore_open+0x10/0x10 [ 311.754988][T10589] chrdev_open+0x234/0x6a0 [ 311.755006][T10589] ? __pfx_apparmor_file_open+0x10/0x10 [ 311.755029][T10589] ? __pfx_chrdev_open+0x10/0x10 [ 311.755048][T10589] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 311.755072][T10589] do_dentry_open+0x6d8/0x1660 [ 311.755090][T10589] ? __pfx_chrdev_open+0x10/0x10 [ 311.755112][T10589] vfs_open+0x82/0x3f0 [ 311.755136][T10589] path_openat+0x208c/0x31a0 [ 311.755160][T10589] ? __pfx_path_openat+0x10/0x10 [ 311.755185][T10589] do_file_open+0x20e/0x430 [ 311.755204][T10589] ? __pfx_do_file_open+0x10/0x10 [ 311.755235][T10589] ? alloc_fd+0x476/0x790 [ 311.755254][T10589] ? do_getname+0x191/0x390 [ 311.755277][T10589] do_sys_openat2+0x10d/0x1e0 [ 311.755299][T10589] ? __pfx_do_sys_openat2+0x10/0x10 [ 311.755327][T10589] __x64_sys_openat+0x12d/0x210 [ 311.755349][T10589] ? __pfx___x64_sys_openat+0x10/0x10 [ 311.755374][T10589] ? rcu_is_watching+0x12/0xc0 [ 311.755395][T10589] do_syscall_64+0x10b/0xf80 [ 311.755415][T10589] ? clear_bhb_loop+0x40/0x90 [ 311.755439][T10589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.755455][T10589] RIP: 0033:0x7fb2b9f9cdd9 [ 311.755469][T10589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.755484][T10589] RSP: 002b:00007fb2baea9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 311.755498][T10589] RAX: ffffffffffffffda RBX: 00007fb2ba215fa0 RCX: 00007fb2b9f9cdd9 [ 311.755508][T10589] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 311.755517][T10589] RBP: 00007fb2ba032d69 R08: 0000000000000000 R09: 0000000000000000 [ 311.755525][T10589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.755534][T10589] R13: 00007fb2ba216038 R14: 00007fb2ba215fa0 R15: 00007fffa7ee05f8 [ 311.755554][T10589] [ 313.281240][ T4944] Bluetooth: hci2: unexpected event 0x10 length: 124 > 1 [ 313.282584][ T4944] Bluetooth: hci2: hardware error 0x00 [ 314.065955][T10666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1018'. [ 314.107632][T10665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1018'. [ 315.307029][ T4944] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 316.095989][T10705] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1025'. [ 316.359968][T10732] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? syzkaller syzkaller login: [ 316.596983][T10737] ecryptfs_miscdev_write: Error while inspecting packet size [ 317.231505][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.239836][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.604513][T10767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1040'. [ 317.708616][ T4944] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 318.604359][T10769] random: crng reseeded on system resumption [ 319.787922][ T5634] Bluetooth: hci3: command 0x0c1a tx timeout [ 320.588311][T10843] FAULT_INJECTION: forcing a failure. [ 320.588311][T10843] name failslab, interval 1, probability 0, space 0, times 0 [ 320.741994][T10843] CPU: 0 UID: 0 PID: 10843 Comm: syz.2.1054 Tainted: G U L syzkaller #0 PREEMPT(full) [ 320.742023][T10843] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 320.742029][T10843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 320.742038][T10843] Call Trace: [ 320.742044][T10843] [ 320.742050][T10843] dump_stack_lvl+0x100/0x190 [ 320.742072][T10843] should_fail_ex.cold+0x5/0xa [ 320.742091][T10843] ? __register_sysctl_table+0xbe4/0x1650 [ 320.742110][T10843] should_failslab+0xc2/0x120 [ 320.742127][T10843] __kmalloc_noprof+0xe0/0x850 [ 320.742146][T10843] __register_sysctl_table+0xbe4/0x1650 [ 320.742170][T10843] ? __pfx___register_sysctl_table+0x10/0x10 [ 320.742188][T10843] ? is_module_address+0x69/0xf0 [ 320.742203][T10843] ? register_net_sysctl_sz+0x222/0x430 [ 320.742225][T10843] ? __asan_memset+0x30/0x50 [ 320.742246][T10843] ? kmemdup_noprof+0x49/0x60 [ 320.742263][T10843] ipv6_sysctl_net_init+0x136/0x2b0 [ 320.742286][T10843] ? __pfx_ipv6_sysctl_net_init+0x10/0x10 [ 320.742306][T10843] ops_init+0x1e2/0x5f0 [ 320.742326][T10843] setup_net+0x118/0x3a0 [ 320.742343][T10843] ? __pfx_setup_net+0x10/0x10 [ 320.742360][T10843] ? mutex_init_lockdep+0xf1/0x120 [ 320.742379][T10843] copy_net_ns+0x46f/0x7c0 [ 320.742400][T10843] create_new_namespaces+0x3ea/0xac0 [ 320.742423][T10843] unshare_nsproxy_namespaces+0xf2/0x220 [ 320.742444][T10843] ksys_unshare+0x438/0xab0 [ 320.742467][T10843] ? __pfx_ksys_unshare+0x10/0x10 [ 320.742487][T10843] ? xfd_validate_state+0x129/0x190 [ 320.742502][T10843] ? exit_to_user_mode_loop+0xe2/0x4f0 [ 320.742523][T10843] __x64_sys_unshare+0x31/0x40 [ 320.742543][T10843] do_syscall_64+0x10b/0xf80 [ 320.742563][T10843] ? clear_bhb_loop+0x40/0x90 [ 320.742588][T10843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.742604][T10843] RIP: 0033:0x7fb2b9f9cdd9 [ 320.742618][T10843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.742633][T10843] RSP: 002b:00007fb2baea9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 320.742648][T10843] RAX: ffffffffffffffda RBX: 00007fb2ba215fa0 RCX: 00007fb2b9f9cdd9 [ 320.742658][T10843] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 320.742667][T10843] RBP: 00007fb2ba032d69 R08: 0000000000000000 R09: 0000000000000000 [ 320.742676][T10843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.742684][T10843] R13: 00007fb2ba216038 R14: 00007fb2ba215fa0 R15: 00007fffa7ee05f8 [ 320.742705][T10843] [ 320.742712][T10843] sysctl could not get directory: /net/ipv6/route -12 [ 321.369985][T10865] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 321.867224][ T4944] Bluetooth: hci3: command 0x0c1a tx timeout [ 322.048483][T10869] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1061'. [ 322.613691][T10873] nvme_fcloop: unknown parameter or missing value '7=";&L=j"Yq'R"' [ 323.717608][T10895] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1067'. [ 323.947554][T10890] [U] ^R [ 323.982302][T10890] FAULT_INJECTION: forcing a failure. [ 323.982302][T10890] name fail_futex, interval 1, probability 0, space 0, times 0 [ 324.092702][T10904] FAULT_INJECTION: forcing a failure. [ 324.092702][T10904] name failslab, interval 1, probability 0, space 0, times 0 [ 324.114467][T10890] CPU: 0 UID: 0 PID: 10890 Comm: syz.1.1064 Tainted: G U L syzkaller #0 PREEMPT(full) [ 324.114496][T10890] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 324.114502][T10890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 324.114511][T10890] Call Trace: [ 324.114517][T10890] [ 324.114523][T10890] dump_stack_lvl+0x100/0x190 [ 324.114544][T10890] should_fail_ex.cold+0x5/0xa [ 324.114571][T10890] get_futex_key+0x1d2/0x1510 [ 324.114589][T10890] ? __pfx_get_futex_key+0x10/0x10 [ 324.114605][T10890] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 324.114632][T10890] futex_wake+0xea/0x530 [ 324.114651][T10890] ? tty_ioctl+0x93d/0x1640 [ 324.114672][T10890] ? __pfx_futex_wake+0x10/0x10 [ 324.114693][T10890] ? ldsem_up_read+0x4e/0x90 [ 324.114708][T10890] ? tty_ioctl+0x345/0x1640 [ 324.114731][T10890] do_futex+0x32b/0x350 [ 324.114747][T10890] ? __pfx_do_futex+0x10/0x10 [ 324.114764][T10890] ? find_held_lock+0x2b/0x80 [ 324.114785][T10890] __x64_sys_futex+0x34f/0x4d0 [ 324.114803][T10890] ? __pfx___x64_sys_futex+0x10/0x10 [ 324.114821][T10890] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 324.114843][T10890] ? syscall_user_dispatch+0x76/0x130 [ 324.114862][T10890] do_syscall_64+0x10b/0xf80 [ 324.114882][T10890] ? clear_bhb_loop+0x40/0x90 [ 324.114899][T10890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.114914][T10890] RIP: 0033:0x7fea2459cdd9 [ 324.114927][T10890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.114941][T10890] RSP: 002b:00007fea254440e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 324.114955][T10890] RAX: ffffffffffffffda RBX: 00007fea24816188 RCX: 00007fea2459cdd9 [ 324.114965][T10890] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fea2481618c [ 324.114974][T10890] RBP: 00007fea24816180 R08: 0000000000000001 