last executing test programs: 22m23.26715937s ago: executing program 3 (id=612): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) connect$auto(0x3, 0x0, 0x50) (async) unshare$auto(0x40000080) (async, rerun: 32) unshare$auto(0x40000080) (async, rerun: 32) prctl$auto(0x3e, 0x1, 0x0, 0x8001, 0x0) (async, rerun: 32) socket(0x2c, 0x1, 0x0) (async, rerun: 32) mmap$auto(0x200, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x408000) (async, rerun: 64) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x59, 0x0) (async) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) (async) read$auto(0x3, 0x0, 0x5) (async, rerun: 32) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) (rerun: 32) ioctl$auto(0x3, 0x402c542b, 0x38) ioctl$auto_TIOCSTI2(r1, 0x5412, 0x0) (async) r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x8000, 0x0) write$auto_fb_fops_fb_chrdev(r3, 0x0, 0x0) (async) getsockopt$auto(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) (async) setsockopt$auto_SO_RCVLOWAT(r2, 0x7, 0x12, &(0x7f00000000c0)='/dev/fb0\x00', 0x1000) (async) mmap$auto(0x0, 0x40009, 0x1ff, 0x9b72, 0x7, 0x28000) stat$auto(0x0, &(0x7f0000000140)={0x2, 0x0, 0x80, 0x7, 0xffffffffffffffff, 0xee00, 0x0, 0xd3, 0x6, 0x7fffffff, 0x0, 0xa82, 0x0, 0x7, 0x6, 0x200, 0x7}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES64=r2, @ANYRES16, @ANYBLOB="000126bd7000fbdbdf2502000000080001"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x20044000) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="cd30768fcf845c59", @ANYRES16=0x0, @ANYBLOB="010025bd7040ffdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) 22m21.249225324s ago: executing program 3 (id=616): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0x5000aea5, 0x0) 22m21.054602053s ago: executing program 3 (id=618): madvise$auto(0x0, 0x2003f2, 0x15) 22m20.886974013s ago: executing program 3 (id=619): mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) setitimer$auto(0x2, &(0x7f0000000040)={{0x0, 0x5}, {0x0, 0x4800000000000}}, 0x0) setitimer$auto_ITIMER_PROF(0x2, 0x0, 0x0) r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0x9b77, r0, 0x8000) connect$auto(0x3, &(0x7f0000000180)=@phonet={0x23, 0x4, 0x1, 0x8}, 0x54) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop13\x00', 0x5292c0, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r1, 0x4c08, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711, @my=0x1}, 0x55) setitimer$auto_ITIMER_REAL(0x0, &(0x7f0000000080)={{0x1893, 0xd}, {0x8, 0x6}}, &(0x7f0000000100)={{0x81, 0xfffffffffffffff2}, {0x132a, 0x8}}) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_KVM_CHECK_EXTENSION(r2, 0xae03, 0x27) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x67e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_SERVICE(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01003ee56f94d2eff7aefcee601a6e7528bd7000fcdbdf250e0000000800018004000480"], 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x20008004) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) ioctl$auto_SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521, 0x0) socket(0x15, 0x1, 0x84) writev$auto(0xffffffffffffffff, 0x0, 0x61b3) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) futex_waitv$auto(&(0x7f0000000300)={0x0, 0x4, 0x2}, 0x1, 0x0, &(0x7f0000000340)={0x225c17d03, 0x800006}, 0x0) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) 22m19.511467936s ago: executing program 3 (id=623): mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nbd3\x00', 0x0, 0x0) socket(0xa, 0x801, 0x84) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x2, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) io_setup$auto(0x1, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000001240), 0x40, 0x0) ioctl$auto(r1, 0x3b8b, r0) 22m19.300511068s ago: executing program 3 (id=625): msgctl$auto_MSG_STAT(0x7, 0xb, &(0x7f0000000500)={{0x4, 0x0, 0xee01, 0xd, 0x9, 0x7, 0x4}, &(0x7f0000000480)=0x40, &(0x7f00000004c0)=0x7, 0x5, 0x7b76, 0x3, 0x100, 0x5, 0xf495, 0xfff9, 0x2, @inferred=0xffffffffffffffff, @raw=0x1}) r1 = getpid() shmctl$auto_IPC_RMID(0x7, 0x0, &(0x7f00000006c0)={{0x19, 0x0, r0, 0x1, 0x1, 0x8, 0xad96}, 0x4, 0x1, 0x1, 0x6, @inferred=r1, @raw=0x401, 0x5, 0x0, &(0x7f0000000580)="aa86310e9dffd7e46d6b3becb28f1914a320bf39cf96dade3c6a6f54cb6982219bf51f746cba1148c2a93bc11a2a8d44f0664d332081490b7a28531b744cf0ffd61028ca5d00c63c71bd43e3b23e05221793de61fb433475cfa9f19235997413b17bc136f5a8c2e735131e42a447d3e9c92706b8a9b6185271b05047ebb095da0463b11acc62470bc0c01ec070fe8164dd11c2f3e9037d05531f8db8b1ec990fdbdc7908fd1a38f5ef3fe103f951ade018c00a5b6cbe6a9a6a525728", &(0x7f0000000640)="a50e9a504626ada4695b96fe84f27abae8f9eee1532db82efe9b2984faa800f43488ba8f9d6a498788d19252f5b94061fe5d370b96d9ab8c162795fb5fcf51d2b9000a1bcca788575e15c957f9666f7b42e29d3530e6affb516aa65ff83a214f66348e2c0d3762af2c67db3953b14180849e1aea6e"}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) migrate_pages$auto(0x0, 0x8, 0x0, 0x0) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(r2, 0x400454ca, 0x38) r3 = socket(0x10, 0xa, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, r2, 0x0) fallocate$auto(0xffffffffffffffff, 0x7, 0xd, 0x4cbd5d) r4 = getpid() process_vm_readv$auto(r4, 0x0, 0x800000001, 0x0, 0x6, 0x8) sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={0x0}, 0x1, 0x0, 0x0, 0xc094}, 0x0) r5 = socket(0x1e, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.0/usb1/power/wakeup_max_time_ms\x00', 0x0, 0x0) finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004) socket(0x29, 0x801, 0x84) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/cifs/open_files\x00', 0x0, 0x0) socketpair$auto(0x8, 0x1, 0x8000000000000000, 0x0) r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vbi0\x00', 0x8302, 0x0) ioctl$auto(r6, 0xc0045627, r5) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, 0x0, 0x33) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) fstat$auto(r2, &(0x7f0000000080)={0x7fffffffffffffff, 0x2, 0x6, 0x200, 0xffffffffffffffff, 0xee00, 0x0, 0x81, 0x96ae, 0x0, 0x3, 0x2, 0xffffffffffffffff, 0x8, 0x4, 0x30000000000, 0x2}) setresuid$auto(r7, r7, 0x0) 22m4.209104075s ago: executing program 32 (id=625): msgctl$auto_MSG_STAT(0x7, 0xb, &(0x7f0000000500)={{0x4, 0x0, 0xee01, 0xd, 0x9, 0x7, 0x4}, &(0x7f0000000480)=0x40, &(0x7f00000004c0)=0x7, 0x5, 0x7b76, 0x3, 0x100, 0x5, 0xf495, 0xfff9, 0x2, @inferred=0xffffffffffffffff, @raw=0x1}) r1 = getpid() shmctl$auto_IPC_RMID(0x7, 0x0, &(0x7f00000006c0)={{0x19, 0x0, r0, 0x1, 0x1, 0x8, 0xad96}, 0x4, 0x1, 0x1, 0x6, @inferred=r1, @raw=0x401, 0x5, 0x0, &(0x7f0000000580)="aa86310e9dffd7e46d6b3becb28f1914a320bf39cf96dade3c6a6f54cb6982219bf51f746cba1148c2a93bc11a2a8d44f0664d332081490b7a28531b744cf0ffd61028ca5d00c63c71bd43e3b23e05221793de61fb433475cfa9f19235997413b17bc136f5a8c2e735131e42a447d3e9c92706b8a9b6185271b05047ebb095da0463b11acc62470bc0c01ec070fe8164dd11c2f3e9037d05531f8db8b1ec990fdbdc7908fd1a38f5ef3fe103f951ade018c00a5b6cbe6a9a6a525728", &(0x7f0000000640)="a50e9a504626ada4695b96fe84f27abae8f9eee1532db82efe9b2984faa800f43488ba8f9d6a498788d19252f5b94061fe5d370b96d9ab8c162795fb5fcf51d2b9000a1bcca788575e15c957f9666f7b42e29d3530e6affb516aa65ff83a214f66348e2c0d3762af2c67db3953b14180849e1aea6e"}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) migrate_pages$auto(0x0, 0x8, 0x0, 0x0) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(r2, 0x400454ca, 0x38) r3 = socket(0x10, 0xa, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, r2, 0x0) fallocate$auto(0xffffffffffffffff, 0x7, 0xd, 0x4cbd5d) r4 = getpid() process_vm_readv$auto(r4, 0x0, 0x800000001, 0x0, 0x6, 0x8) sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={0x0}, 0x1, 0x0, 0x0, 0xc094}, 0x0) r5 = socket(0x1e, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.0/usb1/power/wakeup_max_time_ms\x00', 0x0, 0x0) finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004) socket(0x29, 0x801, 0x84) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/cifs/open_files\x00', 0x0, 0x0) socketpair$auto(0x8, 0x1, 0x8000000000000000, 0x0) r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vbi0\x00', 0x8302, 0x0) ioctl$auto(r6, 0xc0045627, r5) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, 0x0, 0x33) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) fstat$auto(r2, &(0x7f0000000080)={0x7fffffffffffffff, 0x2, 0x6, 0x200, 0xffffffffffffffff, 0xee00, 0x0, 0x81, 0x96ae, 0x0, 0x3, 0x2, 0xffffffffffffffff, 0x8, 0x4, 0x30000000000, 0x2}) setresuid$auto(r7, r7, 0x0) 11m7.600193568s ago: executing program 2 (id=2622): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x440c0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xc20f0000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 11m7.223451834s ago: executing program 2 (id=2624): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) statmount$auto(0x0, &(0x7f0000000180)={0x3, 0x1, 0x9, 0x7352, 0x41, 0x65f, 0x1ffde, 0x7, 0x3, 0x2, 0xb, 0x3, 0x5, 0x101, 0xb4, 0x9, 0x6, 0x7ff, 0x84, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0xb4, 0x4, 0x0, 0x0, 0x0, 0xfffffff9, [0x7, 0x0, 0x68, 0x0, 0x100000000, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x1000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800000000000000, 0x7e30e0be]}, 0x1fe, 0xf) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='('], 0x28}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000180), 0x1) socket(0x2, 0x1, 0x106) socket(0x1e, 0x1, 0x0) setsockopt$auto(0x3, 0x10f, 0x8a, 0x0, 0x14) prctl$auto(0x22, 0x5, 0x2009, 0xfffffffffffffffe, 0x0) rmdir$auto(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00') r1 = io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x15, 0x5, 0x0) ioctl$auto(0x3, 0x89e0, 0x91) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vbi7\x00', 0x2aa01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_gtp(0x0, r3) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, r0) poll$auto(&(0x7f0000000000)={r1}, 0x200, 0x8) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x7ff, 0x3, 0xff, 0x10001, 0x400000000001, 0x3, 0x8001, 0xfffffffffffffffe, 0x80000700, 0x335b0eef, 0xffffdfffffffff81, 0x4]}, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000280), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) 11m6.573073439s ago: executing program 2 (id=2628): mmap$auto(0x0, 0x4020009, 0x400000000000df, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2b, 0x1, 0x0) bind$auto(r1, &(0x7f0000000040)=@isdn={0x22, 0x5, 0x1, 0x8, 0xc}, 0x69) accept$auto(r2, 0x0, 0x0) r3 = socket(0x2a, 0x2, 0x0) mmap$auto(0x4, 0x7, 0xdf, 0x3ff, 0xffffffffffffffff, 0x28000) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000300)="53b75d8b712d74dd561498031100b2bfb161c756cbb5faa1f4b489da2a2a42061f0502423007e2ecdac3612fb447c0abc4a2df877dbb276b7dd2e731ef58bffd541186d5", 0x3d2e, 0x0, 0x6, 0x0, 0x7, 0x2000001}, 0x3}, 0x4, 0x4b95) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0xc44, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) io_uring_register$auto_IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000380)="3762fac3532e6b7af7a8b442426a92d9978eb05f7b026d498735d911803c5ff1ba7ba221adb48c1315d53f605046eaf0aaae87ba204cfa84b272459ce2756542b5968e00c704ff0cf2b488358487e2891fbbfaabe52aa0cb6a70136943af38e87b172762b98708406490f3bd641e4977f7bc78f000e298d8eeba4b8d9b8101c857c5ad94089d4d53051c4ab144c8fbc2499e2850b9b4ec2b276100cef939761b59a77c1edbba4008a388738834ede070821198ac7410a4", 0x401) r4 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r4, 0x65, 0x1, 0x0, 0x800) r5 = socket(0x27, 0x2, 0x10000002) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, 0x0, 0xfd}, 0x6a) close_range$auto(0x2, 0x8, 0x0) r6 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r5) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r6, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f00000004c0)=ANY=[@ANYRES16=r2, @ANYBLOB="acd3a990b24c4732b721d06551f25fa022e3071567cefd26214c2fd8a532c49bbab806c7ccf4d1f4fdda1f7bbee8660ec4a2fd00d57b493ab83bcb5ddf4c88078fde3d1bdaa14fd0785f254527011ab2765169928d5e4a", @ANYRES64=r1], 0x18}, 0x1, 0x0, 0x0, 0x20040800}, 0x811) socket$nl_generic(0x10, 0x3, 0x10) prlimit64$auto(0x0, 0x0, &(0x7f0000000040)={0x0, 0x100000001}, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop7/trace/act_mask\x00', 0x402, 0x0) write$auto(r7, &(0x7f0000000200)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8\xe4\x145\x90e\xd3\xe0);\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C\x1e\xe1\xdb\x03\x19\xba\xda\x19\xbbW\xc6\x8c\xd54\x0eJ\xcdpq\xedv\x93\x89\r\xb5\xe06:\x85\xc0\x982]dyf\xb8&\x95\x82 )\xca\x99h\xcf\xfdK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400000400008, 0xdb, 0x9b72, 0x2, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={&(0x7f0000000040)="fd97264478643e6e5f56f8c904782f5459c9f6192e3d3dc8d8d69609410c", 0x9}, 0x6, 0x100, 0x9, 0x7) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x20005, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x8000000) semget$auto(0x0, 0x33, 0x5) semtimedop$auto(0x0, 0x0, 0x1f4, 0x0) unshare$auto(0x80003fe) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs1\x00', 0x2, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) bpf$auto(0x840, &(0x7f00000000c0)=@link_update={0xa, @new_prog_fd=r1, 0x4007, @old_prog_fd=0x13b}, 0xa3) 6.567106697s ago: executing program 5 (id=5027): memfd_secret$auto(0x0) mmap$auto(0x0, 0x1009, 0xffb, 0x8000000008011, 0x3, 0x0) close_range$auto(0x0, 0xfffff004, 0x2) socket(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000f9dbdf250100000006000200010000000500070058000000080009000800000008000a0008000000140017"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mlockall$auto(0x800000000000005) 6.072048121s ago: executing program 5 (id=5029): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nbd4\x00', 0x101843, 0x0) ioctl$auto_HDIO_GETGEO(r0, 0x301, &(0x7f0000000380)) setuid$auto(0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="08002bbd7000fedbdf250a000000080002005e265e0008000a0001000000060001009807000008000a008d0a00000600010007000000060002002c00000008000a00060000002f0002002f7379732f6b65726e656c2f64656275672f74726163696e672f74726163655f6d61726b02685f7261770000060001008f0000000600010002000000"], 0x8c}, 0x1, 0x0, 0x0, 0x48085}, 0x8005) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000080)) 5.827018895s ago: executing program 5 (id=5030): mmap$auto(0x0, 0x40009, 0x100004, 0x16, 0x7, 0x28000) r0 = socket(0x10, 0x2, 0x6) select$auto(0x8, &(0x7f0000000180)={[0x3, 0x4, 0x3, 0x5, 0xbd, 0x400, 0x1, 0x8, 0x1, 0x1, 0x5, 0x8, 0x7, 0x737, 0x8, 0x8]}, &(0x7f0000000280)={[0x8, 0x2, 0x3, 0xca68, 0xd, 0x0, 0x3, 0x6, 0x20000008, 0x1, 0x6, 0x8, 0x3, 0x40000000, 0xc2, 0x1]}, &(0x7f0000000300)={[0x80000000, 0x7, 0x4, 0x8000, 0x9, 0x0, 0xfffffffffffffffe, 0xfffffffffffffff9, 0x2, 0x8, 0x2, 0xff, 0xd, 0x8, 0x4, 0x1]}, &(0x7f0000000380)={0x7fffffffffffffff, 0x6}) io_uring_register$auto_IORING_UNREGISTER_NAPI(r0, 0x1c, &(0x7f0000000480)="eb484d99fa20a51acdaf42b8e0a515028f144814daa0286efb6df975f6e56e56d0cbb24b4b2925aadb7b5374a4f51a56107d1ce6685f4f04ff800a0b7c445f126553b819e6671b9124af8acf7984cd039ea385685be847823b5d24e57f9ea09b4849ac02e64a40e2ca9467771b677af5bc916914c0da7dd50db5a5ea9d6b1d0345d20d8186a7d0bdcb299329ab6373809cc3d960573716139b32ca0c0604dd73e04c52b9b3c12cafdbb33304e605d61cdfda8328c97b9dd3086415071d8fc28ba0a06876b4580041053081b5f5bc700e091d7b08eacec518", 0x40) r1 = socketpair$auto(0x40001c, 0x0, 0x5, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r2 = syz_open_procfs$namespace(0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) bind$auto(r2, 0x0, 0x6a) ioctl$auto_FS_IOC_MEASURE_VERITY2(r1, 0xc0046686, &(0x7f0000000040)={0xfffc, 0x7ff, "8fcfd6c9bdc2232f0d5be4cce0b80cea57421fb87528701c782cbd7c0b579044dc7f69d44270acc74e58cea518c2e9fd65fc90e8002d6b49dbeee7"}) r3 = epoll_create$auto(0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptys3\x00', 0x10a00, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r4, 0x0, 0x80, 0x0, 0x0) getsockopt$auto_SO_BUSY_POLL(r4, 0x29, 0x3a, 0x0, 0x0) sendmsg$auto_NL80211_CMD_LEAVE_MESH(r4, 0x0, 0x20000810) ioctl$auto_VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) epoll_pwait2$auto(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, 0x8) socket(0x23, 0x1, 0x7) open(0x0, 0x22240, 0x55) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x2009a8, 0xe000) r5 = ioctl$auto_TUNSETNOCSUM(r3, 0x400454c8, &(0x7f0000000000)=0x8) prctl$auto(0x17, 0x1, 0x0, 0x0, 0x5) ioctl$auto_MEMREADOOB(r5, 0xc0104d04, &(0x7f0000000100)={0x1, 0x9, &(0x7f00000000c0)=')\x00'}) bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_4={0x17, 0xffffffffffffffff, 0x4}, 0x9) write$auto(0x3, 0x0, 0x800) 5.610219797s ago: executing program 4 (id=5032): r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/cgroup\x00', 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x101800, 0x0) readv$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/profiling\x00', 0x82002, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000080)="2dfc", 0x2) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2b, 0x5, 0xfffffffd) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mremap$auto(0xfffffffffffffe01, 0x40000000100005, 0x843, 0x3, 0x2) openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/tracing/trace_options\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PHY_GET(r2, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000000000)={0x14, r3, 0x301, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x1000000, 0x0, 0x2404c012}, 0x80) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x3, 0x0) read$auto_bm_entry_operations_binfmt_misc(0xffffffffffffffff, 0x0, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xf15a}, 0x6, 0x8, 0x5) fcntl$auto(0x3, 0x401, 0x3) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) read$auto_proc_single_file_operations_base(r0, 0x0, 0x0) 5.551049123s ago: executing program 1 (id=5033): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x3000000, 0x0, 0x100000000001, 0x0, 0x10000000000000, 0x2}, 0x895}, 0x3, 0x0) (async) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0x1002}, 0x5, &(0x7f0000000280)={&(0x7f0000000080), 0x100000001}, 0x6, 0x100000000) (async) sysfs$auto(0x2, 0x5, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0) futex_wake$auto(0x0, 0x8, 0x6, 0x6) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0xffffffffffffffff, 0x8, 0x2) (async) prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_ON(0x2, 0x1, r0, 0x1, 0x4) (async) r1 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) read$auto_rng_chrdev_ops_core(r1, &(0x7f0000000040)=""/4096, 0xfffffe82) (async) readv$auto(0x3, 0x0, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) landlock_create_ruleset$auto(&(0x7f0000000000)={0xff, 0x2, 0x9}, 0x9, 0x0) mq_notify$auto(0x4, &(0x7f0000000040)={@sival_ptr=0x0, @inferred, 0x1, @_tid}) (async) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x80) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x1, 0x0, 0xa7, &(0x7f0000000040)='\'', 0x8001, 0x9}, 0x8}, 0x1, 0x2) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0) (async) mmap$auto(0x6, 0xa34, 0x400, 0x10, 0xffffffffffffffff, 0xfffffffffffffffe) sysfs$auto(0x6, 0x5, 0xc00000) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x8}, 0x7) 5.233517123s ago: executing program 5 (id=5034): unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0100", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRES32=0x9, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x80) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000400), 0xffffffffffffffff) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/008/001\x00', 0x402, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8a241, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) write$auto_ecryptfs_miscdev_fops_miscdev(r1, &(0x7f0000000180)="58a3373c92f5", 0x6) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop13\x00', 0x8202, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$auto(r3, 0x110, 0x3, 0x0, 0x8000) ioctl$auto_SG_GET_RESERVED_SIZE(r2, 0x4c01, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4044001) sendmsg$auto_VDPA_CMD_DEV_DEL(0xffffffffffffffff, 0x0, 0x40050) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) close_range$auto(0x2, 0x8, 0x0) 4.729909053s ago: executing program 4 (id=5036): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x43102, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000240), r2) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x804) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'veth0_to_team\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000640)={'lo\x00'}) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x400, 0x0) sendmsg$auto_CTRL_CMD_GETFAMILY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x6a9, 0x70bd2a, 0x25dfdbfe, {}, [@CTRL_ATTR_FAMILY_NAME={0x6, 0x2, '\\\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x880) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4.371082701s ago: executing program 1 (id=5037): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x43102, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000240), r2) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x804) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'veth0_to_team\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000640)={'lo\x00'}) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x400, 0x0) sendmsg$auto_CTRL_CMD_GETFAMILY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x6a9, 0x70bd2a, 0x25dfdbfe, {}, [@CTRL_ATTR_FAMILY_NAME={0x6, 0x2, '\\\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x880) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4.150174786s ago: executing program 5 (id=5039): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x3602, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) eventfd$auto(0x8c) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x2, 0x3, 0x0, 0xc3e0) 3.835187797s ago: executing program 5 (id=5040): ioctl$auto_KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, 0x0) mmap$auto(0x8000000000, 0x10000, 0xdf, 0x1a, 0xffffffffffffffff, 0x3) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0x7) io_uring_setup$auto(0x9, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram6/alignment_offset\x00', 0x400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)=""/13, 0xd) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000f7, 0x3, 0x1) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) madvise$auto_MADV_GUARD_INSTALL(0x3, 0x4, 0x66) set_mempolicy_home_node$auto(0x0, 0x2010001, 0x0, 0x0) mmap$auto(0xfffffffffffffffd, 0x400006, 0xdd, 0x1d, 0x2, 0x8000) r2 = openat$auto_fops_u64_ro_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/zswap/reject_reclaim_fail\x00', 0x10000, 0x0) unshare$auto(0x8000000) semget$auto(0x0, 0x2e4a, 0x8000) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x9, 0x6}, 0x1, 0x0) fcntl$auto_F_SET_RW_HINT(r2, 0x40c, 0x8) socket(0x27, 0x800, 0x84) close_range$auto(0x2, 0x8, 0x0) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) write$auto(0x3, 0x0, 0xfffffdef) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x48000, 0x0, 0x6) r3 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001180)='/dev/input/mice\x00', 0x1a1382, 0x0) writev$auto(r3, &(0x7f0000000100)={&(0x7f0000000140), 0x7111}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) 2.26300482s ago: executing program 0 (id=5042): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x440c0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='.'], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xc20f001f, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 2.00482679s ago: executing program 0 (id=5043): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x440c0) r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000080), r0) sendmsg$auto_OVS_VPORT_CMD_DEL(r0, &(0x7f00000013c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xe2002805}, 0xc, &(0x7f0000001380)={&(0x7f0000000280)={0x10cc, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_NAME={0x6, 0x3, '@\x00'}, @OVS_VPORT_ATTR_PORT_NO={0x8}, @OVS_VPORT_ATTR_UPCALL_PID={0x1004, 0x5, "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"}, @OVS_VPORT_ATTR_UPCALL_PID={0xa2, 0x5, "fd82f656df34ab51719ad5b4d2b2b430c83f1a0e68192c6d7fffe805534c35db6992a78902580043fffa2f27e3ec651a8b43134faf808b24f87fc90ab50b9e94d5842b68ea8a4165027fd873758bd12f40b7de4fa6bf47cfc43b1bd05315bc9c996c5b55879f04720346dcdf0967a2cf2300fb95f116a61d07d20c49b55f001e71a47cb71f788a74ac76d11681abbf1612427076f8b6ca83df0f1233e037"}]}, 0x10cc}, 0x1, 0x0, 0x0, 0x80}, 0x401) eventfd$auto(0x7) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='.'], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xc20f0000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 1.678167125s ago: executing program 4 (id=5044): r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cec27\x00', 0x80200, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0xa, 0x2, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(&(0x7f00000013c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) sendmsg$auto_NETDEV_CMD_BIND_RX(r1, 0x0, 0x10) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x0, 0x0) ioctl$auto(r3, 0x1274, r3) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xfdef}, 0x1, 0x0, 0x5, 0xdf0}, 0x7}, 0x3, 0x6a) mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/gspca_m5602/parameters/dump_sensor\x00', 0x0, 0x0) r4 = socketcall$auto(0xa, 0x0) ioctl$auto(0x3, 0xae41, r4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa502}, 0x800}, 0x7, 0x4008) ioctl$auto_CEC_S_MODE(r0, 0x40046109, &(0x7f0000000040)=0x31) 1.48199865s ago: executing program 0 (id=5045): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x100, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x4, 0x100000000) mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0xc, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_RTC_UIE_ON(r1, 0x7003, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) write$auto(r2, 0x0, 0x10007c) msgctl$auto_IPC_STAT(0x1, 0x2, &(0x7f0000000640)={{0x5, 0x0, 0x0, 0xa8f1, 0x7d, 0x6, 0x7}, 0x0, 0x0, 0xff7ffffffffffffd, 0x80000001, 0xd, 0x6, 0x80cf, 0x7fff, 0xf, 0xfff8, @raw=0x6}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_COOKIE(r3, 0x1, 0x39, 0x0, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty21\x00', 0x709a82, 0x0) ioctl$auto_TIOCSTI2(r4, 0x545c, 0x0) ioctl$auto_TIOCVHANGUP2(r4, 0x5437, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) write$auto(0xffffffffffffffff, 0x0, 0x98c4) mmap$auto(0x47f, 0x10005, 0xdf, 0x18, r1, 0x100000000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x400802, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x189701, 0x0) fcntl$auto_F_SETOWN(0xffffffffffffffff, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80d40, 0x0) openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, 0x0, 0x48002, 0x0) 1.387595723s ago: executing program 1 (id=5046): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x29, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) rseq$auto(0x0, 0x0, 0x0, 0x6) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xd4, 0x0, 0x4) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x189200, 0x0) shmctl$auto_SHM_STAT_ANY(0x8, 0xf, &(0x7f0000001cc0)={{0x4, 0x0, 0x0, 0x840, 0x8, 0x3, 0x6}, 0xabb, 0x1, 0x7, 0x31, @inferred, @raw=0x3, 0x4000, 0x0, &(0x7f0000001b80)="401bd60464f55777875eb6c60f94658e1d4d3d12b20a93ef14c0d15968aeb831195e7f5343858b2c9ef9a31bf7989d3fa26d6fe0260677ec4429617dc141b859dbb97a58adda6710", &(0x7f0000001c80)="53d8488ed0e214244c98be39e9c57e91c3bb6049ce9132099d897de43da4716bca2aa70a0945964c3c0c9c3137371477749642df6241554f4074a16879"}) r1 = prctl$auto_PR_SET_MM_START_BRK(0x1, 0x6, 0x0, 0xffffffff, 0x5) ioctl$auto(0xffffffffffffffff, 0x900064b4, 0x2000000000000c37) r2 = syz_genetlink_get_family_id$auto_gtp(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(r1, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001a80)={&(0x7f0000000280)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00012dbd7000fbdbdf2500000000080001000000000005000d0081000000060006000100000008000400ac1414bb14000b000000000000000000000000000000000108000700b04e7ee411660b38ddadea63d94166f3d813822223728e180cf43fa9b34c125e3fc37298cdc42ed74ee5b8dfca453678c31f6ba2e0d3e58fd098cd9c389b23c39d88e185aa253f05e7f8fff6663a725e35745c4c99a1aff6eea84114bc214be99419da7dad86fe", @ANYRES32, @ANYBLOB="08000500e0000001080002000500000014000b00ff010000000000000000000000000001"], 0x74}, 0x1, 0x0, 0x0, 0x44085}, 0x4040051) ioctl$auto_SG_GET_RESERVED_SIZE(r0, 0x4c08, 0x0) socket(0xa, 0x1, 0x0) 1.167924159s ago: executing program 1 (id=5047): socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6d) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) write$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff) (async) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) process_vm_readv$auto(0x0, &(0x7f00000001c0)={&(0x7f0000000100)="18361a55f254dd2b7c594882957598497271959dc53b1f3fdd49d70c975169c3832df2e51e930c90772fcfd4a68824b88b20c6ccd72e432e660e66e1b3cba3d98ecae352fbe2be1b599f199ba1b8f6ce5dec4ae5baf200850539d504eee72bf7d233daf06ebf003de92fb74ceed5ef36e231e2504f161dffe729eaee2cc1543800d264c940a8da0f9ebc651b266156da6e02c78e06e7b8d5dfb16477ac93b1f68a3e27c5f38462791c4a6803d185d5018a", 0x2}, 0x0, &(0x7f0000000280)={&(0x7f0000000200)="41d55a3b34da3a18afc8b9bf73bd64f9418d6c57bc8dbfd6f2d1859328f21b7315457ed08da4add9223951267f06c13c4d51b1cfade4aa2ab036584874ce99de4f2ccc01ee"}, 0x5, 0x0) (async) madvise$auto(0x0, 0x200007, 0x19) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x201, 0x0) (async) mbind$auto(0xf000, 0x8000000000000002, 0x100000000, 0x0, 0x6, 0x2) (async) futex_wake$auto(0x0, 0x5, 0x4, 0xa) (async) futex_wake$auto(0x0, 0xffffffffffffbff8, 0xfff, 0x6) (async) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) (async) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/pagemap\x00', 0x20000, 0x0) ioctl$auto_PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) (async) iopl$auto(0x2) (async) shmctl$auto_SHM_STAT_ANY(0x2, 0xf, &(0x7f00000005c0)={{0x1, 0xee00, 0xee01, 0x8, 0x9, 0x0, 0xd1}, 0xffff46e6, 0x700e, 0x8, 0x8, @raw=0x8, @raw=0x400, 0x7b, 0x0, 0x0, 0x0}) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mtd0ro\x00', 0x800, 0x0) (async) r1 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto(0x3, 0x0, 0xfdef) (async) write$auto_snd_seq_f_ops_seq_clientmgr(r1, &(0x7f0000000180)="632d1bfe595046ab5c40bd6163307acb6d16baef6176e669a216aae1", 0x1c) (async) madvise$auto(0xfd, 0x2, 0x9) (async) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x80800, 0x0) 974.894921ms ago: executing program 0 (id=5048): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x3602, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) eventfd$auto(0x8c) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x2, 0x3, 0x0, 0xc3e0) 877.314945ms ago: executing program 1 (id=5049): read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0) (async) read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x1, 0x20009, 0x4000000000d7, 0x17, 0x400, 0x8001) (async) mmap$auto(0x1, 0x20009, 0x4000000000d7, 0x17, 0x400, 0x8001) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000800), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@OVS_METER_ATTR_MAX_BANDS={0x8, 0x8, 0x200}]}, 0x1c}}, 0x20040084) mmap$auto(0x20000000000000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x40001) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x40001) close_range$auto(0x2, 0x8, 0xfffffffe) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x8000) r2 = prctl$auto(0x3e, 0x1, 0x0, 0xfffffffffffffffe, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000001140)=""/4093, 0xffd) io_uring_setup$auto(0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) (async) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) (async) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x200080, 0x0) (async) openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x200080, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x4) close_range$auto(r3, r2, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS2\x00', 0x101e81, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS2\x00', 0x101e81, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x1) connect$auto(0x3, &(0x7f0000000000)=@hci={0x1f, 0x1}, 0x54) close_range$auto(0x0, 0xffffeffe, 0x2) socket(0x27, 0x4, 0x8) pipe$auto(0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) socket(0x2, 0x3, 0xa) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$auto_XFS_IOC_ALLOCSP64(r2, 0x40305824, 0x0) 875.643888ms ago: executing program 0 (id=5050): creat$auto(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file1\x00', 0x4241, 0xe1d2b27bdc14aaac) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100)='./file1\x00') write$auto(r0, &(0x7f0000000040)='\x00', 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r1) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000040)={0x0, 0x3f, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="251729bd7000fedbdf250100000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x41001}, 0x64810) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x0, 0x0) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000fbdbdf2512e233da08000300", @ANYRES32=r5], 0x24}, 0x1, 0x1400, 0x0, 0x80}, 0x20000084) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r6 = socket(0x2, 0x801, 0x106) getsockopt$auto(r6, 0x6, 0x2, 0x0, 0x0) sendto$auto(0xffffffffffffffff, 0x0, 0x401, 0x6358c0, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x688140, 0x0) ioctl$auto(r3, 0xc0c0128e, r3) r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) ioctl$auto(r0, 0xfffffabc, r7) 633.469677ms ago: executing program 4 (id=5051): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram10\x00', 0x0, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r0, 0x8000) mlock$auto(0x7c88, 0x7fff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self/net/snmp\x00', 0x101100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000140)=""/103, 0x67) r2 = fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) mlockall$auto(0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000003c0), r3) sendmsg$auto_IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="8460d4a37a801c134224ac510ce8fc7b23105d0cc5fb088fc60cfe03b6347815dd9721f61b5cf6650f70c44714ded8c17bce2fe895bbbad810c201fa7e23aa63c9685f1cb6ec5b1f840b38757c1fc119a5d16d4c1daaa2dd6bfb06ba6469f83f81d3ea959f27133ef2023cf3e42d3df40f5cd593720943fb7072393df80baf04effcd18b2b21c143ac9bfbc690017f7af4a4c59f6ba3a66ac5cc2222790655fe6b9dbfd36126fa97d4759d6257905d4dbf233edd64a5e3bd0b822e4b7f1d0f2b4ffd8b977fe0414424305fd00014e84a3775d7f0a51f03e9e9f5ef", @ANYRES16=r4, @ANYRES64=r3], 0x18}, 0x1, 0x0, 0x0, 0x24004801}, 0x4000084) r5 = ioctl$auto_TUNSETVNETBE2(r2, 0x400454de, &(0x7f0000000140)=0x3ff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x441, 0x0) iopl$auto(0x1) 375.078966ms ago: executing program 1 (id=5052): creat$auto(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file1\x00', 0x4241, 0xe1d2b27bdc14aaac) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100)='./file1\x00') write$auto(r0, &(0x7f0000000040)='\x00', 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r1) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000040)={0x0, 0x3f, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="251729bd7000fedbdf250100000008000300", @ANYRES32=0x0, @ANYBLOB="25eb7e214ff4032819bd04b4280e39cb97c207557954a796e8b632c3ef8dbaa18eafec26795aa16d97e5934bf858ef5fa8a3dbf50dc9f24efc8b0be2e90f984d9a57f2cb40bc554e7da4df0f297861a1a1f235a15ef7d43334be85a40a376f49ca01b8ebacbaa01b4323dc2872e69a2d63925c077546520a059feff5a6069d77996086d298ec9800001e5f744ec6dca2828e7bc928cdddb07f87e6e732780d3ad08f590e982fd23daed00e90170b0feca03c3bf7badce859e9bb902fe4128964b27daabefc2b4e4e1b3bb7508e66bab13b1f0ffbf126eaa3d0d717299c64479aa15033d4561bfd10acab00025d4e4698fa3667d034530f8a3085469dcd35531263dc9960f13882088949bd000c9f7795680d75f56d576985df88176cad5ec13a95e4780a12e6c7f78c59c42fbf14b56bf5f9f6b9f5ba10632e6bef56c2b3d192dd494b9516e98f1d712b7a8cb30ab0576d45fcd03bcbb78b9683c8480ab0d4b3aba9a4e90e8f35b426f3a2d4072a44a497d2af81d7c7d2a3ec892903ffaa96c25331393b913a244a1c5d4a3329b69b75b340a92fa9fd83b10308d87d4de583b687158f5be024befd3fd8da04535194e6cf6e73e9176d291ea038816664018c6c20543ca07785fe0a0a36f6690529b0c4d576ce9637d827094071e9aee8b29143408160eded6ad15c463f8d8e6a1b4297f0aa57ffe480b2621fd453f8a77a189e4c7b185a19f8ab15b6f163d795deaf8979cef43cd6a00e32c675896624edfddcd0cf1b8d2fbcea6b6c879dfdb9b508f04dc981b732c91471fa25df74974f4d9ed8"], 0x1c}, 0x1, 0x0, 0x0, 0x41001}, 0x64810) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x0, 0x0) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000fbdbdf2512e233da08000300", @ANYRES32=r5], 0x24}, 0x1, 0x1400, 0x0, 0x80}, 0x20000084) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x801, 0x106) sendto$auto(0xffffffffffffffff, 0x0, 0x401, 0x6358c0, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x688140, 0x0) ioctl$auto(r3, 0xc0c0128e, r3) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) ioctl$auto(r0, 0xfffffabc, r6) 324.707473ms ago: executing program 0 (id=5053): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x3, 0x0) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x80000000, 0x2, 0x71, 0x111, r0, 0xe) socket(0x2, 0x1, 0x106) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x3, 0x2) setsockopt$auto(0x3, 0x0, 0x4, 0xfffffffffffffffc, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x800) close_range$auto(0x0, 0xffffffffffffffff, 0x2) r1 = fanotify_init$auto(0x1f53, 0x2000000000002) r2 = open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r2, 0x0) rename$auto(&(0x7f0000000480)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') read$auto_tracing_pipe_fops_trace(r1, &(0x7f0000001200)=""/4096, 0x1000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nbd5\x00', 0x26000, 0x0) ioctl$auto_BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(r3, 0x1276, 0x0) read$auto_transaction_log_fops_(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0xffffffffffffffff, 0x5, 0x7, 0xbe, 0xffffffffffffffff, 0x7ffe) sysfs$auto(0x2, 0x23, 0x0) r4 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) prctl$auto_PR_SVE_GET_VL(0x33, 0x4, 0x0, 0xcbf, 0x7) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000001c00)=""/4111, 0x100f) write$auto(r4, 0x0, 0x4) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) unshare$auto(0xffffffffffffffe1) unshare$auto(0x40000080) 0s ago: executing program 4 (id=5054): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x1fe, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x0, 0x2100, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000080)) io_submit$auto(0xb, 0xa, 0x0) bpf$auto(0x0, 0x0, 0x7f) ioctl$auto(0x3, 0x800005411, 0x38) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r1, 0x100000001, 0x7ff) ptrace$auto_PTRACE_GETEVENTMSG(0x4201, r1, 0x9, 0x2) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x20400, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, 0x0) close_range$auto(0x0, 0xfffffffffffff001, 0x4) r3 = socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x420009, 0xe2, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0xc) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x240202, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x121000, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_CREATE_VM(r4, 0x4048aecb, 0x0) kernel console output (not intermixed with test programs): pgin 914784 [ 1451.286504][T17355] total_pgpgout 980213 [ 1451.313485][T17355] total_pgfault 969622 [ 1451.340743][T17355] total_pgmajfault 11535 [ 1451.364233][T27121] [U] ^R [ 1451.367226][T17355] total_inactive_anon 0 [ 1451.380340][T27116] FAULT_INJECTION: forcing a failure. [ 1451.380340][T27116] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1451.399186][T17355] total_active_anon 118784 [ 1451.416545][T17355] total_inactive_file 0 [ 1451.434518][T17355] total_active_file 0 [ 1451.453423][T17355] total_unevictable 0 [ 1451.473103][T17355] anon_cost 0 [ 1451.491062][T17355] file_cost 0 [ 1451.505899][T17355] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.4415,pid=27089,uid=0 [ 1451.544260][T27116] CPU: 0 UID: 0 PID: 27116 Comm: syz.4.4419 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1451.544290][T27116] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1451.544297][T27116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1451.544307][T27116] Call Trace: [ 1451.544313][T27116] [ 1451.544319][T27116] dump_stack_lvl+0x100/0x190 [ 