last executing test programs: 9.697329597s ago: executing program 3 (id=1159): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r1 = epoll_create$auto(0x3e) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0x81}, 0x4000003, 0x108) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) r5 = syz_clone(0x80008000, &(0x7f0000000240)="7c01bf47f6aeef0d2a7ef75d6e8fe12433496032f3c6e68a69e801dda04f4153a76426473ced240e526ba52dd5113f38287f39061411a77e90c8c7be9b122437fa966f0b317cade2e1881c1e6c325a6cd2add3ff5e43b7466c672d7cd5f5655c61fcee5f075033f798", 0x69, &(0x7f0000000080), &(0x7f00000002c0), &(0x7f0000000580)="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") sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001580)={0x24c, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x1021}, @NBD_ATTR_SOCKETS={0x224, 0x7, 0x0, 0x1, [@nested={0x220, 0x4f, 0x0, 0x1, [@generic="e72c3d5ce507f0933931a6df4a7b0b900064f4fb401ea0353cbc4bcbea1c1b4eeaeb0d9454658e39b949dc81b2a4e6aa0456db4ad8e7", @typed={0x8, 0xd2, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x37}}, @typed={0x8, 0xdb, 0x0, 0x0, @u32=0xb}, @generic="0961539c3081", @typed={0x8, 0x152, 0x0, 0x0, @pid=r5}, @nested={0x1bd, 0xcb, 0x0, 0x1, [@generic="ffdff69b8dacb922f899697e1e0b649a2bf96a1f0ecd4f4db897df42bcb12cd727b2311aaa9a746acc427c5c580d9d7c70c02587225336", @generic="8c3debcec6a8e1098afffced28c6bdb630f91986d0dcd0d5302b850de52e59fc5c02cfccaf76abb98cb18dbd83da4967febf4822d1a061a4a0167d957f5caf394d41e251cf7c9046cda694e9397b8965fc82a6d8d6764292caca21c18260d719a4eceb1f9a8cddf9a32c6a0fc7b7e7aa3d8b0a2bc0cc33afec1637ea2039e11daba12b3ba216bba37dec", @typed={0xf8, 0xa8, 0x0, 0x0, @binary="60672a262dab9ca7f59d84a45cf22182dcf2f31c8b545d91f4d292fb2ef65f49bfcb079fb22521768a3a21c34f4e927b9f38806b54c1f9f8fdc2e53339c50f761bdf29961b837d89ad656049d90bddff78bbba024b613de9cb0299a3208b2866939de14a825e9119b9d508d04556bb43dc4867e699d9cea4a8193cbf1734103eecc22b04f7952a92cca5fe185a5f29abd7a08c03f0663010eeba23e6f92b737ddcb3db1dda95dc50edc9d991663d862c1d48f8f7686fbd115cd4d2f970b09bd7c83f40e96562f197ee7ba69ef28b1711564bab67bc2644b0987d10a8b6b8174c45a9099162a99d046a38f49ace6aa0c63151fd44"}]}, @typed={0x8, 0x2e, 0x0, 0x0, @u32=0x9}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x24c}, 0x1, 0x0, 0x0, 0x40080}, 0x20040004) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x100000000000033, 0x0) fsopen$auto(0x0, 0x1) getsockopt$auto_SO_PEERCRED(r2, 0x5, 0x11, &(0x7f0000000140)='(z:](,-\',%\'\\:\x83\x00', &(0x7f0000000180)=0x7) sendmsg$auto_NBD_CMD_DISCONNECT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8020000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000056e5178b17556afc19f6ebf59f63e8baac682194e8723214990ea1e6c2d71eb00e99b00d0e6d3cb91d502336ebbca25e", @ANYRES16=r4, @ANYBLOB="040029bd7000ffdbdf250200000005000a0024000000"], 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x20000000) epoll_ctl$auto(r1, 0x1, r0, 0x0) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps\x00', 0x4000, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) 9.095705198s ago: executing program 3 (id=1161): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) read$auto(0x3, 0x0, 0x8080) r1 = bpf$auto(0x7, &(0x7f00000000c0)=@raw_tracepoint={0x9, 0x0, 0x0, 0x6}, 0x3d) socket(0xa, 0x1, 0x100) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/khugepaged/alloc_sleep_millisecs\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000000c0)='5', 0x1) set_mempolicy$auto(0x1, &(0x7f0000000000)=0x4, 0x21) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) write$auto(0x3, 0x0, 0x100082) setsockopt$auto(r1, 0x4, 0x5, 0x0, 0x2) setsockopt$auto(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2000000008000) r3 = open(&(0x7f0000000000)='./file0\x00', 0x222c0, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x20, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty18\x00', 0x40001, 0x0) write$auto(0x3, 0x0, 0xfdef) ioctl$auto(0x3, 0x5457, r3) 7.890499483s ago: executing program 3 (id=1167): r0 = socket(0x1d, 0x3, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000080), r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x4000000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0xa, 0x6) (async) r2 = socket(0x2, 0x1, 0x0) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a) (async) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x5, 0x20000000) socketpair$auto(0x203d, 0x8, 0x3b7, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7) mmap$auto(0x0, 0x400007, 0xde, 0x9b72, 0x2, 0x8000) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/hugepages/hugepages-2048kB/nr_overcommit_hugepages\x00', 0x1c9282, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) (async) write$auto(0x3, 0x0, 0xfffffdef) socket(0x2, 0x80002, 0x73) (async) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$auto(0x3, 0x4058534c, 0x38) (async) write$auto(0x3, 0x0, 0x100085) sendmsg$auto_NFC_CMD_DEV_UP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="080027bd7000fedbff250200000008000d00120d000008000400ff01000005000a0005000000060011000100000005000c000100000014a9dbf2220e730b5a930e3ef4ad1cdfbe6227ff8ceabeffe0b1010000000000000048f3887b8824a70b6f3267cc08b97c65094ac62b84394589b3"], 0x3c}, 0x1, 0x0, 0x0, 0x48004}, 0x8000) 7.092796921s ago: executing program 3 (id=1170): setresuid$auto(0x8, 0x8, 0x0) r0 = setfsuid$auto(0xee00) setreuid$auto(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000340), r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090027bd7000fbdbdf250300000008000800", @ANYRES32=r3, @ANYBLOB="27000180"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) fsconfig$auto(r1, 0x2, &(0x7f0000000180)='\x00', &(0x7f0000000580)="10ab6b39a25e5d9c4947936e05c1ebf9895356b0a5fc915241b26bebe1bf3648ecb6260c4d40bcaaf9620450e0f236d9cf2e9bfa15663032904f14a0bfebeb6f41d8f77bd0bca982dfe6b49e308e606721133b53711ed21bb9e1e32f4be7a7c60b1e11a84523b8f0f030b169292f0b65a26107a850d0b970a474f1e71b47e5ca3b8343ea7d7b90f3557fd5f312dc8058", 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(&(0x7f0000000140)=0x2, 0x800) read$auto(0x4, 0x0, 0x80) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r1) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0x4) mmap$auto(0xc, 0x20009, 0x5, 0x14, 0xffffffffffffffff, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x3, &(0x7f0000000440)={{0x8, 0x6}, {0x8, 0xc5e}, 0x100000011, 0x3, 0x5, 0xf9, 0xfffffffffffffffc, 0x5, 0x6274, 0x9, 0x0, 0xb, 0x35d, 0x439c, 0x9, 0x7}) unshare$auto(0x40000080) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/tainted\x00', 0x28002, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000007) 6.434328594s ago: executing program 1 (id=1174): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x206a41, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000180)='7\x00\\\xa0\x04|4\x00\x00\x03\x00\x00\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\x00rRVr\xc4O\xdc1\x9b%\x10Z\'\xb9\'\xa3stC=\x85\xc6\xf6\x13 \xeb\xff%\x11\x82\x05\xdfV\x02\xca&\xd8$<\xab&\xc8B-\xcc\x15\x04&\x13;\xfe\xbdQ\xaa\x16o\x1f\xc7\x94\xa3\xc9\x9a\xe1d\xf5\n\xe2\x88\x84\vT?\x98\xa2\x00'/206, 0x5) setfsgid$auto(0x0) keyctl$auto(0x1e, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1) 6.340082826s ago: executing program 1 (id=1175): mmap$auto(0x0, 0x400000, 0x7, 0x19b72, 0x5, 0x9000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x5, 0xdf, 0xeb1, 0x401, 0x8000) (async) r0 = socket(0xa, 0x3, 0x3a) r1 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_map_fd=r0}, 0xa3) close_range$auto(0x0, r0, 0x2) (async) socket(0xa, 0x2, 0x73) (async) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2c01, 0x0) ioctl$auto_SOUND_MIXER_READ_RECMASK2(r2, 0x80044dfd, &(0x7f00000014c0)) (async) socket(0x1, 0x5, 0x0) (async) select$auto(0x5, 0x0, &(0x7f0000000100)={[0x9, 0x200, 0x0, 0x8000000000000201, 0x9, 0x3, 0x6, 0x7, 0xd886, 0x5e58296b, 0x341, 0x41, 0x7, 0x200, 0x8, 0xc]}, 0x0, 0x0) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, 0x0, 0x8000000000000001, 0x0, 0x0) madvise$auto(0x9, 0x8, 0x3) (async) msgrcv$auto(0x0, 0x0, 0xff9, 0x1, 0x3) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) 5.365988513s ago: executing program 2 (id=1179): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x4000) read$auto(0x3, 0x0, 0x8080) socket(0x2c, 0x1, 0x100) write$auto(0x3, 0x0, 0x9) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptya1\x00', 0x20080, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x1000, 0x0) ioctl$auto(0x3, 0x5420, 0x38) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x3) ioctl$auto_SNDCTL_TMR_CONTINUE(r1, 0x5407, 0x0) fsconfig$auto(r0, 0x800, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_abort_count\x00', 0x0, 0x0) read$auto_ptdump_curusr_fops_(0xffffffffffffffff, &(0x7f0000001280)=""/228, 0xe4) write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, &(0x7f0000000100)="624d1bfe0c60b4342a595046ab5c98199adf5fe5c8ca1812e57c9cfc87260600de0500e8fdffff08", 0x28) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004800)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x40044) syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), 0xffffffffffffffff) read$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0xa, 0x75) socket(0x2, 0x1, 0x84) connect$auto(0x3, 0x0, 0x55) mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff) 5.141456667s ago: executing program 1 (id=1180): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0x21, 0x5, 0x7fff) getsockopt$auto(r0, 0x84, 0x1, 0x0, &(0x7f0000000280)=0x17d) 4.988155753s ago: executing program 1 (id=1182): mmap$auto(0x0, 0x400008, 0xdf, 0x1b, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0x5, 0x0) r0 = socket(0xa, 0x801, 0x6) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0xa, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0xa, 0x0) open(0x0, 0xa240, 0x15e) open(0x0, 0x161342, 0x100) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x4ab8f800, 0xa0009, 0x4000000000db, 0x11, 0xffffffffffffffff, 0x18002) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfff) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="acfead850ed82b001f5d4026e8ef89bcd6b20cd6a953dc4f1799a1d6713d025dab55255fe4af00bc2e774683d44abf3c38cbc31aba2650a425f977a3cdff5e5e37d0b116fda9aeded8d83ea4ffd2ef20cc4e67", @ANYRESOCT=r1, @ANYRESOCT=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x4010}, 0x44000) read$auto(r2, &(0x7f0000002300)='MAC802154_HWSIM\x00', 0xfdef) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/binderfs/binder0\x00', 0x102, 0x0) ioctl$auto_BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) select$auto(0x1, 0x0, 0x0, 0x0, 0x0) r4 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0) read$auto_state_fops_(r4, &(0x7f0000000180)=""/61, 0xfffffeeb) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 4.62194584s ago: executing program 2 (id=1184): mmap$auto(0x0, 0x2020005, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0xe8) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x400000000000000, 0xa, 0x8, 0x17, 0xffffffffffffffff, 0xf9) r2 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mixer1\x00', 0x200, 0x0) memfd_secret$auto(0x8) ioctl$auto_FS_IOC_UNRESVSP64(r2, 0x4030581e, 0xfffffffffffffff9) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/active_slave\x00', 0xa800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000000)=""/41, 0x29) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, &(0x7f0000000040)={0x5c0b, 0x9, 0x81, 0x7, 0x2f2, 0xffffffffffffffff}) sendmsg$auto_OVS_DP_CMD_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000ffdbdf250100000008000900", @ANYRES32=r6, @ANYBLOB="08000200", @ANYRES32=r7, @ANYBLOB="110001006f76735f12120000000007000000000008000200", @ANYBLOB="b26e1dd5426ede2a709f359e8e96beee7e5145a2ba9f638080092694299c2e7b4772fb370c9160913d5ab61b3e181e2eebbe97cec7695c75ff7479cce602371db272049e9632ca7df2177e6de1ed61663da6f1456e05ef29000c7a7ce86d497d54ed1e8477623f28701f504b68dd0ca119"], 0x40}, 0x1, 0x0, 0x0, 0x4015}, 0x2000000) mmap$auto(0x101, 0x400048, 0x12, 0x200000000000005e, 0x2, 0x25) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) lstat$auto(0x0, &(0x7f0000000180)={0x8004, 0x802, 0x9, 0x63, 0x0, 0x0, 0x0, 0x3, 0x7ff, 0x800000000100002, 0x2, 0x6, 0xc, 0x3, 0x1c, 0x8, 0xb}) fsconfig$auto(0xffffffffffffffff, 0x4e3, 0x0, 0x0, 0x0) mmap$auto(0xa55, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x403c6f2b, 0x0) read$auto(0x3, 0x0, 0x100000001) prctl$auto(0x23, 0x7, 0x7fffffffefff, 0x0, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r8 = clone3$auto(&(0x7f0000000180)={0x9, 0x7, 0xa5e7, 0x1, 0x3, 0x8000000000000000, 0x800000000000010, 0xbffffffffffffffa, 0x10000, 0x1ff, 0x5185}, 0x58b8) prctl$auto(0x3e, 0x1, r8, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) 3.863681891s ago: executing program 3 (id=1186): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/devices/virtual/sound/ctl-led/speaker/card0/attach\x00', 0x1, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0) read$auto(r0, 0x0, 0x3) write$auto(r0, 0x0, 0x9) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x4) r1 = socket(0xa, 0x2, 0x3a) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x5fea95a913ef5bc9}, 0x1, 0x0, 0x0, 0x4000045}, 0x20044040) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000009c0)='/proc/self/net/icmp6\x00', 0x8000, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0x400000000ff, 0xa, 0x4, 0xaab, 0x5, 0x7]}, 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000e80)=""/215, 0xd7) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xd0, 0x0, 0x4) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) r3 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) pread64$auto(r3, 0x0, 0x101, 0x81) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0xfffffffffffffff7, 0x100, 0x3ff, 0xb, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000f40)={'batadv0\x00'}) 2.951229189s ago: executing program 0 (id=1187): r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) ioctl$auto_USB_RAW_IOCTL_EVENT_FETCH(r0, 0x80085502, 0x0) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x401, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) writev$auto(0x0, 0x0, 0xb) quotactl$auto(0x0, 0xfffffffffffffffc, 0x7, 0x0) socket(0x2, 0x3, 0x2) setsockopt$auto(0x3, 0x0, 0xcf, 0xfffffffffffffffc, 0x4) pipe$auto(0x0) dup2$auto(0x5, 0x4) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x101083, 0x0) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000080), 0x602241, 0x0) ioctl$auto_SNAPSHOT_PLATFORM_SUPPORT(r1, 0x330f, 0x0) read$auto(0xffffffffffffffff, &(0x7f00000000c0)='/dev/raw-gadget\x00', 0x5) write$auto(0x6, 0x0, 0x100000001) setsockopt$auto(0x3, 0x1, 0x2a, 0x0, 0x9) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 2.826492005s ago: executing program 2 (id=1188): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) madvise$auto(0x110c230000, 0x1, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth1_vlan\x00'}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x23, 0x4, 0xfffffffe) socket(0xa, 0x3, 0x84) r0 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/kvm/halt_poll_fail_hist\x00', 0xa2500, 0x0) read$auto_stat_fops_per_vm_kvm_main(r0, 0x0, 0x0) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/binderfs/binder0\x00', 0x0, 0x0) ioctl$auto_BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, 0x0) mmap$auto(0x0, 0x20009, 0xfffffffffffffffd, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0x1d, 0x1, 0x7fff) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x9e6, 0x0) socket(0x1d, 0x2, 0x6) writev$auto(r3, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) 2.757153785s ago: executing program 1 (id=1189): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9, 0x100010, r0, 0x6) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/modalias\x00', 0x80500, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) (async) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) (async) read$auto(0x3, 0x0, 0x7fffffff) r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x1a1000, 0x0) unshare$auto(0x40000080) (async) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) (async) prctl$auto(0x4000002a, 0x3, 0x0, 0x1, 0x0) (async) write$auto(0xffffffffffffffff, 0x0, 0xe43) (async) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x640, 0x0) ioctl$auto_XFS_IOC_ALLOCSP(r2, 0x4030580a, &(0x7f0000000000)={0x1, 0x1, 0x1, 0xfffffffffffffff9, 0x3, 0x0}) read$auto_mon_fops_binary_mon_bin(r3, 0x0, 0x0) (async) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000100)='/dev/usbmon13\x00', 0x0, 0x0) (async) ioctl$auto_MON_IOCG_STATS(r3, 0x80089203, 0x0) mmap$auto(0x15d, 0x800000000000000a, 0x1, 0x7f, 0x602, 0x6bf) (async) close_range$auto(0x2, 0x8, 0x0) (async) r5 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) ioctl$auto(r5, 0x3b84, 0xffffffffffffffff) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/rxrpc/stats\x00', 0x401, 0x0) write$auto(r6, &(0x7f0000000000)='j', 0x100) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_DEL_TXSA(r7, &(0x7f00000056c0)={0x0, 0x0, &(0x7f0000005680)={&(0x7f0000000200)={0x20, r8, 0xbb484b3ccf0b22b, 0x70bd2c, 0x25dfdbfe, {}, [@MACSEC_ATTR_SA_CONFIG={0x4}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000050}, 0x40094) r9 = openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/options/test_nop_refuse\x00', 0x200, 0x0) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000010c0)={0x1788, r8, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@MACSEC_ATTR_SA_CONFIG={0x111e, 0x3, 0x0, 0x1, [@generic="5c695207b17df57ee1f442918a", @nested={0x8, 0x7e, 0x0, 0x1, [@nested={0x4, 0x126}]}, @typed={0x14, 0x8, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x35}}, @typed={0x8a, 0x108, 0x0, 0x0, @binary="44c7e2ae32ebc5c808bc040caadab4451bf7ed1a9dbd862d4d18c9a9e3504c77989c1b9264caf8a1bc1d4361e12083aa5abbfc16f30a7a256a9b00bd57afa4f3e266963c80a31cb7c210a83bb5e49ec9dd4a8d48c107a9d7a5549fdf21d1d9aab1f44f173b08ed84c852e90e386d6f8195c40352baaf7c729392dd829455b03a9cfc7ec34b59"}, @typed={0x8, 0x5c, 0x0, 0x0, @pid=r4}, @nested={0x28, 0x41, 0x0, 0x1, [@typed={0x8, 0xda, 0x0, 0x0, @u32=0xfffffffa}, @typed={0x8, 0xa0, 0x0, 0x0, @fd=r9}, @typed={0xc, 0xb5, 0x0, 0x0, @u64=0xb7b8}, @nested={0x4, 0x44}, @nested={0x4, 0x9d}]}, @generic="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", @generic="34360acfb80eb8f4d162acbc48eedd0a6abf5bcb1fdbf4e882dc5916ad74bc526ec25cde1351c72582eb3818ca01f49d0140c3e22c"]}, @MACSEC_ATTR_SA_CONFIG={0x9a, 0x3, 0x0, 0x1, [@generic="13f8ccb859379866d2f01e9aa660d060e893518c916f03065ea9fd177e9b3a06a3b7d22822809c9158bd42dc4e19d40fe869e82f5633331c4f53970437457c006b6dc606387041413e90e06e103a370ee39fde4698b55fc1d817a1428f7c6723f80fb36f3e9e4d464fe61052d0c6f88407e862d5c5d710cfb62b4c44fb29bf454e9ce8422c21047110f42988", @generic="a610be607d11f3db2099"]}, @MACSEC_ATTR_SA_CONFIG={0x5b7, 0x3, 0x0, 0x1, [@generic="9b83b6e80bc73d6e6d4281d8d62eb9f231845ae70a8ecff65ebe5941464f1467f205ac139f9aeaf3bc04544fd092e9a5093284eba58c832c34c47d908ed1331dbf1df085fa6da09fdc273c3d158ad26d70cc74bc5b41e28f2b7940dde1f5fd19147736e30dd92c702c21fe27ef2681c134819d5c98fa98ff3c18071e1226514617dc0c3346cfd7c0a631e40ec40d13c5eee3f13fdf7a1a83f2a3e27ece84aeba18ae1243940e6f8c0513dff6a406a000f5b94f58663c", @nested={0x278, 0x56, 0x0, 0x1, [@nested={0x4, 0x60}, @nested={0x4, 0x126}, @generic="1dcf7ee2940d83a4dbc945dc265567ea6295a09f1f1b2a6f5a8edc53731e564666e61de1b96a7fb10b8a409ed7a810507c2608cca54fa1ecda95332d5d", @typed={0x8, 