R09: 0000000000000000 [ 324.114983][T10890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.114991][T10890] R13: 00007fea24816218 R14: 00007fff65969650 R15: 00007fff65969738 [ 324.115009][T10890] [ 324.451976][T10904] CPU: 0 UID: 0 PID: 10904 Comm: syz.3.1068 Tainted: G U L syzkaller #0 PREEMPT(full) [ 324.452006][T10904] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 324.452011][T10904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 324.452020][T10904] Call Trace: [ 324.452026][T10904] [ 324.452032][T10904] dump_stack_lvl+0x100/0x190 [ 324.452055][T10904] should_fail_ex.cold+0x5/0xa [ 324.452075][T10904] ? tomoyo_encode2+0xfb/0x3c0 [ 324.452093][T10904] should_failslab+0xc2/0x120 [ 324.452111][T10904] __kmalloc_noprof+0xe0/0x850 [ 324.452125][T10904] ? d_absolute_path+0x136/0x1b0 [ 324.452143][T10904] tomoyo_encode2+0xfb/0x3c0 [ 324.452164][T10904] tomoyo_encode+0x29/0x50 [ 324.452185][T10904] tomoyo_realpath_from_path+0x18c/0x690 [ 324.452209][T10904] tomoyo_path_number_perm+0x23c/0x580 [ 324.452224][T10904] ? tomoyo_path_number_perm+0x22e/0x580 [ 324.452242][T10904] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 324.452272][T10904] ? do_raw_spin_lock+0x128/0x260 [ 324.452300][T10904] ? find_held_lock+0x2b/0x80 [ 324.452319][T10904] ? current_check_access_path+0x269/0x430 [ 324.452339][T10904] ? __pfx_current_check_access_path+0x10/0x10 [ 324.452357][T10904] ? do_raw_spin_unlock+0x145/0x1e0 [ 324.452377][T10904] ? simple_lookup+0x105/0x1d0 [ 324.452397][T10904] tomoyo_path_mknod+0x164/0x190 [ 324.452419][T10904] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 324.452441][T10904] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 324.452465][T10904] security_path_mknod+0x161/0x300 [ 324.452485][T10904] filename_mknodat+0x241/0x7f0 [ 324.452508][T10904] ? __pfx_filename_mknodat+0x10/0x10 [ 324.452527][T10904] ? strncpy_from_user+0x19d/0x2d0 [ 324.452545][T10904] ? do_getname+0x191/0x390 [ 324.452567][T10904] __x64_sys_mknod+0x8f/0xc0 [ 324.452587][T10904] do_syscall_64+0x10b/0xf80 [ 324.452607][T10904] ? clear_bhb_loop+0x40/0x90 [ 324.452625][T10904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.452640][T10904] RIP: 0033:0x7f8b7eb9cdd9 [ 324.452653][T10904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.452667][T10904] RSP: 002b:00007f8b7f974028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 324.452682][T10904] RAX: ffffffffffffffda RBX: 00007f8b7ee15fa0 RCX: 00007f8b7eb9cdd9 [ 324.452692][T10904] RDX: 0000000000000044 RSI: 0000000000001001 RDI: 0000200000000040 [ 324.452701][T10904] RBP: 00007f8b7ec32d69 R08: 0000000000000000 R09: 0000000000000000 [ 324.452711][T10904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.452720][T10904] R13: 00007f8b7ee16038 R14: 00007f8b7ee15fa0 R15: 00007ffce53f5648 [ 324.452740][T10904] [ 324.452779][T10904] ERROR: Out of memory at tomoyo_realpath_from_path. [ 327.472904][T10977] netlink: 'syz.3.1083': attribute type 11 has an invalid length. [ 329.140220][T11004] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 329.499051][T11011] FAULT_INJECTION: forcing a failure. [ 329.499051][T11011] name failslab, interval 1, probability 0, space 0, times 0 [ 329.529855][T11004] CIFS mount error: No usable UNC path provided in device string! [ 329.529855][T11004] [ 329.641646][T11011] CPU: 0 UID: 0 PID: 11011 Comm: syz.2.1090 Tainted: G U L syzkaller #0 PREEMPT(full) [ 329.641674][T11011] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 329.641679][T11011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 329.641688][T11011] Call Trace: [ 329.641693][T11011] [ 329.641698][T11011] dump_stack_lvl+0x100/0x190 [ 329.641719][T11011] should_fail_ex.cold+0x5/0xa [ 329.641739][T11011] should_failslab+0xc2/0x120 [ 329.641756][T11011] __kmalloc_cache_noprof+0x7a/0x6f0 [ 329.641777][T11011] ? alloc_pipe_info+0x10e/0x590 [ 329.641795][T11011] ? find_held_lock+0x2b/0x80 [ 329.641817][T11011] alloc_pipe_info+0x10e/0x590 [ 329.641836][T11011] splice_direct_to_actor+0x78f/0xa30 [ 329.641862][T11011] ? __lock_acquire+0x4a5/0x2630 [ 329.641875][T11011] ? __pfx_direct_splice_actor+0x10/0x10 [ 329.641894][T11011] ? __pfx_aa_file_perm+0x10/0x10 [ 329.641914][T11011] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 329.641937][T11011] do_splice_direct+0x174/0x240 [ 329.641956][T11011] ? __pfx_do_splice_direct+0x10/0x10 [ 329.641974][T11011] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 329.641995][T11011] ? rw_verify_area+0xce/0x6d0 [ 329.642011][T11011] do_sendfile+0xadc/0xe20 [ 329.642030][T11011] ? __pfx_do_sendfile+0x10/0x10 [ 329.642046][T11011] ? __fget_files+0x21f/0x3d0 [ 329.642067][T11011] __x64_sys_sendfile64+0x1d8/0x220 [ 329.642086][T11011] ? ksys_write+0x1ac/0x250 [ 329.642102][T11011] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 329.642123][T11011] ? rcu_is_watching+0x12/0xc0 [ 329.642143][T11011] do_syscall_64+0x10b/0xf80 [ 329.642164][T11011] ? clear_bhb_loop+0x40/0x90 [ 329.642181][T11011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.642196][T11011] RIP: 0033:0x7fb2b9f9cdd9 [ 329.642209][T11011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.642223][T11011] RSP: 002b:00007fb2bae88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 329.642238][T11011] RAX: ffffffffffffffda RBX: 00007fb2ba216090 RCX: 00007fb2b9f9cdd9 [ 329.642248][T11011] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 329.642256][T11011] RBP: 00007fb2bae88090 R08: 0000000000000000 R09: 0000000000000000 [ 329.642265][T11011] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 329.642273][T11011] R13: 00007fb2ba216128 R14: 00007fb2ba216090 R15: 00007fffa7ee05f8 [ 329.642291][T11011] [ 330.166587][T11004] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 330.827694][T11009] zswap: compressor not available [ 331.060416][T11016] zswap: compressor not available [ 331.419552][T11025] ecryptfs_miscdev_write: Invalid packet size [0] [ 332.069420][T11045] FAULT_INJECTION: forcing a failure. [ 332.069420][T11045] name failslab, interval 1, probability 0, space 0, times 0 [ 332.142846][T11045] CPU: 0 UID: 0 PID: 11045 Comm: syz.1.1099 Tainted: G U L syzkaller #0 PREEMPT(full) [ 332.142875][T11045] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 332.142881][T11045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 332.142890][T11045] Call Trace: [ 332.142896][T11045] [ 332.142902][T11045] dump_stack_lvl+0x100/0x190 [ 332.142924][T11045] should_fail_ex.cold+0x5/0xa [ 332.142944][T11045] should_failslab+0xc2/0x120 [ 332.142962][T11045] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 332.142986][T11045] ? __proc_create+0x2cb/0x8c0 [ 332.143008][T11045] __proc_create+0x2cb/0x8c0 [ 332.143027][T11045] ? __pfx___proc_create+0x10/0x10 [ 332.143052][T11045] proc_create_reg+0x75/0x170 [ 332.143074][T11045] proc_create_net_data+0x8e/0x1c0 [ 332.143094][T11045] ? __pfx_proc_create_net_data+0x10/0x10 [ 332.143113][T11045] ? net_generic+0xea/0x2a0 [ 332.143132][T11045] ? __pfx_pfkey_net_init+0x10/0x10 [ 332.143146][T11045] pfkey_net_init+0xc4/0x100 [ 332.143162][T11045] ops_init+0x1e2/0x5f0 [ 332.143180][T11045] setup_net+0x118/0x3a0 [ 332.143198][T11045] ? __pfx_setup_net+0x10/0x10 [ 332.143215][T11045] ? mutex_init_lockdep+0xf1/0x120 [ 332.143235][T11045] copy_net_ns+0x46f/0x7c0 [ 332.143255][T11045] create_new_namespaces+0x3ea/0xac0 [ 332.143278][T11045] unshare_nsproxy_namespaces+0xf2/0x220 [ 332.143299][T11045] ksys_unshare+0x438/0xab0 [ 332.143322][T11045] ? __pfx_ksys_unshare+0x10/0x10 [ 332.143342][T11045] ? xfd_validate_state+0x129/0x190 [ 332.143357][T11045] ? exit_to_user_mode_loop+0xe2/0x4f0 [ 332.143377][T11045] __x64_sys_unshare+0x31/0x40 [ 332.143398][T11045] do_syscall_64+0x10b/0xf80 [ 332.143422][T11045] ? clear_bhb_loop+0x40/0x90 [ 332.143441][T11045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.143456][T11045] RIP: 0033:0x7fea2459cdd9 [ 332.143470][T11045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.143484][T11045] RSP: 