1451.544351][T27116] should_fail_ex.cold+0x5/0xa [ 1451.544377][T27116] get_futex_key+0x1d2/0x1510 [ 1451.544408][T27116] ? __pfx_get_futex_key+0x10/0x10 [ 1451.544430][T27116] ? __pfx___css_rstat_updated+0x10/0x10 [ 1451.544460][T27116] futex_wake+0xea/0x530 [ 1451.544476][T27116] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1451.544497][T27116] ? __pfx_futex_wake+0x10/0x10 [ 1451.544513][T27116] ? __up_read+0x2c1/0x6e0 [ 1451.544530][T27116] ? do_user_addr_fault+0x7de/0x12f0 [ 1451.544554][T27116] do_futex+0x32b/0x350 [ 1451.544571][T27116] ? __pfx_do_futex+0x10/0x10 [ 1451.544584][T27116] ? lockdep_hardirqs_on+0x78/0x100 [ 1451.544609][T27116] ? irqentry_exit+0x24d/0x970 [ 1451.544633][T27116] __x64_sys_futex+0x34f/0x4d0 [ 1451.544651][T27116] ? __pfx___x64_sys_futex+0x10/0x10 [ 1451.544668][T27116] ? __get_user_nocheck_1+0x6/0x20 [ 1451.544685][T27116] ? syscall_user_dispatch+0x76/0x130 [ 1451.544704][T27116] do_syscall_64+0x115/0x840 [ 1451.544723][T27116] ? clear_bhb_loop+0x40/0x90 [ 1451.544741][T27116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1451.544757][T27116] RIP: 0033:0x7f571dd9ce59 [ 1451.544772][T27116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1451.544792][T27116] RSP: 002b:00007f571eba90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1451.544814][T27116] RAX: ffffffffffffffda RBX: 00007f571e016098 RCX: 00007f571dd9ce59 [ 1451.544825][T27116] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f571e01609c [ 1451.544836][T27116] RBP: 00007f571e016090 R08: 0000000000000001 R09: 0000000000000000 [ 1451.544846][T27116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1451.544855][T27116] R13: 00007f571e016128 R14: 00007ffc2d567fa0 R15: 00007ffc2d568088 [ 1451.544877][T27116] [ 1451.998913][T17355] Memory cgroup out of memory: OOM victim 27089 (syz.1.4415) is already exiting. Skip killing the task [ 1452.613873][T27125] futex_wake_op: syz.1.4422 tries to shift op by -2048; fix this program [ 1453.011577][T27136] netlink: 334 bytes leftover after parsing attributes in process `syz.1.4425'. [ 1454.093348][T27136] netlink: 1166 bytes leftover after parsing attributes in process `syz.1.4425'. [ 1455.122932][T17042] Bluetooth: hci1: SCO packet too small [ 1455.277563][T27167] netlink: 326 bytes leftover after parsing attributes in process `syz.1.4433'. [ 1455.396939][T27150] kexec: Could not allocate control_code_buffer [ 1455.432818][T27171] futex_wake_op: syz.0.4434 tries to shift op by -2048; fix this program [ 1457.888538][T27216] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 1457.950123][T27216] netlink: 384 bytes leftover after parsing attributes in process `syz.5.4446'. [ 1458.465115][T27231] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4449'. [ 1460.858320][T27271] netlink: 342 bytes leftover after parsing attributes in process `syz.4.4461'. [ 1460.878521][T27264] ptp ptp0: only physical clock in use now [ 1461.934226][T27288] blktrace: Concurrent blktraces are not allowed on nbd8 [ 1462.098232][T27288] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4465'. [ 1462.730571][T27295] FAULT_INJECTION: forcing a failure. [ 1462.730571][T27295] name failslab, interval 1, probability 0, space 0, times 0 [ 1462.745356][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035c1a800: rx timeout, send abort [ 1462.757324][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888035c1a800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1462.866240][T27297] ======================================================= [ 1462.866240][T27297] WARNING: The mand mount option has been deprecated and [ 1462.866240][T27297] and is ignored by this kernel. Remove the mand [ 1462.866240][T27297] option from the mount to silence this warning. [ 1462.866240][T27297] ======================================================= [ 1462.914115][T27295] CPU: 0 UID: 0 PID: 27295 Comm: syz.5.4468 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1462.914145][T27295] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1462.914151][T27295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1462.914162][T27295] Call Trace: [ 1462.914167][T27295] [ 1462.914178][T27295] dump_stack_lvl+0x100/0x190 [ 1462.914209][T27295] should_fail_ex.cold+0x5/0xa [ 1462.914231][T27295] should_failslab+0xc2/0x120 [ 1462.914250][T27295] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1462.914273][T27295] ? alloc_empty_file+0x5b/0x1c0 [ 1462.914298][T27295] alloc_empty_file+0x5b/0x1c0 [ 1462.914323][T27295] alloc_file_pseudo+0x13a/0x230 [ 1462.914346][T27295] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1462.914368][T27295] ? alloc_fd+0x476/0x790 [ 1462.914389][T27295] sock_alloc_file+0x50/0x210 [ 1462.914407][T27295] __sys_socket+0x1c0/0x260 [ 1462.914427][T27295] ? __pfx___sys_socket+0x10/0x10 [ 1462.914446][T27295] ? ksys_write+0x1ac/0x250 [ 1462.914468][T27295] __x64_sys_socket+0x72/0xb0 [ 1462.914487][T27295] ? lockdep_hardirqs_on+0x78/0x100 [ 1462.914508][T27295] do_syscall_64+0x115/0x840 [ 1462.914527][T27295] ? clear_bhb_loop+0x40/0x90 [ 1462.914546][T27295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1462.914562][T27295] RIP: 0033:0x7f6a3f19ce59 [ 1462.914576][T27295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1462.914595][T27295] RSP: 002b:00007f6a3ffeb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1462.914610][T27295] RAX: ffffffffffffffda RBX: 00007f6a3f415fa0 RCX: 00007f6a3f19ce59 [ 1462.914621][T27295] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1462.914630][T27295] RBP: 00007f6a3f232d6f R08: 0000000000000000 R09: 0000000000000000 [ 1462.914640][T27295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1462.914649][T27295] R13: 00007f6a3f416038 R14: 00007f6a3f415fa0 R15: 00007ffd0387b4e8 [ 1462.914670][T27295] [ 1463.370742][T27291] FAULT_INJECTION: forcing a failure. [ 1463.370742][T27291] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1463.401269][T27291] CPU: 0 UID: 0 PID: 27291 Comm: syz.4.4466 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1463.401295][T27291] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1463.401301][T27291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1463.401310][T27291] Call Trace: [ 1463.401315][T27291] [ 1463.401321][T27291] dump_stack_lvl+0x100/0x190 [ 1463.401350][T27291] should_fail_ex.cold+0x5/0xa [ 1463.401369][T27291] get_futex_key+0x295/0x1510 [ 1463.401394][T27291] ? __pfx_get_futex_key+0x10/0x10 [ 1463.401414][T27291] ? lock_acquire+0x1b1/0x370 [ 1463.401441][T27291] futex_wake+0xea/0x530 [ 1463.401460][T27291] ? __pfx_futex_wake+0x10/0x10 [ 1463.401476][T27291] ? exit_mm_release+0x19/0x30 [ 1463.401505][T27291] do_futex+0x32b/0x350 [ 1463.401520][T27291] ? __pfx_do_futex+0x10/0x10 [ 1463.401534][T27291] ? __might_fault+0xc5/0x140 [ 1463.401560][T27291] mm_release+0x24a/0x2f0 [ 1463.401577][T27291] do_exit+0x707/0x2af0 [ 1463.401600][T27291] ? __pfx_do_exit+0x10/0x10 [ 1463.401620][T27291] ? do_raw_spin_lock+0x128/0x260 [ 1463.401634][T27291] ? find_held_lock+0x2b/0x80 [ 1463.401650][T27291] ? get_signal+0x7e5/0x2210 [ 1463.401669][T27291] do_group_exit+0xd5/0x2a0 [ 1463.401691][T27291] get_signal+0x20ff/0x2210 [ 1463.401706][T27291] ? madvise_unlock+0x172/0x220 [ 1463.401729][T27291] ? __audit_log_kern_module+0xc9/0x100 [ 1463.401744][T27291] ? __pfx_get_signal+0x10/0x10 [ 1463.401763][T27291] ? do_futex+0x192/0x350 [ 1463.401778][T27291] arch_do_signal_or_restart+0x91/0x7a0 [ 1463.401800][T27291] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1463.401827][T27291] ? rcu_is_watching+0x12/0xc0 [ 1463.401845][T27291] exit_to_user_mode_loop+0x98/0x670 [ 1463.401871][T27291] ? rcu_is_watching+0x12/0xc0 [ 1463.401889][T27291] do_syscall_64+0x652/0x840 [ 1463.401908][T27291] ? clear_bhb_loop+0x40/0x90 [ 1463.401926][T27291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.401940][T27291] RIP: 0033:0x7f571dd9ce59 [ 1463.401953][T27291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1463.401968][T27291] RSP: 002b:00007f571eba90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1463.401982][T27291] RAX: fffffffffffffe00 RBX: 00007f571e016098 RCX: 00007f571dd9ce59 [ 1463.401992][T27291] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f571e016098 [ 1463.402001][T27291] RBP: 00007f571e016090 R08: 0000000000000000 R09: 0000000000000000 [ 1463.402010][T27291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1463.402019][T27291] R13: 00007f571e016128 R14: 00007ffc2d567fa0 R15: 00007ffc2d568088 [ 1463.402038][T27291] [ 1466.046532][T27338] bridge0: port 3(veth1) entered blocking state [ 1466.159756][T27338] bridge0: port 3(veth1) entered disabled state [ 1466.291473][T27338] veth1: entered allmulticast mode [ 1466.391236][T27338] veth1: entered promiscuous mode [ 1466.724133][T27352] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 1466.806808][T27352] netlink: 384 bytes leftover after parsing attributes in process `syz.0.4481'. [ 1467.040621][T27360] FAULT_INJECTION: forcing a failure. [ 1467.040621][T27360] name failslab, interval 1, probability 0, space 0, times 0 [ 1467.078467][T27363] futex_wake_op: syz.0.4484 tries to shift op by -2048; fix this program [ 1467.099305][T27360] CPU: 0 UID: 0 PID: 27360 Comm: syz.4.4483 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1467.099331][T27360] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1467.099337][T27360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1467.099350][T27360] Call Trace: [ 1467.099355][T27360] [ 1467.099361][T27360] dump_stack_lvl+0x100/0x190 [ 1467.099390][T27360] should_fail_ex.cold+0x5/0xa [ 1467.099409][T27360] should_failslab+0xc2/0x120 [ 1467.099427][T27360] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1467.099449][T27360] ? taskstats_exit+0x67b/0xc10 [ 1467.099467][T27360] ? rcu_is_watching+0x12/0xc0 [ 1467.099486][T27360] taskstats_exit+0x67b/0xc10 [ 1467.099504][T27360] ? __pfx_acct_update_integrals+0x10/0x10 [ 1467.099523][T27360] ? __pfx_taskstats_exit+0x10/0x10 [ 1467.099542][T27360] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1467.099560][T27360] ? exit_signals+0x395/0xaf0 [ 1467.099579][T27360] do_exit+0x65c/0x2af0 [ 1467.099603][T27360] ? __pfx_do_exit+0x10/0x10 [ 1467.099622][T27360] ? do_raw_spin_lock+0x128/0x260 [ 1467.099646][T27360] ? find_held_lock+0x2b/0x80 [ 1467.099663][T27360] ? get_signal+0x7e5/0x2210 [ 1467.099681][T27360] do_group_exit+0xd5/0x2a0 [ 1467.099703][T27360] get_signal+0x20ff/0x2210 [ 1467.099726][T27360] ? __pfx_get_signal+0x10/0x10 [ 1467.099745][T27360] ? do_futex+0x192/0x350 [ 1467.099761][T27360] arch_do_signal_or_restart+0x91/0x7a0 [ 1467.099783][T27360] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1467.099808][T27360] ? __hrtimer_rearm_deferred+0x24d/0x740 [ 1467.099826][T27360] ? rcu_is_watching+0x12/0xc0 [ 1467.099844][T27360] exit_to_user_mode_loop+0x98/0x670 [ 1467.099866][T27360] ? rcu_is_watching+0x12/0xc0 [ 1467.099883][T27360] do_syscall_64+0x652/0x840 [ 1467.099903][T27360] ? clear_bhb_loop+0x40/0x90 [ 1467.099921][T27360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1467.099935][T27360] RIP: 0033:0x7f571dd9ce59 [ 1467.099949][T27360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1467.099962][T27360] RSP: 002b:00007f571ebca0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1467.099977][T27360] RAX: fffffffffffffe00 RBX: 00007f571e015fa8 RCX: 00007f571dd9ce59 [ 1467.099987][T27360] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f571e015fa8 [ 1467.099995][T27360] RBP: 00007f571e015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1467.100004][T27360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1467.100013][T27360] R13: 00007f571e016038 R14: 00007ffc2d567fa0 R15: 00007ffc2d568088 [ 1467.100031][T27360] [ 1467.621283][T27363] futex_wake_op: syz.0.4484 tries to shift op by -2048; fix this program [ 1467.785160][T27366] futex_wake_op: syz.4.4486 tries to shift op by -2048; fix this program [ 1469.191654][T27381] Process accounting paused [ 1469.782480][T27393] ptp ptp0: only physical clock in use now [ 1471.054345][T27408] futex_wake_op: syz.5.4495 tries to shift op by -2048; fix this program [ 1473.089419][T27443] input: jJǸ-¶š9ã%vø“ûJ86Ö‘ as /devices/virtual/input/input16 [ 1473.969945][T27459] synth uevent: /devices/virtual/mem/null: unknown uevent action string [ 1474.033291][T27459] mem null: uevent: failed to send synthetic uevent: -22 [ 1474.960246][T27491] futex_wake_op: syz.5.4514 tries to shift op by -2048; fix this program [ 1474.972529][T27492] netlink: 206 bytes leftover after parsing attributes in process `syz.1.4513'. [ 1475.656770][T27505] random: crng reseeded on system resumption [ 1475.815268][T27511] [U] ^R [ 1476.323619][T27518] sysfs_service_op_store: Client not running :-5: [ 1477.297237][T27536] futex_wake_op: syz.4.4524 tries to shift op by -2048; fix this program [ 1480.759454][T17042] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 1480.776114][T27586] Process accounting paused [ 1481.094009][T27614] netlink: 326 bytes leftover after parsing attributes in process `syz.5.4540'. [ 1481.154590][T27614] bridge0: port 2(bridge_slave_1) entered disabled state [ 1481.162242][T27614] bridge0: port 1(bridge_slave_0) entered disabled state [ 1481.944637][T27625] nbd: must specify at least one socket [ 1482.475601][T27639] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1482.547676][T27637] ptp ptp0: only physical clock in use now [ 1484.089704][T27673] [U] ^R [ 1484.123591][T27673] FAULT_INJECTION: forcing a failure. [ 1484.123591][T27673] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1484.234387][T27673] CPU: 0 UID: 0 PID: 27673 Comm: syz.4.4553 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1484.234420][T27673] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1484.234426][T27673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1484.234445][T27673] Call Trace: [ 1484.234451][T27673] [ 1484.234457][T27673] dump_stack_lvl+0x100/0x190 [ 1484.234491][T27673] should_fail_ex.cold+0x5/0xa [ 1484.234510][T27673] get_futex_key+0x1d2/0x1510 [ 1484.234536][T27673] ? __pfx_get_futex_key+0x10/0x10 [ 1484.234559][T27673] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 1484.234591][T27673] futex_wake+0xea/0x530 [ 1484.234610][T27673] ? tty_ioctl+0x93d/0x1640 [ 1484.234631][T27673] ? __pfx_futex_wake+0x10/0x10 [ 1484.234654][T27673] ? ldsem_up_read+0x4e/0x90 [ 1484.234677][T27673] ? tty_ioctl+0x345/0x1640 [ 1484.234700][T27673] do_futex+0x32b/0x350 [ 1484.234718][T27673] ? __pfx_do_futex+0x10/0x10 [ 1484.234735][T27673] ? find_held_lock+0x2b/0x80 [ 1484.234769][T27673] __x64_sys_futex+0x34f/0x4d0 [ 1484.234789][T27673] ? __pfx___x64_sys_futex+0x10/0x10 [ 1484.234806][T27673] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 1484.234830][T27673] ? syscall_user_dispatch+0x76/0x130 [ 1484.234849][T27673] do_syscall_64+0x115/0x840 [ 1484.234870][T27673] ? clear_bhb_loop+0x40/0x90 [ 1484.234888][T27673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1484.234904][T27673] RIP: 0033:0x7f571dd9ce59 [ 1484.234919][T27673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1484.234934][T27673] RSP: 002b:00007f571eba90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1484.234956][T27673] RAX: ffffffffffffffda RBX: 00007f571e016098 RCX: 00007f571dd9ce59 [ 1484.234967][T27673] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f571e01609c [ 1484.234976][T27673] RBP: 00007f571e016090 R08: 0000000000000001 R09: 0000000000000000 [ 1484.234986][T27673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1484.234995][T27673] R13: 00007f571e016128 R14: 00007ffc2d567fa0 R15: 00007ffc2d568088 [ 1484.235016][T27673] [ 1484.461580][T27679] futex_wake_op: syz.1.4555 tries to shift op by -2048; fix this program [ 1484.513182][T27682] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 1484.526206][T27682] netlink: 384 bytes leftover after parsing attributes in process `syz.1.4556'. [ 1484.673905][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.680601][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.149905][T27710] ptp ptp0: only physical clock in use now [ 1487.075000][T27720] futex_wake_op: syz.1.4564 tries to shift op by -2048; fix this program [ 1489.227400][T27757] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4575'. [ 1489.372232][T17042] Bluetooth: hci2: unknown advertising packet type: 0xea [ 1489.372410][T17042] Bluetooth: hci2: unknown advertising packet type: 0xea [ 1489.855106][T27768] random: crng reseeded on system resumption [ 1490.244184][T27780] FAULT_INJECTION: forcing a failure. [ 1490.244184][T27780] name failslab, interval 1, probability 0, space 0, times 0 [ 1490.260713][T27773] ptp ptp0: only physical clock in use now [ 1490.318537][T27780] CPU: 0 UID: 0 PID: 27780 Comm: syz.5.4580 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1490.318566][T27780] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1490.318573][T27780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1490.318583][T27780] Call Trace: [ 1490.318589][T27780] [ 1490.318596][T27780] dump_stack_lvl+0x100/0x190 [ 1490.318635][T27780] should_fail_ex.cold+0x5/0xa [ 1490.318655][T27780] should_failslab+0xc2/0x120 [ 1490.318674][T27780] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1490.318697][T27780] ? vm_area_alloc+0x1f/0x160 [ 1490.318719][T27780] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1490.318742][T27780] vm_area_alloc+0x1f/0x160 [ 1490.318762][T27780] __mmap_region+0x104d/0x2dd0 [ 1490.318789][T27780] ? __pfx___mmap_region+0x10/0x10 [ 1490.318829][T27780] ? find_held_lock+0x2b/0x80 [ 1490.318846][T27780] ? clockevents_program_event+0x1bf/0x820 [ 1490.318874][T27780] ? clockevents_program_event+0x1ef/0x820 [ 1490.318898][T27780] ? __hrtimer_rearm_deferred+0x24d/0x740 [ 1490.318917][T27780] ? find_held_lock+0x2b/0x80 [ 1490.318934][T27780] ? finish_task_switch.isra.0+0x2c6/0x1010 [ 1490.318980][T27780] ? __pfx___schedule+0x10/0x10 [ 1490.319004][T27780] mmap_region+0x35d/0x620 [ 1490.319020][T27780] ? __pfx_mmap_region+0x10/0x10 [ 1490.319035][T27780] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 1490.319055][T27780] ? cap_mmap_addr+0x4b/0x120 [ 1490.319070][T27780] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1490.319083][T27780] ? security_mmap_addr+0x71/0x1e0 [ 1490.319102][T27780] ? __get_unmapped_area+0x255/0x3e0 [ 1490.319122][T27780] do_mmap+0xc63/0x12f0 [ 1490.319144][T27780] ? __pfx_do_mmap+0x10/0x10 [ 1490.319162][T27780] ? __pfx_down_write_killable+0x10/0x10 [ 1490.319188][T27780] vm_mmap_pgoff+0x29e/0x470 [ 1490.319210][T27780] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1490.319230][T27780] ? do_futex+0x192/0x350 [ 1490.319245][T27780] ? __pfx_do_futex+0x10/0x10 [ 1490.319264][T27780] ksys_mmap_pgoff+0xe4/0x610 [ 1490.319282][T27780] ? __x64_sys_futex+0x358/0x4d0 [ 1490.319298][T27780] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1490.319315][T27780] ? xfd_validate_state+0x129/0x190 [ 1490.319334][T27780] __x64_sys_mmap+0x125/0x190 [ 1490.319351][T27780] do_syscall_64+0x115/0x840 [ 1490.319371][T27780] ? clear_bhb_loop+0x40/0x90 [ 1490.319389][T27780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.319405][T27780] RIP: 0033:0x7f6a3f19ce59 [ 1490.319418][T27780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1490.319433][T27780] RSP: 002b:00007f6a3ffca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1490.319448][T27780] RAX: ffffffffffffffda RBX: 00007f6a3f416090 RCX: 00007f6a3f19ce59 [ 1490.319459][T27780] RDX: 0000000000000008 RSI: 0000000000400008 RDI: 000000110c230000 [ 1490.319468][T27780] RBP: 00007f6a3f232d6f R08: 0000000000000002 R09: 0000000000008000 [ 1490.319477][T27780] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1490.319486][T27780] R13: 00007f6a3f416128 R14: 00007f6a3f416090 R15: 00007ffd0387b4e8 [ 1490.319506][T27780] [ 1492.577755][ T30] audit: type=1800 audit(4294967321.770:23): pid=27805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4588" name="lu_gp_id" dev="configfs" ino=140569 res=0 errno=0 [ 1492.606464][T27805] kstrtoul() returned -22 for lu_gp_id [ 1493.337945][T27815] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4589'. [ 1493.612988][T27827] FAULT_INJECTION: forcing a failure. [ 1493.612988][T27827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1493.727145][T27827] CPU: 