0x1f, 0x0, 0x0, @u32=0x7}, @typed={0x8, 0x14a, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0x35, 0xb1, 0x0, 0x0, @binary="8159153fb0c7b630de440fe9f80ccba3fd2b79e14640ada12ee362a79359b16a3f20865d57bdf631d246472c9745b26607"}, @generic="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", @generic="367f5ae6c681396e6b5ba92bafb42708fc7a545e35af7d3e15709e0a850e78d44b400896d59f0586f3e46623c9f7dff29c8d19018e0083f65ae952711095b39a198efefbaf5131913f4e7b5d59c9f14d1a6909ab818acc4c69345294cf0c51d3fbf582aa8a87f4f263233ec77c35df94bf0036cd3439cab753a1973b6d00ad95257e16c60be9857bbcdee53de1bda0814140cefa3b7da34a8a7ea022f4e1875fdca8a4d12d27a0c745847b1fa5932c6d298ddfcfa073f1ea4aa0570a3629e385fc2ef997c92f20b1dbb93e5904290a27c0d37a1b220819a45f03401e5339051211d9ade626ea554aea"]}, @generic="6b2b49c85b79f6f70190c1a2df28490211d5f151b57d843aa9cee5e7fc3677c87f84c365ac34cb74d33275208a7bf6a3174057e179bd85e1ff972aaf4ed23b3f56195b2901a3a04202b16cc6ac6476980dd6fe34ac5a406bc217e146a92e07c685e160ba954161b838eb9a6b45e05893e7b6d31235fc8adbbf5ae4e82cefe53ba256975d810f34539d1b71626339fe05f8f1654d54c1ff1a732ce3bc2fd4f3a305b013533c867006d5cf2a112d6efa566d2e", @typed={0x4, 0x13b}, @generic="6354057a59def648f39d394c6e3b641747fe166523b004b689a9fdb4a04f582d2b739040d81fa075935cf990b1fb9e54d298b0d3b85059d623960ef042630ab4", @nested={0xda, 0x6f, 0x0, 0x1, [@nested={0x4, 0xd9}, @nested={0x4, 0x3b}, @nested={0x4, 0xc0}, @generic="f5dbeedd0d1c4c724f6f92c591f66e0fef10dbfcf28488a622bfb7f41e401aeb465f508df3eb4676da371ed92781b5bbd7ac9756be97a26c6a0faa50955b79aef31553f0fd043c4781167bd0239494c51bfa086190620a3147e57ac8f130f8ef6d3b67ba86e25e2d322014bb468281942b5a18f0a1850a66dc5544f6755c7e55cdc4878ebc94ae0f028eb80145244b886bf75f4871d638ff484a93973705d0a1f6687f84fc6532eaeddcfa6cbc02351070d319e12d3c9be47b37e11d77529cf2f7aaaa4ac5cd6ff4365c"]}, @generic="741a9911f33b6d4e0e15541e43cff9f8177796501f0caf864773e79cf08b5816ac4c6c706f96a6131cbec1116c6931c39be6238f6595bf285e5a90f6da1786e2cf1ee6169ee19667945889362494378d632816ee0dcc316fcc0d1402df82896a512c12bcb83cb4a1efd12f2069e92395e420aea92bafe957eaef4a541e7b4276e46addd274c169e87b4d8b4f0299b51e41129d20a1e74384efcdc67a601ce047c1a97abed3e10c5fd0d362176db2492ef8a1f3"]}]}, 0x1788}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001) 2.579177069s ago: executing program 1 (id=1190): mmap$auto(0xfffffffffffffffe, 0x2020009, 0x100003, 0x18, 0xfffffffffffffffa, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0x40040, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x5) fcntl$auto(0x3, 0x4, 0xa553) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000002c0)={{@inferred, 0x5, 0x9, 0x1, "4941aa833e2fc65b6b3cf7cec76d6778ad8eac3cda35ba9c2b2d43eeb0dc59c8dd3500f11581916caa0d3053"}, 0x4, 0xfffffff9, 0x1, @inferred, @enumerated={0xffff, 0xffe, "4bd04167d52dbe3758dcb7641f58661870525adcaedaa5deaa336a58b7382f979a0ff0b3d9583c08610104000049d9f994ef5578e78507d4f25cd03a4c4b5700", 0x9, 0x3fd}, "6cc1888a6393f1b4285854c5368de438f8cc142ef6df1259b05ba1183bedbd31b642b4051bc7955610c61c329794e5311121c760cb8211c78e6947a99807bcc1"}) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0xb) madvise$auto(0x0, 0x2003f0, 0x15) clone$auto(0xff2d, 0xffff, &(0x7f0000000080)=0x9, &(0x7f00000000c0)=0x8, 0x4) rt_sigqueueinfo$auto(0x0, 0xe, &(0x7f0000000000)={@siginfo_0_0={0x76bb, 0x3, 0x4, @_sigfault={0x0}}}) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) mmap$auto(0x0, 0x20009, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) read$auto(r2, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketcall$auto_SYS_RECVFROM(0xc, &(0x7f0000000040)=0x2) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec26\x00', 0x88000, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, 0x0) socketcall$auto_SYS_RECVFROM(0xc, &(0x7f0000000080)=0xbf5) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/options/test_nop_refuse\x00', 0x5, 0x0) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000100)="58e7a2329fbdfb4986a26faf4182257497e4856e4a66e5177fa5d4eb558a61b740", 0xffffffff}, 0x6, 0x0) r5 = clone3$auto(&(0x7f00000000c0)={0x0, 0xd9, 0x9, 0x7, 0x2, 0x8, 0x8000, 0x2, 0x493, 0x0, 0x2}, 0x2) r6 = geteuid() rt_sigqueueinfo$auto(r4, 0x6, &(0x7f0000000280)={@siginfo_0_0={0x1, 0x6, 0xfffff8ac, @_sigchld={r5, r6, 0xfffffffd, 0x88d, 0x6}}}) 2.064663934s ago: executing program 0 (id=1191): r0 = socket(0x21, 0x2, 0x2) ioctl$auto(0x3, 0x40a0ae49, r0) 1.922422049s ago: executing program 0 (id=1192): r0 = socket(0x1e, 0x1, 0x0) bind$auto(r0, 0x0, 0x66) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mtd0ro\x00', 0x10400, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x14, 0x944, 0x1ffe0, 0x3, 0x6, 0x401, 0x9, 0x5, 0xfff, 0x7, 0x8001, 0x2, 0x5, 0x3, 0x40, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3, 0x0, [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x800000000, 0x4]}, 0x1fe, 0x81) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='T'], 0x1ac}, 0x1, 0x0, 0x0, 0x801}, 0x40000) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) fanotify_mark$auto(0xffffffffffffffff, 0x0, 0xfffffffffff8fbff, 0xffffffffffffffff, 0x0) close_range$auto(r1, 0xfffffffffffff000, 0x6) prctl$auto(0x3e, 0x20001, 0x0, 0x1, 0x0) mmap$auto(0x7, 0x400008, 0xdf, 0xd2, r1, 0x2) r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCSCLOCKID(r4, 0x400445a0, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) 1.043538631s ago: executing program 2 (id=1193): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x1) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x2, 0x8, 0xc, 0xe3, 0x4000000002, 0x3}, 0x6f4) bpf$auto(0x18, &(0x7f0000000040)=@raw_tracepoint={0x0, 0xffffffffffffffff, 0xffffffff, 0x800}, 0x92) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x1, {{0x2, 0x4}}}, 0x6a) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) unshare$auto(0x40000080) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/geneve0/disable_policy\x00', 0x40180, 0x0) close_range$auto(0x2, 0x8, 0x0) semctl$auto(0xa, 0x2, 0x13, 0xde) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) r2 = pidfd_open$auto(0x1, 0x0) setns(r2, 0x60020000) getcwd$auto(0x0, 0xffffffffffffffff) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100) r3 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x80000401, 0x4000, 0x0) write$auto(r1, 0x0, 0x5) socket(0x11, 0xa, 0x9) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) sendmsg$auto_OVS_FLOW_CMD_SET(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 687.451317ms ago: executing program 0 (id=1194): keyctl$auto(0x1e, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1) 548.730079ms ago: executing program 0 (id=1195): r0 = socket(0xa, 0x1, 0x0) (async) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/rpc/use-gss-proxy\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, 0x0, 0x20) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x408000, 0x0) read$auto_nvram_misc_fops_nvram(r2, &(0x7f0000000100)=""/4096, 0x1000) (async) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) fcntl$auto_F_UNLCK(r3, 0x9, 0x2) (async) ioctl$auto(r3, 0x9000643c, 0xc35) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) futex_waitv$auto(&(0x7f0000000180)={0x3fb, 0x6, 0x2, 0xfff}, 0x3, 0xbffffffc, 0x0, 0x81) (async) bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, 0x2, 0x4, 0x0, 0x85, 0x7, 0x9, 0x6, 0x8001}, 0x101) io_uring_setup$auto(0x6, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/sound/ctl-led/speaker/mode\x00', 0x182, 0x0) (async) sendfile$auto(0x3, 0x3, 0x0, 0x2000007) keyctl$auto(0x20000000000001c, 0xffffffffffffffff, 0x363, 0xa, 0x8000000000000007) setsockopt$auto(r0, 0x29, 0x12, 0x0, 0x56b) 315.088084ms ago: executing program 0 (id=1196): r0 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev$auto(r0, &(0x7f0000000bc0)={0x0, 0x81}, 0x3) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/rose14/statistics/rx_length_errors\x00', 0x0, 0x0) write$auto_cachefiles_daemon_fops_internal(0xffffffffffffffff, &(0x7f0000000300)="a04f", 0x2) unshare$auto(0x40000080) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000040)=0x5) r2 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0xa0080, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r2, 0x0, 0x0) readv$auto(r1, &(0x7f0000000080)={&(0x7f0000000440)="0685b1128b8bbf344b0bd8f610e0817b0704c2dd5c1bad84b13d1db6cdf153471aa8870ff559cc27a1183b74370fc3d555d9ce7f630eb51b42c8c169d6490dd63cbbbc2d1bda32f17808adb12674ba5c6a1a4d0a92df50c08fb59bfd3148e074cc5d0f43e9cdde4b0201e0af30a343ec46a0b5dfc4b80b96e3716f77a7576a8a9e30c55cc8c2052704a7aa8e7a7bc23ab4e5fe0498e1c08d0c8f76cd101f1c66419550f740546fd3d19ca0031010a5007e3dc5a347b92825cb9bdaec2ecc6fb8dff35cd7c41a9c5e7cf9ea8756f164b9d6", 0x99}, 0x5) unshare$auto(0x40000080) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/set_event\x00', 0x101901, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:05/wakeup/wakeup4/active_time_ms\x00', 0x290480, 0x0) sendfile$auto(r3, r3, 0x0, 0x9) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r6 = socket(0x2, 0x80802, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, r6) sendmsg$auto_NL80211_CMD_ADD_LINK(r5, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x44) r7 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) sendmmsg$auto(r7, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) ioctl$auto(0xffffffffffffffff, 0x541b, 0x24) recvmmsg$auto(0x3, 0x0, 0xfffe, 0x6, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) 233.178472ms ago: executing program 2 (id=1197): openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = ioctl$auto_TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x7) r1 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cpu/1/msr\x00', 0x10100, 0x0) ioctl$auto_BTRFS_IOC_FORGET_DEV(r0, 0x50009405, &(0x7f00000000c0)={@inferred=r1, "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"}) (async) ioctl$auto_BTRFS_IOC_FORGET_DEV(r0, 0x50009405, &(0x7f00000000c0)={@inferred=r1, "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"}) 98.297773ms ago: executing program 2 (id=1198): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0x40001000f42c, 0x586) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x9}, 0x7) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000240), 0x44000, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) symlink$auto(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') r2 = io_uring_setup$auto(0x1, 0x0) write$auto_fops_init_pkru_pkeys(r2, &(0x7f0000000280), 0x0) process_madvise$auto_MADV_GUARD_INSTALL(r2, &(0x7f0000000140)={&(0x7f00000000c0)="982368606f1a046193eed17b7e285e33a5c5627a9cce75dab2826ad05223e852a85ec00552d602889efe0c463dab5de9a449f738404d08d996b7fd620a801f8500b739", 0x2}, 0x40, 0x66, 0x2) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/members\x00', 0x3a141, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) 0s ago: executing program 3 (id=1199): inotify_init1$auto(0x3000000000000) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x54be, 0x7ffc, 0x7) unshare$auto(0x20000080) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x4400, 0x0) syz_clone3(&(0x7f0000000040)={0x2c832200, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) kernel console output (not intermixed with test programs): x106/0xf80 [ 197.612140][ T7978] ? clear_bhb_loop+0x40/0x90 [ 197.612176][ T7978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.612200][ T7978] RIP: 0033:0x7fbabab9bf79 [ 197.612226][ T7978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.612263][ T7978] RSP: 002b:00007fbabbaed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 197.612286][ T7978] RAX: ffffffffffffffda RBX: 00007fbabae16090 RCX: 00007fbabab9bf79 [ 197.612303][ T7978] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 000000000000000c [ 197.612318][ T7978] RBP: 00007fbabac327e0 R08: 0000000000000000 R09: 0000000000000000 [ 197.612337][ T7978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.612349][ T7978] R13: 00007fbabae16128 R14: 00007fbabae16090 R15: 00007ffe4fc1d7c8 [ 197.612382][ T7978] [ 198.345097][ T5832] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 198.496778][ T8000] random: crng reseeded on system resumption [ 201.465406][ T8065] input: jJǸ-9%vJ86 as /devices/virtual/input/input7 [ 202.295784][ T8084] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 202.648473][ T8087] snd_virmidi snd_virmidi.0: control 5:9:1:IA>/[k/[k [ 212.357259][ T7957] dump_stack_lvl+0x100/0x190 [ 212.357302][ T7957] dump_header+0xfb/0x606 [ 212.357331][ T7957] oom_kill_process.cold+0xd/0x330 [ 212.357363][ T7957] out_of_memory+0x340/0x14f0 [ 212.357404][ T7957] ? __pfx_out_of_memory+0x10/0x10 [ 212.357448][ T7957] mem_cgroup_out_of_memory+0xc6/0x130 [ 212.357479][ T7957] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 212.357513][ T7957] ? find_held_lock+0x2b/0x80 [ 212.357559][ T7957] ? do_raw_spin_unlock+0x145/0x1e0 [ 212.357595][ T7957] ? _raw_spin_unlock+0x28/0x50 [ 212.357637][ T7957] try_charge_memcg+0x652/0xc90 [ 212.357682][ T7957] ? __pfx_try_charge_memcg+0x10/0x10 [ 212.357719][ T7957] ? find_held_lock+0x2b/0x80 [ 212.357755][ T7957] ? rcu_read_unlock+0x17/0x60 [ 212.357791][ T7957] ? rcu_read_unlock+0x17/0x60 [ 212.357841][ T7957] charge_memcg+0xa6/0x280 [ 212.357878][ T7957] __mem_cgroup_charge+0x2b/0x1e0 [ 212.357906][ T7957] shmem_alloc_and_add_folio+0x451/0xd40 [ 212.357956][ T7957] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 212.357993][ T7957] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 212.358036][ T7957] shmem_get_folio_gfp+0x6ab/0x1900 [ 212.358078][ T7957] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 212.358123][ T7957] shmem_write_begin+0x1a4/0x420 [ 212.358161][ T7957] ? __pfx_shmem_write_begin+0x10/0x10 [ 212.358197][ T7957] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 212.358237][ T7957] ? lockdep_hardirqs_on+0x78/0x100 [ 212.358269][ T7957] generic_perform_write+0x292/0xa40 [ 212.358312][ T7957] ? __pfx_generic_perform_write+0x10/0x10 [ 212.358351][ T7957] ? file_update_time_flags+0x373/0x500 [ 212.358382][ T7957] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 212.358419][ T7957] shmem_file_write_iter+0x10e/0x140 [ 212.358469][ T7957] __kernel_write_iter+0x2ac/0x920 [ 212.358514][ T7957] ? __pfx___kernel_write_iter+0x10/0x10 [ 212.358549][ T7957] ? __up_read+0x2c5/0x700 [ 212.358587][ T7957] ? dump_user_range+0x73b/0xb50 [ 212.358625][ T7957] ? copy_mc_enhanced_fast_string+0x6/0xf [ 212.358667][ T7957] dump_user_range+0x3f9/0xb50 [ 212.358710][ T7957] ? __pfx_dump_user_range+0x10/0x10 [ 212.358758][ T7957] ? __pfx_writenote+0x10/0x10 [ 212.358805][ T7957] elf_core_dump+0x2d16/0x3c60 [ 212.358863][ T7957] ? __pfx_elf_core_dump+0x10/0x10 [ 212.358909][ T7957] ? __pfx_event_filter_pid_sched_wakeup_probe_post+0x10/0x10 [ 212.358951][ T7957] ? find_held_lock+0x2b/0x80 [ 212.358988][ T7957] ? 0xffffffffff600000 [ 212.359013][ T7957] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 212.359052][ T7957] ? lockdep_hardirqs_on+0x78/0x100 [ 212.359133][ T7957] ? vfs_coredump+0x27b4/0x5570 [ 212.359166][ T7957] vfs_coredump+0x27b4/0x5570 [ 212.359215][ T7957] ? __pfx_vfs_coredump+0x10/0x10 [ 212.359251][ T7957] ? __lock_acquire+0x4a5/0x2630 [ 212.359297][ T7957] ? lock_acquire+0x1cf/0x380 [ 212.359344][ T7957] ? is_bpf_text_address+0x8a/0x1a0 [ 212.359379][ T7957] ? bpf_ksym_find+0x124/0x1c0 [ 212.359416][ T7957] ? __kernel_text_address+0xd/0x30 [ 212.359450][ T7957] ? unwind_get_return_address+0x59/0xa0 [ 212.359477][ T7957] ? arch_stack_walk+0xa6/0xf0 [ 212.359520][ T7957] ? __sigqueue_free+0xbe/0x2a0 [ 212.359550][ T7957] ? stack_trace_save+0x8e/0xc0 [ 212.359588][ T7957] ? __pfx_stack_trace_save+0x10/0x10 [ 212.359627][ T7957] ? stack_depot_save_flags+0x27/0x9d0 [ 212.359656][ T7957] ? __lock_acquire+0x4a5/0x2630 [ 212.359748][ T7957] ? proc_coredump_connector+0x2d3/0x4f0 [ 212.359777][ T7957] ? __pfx_proc_coredump_connector+0x10/0x10 [ 212.359814][ T7957] ? rcu_is_watching+0x12/0xc0 [ 212.359853][ T7957] get_signal+0x1f2a/0x21e0 [ 212.359892][ T7957] ? __pfx_get_signal+0x10/0x10 [ 212.359913][ T7957] ? __pfx_force_sig_fault+0x10/0x10 [ 212.359947][ T7957] arch_do_signal_or_restart+0x91/0x770 [ 212.359978][ T7957] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 212.360017][ T7957] ? do_user_addr_fault+0x8d6/0x12f0 [ 212.360062][ T7957] irqentry_exit+0x1f8/0x670 [ 212.360091][ T7957] asm_exc_page_fault+0x26/0x30 [ 212.360115][ T7957] RIP: 0033:0x21000 [ 212.360139][ T7957] Code: Unable to access opcode bytes at 0x20fd6. [ 212.360149][ T7957] RSP: 002b:000000000000000a EFLAGS: 00010206 [ 212.360167][ T7957] RAX: 0000000000000000 RBX: 00007fb80be16270 RCX: 00007fb80bb9bf79 [ 212.360183][ T7957] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 212.360198][ T7957] RBP: 00007fb80bc327e0 R08: 0000000000000002 R09: 0000000000000000 [ 212.360213][ T7957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.360227][ T7957] R13: 00007fb80be16308 R14: 00007fb80be16270 R15: 00007ffc3d3f7328 [ 212.360263][ T7957] [ 212.360272][ T7957] memory: usage 307200kB, limit 307200kB, failcnt 26038 [ 212.847548][ T7957] memory+swap: usage 432176kB, limit 9007199254740988kB, failcnt 0 [ 212.856513][ T7957] kmem: usage 2860kB, limit 9007199254740988kB, failcnt 0 [ 212.863652][ T7957] Memory cgroup stats for /syz3: [ 212.863934][ T7957] cache 309350400 [ 212.881390][ T7957] rss 2281472 [ 212.885775][ T7957] rss_huge 2097152 [ 212.915148][ T7957] shmem 309350400 [ 212.918837][ T7957] mapped_file 4096 [ 212.922564][ T7957] dirty 0 [ 212.939670][ T7957] writeback 0 [ 212.942995][ T7957] workingset_refault_anon 1012 [ 212.966161][ T7957] workingset_refault_file 693 [ 212.970880][ T7957] swap 127975424 [ 212.974438][ T7957] swapcached 134729728 [ 212.996339][ T7957] pgpgin 265920 [ 213.000023][ T7957] pgpgout 199033 [ 213.003585][ T7957] pgfault 83651 [ 213.015936][ T7957] pgmajfault 331 [ 213.019517][ T7957] inactive_anon 83460096 [ 213.023762][ T7957] active_anon 228179968 [ 213.044934][ T7957] inactive_file 0 [ 213.048613][ T7957] active_file 0 [ 213.080418][ T7957] unevictable 4096 [ 213.084189][ T7957] hierarchical_memory_limit 314572800 [ 213.114836][ T7957] hierarchical_memsw_limit 9223372036854771712 [ 213.121038][ T7957] total_cache 309350400 [ 213.134922][ T7957] total_rss 2281472 [ 213.138766][ T7957] total_rss_huge 2097152 [ 213.143012][ T7957] total_shmem 309350400 [ 213.174537][ T7957] total_mapped_file 4096 [ 213.191063][ T7957] total_dirty 0 [ 213.194669][ T7957] total_writeback 0 [ 213.205755][ T7957] total_workingset_refault_anon 1012 [ 213.211067][ T7957] total_workingset_refault_file 693 [ 213.230669][ T7957] total_swap 127975424 [ 213.244832][ T7957] total_swapcached 134729728 [ 213.249449][ T7957] total_pgpgin 265920 [ 213.273882][ T7957] total_pgpgout 199033 [ 213.284017][ T7957] total_pgfault 83651 [ 213.294473][ T7957] total_pgmajfault 331 [ 213.315226][ T7957] total_inactive_anon 83460096 [ 213.320003][ T7957] total_active_anon 228179968 [ 213.324668][ T7957] total_inactive_file 0 [ 213.359991][ T7957] total_active_file 0 [ 213.364009][ T7957] total_unevictable 4096 [ 213.389401][ T136] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.398658][ T7957] anon_cost 0 [ 213.434835][ T7957] file_cost 0 [ 213.439845][ T7957] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.398,pid=7973,uid=0 [ 213.471897][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 213.486263][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 213.496166][ T7957] Memory cgroup out of memory: Killed process 7973 (syz.3.398) total-vm:99176kB, anon-rss:3404kB, file-rss:47352kB, shmem-rss:4kB, UID:0 pgtables:220kB oom_score_adj:1000 [ 213.525293][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 213.547045][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 213.555881][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.884964][ T8180] futex_wake_op: syz.1.442 tries to shift op by -2048; fix this program [ 214.216531][ T136] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.316105][ T136] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.615276][ T5823] Bluetooth: hci2: command tx timeout [ 215.867997][ T8170] chnl_net:caif_netlink_parms(): no params data found [ 216.155211][ T8170] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.162379][ T8170] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.179055][ T8184] FAULT_INJECTION: forcing a failure. [ 216.179055][ T8184] name failslab, interval 1, probability 0, space 0, times 0 [ 216.200743][ T8170] bridge_slave_0: entered allmulticast mode [ 216.212623][ T8170] bridge_slave_0: entered promiscuous mode [ 216.251452][ T8170] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.269228][ T8170] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.281728][ T7954] syz.3.398 (7954) used greatest stack depth: 19240 bytes left [ 216.289945][ T8170] bridge_slave_1: entered allmulticast mode [ 216.297296][ T8170] bridge_slave_1: entered promiscuous mode [ 216.354723][ T8170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.389566][ T8170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.523729][ T7952] syz.3.398 (7952) used greatest stack depth: 18920 bytes left [ 216.544473][ T8170] team0: Port device team_slave_0 added [ 216.641042][ T8170] team0: Port device team_slave_1 added [ 216.646234][ T8184] CPU: 1 UID: 0 PID: 8184 Comm: syz.3.438 Tainted: G L syzkaller #0 PREEMPT(full) [ 216.646276][ T8184] Tainted: [L]=SOFTLOCKUP [ 216.646286][ T8184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 216.646302][ T8184] Call Trace: [ 216.646311][ T8184] [ 216.646321][ T8184] dump_stack_lvl+0x100/0x190 [ 216.646366][ T8184] should_fail_ex.cold+0x5/0xa [ 216.646400][ T8184] should_failslab+0xc2/0x120 [ 216.646440][ T8184] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 216.646478][ T8184] ? cache_create_net+0x2b/0x220 [ 216.646513][ T8184] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 216.646542][ T8184] kmemdup_noprof+0x29/0x60 [ 216.646579][ T8184] cache_create_net+0x2b/0x220 [ 216.646609][ T8184] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 216.646636][ T8184] gss_svc_init_net+0x69/0x640 [ 216.646659][ T8184] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 216.646690][ T8184] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 216.646727][ T8184] ops_init+0x1e2/0x5f0 [ 216.646762][ T8184] setup_net+0x118/0x3a0 [ 216.646802][ T8184] ? __pfx_setup_net+0x10/0x10 [ 216.646831][ T8184] ? lockdep_init_map_type+0x5c/0x250 [ 216.646865][ T8184] ? mutex_init_lockep+0x110/0x150 [ 216.646905][ T8184] copy_net_ns+0x46f/0x7c0 [ 216.646941][ T8184] create_new_namespaces+0x3ea/0xac0 [ 216.646993][ T8184] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 216.647022][ T8184] ksys_unshare+0x455/0xab0 [ 216.647056][ T8184] ? __pfx_ksys_unshare+0x10/0x10 [ 216.647102][ T8184] __x64_sys_unshare+0x31/0x40 [ 216.647133][ T8184] do_syscall_64+0x106/0xf80 [ 216.647161][ T8184] ? clear_bhb_loop+0x40/0x90 [ 216.647194][ T8184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.647221][ T8184] RIP: 0033:0x7fb80bb9bf79 [ 216.647245][ T8184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.647271][ T8184] RSP: 002b:00007fb80ca1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 216.647295][ T8184] RAX: ffffffffffffffda RBX: 00007fb80be15fa0 RCX: 00007fb80bb9bf79 [ 216.647313][ T8184] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 216.647329][ T8184] RBP: 00007fb80bc327e0 R08: 0000000000000000 R09: 0000000000000000 [ 216.647346][ T8184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.647362][ T8184] R13: 00007fb80be16038 R14: 00007fb80be15fa0 R15: 00007ffc3d3f7328 [ 216.647398][ T8184] [ 217.071640][ T8170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.106980][ T8170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.140590][ T8170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.174455][ T8170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.183223][ T8170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.218608][ T8170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.299345][ T136] bridge_slave_1: left allmulticast mode [ 217.305693][ T136] bridge_slave_1: left promiscuous mode [ 217.312816][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.324314][ T136] bridge_slave_0: left allmulticast mode [ 217.332059][ T136] bridge_slave_0: left promiscuous mode [ 217.343260][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.629758][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.648869][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.679646][ T136] bond0 (unregistering): Released all slaves [ 217.694886][ T5823] Bluetooth: hci2: command tx timeout [ 217.733152][ T8170] hsr_slave_0: entered promiscuous mode [ 217.742990][ T8170] hsr_slave_1: entered promiscuous mode [ 217.749490][ T8170] debugfs: 'hsr0' already exists in 'hsr' [ 217.755334][ T8170] Cannot create hsr debugfs directory [ 218.340829][ T136] hsr_slave_0: left promiscuous mode [ 218.347475][ T136] hsr_slave_1: left promiscuous mode [ 218.370230][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.385129][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.403341][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.419983][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.476013][ T136] veth1_macvtap: left promiscuous mode [ 218.493690][ T136] veth0_macvtap: left promiscuous mode [ 218.511729][ T136] veth1_vlan: left promiscuous mode [ 218.524115][ T136] veth0_vlan: left promiscuous mode [ 218.853291][ T8235] FAULT_INJECTION: forcing a failure. [ 218.853291][ T8235] name fail_futex, interval 1, probability 0, space 0, times 1 [ 218.907471][ T8235] CPU: 0 UID: 0 PID: 8235 Comm: syz.3.449 Tainted: G L syzkaller #0 PREEMPT(full) [ 218.907516][ T8235] Tainted: [L]=SOFTLOCKUP [ 218.907526][ T8235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 218.907541][ T8235] Call Trace: [ 218.907550][ T8235] [ 218.907569][ T8235] dump_stack_lvl+0x100/0x190 [ 218.907616][ T8235] should_fail_ex.cold+0x5/0xa [ 218.907649][ T8235] get_futex_key+0x1d2/0x1620 [ 218.907685][ T8235] ? __pfx_get_futex_key+0x10/0x10 [ 218.907729][ T8235] futex_wake+0xea/0x530 [ 218.907769][ T8235] ? __pfx_futex_wake+0x10/0x10 [ 218.907810][ T8235] ? putname+0xb1/0x110 [ 218.907848][ T8235] ? kmem_cache_free+0x124/0x6a0 [ 218.907888][ T8235] do_futex+0x32b/0x350 [ 218.907921][ T8235] ? __pfx_do_futex+0x10/0x10 [ 218.907950][ T8235] ? __pfx_do_sys_openat2+0x10/0x10 [ 218.907990][ T8235] __x64_sys_futex+0x34f/0x4d0 [ 218.908024][ T8235] ? __x64_sys_openat+0x12d/0x210 [ 218.908055][ T8235] ? __pfx___x64_sys_futex+0x10/0x10 [ 218.908102][ T8235] do_syscall_64+0x106/0xf80 [ 218.908131][ T8235] ? clear_bhb_loop+0x40/0x90 [ 218.908164][ T8235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.908193][ T8235] RIP: 0033:0x7fb80bb9bf79 [ 218.908217][ T8235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.908243][ T8235] RSP: 002b:00007fb80ca1f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 218.908270][ T8235] RAX: ffffffffffffffda RBX: 00007fb80be15fa8 RCX: 00007fb80bb9bf79 [ 218.908288][ T8235] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb80be15fac [ 218.908306][ T8235] RBP: 00007fb80be15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 218.908322][ T8235] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 218.908338][ T8235] R13: 00007fb80be16038 R14: 00007ffc3d3f7240 R15: 00007ffc3d3f7328 [ 218.908376][ T8235] [ 219.186826][ T8239] FAULT_INJECTION: forcing a failure. [ 219.186826][ T8239] name failslab, interval 1, probability 0, space 0, times 0 [ 219.199549][ T8239] CPU: 0 UID: 0 PID: 8239 Comm: syz.2.450 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.199582][ T8239] Tainted: [L]=SOFTLOCKUP [ 219.199587][ T8239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 219.199596][ T8239] Call Trace: [ 219.199602][ T8239] [ 219.199613][ T8239] dump_stack_lvl+0x100/0x190 [ 219.199640][ T8239] should_fail_ex.cold+0x5/0xa [ 219.199657][ T8239] ? lsm_blob_alloc+0x68/0x90 [ 219.199675][ T8239] should_failslab+0xc2/0x120 [ 219.199698][ T8239] __kmalloc_noprof+0xe0/0x850 [ 219.199716][ T8239] ? trace_kmem_cache_alloc+0xf3/0x120 [ 219.199742][ T8239] lsm_blob_alloc+0x68/0x90 [ 219.199760][ T8239] security_prepare_creds+0x2d/0x290 [ 219.199779][ T8239] prepare_creds+0x5d6/0x950 [ 219.199801][ T8239] __sys_setfsuid+0xda/0x380 [ 219.199818][ T8239] do_syscall_64+0x106/0xf80 [ 219.199833][ T8239] ? clear_bhb_loop+0x40/0x90 [ 219.199852][ T8239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.199870][ T8239] RIP: 0033:0x7fed9f39bf79 [ 219.199883][ T8239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.199897][ T8239] RSP: 002b:00007feda0195028 EFLAGS: 00000246 ORIG_RAX: 000000000000007a [ 219.199912][ T8239] RAX: ffffffffffffffda RBX: 00007fed9f615fa0 RCX: 00007fed9f39bf79 [ 219.199921][ T8239] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 219.199930][ T8239] RBP: 00007fed9f4327e0 R08: 0000000000000000 R09: 0000000000000000 [ 219.199938][ T8239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.199946][ T8239] R13: 00007fed9f616038 R14: 00007fed9f615fa0 R15: 00007ffc53d358c8 [ 219.199966][ T8239] [ 219.599595][ T136] team0 (unregistering): Port device team_slave_1 removed [ 219.642081][ T136] team0 (unregistering): Port device team_slave_0 removed [ 219.774893][ T5823] Bluetooth: hci2: command tx timeout [ 220.737479][ T8268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.456'. [ 220.844727][ T8265] netlink: 'syz.3.456': attribute type 1 has an invalid length. [ 220.913541][ T8265] netlink: 13 bytes leftover after parsing attributes in process `syz.3.456'. [ 220.965792][ T5823] Bluetooth: hci0: Malformed LE Event: 0x0b [ 221.097391][ T8170] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 221.147954][ T8170] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 221.322586][ T8170] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 221.359940][ T8170] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 221.586616][ T8170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.616820][ T8170] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.676141][ T113] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.683319][ T113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.748109][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.755299][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.855127][ T5823] Bluetooth: hci2: command tx timeout [ 221.878362][ T29] audit: type=1800 audit(1771081291.296:5): pid=8301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.460" name="lu_gp_id" dev="configfs" ino=21694 res=0 errno=0 [ 222.333551][ T8170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.497188][ T8170] veth0_vlan: entered promiscuous mode [ 222.565772][ T8170] veth1_vlan: entered promiscuous mode [ 222.676534][ T8170] veth0_macvtap: entered promiscuous mode [ 222.708354][ T8170] veth1_macvtap: entered promiscuous mode [ 222.752148][ T8321] i2c i2c-0: new_device: Missing parameters [ 222.931478][ T8170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.123452][ T8170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.158539][ T136] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.186842][ T136] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.201266][ T136] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.245164][ T136] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.516403][ T113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.548377][ T113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.729594][ T7319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.753824][ T7319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.406452][ T8352] binder: BINDER_SET_CONTEXT_MGR already set [ 224.416093][ T8352] binder: 8350:8352 ioctl 4018620d 5 returned -16 [ 226.158910][ T8402] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 226.632916][ T8410] futex_wake_op: syz.2.473 tries to shift op by -2048; fix this program [ 226.666037][ T8410] futex_wake_op: syz.2.473 tries to shift op by -2048; fix this program [ 226.699314][ T8410] 0x000000000001-0x000000020000 : "" [ 226.764217][ T8410] ftl_cs: FTL header corrupt! [ 227.049951][ T8409] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 227.066192][ T8409] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 227.072425][ T8409] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 227.084135][ T8409] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 227.112701][ T8409] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 227.196653][ T8409] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 228.817364][ T8437] FAULT_INJECTION: forcing a failure. [ 228.817364][ T8437] name failslab, interval 1, probability 0, space 0, times 0 [ 228.830665][ T8437] CPU: 1 UID: 0 PID: 8437 Comm: syz.2.478 Tainted: G L syzkaller #0 PREEMPT(full) [ 228.830708][ T8437] Tainted: [L]=SOFTLOCKUP [ 228.830718][ T8437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 228.830734][ T8437] Call Trace: [ 228.830743][ T8437] [ 228.830753][ T8437] dump_stack_lvl+0x100/0x190 [ 228.830801][ T8437] should_fail_ex.cold+0x5/0xa [ 228.830833][ T8437] should_failslab+0xc2/0x120 [ 228.830897][ T8437] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 228.830932][ T8437] ? __d_alloc+0x34/0xa80 [ 228.830968][ T8437] ? lockdep_init_map_type+0x5c/0x250 [ 228.831005][ T8437] __d_alloc+0x34/0xa80 [ 228.831049][ T8437] d_alloc_pseudo+0x1c/0xc0 [ 228.831079][ T8437] alloc_file_pseudo+0xcf/0x230 [ 228.831109][ T8437] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 228.831138][ T8437] ? alloc_fd+0x476/0x790 [ 228.831179][ T8437] sock_alloc_file+0x50/0x210 [ 228.831212][ T8437] __sys_socket+0x1c0/0x260 [ 228.831249][ T8437] ? __pfx___sys_socket+0x10/0x10 [ 228.831295][ T8437] __x64_sys_socket+0x72/0xb0 [ 228.831332][ T8437] ? lockdep_hardirqs_on+0x78/0x100 [ 228.831361][ T8437] do_syscall_64+0x106/0xf80 [ 228.831389][ T8437] ? clear_bhb_loop+0x40/0x90 [ 228.831421][ T8437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.831447][ T8437] RIP: 0033:0x7fed9f39bf79 [ 228.831469][ T8437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.831495][ T8437] RSP: 002b:00007feda0195028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 228.831520][ T8437] RAX: ffffffffffffffda RBX: 00007fed9f615fa0 RCX: 00007fed9f39bf79 [ 228.831536][ T8437] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 228.831551][ T8437] RBP: 00007fed9f4327e0 R08: 0000000000000000 R09: 0000000000000000 [ 228.831566][ T8437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.831581][ T8437] R13: 00007fed9f616038 R14: 00007fed9f615fa0 R15: 00007ffc53d358c8 [ 228.831616][ T8437] [ 229.055353][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 229.135817][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout [ 229.142424][ T5823] Bluetooth: hci3: command 0x0c1a tx timeout [ 229.152254][ T5830] Bluetooth: hci1: command 0x0c1a tx timeout [ 229.878339][ T8460] warning: `syz.3.482' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 231.214979][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout [ 231.637102][ T8525] random: crng reseeded on system resumption [ 232.044037][ T8531] capability: warning: `syz.3.493' uses deprecated v2 capabilities in a way that may be insecure [ 233.036914][ T8552] __vm_enough_memory: pid: 8552, comm: syz.1.498, bytes: 4398046511104 not enough memory for the allocation [ 233.115106][ T8541] Invalid ELF header magic: != ELF [ 233.296913][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout [ 233.745262][ T8563] vhci_hcd vhci_hcd.3: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 234.373149][ T8572] NFSD: Failed to start, no listeners configured. [ 234.385052][ T8578] i2c i2c-0: new_device: Missing parameters [ 234.749438][ T8583] netlink: 330 bytes leftover after parsing attributes in process `syz.1.504'. [ 237.262862][ T8614] i2c i2c-0: new_device: Missing parameters [ 238.898036][ T8646] ptp ptp0: only physical clock in use now [ 239.189574][ T8652] nfs: Unknown parameter '@' [ 242.315876][ T8701] netlink: 16 bytes leftover after parsing attributes in process `syz.3.531'. [ 242.486884][ T8710] netlink: 93 bytes leftover after parsing attributes in process `syz.3.531'. [ 242.595193][ T8704] netlink: 93 bytes leftover after parsing attributes in process `syz.3.531'. [ 242.851186][ T8710] netlink: 93 bytes leftover after parsing attributes in process `syz.3.531'. [ 243.627965][ T5832] Bluetooth: hci0: unexpected event 0x1d length: 6 > 5 [ 244.189174][ T8741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.537'. [ 244.651259][ T8760] netlink: 1268 bytes leftover after parsing attributes in process `syz.2.541'. [ 247.737177][ T8857] i2c i2c-0: new_device: Missing parameters [ 249.334588][ T8879] netlink: 28 bytes leftover after parsing attributes in process `syz.3.557'. [ 249.347364][ T8879] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.447267][ T8879] bridge_slave_1 (unregistering): left allmulticast mode [ 249.454352][ T8879] bridge_slave_1 (unregistering): left promiscuous mode [ 249.634954][ T8879] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.168105][ T8890] nbd: must specify an index to disconnect [ 250.485463][ T8891] block nbd8: shutting down sockets [ 250.530631][ T8895] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 251.415807][ T8922] netlink: 20 bytes leftover after parsing attributes in process `syz.1.568'. [ 251.829516][ T8935] Invalid ELF header magic: != ELF [ 253.442286][ T8982] nfs: Unknown parameter 'm?LH>「^eko}* ' [ 253.656908][ T8989] netlink: 1268 bytes leftover after parsing attributes in process `syz.1.579'. [ 254.699393][ T9024] zram0: detected capacity change from 0 to 8 [ 255.442087][ T9037] zswap: compressor not available [ 255.705060][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.705159][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.144447][ T9070] netlink: 1268 bytes leftover after parsing attributes in process `syz.0.590'. [ 256.324927][ T9076] futex_wake_op: syz.0.592 tries to shift op by -2048; fix this program [ 256.446254][ T9085] 0x000000000001-0x000000020000 : "" [ 256.561118][ T9085] ftl_cs: FTL header corrupt! [ 259.487355][ T9127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.599'. [ 260.865149][ T9138] netlink: 1268 bytes leftover after parsing attributes in process `syz.2.601'. [ 261.806704][ T9154] smpboot: CPU 1 is now offline [ 263.165623][ T9168] random: crng reseeded on system resumption [ 263.325009][ T9165] bond0: option packets_per_slave: invalid value ( Xnp) [ 263.384129][ T9168] hub 1-0:1.0: USB hub found [ 263.436716][ T9165] bond0: option packets_per_slave: allowed values 0 - 65535 [ 263.495031][ T9168] hub 1-0:1.0: 1 port detected [ 264.750619][ T9211] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 264.906215][ T9211] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 266.571580][ T9248] zswap: compressor not available [ 267.655303][ T9297] netlink: 342 bytes leftover after parsing attributes in process `syz.3.630'. [ 268.830810][ T9316] Console: switching to colour frame buffer device 128x48 [ 268.932819][ T9320] netlink: 32 bytes leftover after parsing attributes in process `syz.3.631'. [ 270.778654][ T9362] FAULT_INJECTION: forcing a failure. [ 270.778654][ T9362] name failslab, interval 1, probability 0, space 0, times 0 [ 270.982666][ T9362] CPU: 0 UID: 0 PID: 9362 Comm: syz.3.637 Tainted: G L syzkaller #0 PREEMPT(full) [ 270.982706][ T9362] Tainted: [L]=SOFTLOCKUP [ 270.982711][ T9362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 270.982722][ T9362] Call Trace: [ 270.982728][ T9362] [ 270.982734][ T9362] dump_stack_lvl+0x100/0x190 [ 270.982762][ T9362] should_fail_ex.cold+0x5/0xa [ 270.982779][ T9362] should_failslab+0xc2/0x120 [ 270.982801][ T9362] __kmalloc_cache_noprof+0x7a/0x6f0 [ 270.982818][ T9362] ? __kthread_create_on_node+0xce/0x3f0 [ 270.982834][ T9362] ? lockdep_init_map_type+0x5c/0x250 [ 270.982855][ T9362] ? __pfx_dvb_frontend_thread+0x10/0x10 [ 270.982873][ T9362] __kthread_create_on_node+0xce/0x3f0 [ 270.982890][ T9362] ? __pfx___kthread_create_on_node+0x10/0x10 [ 270.982905][ T9362] ? trace_contention_end+0x140/0x180 [ 270.982929][ T9362] ? dvb_frontend_open+0x5b8/0x16d0 [ 270.982945][ T9362] ? __lock_acquire+0x4a5/0x2630 [ 270.982963][ T9362] ? __pfx_dvb_frontend_thread+0x10/0x10 [ 270.982981][ T9362] kthread_create_on_node+0xc7/0x100 [ 270.982997][ T9362] ? __pfx_kthread_create_on_node+0x10/0x10 [ 270.983017][ T9362] ? mark_held_locks+0x40/0x70 [ 270.983033][ T9362] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 270.983056][ T9362] ? lockdep_hardirqs_on+0x78/0x100 [ 270.983074][ T9362] dvb_frontend_open+0x10a4/0x16d0 [ 270.983094][ T9362] ? kobject_get_unless_zero+0x156/0x200 [ 270.983114][ T9362] ? __pfx_dvb_frontend_open+0x10/0x10 [ 270.983133][ T9362] dvb_device_open+0x270/0x3b0 [ 270.983151][ T9362] ? __pfx_dvb_device_open+0x10/0x10 [ 270.983174][ T9362] chrdev_open+0x234/0x6a0 [ 270.983195][ T9362] ? __pfx_apparmor_file_open+0x10/0x10 [ 270.983216][ T9362] ? __pfx_chrdev_open+0x10/0x10 [ 270.983238][ T9362] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 270.983264][ T9362] do_dentry_open+0x6d8/0x1660 [ 270.983284][ T9362] ? __pfx_chrdev_open+0x10/0x10 [ 270.983309][ T9362] vfs_open+0x82/0x3f0 [ 270.983412][ T9362] path_openat+0x208c/0x31a0 [ 270.983451][ T9362] ? __pfx_path_openat+0x10/0x10 [ 270.983481][ T9362] do_file_open+0x20e/0x430 [ 270.983504][ T9362] ? __pfx_do_file_open+0x10/0x10 [ 270.983540][ T9362] ? alloc_fd+0x476/0x790 [ 270.983563][ T9362] ? do_getname+0x191/0x390 [ 270.983579][ T9362] do_sys_openat2+0x10d/0x1e0 [ 270.983598][ T9362] ? __pfx_do_sys_openat2+0x10/0x10 [ 270.983617][ T9362] ? __sys_connect+0xe4/0x170 [ 270.983644][ T9362] __x64_sys_openat+0x12d/0x210 [ 270.983661][ T9362] ? __pfx___x64_sys_openat+0x10/0x10 [ 270.983684][ T9362] do_syscall_64+0x106/0xf80 [ 270.983700][ T9362] ? clear_bhb_loop+0x40/0x90 [ 270.983742][ T9362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.983757][ T9362] RIP: 0033:0x7fb80bb9bf79 [ 270.983772][ T9362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.983786][ T9362] RSP: 002b:00007fb80ca1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 270.983807][ T9362] RAX: ffffffffffffffda RBX: 00007fb80be15fa0 RCX: 00007fb80bb9bf79 [ 270.983817][ T9362] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 270.983827][ T9362] RBP: 00007fb80bc327e0 R08: 0000000000000000 R09: 0000000000000000 [ 270.983837][ T9362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.983845][ T9362] R13: 00007fb80be16038 R14: 00007fb80be15fa0 R15: 00007ffc3d3f7328 [ 270.983865][ T9362] [ 270.983877][ T9362] i2c i2c-0: dvb_frontend_start: failed to start kthread (-12) [ 271.796892][ T9376] random: crng reseeded on system resumption [ 272.923833][ T9406] futex_wake_op: syz.1.642 tries to shift op by -2048; fix this program [ 273.423152][ T9406] zero sized request [ 275.332184][ T9435] Invalid ELF header magic: != ELF [ 276.831331][ T9483] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 277.314185][ T9491] netlink: 330 bytes leftover after parsing attributes in process `syz.2.659'. [ 279.051839][ T9521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.668'. [ 279.965522][ T9556] blktrace: Concurrent blktraces are not allowed on loop2 [ 280.354442][ T9554] FAULT_INJECTION: forcing a failure. [ 280.354442][ T9554] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.491681][ T9554] CPU: 0 UID: 0 PID: 9554 Comm: syz.2.675 Tainted: G L syzkaller #0 PREEMPT(full) [ 280.491707][ T9554] Tainted: [L]=SOFTLOCKUP [ 280.491713][ T9554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 280.491722][ T9554] Call Trace: [ 280.491727][ T9554] [ 280.491733][ T9554] dump_stack_lvl+0x100/0x190 [ 280.491760][ T9554] should_fail_ex.cold+0x5/0xa [ 280.491778][ T9554] _copy_from_user+0x2e/0xd0 [ 280.491794][ T9554] do_sock_getsockopt+0x30b/0x3d0 [ 280.491815][ T9554] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 280.491844][ T9554] __sys_getsockopt+0x133/0x1d0 [ 280.491865][ T9554] ? __x64_sys_getsockopt+0xbd/0x160 [ 280.491879][ T9554] __x64_sys_getsockopt+0xbd/0x160 [ 280.491893][ T9554] ? do_syscall_64+0x95/0xf80 [ 280.491909][ T9554] ? lockdep_hardirqs_on+0x78/0x100 [ 280.491924][ T9554] do_syscall_64+0x106/0xf80 [ 280.491938][ T9554] ? clear_bhb_loop+0x40/0x90 [ 280.491956][ T9554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.491971][ T9554] RIP: 0033:0x7fed9f39bf79 [ 280.491985][ T9554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.491999][ T9554] RSP: 002b:00007fed9d5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 280.492014][ T9554] RAX: ffffffffffffffda RBX: 00007fed9f616180 RCX: 00007fed9f39bf79 [ 280.492023][ T9554] RDX: 000000000000006d RSI: 0000000000000084 RDI: 0000000000000004 [ 280.492031][ T9554] RBP: 00007fed9f4327e0 R08: 0000200000000280 R09: 0000000000000000 [ 280.492040][ T9554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.492048][ T9554] R13: 00007fed9f616218 R14: 00007fed9f616180 R15: 00007ffc53d358c8 [ 280.492066][ T9554] [ 280.991752][ T9565] Format for deleting device is "id" (uint). [ 281.381321][ T9575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.681'. [ 282.578130][ T29] audit: type=1804 audit(1771081351.986:6): pid=9592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.683" name="/newroot/155/file0" dev="tmpfs" ino=854 res=1 errno=0 [ 282.679388][ T29] audit: type=1804 audit(1771081352.046:7): pid=9593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.683" name="/newroot/155/file0" dev="tmpfs" ino=854 res=1 errno=0 [ 282.795427][ T9592] zram0: detected capacity change from 8 to 0 [ 283.012439][ T9596] netlink: 29 bytes leftover after parsing attributes in process `syz.0.684'. [ 283.148829][ T5832] Bluetooth: hci2: unexpected event 0x02 length: 726 > 260 [ 283.639085][ T9607] netlink: 1268 bytes leftover after parsing attributes in process `syz.2.687'. [ 285.619674][ T29] audit: type=1800 audit(1771081355.026:8): pid=9635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.696" name="dbroot" dev="configfs" ino=28967 res=0 errno=0 [ 285.712627][ T9636] lo: entered allmulticast mode [ 285.775266][ T9640] Setting dangerous option i915.mitigations - tainting kernel [ 286.465194][ T9634] lo: left allmulticast mode [ 289.803556][ T9683] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input11 [ 290.033356][ T9684] netlink: 12 bytes leftover after parsing attributes in process `syz.2.707'. [ 291.388790][ T9699] binder: 9697:9699 ioctl c018620c 0 returned -1 [ 292.045375][ T9715] ubi0: attaching mtd1 [ 292.083692][ T9715] ubi0: scanning is finished [ 292.146524][ T9715] ubi0: empty MTD device detected [ 292.151717][ T9715] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 292.357003][ T9715] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd1, error -22 [ 292.485084][ T9728] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 292.740509][ T5832] Bluetooth: hci1: unexpected event 0x32 length: 727 > 9 [ 292.846343][ T9735] netlink: zone id is out of range [ 292.919456][ T9733] netlink: set zone limit has 8 unknown bytes [ 293.024902][ T9735] netlink: zone id is out of range [ 293.030053][ T9735] netlink: zone id is out of range [ 293.102584][ T9735] netlink: zone id is out of range [ 293.143315][ T9735] netlink: zone id is out of range [ 293.156637][ T9163] syz.0.600 (9163) used greatest stack depth: 18408 bytes left [ 293.167919][ T9735] netlink: zone id is out of range [ 293.184588][ T9735] netlink: zone id is out of range [ 293.204908][ T9735] netlink: zone id is out of range [ 293.266791][ T9735] netlink: zone id is out of range [ 293.719540][ T9752] random: crng reseeded on system resumption [ 295.187777][ T9783] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.012748][ T9805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.732'. [ 296.197987][ T5832] Bluetooth: hci3: unexpected event 0x14 length: 16 > 6 [ 296.240326][ T9811] netlink: 25 bytes leftover after parsing attributes in process `syz.1.734'. [ 296.649555][ T9829] i2c i2c-0: new_device: Missing parameters [ 296.680597][ T9829] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 296.779327][ T5832] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 298.483307][ T9860] block nbd8: shutting down sockets [ 299.152235][ T9892] FAULT_INJECTION: forcing a failure. [ 299.152235][ T9892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.247151][ T9892] CPU: 0 UID: 0 PID: 9892 Comm: syz.3.752 Tainted: G U L syzkaller #0 PREEMPT(full) [ 299.247179][ T9892] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 299.247185][ T9892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 299.247193][ T9892] Call Trace: [ 299.247199][ T9892] [ 299.247205][ T9892] dump_stack_lvl+0x100/0x190 [ 299.247232][ T9892] should_fail_ex.cold+0x5/0xa [ 299.247250][ T9892] _copy_from_user+0x2e/0xd0 [ 299.247266][ T9892] do_sock_getsockopt+0x30b/0x3d0 [ 299.247288][ T9892] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 299.247317][ T9892] __sys_getsockopt+0x133/0x1d0 [ 299.247338][ T9892] ? __x64_sys_getsockopt+0xbd/0x160 [ 299.247352][ T9892] __x64_sys_getsockopt+0xbd/0x160 [ 299.247366][ T9892] ? do_syscall_64+0x95/0xf80 [ 299.247381][ T9892] ? lockdep_hardirqs_on+0x78/0x100 [ 299.247397][ T9892] do_syscall_64+0x106/0xf80 [ 299.247414][ T9892] ? clear_bhb_loop+0x40/0x90 [ 299.247434][ T9892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.247450][ T9892] RIP: 0033:0x7fb80bb9bf79 [ 299.247464][ T9892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.247478][ T9892] RSP: 002b:00007fb80c9fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 299.247493][ T9892] RAX: ffffffffffffffda RBX: 00007fb80be16090 RCX: 00007fb80bb9bf79 [ 299.247503][ T9892] RDX: 000000000000006d RSI: 0000000000000084 RDI: 0000000000000004 [ 299.247512][ T9892] RBP: 00007fb80bc327e0 R08: 0000200000000280 R09: 0000000000000000 [ 299.247521][ T9892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.247530][ T9892] R13: 00007fb80be16128 R14: 00007fb80be16090 R15: 00007ffc3d3f7328 [ 299.247549][ T9892] [ 301.613608][ T9947] block nbd8: shutting down sockets [ 301.644295][ T9950] ubi0: attaching mtd1 [ 301.682143][ T9950] ubi0: scanning is finished [ 301.724982][ T9950] ubi0: empty MTD device detected [ 301.756404][ T9950] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 301.881732][ T9950] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd1, error -22 [ 302.446041][ T9968] random: crng reseeded on system resumption [ 302.718496][ T29] audit: type=1804 audit(1771081372.136:9): pid=9980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.773" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 304.514043][T10009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.779'. [ 304.836005][T10012] zswap: compressor not available [ 305.039192][T10022] ubi0: attaching mtd1 [ 305.099107][T10022] ubi0: scanning is finished [ 305.135039][T10022] ubi0: empty MTD device detected [ 305.201218][T10022] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 305.591988][T10022] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd1, error -22 [ 305.946928][T10038] netlink: 28 bytes leftover after parsing attributes in process `syz.2.786'. [ 306.018576][T10038] vlan1: entered promiscuous mode [ 306.042706][T10038] vlan1: entered allmulticast mode [ 306.063528][T10038] veth0_vlan: entered allmulticast mode [ 306.308463][T10049] FAULT_INJECTION: forcing a failure. [ 306.308463][T10049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.374972][T10049] CPU: 0 UID: 0 PID: 10049 Comm: syz.2.788 Tainted: G U L syzkaller #0 PREEMPT(full) [ 306.375001][T10049] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 306.375007][T10049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 306.375016][T10049] Call Trace: [ 306.375023][T10049] [ 306.375029][T10049] dump_stack_lvl+0x100/0x190 [ 306.375055][T10049] should_fail_ex.cold+0x5/0xa [ 306.375073][T10049] _copy_to_user+0x32/0xd0 [ 306.375089][T10049] put_timespec64+0xb5/0x130 [ 306.375106][T10049] ? __pfx_put_timespec64+0x10/0x10 [ 306.375125][T10049] ? lockdep_hardirqs_on+0x78/0x100 [ 306.375143][T10049] ? read_tsc+0x9/0x20 [ 306.375159][T10049] ? ktime_get_ts64+0x256/0x3f0 [ 306.375174][T10049] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 306.375198][T10049] poll_select_finish+0x54b/0x670 [ 306.375219][T10049] ? __pfx_poll_select_finish+0x10/0x10 [ 306.375237][T10049] ? timespec64_add_safe+0x192/0x220 [ 306.375252][T10049] ? __pfx_timespec64_add_safe+0x10/0x10 [ 306.375267][T10049] ? set_user_sigmask+0x1e1/0x270 [ 306.375293][T10049] ? __pfx_set_user_sigmask+0x10/0x10 [ 306.375315][T10049] ? read_tsc+0x9/0x20 [ 306.375329][T10049] ? ktime_get_ts64+0x256/0x3f0 [ 306.375346][T10049] __x64_sys_ppoll+0x2c7/0x350 [ 306.375368][T10049] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 306.375395][T10049] do_syscall_64+0x106/0xf80 [ 306.375410][T10049] ? clear_bhb_loop+0x40/0x90 [ 306.375428][T10049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.375442][T10049] RIP: 0033:0x7fed9f39bf79 [ 306.375456][T10049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.375471][T10049] RSP: 002b:00007feda0195028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 306.375486][T10049] RAX: ffffffffffffffda RBX: 00007fed9f615fa0 RCX: 00007fed9f39bf79 [ 306.375495][T10049] RDX: 0000200000003640 RSI: 00000000000000d6 RDI: 0000200000003600 [ 306.375504][T10049] RBP: 00007fed9f4327e0 R08: 0000000000000008 R09: 0000000000000000 [ 306.375513][T10049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 306.375521][T10049] R13: 00007fed9f616038 R14: 00007fed9f615fa0 R15: 00007ffc53d358c8 [ 306.375540][T10049] [ 308.869781][T10088] zswap: compressor %aQ_ֱJQP.& Z#3;Mѿbί(`: not available [ 309.058727][T10095] FAULT_INJECTION: forcing a failure. [ 309.058727][T10095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.121529][T10095] CPU: 0 UID: 0 PID: 10095 Comm: syz.2.799 Tainted: G U L syzkaller #0 PREEMPT(full) [ 309.121561][T10095] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 309.121567][T10095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 309.121576][T10095] Call Trace: [ 309.121582][T10095] [ 309.121588][T10095] dump_stack_lvl+0x100/0x190 [ 309.121616][T10095] should_fail_ex.cold+0x5/0xa [ 309.121635][T10095] _copy_to_user+0x32/0xd0 [ 309.121652][T10095] put_timespec64+0xb5/0x130 [ 309.121669][T10095] ? __pfx_put_timespec64+0x10/0x10 [ 309.121683][T10095] ? lockdep_hardirqs_on+0x78/0x100 [ 309.121700][T10095] ? read_tsc+0x9/0x20 [ 309.121716][T10095] ? ktime_get_ts64+0x256/0x3f0 [ 309.121730][T10095] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 309.121754][T10095] poll_select_finish+0x54b/0x670 [ 309.121774][T10095] ? __pfx_poll_select_finish+0x10/0x10 [ 309.121792][T10095] ? timespec64_add_safe+0x192/0x220 [ 309.121808][T10095] ? __pfx_timespec64_add_safe+0x10/0x10 [ 309.121822][T10095] ? set_user_sigmask+0x1e1/0x270 [ 309.121853][T10095] ? __pfx_set_user_sigmask+0x10/0x10 [ 309.121876][T10095] ? read_tsc+0x9/0x20 [ 309.121891][T10095] ? ktime_get_ts64+0x256/0x3f0 [ 309.121908][T10095] __x64_sys_ppoll+0x2c7/0x350 [ 309.121931][T10095] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 309.121958][T10095] do_syscall_64+0x106/0xf80 [ 309.121974][T10095] ? clear_bhb_loop+0x40/0x90 [ 309.121997][T10095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.122012][T10095] RIP: 0033:0x7fed9f39bf79 [ 309.122027][T10095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.122042][T10095] RSP: 002b:00007feda0195028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 309.122057][T10095] RAX: ffffffffffffffda RBX: 00007fed9f615fa0 RCX: 00007fed9f39bf79 [ 309.122067][T10095] RDX: 0000200000003640 RSI: 00000000000000d6 RDI: 0000200000003600 [ 309.122076][T10095] RBP: 00007fed9f4327e0 R08: 0000000000000008 R09: 0000000000000000 [ 309.122085][T10095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.122094][T10095] R13: 00007fed9f616038 R14: 00007fed9f615fa0 R15: 00007ffc53d358c8 [ 309.122113][T10095] [ 309.348581][T10097] netlink: 28 bytes leftover after parsing attributes in process `syz.3.800'. [ 309.479970][T10108] snd_virmidi snd_virmidi.0: control 5:9:1:IA>/[k [ 314.321183][T10212] dump_stack_lvl+0x100/0x190 [ 314.321207][T10212] should_fail_ex.cold+0x5/0xa [ 314.321224][T10212] ? tomoyo_realpath_from_path+0xb6/0x690 [ 314.321241][T10212] should_failslab+0xc2/0x120 [ 314.321262][T10212] __kmalloc_noprof+0xe0/0x850 [ 314.321284][T10212] tomoyo_realpath_from_path+0xb6/0x690 [ 314.321305][T10212] tomoyo_check_open_permission+0x2af/0x3c0 [ 314.321328][T10212] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 314.321369][T10212] ? do_raw_spin_lock+0x128/0x260 [ 314.321390][T10212] ? path_get+0x61/0x80 [ 314.321413][T10212] tomoyo_file_open+0x6b/0x90 [ 314.321432][T10212] security_file_open+0xb5/0x1e0 [ 314.321448][T10212] do_dentry_open+0x5aa/0x1660 [ 314.321469][T10212] ? security_inode_permission+0xbf/0x250 [ 314.321494][T10212] vfs_open+0x82/0x3f0 [ 314.321511][T10212] path_openat+0x208c/0x31a0 [ 314.321538][T10212] ? __pfx_path_openat+0x10/0x10 [ 314.321564][T10212] do_file_open+0x20e/0x430 [ 314.321586][T10212] ? __pfx_do_file_open+0x10/0x10 [ 314.321620][T10212] ? alloc_fd+0x476/0x790 [ 314.321641][T10212] ? do_getname+0x191/0x390 [ 314.321657][T10212] do_sys_openat2+0x10d/0x1e0 [ 314.321673][T10212] ? __pfx_do_sys_openat2+0x10/0x10 [ 314.321695][T10212] __x64_sys_openat+0x12d/0x210 [ 314.321711][T10212] ? __pfx___x64_sys_openat+0x10/0x10 [ 314.321734][T10212] do_syscall_64+0x106/0xf80 [ 314.321749][T10212] ? clear_bhb_loop+0x40/0x90 [ 314.321766][T10212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.321780][T10212] RIP: 0033:0x7f5d41d9bf79 [ 314.321793][T10212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.321807][T10212] RSP: 002b:00007f5d42c44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 314.321821][T10212] RAX: ffffffffffffffda RBX: 