002b:00007fea25486028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 332.143499][T11045] RAX: ffffffffffffffda RBX: 00007fea24815fa0 RCX: 00007fea2459cdd9 [ 332.143509][T11045] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 332.143527][T11045] RBP: 00007fea24632d69 R08: 0000000000000000 R09: 0000000000000000 [ 332.143536][T11045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.143544][T11045] R13: 00007fea24816038 R14: 00007fea24815fa0 R15: 00007fff65969738 [ 332.143564][T11045] [ 334.106706][ T5634] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 335.451751][ T5634] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 335.468001][T11087] vivid-008: ================= START STATUS ================= [ 335.583357][T11087] vivid-008: ================== END STATUS ================== [ 335.902825][T11097] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1109'. [ 337.194020][T11081] random: crng reseeded on system resumption [ 337.469124][ T4944] Bluetooth: hci1: command 0x0c1a tx timeout [ 338.491750][T11143] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1117'. [ 339.549796][ T5634] Bluetooth: hci1: command 0x0c1a tx timeout [ 340.002416][T11175] vivid-007: ================= START STATUS ================= [ 340.084471][T11175] vivid-007: Generate PTS: true [ 340.139336][T11175] vivid-007: Generate SCR: true [ 340.227730][T11175] tpg source WxH: 320x240 (Y'CbCr) [ 340.293754][T11175] tpg field: 1 [ 340.333445][T11175] tpg crop: (0,0)/320x240 [ 340.382031][T11175] tpg compose: (0,0)/320x240 [ 340.420511][T11175] tpg colorspace: 8 [ 340.467681][T11175] tpg transfer function: 0/0 [ 340.524456][T11175] tpg Y'CbCr encoding: 0/0 [ 340.559967][T11175] tpg quantization: 0/0 [ 340.583210][T11175] tpg RGB range: 0/2 [ 340.610017][T11175] vivid-007: ================== END STATUS ================== [ 341.475496][ T4944] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 344.362952][T11241] openvswitch: ovs_: Dropping previously announced user features [ 347.150121][T11293] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1148'. [ 347.756804][T11299] __vm_enough_memory: pid: 11299, comm: syz.3.1147, bytes: 4398046511104 not enough memory for the allocation [ 348.232097][T11314] capability: warning: `syz.2.1152' uses 32-bit capabilities (legacy support in use) [ 348.406864][ T4944] Bluetooth: hci0: Malformed Event: 0x02 [ 350.248749][T11368] random: crng reseeded on system resumption [ 350.901476][T11385] FAULT_INJECTION: forcing a failure. [ 350.901476][T11385] name failslab, interval 1, probability 0, space 0, times 0 [ 350.964215][T11385] CPU: 0 UID: 0 PID: 11385 Comm: syz.3.1167 Tainted: G U L syzkaller #0 PREEMPT(full) [ 350.964245][T11385] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 350.964251][T11385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 350.964261][T11385] Call Trace: [ 350.964267][T11385] [ 350.964273][T11385] dump_stack_lvl+0x100/0x190 [ 350.964295][T11385] should_fail_ex.cold+0x5/0xa [ 350.964315][T11385] should_failslab+0xc2/0x120 [ 350.964333][T11385] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 350.964356][T11385] ? __proc_create+0x2cb/0x8c0 [ 350.964379][T11385] __proc_create+0x2cb/0x8c0 [ 350.964398][T11385] ? __pfx___proc_create+0x10/0x10 [ 350.964420][T11385] ? mark_held_locks+0x40/0x70 [ 350.964437][T11385] _proc_mkdir+0xb9/0x210 [ 350.964456][T11385] ? __pfx__proc_mkdir+0x10/0x10 [ 350.964473][T11385] ? sctp_defaults_init+0x720/0xd90 [ 350.964495][T11385] sctp_proc_init+0x59/0x270 [ 350.964510][T11385] ? __pfx_sctp_defaults_init+0x10/0x10 [ 350.964525][T11385] sctp_defaults_init+0x758/0xd90 [ 350.964542][T11385] ? __pfx_sctp_defaults_init+0x10/0x10 [ 350.964558][T11385] ops_init+0x1e2/0x5f0 [ 350.964578][T11385] setup_net+0x118/0x3a0 [ 350.964595][T11385] ? __pfx_setup_net+0x10/0x10 [ 350.964612][T11385] ? mutex_init_lockdep+0xf1/0x120 [ 350.964632][T11385] copy_net_ns+0x46f/0x7c0 [ 350.964652][T11385] create_new_namespaces+0x3ea/0xac0 [ 350.964675][T11385] unshare_nsproxy_namespaces+0xf2/0x220 [ 350.964696][T11385] ksys_unshare+0x438/0xab0 [ 350.964718][T11385] ? __pfx_ksys_unshare+0x10/0x10 [ 350.964738][T11385] ? xfd_validate_state+0x129/0x190 [ 350.964760][T11385] __x64_sys_unshare+0x31/0x40 [ 350.964781][T11385] do_syscall_64+0x10b/0xf80 [ 350.964801][T11385] ? clear_bhb_loop+0x40/0x90 [ 350.964818][T11385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.964833][T11385] RIP: 0033:0x7f8b7eb9cdd9 [ 350.964846][T11385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.964860][T11385] RSP: 002b:00007f8b7f974028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 350.964883][T11385] RAX: ffffffffffffffda RBX: 00007f8b7ee15fa0 RCX: 00007f8b7eb9cdd9 [ 350.964894][T11385] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 350.964903][T11385] RBP: 00007f8b7ec32d69 R08: 0000000000000000 R09: 0000000000000000 [ 350.964912][T11385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.964921][T11385] R13: 00007f8b7ee16038 R14: 00007f8b7ee15fa0 R15: 00007ffce53f5648 [ 350.964941][T11385] [ 352.569883][T11408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1174'. [ 352.750658][T11412] FAULT_INJECTION: forcing a failure. [ 352.750658][T11412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.813407][T11412] CPU: 0 UID: 0 PID: 11412 Comm: syz.1.1176 Tainted: G U L syzkaller #0 PREEMPT(full) [ 352.813436][T11412] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 352.813442][T11412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 352.813451][T11412] Call Trace: [ 352.813456][T11412] [ 352.813462][T11412] dump_stack_lvl+0x100/0x190 [ 352.813485][T11412] should_fail_ex.cold+0x5/0xa [ 352.813505][T11412] _copy_from_user+0x2e/0xd0 [ 352.813522][T11412] __do_sys_io_uring_register+0xd7c/0x1bd0 [ 352.813543][T11412] ? __pfx_do_futex+0x10/0x10 [ 352.813562][T11412] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 352.813584][T11412] ? __x64_sys_futex+0x34f/0x4d0 [ 352.813599][T11412] ? __x64_sys_futex+0x358/0x4d0 [ 352.813623][T11412] ? xfd_validate_state+0x129/0x190 [ 352.813638][T11412] ? find_held_lock+0x2b/0x80 [ 352.813659][T11412] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 352.813684][T11412] ? syscall_user_dispatch+0x76/0x130 [ 352.813706][T11412] do_syscall_64+0x10b/0xf80 [ 352.813727][T11412] ? clear_bhb_loop+0x40/0x90 [ 352.813746][T11412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.813761][T11412] RIP: 0033:0x7fea2459cdd9 [ 352.813774][T11412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.813789][T11412] RSP: 002b:00007fea25486028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 352.813804][T11412] RAX: ffffffffffffffda RBX: 00007fea24815fa0 RCX: 00007fea2459cdd9 [ 352.813814][T11412] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffffffffffff [ 352.813823][T11412] RBP: 00007fea24632d69 R08: 0000000000000000 R09: 0000000000000000 [ 352.813832][T11412] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 352.813840][T11412] R13: 00007fea24816038 R14: 00007fea24815fa0 R15: 00007fff65969738 [ 352.813860][T11412] [ 353.097728][T11421] netlink: 146 bytes leftover after parsing attributes in process `syz.3.1177'. [ 353.153493][T11418] zswap: compressor not available [ 353.343641][T11429] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1180'. [ 353.912668][T11442] zswap: compressor not available [ 353.968123][T11440] FAULT_INJECTION: forcing a failure. [ 353.968123][T11440] name failslab, interval 1, probability 0, space 0, times 0 [ 353.992796][T11440] CPU: 0 UID: 0 PID: 11440 Comm: syz.1.1182 Tainted: G U L syzkaller #0 PREEMPT(full) [ 353.992837][T11440] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 353.992843][T11440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 353.992852][T11440] Call Trace: [ 353.992858][T11440] [ 353.992864][T11440] dump_stack_lvl+0x100/0x190 [ 353.992886][T11440] should_fail_ex.cold+0x5/0xa [ 