0 UID: 0 PID: 27827 Comm: syz.0.4592 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1493.727172][T27827] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1493.727178][T27827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1493.727187][T27827] Call Trace: [ 1493.727192][T27827] [ 1493.727198][T27827] dump_stack_lvl+0x100/0x190 [ 1493.727227][T27827] should_fail_ex.cold+0x5/0xa [ 1493.727255][T27827] _copy_from_user+0x2e/0xd0 [ 1493.727276][T27827] memdup_user_nul+0x6c/0x120 [ 1493.727293][T27827] lockdown_write+0x2d/0x270 [ 1493.727317][T27827] vfs_write+0x2aa/0x1070 [ 1493.727334][T27827] ? __pfx_lockdown_write+0x10/0x10 [ 1493.727357][T27827] ? __pfx_vfs_write+0x10/0x10 [ 1493.727373][T27827] ? do_sys_openat2+0x157/0x1e0 [ 1493.727394][T27827] ? __pfx_do_sys_openat2+0x10/0x10 [ 1493.727424][T27827] ksys_write+0x12a/0x250 [ 1493.727440][T27827] ? __pfx_ksys_write+0x10/0x10 [ 1493.727457][T27827] ? rcu_is_watching+0x12/0xc0 [ 1493.727475][T27827] do_syscall_64+0x115/0x840 [ 1493.727494][T27827] ? clear_bhb_loop+0x40/0x90 [ 1493.727512][T27827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1493.727527][T27827] RIP: 0033:0x7f471059ce59 [ 1493.727539][T27827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1493.727553][T27827] RSP: 002b:00007f47113ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1493.727568][T27827] RAX: ffffffffffffffda RBX: 00007f4710816090 RCX: 00007f471059ce59 [ 1493.727581][T27827] RDX: 000000000000fdef RSI: 00002000000001c0 RDI: 0000000000000001 [ 1493.727590][T27827] RBP: 00007f47113ce090 R08: 0000000000000000 R09: 0000000000000000 [ 1493.727599][T27827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1493.727608][T27827] R13: 00007f4710816128 R14: 00007f4710816090 R15: 00007fffcea4ff38 [ 1493.727627][T27827] [ 1495.308303][ T5726] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 1495.589815][T27850] zswap: compressor not available [ 1496.258436][T27878] FAULT_INJECTION: forcing a failure. [ 1496.258436][T27878] name failslab, interval 1, probability 0, space 0, times 0 [ 1496.345758][T27878] CPU: 0 UID: 0 PID: 27878 Comm: syz.1.4601 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1496.345788][T27878] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1496.345795][T27878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1496.345804][T27878] Call Trace: [ 1496.345810][T27878] [ 1496.345817][T27878] dump_stack_lvl+0x100/0x190 [ 1496.345847][T27878] should_fail_ex.cold+0x5/0xa [ 1496.345868][T27878] should_failslab+0xc2/0x120 [ 1496.345886][T27878] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1496.345915][T27878] ? ptlock_alloc+0x1f/0x70 [ 1496.345937][T27878] ? do_raw_spin_lock+0x128/0x260 [ 1496.345964][T27878] ptlock_alloc+0x1f/0x70 [ 1496.345985][T27878] pte_alloc_one+0x82/0x3d0 [ 1496.346006][T27878] do_fault+0x86c/0x1750 [ 1496.346025][T27878] ? __pmd_alloc+0x3fb/0x950 [ 1496.346045][T27878] __handle_mm_fault+0x187d/0x2a00 [ 1496.346070][T27878] ? mt_find+0x45e/0x8e0 [ 1496.346093][T27878] ? __pfx___handle_mm_fault+0x10/0x10 [ 1496.346113][T27878] ? __pfx_mt_find+0x10/0x10 [ 1496.346145][T27878] ? find_vma+0xbf/0x140 [ 1496.346161][T27878] ? __pfx_find_vma+0x10/0x10 [ 1496.346179][T27878] handle_mm_fault+0x37b/0xa30 [ 1496.346206][T27878] do_user_addr_fault+0x74c/0x12f0 [ 1496.346226][T27878] ? trace_page_fault_kernel+0x7a/0x200 [ 1496.346244][T27878] exc_page_fault+0x6f/0xd0 [ 1496.346265][T27878] asm_exc_page_fault+0x26/0x30 [ 1496.346280][T27878] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 1496.346300][T27878] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 cd 9c 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 1496.346315][T27878] RSP: 0018:ffffc9000320fbf8 EFLAGS: 00050202 [ 1496.346328][T27878] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000000000f [ 1496.346337][T27878] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc9000320fd90 [ 1496.346347][T27878] RBP: 000000000000000f R08: 0000000000000001 R09: fffff52000641fb3 [ 1496.346356][T27878] R10: ffffc9000320fd9e R11: 0000000000000000 R12: 0000000000000000 [ 1496.346365][T27878] R13: ffffc9000320fd90 R14: 000000000000000f R15: ffffc9000320fd90 [ 1496.346385][T27878] _copy_from_user+0x98/0xd0 [ 1496.346407][T27878] __sys_bpf+0x243/0x4b90 [ 1496.346421][T27878] ? futex_private_hash_put+0x107/0x1c0 [ 1496.346447][T27878] ? __pfx___sys_bpf+0x10/0x10 [ 1496.346464][T27878] ? __pfx_futex_wake+0x10/0x10 [ 1496.346485][T27878] ? ksys_write+0x190/0x250 [ 1496.346502][T27878] ? ksys_write+0x190/0x250 [ 1496.346522][T27878] ? do_futex+0x192/0x350 [ 1496.346548][T27878] ? xfd_validate_state+0x129/0x190 [ 1496.346562][T27878] ? ksys_write+0x1ac/0x250 [ 1496.346584][T27878] __x64_sys_bpf+0x7b/0xc0 [ 1496.346598][T27878] ? lockdep_hardirqs_on+0x78/0x100 [ 1496.346618][T27878] do_syscall_64+0x115/0x840 [ 1496.346638][T27878] ? clear_bhb_loop+0x40/0x90 [ 1496.346656][T27878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1496.346671][T27878] RIP: 0033:0x7f66c479ce59 [ 1496.346684][T27878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1496.346698][T27878] RSP: 002b:00007f66c562c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1496.346712][T27878] RAX: ffffffffffffffda RBX: 00007f66c4a15fa0 RCX: 00007f66c479ce59 [ 1496.346722][T27878] RDX: 000000000000000f RSI: 0000000000000000 RDI: 00000000f5000000 [ 1496.346731][T27878] RBP: 00007f66c4832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1496.346740][T27878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1496.346749][T27878] R13: 00007f66c4a16038 R14: 00007f66c4a15fa0 R15: 00007ffd259e5158 [ 1496.346770][T27878] [ 1497.980020][T17103] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1498.004938][T17103] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1498.022384][T17103] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1498.031717][T17103] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1498.039147][T17103] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1499.285090][T17040] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.141065][T17103] Bluetooth: hci4: command tx timeout [ 1500.306945][T17040] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.589212][T17040] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.702351][T17040] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.935858][T27941] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4610'. [ 1501.184342][T27929] Process accounting resumed [ 1502.109397][T27962] can: request_module (can-proto-0) failed. [ 1502.142294][T17040] veth1: left allmulticast mode [ 1502.150652][T27961] can: request_module (can-proto-0) failed. [ 1502.180354][T17040] veth1: left promiscuous mode [ 1502.208313][T17040] bridge0: port 3(veth1) entered disabled state [ 1502.224281][T17103] Bluetooth: hci4: command tx timeout [ 1502.285732][T17040] bridge_slave_1: left allmulticast mode [ 1502.325359][T17040] bridge_slave_1: left promiscuous mode [ 1502.359073][T17040] bridge0: port 2(bridge_slave_1) entered disabled state [ 1502.477988][T17040] bridge_slave_0: left allmulticast mode [ 1502.493161][T27978] ptp ptp0: only physical clock in use now [ 1502.507870][T17040] bridge_slave_0: left promiscuous mode [ 1502.540115][T17040] bridge0: port 1(bridge_slave_0) entered disabled state [ 1503.294986][T27984] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1503.429221][T17040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1503.462171][T17040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1503.493185][T17040] bond0 (unregistering): Released all slaves [ 1503.820356][ T5293] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1504.282975][T28006] nfsd: Unknown parameter '' [ 1504.301085][T17103] Bluetooth: hci4: command tx timeout [ 1504.492220][T27894] bridge0: port 1(bridge_slave_0) entered blocking state [ 1504.537224][T27894] bridge0: port 1(bridge_slave_0) entered disabled state [ 1504.587539][T27894] bridge_slave_0: entered allmulticast mode [ 1504.612596][T28016] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4623'. [ 1504.634737][T27894] bridge_slave_0: entered promiscuous mode [ 1504.799201][T27894] bridge0: port 2(bridge_slave_1) entered blocking state [ 1504.845713][T27894] bridge0: port 2(bridge_slave_1) entered disabled state [ 1504.878347][T27894] bridge_slave_1: entered allmulticast mode [ 1504.915120][T27894] bridge_slave_1: entered promiscuous mode [ 1505.210588][T28015] can0: slcan on pty238. [ 1505.616720][T28012] can0 (unregistered): slcan off pty238. [ 1505.653094][T27894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1505.700534][T28040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4625'. [ 1505.740806][T27894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1505.950442][ T5293] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1506.036406][T27894] team0: Port device team_slave_0 added [ 1506.089921][T27894] team0: Port device team_slave_1 added [ 1506.269146][T28047] ptp ptp0: only physical clock in use now [ 1506.381064][T17103] Bluetooth: hci4: command tx timeout [ 1506.587034][T17040] hsr_slave_0: left promiscuous mode [ 1506.637758][T17040] hsr_slave_1: left promiscuous mode [ 1506.680801][T17040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1506.736540][T17040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1506.813378][T17040] veth1_macvtap: left promiscuous mode [ 1507.073835][T17040] pim6reg (unregistering): left allmulticast mode [ 1507.709072][T17040] team0 (unregistering): Port device team_slave_1 removed [ 1507.784250][T17040] team0 (unregistering): Port device team_slave_0 removed [ 1507.982970][T17040] smc: removing net device dummy0 with user defined pnetid DUMMY0 [ 1508.104210][T27894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1508.146064][T27894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1508.284559][T27894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1508.386052][T27894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1508.435041][T27894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1508.547365][T27894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1508.927938][T27894] hsr_slave_0: entered promiscuous mode [ 1508.979410][T27894] hsr_slave_1: entered promiscuous mode [ 1509.797853][T28140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4638'. [ 1509.880287][ T5293] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1510.627156][T28156] ptp ptp0: only physical clock in use now [ 1511.474269][T28168] ptp ptp0: only physical clock in use now [ 1513.050357][T27894] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1513.207749][T27894] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1513.277019][T27894] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1513.324961][T27894] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1513.402612][T27894] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1513.450395][T27894] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1513.653372][T27894] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1513.702590][T27894] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1514.168127][T27894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1514.296956][T27894] 8021q: adding VLAN 0 to HW filter on device team0 [ 1514.371444][T17040] bridge0: port 1(bridge_slave_0) entered blocking state [ 1514.378567][T17040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1514.486863][T17040] bridge0: port 2(bridge_slave_1) entered blocking state [ 1514.494045][T17040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1516.108161][T28238] netlink: 206 bytes leftover after parsing attributes in process `syz.4.4648'. [ 1516.944480][T27894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1517.198063][T28256] netlink: 326 bytes leftover after parsing attributes in process `syz.4.4649'. [ 1517.473185][T27894] veth0_vlan: entered promiscuous mode [ 1517.571899][T28256] bridge0: port 2(bridge_slave_1) entered disabled state [ 1517.579240][T28256] bridge0: port 1(bridge_slave_0) entered disabled state [ 1517.717459][T27894] veth1_vlan: entered promiscuous mode [ 1518.128295][T27894] veth0_macvtap: entered promiscuous mode [ 1518.200290][T27894] veth1_macvtap: entered promiscuous mode [ 1518.368009][T27894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1518.463366][T27894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1518.543039][T23220] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1518.594164][T23220] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1518.679957][T23220] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1518.740401][T23220] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1519.205275][T17040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1519.262136][T17040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1519.418039][T17040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1519.476881][T17040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1520.561700][T28329] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1520.667921][T28329] netlink: 384 bytes leftover after parsing attributes in process `syz.4.4656'. [ 1521.100741][T28335] Process accounting resumed [ 1521.128134][T28343] [U] ^R [ 1521.153402][T28343] FAULT_INJECTION: forcing a failure. [ 1521.153402][T28343] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1521.292656][T28343] CPU: 0 UID: 0 PID: 28343 Comm: syz.4.4658 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1521.292686][T28343] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1521.292692][T28343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1521.292702][T28343] Call Trace: [ 1521.292708][T28343] [ 1521.292715][T28343] dump_stack_lvl+0x100/0x190 [ 1521.292747][T28343] should_fail_ex.cold+0x5/0xa [ 1521.292768][T28343] get_futex_key+0x1d2/0x1510 [ 1521.292794][T28343] ? __pfx_get_futex_key+0x10/0x10 [ 1521.292817][T28343] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 1521.292844][T28343] futex_wake+0xea/0x530 [ 1521.292869][T28343] ? tty_ioctl+0x93d/0x1640 [ 1521.292894][T28343] ? __pfx_futex_wake+0x10/0x10 [ 1521.292915][T28343] ? ldsem_up_read+0x4e/0x90 [ 1521.292936][T28343] ? tty_ioctl+0x345/0x1640 [ 1521.292957][T28343] do_futex+0x32b/0x350 [ 1521.292973][T28343] ? __pfx_do_futex+0x10/0x10 [ 1521.292989][T28343] ? find_held_lock+0x2b/0x80 [ 1521.293010][T28343] __x64_sys_futex+0x34f/0x4d0 [ 1521.293028][T28343] ? __pfx___x64_sys_futex+0x10/0x10 [ 1521.293044][T28343] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 1521.293066][T28343] ? syscall_user_dispatch+0x76/0x130 [ 1521.293084][T28343] do_syscall_64+0x115/0x840 [ 1521.293105][T28343] ? clear_bhb_loop+0x40/0x90 [ 1521.293123][T28343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1521.293138][T28343] RIP: 0033:0x7f571dd9ce59 [ 1521.293152][T28343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1521.293172][T28343] RSP: 002b:00007f571eba90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1521.293188][T28343] RAX: ffffffffffffffda RBX: 00007f571e016098 RCX: 00007f571dd9ce59 [ 1521.293198][T28343] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f571e01609c [ 1521.293212][T28343] RBP: 00007f571e016090 R08: 0000000000000001 R09: 0000000000000000 [ 1521.293222][T28343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1521.293231][T28343] R13: 00007f571e016128 R14: 00007ffc2d567fa0 R15: 00007ffc2d568088 [ 1521.293254][T28343] [ 1522.593668][T28368] futex_wake_op: syz.5.4663 tries to shift op by -2048; fix this program [ 1522.642131][T28368] FAULT_INJECTION: forcing a failure. [ 1522.642131][T28368] name failslab, interval 1, probability 0, space 0, times 0 [ 1522.699453][T28368] CPU: 0 UID: 0 PID: 28368 Comm: syz.5.4663 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1522.699481][T28368] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1522.699486][T28368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1522.699496][T28368] Call Trace: [ 1522.699501][T28368] [ 1522.699507][T28368] dump_stack_lvl+0x100/0x190 [ 1522.699535][T28368] should_fail_ex.cold+0x5/0xa [ 1522.699553][T28368] ? __blkdev_direct_IO_simple+0x112/0x890 [ 1522.699578][T28368] should_failslab+0xc2/0x120 [ 1522.699596][T28368] __kmalloc_noprof+0xe0/0x850 [ 1522.699622][T28368] __blkdev_direct_IO_simple+0x112/0x890 [ 1522.699647][T28368] ? __pfx___blkdev_direct_IO_simple+0x10/0x10 [ 1522.699683][T28368] ? __lock_acquire+0x4a5/0x2630 [ 1522.699705][T28368] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1522.699728][T28368] blkdev_direct_IO+0xc76/0x1fb0 [ 1522.699752][T28368] ? find_held_lock+0x2b/0x80 [ 1522.699768][T28368] ? aa_file_perm+0x7e4/0x14d0 [ 1522.699788][T28368] ? aa_file_perm+0x7e4/0x14d0 [ 1522.699809][T28368] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 1522.699830][T28368] ? aa_file_perm+0x7f3/0x14d0 [ 1522.699853][T28368] ? __pfx__kstrtoull+0x10/0x10 [ 1522.699872][T28368] blkdev_read_iter+0x225/0x4f0 [ 1522.699899][T28368] do_iter_readv_writev+0x60d/0x920 [ 1522.699916][T28368] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1522.699934][T28368] ? bpf_lsm_file_permission+0x9/0x10 [ 1522.699948][T28368] ? security_file_permission+0x76/0x210 [ 1522.699967][T28368] ? rw_verify_area+0xce/0x6d0 [ 1522.699982][T28368] vfs_readv+0x4d3/0x8d0 [ 1522.700002][T28368] ? __pfx_vfs_readv+0x10/0x10 [ 1522.700029][T28368] ? __fget_files+0x21f/0x3d0 [ 1522.700050][T28368] ? do_readv+0x13e/0x340 [ 1522.700064][T28368] do_readv+0x13e/0x340 [ 1522.700080][T28368] ? __pfx_do_readv+0x10/0x10 [ 1522.700095][T28368] ? ksys_write+0x1ac/0x250 [ 1522.700115][T28368] ? __pfx_ksys_write+0x10/0x10 [ 1522.700139][T28368] __x64_sys_preadv2+0x11f/0x160 [ 1522.700158][T28368] do_syscall_64+0x115/0x840 [ 1522.700178][T28368] ? clear_bhb_loop+0x40/0x90 [ 1522.700195][T28368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1522.700210][T28368] RIP: 0033:0x7f6a3f19ce59 [ 1522.700223][T28368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1522.700237][T28368] RSP: 002b:00007f6a3ffeb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 1522.700251][T28368] RAX: ffffffffffffffda RBX: 00007f6a3f415fa0 RCX: 00007f6a3f19ce59 [ 1522.700264][T28368] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000004 [ 1522.700273][T28368] RBP: 00007f6a3ffeb090 R08: 0008000000000000 R09: 000000000000002f [ 1522.700282][T28368] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1522.700291][T28368] R13: 00007f6a3f416038 R14: 00007f6a3f415fa0 R15: 00007ffd0387b4e8 [ 1522.700310][T28368] [ 1523.765797][T28381] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4666'. [ 1524.450500][T28392] netlink: 342 bytes leftover after parsing attributes in process `syz.4.4669'. [ 1524.633315][T28396] FAULT_INJECTION: forcing a failure. [ 1524.633315][T28396] name failslab, interval 1, probability 0, space 0, times 0 [ 1524.692816][T28396] CPU: 0 UID: 0 PID: 28396 Comm: syz.5.4670 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1524.692845][T28396] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1524.692851][T28396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1524.692859][T28396] Call Trace: [ 1524.692865][T28396] [ 1524.692871][T28396] dump_stack_lvl+0x100/0x190 [ 1524.692898][T28396] should_fail_ex.cold+0x5/0xa [ 1524.692925][T28396] should_failslab+0xc2/0x120 [ 1524.692942][T28396] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1524.692965][T28396] ? skb_clone+0x190/0x400 [ 1524.692983][T28396] skb_clone+0x190/0x400 [ 1524.692998][T28396] netlink_deliver_tap+0xaed/0xcc0 [ 1524.693021][T28396] netlink_unicast+0x62b/0x850 [ 1524.693042][T28396] ? __pfx_netlink_unicast+0x10/0x10 [ 1524.693065][T28396] netlink_sendmsg+0x8b0/0xda0 [ 1524.693086][T28396] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1524.693103][T28396] ? __import_iovec+0x1d2/0x640 [ 1524.693125][T28396] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1524.693143][T28396] ____sys_sendmsg+0x9e1/0xb70 [ 1524.693161][T28396] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1524.693181][T28396] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1524.693207][T28396] ___sys_sendmsg+0x190/0x1e0 [ 1524.693228][T28396] ? __pfx____sys_sendmsg+0x10/0x10 [ 1524.693269][T28396] __sys_sendmsg+0x170/0x220 [ 1524.693284][T28396] ? __pfx___sys_sendmsg+0x10/0x10 [ 1524.693307][T28396] ? rcu_is_watching+0x12/0xc0 [ 1524.693326][T28396] do_syscall_64+0x115/0x840 [ 1524.693345][T28396] ? clear_bhb_loop+0x40/0x90 [ 1524.693362][T28396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1524.693377][T28396] RIP: 0033:0x7f6a3f19ce59 [ 1524.693390][T28396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1524.693404][T28396] RSP: 002b:00007f6a3ffeb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1524.693418][T28396] RAX: ffffffffffffffda RBX: 00007f6a3f415fa0 RCX: 00007f6a3f19ce59 [ 1524.693428][T28396] RDX: 0000000004000000 RSI: 0000200000000d00 RDI: 0000000000000003 [ 1524.693437][T28396] RBP: 00007f6a3ffeb090 R08: 0000000000000000 R09: 0000000000000000 [ 1524.693445][T28396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1524.693454][T28396] R13: 00007f6a3f416038 R14: 00007f6a3f415fa0 R15: 00007ffd0387b4e8 [ 1524.693472][T28396] [ 1525.916017][T28425] netlink: 'syz.0.4677': attribute type 2 has an invalid length. [ 1527.920708][T28455] random: crng reseeded on system resumption [ 1528.046948][T28457] program syz.4.4685 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1530.066053][T28495] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 1530.179091][T28495] netlink: 384 bytes leftover after parsing attributes in process `syz.1.4693'. [ 1530.700574][T28505] FAULT_INJECTION: forcing a failure. [ 1530.700574][T28505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1530.918258][T28505] CPU: 0 UID: 0 PID: 28505 Comm: syz.1.4696 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1530.918286][T28505] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1530.918292][T28505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1530.918301][T28505] Call Trace: [ 1530.918307][T28505] [ 1530.918313][T28505] dump_stack_lvl+0x100/0x190 [ 1530.918347][T28505] should_fail_ex.cold+0x5/0xa [ 1530.918366][T28505] _copy_to_user+0x32/0xd0 [ 1530.918387][T28505] simple_read_from_buffer+0xcb/0x170 [ 1530.918406][T28505] proc_fail_nth_read+0x1af/0x230 [ 1530.918429][T28505] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1530.918451][T28505] ? rw_verify_area+0xce/0x6d0 [ 1530.918465][T28505] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1530.918486][T28505] vfs_read+0x1e4/0xb30 [ 1530.918504][T28505] ? __pfx_vfs_read+0x10/0x10 [ 1530.918519][T28505] ? do_sys_openat2+0x157/0x1e0 [ 1530.918540][T28505] ? __pfx_do_sys_openat2+0x10/0x10 [ 1530.918569][T28505] ksys_read+0x12a/0x250 [ 1530.918584][T28505] ? __pfx_ksys_read+0x10/0x10 [ 1530.918601][T28505] ? rcu_is_watching+0x12/0xc0 [ 1530.918619][T28505] do_syscall_64+0x115/0x840 [ 1530.918639][T28505] ? clear_bhb_loop+0x40/0x90 [ 1530.918657][T28505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1530.918674][T28505] RIP: 0033:0x7fc287b5d68e [ 1530.918687][T28505] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1530.918700][T28505] RSP: 002b:00007fc2889b1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1530.918715][T28505] RAX: ffffffffffffffda RBX: 00007fc2889b26c0 RCX: 00007fc287b5d68e [ 1530.918724][T28505] RDX: 000000000000000f RSI: 00007fc2889b20a0 RDI: 0000000000000002 [ 1530.918733][T28505] RBP: 00007fc2889b2090 R08: 0000000000000000 R09: 0000000000000000 [ 1530.918742][T28505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1530.918750][T28505] R13: 00007fc287e16128 R14: 00007fc287e16090 R15: 00007ffc70bb72e8 [ 1530.918768][T28505] [ 1531.118527][T28506] FAULT_INJECTION: forcing a failure. [ 1531.118527][T28506] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1531.157241][T28506] CPU: 0 UID: 0 PID: 28506 Comm: syz.4.4697 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1531.157270][T28506] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1531.157275][T28506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1531.157285][T28506] Call Trace: [ 1531.157291][T28506] [ 1531.157297][T28506] dump_stack_lvl+0x100/0x190 [ 1531.157335][T28506] should_fail_ex.cold+0x5/0xa [ 1531.157354][T28506] get_futex_key+0x1d2/0x1510 [ 1531.157381][T28506] ? __pfx_get_futex_key+0x10/0x10 [ 1531.157409][T28506] futex_wait_setup+0x83/0x510 [ 1531.157432][T28506] __futex_wait+0x19f/0x300 [ 1531.157452][T28506] ? __pfx___futex_wait+0x10/0x10 [ 1531.157469][T28506] ? __blk_flush_plug+0x2f3/0x4b0 [ 1531.157497][T28506] ? __pfx_futex_wake_mark+0x10/0x10 [ 1531.157518][T28506] ? futex_hash+0x2ad/0x370 [ 1531.157541][T28506] ? futex_hash+0x141/0x370 [ 1531.157565][T28506] futex_wait+0xe6/0x370 [ 1531.157584][T28506] ? __pfx_futex_wait+0x10/0x10 [ 1531.157600][T28506] ? madvise_unlock+0x172/0x220 [ 1531.157623][T28506] ? madvise_unlock+0xa9/0x220 [ 1531.157645][T28506] do_futex+0x1ef/0x350 [ 1531.157660][T28506] ? __pfx_do_futex+0x10/0x10 [ 1531.157680][T28506] __x64_sys_futex+0x34f/0x4d0 [ 1531.157698][T28506] ? __pfx___x64_sys_futex+0x10/0x10 [ 1531.157712][T28506] ? ksys_write+0x1ac/0x250 [ 1531.157776][T28506] ? rcu_is_watching+0x12/0xc0 [ 1531.157796][T28506] do_syscall_64+0x115/0x840 [ 1531.157816][T28506] ? clear_bhb_loop+0x40/0x90 [ 1531.157835][T28506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1531.157850][T28506] RIP: 0033:0x7f571dd9ce59 [ 1531.157863][T28506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1531.157878][T28506] RSP: 002b:00007f571ebca0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1531.157893][T28506] RAX: ffffffffffffffda RBX: 00007f571e015fa8 RCX: 00007f571dd9ce59 [ 1531.157903][T28506] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f571e015fa8 [ 1531.157912][T28506] RBP: 00007f571e015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1531.157922][T28506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1531.157930][T28506] R13: 00007f571e016038 R14: 00007ffc2d567fa0 R15: 00007ffc2d568088 [ 1531.157950][T28506] [ 1531.465381][T28511] FAULT_INJECTION: forcing a failure. [ 1531.465381][T28511] name failslab, interval 1, probability 0, space 0, times 0 [ 1531.478484][T28511] CPU: 0 UID: 0 PID: 28511 Comm: syz.5.4698 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1531.478510][T28511] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1531.478519][T28511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1531.478529][T28511] Call Trace: [ 1531.478534][T28511] [ 1531.478540][T28511] dump_stack_lvl+0x100/0x190 [ 1531.478569][T28511] should_fail_ex.cold+0x5/0xa [ 1531.478588][T28511] should_failslab+0xc2/0x120 [ 1531.478611][T28511] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1531.478633][T28511] ? skb_clone+0x190/0x400 [ 1531.478652][T28511] skb_clone+0x190/0x400 [ 1531.478666][T28511] netlink_deliver_tap+0xaed/0xcc0 [ 1531.478688][T28511] netlink_unicast+0x62b/0x850 [ 1531.478708][T28511] ? __pfx_netlink_unicast+0x10/0x10 [ 1531.478732][T28511] netlink_sendmsg+0x8b0/0xda0 [ 1531.478752][T28511] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1531.478769][T28511] ? __import_iovec+0x1d2/0x640 [ 1531.478791][T28511] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1531.478810][T28511] ____sys_sendmsg+0x9e1/0xb70 [ 1531.478827][T28511] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1531.478847][T28511] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1531.478873][T28511] ___sys_sendmsg+0x190/0x1e0 [ 1531.478893][T28511] ? __pfx____sys_sendmsg+0x10/0x10 [ 1531.478934][T28511] __sys_sendmsg+0x170/0x220 [ 1531.478949][T28511] ? __pfx___sys_sendmsg+0x10/0x10 [ 1531.478971][T28511] ? rcu_is_watching+0x12/0xc0 [ 1531.478990][T28511] do_syscall_64+0x115/0x840 [ 1531.479009][T28511] ? clear_bhb_loop+0x40/0x90 [ 1531.479026][T28511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1531.479041][T28511] RIP: 0033:0x7f6a3f19ce59 [ 1531.479059][T28511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1531.479074][T28511] RSP: 002b:00007f6a3ffeb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1531.479089][T28511] RAX: ffffffffffffffda RBX: 00007f6a3f415fa0 RCX: 00007f6a3f19ce59 [ 1531.479099][T28511] RDX: 0000000000000800 RSI: 0000200000001cc0 RDI: 0000000000000003 [ 1531.479108][T28511] RBP: 00007f6a3ffeb090 R08: 0000000000000000 R09: 0000000000000000 [ 1531.479116][T28511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1531.479125][T28511] R13: 00007f6a3f416038 R14: 00007f6a3f415fa0 R15: 00007ffd0387b4e8 [ 1531.479148][T28511] [ 1531.737278][T28506] Process accounting paused [ 1531.781782][T28513] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 1531.794787][T28513] nbd: must specify at least one socket [ 1531.837280][T28515] FAULT_INJECTION: forcing a failure. [ 1531.837280][T28515] name failslab, interval 1, probability 0, space 0, times 0 [ 1531.849985][T28515] CPU: 0 UID: 0 PID: 28515 Comm: syz.4.4700 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1531.850013][T28515] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1531.850020][T28515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1531.850030][T28515] Call Trace: [ 1531.850038][T28515] [ 1531.850045][T28515] dump_stack_lvl+0x100/0x190 [ 1531.850085][T28515] should_fail_ex.cold+0x5/0xa [ 1531.850109][T28515] should_failslab+0xc2/0x120 [ 1531.850128][T28515] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1531.850152][T28515] ? __pmd_alloc+0xbf/0x950 [ 1531.850176][T28515] __pmd_alloc+0xbf/0x950 [ 1531.850198][T28515] __handle_mm_fault+0xa9c/0x2a00 [ 1531.850226][T28515] ? mt_find+0x45e/0x8e0 [ 1531.850249][T28515] ? __pfx___handle_mm_fault+0x10/0x10 [ 1531.850275][T28515] ? __pfx_mt_find+0x10/0x10 [ 1531.850307][T28515] ? find_vma+0xbf/0x140 [ 1531.850325][T28515] ? __pfx_find_vma+0x10/0x10 [ 1531.850344][T28515] handle_mm_fault+0x37b/0xa30 [ 1531.850370][T28515] do_user_addr_fault+0x74c/0x12f0 [ 1531.850390][T28515] ? trace_page_fault_kernel+0x7a/0x200 [ 1531.850409][T28515] exc_page_fault+0x6f/0xd0 [ 1531.850434][T28515] asm_exc_page_fault+0x26/0x30 [ 1531.850449][T28515] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 1531.850467][T28515] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 cd 9c 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 1531.850482][T28515] RSP: 0018:ffffc900032bfbf8 EFLAGS: 00050202 [ 1531.850495][T28515] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000000000f [ 1531.850504][T28515] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc900032bfd90 [ 1531.850514][T28515] RBP: 000000000000000f R08: 0000000000000001 R09: fffff52000657fb3 [ 1531.850524][T28515] R10: ffffc900032bfd9e R11: 0000000000000000 R12: 0000000000000000 [ 1531.850534][T28515] R13: ffffc900032bfd90 R14: 000000000000000f R15: ffffc900032bfd90 [ 1531.850554][T28515] _copy_from_user+0x98/0xd0 [ 1531.850577][T28515] __sys_bpf+0x243/0x4b90 [ 1531.850595][T28515] ? __pfx___sys_bpf+0x10/0x10 [ 1531.850609][T28515] ? __pfx_futex_wait+0x10/0x10 [ 1531.850632][T28515] ? ksys_write+0x190/0x250 [ 1531.850650][T28515] ? ksys_write+0x190/0x250 [ 1531.850670][T28515] ? do_futex+0x192/0x350 [ 1531.850696][T28515] ? xfd_validate_state+0x129/0x190 [ 1531.850710][T28515] ? ksys_write+0x1ac/0x250 [ 1531.850731][T28515] __x64_sys_bpf+0x7b/0xc0 [ 1531.850746][T28515] ? lockdep_hardirqs_on+0x78/0x100 [ 1531.850766][T28515] do_syscall_64+0x115/0x840 [ 1531.850786][T28515] ? clear_bhb_loop+0x40/0x90 [ 1531.850804][T28515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1531.850819][T28515] RIP: 0033:0x7f571dd9ce59 [ 1531.850833][T28515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1531.850846][T28515] RSP: 002b:00007f571ebca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1531.850860][T28515] RAX: ffffffffffffffda RBX: 00007f571e015fa0 RCX: 00007f571dd9ce59 [ 1531.850870][T28515] RDX: 000000000000000f RSI: 0000000000000000 RDI: 00000000ff010000 [ 1531.850879][T28515] RBP: 00007f571de32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1531.850888][T28515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1531.850900][T28515] R13: 00007f571e016038 R14: 00007f571e015fa0 R15: 00007ffc2d568088 [ 1531.850920][T28515] [ 1533.569781][ T30] audit: type=1800 audit(4294967362.760:24): pid=28548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4710" name="discovery_nqn" dev="configfs" ino=144670 res=0 errno=0 [ 1536.105674][T28604] nbd: must specify at least one socket [ 1536.954008][T28622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4729'. [ 1537.860316][T28640] FAULT_INJECTION: forcing a failure. [ 1537.860316][T28640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1537.925120][T28640] CPU: 0 UID: 0 PID: 28640 Comm: syz.5.4734 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1537.925166][T28640] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1537.925177][T28640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1537.925194][T28640] Call Trace: [ 1537.925204][T28640] [ 1537.925214][T28640] dump_stack_lvl+0x100/0x190 [ 1537.925256][T28640] should_fail_ex.cold+0x5/0xa [ 1537.925275][T28640] _copy_to_user+0x32/0xd0 [ 1537.925297][T28640] do_ipv6_getsockopt+0xcbf/0x32d0 [ 1537.925322][T28640] ? __pfx_do_ipv6_getsockopt+0x10/0x10 [ 1537.925346][T28640] ? do_raw_spin_lock+0x128/0x260 [ 1537.925363][T28640] ? find_held_lock+0x2b/0x80 [ 1537.925388][T28640] ? debug_mutex_remove_waiter+0xa8/0x320 [ 1537.925405][T28640] ? debug_mutex_remove_waiter+0xa8/0x320 [ 1537.925426][T28640] ? mark_held_locks+0x40/0x70 [ 1537.925446][T28640] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1537.925464][T28640] ? __mutex_lock+0x838/0x1b10 [ 1537.925483][T28640] ? lockdep_hardirqs_on+0x78/0x100 [ 1537.925502][T28640] ? __mutex_lock+0x838/0x1b10 [ 1537.925521][T28640] ? __mutex_lock+0x26d/0x1b10 [ 1537.925540][T28640] ? smc_getsockopt+0xbc/0x390 [ 1537.925559][T28640] ? ipv6_getsockopt+0x12f/0x2a0 [ 1537.925577][T28640] ipv6_getsockopt+0x12f/0x2a0 [ 1537.925599][T28640] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 1537.925630][T28640] tcp_getsockopt+0xa1/0x110 [ 1537.925650][T28640] smc_getsockopt+0x165/0x390 [ 1537.925665][T28640] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1537.925684][T28640] ? __pfx_smc_getsockopt+0x10/0x10 [ 1537.925698][T28640] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 1537.925721][T28640] ? __pfx_smc_getsockopt+0x10/0x10 [ 1537.925737][T28640] do_sock_getsockopt+0x50a/0x6e0 [ 1537.925754][T28640] ? __lock_acquire+0x4a5/0x2630 [ 1537.925777][T28640] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1537.925794][T28640] ? find_held_lock+0x2b/0x80 [ 1537.925810][T28640] ? ksys_write+0x190/0x250 [ 1537.925836][T28640] ? find_held_lock+0x2b/0x80 [ 1537.925870][T28640] ? __fget_files+0x21f/0x3d0 [ 1537.925895][T28640] __sys_getsockopt+0x133/0x1d0 [ 1537.925910][T28640] ? __pfx_ksys_write+0x10/0x10 [ 1537.925929][T28640] ? __x64_sys_getsockopt+0xbd/0x160 [ 1537.925942][T28640] __x64_sys_getsockopt+0xbd/0x160 [ 1537.925955][T28640] ? do_syscall_64+0x90/0x840 [ 1537.925974][T28640] ? lockdep_hardirqs_on+0x78/0x100 [ 1537.925993][T28640] do_syscall_64+0x115/0x840 [ 1537.926011][T28640] ? clear_bhb_loop+0x40/0x90 [ 1537.926028][T28640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1537.926043][T28640] RIP: 0033:0x7f6a3f19ce59 [ 1537.926056][T28640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1537.926071][T28640] RSP: 002b:00007f6a3ffca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1537.926085][T28640] RAX: ffffffffffffffda RBX: 00007f6a3f416090 RCX: 00007f6a3f19ce59 [ 1537.926095][T28640] RDX: 000000000000003a RSI: 0000000000000029 RDI: 0000000000000004 [ 1537.926104][T28640] RBP: 00007f6a3ffca090 R08: 0000000000000000 R09: 0000000000000000 [ 1537.926113][T28640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1537.926122][T28640] R13: 00007f6a3f416128 R14: 00007f6a3f416090 R15: 00007ffd0387b4e8 [ 1537.926141][T28640] [ 1539.314150][T28662] nbd: must specify at least one socket [ 1540.387422][T28677] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1543.167905][T28711] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1544.103833][T28718] capability: warning: `syz.5.4753' uses deprecated v2 capabilities in a way that may be insecure [ 1544.636727][T28714] Process accounting resumed [ 1544.759733][T28730] netlink: 206 bytes leftover after parsing attributes in process `syz.5.4757'. [ 1545.268875][T28744] futex_wake_op: syz.5.4760 tries to shift op by -2048; fix this program [ 1545.308641][T28744] FAULT_INJECTION: forcing a failure. [ 1545.308641][T28744] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1545.383948][T28744] CPU: 0 UID: 0 PID: 28744 Comm: syz.5.4760 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1545.383976][T28744] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1545.383982][T28744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1545.383991][T28744] Call Trace: [ 1545.383996][T28744] [ 1545.384003][T28744] dump_stack_lvl+0x100/0x190 [ 1545.384032][T28744] should_fail_ex.cold+0x5/0xa [ 1545.384048][T28744] ? prepare_alloc_pages+0x16d/0x5f0 [ 1545.384068][T28744] should_fail_alloc_page+0xeb/0x140 [ 1545.384087][T28744] prepare_alloc_pages+0x1f0/0x5f0 [ 1545.384107][T28744] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 1545.384140][T28744] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1545.384175][T28744] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1545.384196][T28744] ? policy_nodemask+0xed/0x4f0 [ 1545.384214][T28744] alloc_pages_mpol+0x1fb/0x540 [ 1545.384232][T28744] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1545.384253][T28744] folio_alloc_mpol_noprof+0x36/0x260 [ 1545.384273][T28744] shmem_alloc_folio+0x135/0x160 [ 1545.384294][T28744] shmem_alloc_and_add_folio+0x371/0xd40 [ 1545.384321][T28744] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1545.384345][T28744] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 1545.384363][T28744] shmem_get_folio_gfp+0x6ab/0x1900 [ 1545.384382][T28744] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1545.384401][T28744] shmem_fault+0x1f9/0xa20 [ 1545.384414][T28744] ? __lock_acquire+0x4a5/0x2630 [ 1545.384437][T28744] ? __pfx_shmem_fault+0x10/0x10 [ 1545.384460][T28744] ? __pfx_filemap_map_pages+0x10/0x10 [ 1545.384487][T28744] __do_fault+0x10b/0x440 [ 1545.384502][T28744] ? find_held_lock+0x2b/0x80 [ 1545.384520][T28744] do_fault+0x2db/0x1750 [ 1545.384540][T28744] __handle_mm_fault+0x187d/0x2a00 [ 1545.384563][T28744] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1545.384580][T28744] ? __pfx___handle_mm_fault+0x10/0x10 [ 1545.384602][T28744] ? pte_offset_map_lock+0x174/0x320 [ 1545.384619][T28744] ? find_held_lock+0x2b/0x80 [ 1545.384641][T28744] ? follow_page_pte+0x4d0/0x13f0 [ 1545.384662][T28744] handle_mm_fault+0x37b/0xa30 [ 1545.384686][T28744] __get_user_pages+0x1178/0x32a0 [ 1545.384708][T28744] ? down_read_killable+0x307/0x4b0 [ 1545.384724][T28744] ? __pfx___get_user_pages+0x10/0x10 [ 1545.384746][T28744] __gup_longterm_locked+0x87d/0x16f0 [ 1545.384770][T28744] ? __pfx___gup_longterm_locked+0x10/0x10 [ 1545.384788][T28744] ? lock_acquire+0x1b1/0x370 [ 1545.384809][T28744] ? find_held_lock+0x2b/0x80 [ 1545.384825][T28744] ? gup_fast_fallback+0x7e8/0x2790 [ 1545.384842][T28744] ? sanity_check_pinned_pages+0x4f2/0x8b0 [ 1545.384862][T28744] gup_fast_fallback+0x16dc/0x2790 [ 1545.384898][T28744] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1545.384917][T28744] ? kernel_text_address+0x8d/0x100 [ 1545.384933][T28744] ? unwind_get_return_address+0x59/0xa0 [ 1545.384955][T28744] ? arch_stack_walk+0xa6/0xf0 [ 1545.384975][T28744] pin_user_pages_fast+0xa7/0xf0 [ 1545.384993][T28744] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 1545.385012][T28744] ? __blkdev_direct_IO_simple+0x112/0x890 [ 1545.385034][T28744] ? stack_trace_save+0x8e/0xc0 [ 1545.385054][T28744] iov_iter_extract_pages+0xa0d/0x1ef0 [ 1545.385078][T28744] ? __blkdev_direct_IO_simple+0x112/0x890 [ 1545.385099][T28744] ? kasan_save_stack+0x3f/0x50 [ 1545.385112][T28744] ? kasan_save_stack+0x30/0x50 [ 1545.385125][T28744] ? kasan_save_track+0x14/0x30 [ 1545.385138][T28744] ? __kasan_kmalloc+0xaa/0xb0 [ 1545.385150][T28744] ? __kmalloc_noprof+0x301/0x850 [ 1545.385171][T28744] ? __blkdev_direct_IO_simple+0x112/0x890 [ 1545.385192][T28744] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 1545.385214][T28744] ? __lock_acquire+0x4a5/0x2630 [ 1545.385240][T28744] iov_iter_extract_bvecs+0x10b/0xa60 [ 1545.385262][T28744] ? find_held_lock+0x2b/0x80 [ 1545.385279][T28744] ? bio_associate_blkg_from_css+0x394/0x13f0 [ 