00007f5d42015fa0 RCX: 00007f5d41d9bf79 [ 314.321830][T10212] RDX: 0000000000000003 RSI: 000020000000fc00 RDI: ffffffffffffff9c [ 314.321839][T10212] RBP: 00007f5d41e327e0 R08: 0000000000000000 R09: 0000000000000000 [ 314.321847][T10212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.321855][T10212] R13: 00007f5d42016038 R14: 00007f5d42015fa0 R15: 00007ffd8e508628 [ 314.321874][T10212] [ 314.594251][T10212] ERROR: Out of memory at tomoyo_realpath_from_path. [ 314.884333][ T29] audit: type=1802 audit(1771081384.026:11): pid=10221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.831" res=0 errno=0 [ 315.222726][ T29] audit: type=1800 audit(1771081384.626:12): pid=10241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.837" name="members" dev="configfs" ino=32897 res=0 errno=0 [ 315.266330][T10242] FAULT_INJECTION: forcing a failure. [ 315.266330][T10242] name failslab, interval 1, probability 0, space 0, times 0 [ 315.335209][T10242] CPU: 0 UID: 0 PID: 10242 Comm: syz.2.836 Tainted: G U L syzkaller #0 PREEMPT(full) [ 315.335239][T10242] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 315.335245][T10242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 315.335254][T10242] Call Trace: [ 315.335259][T10242] [ 315.335265][T10242] dump_stack_lvl+0x100/0x190 [ 315.335293][T10242] should_fail_ex.cold+0x5/0xa [ 315.335311][T10242] ? tomoyo_encode2+0xfb/0x3c0 [ 315.335328][T10242] should_failslab+0xc2/0x120 [ 315.335349][T10242] __kmalloc_noprof+0xe0/0x850 [ 315.335368][T10242] ? d_absolute_path+0x136/0x1b0 [ 315.335388][T10242] tomoyo_encode2+0xfb/0x3c0 [ 315.335407][T10242] tomoyo_encode+0x29/0x50 [ 315.335422][T10242] tomoyo_realpath_from_path+0x18c/0x690 [ 315.335443][T10242] tomoyo_mount_acl+0x1b6/0x8b0 [ 315.335458][T10242] ? is_bpf_text_address+0x8a/0x1a0 [ 315.335478][T10242] ? bpf_ksym_find+0x124/0x1c0 [ 315.335493][T10242] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 315.335518][T10242] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 315.335532][T10242] ? kernel_text_address+0x8d/0x100 [ 315.335554][T10242] ? unwind_get_return_address+0x59/0xa0 [ 315.335587][T10242] ? tomoyo_domain+0xb2/0x150 [ 315.335605][T10242] ? tomoyo_profile+0x47/0x60 [ 315.335624][T10242] tomoyo_mount_permission+0x214/0x460 [ 315.335639][T10242] ? tomoyo_mount_permission+0x1f6/0x460 [ 315.335655][T10242] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 315.335682][T10242] security_sb_mount+0xdd/0x270 [ 315.335704][T10242] path_mount+0x158/0x23d0 [ 315.335722][T10242] ? __pfx_path_mount+0x10/0x10 [ 315.335735][T10242] ? lockdep_hardirqs_on+0x78/0x100 [ 315.335753][T10242] ? putname+0xb1/0x110 [ 315.335773][T10242] ? kmem_cache_free+0x124/0x6a0 [ 315.335796][T10242] ? __x64_sys_mount+0x293/0x310 [ 315.335809][T10242] __x64_sys_mount+0x293/0x310 [ 315.335823][T10242] ? __pfx___x64_sys_mount+0x10/0x10 [ 315.335843][T10242] do_syscall_64+0x106/0xf80 [ 315.335859][T10242] ? clear_bhb_loop+0x40/0x90 [ 315.335877][T10242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.335892][T10242] RIP: 0033:0x7fed9f39bf79 [ 315.335905][T10242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.335920][T10242] RSP: 002b:00007feda0174028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 315.335934][T10242] RAX: ffffffffffffffda RBX: 00007fed9f616090 RCX: 00007fed9f39bf79 [ 315.335951][T10242] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 315.335961][T10242] RBP: 00007fed9f4327e0 R08: 0000000000000000 R09: 0000000000000000 [ 315.335970][T10242] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000000 [ 315.335979][T10242] R13: 00007fed9f616128 R14: 00007fed9f616090 R15: 00007ffc53d358c8 [ 315.335999][T10242] [ 315.336016][T10242] ERROR: Out of memory at tomoyo_realpath_from_path. [ 317.139855][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.146250][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.478942][T10288] writes to the poll attribute are ignored. [ 317.524699][T10288] please use driver specific parameters instead. [ 318.833241][T10329] FAULT_INJECTION: forcing a failure. [ 318.833241][T10329] name failslab, interval 1, probability 0, space 0, times 0 [ 318.860166][ T5823] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 318.871706][ T5823] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 318.882823][ T5823] CPU: 0 UID: 0 PID: 5823 Comm: kworker/u9:2 Tainted: G U L syzkaller #0 PREEMPT(full) [ 318.882854][ T5823] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 318.882860][ T5823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 318.882880][ T5823] Workqueue: hci3 hci_rx_work [ 318.882908][ T5823] Call Trace: [ 318.882914][ T5823] [ 318.882920][ T5823] dump_stack_lvl+0x100/0x190 [ 318.882945][ T5823] sysfs_warn_dup.cold+0x1c/0x28 [ 318.882968][ T5823] sysfs_create_dir_ns+0x24b/0x2b0 [ 318.882983][ T5823] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 318.883005][ T5823] ? find_held_lock+0x2b/0x80 [ 318.883028][ T5823] ? kobject_add_internal+0x25f/0x930 [ 318.883047][ T5823] ? kobject_add_internal+0x25f/0x930 [ 318.883067][ T5823] ? do_raw_spin_unlock+0x145/0x1e0 [ 318.883088][ T5823] kobject_add_internal+0x2c8/0x930 [ 318.883110][ T5823] kobject_add+0x16a/0x1e0 [ 318.883129][ T5823] ? __pfx_kobject_add+0x10/0x10 [ 318.883147][ T5823] ? class_to_subsys+0x10f/0x150 [ 318.883165][ T5823] ? kobject_put+0xb9/0x640 [ 318.883180][ T5823] ? _raw_spin_unlock+0x28/0x50 [ 318.883208][ T5823] device_add+0x294/0x1950 [ 318.883223][ T5823] ? __pfx_dev_set_name+0x10/0x10 [ 318.883240][ T5823] ? __pfx_device_add+0x10/0x10 [ 318.883262][ T5823] ? mgmt_send_event_skb+0x2fb/0x460 [ 318.883291][ T5823] hci_conn_add_sysfs+0x1a3/0x260 [ 318.883310][ T5823] le_conn_complete_evt+0x11cb/0x1f40 [ 318.883338][ T5823] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 318.883359][ T5823] ? __pfx_bt_warn+0x10/0x10 [ 318.883389][ T5823] hci_le_conn_complete_evt+0x23c/0x3a0 [ 318.883414][ T5823] ? skb_pull_data+0x15f/0x1e0 [ 318.883437][ T5823] hci_le_meta_evt+0x34a/0x5f0 [ 318.883452][ T5823] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 318.883477][ T5823] hci_event_packet+0x682/0x11c0 [ 318.883500][ T5823] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 318.883516][ T5823] ? __pfx_hci_event_packet+0x10/0x10 [ 318.883543][ T5823] ? kcov_remote_start+0x374/0x660 [ 318.883564][ T5823] ? lockdep_hardirqs_on+0x78/0x100 [ 318.883592][ T5823] hci_rx_work+0x451/0xfc0 [ 318.883620][ T5823] process_one_work+0x9d7/0x1920 [ 318.883649][ T5823] ? __pfx_process_one_work+0x10/0x10 [ 318.883675][ T5823] ? __pfx_hci_rx_work+0x10/0x10 [ 318.883698][ T5823] worker_thread+0x5da/0xe40 [ 318.883723][ T5823] ? __pfx_worker_thread+0x10/0x10 [ 318.883743][ T5823] ? kthread+0x13a/0x450 [ 318.883760][ T5823] ? __pfx_worker_thread+0x10/0x10 [ 318.883778][ T5823] kthread+0x370/0x450 [ 318.883794][ T5823] ? __pfx_kthread+0x10/0x10 [ 318.883820][ T5823] ret_from_fork+0x754/0xd80 [ 318.883842][ T5823] ? __pfx_ret_from_fork+0x10/0x10 [ 318.883864][ T5823] ? rcu_is_watching+0x12/0xc0 [ 318.883885][ T5823] ? __switch_to+0x7b4/0x1120 [ 318.883901][ T5823] ? __pfx_kthread+0x10/0x10 [ 318.883920][ T5823] ret_from_fork_asm+0x1a/0x30 [ 318.883946][ T5823] [ 318.883968][ T5823] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 319.209522][ T5823] Bluetooth: hci3: failed to register connection device [ 319.256152][T10329] CPU: 0 UID: 0 PID: 10329 Comm: syz.3.859 Tainted: G U L syzkaller #0 PREEMPT(full) [ 319.256181][T10329] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 319.256186][T10329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 319.256195][T10329] Call Trace: [ 319.256201][T10329] [ 319.256208][T10329] dump_stack_lvl+0x100/0x190 [ 319.256234][T10329] should_fail_ex.cold+0x5/0xa [ 319.256252][T10329] should_failslab+0xc2/0x120 [ 319.256276][T10329] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 319.256294][T10329] ? mas_alloc_nodes+0x280/0x390 [ 319.256322][T10329] mas_alloc_nodes+0x280/0x390 [ 319.256346][T10329] mas_preallocate+0x39c/0xf10 [ 319.256367][T10329] ? __pfx_mas_preallocate+0x10/0x10 [ 319.256388][T10329] ? vm_area_alloc+0x1f/0x160 [ 319.256406][T10329] ? lockdep_init_map_type+0x5c/0x250 [ 319.256427][T10329] __mmap_region+0x1218/0x2760 [ 319.256448][T10329] ? __pfx___mmap_region+0x10/0x10 [ 319.256479][T10329] ? finish_task_switch.isra.0+0x205/0xb80 [ 319.256494][T10329] ? lockdep_hardirqs_on+0x78/0x100 [ 319.256516][T10329] ? finish_task_switch.isra.0+0x205/0xb80 [ 319.256567][T10329] ? rcu_is_watching+0x12/0xc0 [ 319.256589][T10329] ? cap_capable+0x107/0x460 [ 319.256613][T10329] mmap_region+0x180/0x3e0 [ 319.256635][T10329] do_mmap+0xc63/0x12f0 [ 319.256661][T10329] ? __pfx_do_mmap+0x10/0x10 [ 319.256683][T10329] ? __pfx_down_write_killable+0x10/0x10 [ 319.256705][T10329] vm_mmap_pgoff+0x29e/0x470 [ 319.256731][T10329] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 319.256758][T10329] ? __x64_sys_futex+0x34f/0x4d0 [ 319.256775][T10329] ? __x64_sys_futex+0x358/0x4d0 [ 319.256794][T10329] ksys_mmap_pgoff+0x7d/0x5b0 [ 319.256819][T10329] __x64_sys_mmap+0x125/0x190 [ 319.256842][T10329] do_syscall_64+0x106/0xf80 [ 319.256857][T10329] ? clear_bhb_loop+0x40/0x90 [ 319.256875][T10329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.256890][T10329] RIP: 0033:0x7fb80bb9bf79 [ 319.256904][T10329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.256919][T10329] RSP: 002b:00007fb80ca1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 319.256933][T10329] RAX: ffffffffffffffda RBX: 00007fb80be15fa0 RCX: 00007fb80bb9bf79 [ 319.256943][T10329] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 319.256952][T10329] RBP: 00007fb80bc327e0 R08: 0000000000000002 R09: 0000000000008000 [ 319.256960][T10329] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 319.256969][T10329] R13: 00007fb80be16038 R14: 00007fb80be15fa0 R15: 00007ffc3d3f7328 [ 319.256996][T10329] [ 319.795155][T10342] snd_aloop snd_aloop.0: control 7:265:7::341 is already present [ 319.803419][T10342] snd_aloop snd_aloop.0: control 7:265:7::341 is already present [ 319.815254][T10342] snd_aloop snd_aloop.0: control 7:265:7::341 is already present [ 319.823419][T10342] snd_aloop snd_aloop.0: control 7:265:7::341 is already present [ 319.889640][T10346] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 319.897082][T10342] snd_aloop snd_aloop.0: control 7:265:7::341 is already present [ 319.928287][T10342] snd_aloop snd_aloop.0: control 7:265:7::341 is already present [ 319.953745][T10342] snd_aloop snd_aloop.0: control 7:265:7::341 is already present [ 319.966112][T10342] snd_aloop snd_aloop.0: control 7:265:7::341 is already present [ 319.994068][T10342] snd_aloop snd_aloop.0: control 7:265:7::341 is already present [ 320.022964][T10342] snd_aloop snd_aloop.0: control 7:265:7::341 is already present [ 320.043694][T10342] snd_aloop snd_aloop.0: control 7:265:7::341 is already present [ 320.073804][T10342] snd_aloop snd_aloop.0: control 7:265:7::341 is already present [ 320.095099][T10342] snd_aloop snd_aloop.0: control 7:265:7::341 is already present [ 320.120152][T10342] snd_aloop snd_aloop.0: control 7:265:7::341 is already present [ 320.129928][T10354] random: crng reseeded on system resumption [ 320.142662][T10342] snd_aloop snd_aloop.0: control 7:265:7::341 is already present [ 320.184927][T10342] snd_aloop snd_aloop.0: control 7:265:7::341 is already present [ 320.227835][T10342] snd_aloop snd_aloop.0: control 7:265:7::341 is already present [ 320.251332][T10342] snd_aloop snd_aloop.0: control 7:265:7::341 is already present [ 320.265769][T10354] binder: 10353:10354 ioctl c018620c 200000000040 returned -22 [ 320.283741][T10342] snd_aloop snd_aloop.0: control 7:265:7::341 is already present [ 320.303320][T10342] snd_aloop snd_aloop.0: control 7:265:7::341 is already present [ 320.345340][T10342] snd_aloop snd_aloop.0: control 7:265:7::341 is already present [ 320.375054][T10342] snd_aloop snd_aloop.0: control 7:265:7::341 is already present [ 320.411107][T10342] snd_aloop snd_aloop.0: control 7:265:7::341 is already present [ 320.437760][T10361] net_ratelimit: 6 callbacks suppressed [ 320.437777][T10361] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 320.460118][T10342] snd_aloop snd_aloop.0: control 7:265:7::341 is already present [ 320.493977][T10342] snd_aloop snd_aloop.0: control 7:265:7::341 is already present [ 320.532744][T10342] snd_aloop snd_aloop.0: control 7:265:7::341 is already present [ 320.575927][T10342] snd_aloop snd_aloop.0: control 7:265:7::341 is already present [ 320.606720][T10342] snd_aloop snd_aloop.0: control 7:265:7::341 is already present [ 321.023149][T10385] snd_virmidi snd_virmidi.0: control 5:9:1:IA>/[k [ 325.405688][T10500] dump_stack_lvl+0x100/0x190 [ 325.405715][T10500] should_fail_ex.cold+0x5/0xa [ 325.405729][T10500] ? prepare_alloc_pages+0x16d/0x5f0 [ 325.405755][T10500] should_fail_alloc_page+0xeb/0x140 [ 325.405780][T10500] prepare_alloc_pages+0x1f0/0x5f0 [ 325.405805][T10500] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 325.405825][T10500] ? rcu_is_watching+0x12/0xc0 [ 325.405848][T10500] ? __lock_acquire+0x4a5/0x2630 [ 325.405872][T10500] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 325.405892][T10500] ? do_raw_spin_lock+0x128/0x260 [ 325.405912][T10500] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 325.405932][T10500] ? find_held_lock+0x2b/0x80 [ 325.405959][T10500] ? __lock_acquire+0x4a5/0x2630 [ 325.405984][T10500] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 325.406009][T10500] ? policy_nodemask+0xed/0x4f0 [ 325.406034][T10500] alloc_pages_mpol+0x1fb/0x550 [ 325.406057][T10500] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 325.406079][T10500] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 325.406099][T10500] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 325.406122][T10500] folio_alloc_mpol_noprof+0x36/0x340 [ 325.406139][T10500] shmem_alloc_folio+0x135/0x160 [ 325.406156][T10500] shmem_alloc_and_add_folio+0x371/0xd40 [ 325.406180][T10500] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 325.406201][T10500] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 325.406224][T10500] shmem_get_folio_gfp+0x6ab/0x1900 [ 325.406248][T10500] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 325.406272][T10500] shmem_write_begin+0x1a4/0x420 [ 325.406293][T10500] ? __pfx_shmem_write_begin+0x10/0x10 [ 325.406314][T10500] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 325.406341][T10500] generic_perform_write+0x292/0xa40 [ 325.406365][T10500] ? __pfx_generic_perform_write+0x10/0x10 [ 325.406382][T10500] ? __mark_inode_dirty+0x55c/0x1790 [ 325.406400][T10500] ? mnt_put_write_access_file+0x4e/0x100 [ 325.406421][T10500] ? file_update_time_flags+0x373/0x500 [ 325.406439][T10500] shmem_file_write_iter+0x10e/0x140 [ 325.406463][T10500] vfs_write+0x6ac/0x1070 [ 325.406483][T10500] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 325.406508][T10500] ? __pfx_vfs_write+0x10/0x10 [ 325.406539][T10500] ksys_write+0x12a/0x250 [ 325.406558][T10500] ? __pfx_ksys_write+0x10/0x10 [ 325.406584][T10500] do_syscall_64+0x106/0xf80 [ 325.406599][T10500] ? clear_bhb_loop+0x40/0x90 [ 325.406617][T10500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.406632][T10500] RIP: 0033:0x7f5d41d9bf79 [ 325.406650][T10500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.406665][T10500] RSP: 002b:00007f5d42c44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 325.406680][T10500] RAX: ffffffffffffffda RBX: 00007f5d42015fa0 RCX: 00007f5d41d9bf79 [ 325.406690][T10500] RDX: 00000000000098c7 RSI: 0000000000000000 RDI: 0000000000000007 [ 325.406699][T10500] RBP: 00007f5d41e327e0 R08: 0000000000000000 R09: 0000000000000000 [ 325.406708][T10500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.406717][T10500] R13: 00007f5d42016038 R14: 00007f5d42015fa0 R15: 00007ffd8e508628 [ 325.406738][T10500] [ 325.808324][T10511] < [ 327.565167][T10586] random: crng reseeded on system resumption [ 329.764728][T10634] netlink: 1268 bytes leftover after parsing attributes in process `syz.1.919'. [ 329.942782][ T29] audit: type=1800 audit(1771081399.356:13): pid=10642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.921" name="lu_gp_id" dev="configfs" ino=35175 res=0 errno=0 [ 330.132915][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f6fe000: rx timeout, send abort [ 330.142768][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805f6fe000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 331.426808][ C0] vcan0: j1939_tp_rxtimer: 0xffff888036316c00: rx timeout, send abort [ 331.435331][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888036316c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 331.547029][T10662] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 331.575211][T10662] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 331.584193][T10662] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 331.602779][T10662] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 331.635943][T10662] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 331.715175][T10662] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 332.810680][ T5823] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 332.810703][ T5823] Bluetooth: hci1: unexpected subevent 0x0e length: 725 > 15 [ 332.826494][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 332.832546][ T5823] Bluetooth: hci1: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 333.341661][T10709] ubi0: attaching mtd1 [ 333.377214][T10709] ubi0: scanning is finished [ 333.381848][T10709] ubi0: empty MTD device detected [ 333.462300][T10709] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 333.616304][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout [ 333.622356][ T5823] Bluetooth: hci3: command 0x0c1a tx timeout [ 333.635245][T10709] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd1, error -22 [ 333.776460][ T5823] Bluetooth: hci2: command 0x0c1a tx timeout [ 334.128981][T10722] vhci_hcd vhci_hcd.0: default hub control req: 0000 v0000 i0000 l0 [ 334.635937][T10718] FAULT_INJECTION: forcing a failure. [ 334.635937][T10718] name fail_futex, interval 1, probability 0, space 0, times 0 [ 334.685429][T10718] CPU: 0 UID: 0 PID: 10718 Comm: syz.0.935 Tainted: G U L syzkaller #0 PREEMPT(full) [ 334.685455][T10718] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 334.685461][T10718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 334.685469][T10718] Call Trace: [ 334.685474][T10718] [ 334.685480][T10718] dump_stack_lvl+0x100/0x190 [ 334.685504][T10718] should_fail_ex.cold+0x5/0xa [ 334.685518][T10718] ? rcu_is_watching+0x12/0xc0 [ 334.685539][T10718] get_futex_key+0x106f/0x1620 [ 334.685557][T10718] ? __pfx_get_futex_key+0x10/0x10 [ 334.685571][T10718] ? lock_acquire+0x1cf/0x380 [ 334.685594][T10718] futex_wake+0xea/0x530 [ 334.685614][T10718] ? __pfx_futex_wake+0x10/0x10 [ 334.685633][T10718] ? exit_mm_release+0x19/0x30 [ 334.685654][T10718] do_futex+0x32b/0x350 [ 334.685671][T10718] ? __pfx_do_futex+0x10/0x10 [ 334.685686][T10718] ? __might_fault+0xc5/0x140 [ 334.685707][T10718] mm_release+0x24a/0x2f0 [ 334.685721][T10718] do_exit+0x675/0x2a90 [ 334.685741][T10718] ? __pfx_do_exit+0x10/0x10 [ 334.685758][T10718] ? do_raw_spin_lock+0x128/0x260 [ 334.685777][T10718] ? find_held_lock+0x2b/0x80 [ 334.685797][T10718] ? get_signal+0x7e0/0x21e0 [ 334.685813][T10718] do_group_exit+0xd5/0x2a0 [ 334.685831][T10718] get_signal+0x1ec7/0x21e0 [ 334.685852][T10718] ? __pfx_get_signal+0x10/0x10 [ 334.685866][T10718] ? do_futex+0x192/0x350 [ 334.685884][T10718] arch_do_signal_or_restart+0x91/0x770 [ 334.685902][T10718] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 334.685923][T10718] ? __pfx___x64_sys_futex+0x10/0x10 [ 334.685939][T10718] ? ksys_write+0x1ac/0x250 [ 334.685961][T10718] exit_to_user_mode_loop+0x86/0x4a0 [ 334.685981][T10718] do_syscall_64+0x668/0xf80 [ 334.685996][T10718] ? clear_bhb_loop+0x40/0x90 [ 334.686014][T10718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.686028][T10718] RIP: 0033:0x7f5d41d9bf79 [ 334.686047][T10718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.686061][T10718] RSP: 002b:00007f5d42c440e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 334.686076][T10718] RAX: fffffffffffffe00 RBX: 00007f5d42015fa8 RCX: 00007f5d41d9bf79 [ 334.686085][T10718] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5d42015fa8 [ 334.686093][T10718] RBP: 00007f5d42015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 334.686102][T10718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.686110][T10718] R13: 00007f5d42016038 R14: 00007ffd8e508540 R15: 00007ffd8e508628 [ 334.686128][T10718] [ 335.565726][T10737] netlink: 1268 bytes leftover after parsing attributes in process `syz.1.940'. [ 335.703385][ T5823] Bluetooth: hci3: command 0x0c1a tx timeout [ 336.514249][T10772] Invalid ELF header magic: != ELF [ 336.964879][T10780] netlink: 1268 bytes leftover after parsing attributes in process `syz.1.952'. [ 337.774831][ T5823] Bluetooth: hci3: command 0x0c1a tx timeout [ 338.119393][T10810] random: crng reseeded on system resumption [ 338.536417][T10822] netlink: 1268 bytes leftover after parsing attributes in process `syz.0.962'. [ 339.363588][T10837] ubi0: attaching mtd1 [ 339.432930][T10837] ubi0: scanning is finished [ 339.530972][T10837] ubi0: empty MTD device detected [ 339.635155][T10837] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 339.851903][T10837] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd1, error -22 [ 340.162844][T10850] __vm_enough_memory: pid: 10850, comm: syz.0.968, bytes: 4398046511104 not enough memory for the allocation [ 340.499638][T10857] random: crng reseeded on system resumption [ 340.876409][T10865] netlink: 1268 bytes leftover after parsing attributes in process `syz.0.973'. [ 340.944792][T10867] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 341.858984][T10889] Invalid ELF header magic: != ELF [ 342.108366][T10893] zswap: compressor not available [ 342.160022][T10902] ubi0: attaching mtd1 [ 342.209035][T10902] ubi0: scanning is finished [ 342.268974][T10902] ubi0: empty MTD device detected [ 342.319736][T10902] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 342.531672][T10901] Invalid ELF header magic: != ELF [ 342.604115][T10902] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd1, error -22 [ 342.807869][T10914] Invalid ELF header magic: != ELF [ 343.182212][T10918] netlink: 1268 bytes leftover after parsing attributes in process `syz.1.985'. [ 344.725408][ T29] audit: type=1800 audit(1771081414.146:14): pid=10933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.988" name="features" dev="configfs" ino=36833 res=0 errno=0 [ 345.921640][T10962] netlink: 2004 bytes leftover after parsing attributes in process `syz.3.993'. [ 346.888181][T10990] ptrace attach of "./syz-executor exec"[8170] was attempted by "./syz-executor exec"[10990] [ 346.971873][T10990] ptrace attach of "./syz-executor exec"[8170] was attempted by "./syz-executor exec"[10990] [ 347.022713][T10990] ptrace attach of "./syz-executor exec"[8170] was attempted by "./syz-executor exec"[10990] [ 347.078130][T10990] ptrace attach of "./syz-executor exec"[8170] was attempted by "./syz-executor exec"[10990] [ 347.123015][T10990] ptrace attach of "./syz-executor exec"[8170] was attempted by "./syz-executor exec"[10990] [ 347.169420][T10990] ptrace attach of "./syz-executor exec"[8170] was attempted by "./syz-executor exec"[10990] [ 347.238137][T10990] ptrace attach of "./syz-executor exec"[8170] was attempted by "./syz-executor exec"[10990] [ 347.297462][T10990] ptrace attach of "./syz-executor exec"[8170] was attempted by "./syz-executor exec"[10990] [ 347.349585][T10990] ptrace attach of "./syz-executor exec"[8170] was attempted by "./syz-executor exec"[10990] [ 347.416298][T10990] ptrace attach of "./syz-executor exec"[8170] was attempted by "./syz-executor exec"[10990] [ 348.149426][T11017] netlink: 1268 bytes leftover after parsing attributes in process `syz.0.1001'. [ 348.383690][T10541] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u8:50: bg 2: bad block bitmap checksum [ 348.431221][T10541] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 905 with max blocks 9 with error 74 [ 348.486429][T10541] EXT4-fs (sda1): This should not happen!! Data will be lost [ 348.486429][T10541] [ 349.098015][T11044] binder: 11035:11044 ioctl c0306201 0 returned -14 [ 349.142371][T11038] zswap: compressor not available [ 350.195285][ T29] audit: type=1800 audit(1771081419.606:15): pid=11053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1009" name="dbroot" dev="configfs" ino=37416 res=0 errno=0 [ 351.278600][T11069] netlink: 1268 bytes leftover after parsing attributes in process `syz.3.1012'. [ 351.563733][T11078] Setting dangerous option i915.mitigations - tainting kernel [ 352.308371][T11108] FAULT_INJECTION: forcing a failure. [ 352.308371][T11108] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 352.373561][T11108] CPU: 0 UID: 0 PID: 11108 Comm: syz.3.1022 Tainted: G U L syzkaller #0 PREEMPT(full) [ 352.373590][T11108] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 352.373596][T11108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 352.373606][T11108] Call Trace: [ 352.373611][T11108] [ 352.373617][T11108] dump_stack_lvl+0x100/0x190 [ 352.373644][T11108] should_fail_ex.cold+0x5/0xa [ 352.373659][T11108] ? prepare_alloc_pages+0x16d/0x5f0 [ 352.373684][T11108] should_fail_alloc_page+0xeb/0x140 [ 352.373708][T11108] prepare_alloc_pages+0x1f0/0x5f0 [ 352.373731][T11108] ? rcu_is_watching+0x12/0xc0 [ 352.373754][T11108] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 352.373773][T11108] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 352.373793][T11108] ? __pfx_css_rstat_updated+0x10/0x10 [ 352.373815][T11108] ? find_held_lock+0x2b/0x80 [ 352.373836][T11108] ? rcu_read_unlock+0x17/0x60 [ 352.373858][T11108] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 352.373876][T11108] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 352.373894][T11108] ? page_counter_charge+0x1d2/0x240 [ 352.373911][T11108] ? rcu_is_watching+0x12/0xc0 [ 352.373931][T11108] ? trace_mm_page_alloc+0x17a/0x1d0 [ 352.373961][T11108] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 352.373984][T11108] ? policy_nodemask+0xed/0x4f0 [ 352.374007][T11108] alloc_pages_mpol+0x1fb/0x550 [ 352.374029][T11108] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 352.374050][T11108] ? do_raw_spin_lock+0x128/0x260 [ 352.374069][T11108] ? find_held_lock+0x2b/0x80 [ 352.374090][T11108] ? __pud_alloc+0x575/0x760 [ 352.374105][T11108] alloc_pages_noprof+0x131/0x390 [ 352.374127][T11108] __pmd_alloc+0x3b/0x9c0 [ 352.374141][T11108] ? __pud_alloc+0x57a/0x760 [ 352.374155][T11108] walk_to_pmd+0x3a3/0x4c0 [ 352.374171][T11108] get_locked_pte+0x25/0xc0 [ 352.374186][T11108] map_ldt_struct+0x3c1/0xa70 [ 352.374214][T11108] ? __pfx_map_ldt_struct+0x10/0x10 [ 352.374247][T11108] ? alloc_pages_noprof+0x233/0x390 [ 352.374274][T11108] write_ldt+0x6d3/0xd40 [ 352.374301][T11108] ? __pfx_write_ldt+0x10/0x10 [ 352.374325][T11108] ? xfd_validate_state+0x129/0x190 [ 352.374352][T11108] __x64_sys_modify_ldt+0xb1/0x170 [ 352.374368][T11108] do_syscall_64+0x106/0xf80 [ 352.374383][T11108] ? clear_bhb_loop+0x40/0x90 [ 352.374402][T11108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.374418][T11108] RIP: 0033:0x7fb80bb9bf79 [ 352.374432][T11108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.374446][T11108] RSP: 002b:00007fb80ca1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 352.374461][T11108] RAX: ffffffffffffffda RBX: 00007fb80be15fa0 RCX: 00007fb80bb9bf79 [ 352.374471][T11108] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000001 [ 352.374481][T11108] RBP: 00007fb80bc327e0 R08: 0000000000000000 R09: 0000000000000000 [ 352.374491][T11108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.374499][T11108] R13: 00007fb80be16038 R14: 00007fb80be15fa0 R15: 00007ffc3d3f7328 [ 352.374520][T11108] [ 353.392054][T11122] HfR: entered promiscuous mode [ 355.208517][T11182] netlink: 146 bytes leftover after parsing attributes in process `syz.1.1039'. [ 355.238573][ T29] audit: type=1807 audit(1771081424.646:16): UNKNOWN= [ 355.238763][ T29] audit: type=1802 audit(1771081424.646:17): pid=11191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.1040" res=0 errno=0 [ 355.365756][T11168] cgroup: fork rejected by pids controller in /syz0 [ 356.850888][T11236] ubi0: attaching mtd1 [ 356.875860][T11236] ubi0: scanning is finished [ 356.880464][T11236] ubi0: empty MTD device detected [ 356.987190][T11236] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 359.148648][T11203] ima: policy update failed [ 359.225631][T11236] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd1, error -22 [ 359.245107][ T29] audit: type=1802 audit(1771081428.656:18): pid=11203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1040" res=0 errno=0 [ 359.837738][T11260] futex_wake_op: syz.1.1048 tries to shift op by -2048; fix this program [ 359.965413][T11260] futex_wake_op: syz.1.1048 tries to shift op by -2048; fix this program [ 360.008512][T11265] 0x000000000001-0x000000020000 : "" [ 360.225058][T11265] ftl_cs: FTL header corrupt! [ 361.265772][T11280] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 361.398425][T11280] ep_00: uevent: failed to send synthetic uevent: -22 [ 361.439657][T11285] netlink: 1268 bytes leftover after parsing attributes in process `syz.1.1053'. [ 365.585675][T11310] ubi0: attaching mtd1 [ 365.615881][T11310] ubi0: scanning is finished [ 365.671250][T11310] ubi0: empty MTD device detected [ 365.711801][T11310] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 368.090675][T11310] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd1, error -22 [ 368.744934][T11337] input: f as /devices/virtual/input/input17 [ 368.917407][T11340] netlink: 1268 bytes leftover after parsing attributes in process `syz.3.1063'. [ 369.066456][T11343] vivid-007: ================= START STATUS ================= [ 369.082714][T11343] vivid-007: Generate PTS: true [ 369.097184][T11343] vivid-007: Generate SCR: true [ 369.107280][T11343] tpg source WxH: 320x240 (Y'CbCr) [ 369.117968][T11343] tpg field: 1 [ 369.125939][T11343] tpg crop: (0,0)/320x240 [ 369.146721][T11343] tpg compose: (0,0)/320x240 [ 369.162422][T11343] tpg colorspace: 8 [ 369.176420][T11343] tpg transfer function: 0/0 [ 369.192031][T11343] tpg Y'CbCr encoding: 0/0 [ 369.224087][T11343] tpg quantization: 0/0 [ 369.235366][T11343] tpg RGB range: 0/2 [ 369.243839][T11343] vivid-007: ================== END STATUS ================== [ 370.382037][T11362] random: crng reseeded on system resumption [ 371.977977][T11173] syz.0.1038 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 372.186031][T11393] input: f as /devices/virtual/input/input18 [ 372.447334][T11400] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 372.459545][T11173] CPU: 0 UID: 0 PID: 11173 Comm: syz.0.1038 Tainted: G U L syzkaller #0 PREEMPT(full) [ 372.459571][T11173] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 372.459576][T11173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 372.459585][T11173] Call Trace: [ 372.459589][T11173] [ 372.459596][T11173] dump_stack_lvl+0x100/0x190 [ 372.459625][T11173] dump_header+0xfb/0x606 [ 372.459642][T11173] oom_kill_process.cold+0xd/0x330 [ 372.459659][T11173] out_of_memory+0x340/0x14f0 [ 372.459681][T11173] ? __pfx_out_of_memory+0x10/0x10 [ 372.459705][T11173] mem_cgroup_out_of_memory+0xc6/0x130 [ 372.459722][T11173] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 372.459737][T11173] ? find_held_lock+0x2b/0x80 [ 372.459767][T11173] ? do_raw_spin_unlock+0x145/0x1e0 [ 372.459787][T11173] ? _raw_spin_unlock+0x28/0x50 [ 372.459810][T11173] try_charge_memcg+0x652/0xc90 [ 372.459835][T11173] ? __pfx_try_charge_memcg+0x10/0x10 [ 372.459855][T11173] ? __rcu_read_unlock+0x26a/0x5e0 [ 372.459872][T11173] ? rcu_is_watching+0x12/0xc0 [ 372.459893][T11173] ? __rcu_read_unlock+0x27f/0x5e0 [ 372.459913][T11173] charge_memcg+0xa6/0x280 [ 372.459933][T11173] __mem_cgroup_charge+0x2b/0x1e0 [ 372.459949][T11173] shmem_alloc_and_add_folio+0x451/0xd40 [ 372.459973][T11173] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 372.459993][T11173] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 372.460016][T11173] shmem_get_folio_gfp+0x6ab/0x1900 [ 372.460039][T11173] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 372.460062][T11173] shmem_write_begin+0x1a4/0x420 [ 372.460083][T11173] ? __pfx_shmem_write_begin+0x10/0x10 [ 372.460102][T11173] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 372.460124][T11173] ? lockdep_hardirqs_on+0x78/0x100 [ 372.460145][T11173] generic_perform_write+0x292/0xa40 [ 372.460169][T11173] ? __pfx_generic_perform_write+0x10/0x10 [ 372.460195][T11173] ? file_update_time_flags+0x373/0x500 [ 372.460212][T11173] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 372.460233][T11173] shmem_file_write_iter+0x10e/0x140 [ 372.460255][T11173] __kernel_write_iter+0x2ac/0x920 [ 372.460276][T11173] ? __pfx___kernel_write_iter+0x10/0x10 [ 372.460295][T11173] ? __up_read+0x2c5/0x700 [ 372.460315][T11173] ? dump_user_range+0x73b/0xb50 [ 372.460339][T11173] dump_user_range+0x3f9/0xb50 [ 372.460362][T11173] ? __pfx_dump_user_range+0x10/0x10 [ 372.460388][T11173] ? __pfx_writenote+0x10/0x10 [ 372.460413][T11173] elf_core_dump+0x2d16/0x3c60 [ 372.460444][T11173] ? __pfx_elf_core_dump+0x10/0x10 [ 372.460470][T11173] ? find_held_lock+0x2b/0x80 [ 372.460491][T11173] ? 0xffffffffff600000 [ 372.460505][T11173] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 372.460526][T11173] ? lockdep_hardirqs_on+0x78/0x100 [ 372.460568][T11173] ? vfs_coredump+0x27b4/0x5570 [ 372.460586][T11173] vfs_coredump+0x27b4/0x5570 [ 372.460612][T11173] ? __pfx_vfs_coredump+0x10/0x10 [ 372.460632][T11173] ? __lock_acquire+0x4a5/0x2630 [ 372.460656][T11173] ? lock_acquire+0x1cf/0x380 [ 372.460680][T11173] ? is_bpf_text_address+0x8a/0x1a0 [ 372.460699][T11173] ? bpf_ksym_find+0x124/0x1c0 [ 372.460718][T11173] ? __kernel_text_address+0xd/0x30 [ 372.460737][T11173] ? unwind_get_return_address+0x59/0xa0 [ 372.460752][T11173] ? arch_stack_walk+0xa6/0xf0 [ 372.460771][T11173] ? __sigqueue_free+0xbe/0x2a0 [ 372.460788][T11173] ? stack_trace_save+0x8e/0xc0 [ 372.460810][T11173] ? __pfx_stack_trace_save+0x10/0x10 [ 372.460831][T11173] ? stack_depot_save_flags+0x27/0x9d0 [ 372.460847][T11173] ? __lock_acquire+0x4a5/0x2630 [ 372.460894][T11173] ? proc_coredump_connector+0x2d3/0x4f0 [ 372.460912][T11173] ? __pfx_proc_coredump_connector+0x10/0x10 [ 372.460937][T11173] ? rcu_is_watching+0x12/0xc0 [ 372.460959][T11173] get_signal+0x1f2a/0x21e0 [ 372.460984][T11173] ? __pfx_get_signal+0x10/0x10 [ 372.460997][T11173] ? __pfx_force_sig_fault+0x10/0x10 [ 372.461015][T11173] arch_do_signal_or_restart+0x91/0x770 [ 372.461034][T11173] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 372.461056][T11173] ? do_user_addr_fault+0x8d6/0x12f0 [ 372.461082][T11173] irqentry_exit+0x1f8/0x670 [ 372.461099][T11173] asm_exc_page_fault+0x26/0x30 [ 372.461113][T11173] RIP: 0033:0x400fff [ 372.461131][T11173] Code: Unable to access opcode bytes at 0x400fd5. [ 372.461137][T11173] RSP: 002b:000000000000000a EFLAGS: 00010206 [ 372.461148][T11173] RAX: 0000000000000000 RBX: 00007f5d42016450 RCX: 00007f5d41d9bf79 [ 372.461157][T11173] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b4a [ 372.461166][T11173] RBP: 00007f5d41e327e0 R08: 0000000000000002 R09: 0000000000000000 [ 372.461177][T11173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.461185][T11173] R13: 00007f5d420164e8 R14: 00007f5d42016450 R15: 00007ffd8e508628 [ 372.461205][T11173] [ 372.461211][T11173] memory: usage 307200kB, limit 307200kB, failcnt 32991 [ 373.191087][T11407] ptp ptp0: only physical clock in use now [ 373.310232][ T5823] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 373.993594][T11173] memory+swap: usage 427372kB, limit 9007199254740988kB, failcnt 0 [ 374.033120][T11173] kmem: usage 3692kB, limit 9007199254740988kB, failcnt 0 [ 374.064818][T11173] Memory cgroup stats for /syz0: [ 374.064962][T11173] cache 309932032 [ 374.114090][T11173] rss 159744 [ 374.121913][T11173] rss_huge 0 [ 374.137095][T11173] shmem 309932032 [ 374.154861][T11173] mapped_file 0 [ 374.169825][T11173] dirty 0 [ 374.172780][T11173] writeback 0 [ 374.198872][T11173] workingset_refault_anon 5108 [ 374.203650][T11173] workingset_refault_file 1488 [ 374.239848][T11173] swap 123260928 [ 374.260076][T11173] swapcached 187199488 [ 374.264162][T11173] pgpgin 393190 [ 374.293355][T11173] pgpgout 339924 [ 374.311181][T11173] pgfault 146892 [ 374.327725][T11173] pgmajfault 505 [ 374.383524][T11173] inactive_anon 140664832 [ 374.406471][T11173] active_anon 169607168 [ 374.421457][T11173] inactive_file 0 [ 374.452058][T11173] active_file 0 [ 374.469621][T11173] unevictable 0 [ 374.473185][T11173] hierarchical_memory_limit 314572800 [ 374.518682][T11173] hierarchical_memsw_limit 9223372036854771712 [ 374.557223][T11173] total_cache 309932032 [ 374.584838][T11173] total_rss 159744 [ 374.588625][T11173] total_rss_huge 0 [ 374.638647][T11173] total_shmem 309932032 [ 374.661860][T11173] total_mapped_file 0 [ 374.677948][T11173] total_dirty 0 [ 374.696707][T11173] total_writeback 0 [ 374.714135][T11173] total_workingset_refault_anon 5108 [ 374.735587][T11173] total_workingset_refault_file 1488 [ 374.756180][T11173] total_swap 123260928 [ 374.770116][T11173] total_swapcached 187199488 [ 374.798615][T11173] total_pgpgin 393190 [ 374.823596][T11173] total_pgpgout 339924 [ 374.835643][T11173] total_pgfault 146892 [ 374.861165][T11173] total_pgmajfault 505 [ 374.868853][T11173] total_inactive_anon 140664832 [ 374.896055][T11173] total_active_anon 169607168 [ 374.929204][T11173] total_inactive_file 0 [ 374.960279][T11173] total_active_file 0 [ 374.976753][T11173] total_unevictable 0 [ 375.002493][T11173] anon_cost 0 [ 375.019497][T11173] file_cost 0 [ 375.039920][T11173] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1038,pid=11202,uid=0 [ 375.090139][T11173] Memory cgroup out of memory: Killed process 11202 (syz.0.1038) total-vm:103140kB, anon-rss:3372kB, file-rss:42736kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 375.329590][T11436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1084'. [ 375.369642][T11434] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.1083: iget: checksum invalid [ 375.523809][T11434] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 375.653177][T11434] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.1083: iget: checksum invalid [ 