353.992904][T11440] ? __pfx_crypto_alg_extsize+0x10/0x10 [ 353.992925][T11440] should_failslab+0xc2/0x120 [ 353.992942][T11440] ? __pfx_crypto_alg_extsize+0x10/0x10 [ 353.992963][T11440] __kmalloc_node_noprof+0xe6/0x850 [ 353.992977][T11440] ? crypto_alloc_tfmmem.isra.0+0x38/0x110 [ 353.992992][T11440] ? __up_read+0x2c1/0x6e0 [ 353.993011][T11440] ? __pfx_crypto_alg_extsize+0x10/0x10 [ 353.993030][T11440] crypto_alloc_tfmmem.isra.0+0x38/0x110 [ 353.993049][T11440] crypto_create_tfm_node+0x85/0x350 [ 353.993065][T11440] ? __pfx_rsassa_pkcs1_init_tfm+0x10/0x10 [ 353.993082][T11440] crypto_spawn_tfm2+0x62/0xc0 [ 353.993104][T11440] rsassa_pkcs1_init_tfm+0x39/0xb0 [ 353.993120][T11440] crypto_sig_init_tfm+0xba/0xf0 [ 353.993140][T11440] crypto_create_tfm_node+0x127/0x350 [ 353.993159][T11440] crypto_alloc_tfm_node+0x102/0x260 [ 353.993178][T11440] public_key_verify_signature+0x21b/0x910 [ 353.993197][T11440] ? __pfx_public_key_verify_signature+0x10/0x10 [ 353.993221][T11440] ? __kmalloc_noprof+0x320/0x850 [ 353.993239][T11440] x509_check_for_self_signed+0x325/0x510 [ 353.993258][T11440] x509_cert_parse+0x60c/0x910 [ 353.993272][T11440] ? kasan_save_stack+0x3f/0x50 [ 353.993285][T11440] ? kasan_save_stack+0x30/0x50 [ 353.993298][T11440] ? kasan_save_track+0x14/0x30 [ 353.993314][T11440] pkcs7_extract_cert+0xa4/0x380 [ 353.993334][T11440] asn1_ber_decoder+0x12b3/0x2170 [ 353.993361][T11440] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 353.993393][T11440] pkcs7_parse_message+0x289/0x870 [ 353.993413][T11440] verify_pkcs7_signature+0x30/0xa0 [ 353.993431][T11440] valid_regdb+0x211/0x590 [ 353.993451][T11440] ? __pfx_valid_regdb+0x10/0x10 [ 353.993472][T11440] reg_reload_regdb+0x11a/0x460 [ 353.993491][T11440] ? __pfx_reg_reload_regdb+0x10/0x10 [ 353.993511][T11440] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 353.993532][T11440] ? nl80211_pre_doit+0x19a/0xae0 [ 353.993549][T11440] genl_family_rcv_msg_doit+0x214/0x300 [ 353.993576][T11440] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 353.993599][T11440] ? genl_get_cmd+0x3e7/0x760 [ 353.993626][T11440] ? bpf_lsm_capable+0x9/0x10 [ 353.993642][T11440] ? security_capable+0x80/0x260 [ 353.993667][T11440] genl_rcv_msg+0x560/0x800 [ 353.993691][T11440] ? __pfx_genl_rcv_msg+0x10/0x10 [ 353.993713][T11440] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 353.993726][T11440] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 353.993743][T11440] ? __pfx_nl80211_post_doit+0x10/0x10 [ 353.993764][T11440] netlink_rcv_skb+0x159/0x420 [ 353.993786][T11440] ? __pfx_genl_rcv_msg+0x10/0x10 [ 353.993809][T11440] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 353.993837][T11440] ? netlink_deliver_tap+0x1ae/0xcc0 [ 353.993859][T11440] genl_rcv+0x28/0x40 [ 353.993879][T11440] netlink_unicast+0x585/0x850 [ 353.993902][T11440] ? __pfx_netlink_unicast+0x10/0x10 [ 353.993927][T11440] netlink_sendmsg+0x8b0/0xda0 [ 353.993950][T11440] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.993969][T11440] ? __import_iovec+0x1d2/0x640 [ 353.993986][T11440] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 353.994012][T11440] ____sys_sendmsg+0x9e1/0xb70 [ 353.994031][T11440] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.994052][T11440] ? __pfx_____sys_sendmsg+0x10/0x10 [ 353.994076][T11440] ? __pfx_futex_wake_mark+0x10/0x10 [ 353.994099][T11440] ___sys_sendmsg+0x190/0x1e0 [ 353.994121][T11440] ? __pfx____sys_sendmsg+0x10/0x10 [ 353.994164][T11440] __sys_sendmsg+0x170/0x220 [ 353.994181][T11440] ? __pfx___sys_sendmsg+0x10/0x10 [ 353.994197][T11440] ? __x64_sys_futex+0x34f/0x4d0 [ 353.994220][T11440] ? rcu_is_watching+0x12/0xc0 [ 353.994241][T11440] do_syscall_64+0x10b/0xf80 [ 353.994261][T11440] ? clear_bhb_loop+0x40/0x90 [ 353.994279][T11440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.994294][T11440] RIP: 0033:0x7fea2459cdd9 [ 353.994308][T11440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.994322][T11440] RSP: 002b:00007fea25486028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.994337][T11440] RAX: ffffffffffffffda RBX: 00007fea24815fa0 RCX: 00007fea2459cdd9 [ 353.994347][T11440] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000007 [ 353.994357][T11440] RBP: 00007fea24632d69 R08: 0000000000000000 R09: 0000000000000000 [ 353.994366][T11440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.994375][T11440] R13: 00007fea24816038 R14: 00007fea24815fa0 R15: 00007fff65969738 [ 353.994395][T11440] [ 354.857068][T11448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1184'. [ 355.285228][T11459] ovs_: entered promiscuous mode [ 355.304472][T11460] openvswitch: ovs_: Dropping previously announced user features [ 356.226217][ T4944] Bluetooth: hci0: unexpected event 0x3e length: 358 > 260 [ 356.226244][ T4944] Bluetooth: hci0: unexpected subevent 0x1b length: 357 > 260 [ 356.514146][T11491] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1195'. [ 357.131703][T11509] futex_wake_op: syz.1.1199 tries to shift op by -2048; fix this program [ 357.165374][T11509] futex_wake_op: syz.1.1199 tries to shift op by -2048; fix this program [ 357.215193][T11509] 0x000000000001-0x000000020000 : "" [ 357.363909][T11509] ftl_cs: FTL header corrupt! [ 357.692926][T11527] FAULT_INJECTION: forcing a failure. [ 357.692926][T11527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.774322][T11527] CPU: 0 UID: 0 PID: 11527 Comm: syz.0.1203 Tainted: G U L syzkaller #0 PREEMPT(full) [ 357.774349][T11527] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 357.774355][T11527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 357.774364][T11527] Call Trace: [ 357.774369][T11527] [ 357.774375][T11527] dump_stack_lvl+0x100/0x190 [ 357.774396][T11527] should_fail_ex.cold+0x5/0xa [ 357.774415][T11527] _copy_to_user+0x32/0xd0 [ 357.774432][T11527] mtdchar_read+0x3cc/0x5b0 [ 357.774455][T11527] ? __pfx_mtdchar_read+0x10/0x10 [ 357.774474][T11527] ? __pfx___might_resched+0x10/0x10 [ 357.774492][T11527] ? iovec_from_user+0xda/0x140 [ 357.774511][T11527] ? apparmor_file_permission+0x13f/0x1c0 [ 357.774528][T11527] ? bpf_lsm_file_permission+0x9/0x10 [ 357.774543][T11527] ? security_file_permission+0x76/0x210 [ 357.774561][T11527] ? rw_verify_area+0xce/0x6d0 [ 357.774576][T11527] ? __pfx_mtdchar_read+0x10/0x10 [ 357.774595][T11527] vfs_readv+0x5d8/0x8d0 [ 357.774614][T11527] ? __pfx_vfs_readv+0x10/0x10 [ 357.774630][T11527] ? find_held_lock+0x2b/0x80 [ 357.774648][T11527] ? ksys_write+0x190/0x250 [ 357.774674][T11527] ? __fget_files+0x21f/0x3d0 [ 357.774694][T11527] ? do_readv+0x13e/0x340 [ 357.774708][T11527] do_readv+0x13e/0x340 [ 357.774723][T11527] ? __pfx_do_readv+0x10/0x10 [ 357.774739][T11527] ? rcu_is_watching+0x12/0xc0 [ 357.774759][T11527] do_syscall_64+0x10b/0xf80 [ 357.774779][T11527] ? clear_bhb_loop+0x40/0x90 [ 357.774797][T11527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.774811][T11527] RIP: 0033:0x7f1adc19cdd9 [ 357.774824][T11527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.774838][T11527] RSP: 002b:00007f1add111028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 357.774852][T11527] RAX: ffffffffffffffda RBX: 00007f1adc415fa0 RCX: 00007f1adc19cdd9 [ 357.774862][T11527] RDX: 0000000000000008 RSI: 00002000000002c0 RDI: 0000000000000003 [ 357.774871][T11527] RBP: 00007f1add111090 R08: 0000000000000000 R09: 0000000000000000 [ 357.774879][T11527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.774888][T11527] R13: 00007f1adc416038 R14: 00007f1adc415fa0 R15: 00007ffd8770d608 [ 357.774906][T11527] [ 358.467927][T11533] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1205'. [ 358.643113][T11542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1207'. [ 359.541705][T11559] nvme_fcloop: unknown parameter or missing value '7=";&L=j"Yq' [ 359.812844][T11564] netlink: 'syz.0.1212': attribute type 11 has an invalid length. [ 359.827988][T11564] netlink: 'syz.0.1212': attribute type 11 has an invalid length. [ 359.856332][T11564] netlink: 