1545.385299][T28744] ? bio_associate_blkg_from_css+0x394/0x13f0 [ 1545.385320][T28744] ? __pfx_iov_iter_extract_bvecs+0x10/0x10 [ 1545.385344][T28744] ? find_held_lock+0x2b/0x80 [ 1545.385362][T28744] bio_iov_iter_get_pages+0x26f/0x670 [ 1545.385386][T28744] __blkdev_direct_IO_simple+0x3a7/0x890 [ 1545.385411][T28744] ? __pfx___blkdev_direct_IO_simple+0x10/0x10 [ 1545.385448][T28744] ? __lock_acquire+0x4a5/0x2630 [ 1545.385469][T28744] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1545.385491][T28744] blkdev_direct_IO+0xc76/0x1fb0 [ 1545.385516][T28744] ? find_held_lock+0x2b/0x80 [ 1545.385532][T28744] ? aa_file_perm+0x7e4/0x14d0 [ 1545.385551][T28744] ? aa_file_perm+0x7e4/0x14d0 [ 1545.385573][T28744] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 1545.385593][T28744] ? aa_file_perm+0x7f3/0x14d0 [ 1545.385616][T28744] ? __pfx__kstrtoull+0x10/0x10 [ 1545.385634][T28744] blkdev_read_iter+0x225/0x4f0 [ 1545.385658][T28744] do_iter_readv_writev+0x60d/0x920 [ 1545.385676][T28744] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1545.385695][T28744] ? bpf_lsm_file_permission+0x9/0x10 [ 1545.385708][T28744] ? security_file_permission+0x76/0x210 [ 1545.385727][T28744] ? rw_verify_area+0xce/0x6d0 [ 1545.385743][T28744] vfs_readv+0x4d3/0x8d0 [ 1545.385763][T28744] ? __pfx_vfs_readv+0x10/0x10 [ 1545.385790][T28744] ? __fget_files+0x21f/0x3d0 [ 1545.385811][T28744] ? do_readv+0x13e/0x340 [ 1545.385824][T28744] do_readv+0x13e/0x340 [ 1545.385839][T28744] ? __pfx_do_readv+0x10/0x10 [ 1545.385853][T28744] ? ksys_write+0x1ac/0x250 [ 1545.385869][T28744] ? __pfx_ksys_write+0x10/0x10 [ 1545.385887][T28744] __x64_sys_preadv2+0x11f/0x160 [ 1545.385913][T28744] do_syscall_64+0x115/0x840 [ 1545.385931][T28744] ? clear_bhb_loop+0x40/0x90 [ 1545.385949][T28744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1545.385964][T28744] RIP: 0033:0x7f6a3f19ce59 [ 1545.385978][T28744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1545.385992][T28744] RSP: 002b:00007f6a3ffeb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 1545.386007][T28744] RAX: ffffffffffffffda RBX: 00007f6a3f415fa0 RCX: 00007f6a3f19ce59 [ 1545.386017][T28744] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000004 [ 1545.386026][T28744] RBP: 00007f6a3ffeb090 R08: 0008000000000000 R09: 000000000000002f [ 1545.386035][T28744] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1545.386044][T28744] R13: 00007f6a3f416038 R14: 00007f6a3f415fa0 R15: 00007ffd0387b4e8 [ 1545.386063][T28744] [ 1547.011314][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1547.026770][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1548.352316][T28760] FAULT_INJECTION: forcing a failure. [ 1548.352316][T28760] name failslab, interval 1, probability 0, space 0, times 0 [ 1548.456271][T28760] CPU: 0 UID: 0 PID: 28760 Comm: syz.5.4763 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1548.456301][T28760] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1548.456307][T28760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1548.456318][T28760] Call Trace: [ 1548.456323][T28760] [ 1548.456330][T28760] dump_stack_lvl+0x100/0x190 [ 1548.456360][T28760] should_fail_ex.cold+0x5/0xa [ 1548.456380][T28760] ? iter_file_splice_write+0x1d8/0x10a0 [ 1548.456399][T28760] should_failslab+0xc2/0x120 [ 1548.456417][T28760] __kmalloc_noprof+0xe0/0x850 [ 1548.456440][T28760] ? __pfx___might_resched+0x10/0x10 [ 1548.456460][T28760] iter_file_splice_write+0x1d8/0x10a0 [ 1548.456488][T28760] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1548.456508][T28760] ? __lock_acquire+0x4a5/0x2630 [ 1548.456537][T28760] ? shmem_file_splice_read+0x724/0xd80 [ 1548.456564][T28760] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1548.456586][T28760] direct_splice_actor+0x192/0x6c0 [ 1548.456607][T28760] splice_direct_to_actor+0x345/0xa30 [ 1548.456628][T28760] ? __pfx_direct_splice_actor+0x10/0x10 [ 1548.456650][T28760] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1548.456678][T28760] do_splice_direct+0x174/0x240 [ 1548.456697][T28760] ? __pfx_do_splice_direct+0x10/0x10 [ 1548.456717][T28760] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1548.456738][T28760] ? rw_verify_area+0xce/0x6d0 [ 1548.456755][T28760] do_sendfile+0xadc/0xe20 [ 1548.456775][T28760] ? __pfx_do_sendfile+0x10/0x10 [ 1548.456811][T28760] __x64_sys_sendfile64+0x154/0x220 [ 1548.456833][T28760] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1548.456856][T28760] ? rcu_is_watching+0x12/0xc0 [ 1548.456877][T28760] do_syscall_64+0x115/0x840 [ 1548.456897][T28760] ? clear_bhb_loop+0x40/0x90 [ 1548.456916][T28760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1548.456931][T28760] RIP: 0033:0x7f6a3f19ce59 [ 1548.456944][T28760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1548.456960][T28760] RSP: 002b:00007f6a3ffeb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1548.456975][T28760] RAX: ffffffffffffffda RBX: 00007f6a3f415fa0 RCX: 00007f6a3f19ce59 [ 1548.456985][T28760] RDX: 0000200000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 1548.456994][T28760] RBP: 00007f6a3f232d6f R08: 0000000000000000 R09: 0000000000000000 [ 1548.457003][T28760] R10: 0000000000000b5d R11: 0000000000000246 R12: 0000000000000000 [ 1548.457013][T28760] R13: 00007f6a3f416038 R14: 00007f6a3f415fa0 R15: 00007ffd0387b4e8 [ 1548.457034][T28760] [ 1551.487813][T28806] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4771'. [ 1552.086309][T28816] FAULT_INJECTION: forcing a failure. [ 1552.086309][T28816] name failslab, interval 1, probability 0, space 0, times 0 [ 1552.130094][T28816] CPU: 0 UID: 0 PID: 28816 Comm: syz.1.4776 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1552.130127][T28816] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1552.130133][T28816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1552.130142][T28816] Call Trace: [ 1552.130148][T28816] [ 1552.130154][T28816] dump_stack_lvl+0x100/0x190 [ 1552.130182][T28816] should_fail_ex.cold+0x5/0xa [ 1552.130201][T28816] should_failslab+0xc2/0x120 [ 1552.130219][T28816] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1552.130240][T28816] ? alloc_uid+0x13d/0x4c0 [ 1552.130257][T28816] ? rcu_is_watching+0x12/0xc0 [ 1552.130277][T28816] alloc_uid+0x13d/0x4c0 [ 1552.130301][T28816] ? __pfx_alloc_uid+0x10/0x10 [ 1552.130319][T28816] ? bpf_lsm_cred_prepare+0x9/0x10 [ 1552.130335][T28816] ? security_prepare_creds+0xa8/0x290 [ 1552.130358][T28816] __sys_setresuid+0x4f2/0x1280 [ 1552.130378][T28816] do_syscall_64+0x115/0x840 [ 1552.130398][T28816] ? clear_bhb_loop+0x40/0x90 [ 1552.130415][T28816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1552.130430][T28816] RIP: 0033:0x7fc287b9ce59 [ 1552.130443][T28816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1552.130457][T28816] RSP: 002b:00007fc2889d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 1552.130471][T28816] RAX: ffffffffffffffda RBX: 00007fc287e15fa0 RCX: 00007fc287b9ce59 [ 1552.130481][T28816] RDX: 0000000000008000 RSI: 0000000000001000 RDI: 0000000000000060 [ 1552.130492][T28816] RBP: 00007fc287c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1552.130501][T28816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1552.130509][T28816] R13: 00007fc287e16038 R14: 00007fc287e15fa0 R15: 00007ffc70bb72e8 [ 1552.130528][T28816] [ 1553.168207][T28840] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 1553.284822][T28840] netlink: 384 bytes leftover after parsing attributes in process `syz.1.4779'. [ 1553.726110][T28853] futex_wake_op: syz.1.4781 tries to shift op by -2048; fix this program [ 1554.229306][T28860] FAULT_INJECTION: forcing a failure. [ 1554.229306][T28860] name failslab, interval 1, probability 0, space 0, times 0 [ 1554.294659][T28860] CPU: 0 UID: 0 PID: 28860 Comm: syz.5.4783 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1554.294690][T28860] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1554.294696][T28860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1554.294706][T28860] Call Trace: [ 1554.294712][T28860] [ 1554.294718][T28860] dump_stack_lvl+0x100/0x190 [ 1554.294747][T28860] should_fail_ex.cold+0x5/0xa [ 1554.294765][T28860] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 1554.294790][T28860] should_failslab+0xc2/0x120 [ 1554.294808][T28860] __kmalloc_noprof+0xe0/0x850 [ 1554.294833][T28860] ? lockdep_hardirqs_on+0x78/0x100 [ 1554.294862][T28860] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 1554.294889][T28860] genl_family_rcv_msg_doit+0xc7/0x300 [ 1554.294911][T28860] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1554.294932][T28860] ? genl_get_cmd+0x3e7/0x760 [ 1554.294959][T28860] ? bpf_lsm_capable+0x9/0x10 [ 1554.294975][T28860] ? security_capable+0x80/0x260 [ 1554.294999][T28860] ? ns_capable+0xd2/0xf0 [ 1554.295022][T28860] genl_rcv_msg+0x560/0x800 [ 1554.295045][T28860] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1554.295065][T28860] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 1554.295095][T28860] netlink_rcv_skb+0x159/0x420 [ 1554.295114][T28860] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1554.295135][T28860] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1554.295160][T28860] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1554.295181][T28860] genl_rcv+0x28/0x40 [ 1554.295198][T28860] netlink_unicast+0x585/0x850 [ 1554.295223][T28860] ? __pfx_netlink_unicast+0x10/0x10 [ 1554.295254][T28860] netlink_sendmsg+0x8b0/0xda0 [ 1554.295276][T28860] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1554.295293][T28860] ? __import_iovec+0x1d2/0x640 [ 1554.295315][T28860] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1554.295333][T28860] ____sys_sendmsg+0x9e1/0xb70 [ 1554.295351][T28860] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1554.295370][T28860] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1554.295397][T28860] ___sys_sendmsg+0x190/0x1e0 [ 1554.295417][T28860] ? __pfx____sys_sendmsg+0x10/0x10 [ 1554.295458][T28860] __sys_sendmsg+0x170/0x220 [ 1554.295473][T28860] ? __pfx___sys_sendmsg+0x10/0x10 [ 1554.295496][T28860] ? rcu_is_watching+0x12/0xc0 [ 1554.295515][T28860] do_syscall_64+0x115/0x840 [ 1554.295533][T28860] ? clear_bhb_loop+0x40/0x90 [ 1554.295551][T28860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1554.295566][T28860] RIP: 0033:0x7f6a3f19ce59 [ 1554.295578][T28860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1554.295592][T28860] RSP: 002b:00007f6a3ffeb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1554.295607][T28860] RAX: ffffffffffffffda RBX: 00007f6a3f415fa0 RCX: 00007f6a3f19ce59 [ 1554.295617][T28860] RDX: 0000000000000800 RSI: 0000200000001cc0 RDI: 0000000000000003 [ 1554.295626][T28860] RBP: 00007f6a3ffeb090 R08: 0000000000000000 R09: 0000000000000000 [ 1554.295634][T28860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1554.295643][T28860] R13: 00007f6a3f416038 R14: 00007f6a3f415fa0 R15: 00007ffd0387b4e8 [ 1554.295661][T28860] [ 1555.760707][T28879] ecryptfs_parse_packet_length: Error parsing packet length [ 1555.824780][T28879] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 1556.406643][T28901] nbd: must specify at least one socket [ 1556.469609][T28903] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1556.578275][T28906] FAULT_INJECTION: forcing a failure. [ 1556.578275][T28906] name failslab, interval 1, probability 0, space 0, times 0 [ 1556.658186][T28906] CPU: 0 UID: 0 PID: 28906 Comm: syz.5.4795 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1556.658214][T28906] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1556.658219][T28906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1556.658229][T28906] Call Trace: [ 1556.658234][T28906] [ 1556.658240][T28906] dump_stack_lvl+0x100/0x190 [ 1556.658269][T28906] should_fail_ex.cold+0x5/0xa [ 1556.658287][T28906] ? trace_parser_get_init+0x30/0xc0 [ 1556.658307][T28906] should_failslab+0xc2/0x120 [ 1556.658325][T28906] __kmalloc_noprof+0xe0/0x850 [ 1556.658351][T28906] trace_parser_get_init+0x30/0xc0 [ 1556.658370][T28906] ? tracing_update_buffers+0x81/0xf0 [ 1556.658387][T28906] ftrace_event_write+0x177/0x2c0 [ 1556.658403][T28906] ? __pfx_ftrace_event_write+0x10/0x10 [ 1556.658426][T28906] vfs_write+0x2aa/0x1070 [ 1556.658444][T28906] ? __pfx_ftrace_event_write+0x10/0x10 [ 1556.658461][T28906] ? __pfx_vfs_write+0x10/0x10 [ 1556.658483][T28906] ? __fget_files+0x215/0x3d0 [ 1556.658507][T28906] ? __fget_files+0x21f/0x3d0 [ 1556.658531][T28906] ksys_write+0x12a/0x250 [ 1556.658562][T28906] ? __pfx_ksys_write+0x10/0x10 [ 1556.658583][T28906] ? rcu_is_watching+0x12/0xc0 [ 1556.658602][T28906] do_syscall_64+0x115/0x840 [ 1556.658621][T28906] ? clear_bhb_loop+0x40/0x90 [ 1556.658639][T28906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1556.658654][T28906] RIP: 0033:0x7f6a3f19ce59 [ 1556.658667][T28906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1556.658681][T28906] RSP: 002b:00007f6a3ffca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1556.658695][T28906] RAX: ffffffffffffffda RBX: 00007f6a3f416090 RCX: 00007f6a3f19ce59 [ 1556.658705][T28906] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 1556.658714][T28906] RBP: 00007f6a3ffca090 R08: 0000000000000000 R09: 0000000000000000 [ 1556.658722][T28906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1556.658731][T28906] R13: 00007f6a3f416128 R14: 00007f6a3f416090 R15: 00007ffd0387b4e8 [ 1556.658755][T28906] [ 1557.886652][T28922] netlink: 330 bytes leftover after parsing attributes in process `syz.4.4800'. [ 1558.223617][T28937] futex_wake_op: syz.4.4800 tries to shift op by -2048; fix this program [ 1558.424692][T28929] netlink: 1166 bytes leftover after parsing attributes in process `syz.5.4802'. [ 1559.153664][T28933] kexec: Could not allocate control_code_buffer [ 1560.114864][T28985] nbd: must specify at least one socket [ 1561.400027][T29011] FAULT_INJECTION: forcing a failure. [ 1561.400027][T29011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1561.454444][T29011] CPU: 0 UID: 0 PID: 29011 Comm: syz.0.4820 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1561.454469][T29011] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1561.454475][T29011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1561.454484][T29011] Call Trace: [ 1561.454489][T29011] [ 1561.454495][T29011] dump_stack_lvl+0x100/0x190 [ 1561.454524][T29011] should_fail_ex.cold+0x5/0xa [ 1561.454543][T29011] _copy_to_user+0x32/0xd0 [ 1561.454564][T29011] do_ipv6_getsockopt+0xd1a/0x32d0 [ 1561.454589][T29011] ? __pfx_do_ipv6_getsockopt+0x10/0x10 [ 1561.454613][T29011] ? do_raw_spin_lock+0x128/0x260 [ 1561.454629][T29011] ? find_held_lock+0x2b/0x80 [ 1561.454646][T29011] ? debug_mutex_remove_waiter+0xa8/0x320 [ 1561.454663][T29011] ? debug_mutex_remove_waiter+0xa8/0x320 [ 1561.454683][T29011] ? mark_held_locks+0x40/0x70 [ 1561.454703][T29011] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1561.454721][T29011] ? __mutex_lock+0x838/0x1b10 [ 1561.454741][T29011] ? lockdep_hardirqs_on+0x78/0x100 [ 1561.454760][T29011] ? __mutex_lock+0x838/0x1b10 [ 1561.454779][T29011] ? __mutex_lock+0x26d/0x1b10 [ 1561.454798][T29011] ? smc_getsockopt+0xbc/0x390 [ 1561.454817][T29011] ? ipv6_getsockopt+0x12f/0x2a0 [ 1561.454835][T29011] ipv6_getsockopt+0x12f/0x2a0 [ 1561.454856][T29011] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 1561.454881][T29011] tcp_getsockopt+0xa1/0x110 [ 1561.454901][T29011] smc_getsockopt+0x165/0x390 [ 1561.454916][T29011] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1561.454934][T29011] ? __pfx_smc_getsockopt+0x10/0x10 [ 1561.454948][T29011] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 1561.454971][T29011] ? __pfx_smc_getsockopt+0x10/0x10 [ 1561.454987][T29011] do_sock_getsockopt+0x50a/0x6e0 [ 1561.455004][T29011] ? __lock_acquire+0x4a5/0x2630 [ 1561.455027][T29011] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1561.455044][T29011] ? find_held_lock+0x2b/0x80 [ 1561.455059][T29011] ? ksys_write+0x190/0x250 [ 1561.455080][T29011] ? find_held_lock+0x2b/0x80 [ 1561.455101][T29011] ? __fget_files+0x21f/0x3d0 [ 1561.455122][T29011] __sys_getsockopt+0x133/0x1d0 [ 1561.455138][T29011] ? __pfx_ksys_write+0x10/0x10 [ 1561.455156][T29011] ? __x64_sys_getsockopt+0xbd/0x160 [ 1561.455169][T29011] __x64_sys_getsockopt+0xbd/0x160 [ 1561.455182][T29011] ? do_syscall_64+0x90/0x840 [ 1561.455201][T29011] ? lockdep_hardirqs_on+0x78/0x100 [ 1561.455219][T29011] do_syscall_64+0x115/0x840 [ 1561.455238][T29011] ? clear_bhb_loop+0x40/0x90 [ 1561.455255][T29011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1561.455270][T29011] RIP: 0033:0x7f471059ce59 [ 1561.455283][T29011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1561.455297][T29011] RSP: 002b:00007f47113ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1561.455311][T29011] RAX: ffffffffffffffda RBX: 00007f4710816090 RCX: 00007f471059ce59 [ 1561.455321][T29011] RDX: 000000000000003a RSI: 0000000000000029 RDI: 0000000000000004 [ 1561.455329][T29011] RBP: 00007f47113ce090 R08: 0000000000000000 R09: 0000000000000000 [ 1561.455338][T29011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1561.455347][T29011] R13: 00007f4710816128 R14: 00007f4710816090 R15: 00007fffcea4ff38 [ 1561.455372][T29011] [ 1561.916526][T29018] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 1561.926365][T29017] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 1562.592852][T29009] Process accounting resumed [ 1563.877564][T29053] [U] ^R [ 1563.917701][T29053] FAULT_INJECTION: forcing a failure. [ 1563.917701][T29053] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1563.987597][T29056] nbd: must specify at least one socket [ 1564.030712][T29053] CPU: 0 UID: 0 PID: 29053 Comm: syz.1.4830 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1564.030742][T29053] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1564.030748][T29053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1564.030758][T29053] Call Trace: [ 1564.030763][T29053] [ 1564.030770][T29053] dump_stack_lvl+0x100/0x190 [ 1564.030801][T29053] should_fail_ex.cold+0x5/0xa [ 1564.030822][T29053] get_futex_key+0x1d2/0x1510 [ 1564.030848][T29053] ? __pfx_get_futex_key+0x10/0x10 [ 1564.030871][T29053] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 1564.030902][T29053] futex_wake+0xea/0x530 [ 1564.030920][T29053] ? tty_ioctl+0x93d/0x1640 [ 1564.030939][T29053] ? __pfx_futex_wake+0x10/0x10 [ 1564.030959][T29053] ? ldsem_up_read+0x4e/0x90 [ 1564.030979][T29053] ? tty_ioctl+0x345/0x1640 [ 1564.031001][T29053] do_futex+0x32b/0x350 [ 1564.031016][T29053] ? __pfx_do_futex+0x10/0x10 [ 1564.031032][T29053] ? find_held_lock+0x2b/0x80 [ 1564.031052][T29053] __x64_sys_futex+0x34f/0x4d0 [ 1564.031070][T29053] ? __pfx___x64_sys_futex+0x10/0x10 [ 1564.031087][T29053] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 1564.031109][T29053] ? syscall_user_dispatch+0x76/0x130 [ 1564.031127][T29053] do_syscall_64+0x115/0x840 [ 1564.031146][T29053] ? clear_bhb_loop+0x40/0x90 [ 1564.031164][T29053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1564.031179][T29053] RIP: 0033:0x7fc287b9ce59 [ 1564.031194][T29053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1564.031209][T29053] RSP: 002b:00007fc2889b20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1564.031224][T29053] RAX: ffffffffffffffda RBX: 00007fc287e16098 RCX: 00007fc287b9ce59 [ 1564.031234][T29053] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc287e1609c [ 1564.031243][T29053] RBP: 00007fc287e16090 R08: 0000000000000001 R09: 0000000000000000 [ 1564.031253][T29053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1564.031262][T29053] R13: 00007fc287e16128 R14: 00007ffc70bb7200 R15: 00007ffc70bb72e8 [ 1564.031289][T29053] [ 1565.498636][ T30] audit: type=1800 audit(4294967394.690:25): pid=29068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4833" name="file0" dev="tmpfs" ino=1702 res=0 errno=0 [ 1565.630388][T29064] can: request_module (can-proto-0) failed. [ 1566.786200][T29087] netlink: 206 bytes leftover after parsing attributes in process `syz.0.4837'. [ 1567.816963][T29114] nbd: must specify at least one socket [ 1568.069701][T29119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4843'. [ 1569.444248][T29139] FAULT_INJECTION: forcing a failure. [ 1569.444248][T29139] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1569.530876][T29139] CPU: 