375.745097][T11434] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 375.828188][T11434] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.1083: iget: checksum invalid [ 375.907393][T11434] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 376.001541][T11434] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.1083: iget: checksum invalid [ 376.125111][T11434] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 376.291979][T11434] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 376.394786][T11434] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 377.085218][T11457] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 378.585549][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.591850][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.728817][T11486] FAULT_INJECTION: forcing a failure. [ 379.728817][T11486] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 379.887771][T11486] CPU: 0 UID: 0 PID: 11486 Comm: syz.2.1091 Tainted: G U L syzkaller #0 PREEMPT(full) [ 379.887799][T11486] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 379.887806][T11486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 379.887815][T11486] Call Trace: [ 379.887820][T11486] [ 379.887826][T11486] dump_stack_lvl+0x100/0x190 [ 379.887853][T11486] should_fail_ex.cold+0x5/0xa [ 379.887869][T11486] ? prepare_alloc_pages+0x16d/0x5f0 [ 379.887895][T11486] should_fail_alloc_page+0xeb/0x140 [ 379.887917][T11486] prepare_alloc_pages+0x1f0/0x5f0 [ 379.887943][T11486] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 379.887967][T11486] ? __lock_acquire+0x4a5/0x2630 [ 379.887989][T11486] ? __lock_acquire+0x4a5/0x2630 [ 379.888005][T11486] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 379.888028][T11486] ? __lock_acquire+0x4a5/0x2630 [ 379.888048][T11486] ? __lock_acquire+0x4a5/0x2630 [ 379.888068][T11486] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 379.888091][T11486] ? policy_nodemask+0xed/0x4f0 [ 379.888114][T11486] alloc_pages_mpol+0x1fb/0x550 [ 379.888136][T11486] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 379.888163][T11486] folio_alloc_mpol_noprof+0x36/0x340 [ 379.888179][T11486] shmem_alloc_folio+0x135/0x160 [ 379.888196][T11486] shmem_alloc_and_add_folio+0x371/0xd40 [ 379.888220][T11486] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 379.888241][T11486] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 379.888264][T11486] shmem_get_folio_gfp+0x6ab/0x1900 [ 379.888287][T11486] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 379.888307][T11486] ? filemap_map_pages+0x9e0/0x2170 [ 379.888332][T11486] shmem_fault+0x1f9/0xa20 [ 379.888351][T11486] ? __lock_acquire+0x4a5/0x2630 [ 379.888368][T11486] ? __pfx_shmem_fault+0x10/0x10 [ 379.888391][T11486] ? __pfx_filemap_map_pages+0x10/0x10 [ 379.888415][T11486] __do_fault+0x10d/0x550 [ 379.888443][T11486] do_fault+0xaf9/0x1a00 [ 379.888462][T11486] __handle_mm_fault+0x180f/0x2b60 [ 379.888482][T11486] ? mt_find+0x45e/0x8e0 [ 379.888501][T11486] ? __pfx___handle_mm_fault+0x10/0x10 [ 379.888516][T11486] ? __pfx_mt_find+0x10/0x10 [ 379.888543][T11486] ? find_vma+0xbf/0x140 [ 379.888563][T11486] ? __pfx_find_vma+0x10/0x10 [ 379.888585][T11486] handle_mm_fault+0x36d/0xa20 [ 379.888606][T11486] do_user_addr_fault+0x74c/0x12f0 [ 379.888634][T11486] exc_page_fault+0x6f/0xd0 [ 379.888650][T11486] asm_exc_page_fault+0x26/0x30 [ 379.888666][T11486] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 379.888686][T11486] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 fd 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 379.888701][T11486] RSP: 0018:ffffc9000596fa20 EFLAGS: 00050246 [ 379.888713][T11486] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000008 [ 379.888722][T11486] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc9000596fc68 [ 379.888731][T11486] RBP: 0000000000000008 R08: 0000000000000001 R09: fffff52000b2df8d [ 379.888739][T11486] R10: ffffc9000596fc6f R11: 0000000000000000 R12: 0000000000000000 [ 379.888748][T11486] R13: ffffc9000596fc68 R14: 0000000000000000 R15: 1ffff92000b2df59 [ 379.888767][T11486] _copy_from_user+0x98/0xd0 [ 379.888783][T11486] sctp_getsockopt+0x96b/0x7080 [ 379.888805][T11486] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 379.888823][T11486] ? futex_unqueue+0x13d/0x2c0 [ 379.888839][T11486] ? __pfx_sctp_getsockopt+0x10/0x10 [ 379.888858][T11486] ? __futex_wait+0x256/0x300 [ 379.888879][T11486] ? __pfx___futex_wait+0x10/0x10 [ 379.888906][T11486] ? __lock_acquire+0x4a5/0x2630 [ 379.888927][T11486] ? aa_sk_perm+0x2de/0xb40 [ 379.888947][T11486] ? __might_fault+0xc5/0x140 [ 379.888972][T11486] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 379.888991][T11486] do_sock_getsockopt+0x259/0x3d0 [ 379.889010][T11486] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 379.889039][T11486] __sys_getsockopt+0x133/0x1d0 [ 379.889062][T11486] ? __x64_sys_getsockopt+0xbd/0x160 [ 379.889075][T11486] __x64_sys_getsockopt+0xbd/0x160 [ 379.889089][T11486] ? do_syscall_64+0x95/0xf80 [ 379.889104][T11486] ? lockdep_hardirqs_on+0x78/0x100 [ 379.889119][T11486] do_syscall_64+0x106/0xf80 [ 379.889134][T11486] ? clear_bhb_loop+0x40/0x90 [ 379.889152][T11486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.889166][T11486] RIP: 0033:0x7fed9f39bf79 [ 379.889179][T11486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.889193][T11486] RSP: 002b:00007feda0174028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 379.889206][T11486] RAX: ffffffffffffffda RBX: 00007fed9f616090 RCX: 00007fed9f39bf79 [ 379.889216][T11486] RDX: 000000000000006d RSI: 0000000000000084 RDI: 0000000000000004 [ 379.889224][T11486] RBP: 00007fed9f4327e0 R08: 0000200000000280 R09: 0000000000000000 [ 379.889233][T11486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 379.889242][T11486] R13: 00007fed9f616128 R14: 00007fed9f616090 R15: 00007ffc53d358c8 [ 379.889261][T11486] [ 380.560257][T11495] netlink: 1268 bytes leftover after parsing attributes in process `syz.0.1093'. [ 380.788609][T11509] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1097: iget: checksum invalid [ 380.801484][T11509] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 380.812800][T11509] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1097: iget: checksum invalid [ 380.823919][T11509] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 380.834143][T11509] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1097: iget: checksum invalid [ 380.845268][T11509] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 380.856382][T11509] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1097: iget: checksum invalid [ 380.868646][T11509] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 380.878060][T11509] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 380.887734][T11509] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 380.910330][T11507] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 382.225143][T11543] snd_virmidi snd_virmidi.0: control 5:9:1:IA>/[k [ 382.435184][T11530] dump_stack_lvl+0x100/0x190 [ 382.435210][T11530] should_fail_ex.cold+0x5/0xa [ 382.435225][T11530] ? prepare_alloc_pages+0x16d/0x5f0 [ 382.435270][T11530] should_fail_alloc_page+0xeb/0x140 [ 382.435297][T11530] prepare_alloc_pages+0x1f0/0x5f0 [ 382.435324][T11530] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 382.435347][T11530] ? __lock_acquire+0x4a5/0x2630 [ 382.435369][T11530] ? __lock_acquire+0x4a5/0x2630 [ 382.435386][T11530] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 382.435409][T11530] ? __lock_acquire+0x4a5/0x2630 [ 382.435429][T11530] ? __lock_acquire+0x4a5/0x2630 [ 382.435449][T11530] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 382.435473][T11530] ? policy_nodemask+0xed/0x4f0 [ 382.435496][T11530] alloc_pages_mpol+0x1fb/0x550 [ 382.435517][T11530] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 382.435544][T11530] folio_alloc_mpol_noprof+0x36/0x340 [ 382.435561][T11530] shmem_alloc_folio+0x135/0x160 [ 382.435577][T11530] shmem_alloc_and_add_folio+0x371/0xd40 [ 382.435601][T11530] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 382.435622][T11530] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 382.435645][T11530] shmem_get_folio_gfp+0x6ab/0x1900 [ 382.435668][T11530] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 382.435688][T11530] ? filemap_map_pages+0x9e0/0x2170 [ 382.435710][T11530] shmem_fault+0x1f9/0xa20 [ 382.435728][T11530] ? __lock_acquire+0x4a5/0x2630 [ 382.435745][T11530] ? __pfx_shmem_fault+0x10/0x10 [ 382.435770][T11530] ? __pfx_filemap_map_pages+0x10/0x10 [ 382.435794][T11530] __do_fault+0x10d/0x550 [ 382.435816][T11530] do_fault+0xaf9/0x1a00 [ 382.435833][T11530] __handle_mm_fault+0x180f/0x2b60 [ 382.435853][T11530] ? mt_find+0x45e/0x8e0 [ 382.435871][T11530] ? __pfx___handle_mm_fault+0x10/0x10 [ 382.435886][T11530] ? __pfx_mt_find+0x10/0x10 [ 382.435913][T11530] ? find_vma+0xbf/0x140 [ 382.435933][T11530] ? __pfx_find_vma+0x10/0x10 [ 382.435957][T11530] handle_mm_fault+0x36d/0xa20 [ 382.435978][T11530] do_user_addr_fault+0x74c/0x12f0 [ 382.436006][T11530] exc_page_fault+0x6f/0xd0 [ 382.436022][T11530] asm_exc_page_fault+0x26/0x30 [ 382.436037][T11530] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 382.436058][T11530] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 fd 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 382.436073][T11530] RSP: 0018:ffffc90006c0fa20 EFLAGS: 00050246 [ 382.436086][T11530] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000008 [ 382.436095][T11530] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90006c0fc68 [ 382.436104][T11530] RBP: 0000000000000008 R08: 0000000000000001 R09: fffff52000d81f8d [ 382.436113][T11530] R10: ffffc90006c0fc6f R11: 0000000000000000 R12: 0000000000000000 [ 382.436121][T11530] R13: ffffc90006c0fc68 R14: 0000000000000000 R15: 1ffff92000d81f59 [ 382.436140][T11530] _copy_from_user+0x98/0xd0 [ 382.436156][T11530] sctp_getsockopt+0x96b/0x7080 [ 382.436179][T11530] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 382.436196][T11530] ? futex_unqueue+0x13d/0x2c0 [ 382.436213][T11530] ? __pfx_sctp_getsockopt+0x10/0x10 [ 382.436232][T11530] ? __futex_wait+0x256/0x300 [ 382.436260][T11530] ? __pfx___futex_wait+0x10/0x10 [ 382.436287][T11530] ? __lock_acquire+0x4a5/0x2630 [ 382.436309][T11530] ? aa_sk_perm+0x2de/0xb40 [ 382.436329][T11530] ? __might_fault+0xc5/0x140 [ 382.436353][T11530] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 382.436372][T11530] do_sock_getsockopt+0x259/0x3d0 [ 382.436392][T11530] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 382.436420][T11530] __sys_getsockopt+0x133/0x1d0 [ 382.436441][T11530] ? __x64_sys_getsockopt+0xbd/0x160 [ 382.436454][T11530] __x64_sys_getsockopt+0xbd/0x160 [ 382.436468][T11530] ? do_syscall_64+0x95/0xf80 [ 382.436483][T11530] ? lockdep_hardirqs_on+0x78/0x100 [ 382.436498][T11530] do_syscall_64+0x106/0xf80 [ 382.436513][T11530] ? clear_bhb_loop+0x40/0x90 [ 382.436531][T11530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.436546][T11530] RIP: 0033:0x7fb80bb9bf79 [ 382.436559][T11530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.436573][T11530] RSP: 002b:00007fb80c9fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 382.436586][T11530] RAX: ffffffffffffffda RBX: 00007fb80be16090 RCX: 00007fb80bb9bf79 [ 382.436595][T11530] RDX: 000000000000006d RSI: 0000000000000084 RDI: 0000000000000004 [ 382.436604][T11530] RBP: 00007fb80bc327e0 R08: 0000200000000280 R09: 0000000000000000 [ 382.436613][T11530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 382.436622][T11530] R13: 00007fb80be16128 R14: 00007fb80be16090 R15: 00007ffc3d3f7328 [ 382.436642][T11530] [ 383.435366][T11546] veth0_vlan: entered allmulticast mode [ 383.454999][T11546] vlan0: entered promiscuous mode [ 383.460609][T11546] bridge0: port 3(vlan0) entered blocking state [ 383.466982][T11546] bridge0: port 3(vlan0) entered forwarding state [ 383.708839][T11555] vivid-007: ================= START STATUS ================= [ 383.755678][T11555] vivid-007: Generate PTS: true [ 383.760565][T11555] vivid-007: Generate SCR: true [ 383.788328][T11555] tpg source WxH: 320x240 (Y'CbCr) [ 383.793460][T11555] tpg field: 1 [ 383.825158][T11555] tpg crop: (0,0)/320x240 [ 383.844836][T11555] tpg compose: (0,0)/320x240 [ 383.849463][T11555] tpg colorspace: 8 [ 383.879977][T11555] tpg transfer function: 0/0 [ 383.884591][T11555] tpg Y'CbCr encoding: 0/0 [ 383.894832][T11555] tpg quantization: 0/0 [ 383.899017][T11555] tpg RGB range: 0/2 [ 383.902891][T11555] vivid-007: ================== END STATUS ================== [ 384.167663][T11564] FAULT_INJECTION: forcing a failure. [ 384.167663][T11564] name failslab, interval 1, probability 0, space 0, times 0 [ 384.209260][T11564] CPU: 0 UID: 0 PID: 11564 Comm: syz.3.1111 Tainted: G U L syzkaller #0 PREEMPT(full) [ 384.209288][T11564] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 384.209294][T11564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 384.209303][T11564] Call Trace: [ 384.209309][T11564] [ 384.209314][T11564] dump_stack_lvl+0x100/0x190 [ 384.209341][T11564] should_fail_ex.cold+0x5/0xa [ 384.209359][T11564] should_failslab+0xc2/0x120 [ 384.209381][T11564] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 384.209403][T11564] ? snd_timer_instance_new+0x65/0x2e0 [ 384.209427][T11564] kstrdup+0x51/0xe0 [ 384.209449][T11564] snd_timer_instance_new+0x65/0x2e0 [ 384.209470][T11564] __snd_timer_user_ioctl.isra.0+0xbe6/0x27c0 [ 384.209494][T11564] ? __pfx___snd_timer_user_ioctl.isra.0+0x10/0x10 [ 384.209521][T11564] ? rcu_is_watching+0x12/0xc0 [ 384.209547][T11564] ? snd_timer_user_ioctl+0x4a/0xd0 [ 384.209568][T11564] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 384.209587][T11564] ? __pfx___mutex_lock+0x10/0x10 [ 384.209608][T11564] ? find_held_lock+0x2b/0x80 [ 384.209639][T11564] snd_timer_user_ioctl+0x76/0xd0 [ 384.209659][T11564] ? __pfx_snd_timer_user_ioctl+0x10/0x10 [ 384.209683][T11564] __x64_sys_ioctl+0x18e/0x210 [ 384.209702][T11564] do_syscall_64+0x106/0xf80 [ 384.209717][T11564] ? clear_bhb_loop+0x40/0x90 [ 384.209735][T11564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.209750][T11564] RIP: 0033:0x7fb80bb9bf79 [ 384.209763][T11564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.209778][T11564] RSP: 002b:00007fb80c9fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 384.209793][T11564] RAX: ffffffffffffffda RBX: 00007fb80be16090 RCX: 00007fb80bb9bf79 [ 384.209803][T11564] RDX: 0000200000000080 RSI: 0000000040345410 RDI: 0000000000000004 [ 384.209812][T11564] RBP: 00007fb80bc327e0 R08: 0000000000000000 R09: 0000000000000000 [ 384.209820][T11564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.209829][T11564] R13: 00007fb80be16128 R14: 00007fb80be16090 R15: 00007ffc3d3f7328 [ 384.209848][T11564] [ 384.873261][T11579] NFSD: Failed to start, no listeners configured. [ 385.310963][T11582] FAULT_INJECTION: forcing a failure. [ 385.310963][T11582] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 385.461235][T11582] CPU: 0 UID: 0 PID: 11582 Comm: syz.2.1113 Tainted: G U L syzkaller #0 PREEMPT(full) [ 385.461263][T11582] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 385.461269][T11582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 385.461278][T11582] Call Trace: [ 385.461283][T11582] [ 385.461290][T11582] dump_stack_lvl+0x100/0x190 [ 385.461317][T11582] should_fail_ex.cold+0x5/0xa [ 385.461331][T11582] ? prepare_alloc_pages+0x16d/0x5f0 [ 385.461356][T11582] should_fail_alloc_page+0xeb/0x140 [ 385.461379][T11582] prepare_alloc_pages+0x1f0/0x5f0 [ 385.461405][T11582] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 385.461426][T11582] ? stack_depot_save_flags+0x27/0x9d0 [ 385.461449][T11582] ? __lock_acquire+0x4a5/0x2630 [ 385.461467][T11582] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 385.461490][T11582] ? __lock_acquire+0x4a5/0x2630 [ 385.461511][T11582] ? __lock_acquire+0x4a5/0x2630 [ 385.461532][T11582] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 385.461555][T11582] ? policy_nodemask+0xed/0x4f0 [ 385.461581][T11582] alloc_pages_mpol+0x1fb/0x550 [ 385.461603][T11582] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 385.461630][T11582] folio_alloc_mpol_noprof+0x36/0x340 [ 385.461647][T11582] shmem_alloc_folio+0x135/0x160 [ 385.461665][T11582] shmem_alloc_and_add_folio+0x371/0xd40 [ 385.461690][T11582] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 385.461711][T11582] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 385.461734][T11582] shmem_get_folio_gfp+0x6ab/0x1900 [ 385.461758][T11582] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 385.461778][T11582] ? filemap_map_pages+0x9e0/0x2170 [ 385.461800][T11582] shmem_fault+0x1f9/0xa20 [ 385.461818][T11582] ? __lock_acquire+0x4a5/0x2630 [ 385.461835][T11582] ? __pfx_shmem_fault+0x10/0x10 [ 385.461862][T11582] ? __pfx_filemap_map_pages+0x10/0x10 [ 385.461887][T11582] __do_fault+0x10d/0x550 [ 385.461911][T11582] do_fault+0xaf9/0x1a00 [ 385.461928][T11582] __handle_mm_fault+0x180f/0x2b60 [ 385.461949][T11582] ? mt_find+0x45e/0x8e0 [ 385.461967][T11582] ? __pfx___handle_mm_fault+0x10/0x10 [ 385.461983][T11582] ? __pfx_mt_find+0x10/0x10 [ 385.462010][T11582] ? find_vma+0xbf/0x140 [ 385.462030][T11582] ? __pfx_find_vma+0x10/0x10 [ 385.462052][T11582] handle_mm_fault+0x36d/0xa20 [ 385.462073][T11582] do_user_addr_fault+0x74c/0x12f0 [ 385.462103][T11582] exc_page_fault+0x6f/0xd0 [ 385.462119][T11582] asm_exc_page_fault+0x26/0x30 [ 385.462133][T11582] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 385.462154][T11582] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 fd 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 385.462169][T11582] RSP: 0018:ffffc90006abfa20 EFLAGS: 00050246 [ 385.462182][T11582] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000008 [ 385.462191][T11582] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90006abfc68 [ 385.462200][T11582] RBP: 0000000000000008 R08: 0000000000000001 R09: fffff52000d57f8d [ 385.462208][T11582] R10: ffffc90006abfc6f R11: 0000000000000000 R12: 0000000000000000 [ 385.462217][T11582] R13: ffffc90006abfc68 R14: 0000000000000000 R15: 1ffff92000d57f59 [ 385.462236][T11582] _copy_from_user+0x98/0xd0 [ 385.462251][T11582] sctp_getsockopt+0x96b/0x7080 [ 385.462274][T11582] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 385.462291][T11582] ? futex_unqueue+0x13d/0x2c0 [ 385.462307][T11582] ? __pfx_sctp_getsockopt+0x10/0x10 [ 385.462326][T11582] ? __futex_wait+0x256/0x300 [ 385.462347][T11582] ? __pfx___futex_wait+0x10/0x10 [ 385.462366][T11582] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 385.462397][T11582] ? __lock_acquire+0x4a5/0x2630 [ 385.462414][T11582] ? find_held_lock+0x2b/0x80 [ 385.462437][T11582] ? aa_sk_perm+0x2de/0xb40 [ 385.462457][T11582] ? __might_fault+0xc5/0x140 [ 385.462481][T11582] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 385.462500][T11582] do_sock_getsockopt+0x259/0x3d0 [ 385.462521][T11582] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 385.462549][T11582] __sys_getsockopt+0x133/0x1d0 [ 385.462570][T11582] ? __x64_sys_getsockopt+0xbd/0x160 [ 385.462583][T11582] __x64_sys_getsockopt+0xbd/0x160 [ 385.462597][T11582] ? do_syscall_64+0x95/0xf80 [ 385.462612][T11582] ? lockdep_hardirqs_on+0x78/0x100 [ 385.462634][T11582] do_syscall_64+0x106/0xf80 [ 