'syz.0.1212': attribute type 11 has an invalid length. [ 360.158309][T11574] FAULT_INJECTION: forcing a failure. [ 360.158309][T11574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.212166][T11574] CPU: 0 UID: 0 PID: 11574 Comm: syz.3.1214 Tainted: G U L syzkaller #0 PREEMPT(full) [ 360.212194][T11574] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 360.212199][T11574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 360.212208][T11574] Call Trace: [ 360.212213][T11574] [ 360.212226][T11574] dump_stack_lvl+0x100/0x190 [ 360.212248][T11574] should_fail_ex.cold+0x5/0xa [ 360.212268][T11574] _copy_to_user+0x32/0xd0 [ 360.212284][T11574] simple_read_from_buffer+0xcb/0x170 [ 360.212303][T11574] proc_fail_nth_read+0x1af/0x230 [ 360.212327][T11574] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 360.212351][T11574] ? rw_verify_area+0xce/0x6d0 [ 360.212365][T11574] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 360.212388][T11574] vfs_read+0x1e4/0xb30 [ 360.212409][T11574] ? __pfx_vfs_read+0x10/0x10 [ 360.212424][T11574] ? __fget_files+0x215/0x3d0 [ 360.212446][T11574] ? __fget_files+0x21f/0x3d0 [ 360.212467][T11574] ksys_read+0x12a/0x250 [ 360.212483][T11574] ? __pfx_ksys_read+0x10/0x10 [ 360.212501][T11574] ? rcu_is_watching+0x12/0xc0 [ 360.212521][T11574] do_syscall_64+0x10b/0xf80 [ 360.212542][T11574] ? clear_bhb_loop+0x40/0x90 [ 360.212560][T11574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.212575][T11574] RIP: 0033:0x7f8b7eb5d60e [ 360.212587][T11574] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 360.212601][T11574] RSP: 002b:00007f8b7f973fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 360.212616][T11574] RAX: ffffffffffffffda RBX: 00007f8b7f9746c0 RCX: 00007f8b7eb5d60e [ 360.212626][T11574] RDX: 000000000000000f RSI: 00007f8b7f9740a0 RDI: 0000000000000004 [ 360.212634][T11574] RBP: 00007f8b7f974090 R08: 0000000000000000 R09: 0000000000000000 [ 360.212643][T11574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.212652][T11574] R13: 00007f8b7ee16038 R14: 00007f8b7ee15fa0 R15: 00007ffce53f5648 [ 360.212671][T11574] [ 360.888966][T11590] device-mapper: ioctl: name not supplied when creating device [ 362.377803][T11610] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 362.378040][T11610] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 362.378105][T11610] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 362.492809][T11610] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 363.866550][ T4944] Bluetooth: hci0: command 0x0c1a tx timeout [ 364.430120][ T4944] Bluetooth: hci3: command 0x0c1a tx timeout [ 364.507298][ T4944] Bluetooth: hci1: command 0x0c1a tx timeout [ 364.610595][T11682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1239'. [ 364.758269][T11677] zswap: compressor not available [ 364.978274][T11690] netlink: 'syz.0.1240': attribute type 1 has an invalid length. [ 365.007466][T11690] netlink: 306 bytes leftover after parsing attributes in process `syz.0.1240'. [ 365.789472][T11719] FAULT_INJECTION: forcing a failure. [ 365.789472][T11719] name failslab, interval 1, probability 0, space 0, times 0 [ 365.861512][T11719] CPU: 0 UID: 0 PID: 11719 Comm: syz.2.1243 Tainted: G U L syzkaller #0 PREEMPT(full) [ 365.861540][T11719] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 365.861546][T11719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 365.861555][T11719] Call Trace: [ 365.861561][T11719] [ 365.861567][T11719] dump_stack_lvl+0x100/0x190 [ 365.861590][T11719] should_fail_ex.cold+0x5/0xa [ 365.861609][T11719] should_failslab+0xc2/0x120 [ 365.861626][T11719] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 365.861650][T11719] ? ptlock_alloc+0x1f/0x70 [ 365.861670][T11719] ? do_raw_spin_lock+0x128/0x260 [ 365.861689][T11719] ptlock_alloc+0x1f/0x70 [ 365.861709][T11719] pte_alloc_one+0x82/0x3d0 [ 365.861730][T11719] do_fault+0x86c/0x1750 [ 365.861752][T11719] ? __pmd_alloc+0x3fb/0x950 [ 365.861772][T11719] __handle_mm_fault+0x187d/0x2a00 [ 365.861797][T11719] ? mt_find+0x45e/0x8e0 [ 365.861820][T11719] ? __pfx___handle_mm_fault+0x10/0x10 [ 365.861840][T11719] ? __pfx_mt_find+0x10/0x10 [ 365.861874][T11719] ? find_vma+0xbf/0x140 [ 365.861890][T11719] ? __pfx_find_vma+0x10/0x10 [ 365.861908][T11719] handle_mm_fault+0x36d/0xa20 [ 365.861933][T11719] do_user_addr_fault+0x74c/0x12f0 [ 365.861953][T11719] ? trace_page_fault_kernel+0x7a/0x200 [ 365.861972][T11719] exc_page_fault+0x6f/0xd0 [ 365.861993][T11719] asm_exc_page_fault+0x26/0x30 [ 365.862008][T11719] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 365.862025][T11719] Code: 9b 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 365.862039][T11719] RSP: 0018:ffffc90005aefcc8 EFLAGS: 00050202 [ 365.862052][T11719] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000078 [ 365.862061][T11719] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90005aefdb0 [ 365.862070][T11719] RBP: 0000000000000078 R08: 0000000000000001 R09: fffff52000b5dfc4 [ 365.862079][T11719] R10: ffffc90005aefe27 R11: 0000000000000000 R12: 0000000000000000 [ 365.862088][T11719] R13: ffffc90005aefdb0 R14: 0000000000000000 R15: dffffc0000000000 [ 365.862106][T11719] _copy_from_user+0x98/0xd0 [ 365.862122][T11719] io_uring_setup+0xc0/0x160 [ 365.862139][T11719] ? ksys_write+0x190/0x250 [ 365.862158][T11719] ? __pfx_io_uring_setup+0x10/0x10 [ 365.862176][T11719] ? do_futex+0x192/0x350 [ 365.862193][T11719] ? __pfx_do_futex+0x10/0x10 [ 365.862217][T11719] ? xfd_validate_state+0x129/0x190 [ 365.862232][T11719] ? ksys_write+0x1ac/0x250 [ 365.862252][T11719] __x64_sys_io_uring_setup+0xc2/0x170 [ 365.862271][T11719] do_syscall_64+0x10b/0xf80 [ 365.862290][T11719] ? clear_bhb_loop+0x40/0x90 [ 365.862308][T11719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.862323][T11719] RIP: 0033:0x7fb2b9f9cdd9 [ 365.862335][T11719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.862349][T11719] RSP: 002b:00007fb2baea9028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 365.862362][T11719] RAX: ffffffffffffffda RBX: 00007fb2ba215fa0 RCX: 00007fb2b9f9cdd9 [ 365.862372][T11719] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 365.862380][T11719] RBP: 00007fb2ba032d69 R08: 0000000000000000 R09: 0000000000000000 [ 365.862389][T11719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 365.862397][T11719] R13: 00007fb2ba216038 R14: 00007fb2ba215fa0 R15: 00007fffa7ee05f8 [ 365.862416][T11719] [ 366.647717][ T4944] Bluetooth: hci3: command 0x0c1a tx timeout [ 367.081867][T11735] i2c i2c-0: new_device: Missing parameters [ 367.692827][T11743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1248'. [ 369.026745][T11769] i2c i2c-0: new_device: Missing parameters [ 370.218054][T11794] netlink: 350 bytes leftover after parsing attributes in process `syz.1.1257'. [ 370.337059][T11792] futex_wake_op: syz.2.1256 tries to shift op by -2048; fix this program [ 370.384741][T11792] futex_wake_op: syz.2.1256 tries to shift op by -2048; fix this program [ 370.483527][T11796] 0x000000000001-0x000000020000 : "" [ 370.585434][T11798] netlink: 'syz.1.1258': attribute type 2 has an invalid length. [ 370.635729][T11796] ftl_cs: FTL header corrupt! [ 371.923949][T11811] i2c i2c-0: new_device: Missing parameters [ 372.012281][T11822] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1261'. [ 372.161293][T11827] bond0: invalid ARP target specified [ 373.883347][T11853] FAULT_INJECTION: forcing a failure. [ 373.883347][T11853] name failslab, interval 1, probability 0, space 0, times 0 [ 373.940100][T11853] CPU: 0 UID: 0 PID: 11853 Comm: syz.0.1268 Tainted: G U L syzkaller #0 PREEMPT(full) [ 373.940131][T11853] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 373.940137][T11853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 373.940147][T11853] Call Trace: [ 373.940152][T11853] [ 373.940159][T11853] dump_stack_lvl+0x100/0x190 [ 373.940180][T11853] should_fail_ex.cold+0x5/0xa [ 373.940201][T11853] ? tomoyo_realpath_from_path+0xb6/0x690 [ 373.940220][T11853] should_failslab+0xc2/0x120 [ 373.940238][T11853] __kmalloc_noprof+0xe0/0x850 [ 373.940251][T11853] ? kfree+0x1dd/0x6c0 [ 373.940274][T11853] tomoyo_realpath_from_path+0xb6/0x690 [ 373.940297][T11853] tomoyo_path_number_perm+0x23c/0x580 [ 373.940313][T11853] ? tomoyo_path_number_perm+0x22e/0x580 [ 373.940330][T11853] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 373.940345][T11853] ? futex_wait+0x11e/0x370 [ 373.940381][T11853] ? find_held_lock+0x2b/0x80 [ 373.940400][T11853] ? __fget_files+0x215/0x3d0 [ 373.940416][T11853] ? hook_file_ioctl_common+0x149/0x410 [ 373.940432][T11853] ? __fget_files+0x215/0x3d0 [ 373.940451][T11853] ? __fget_files+0x21f/0x3d0 [ 373.940471][T11853] security_file_ioctl+0xd3/0x230 [ 373.940488][T11853] __x64_sys_ioctl+0xb7/0x210 [ 373.940504][T11853] do_syscall_64+0x10b/0xf80 [ 373.940524][T11853] ? clear_bhb_loop+0x40/0x90 [ 373.940542][T11853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.940557][T11853] RIP: 0033:0x7f1adc19cdd9 [ 373.940570][T11853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.940585][T11853] RSP: 002b:00007f1add0f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 373.940600][T11853] RAX: ffffffffffffffda RBX: 00007f1adc416090 RCX: 00007f1adc19cdd9 [ 373.940610][T11853] RDX: 0000000000000000 RSI: 000000008004500b RDI: 0000000000000003 [ 373.940619][T11853] RBP: 00007f1adc232d69 R08: 0000000000000000 R09: 0000000000000000 [ 373.940627][T11853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 373.940635][T11853] R13: 00007f1adc416128 R14: 00007f1adc416090 R15: 00007ffd8770d608 [ 373.940655][T11853] [ 373.941807][T11853] ERROR: Out of memory at tomoyo_realpath_from_path. [ 375.512530][T11880] i2c i2c-0: new_device: Missing parameters [ 375.589050][T11885] sg_write: process 1208 (syz.3.1273) changed security contexts after opening file descriptor, this is not allowed. [ 375.985989][T11888] zswap: compressor not available [ 376.158785][ T5634] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 376.158810][ T5634] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 376.174597][ T5634] Bluetooth: hci3: Unknown advertising packet type: 0x3e [ 376.430495][ T5634] Bluetooth: hci0: unexpected event 0x1d length: 6 > 5 [ 378.159930][T11943] bond0: invalid ARP target specified [ 378.215222][T11943] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1284'. [ 378.259675][T11943] team0 (unregistering): Port device team_slave_0 removed [ 378.312902][T11943] team0 (unregistering): Port device team_slave_1 removed [ 378.674350][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.681096][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.778297][T11949] zswap: compressor not available [ 378.935878][ T29] audit: type=1326 audit(1778431929.782:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11957 comm="syz.0.1288" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1adc19cdd9 code=0x0 [ 380.847481][T12014] usb usb3: usbfs: process 12014 (syz.0.1299) did not claim interface 0 before use [ 380.928149][T12022] FAULT_INJECTION: forcing a failure. [ 380.928149][T12022] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 380.999979][T12022] CPU: 0 UID: 0 PID: 12022 Comm: syz.1.1302 Tainted: G U L syzkaller #0 PREEMPT(full) [ 381.000013][T12022] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 381.000024][T12022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 381.000034][T12022] Call Trace: [ 381.000039][T12022] [ 381.000045][T12022] dump_stack_lvl+0x100/0x190 [ 381.000068][T12022] should_fail_ex.cold+0x5/0xa [ 381.000084][T12022] ? prepare_alloc_pages+0x16d/0x5f0 [ 381.000105][T12022] should_fail_alloc_page+0xeb/0x140 [ 381.000124][T12022] prepare_alloc_pages+0x1f0/0x5f0 [ 381.000145][T12022] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 381.000169][T12022] ? is_bpf_text_address+0x31/0x1a0 [ 381.000189][T12022] ? is_bpf_text_address+0x8a/0x1a0 [ 381.000209][T12022] ? bpf_ksym_find+0x124/0x1c0 [ 381.000225][T12022] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 381.000246][T12022] ? is_bpf_text_address+0x94/0x1a0 [ 381.000265][T12022] ? kernel_text_address+0x8d/0x100 [ 381.000281][T12022] ? __kernel_text_address+0xd/0x30 [ 381.000296][T12022] ? unwind_get_return_address+0x59/0xa0 [ 381.000315][T12022] ? arch_stack_walk+0xa6/0xf0 [ 381.000333][T12022] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 381.000366][T12022] ? stack_depot_save_flags+0x27/0x9d0 [ 381.000383][T12022] ? stack_trace_save+0x8e/0xc0 [ 381.000404][T12022] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 381.000426][T12022] ? policy_nodemask+0xed/0x4f0 [ 381.000445][T12022] alloc_pages_mpol+0x1fb/0x540 [ 381.000463][T12022] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 381.000485][T12022] alloc_pages_noprof+0x1a/0x160 [ 381.000504][T12022] kimage_alloc_pages+0x72/0x380 [ 381.000528][T12022] kimage_alloc_control_pages+0x157/0xa20 [ 381.000557][T12022] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 381.000584][T12022] do_kexec_load+0x275/0x810 [ 381.000608][T12022] ? __pfx_do_kexec_load+0x10/0x10 [ 381.000631][T12022] ? _copy_from_user+0x59/0xd0 [ 381.000649][T12022] __x64_sys_kexec_load+0x1bf/0x230 [ 381.000674][T12022] do_syscall_64+0x10b/0xf80 [ 381.000694][T12022] ? clear_bhb_loop+0x40/0x90 [ 381.000711][T12022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.000731][T12022] RIP: 0033:0x7fea2459cdd9 [ 381.000744][T12022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.000758][T12022] RSP: 002b:00007fea25465028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 381.000774][T12022] RAX: ffffffffffffffda RBX: 00007fea24816090 RCX: 00007fea2459cdd9 [ 381.000784][T12022] RDX: 0000200000000040 RSI: 0000000000000002 RDI: 0000000000000005 [ 381.000793][T12022] RBP: 00007fea24632d69 R08: 0000000000000000 R09: 0000000000000000 [ 381.000802][T12022] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 381.000811][T12022] R13: 00007fea24816128 R14: 00007fea24816090 R15: 00007fff65969738 [ 381.000831][T12022] [ 381.314953][T12018] random: crng reseeded on system resumption [ 381.328007][T12022] kexec: Could not allocate control_code_buffer [ 382.605324][T12056] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1309'. [ 382.953473][T12054] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1308'. [ 384.394939][T12079] netlink: 'syz.0.1316': attribute type 2 has an invalid length. [ 384.932391][T12088] could not allocate digest TFM handle [ 385.399838][T12105] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 385.416249][T12105] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 385.434735][T12105] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 385.522550][T12105] FAULT_INJECTION: forcing a failure. [ 385.522550][T12105] name failslab, interval 1, probability 0, space 0, times 0 [ 385.581683][T12105] CPU: 0 UID: 0 PID: 12105 Comm: syz.0.1321 Tainted: G U L syzkaller #0 PREEMPT(full) [ 385.581712][T12105] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 385.581718][T12105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 385.581727][T12105] Call Trace: [ 385.581733][T12105] [ 385.581739][T12105] dump_stack_lvl+0x100/0x190 [ 385.581760][T12105] should_fail_ex.cold+0x5/0xa [ 385.581780][T12105] should_failslab+0xc2/0x120 [ 385.581798][T12105] __kmalloc_cache_noprof+0x7a/0x6f0 [ 385.581818][T12105] ? kobject_create_and_add+0x46/0xc0 [ 385.581839][T12105] kobject_create_and_add+0x46/0xc0 [ 385.581856][T12105] __add_disk+0x66f/0xe40 [ 385.581881][T12105] add_disk_fwnode+0x118/0x5c0 [ 385.581903][T12105] loop_add+0x90b/0xb60 [ 385.581926][T12105] ? __pfx_loop_add+0x10/0x10 [ 385.581959][T12105] ? find_held_lock+0x2b/0x80 [ 385.581977][T12105] ? __fget_files+0x215/0x3d0 [ 385.581996][T12105] loop_control_ioctl+0xae/0x620 [ 385.582019][T12105] ? __pfx_loop_control_ioctl+0x10/0x10 [ 385.582044][T12105] ? __pfx_loop_control_ioctl+0x10/0x10 [ 385.582067][T12105] __x64_sys_ioctl+0x18e/0x210 [ 385.582084][T12105] do_syscall_64+0x10b/0xf80 [ 385.582104][T12105] ? clear_bhb_loop+0x40/0x90 [ 385.582122][T12105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.582136][T12105] RIP: 0033:0x7f1adc19cdd9 [ 385.582149][T12105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.582163][T12105] RSP: 002b:00007f1add111028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 385.582178][T12105] RAX: ffffffffffffffda RBX: 00007f1adc415fa0 RCX: 00007f1adc19cdd9 [ 385.582188][T12105] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000004 [ 385.582197][T12105] RBP: 00007f1adc232d69 R08: 0000000000000000 R09: 0000000000000000 [ 385.582205][T12105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 385.582214][T12105] R13: 00007f1adc416038 R14: 00007f1adc415fa0 R15: 00007ffd8770d608 [ 385.582233][T12105] [ 386.546096][T12147] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1332'. [ 386.868096][T12158] zswap: compressor not available [ 387.026255][T12164] FAULT_INJECTION: forcing a failure. [ 387.026255][T12164] name fail_futex, interval 1, probability 0, space 0, times 0 [ 387.054730][T12164] CPU: 0 UID: 0 PID: 12164 Comm: syz.0.1334 Tainted: G U L syzkaller #0 PREEMPT(full) [ 387.054757][T12164] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 387.054763][T12164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 387.054771][T12164] Call Trace: [ 387.054777][T12164] [ 387.054782][T12164] dump_stack_lvl+0x100/0x190 [ 387.054804][T12164] should_fail_ex.cold+0x5/0xa [ 387.054820][T12164] ? rcu_is_watching+0x12/0xc0 [ 387.054840][T12164] get_futex_key+0x1d2/0x1510 [ 387.054857][T12164] ? __pfx_get_futex_key+0x10/0x10 [ 387.054873][T12164] ? trace_pid_list_is_set+0x22c/0x390 [ 387.054897][T12164] futex_wait_setup+0x83/0x510 [ 387.054921][T12164] __futex_wait+0x19f/0x300 [ 387.054941][T12164] ? __pfx___futex_wait+0x10/0x10 [ 387.054963][T12164] ? __pfx_futex_wake_mark+0x10/0x10 [ 387.054984][T12164] ? do_raw_spin_lock+0x128/0x260 [ 387.055000][T12164] ? find_held_lock+0x2b/0x80 [ 387.055018][T12164] ? futex_wake+0x456/0x530 [ 387.055035][T12164] ? futex_wake+0x456/0x530 [ 387.055056][T12164] futex_wait+0xe6/0x370 [ 387.055075][T12164] ? __pfx_futex_wait+0x10/0x10 [ 387.055103][T12164] do_futex+0x1ef/0x350 [ 387.055118][T12164] ? __pfx_do_futex+0x10/0x10 [ 387.055135][T12164] ? map_id_range_down+0x2bc/0x3b0 [ 387.055158][T12164] __x64_sys_futex+0x34f/0x4d0 [ 387.055176][T12164] ? __pfx___x64_sys_futex+0x10/0x10 [ 387.055196][T12164] ? rcu_is_watching+0x12/0xc0 [ 387.055215][T12164] do_syscall_64+0x10b/0xf80 [ 387.055235][T12164] ? clear_bhb_loop+0x40/0x90 [ 387.055253][T12164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.055268][T12164] RIP: 0033:0x7f1adc19cdd9 [ 387.055280][T12164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.055294][T12164] RSP: 002b:00007f1add1110e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 387.055308][T12164] RAX: ffffffffffffffda RBX: 00007f1adc415fa8 RCX: 00007f1adc19cdd9 [ 387.055318][T12164] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1adc415fa8 [ 387.055327][T12164] RBP: 00007f1adc415fa0 R08: 0000000000000000 R09: 0000000000000000 [ 387.055335][T12164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.055344][T12164] R13: 00007f1adc416038 R14: 00007ffd8770d520 R15: 00007ffd8770d608 [ 387.055362][T12164] [ 387.389302][ T5634] Bluetooth: hci0: command 0x0c1a tx timeout [ 387.466583][ T5634] Bluetooth: hci1: command 0x0c1a tx timeout [ 387.473612][ T4944] Bluetooth: hci3: command 0x0c1a tx timeout [ 387.677293][T12180] FAULT_INJECTION: forcing a failure. [ 387.677293][T12180] name failslab, interval 1, probability 0, space 0, times 0 [ 387.716858][T12180] CPU: 0 UID: 0 PID: 12180 Comm: syz.1.1337 Tainted: G U L syzkaller #0 PREEMPT(full) [ 387.716887][T12180] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 387.716892][T12180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 387.716901][T12180] Call Trace: [ 387.716907][T12180] [ 387.716913][T12180] dump_stack_lvl+0x100/0x190 [ 387.716935][T12180] should_fail_ex.cold+0x5/0xa [ 387.716955][T12180] should_failslab+0xc2/0x120 [ 387.716972][T12180] __kmalloc_cache_noprof+0x7a/0x6f0 [ 387.716993][T12180] ? proc_do_submiturb+0x722/0x3820 [ 387.717017][T12180] proc_do_submiturb+0x722/0x3820 [ 387.717048][T12180] usbdev_ioctl+0x2adb/0x3aa0 [ 387.717069][T12180] ? __pfx_usbdev_ioctl+0x10/0x10 [ 387.717093][T12180] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 387.717116][T12180] ? do_vfs_ioctl+0x226/0x13e0 [ 387.717130][T12180] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 387.717150][T12180] ? find_held_lock+0x2b/0x80 [ 387.717169][T12180] ? __fget_files+0x215/0x3d0 [ 387.717185][T12180] ? hook_file_ioctl_common+0x149/0x410 [ 387.717209][T12180] ? __pfx_usbdev_ioctl+0x10/0x10 [ 387.717229][T12180] __x64_sys_ioctl+0x18e/0x210 [ 387.717245][T12180] do_syscall_64+0x10b/0xf80 [ 387.717266][T12180] ? clear_bhb_loop+0x40/0x90 [ 387.717283][T12180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.717299][T12180] RIP: 0033:0x7fea2459cdd9 [ 387.717313][T12180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.717327][T12180] RSP: 002b:00007fea25465028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 387.717342][T12180] RAX: ffffffffffffffda RBX: 00007fea24816090 RCX: 00007fea2459cdd9 [ 387.717352][T12180] RDX: 0000200000000100 RSI: 000000008038550a RDI: 000000000000000b [ 387.717360][T12180] RBP: 00007fea24632d69 R08: 0000000000000000 R09: 0000000000000000 [ 387.717369][T12180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.717378][T12180] R13: 00007fea24816128 R14: 00007fea24816090 R15: 00007fff65969738 [ 387.717398][T12180] [ 388.154331][T12190] netlink: 'syz.0.1338': attribute type 11 has an invalid length. [ 388.177382][T12190] netlink: 2132 bytes leftover after parsing attributes in process `syz.0.1338'. [ 392.822656][T12319] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1369'. [ 393.351983][T12329] futex_wake_op: syz.3.1373 tries to shift op by -2048; fix this program [ 394.436687][T12371] ================================================================== [ 394.444779][T12371] BUG: KASAN: slab-out-of-bounds in cache_seq_start_rcu+0x3fe/0x420 [ 394.452748][T12371] Read of size 8 at addr ffff888028091800 by task syz.1.1379/12371 [ 394.460713][T12371] [ 394.463038][T12371] CPU: 0 UID: 0 PID: 12371 Comm: syz.1.1379 Tainted: G U L syzkaller #0 PREEMPT(full) [ 394.463061][T12371] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 394.463067][T12371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 394.463075][T12371] Call Trace: [ 394.463083][T12371] [ 394.463089][T12371] dump_stack_lvl+0x100/0x190 [ 394.463106][T12371] print_report+0x13d/0x4b0 [ 394.463127][T12371] ? __virt_addr_valid+0x239/0x430 [ 394.463151][T12371] ? cache_seq_start_rcu+0x3fe/0x420 [ 394.463164][T12371] kasan_report+0xdf/0x1d0 [ 394.463180][T12371] ? cache_seq_start_rcu+0x3fe/0x420 [ 394.463196][T12371] cache_seq_start_rcu+0x3fe/0x420 [ 394.463211][T12371] seq_read_iter+0x2c1/0x1270 [ 394.463230][T12371] seq_read+0x33b/0x4c0 [ 394.463245][T12371] ? __pfx_seq_read+0x10/0x10 [ 394.463261][T12371] ? lock_acquire+0x1b1/0x370 [ 394.463277][T12371] ? __pfx_seq_read+0x10/0x10 [ 394.463292][T12371] proc_reg_read+0x240/0x330 [ 394.463308][T12371] ? __pfx_proc_reg_read+0x10/0x10 [ 394.463325][T12371] vfs_read+0x1e4/0xb30 [ 394.463342][T12371] ? __pfx_vfs_read+0x10/0x10 [ 394.463357][T12371] ? __fget_files+0x215/0x3d0 [ 394.463375][T12371] ? __fget_files+0x21f/0x3d0 [ 394.463393][T12371] ksys_read+0x12a/0x250 [ 394.463408][T12371] ? __pfx_ksys_read+0x10/0x10 [ 394.463424][T12371] ? rcu_is_watching+0x12/0xc0 [ 394.463442][T12371] do_syscall_64+0x10b/0xf80 [ 394.463462][T12371] ? clear_bhb_loop+0x40/0x90 [ 394.463478][T12371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.463493][T12371] RIP: 0033:0x7fea2459cdd9 [ 394.463505][T12371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.463520][T12371] RSP: 