385.462649][T11582] ? clear_bhb_loop+0x40/0x90 [ 385.462668][T11582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.462684][T11582] RIP: 0033:0x7fed9f39bf79 [ 385.462697][T11582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.462710][T11582] RSP: 002b:00007fed9d5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 385.462724][T11582] RAX: ffffffffffffffda RBX: 00007fed9f616180 RCX: 00007fed9f39bf79 [ 385.462733][T11582] RDX: 000000000000006d RSI: 0000000000000084 RDI: 0000000000000004 [ 385.462742][T11582] RBP: 00007fed9f4327e0 R08: 0000200000000280 R09: 0000000000000000 [ 385.462751][T11582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 385.462759][T11582] R13: 00007fed9f616218 R14: 00007fed9f616180 R15: 00007ffc53d358c8 [ 385.462779][T11582] [ 386.999416][T11610] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input20 [ 387.509199][T11619] ubi0: attaching mtd1 [ 387.573593][T11621] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1122'. [ 387.631246][T11619] ubi0: scanning is finished [ 387.688589][T11619] ubi0: empty MTD device detected [ 387.791954][T11619] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 388.161575][T11619] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd1, error -22 [ 388.391889][T11648] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input21 [ 390.197532][T11689] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22 [ 390.346621][T11694] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1136'. [ 391.190234][ T29] audit: type=1800 audit(1771081460.606:19): pid=11719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1140" name="dbroot" dev="configfs" ino=40291 res=0 errno=0 [ 391.496704][T11728] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1143'. [ 391.747429][T11737] FAULT_INJECTION: forcing a failure. [ 391.747429][T11737] name failslab, interval 1, probability 0, space 0, times 0 [ 391.961246][T11737] CPU: 0 UID: 0 PID: 11737 Comm: syz.0.1145 Tainted: G U L syzkaller #0 PREEMPT(full) [ 391.961274][T11737] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 391.961280][T11737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 391.961289][T11737] Call Trace: [ 391.961295][T11737] [ 391.961301][T11737] dump_stack_lvl+0x100/0x190 [ 391.961334][T11737] should_fail_ex.cold+0x5/0xa [ 391.961351][T11737] should_failslab+0xc2/0x120 [ 391.961374][T11737] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 391.961395][T11737] ? prepare_creds+0x2c/0x950 [ 391.961419][T11737] prepare_creds+0x2c/0x950 [ 391.961441][T11737] lookup_user_key+0xfb2/0x1300 [ 391.961466][T11737] ? __pfx_lookup_user_key+0x10/0x10 [ 391.961490][T11737] ? __pfx_do_futex+0x10/0x10 [ 391.961510][T11737] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 391.961538][T11737] ? xfd_validate_state+0x129/0x190 [ 391.961560][T11737] keyctl_keyring_move+0x7a/0x150 [ 391.961581][T11737] __do_sys_keyctl+0x21d/0x5a0 [ 391.961604][T11737] do_syscall_64+0x106/0xf80 [ 391.961619][T11737] ? clear_bhb_loop+0x40/0x90 [ 391.961637][T11737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.961652][T11737] RIP: 0033:0x7f5d41d9bf79 [ 391.961665][T11737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.961680][T11737] RSP: 002b:00007f5d42c44028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 391.961695][T11737] RAX: ffffffffffffffda RBX: 00007f5d42015fa0 RCX: 00007f5d41d9bf79 [ 391.961704][T11737] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 000000000000001e [ 391.961714][T11737] RBP: 00007f5d41e327e0 R08: 0000000000000001 R09: 0000000000000000 [ 391.961722][T11737] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 391.961731][T11737] R13: 00007f5d42016038 R14: 00007f5d42015fa0 R15: 00007ffd8e508628 [ 391.961751][T11737] [ 392.654526][T11753] random: crng reseeded on system resumption [ 393.557716][T11767] netlink: 1268 bytes leftover after parsing attributes in process `syz.3.1152'. [ 395.632140][T11788] Invalid ELF header magic: != ELF [ 396.631541][T11796] nbd: socks must be embedded in a SOCK_ITEM attr [ 397.665112][T11822] queue_state_write: unsupported operation '' [ 397.665151][T11822] queue_state_write: use 'run', 'start' or 'kick' [ 398.535335][T11839] can: request_module (can-proto-0) failed. [ 399.022990][T11862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1170'. [ 399.513324][T11884] netlink: 186 bytes leftover after parsing attributes in process `syz.0.1171'. [ 401.430821][T11925] FAULT_INJECTION: forcing a failure. [ 401.430821][T11925] name failslab, interval 1, probability 0, space 0, times 0 [ 401.471272][T11927] ovs_: entered promiscuous mode [ 401.613239][T11925] CPU: 0 UID: 0 PID: 11925 Comm: syz.0.1183 Tainted: G U L syzkaller #0 PREEMPT(full) [ 401.613267][T11925] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 401.613273][T11925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 401.613283][T11925] Call Trace: [ 401.613288][T11925] [ 401.613295][T11925] dump_stack_lvl+0x100/0x190 [ 401.613321][T11925] should_fail_ex.cold+0x5/0xa [ 401.613339][T11925] should_failslab+0xc2/0x120 [ 401.613361][T11925] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 401.613380][T11925] ? prepare_creds+0x2c/0x950 [ 401.613405][T11925] prepare_creds+0x2c/0x950 [ 401.613426][T11925] lookup_user_key+0xfb2/0x1300 [ 401.613452][T11925] ? __pfx_lookup_user_key+0x10/0x10 [ 401.613476][T11925] ? __pfx_do_futex+0x10/0x10 [ 401.613499][T11925] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 401.613527][T11925] ? xfd_validate_state+0x129/0x190 [ 401.613549][T11925] keyctl_keyring_move+0x7a/0x150 [ 401.613570][T11925] __do_sys_keyctl+0x21d/0x5a0 [ 401.613593][T11925] do_syscall_64+0x106/0xf80 [ 401.613609][T11925] ? clear_bhb_loop+0x40/0x90 [ 401.613626][T11925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.613641][T11925] RIP: 0033:0x7f5d41d9bf79 [ 401.613655][T11925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.613670][T11925] RSP: 002b:00007f5d42c44028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 401.613685][T11925] RAX: ffffffffffffffda RBX: 00007f5d42015fa0 RCX: 00007f5d41d9bf79 [ 401.613695][T11925] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 000000000000001e [ 401.613704][T11925] RBP: 00007f5d41e327e0 R08: 0000000000000001 R09: 0000000000000000 [ 401.613712][T11925] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 401.613721][T11925] R13: 00007f5d42016038 R14: 00007f5d42015fa0 R15: 00007ffd8e508628 [ 401.613740][T11925] [ 403.406503][T11950] snd_virmidi snd_virmidi.0: control 5:9:1:IA>/[k [ 404.379589][T11962] dump_stack_lvl+0x100/0x190 [ 404.379615][T11962] should_fail_ex.cold+0x5/0xa [ 404.379633][T11962] should_failslab+0xc2/0x120 [ 404.379656][T11962] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 404.379676][T11962] ? __d_alloc+0x34/0xa80 [ 404.379697][T11962] ? lockdep_init_map_type+0x5c/0x250 [ 404.379720][T11962] __d_alloc+0x34/0xa80 [ 404.379744][T11962] d_alloc_pseudo+0x1c/0xc0 [ 404.379761][T11962] alloc_file_pseudo+0xcf/0x230 [ 404.379777][T11962] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 404.379793][T11962] ? alloc_fd+0x476/0x790 [ 404.379816][T11962] sock_alloc_file+0x50/0x210 [ 404.379834][T11962] __sys_socket+0x1c0/0x260 [ 404.379855][T11962] ? __pfx___sys_socket+0x10/0x10 [ 404.379880][T11962] __x64_sys_socket+0x72/0xb0 [ 404.379900][T11962] ? lockdep_hardirqs_on+0x78/0x100 [ 404.379917][T11962] do_syscall_64+0x106/0xf80 [ 404.379932][T11962] ? clear_bhb_loop+0x40/0x90 [ 404.379951][T11962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.379967][T11962] RIP: 0033:0x7f5d41d9bf79 [ 404.379982][T11962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.380003][T11962] RSP: 002b:00007f5d42c23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 404.380019][T11962] RAX: ffffffffffffffda RBX: 00007f5d42016090 RCX: 00007f5d41d9bf79 [ 404.380029][T11962] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000010 [ 404.380038][T11962] RBP: 00007f5d41e327e0 R08: 0000000000000000 R09: 0000000000000000 [ 404.380047][T11962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.380056][T11962] R13: 00007f5d42016128 R14: 00007f5d42016090 R15: 00007ffd8e508628 [ 404.380076][T11962] [ 404.601780][T11963] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 74 [ 404.614394][T11963] EXT4-fs (sda1): This should not happen!! Data will be lost [ 404.614394][T11963] [ 406.035958][T11987] ================================================================== [ 406.044141][T11987] BUG: KASAN: slab-use-after-free in dvb_device_open+0x33f/0x3b0 [ 406.051871][T11987] Read of size 8 at addr ffff88802d1fe818 by task syz.2.1198/11987 [ 406.059752][T11987] [ 406.062079][T11987] CPU: 0 UID: 0 PID: 11987 Comm: syz.2.1198 Tainted: G U L syzkaller #0 PREEMPT(full) [ 406.062104][T11987] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 406.062110][T11987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 406.062120][T11987] Call Trace: [ 406.062127][T11987] [ 406.062134][T11987] dump_stack_lvl+0x100/0x190 [ 406.062158][T11987] print_report+0x156/0x4c9 [ 406.062179][T11987] ? __virt_addr_valid+0x81/0x620 [ 406.062197][T11987] ? __phys_addr+0xe8/0x180 [ 406.062215][T11987] ? dvb_device_open+0x33f/0x3b0 [ 406.062232][T11987] kasan_report+0xdf/0x1e0 [ 406.062254][T11987] ? dvb_device_open+0x33f/0x3b0 [ 406.062272][T11987] ? __pfx_dvb_device_open+0x10/0x10 [ 406.062288][T11987] dvb_device_open+0x33f/0x3b0 [ 406.062305][T11987] ? __pfx_dvb_device_open+0x10/0x10 [ 406.062322][T11987] chrdev_open+0x234/0x6a0 [ 406.062343][T11987] ? __pfx_apparmor_file_open+0x10/0x10 [ 406.062363][T11987] ? __pfx_chrdev_open+0x10/0x10 [ 406.062383][T11987] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 406.062406][T11987] do_dentry_open+0x6d8/0x1660 [ 406.062426][T11987] ? __pfx_chrdev_open+0x10/0x10 [ 406.062448][T11987] vfs_open+0x82/0x3f0 [ 406.062463][T11987] path_openat+0x208c/0x31a0 [ 406.062486][T11987] ? __pfx_path_openat+0x10/0x10 [ 406.062509][T11987] do_file_open+0x20e/0x430 [ 406.062530][T11987] ? __pfx_do_file_open+0x10/0x10 [ 406.062556][T11987] ? alloc_fd+0x476/0x790 [ 406.062575][T11987] ? do_getname+0x191/0x390 [ 406.062590][T11987] do_sys_openat2+0x10d/0x1e0 [ 406.062605][T11987] ? __pfx_do_sys_openat2+0x10/0x10 [ 406.062620][T11987] ? do_raw_spin_lock+0x128/0x260 [ 406.062640][T11987] ? kcov_ioctl+0x16a/0x720 [ 406.062661][T11987] __x64_sys_openat+0x12d/0x210 [ 406.062677][T11987] ? __pfx___x64_sys_openat+0x10/0x10 [ 406.062692][T11987] ? kcov_ioctl+0x16a/0x720 [ 406.062714][T11987] do_syscall_64+0x106/0xf80 [ 406.062729][T11987] ? clear_bhb_loop+0x40/0x90 [ 406.062746][T11987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.062761][T11987] RIP: 0033:0x7fed9f39bf79 [ 406.062775][T11987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.062790][T11987] RSP: 002b:00007feda0174028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 406.062814][T11987] RAX: ffffffffffffffda RBX: 00007fed9f616090 RCX: 00007fed9f39bf79 [ 406.062824][T11987] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 406.062834][T11987] RBP: 00007fed9f4327e0 R08: 0000000000000000 R09: 0000000000000000 [ 406.062844][T11987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 406.062853][T11987] R13: 00007fed9f616128 R14: 00007fed9f616090 R15: 00007ffc53d358c8 [ 406.062868][T11987] [ 406.062873][T11987] [ 406.332177][T11987] Allocated by task 1: [ 406.336229][T11987] kasan_save_stack+0x30/0x50 [ 406.340896][T11987] kasan_save_track+0x14/0x30 [ 406.345554][T11987] __kasan_kmalloc+0xaa/0xb0 [ 406.350127][T11987] dvb_register_device+0x1d6/0x1e60 [ 406.355323][T11987] dvb_register_frontend+0x5a8/0x8a0 [ 406.360726][T11987] vidtv_bridge_probe+0x44b/0xa30 [ 406.365893][T11987] platform_probe+0x106/0x1d0 [ 406.370566][T11987] really_probe+0x241/0xa60 [ 406.375067][T11987] __driver_probe_device+0x1de/0x400 [ 406.380418][T11987] driver_probe_device+0x4c/0x1b0 [ 406.385454][T11987] __driver_attach+0x2f4/0x6a0 [ 406.390211][T11987] bus_for_each_dev+0x13e/0x1d0 [ 406.395041][T11987] bus_add_driver+0x305/0x5b0 [ 406.399698][T11987] driver_register+0x1e2/0x360 [ 406.404445][T11987] vidtv_bridge_init+0x38/0x70 [ 406.409192][T11987] do_one_initcall+0x11d/0x760 [ 406.413940][T11987] kernel_init_freeable+0x6e5/0x7a0 [ 406.419131][T11987] kernel_init+0x1f/0x1e0 [ 406.423461][T11987] ret_from_fork+0x754/0xd80 [ 406.428048][T11987] ret_from_fork_asm+0x1a/0x30 [ 406.432794][T11987] [ 406.435109][T11987] Freed by task 11507: [ 406.439162][T11987] kasan_save_stack+0x30/0x50 [ 406.444105][T11987] kasan_save_track+0x14/0x30 [ 406.448775][T11987] kasan_save_free_info+0x3b/0x70 [ 406.453824][T11987] __kasan_slab_free+0x5f/0x80 [ 406.458581][T11987] kfree+0x1f6/0x6b0 [ 406.462480][T11987] dvb_device_put.part.0+0x57/0x90 [ 406.467678][T11987] dvb_device_open+0x2ba/0x3b0 [ 406.472430][T11987] chrdev_open+0x234/0x6a0 [ 406.476834][T11987] do_dentry_open+0x6d8/0x1660 [ 406.481585][T11987] vfs_open+0x82/0x3f0 [ 406.485642][T11987] path_openat+0x208c/0x31a0 [ 406.490214][T11987] do_file_open+0x20e/0x430 [ 406.494701][T11987] do_sys_openat2+0x10d/0x1e0 [ 406.499355][T11987] __x64_sys_openat+0x12d/0x210 [ 406.504183][T11987] do_syscall_64+0x106/0xf80 [ 406.508752][T11987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.514627][T11987] [ 406.516930][T11987] The buggy address belongs to the object at ffff88802d1fe800 [ 406.516930][T11987] which belongs to the cache kmalloc-256 of size 256 [ 406.530959][T11987] The buggy address is located 24 bytes inside of [ 406.530959][T11987] freed 256-byte region [ffff88802d1fe800, ffff88802d1fe900) [ 406.544643][T11987] [ 406.546948][T11987] The buggy address belongs to the physical page: [ 406.553344][T11987] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802d1fe800 pfn:0x2d1fe [ 406.563476][T11987] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 406.571951][T11987] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 406.580425][T11987] page_type: f5(slab) [ 406.584382][T11987] raw: 00fff00000000240 ffff88813fe36b40 ffffea0001ade590 ffffea000182e310 [ 406.592985][T11987] raw: ffff88802d1fe800 000000000010000f 00000000f5000000 0000000000000000 [ 406.601638][T11987] head: 00fff00000000240 ffff88813fe36b40 ffffea0001ade590 ffffea000182e310 [ 406.610283][T11987] head: ffff88802d1fe800 000000000010000f 00000000f5000000 0000000000000000 [ 406.618929][T11987] head: 00fff00000000001 ffffea0000b47f81 00000000ffffffff 00000000ffffffff [ 406.627575][T11987] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 406.636218][T11987] page dumped because: kasan: bad access detected [ 406.642695][T11987] page_owner tracks the page as allocated [ 406.648383][T11987] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 14431549542, free_ts 0 [ 406.668069][T11987] post_alloc_hook+0x153/0x170 [ 406.672815][T11987] get_page_from_freelist+0x111d/0x3140 [ 406.678343][T11987] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 406.684245][T11987] new_slab+0xa6/0x6e0 [ 406.688305][T11987] refill_objects+0x26b/0x400 [ 406.692959][T11987] __pcs_replace_empty_main+0x19f/0x600 [ 406.698498][T11987] __kmalloc_cache_noprof+0x493/0x6f0 [ 406.703848][T11987] bus_add_driver+0x92/0x5b0 [ 406.708421][T11987] driver_register+0x1e2/0x360 [ 406.713169][T11987] usb_register_driver+0x21c/0x3e0 [ 406.718262][T11987] do_one_initcall+0x11d/0x760 [ 406.723010][T11987] kernel_init_freeable+0x6e5/0x7a0 [ 406.728200][T11987] kernel_init+0x1f/0x1e0 [ 406.732508][T11987] ret_from_fork+0x754/0xd80 [ 406.737080][T11987] ret_from_fork_asm+0x1a/0x30 [ 406.741825][T11987] page_owner free stack trace missing [ 406.747178][T11987] [ 406.749499][T11987] Memory state around the buggy address: [ 406.755115][T11987] ffff88802d1fe700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 406.763160][T11987] ffff88802d1fe780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 406.771203][T11987] >ffff88802d1fe800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 406.779239][T11987] ^ [ 406.784065][T11987] ffff88802d1fe880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 406.792104][T11987] ffff88802d1fe900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 406.800136][T11987] ================================================================== [ 408.384038][T11752] netdevsim netdevsim26 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.487194][T11987] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 408.494410][T11987] CPU: 0 UID: 0 PID: 11987 Comm: syz.2.1198 Tainted: G U L syzkaller #0 PREEMPT(full) [ 408.505336][T11987] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 408.510508][T11987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 408.520572][T11987] Call Trace: [ 408.523839][T11987] [ 408.526840][T11987] dump_stack_lvl+0x100/0x190 [ 408.531508][T11987] vpanic+0x552/0x970 [ 408.535469][T11987] ? __pfx_vpanic+0x10/0x10 [ 408.539952][T11987] ? dvb_device_open+0x33f/0x3b0 [ 408.544870][T11987] panic+0xd1/0xe0 [ 408.548599][T11987] ? __pfx_panic+0x10/0x10 [ 408.553001][T11987] ? dvb_device_open+0x33f/0x3b0 [ 408.557922][T11987] ? preempt_schedule_common+0x42/0xc0 [ 408.563449][T11987] check_panic_on_warn.cold+0x19/0x34 [ 408.568801][T11987] end_report.part.0+0x3a/0x90 [ 408.573591][T11987] kasan_report.cold+0xe/0x18 [ 408.578253][T11987] ? dvb_device_open+0x33f/0x3b0 [ 408.583261][T11987] ? __pfx_dvb_device_open+0x10/0x10 [ 408.588530][T11987] dvb_device_open+0x33f/0x3b0 [ 408.593275][T11987] ? __pfx_dvb_device_open+0x10/0x10 [ 408.598544][T11987] chrdev_open+0x234/0x6a0 [ 408.602955][T11987] ? __pfx_apparmor_file_open+0x10/0x10 [ 408.608486][T11987] ? __pfx_chrdev_open+0x10/0x10 [ 408.613407][T11987] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 408.619732][T11987] do_dentry_open+0x6d8/0x1660 [ 408.624478][T11987] ? __pfx_chrdev_open+0x10/0x10 [ 408.629412][T11987] vfs_open+0x82/0x3f0 [ 408.633472][T11987] path_openat+0x208c/0x31a0 [ 408.638052][T11987] ? __pfx_path_openat+0x10/0x10 [ 408.642998][T11987] do_file_open+0x20e/0x430 [ 408.647489][T11987] ? __pfx_do_file_open+0x10/0x10 [ 408.652504][T11987] ? alloc_fd+0x476/0x790 [ 408.656820][T11987] ? do_getname+0x191/0x390 [ 408.661323][T11987] do_sys_openat2+0x10d/0x1e0 [ 408.665980][T11987] ? __pfx_do_sys_openat2+0x10/0x10 [ 408.671159][T11987] ? do_raw_spin_lock+0x128/0x260 [ 408.676181][T11987] ? kcov_ioctl+0x16a/0x720 [ 408.680670][T11987] __x64_sys_openat+0x12d/0x210 [ 408.685508][T11987] ? __pfx___x64_sys_openat+0x10/0x10 [ 408.690861][T11987] ? kcov_ioctl+0x16a/0x720 [ 408.695349][T11987] do_syscall_64+0x106/0xf80 [ 408.699920][T11987] ? clear_bhb_loop+0x40/0x90 [ 408.704579][T11987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.710457][T11987] RIP: 0033:0x7fed9f39bf79 [ 408.714854][T11987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.734474][T11987] RSP: 002b:00007feda0174028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 408.742868][T11987] RAX: ffffffffffffffda RBX: 00007fed9f616090 RCX: 00007fed9f39bf79 [ 408.750835][T11987] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 408.758786][T11987] RBP: 00007fed9f4327e0 R08: 0000000000000000 R09: 0000000000000000 [ 408.766738][T11987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.774694][T11987] R13: 00007fed9f616128 R14: 00007fed9f616090 R15: 00007ffc53d358c8 [ 408.782650][T11987] [ 408.785803][T11987] Kernel Offset: disabled [ 408.790118][T11987] Rebooting in 86400 seconds..