002b:00007fea25486028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 394.463534][T12371] RAX: ffffffffffffffda RBX: 00007fea24815fa0 RCX: 00007fea2459cdd9 [ 394.463544][T12371] RDX: 00000000000000a3 RSI: 00002000000000c0 RDI: 0000000000000004 [ 394.463553][T12371] RBP: 00007fea24632d69 R08: 0000000000000000 R09: 0000000000000000 [ 394.463562][T12371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 394.463571][T12371] R13: 00007fea24816038 R14: 00007fea24815fa0 R15: 00007fff65969738 [ 394.463584][T12371] [ 394.463589][T12371] [ 394.686504][T12371] Allocated by task 5625: [ 394.690819][T12371] kasan_save_stack+0x30/0x50 [ 394.695478][T12371] kasan_save_track+0x14/0x30 [ 394.700134][T12371] __kasan_kmalloc+0xaa/0xb0 [ 394.704879][T12371] __kmalloc_noprof+0x301/0x850 [ 394.709708][T12371] cache_create_net+0xa2/0x1f0 [ 394.714461][T12371] nfsd_export_init+0x62/0x250 [ 394.719242][T12371] nfsd_net_init+0x69/0x3e0 [ 394.723735][T12371] ops_init+0x1e2/0x5f0 [ 394.727869][T12371] setup_net+0x118/0x3a0 [ 394.732092][T12371] copy_net_ns+0x46f/0x7c0 [ 394.736490][T12371] create_new_namespaces+0x3ea/0xac0 [ 394.741758][T12371] unshare_nsproxy_namespaces+0xf2/0x220 [ 394.747373][T12371] ksys_unshare+0x438/0xab0 [ 394.751861][T12371] __x64_sys_unshare+0x31/0x40 [ 394.756609][T12371] do_syscall_64+0x10b/0xf80 [ 394.761183][T12371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.767058][T12371] [ 394.769359][T12371] The buggy address belongs to the object at ffff888028091000 [ 394.769359][T12371] which belongs to the cache kmalloc-2k of size 2048 [ 394.783400][T12371] The buggy address is located 0 bytes to the right of [ 394.783400][T12371] allocated 2048-byte region [ffff888028091000, ffff888028091800) [ 394.797967][T12371] [ 394.800285][T12371] The buggy address belongs to the physical page: [ 394.806672][T12371] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28090 [ 394.815421][T12371] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 394.823894][T12371] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 394.831420][T12371] page_type: f5(slab) [ 394.835381][T12371] raw: 00fff00000000040 ffff88813fe2f000 dead000000000100 dead000000000122 [ 394.843948][T12371] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 394.852509][T12371] head: 00fff00000000040 ffff88813fe2f000 dead000000000100 dead000000000122 [ 394.861153][T12371] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 394.869800][T12371] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 394.878448][T12371] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 394.887089][T12371] page dumped because: kasan: bad access detected [ 394.893481][T12371] page_owner tracks the page as allocated [ 394.899173][T12371] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5626, tgid 5626 (syz-executor), ts 83135352753, free_ts 83020517858 [ 394.920610][T12371] post_alloc_hook+0x153/0x170 [ 394.925372][T12371] get_page_from_freelist+0x11a6/0x33b0 [ 394.930905][T12371] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 394.936785][T12371] new_slab+0xa6/0x6c0 [ 394.940841][T12371] refill_objects+0x277/0x420 [ 394.945506][T12371] __pcs_replace_empty_main+0x375/0x650 [ 394.951037][T12371] __kmalloc_noprof+0x688/0x850 [ 394.955865][T12371] sk_prot_alloc+0x10b/0x2a0 [ 394.960435][T12371] sk_alloc+0x36/0xe80 [ 394.964482][T12371] __netlink_create+0x5e/0x2c0 [ 394.969225][T12371] __netlink_kernel_create+0xed/0x750 [ 394.974581][T12371] nfnetlink_net_init+0xda/0x160 [ 394.979504][T12371] ops_init+0x1e2/0x5f0 [ 394.983730][T12371] setup_net+0x118/0x3a0 [ 394.987956][T12371] copy_net_ns+0x46f/0x7c0 [ 394.992357][T12371] create_new_namespaces+0x3ea/0xac0 [ 394.997627][T12371] page last free pid 5672 tgid 5672 stack trace: [ 395.003928][T12371] __free_frozen_pages+0x747/0x1040 [ 395.009145][T12371] qlist_free_all+0x47/0xf0 [ 395.013631][T12371] kasan_quarantine_reduce+0x1a0/0x1f0 [ 395.019068][T12371] __kasan_slab_alloc+0x69/0x90 [ 395.023899][T12371] kmem_cache_alloc_noprof+0x241/0x6e0 [ 395.029348][T12371] vm_area_alloc+0x1f/0x160 [ 395.033838][T12371] __mmap_region+0x104d/0x2da0 [ 395.038587][T12371] mmap_region+0x35d/0x620 [ 395.042981][T12371] do_mmap+0xc63/0x12f0 [ 395.047118][T12371] vm_mmap_pgoff+0x29e/0x470 [ 395.051692][T12371] ksys_mmap_pgoff+0x3cb/0x610 [ 395.056440][T12371] __x64_sys_mmap+0x125/0x190 [ 395.061098][T12371] do_syscall_64+0x10b/0xf80 [ 395.065704][T12371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.071693][T12371] [ 395.074022][T12371] Memory state around the buggy address: [ 395.079633][T12371] ffff888028091700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.087677][T12371] ffff888028091780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.095733][T12371] >ffff888028091800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 395.103865][T12371] ^ [ 395.107911][T12371] ffff888028091880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 395.115953][T12371] ffff888028091900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 395.123991][T12371] ================================================================== [ 395.406910][T12177] Bluetooth: hci1: unexpected event 0x1c length: 725 > 5 [ 395.445290][T12371] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 395.459493][T12371] CPU: 0 UID: 0 PID: 12371 Comm: syz.1.1379 Tainted: G U L syzkaller #0 PREEMPT(full) [ 395.470412][T12371] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 395.475584][T12371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 395.485619][T12371] Call Trace: [ 395.488883][T12371] [ 395.491794][T12371] dump_stack_lvl+0x100/0x190 [ 395.496463][T12371] vpanic+0x552/0x970 [ 395.500425][T12371] ? __pfx_vpanic+0x10/0x10 [ 395.504906][T12371] ? mark_held_locks+0x40/0x70 [ 395.509653][T12371] ? cache_seq_start_rcu+0x3fe/0x420 [ 395.514917][T12371] panic+0xd1/0xe0 [ 395.518619][T12371] ? __pfx_panic+0x10/0x10 [ 395.523021][T12371] ? cache_seq_start_rcu+0x3fe/0x420 [ 395.528289][T12371] ? preempt_schedule_common+0x42/0xc0 [ 395.533734][T12371] ? check_panic_on_warn+0x1f/0x90 [ 395.538828][T12371] check_panic_on_warn.cold+0x19/0x34 [ 395.544179][T12371] end_report.part.0+0x3a/0x90 [ 395.548938][T12371] kasan_report.cold+0xe/0x18 [ 395.553603][T12371] ? cache_seq_start_rcu+0x3fe/0x420 [ 395.558874][T12371] cache_seq_start_rcu+0x3fe/0x420 [ 395.563966][T12371] seq_read_iter+0x2c1/0x1270 [ 395.568625][T12371] seq_read+0x33b/0x4c0 [ 395.572769][T12371] ? __pfx_seq_read+0x10/0x10 [ 395.577429][T12371] ? lock_acquire+0x1b1/0x370 [ 395.582085][T12371] ? __pfx_seq_read+0x10/0x10 [ 395.586758][T12371] proc_reg_read+0x240/0x330 [ 395.591334][T12371] ? __pfx_proc_reg_read+0x10/0x10 [ 395.596427][T12371] vfs_read+0x1e4/0xb30 [ 395.600565][T12371] ? __pfx_vfs_read+0x10/0x10 [ 395.605222][T12371] ? __fget_files+0x215/0x3d0 [ 395.609883][T12371] ? __fget_files+0x21f/0x3d0 [ 395.614547][T12371] ksys_read+0x12a/0x250 [ 395.618769][T12371] ? __pfx_ksys_read+0x10/0x10 [ 395.623515][T12371] ? rcu_is_watching+0x12/0xc0 [ 395.628263][T12371] do_syscall_64+0x10b/0xf80 [ 395.632838][T12371] ? clear_bhb_loop+0x40/0x90 [ 395.637495][T12371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.643399][T12371] RIP: 0033:0x7fea2459cdd9 [ 395.647806][T12371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.667394][T12371] RSP: 002b:00007fea25486028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 395.675787][T12371] RAX: ffffffffffffffda RBX: 00007fea24815fa0 RCX: 00007fea2459cdd9 [ 395.683741][T12371] RDX: 00000000000000a3 RSI: 00002000000000c0 RDI: 0000000000000004 [ 395.691699][T12371] RBP: 00007fea24632d69 R08: 0000000000000000 R09: 0000000000000000 [ 395.699646][T12371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 395.707680][T12371] R13: 00007fea24816038 R14: 00007fea24815fa0 R15: 00007fff65969738 [ 395.715659][T12371] [ 395.718731][T12371] Kernel Offset: disabled [ 395.723045][T12371] Rebooting in 86400 seconds..