0 UID: 0 PID: 29139 Comm: syz.4.4847 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1569.530905][T29139] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1569.530911][T29139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1569.530921][T29139] Call Trace: [ 1569.530926][T29139] [ 1569.530932][T29139] dump_stack_lvl+0x100/0x190 [ 1569.530960][T29139] should_fail_ex.cold+0x5/0xa [ 1569.530979][T29139] get_futex_key+0xf78/0x1510 [ 1569.531004][T29139] ? __pfx_get_futex_key+0x10/0x10 [ 1569.531025][T29139] ? lock_acquire+0x1b1/0x370 [ 1569.531051][T29139] futex_wake+0xea/0x530 [ 1569.531069][T29139] ? __pfx_futex_wake+0x10/0x10 [ 1569.531086][T29139] ? exit_mm_release+0x19/0x30 [ 1569.531111][T29139] do_futex+0x32b/0x350 [ 1569.531126][T29139] ? __pfx_do_futex+0x10/0x10 [ 1569.531139][T29139] ? __might_fault+0xc5/0x140 [ 1569.531165][T29139] mm_release+0x24a/0x2f0 [ 1569.531182][T29139] do_exit+0x707/0x2af0 [ 1569.531204][T29139] ? __pfx_do_exit+0x10/0x10 [ 1569.531224][T29139] ? do_raw_spin_lock+0x128/0x260 [ 1569.531239][T29139] ? find_held_lock+0x2b/0x80 [ 1569.531255][T29139] ? get_signal+0x7e5/0x2210 [ 1569.531273][T29139] do_group_exit+0xd5/0x2a0 [ 1569.531295][T29139] get_signal+0x20ff/0x2210 [ 1569.531318][T29139] ? __pfx_get_signal+0x10/0x10 [ 1569.531337][T29139] ? do_futex+0x192/0x350 [ 1569.531352][T29139] arch_do_signal_or_restart+0x91/0x7a0 [ 1569.531374][T29139] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1569.531401][T29139] ? rcu_is_watching+0x12/0xc0 [ 1569.531419][T29139] exit_to_user_mode_loop+0x98/0x670 [ 1569.531440][T29139] ? rcu_is_watching+0x12/0xc0 [ 1569.531458][T29139] do_syscall_64+0x652/0x840 [ 1569.531485][T29139] ? clear_bhb_loop+0x40/0x90 [ 1569.531503][T29139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1569.531518][T29139] RIP: 0033:0x7f571dd9ce59 [ 1569.531531][T29139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1569.531544][T29139] RSP: 002b:00007f571eba90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1569.531559][T29139] RAX: fffffffffffffe00 RBX: 00007f571e016098 RCX: 00007f571dd9ce59 [ 1569.531569][T29139] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f571e016098 [ 1569.531578][T29139] RBP: 00007f571e016090 R08: 0000000000000000 R09: 0000000000000000 [ 1569.531586][T29139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1569.531595][T29139] R13: 00007f571e016128 R14: 00007ffc2d567fa0 R15: 00007ffc2d568088 [ 1569.531614][T29139] [ 1570.153697][T29146] Unable to find swap-space signature [ 1570.198288][T29145] Unable to find swap-space signature [ 1570.747568][T29155] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 1570.831281][T29155] netlink: 384 bytes leftover after parsing attributes in process `syz.0.4851'. [ 1571.788149][T29182] nbd: must specify at least one socket [ 1573.748473][T29211] FAULT_INJECTION: forcing a failure. [ 1573.748473][T29211] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1573.834812][T29211] CPU: 0 UID: 0 PID: 29211 Comm: syz.1.4862 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1573.834842][T29211] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1573.834848][T29211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1573.834858][T29211] Call Trace: [ 1573.834864][T29211] [ 1573.834870][T29211] dump_stack_lvl+0x100/0x190 [ 1573.834903][T29211] should_fail_ex.cold+0x5/0xa [ 1573.834922][T29211] get_futex_key+0x1d2/0x1510 [ 1573.834948][T29211] ? __pfx_get_futex_key+0x10/0x10 [ 1573.834977][T29211] futex_wait_setup+0x83/0x510 [ 1573.835000][T29211] __futex_wait+0x19f/0x300 [ 1573.835020][T29211] ? __pfx___futex_wait+0x10/0x10 [ 1573.835041][T29211] ? __pfx_futex_wake_mark+0x10/0x10 [ 1573.835062][T29211] ? futex_hash+0x2ad/0x370 [ 1573.835093][T29211] ? futex_hash+0x141/0x370 [ 1573.835118][T29211] futex_wait+0xe6/0x370 [ 1573.835138][T29211] ? __pfx_futex_wait+0x10/0x10 [ 1573.835166][T29211] do_futex+0x1ef/0x350 [ 1573.835183][T29211] ? __pfx_do_futex+0x10/0x10 [ 1573.835200][T29211] ? __fget_files+0x21f/0x3d0 [ 1573.835220][T29211] __x64_sys_futex+0x34f/0x4d0 [ 1573.835238][T29211] ? __pfx___x64_sys_futex+0x10/0x10 [ 1573.835254][T29211] ? __pfx_do_writev+0x10/0x10 [ 1573.835271][T29211] ? rcu_is_watching+0x12/0xc0 [ 1573.835291][T29211] do_syscall_64+0x115/0x840 [ 1573.835311][T29211] ? clear_bhb_loop+0x40/0x90 [ 1573.835329][T29211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1573.835344][T29211] RIP: 0033:0x7fc287b9ce59 [ 1573.835359][T29211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1573.835373][T29211] RSP: 002b:00007fc2889d30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1573.835389][T29211] RAX: ffffffffffffffda RBX: 00007fc287e15fa8 RCX: 00007fc287b9ce59 [ 1573.835399][T29211] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc287e15fa8 [ 1573.835409][T29211] RBP: 00007fc287e15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1573.835419][T29211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1573.835429][T29211] R13: 00007fc287e16038 R14: 00007ffc70bb7200 R15: 00007ffc70bb72e8 [ 1573.835449][T29211] [ 1574.897364][T29222] Process accounting paused [ 1575.167110][T29234] futex_wake_op: syz.1.4868 tries to shift op by -2048; fix this program [ 1575.527297][T29241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4870'. [ 1575.864287][T29247] FAULT_INJECTION: forcing a failure. [ 1575.864287][T29247] name failslab, interval 1, probability 0, space 0, times 0 [ 1575.878003][T29248] FAULT_INJECTION: forcing a failure. [ 1575.878003][T29248] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1575.929628][T29247] CPU: 0 UID: 0 PID: 29247 Comm: syz.5.4873 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1575.929658][T29247] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1575.929665][T29247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1575.929675][T29247] Call Trace: [ 1575.929682][T29247] [ 1575.929690][T29247] dump_stack_lvl+0x100/0x190 [ 1575.929720][T29247] should_fail_ex.cold+0x5/0xa [ 1575.929742][T29247] should_failslab+0xc2/0x120 [ 1575.929760][T29247] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1575.929783][T29247] ? ptlock_alloc+0x1f/0x70 [ 1575.929805][T29247] ? do_raw_spin_lock+0x128/0x260 [ 1575.929824][T29247] ptlock_alloc+0x1f/0x70 [ 1575.929853][T29247] pte_alloc_one+0x82/0x3d0 [ 1575.929874][T29247] do_fault+0x86c/0x1750 [ 1575.929892][T29247] ? __pmd_alloc+0x3fb/0x950 [ 1575.929913][T29247] __handle_mm_fault+0x187d/0x2a00 [ 1575.929939][T29247] ? mt_find+0x45e/0x8e0 [ 1575.929962][T29247] ? __pfx___handle_mm_fault+0x10/0x10 [ 1575.929982][T29247] ? __pfx_mt_find+0x10/0x10 [ 1575.930014][T29247] ? find_vma+0xbf/0x140 [ 1575.930030][T29247] ? __pfx_find_vma+0x10/0x10 [ 1575.930048][T29247] handle_mm_fault+0x37b/0xa30 [ 1575.930073][T29247] do_user_addr_fault+0x74c/0x12f0 [ 1575.930093][T29247] ? trace_page_fault_kernel+0x7a/0x200 [ 1575.930115][T29247] exc_page_fault+0x6f/0xd0 [ 1575.930136][T29247] asm_exc_page_fault+0x26/0x30 [ 1575.930153][T29247] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 1575.930170][T29247] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 cd 9c 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 1575.930185][T29247] RSP: 0018:ffffc90000117bf8 EFLAGS: 00050202 [ 1575.930198][T29247] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000000000f [ 1575.930208][T29247] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90000117d90 [ 1575.930218][T29247] RBP: 000000000000000f R08: 0000000000000001 R09: fffff52000022fb3 [ 1575.930228][T29247] R10: ffffc90000117d9e R11: 0000000000000000 R12: 0000000000000000 [ 1575.930237][T29247] R13: ffffc90000117d90 R14: 000000000000000f R15: ffffc90000117d90 [ 1575.930257][T29247] _copy_from_user+0x98/0xd0 [ 1575.930279][T29247] __sys_bpf+0x243/0x4b90 [ 1575.930293][T29247] ? futex_private_hash_put+0x107/0x1c0 [ 1575.930319][T29247] ? __pfx___sys_bpf+0x10/0x10 [ 1575.930335][T29247] ? __pfx_futex_wake+0x10/0x10 [ 1575.930355][T29247] ? ksys_write+0x190/0x250 [ 1575.930371][T29247] ? ksys_write+0x190/0x250 [ 1575.930391][T29247] ? do_futex+0x192/0x350 [ 1575.930416][T29247] ? xfd_validate_state+0x129/0x190 [ 1575.930431][T29247] ? ksys_write+0x1ac/0x250 [ 1575.930452][T29247] __x64_sys_bpf+0x7b/0xc0 [ 1575.930466][T29247] ? lockdep_hardirqs_on+0x78/0x100 [ 1575.930487][T29247] do_syscall_64+0x115/0x840 [ 1575.930506][T29247] ? clear_bhb_loop+0x40/0x90 [ 1575.930524][T29247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1575.930539][T29247] RIP: 0033:0x7f6a3f19ce59 [ 1575.930553][T29247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1575.930567][T29247] RSP: 002b:00007f6a3ffeb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1575.930581][T29247] RAX: ffffffffffffffda RBX: 00007f6a3f415fa0 RCX: 00007f6a3f19ce59 [ 1575.930591][T29247] RDX: 000000000000000f RSI: 0000000000000000 RDI: 00000000ff600000 [ 1575.930599][T29247] RBP: 00007f6a3f232d6f R08: 0000000000000000 R09: 0000000000000000 [ 1575.930608][T29247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1575.930617][T29247] R13: 00007f6a3f416038 R14: 00007f6a3f415fa0 R15: 00007ffd0387b4e8 [ 1575.930637][T29247] [ 1576.315626][T29248] CPU: 0 UID: 0 PID: 29248 Comm: syz.4.4871 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1576.315655][T29248] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1576.315662][T29248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1576.315673][T29248] Call Trace: [ 1576.315678][T29248] [ 1576.315685][T29248] dump_stack_lvl+0x100/0x190 [ 1576.315715][T29248] should_fail_ex.cold+0x5/0xa [ 1576.315734][T29248] ? prepare_alloc_pages+0x16d/0x5f0 [ 1576.315755][T29248] should_fail_alloc_page+0xeb/0x140 [ 1576.315775][T29248] prepare_alloc_pages+0x1f0/0x5f0 [ 1576.315797][T29248] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 1576.315834][T29248] ? __lock_acquire+0x4a5/0x2630 [ 1576.315863][T29248] ? __lock_acquire+0x4a5/0x2630 [ 1576.315886][T29248] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1576.315921][T29248] ? find_held_lock+0x2b/0x80 [ 1576.315939][T29248] ? is_bpf_text_address+0x8a/0x1a0 [ 1576.315959][T29248] ? is_bpf_text_address+0x8a/0x1a0 [ 1576.315978][T29248] ? bpf_ksym_find+0x124/0x1c0 [ 1576.315994][T29248] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1576.316013][T29248] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1576.316035][T29248] ? policy_nodemask+0xed/0x4f0 [ 1576.316054][T29248] alloc_pages_mpol+0x1fb/0x540 [ 1576.316073][T29248] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1576.316095][T29248] folio_alloc_mpol_noprof+0x36/0x260 [ 1576.316117][T29248] shmem_alloc_folio+0x135/0x160 [ 1576.316139][T29248] shmem_alloc_and_add_folio+0x371/0xd40 [ 1576.316167][T29248] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1576.316193][T29248] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 1576.316219][T29248] shmem_get_folio_gfp+0x6ab/0x1900 [ 1576.316239][T29248] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1576.316259][T29248] shmem_fault+0x1f9/0xa20 [ 1576.316274][T29248] ? rcu_is_watching+0x12/0xc0 [ 1576.316293][T29248] ? __pfx_shmem_fault+0x10/0x10 [ 1576.316309][T29248] ? rcu_read_unlock+0x17/0x60 [ 1576.316329][T29248] ? find_held_lock+0x2b/0x80 [ 1576.316346][T29248] ? rcu_read_unlock+0x17/0x60 [ 1576.316364][T29248] ? rcu_read_unlock+0x17/0x60 [ 1576.316387][T29248] ? __pfx_filemap_map_pages+0x10/0x10 [ 1576.316409][T29248] __do_fault+0x10b/0x440 [ 1576.316427][T29248] do_fault+0x2db/0x1750 [ 1576.316445][T29248] ? __pmd_alloc+0x3fb/0x950 [ 1576.316465][T29248] __handle_mm_fault+0x187d/0x2a00 [ 1576.316490][T29248] ? mt_find+0x45e/0x8e0 [ 1576.316513][T29248] ? __pfx___handle_mm_fault+0x10/0x10 [ 1576.316532][T29248] ? __pfx_mt_find+0x10/0x10 [ 1576.316564][T29248] ? find_vma+0xbf/0x140 [ 1576.316581][T29248] ? __pfx_find_vma+0x10/0x10 [ 1576.316599][T29248] handle_mm_fault+0x37b/0xa30 [ 1576.316625][T29248] do_user_addr_fault+0x74c/0x12f0 [ 1576.316646][T29248] ? trace_page_fault_kernel+0x7a/0x200 [ 1576.316664][T29248] exc_page_fault+0x6f/0xd0 [ 1576.316685][T29248] asm_exc_page_fault+0x26/0x30 [ 1576.316701][T29248] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 1576.316719][T29248] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 cd 9c 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 1576.316733][T29248] RSP: 0018:ffffc9000330fd68 EFLAGS: 00050216 [ 1576.316747][T29248] RAX: 000040000007d000 RBX: 0000000000000020 RCX: 0000000000000020 [ 1576.316757][T29248] RDX: 0000000000000001 RSI: ffffc9000330fdd0 RDI: 0000000000000000 [ 1576.316766][T29248] RBP: 0000000000000000 R08: 0000000000000000 R09: fffff52000661fbd [ 1576.316775][T29248] R10: ffffc9000330fdef R11: 0000000000000000 R12: ffffc9000330fdd0 [ 1576.316784][T29248] R13: 0000000000000020 R14: 00007ffffffff000 R15: 0000000000000000 [ 1576.316807][T29248] _copy_to_user+0xa4/0xd0 [ 1576.316838][T29248] ksys_msgctl.constprop.0+0x2cc/0x340 [ 1576.316863][T29248] ? __pfx_ksys_msgctl.constprop.0+0x10/0x10 [ 1576.316899][T29248] ? rcu_is_watching+0x12/0xc0 [ 1576.316919][T29248] do_syscall_64+0x115/0x840 [ 1576.316940][T29248] ? clear_bhb_loop+0x40/0x90 [ 1576.316958][T29248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1576.316973][T29248] RIP: 0033:0x7f571dd9ce59 [ 1576.316986][T29248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1576.317000][T29248] RSP: 002b:00007f571ebca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000047 [ 1576.317013][T29248] RAX: ffffffffffffffda RBX: 00007f571e015fa0 RCX: 00007f571dd9ce59 [ 1576.317024][T29248] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000000049e1 [ 1576.317033][T29248] RBP: 00007f571de32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1576.317042][T29248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1576.317051][T29248] R13: 00007f571e016038 R14: 00007f571e015fa0 R15: 00007ffc2d568088 [ 1576.317072][T29248] [ 1577.552780][T29269] [U] ^R [ 1577.614815][T29269] FAULT_INJECTION: forcing a failure. [ 1577.614815][T29269] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1577.632918][T29272] Setting dangerous option i915.mitigations - tainting kernel [ 1577.666507][T29272] sd 0:0:1:0: PR command failed: 1026 [ 1577.706669][T29272] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1577.727148][T29269] CPU: 0 UID: 0 PID: 29269 Comm: syz.1.4879 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1577.727177][T29269] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1577.727183][T29269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1577.727192][T29269] Call Trace: [ 1577.727198][T29269] [ 1577.727204][T29269] dump_stack_lvl+0x100/0x190 [ 1577.727235][T29269] should_fail_ex.cold+0x5/0xa [ 1577.727255][T29269] get_futex_key+0x1d2/0x1510 [ 1577.727281][T29269] ? __pfx_get_futex_key+0x10/0x10 [ 1577.727304][T29269] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 1577.727332][T29269] futex_wake+0xea/0x530 [ 1577.727350][T29269] ? tty_ioctl+0x93d/0x1640 [ 1577.727370][T29269] ? __pfx_futex_wake+0x10/0x10 [ 1577.727391][T29269] ? ldsem_up_read+0x4e/0x90 [ 1577.727413][T29269] ? tty_ioctl+0x345/0x1640 [ 1577.727434][T29269] do_futex+0x32b/0x350 [ 1577.727450][T29269] ? __pfx_do_futex+0x10/0x10 [ 1577.727467][T29269] ? find_held_lock+0x2b/0x80 [ 1577.727488][T29269] __x64_sys_futex+0x34f/0x4d0 [ 1577.727509][T29269] ? __pfx___x64_sys_futex+0x10/0x10 [ 1577.727526][T29269] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 1577.727548][T29269] ? syscall_user_dispatch+0x76/0x130 [ 1577.727566][T29269] do_syscall_64+0x115/0x840 [ 1577.727586][T29269] ? clear_bhb_loop+0x40/0x90 [ 1577.727605][T29269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1577.727620][T29269] RIP: 0033:0x7fc287b9ce59 [ 1577.727634][T29269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1577.727649][T29269] RSP: 002b:00007fc2889b20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1577.727664][T29269] RAX: ffffffffffffffda RBX: 00007fc287e16098 RCX: 00007fc287b9ce59 [ 1577.727674][T29269] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc287e1609c [ 1577.727684][T29269] RBP: 00007fc287e16090 R08: 0000000000000001 R09: 0000000000000000 [ 1577.727693][T29269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1577.727702][T29269] R13: 00007fc287e16128 R14: 00007ffc70bb7200 R15: 00007ffc70bb72e8 [ 1577.727723][T29269] [ 1577.945352][T29272] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1578.023531][T29272] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4881'. [ 1578.074875][T29280] random: crng reseeded on system resumption [ 1578.576526][T29288] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 1579.276301][T17042] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 1579.615703][T29328] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4890'. [ 1582.165520][T29373] FAULT_INJECTION: forcing a failure. [ 1582.165520][T29373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1582.249455][T29373] CPU: 0 UID: 0 PID: 29373 Comm: syz.4.4901 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1582.249481][T29373] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1582.249488][T29373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1582.249497][T29373] Call Trace: [ 1582.249503][T29373] [ 1582.249510][T29373] dump_stack_lvl+0x100/0x190 [ 1582.249539][T29373] should_fail_ex.cold+0x5/0xa [ 1582.249558][T29373] _copy_to_iter+0x1f3/0x1720 [ 1582.249580][T29373] ? show_trace_dev_match+0x1d1/0x2e0 [ 1582.249598][T29373] ? __pfx__copy_to_iter+0x10/0x10 [ 1582.249621][T29373] ? kernfs_seq_stop+0xcd/0x120 [ 1582.249644][T29373] ? kernfs_put_active+0x93/0xe0 [ 1582.249664][T29373] seq_read_iter+0xdab/0x1270 [ 1582.249689][T29373] kernfs_fop_read_iter+0x46c/0x610 [ 1582.249709][T29373] ? rw_verify_area+0xce/0x6d0 [ 1582.249723][T29373] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 1582.249744][T29373] vfs_read+0x825/0xb30 [ 1582.249762][T29373] ? __pfx_vfs_read+0x10/0x10 [ 1582.249789][T29373] ksys_read+0x12a/0x250 [ 1582.249804][T29373] ? __pfx_ksys_read+0x10/0x10 [ 1582.249822][T29373] ? rcu_is_watching+0x12/0xc0 [ 1582.249841][T29373] do_syscall_64+0x115/0x840 [ 1582.249860][T29373] ? clear_bhb_loop+0x40/0x90 [ 1582.249878][T29373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1582.249893][T29373] RIP: 0033:0x7f571dd9ce59 [ 1582.249906][T29373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1582.249919][T29373] RSP: 002b:00007f571ebca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1582.249934][T29373] RAX: ffffffffffffffda RBX: 00007f571e015fa0 RCX: 00007f571dd9ce59 [ 1582.249944][T29373] RDX: 00000000000000af RSI: 0000200000000280 RDI: 0000000000000003 [ 1582.249952][T29373] RBP: 00007f571ebca090 R08: 0000000000000000 R09: 0000000000000000 [ 1582.249961][T29373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1582.249969][T29373] R13: 00007f571e016038 R14: 00007f571e015fa0 R15: 00007ffc2d568088 [ 1582.249988][T29373] [ 1583.030565][T29383] ecryptfs_parse_packet_length: Error parsing packet length [ 1583.086150][T29383] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 1583.847649][T29407] nbd: must specify at least one socket [ 1587.681298][T29462] netlink: 326 bytes leftover after parsing attributes in process `syz.4.4922'. [ 1591.694004][T29555] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 1591.790524][T29555] netlink: 384 bytes leftover after parsing attributes in process `syz.5.4943'. [ 1592.063556][T29563] FAULT_INJECTION: forcing a failure. [ 1592.063556][T29563] name failslab, interval 1, probability 0, space 0, times 0 [ 1592.127143][T29563] CPU: 0 UID: 0 PID: 29563 Comm: syz.1.4945 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1592.127169][T29563] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1592.127175][T29563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1592.127186][T29563] Call Trace: [ 1592.127192][T29563] [ 1592.127197][T29563] dump_stack_lvl+0x100/0x190 [ 1592.127226][T29563] should_fail_ex.cold+0x5/0xa [ 1592.127244][T29563] should_failslab+0xc2/0x120 [ 1592.127262][T29563] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1592.127283][T29563] ? taskstats_exit+0x67b/0xc10 [ 1592.127309][T29563] ? rcu_is_watching+0x12/0xc0 [ 1592.127328][T29563] taskstats_exit+0x67b/0xc10 [ 1592.127346][T29563] ? __pfx_acct_update_integrals+0x10/0x10 [ 1592.127365][T29563] ? __pfx_taskstats_exit+0x10/0x10 [ 1592.127385][T29563] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1592.127402][T29563] ? exit_signals+0x395/0xaf0 [ 1592.127421][T29563] do_exit+0x65c/0x2af0 [ 1592.127444][T29563] ? __pfx_do_exit+0x10/0x10 [ 1592.127464][T29563] ? do_raw_spin_lock+0x128/0x260 [ 1592.127479][T29563] ? find_held_lock+0x2b/0x80 [ 1592.127495][T29563] ? get_signal+0x7e5/0x2210 [ 1592.127513][T29563] do_group_exit+0xd5/0x2a0 [ 1592.127534][T29563] get_signal+0x20ff/0x2210 [ 1592.127558][T29563] ? __pfx_get_signal+0x10/0x10 [ 1592.127576][T29563] ? do_futex+0x192/0x350 [ 1592.127592][T29563] arch_do_signal_or_restart+0x91/0x7a0 [ 1592.127614][T29563] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1592.127638][T29563] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1592.127656][T29563] ? rcu_is_watching+0x12/0xc0 [ 1592.127674][T29563] exit_to_user_mode_loop+0x98/0x670 [ 1592.127695][T29563] ? rcu_is_watching+0x12/0xc0 [ 1592.127713][T29563] do_syscall_64+0x652/0x840 [ 1592.127732][T29563] ? clear_bhb_loop+0x40/0x90 [ 1592.127749][T29563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1592.127764][T29563] RIP: 0033:0x7fc287b9ce59 [ 1592.127777][T29563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1592.127794][T29563] RSP: 002b:00007fc2889d30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1592.127811][T29563] RAX: fffffffffffffe00 RBX: 00007fc287e15fa8 RCX: 00007fc287b9ce59 [ 1592.127821][T29563] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc287e15fa8 [ 1592.127830][T29563] RBP: 00007fc287e15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1592.127839][T29563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1592.127847][T29563] R13: 00007fc287e16038 R14: 00007ffc70bb7200 R15: 00007ffc70bb72e8 [ 1592.127866][T29563] [ 1592.631449][T29576] Process accounting paused [ 1592.993012][T29588] FAULT_INJECTION: forcing a failure. [ 1592.993012][T29588] name failslab, interval 1, probability 0, space 0, times 0 [ 1593.020595][T29588] CPU: 0 UID: 0 PID: 29588 Comm: syz.4.4950 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1593.020625][T29588] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1593.020631][T29588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1593.020642][T29588] Call Trace: [ 1593.020647][T29588] [ 1593.020654][T29588] dump_stack_lvl+0x100/0x190 [ 1593.020684][T29588] should_fail_ex.cold+0x5/0xa [ 1593.020706][T29588] should_failslab+0xc2/0x120 [ 1593.020724][T29588] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1593.020751][T29588] ? do_getname+0x35/0x390 [ 1593.020775][T29588] do_getname+0x35/0x390 [ 1593.020798][T29588] do_sys_openat2+0xc5/0x1e0 [ 1593.020821][T29588] ? __pfx_do_sys_openat2+0x10/0x10 [ 1593.020849][T29588] __x64_sys_openat+0x12d/0x210 [ 1593.020872][T29588] ? __pfx___x64_sys_openat+0x10/0x10 [ 1593.020900][T29588] ? rcu_is_watching+0x12/0xc0 [ 1593.020922][T29588] do_syscall_64+0x115/0x840 [ 1593.020943][T29588] ? clear_bhb_loop+0x40/0x90 [ 1593.020961][T29588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1593.020977][T29588] RIP: 0033:0x7f571dd5d68e [ 1593.020991][T29588] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1593.021006][T29588] RSP: 002b:00007f571ebc9ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1593.021020][T29588] RAX: ffffffffffffffda RBX: 00007f571ebca6c0 RCX: 00007f571dd5d68e [ 1593.021031][T29588] RDX: 0000000000000002 RSI: 00007f571ebc9f90 RDI: ffffffffffffff9c [ 1593.021040][T29588] RBP: 00007f571de32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1593.021050][T29588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1593.021059][T29588] R13: 00007f571e016038 R14: 00007f571e015fa0 R15: 00007ffc2d568088 [ 1593.021079][T29588] [ 1594.152978][T29604] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1595.389500][T29630] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4961'. [ 1595.712877][T29643] snd_virmidi snd_virmidi.0: control 53842:9:2:yª:0 is already present [ 1595.885337][T29638] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1596.626055][T29664] sd 0:0:1:0: PR command failed: 1026 [ 1596.662038][T29664] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1596.727537][T29664] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1597.559940][T29684] ptp ptp0: only physical clock in use now [ 1598.240130][T29697] FAULT_INJECTION: forcing a failure. [ 1598.240130][T29697] name failslab, interval 1, probability 0, space 0, times 0 [ 1598.431318][T29697] CPU: 0 UID: 0 PID: 29697 Comm: syz.5.4975 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1598.431345][T29697] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1598.431351][T29697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1598.431359][T29697] Call Trace: [ 1598.431365][T29697] [ 1598.431371][T29697] dump_stack_lvl+0x100/0x190 [ 1598.431403][T29697] should_fail_ex.cold+0x5/0xa [ 1598.431423][T29697] should_failslab+0xc2/0x120 [ 1598.431440][T29697] __kvmalloc_node_noprof+0xfa/0xa00 [ 1598.431455][T29697] ? io_rsrc_data_alloc+0x2c/0xa0 [ 1598.431476][T29697] ? rcu_is_watching+0x12/0xc0 [ 1598.431496][T29697] io_rsrc_data_alloc+0x2c/0xa0 [ 1598.431518][T29697] io_sqe_buffers_register.cold+0x16/0x4d2 [ 1598.431542][T29697] ? __pfx___mutex_lock+0x10/0x10 [ 1598.431567][T29697] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 1598.431585][T29697] ? __fget_files+0x215/0x3d0 [ 1598.431605][T29697] ? __fget_files+0x21f/0x3d0 [ 1598.431626][T29697] __do_sys_io_uring_register+0x13e5/0x1bd0 [ 1598.431646][T29697] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 1598.431661][T29697] ? __fget_files+0x21f/0x3d0 [ 1598.431681][T29697] ? fput+0x79/0x100 [ 1598.431706][T29697] ? ksys_write+0x1ac/0x250 [ 1598.431724][T29697] ? __pfx_ksys_write+0x10/0x10 [ 1598.431742][T29697] ? rcu_is_watching+0x12/0xc0 [ 1598.431760][T29697] do_syscall_64+0x115/0x840 [ 1598.431779][T29697] ? clear_bhb_loop+0x40/0x90 [ 1598.431796][T29697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1598.431815][T29697] RIP: 0033:0x7f6a3f19ce59 [ 1598.431829][T29697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1598.431843][T29697] RSP: 002b:00007f6a3ffca028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1598.431858][T29697] RAX: ffffffffffffffda RBX: 00007f6a3f416090 RCX: 00007f6a3f19ce59 [ 1598.431868][T29697] RDX: 0000200000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 1598.431877][T29697] RBP: 00007f6a3ffca090 R08: 0000000000000000 R09: 0000000000000000 [ 1598.431885][T29697] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1598.431894][T29697] R13: 00007f6a3f416128 R14: 00007f6a3f416090 R15: 00007ffd0387b4e8 [ 1598.431913][T29697] [ 1598.437920][T29697] ptp ptp0: only physical clock in use now [ 1600.381170][T29719] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 1600.430236][T29719] netlink: 384 bytes leftover after parsing attributes in process `syz.0.4981'. [ 1603.655566][T29793] nbd: must specify at least one socket [ 1604.665404][T29809] busy [ 1605.377511][T29818] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5005'. [ 1605.626104][T29799] Process accounting resumed [ 1606.755438][T29851] [U] ^R [ 1607.101844][T29859] netlink: 'syz.1.5012': attribute type 1 has an invalid length. [ 1607.172959][T29845] FAULT_INJECTION: forcing a failure. [ 1607.172959][T29845] name failslab, interval 1, probability 0, space 0, times 0 [ 1607.237563][T29845] CPU: 0 UID: 0 PID: 29845 Comm: syz.4.5010 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1607.237593][T29845] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1607.237600][T29845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1607.237610][T29845] Call Trace: [ 1607.237616][T29845] [ 1607.237622][T29845] dump_stack_lvl+0x100/0x190 [ 1607.237653][T29845] should_fail_ex.cold+0x5/0xa [ 1607.237673][T29845] should_failslab+0xc2/0x120 [ 1607.237692][T29845] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1607.237716][T29845] ? sock_alloc_inode+0x26/0x290 [ 1607.237734][T29845] ? madvise_unlock+0xa9/0x220 [ 1607.237753][T29845] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1607.237771][T29845] sock_alloc_inode+0x26/0x290 [ 1607.237788][T29845] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1607.237812][T29845] alloc_inode+0x68/0x250 [ 1607.237850][T29845] sock_alloc+0x44/0x280 [ 1607.237866][T29845] ? security_socket_create+0x7f/0x250 [ 1607.237884][T29845] __sock_create+0xc2/0x860 [ 1607.237908][T29845] __sys_socket+0x14d/0x260 [ 1607.237928][T29845] ? __pfx___sys_socket+0x10/0x10 [ 1607.237947][T29845] ? ksys_write+0x1ac/0x250 [ 1607.237970][T29845] __x64_sys_socket+0x72/0xb0 [ 1607.237991][T29845] ? lockdep_hardirqs_on+0x78/0x100 [ 1607.238012][T29845] do_syscall_64+0x115/0x840 [ 1607.238031][T29845] ? clear_bhb_loop+0x40/0x90 [ 1607.238050][T29845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1607.238067][T29845] RIP: 0033:0x7f571dd9ce59 [ 1607.238080][T29845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1607.238095][T29845] RSP: 002b:00007f571eba9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1607.238118][T29845] RAX: ffffffffffffffda RBX: 00007f571e016090 RCX: 00007f571dd9ce59 [ 1607.238133][T29845] RDX: 0000000000000084 RSI: 0000000000000801 RDI: 000000000000000a [ 1607.238142][T29845] RBP: 00007f571de32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1607.238152][T29845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1607.238161][T29845] R13: 00007f571e016128 R14: 00007f571e016090 R15: 00007ffc2d568088 [ 1607.238181][T29845] [ 1607.238191][T29845] socket: no more sockets [ 1607.499180][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.508668][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.660021][T29889] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1608.949379][T29890] FAULT_INJECTION: forcing a failure. [ 1608.949379][T29890] name failslab, interval 1, probability 0, space 0, times 0 [ 1609.005639][T29890] CPU: 0 UID: 0 PID: 29890 Comm: syz.5.5019 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1609.005668][T29890] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1609.005681][T29890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1609.005691][T29890] Call Trace: [ 1609.005697][T29890] [ 1609.005703][T29890] dump_stack_lvl+0x100/0x190 [ 1609.005733][T29890] should_fail_ex.cold+0x5/0xa [ 1609.005752][T29890] ? tracepoint_add_func+0x3a8/0x1150 [ 1609.005772][T29890] should_failslab+0xc2/0x120 [ 1609.005789][T29890] __kmalloc_noprof+0xe0/0x850 [ 1609.005814][T29890] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 1609.005835][T29890] tracepoint_add_func+0x3a8/0x1150 [ 1609.005854][T29890] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 1609.005878][T29890] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 1609.005898][T29890] tracepoint_probe_register+0xc4/0x110 [ 1609.005922][T29890] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 1609.005942][T29890] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 1609.005963][T29890] ? __lock_acquire+0x4a5/0x2630 [ 1609.005988][T29890] tracing_start_sched_switch+0xdc/0x170 [ 1609.006008][T29890] __ftrace_event_enable_disable+0x557/0x6f0 [ 1609.006032][T29890] __ftrace_set_clr_event_nolock+0x390/0xc30 [ 1609.006060][T29890] ftrace_set_clr_event+0x1b7/0x3f0 [ 1609.006078][T29890] ? __pfx_ftrace_set_clr_event+0x10/0x10 [ 1609.006092][T29890] ? trace_get_user+0x3ae/0xa70 [ 1609.006118][T29890] ftrace_event_write+0x259/0x2c0 [ 1609.006134][T29890] ? __pfx_ftrace_event_write+0x10/0x10 [ 1609.006157][T29890] vfs_write+0x2aa/0x1070 [ 1609.006175][T29890] ? __pfx_ftrace_event_write+0x10/0x10 [ 1609.006195][T29890] ? __pfx_vfs_write+0x10/0x10 [ 1609.006211][T29890] ? __fget_files+0x215/0x3d0 [ 1609.006231][T29890] ? __fget_files+0x21f/0x3d0 [ 1609.006253][T29890] ksys_write+0x12a/0x250 [ 1609.006269][T29890] ? __pfx_ksys_write+0x10/0x10 [ 1609.006287][T29890] ? rcu_is_watching+0x12/0xc0 [ 1609.006306][T29890] do_syscall_64+0x115/0x840 [ 1609.006326][T29890] ? clear_bhb_loop+0x40/0x90 [ 1609.006344][T29890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1609.006358][T29890] RIP: 0033:0x7f6a3f19ce59 [ 1609.006371][T29890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1609.006385][T29890] RSP: 002b:00007f6a3ffca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1609.006400][T29890] RAX: ffffffffffffffda RBX: 00007f6a3f416090 RCX: 00007f6a3f19ce59 [ 1609.006409][T29890] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 1609.006418][T29890] RBP: 00007f6a3ffca090 R08: 0000000000000000 R09: 0000000000000000 [ 1609.006427][T29890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1609.006435][T29890] R13: 00007f6a3f416128 R14: 00007f6a3f416090 R15: 00007ffd0387b4e8 [ 1609.006455][T29890] [ 1609.305896][T29890] wakeup trace: Couldn't activate tracepoint probe to kernel_sched_wakeup_new [ 1610.334732][T29912] netlink: 326 bytes leftover after parsing attributes in process `syz.0.5025'. [ 1610.531450][T29919] netlink: 'syz.5.5027': attribute type 23 has an invalid length. [ 1611.487226][T29942] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5031'. [ 1612.023251][T29960] ecryptfs_parse_packet_length: Error parsing packet length [ 1612.067594][T29960] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 1612.855864][T29980] nbd: must specify at least one socket [ 1613.350440][T29992] FAULT_INJECTION: forcing a failure. [ 1613.350440][T29992] name failslab, interval 1, probability 0, space 0, times 0 [ 1613.370188][T29994] nbd: must specify at least one socket [ 1613.440083][T29992] CPU: 0 UID: 0 PID: 29992 Comm: syz.5.5040 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1613.440117][T29992] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1613.440123][T29992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1613.440133][T29992] Call Trace: [ 1613.440140][T29992] [ 1613.440153][T29992] dump_stack_lvl+0x100/0x190 [ 1613.440184][T29992] should_fail_ex.cold+0x5/0xa [ 1613.440205][T29992] should_failslab+0xc2/0x120 [ 1613.440224][T29992] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1613.440247][T29992] ? sp_alloc+0x27/0x160 [ 1613.440270][T29992] sp_alloc+0x27/0x160 [ 1613.440294][T29992] mpol_set_shared_policy+0xa5/0x890 [ 1613.440318][T29992] ? __pfx_shmem_set_policy+0x10/0x10 [ 1613.440337][T29992] mbind_range+0x339/0x550 [ 1613.440359][T29992] __do_sys_set_mempolicy_home_node+0x44e/0x710 [ 1613.440385][T29992] ? __pfx___do_sys_set_mempolicy_home_node+0x10/0x10 [ 1613.440408][T29992] ? __x64_sys_futex+0x34f/0x4d0 [ 1613.440423][T29992] ? __x64_sys_futex+0x358/0x4d0 [ 1613.440445][T29992] ? rcu_is_watching+0x12/0xc0 [ 1613.440464][T29992] do_syscall_64+0x115/0x840 [ 1613.440485][T29992] ? clear_bhb_loop+0x40/0x90 [ 1613.440503][T29992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1613.440523][T29992] RIP: 0033:0x7f6a3f19ce59 [ 1613.440536][T29992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1613.440551][T29992] RSP: 002b:00007f6a3ffeb028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c2 [ 1613.440566][T29992] RAX: ffffffffffffffda RBX: 00007f6a3f415fa0 RCX: 00007f6a3f19ce59 [ 1613.440576][T29992] RDX: 0000000000000000 RSI: 0000000002010001 RDI: 0000000000000000 [ 1613.440585][T29992] RBP: 00007f6a3f232d6f R08: 0000000000000000 R09: 0000000000000000 [ 1613.440594][T29992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1613.440603][T29992] R13: 00007f6a3f416038 R14: 00007f6a3f415fa0 R15: 00007ffd0387b4e8 [ 1613.440623][T29992] [ 1614.379401][T30001] FAULT_INJECTION: forcing a failure. [ 1614.379401][T30001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1614.438914][T30001] CPU: 0 UID: 0 PID: 30001 Comm: syz.0.5041 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1614.438941][T30001] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1614.438947][T30001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1614.438956][T30001] Call Trace: [ 1614.438962][T30001] [ 1614.438969][T30001] dump_stack_lvl+0x100/0x190 [ 1614.438997][T30001] should_fail_ex.cold+0x5/0xa [ 1614.439017][T30001] _copy_from_user+0x2e/0xd0 [ 1614.439039][T30001] kstrtouint_from_user+0xd6/0x1d0 [ 1614.439054][T30001] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1614.439068][T30001] ? __lock_acquire+0x4a5/0x2630 [ 1614.439100][T30001] ? lock_acquire+0x1b1/0x370 [ 1614.439123][T30001] proc_fail_nth_write+0x83/0x220 [ 1614.439147][T30001] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1614.439174][T30001] vfs_write+0x2aa/0x1070 [ 1614.439191][T30001] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1614.439214][T30001] ? __pfx_vfs_write+0x10/0x10 [ 1614.439230][T30001] ? __fget_files+0x215/0x3d0 [ 1614.439251][T30001] ? __fget_files+0x21f/0x3d0 [ 1614.439272][T30001] ksys_write+0x12a/0x250 [ 1614.439288][T30001] ? __pfx_ksys_write+0x10/0x10 [ 1614.439306][T30001] ? rcu_is_watching+0x12/0xc0 [ 1614.439324][T30001] do_syscall_64+0x115/0x840 [ 1614.439344][T30001] ? clear_bhb_loop+0x40/0x90 [ 1614.439361][T30001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1614.439376][T30001] RIP: 0033:0x7f471055d68e [ 1614.439388][T30001] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1614.439403][T30001] RSP: 002b:00007f47113eefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1614.439416][T30001] RAX: ffffffffffffffda RBX: 00007f47113ef6c0 RCX: 00007f471055d68e [ 1614.439426][T30001] RDX: 0000000000000001 RSI: 00007f47113ef0a0 RDI: 0000000000000004 [ 1614.439434][T30001] RBP: 00007f47113ef090 R08: 0000000000000000 R09: 0000000000000000 [ 1614.439443][T30001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1614.439451][T30001] R13: 00007f4710816038 R14: 00007f4710815fa0 R15: 00007fffcea4ff38 [ 1614.439471][T30001] [ 1614.702305][T30003] netlink: 206 bytes leftover after parsing attributes in process `syz.0.5042'. [ 1615.140855][T30006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5043'. [ 1615.214861][T30006] netlink: 206 bytes leftover after parsing attributes in process `syz.0.5043'. [ 1615.588128][T30010] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5044'. [ 1615.768752][T30012] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 1615.894393][T17202] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 1615.963975][T30011] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 1616.158244][T30032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5049'. [ 1617.008893][T30058] ------------[ cut here ]------------ [ 1617.015497][T30058] IS_ERR(old) [ 1617.015518][T30058] WARNING: kernel/tracepoint.c:369 at tracepoint_probe_unregister+0x837/0xd10, CPU#0: syz.0.5053/30058 [ 1617.030934][T30058] Modules linked in: [ 1617.035459][T30058] CPU: 0 UID: 0 PID: 30058 Comm: syz.0.5053 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1617.048374][T30058] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1617.053719][T30058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1617.063986][T30058] RIP: 0010:tracepoint_probe_unregister+0x837/0xd10 [ 1617.070585][T30058] Code: 09 e8 4d 23 fe ff 48 8d 73 f0 48 c7 c2 40 c9 09 82 48 c7 c7 80 30 87 8e e8 d6 24 e2 ff eb ba bb fe ff ff ff e8 2a 23 fe ff 90 <0f> 0b 90 eb ac e8 1f 23 fe ff 49 89 dd 45 31 ff 49 be 00 00 00 00 [ 1617.090718][T30058] RSP: 0018:ffffc90003f7f8b0 EFLAGS: 00010283 [ 1617.097027][T30058] RAX: 00000000000354e9 RBX: 00000000fffffffe RCX: ffffc90011287000 [ 1617.105650][T30058] RDX: 0000000000080000 RSI: ffffffff8209da36 RDI: ffff88807a840000 [ 1617.114046][T30058] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 1617.122335][T30058] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff82103030 [ 1617.130489][T30058] R13: 0000000000000302 R14: 0000000000000002 R15: ffffffff8ec14340 [ 1617.138924][T30058] FS: 00007f47113ce6c0(0000) GS:ffff88812438e000(0000) knlGS:0000000000000000 [ 1617.148095][T30058] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1617.154799][T30058] CR2: 00007fed76fbb6b0 CR3: 00000000774dc000 CR4: 00000000003526f0 [ 1617.162834][T30058] Call Trace: [ 1617.166127][T30058] [ 1617.169051][T30058] tracing_stop_cmdline_record+0x66/0xa0 [ 1617.174736][T30058] __ftrace_event_enable_disable+0x5c4/0x6f0 [ 1617.181093][T30058] ftrace_event_set_open+0x224/0x380 [ 1617.186397][T30058] do_dentry_open+0x6ab/0x14d0 [ 1617.191517][T30058] ? __pfx_ftrace_event_set_open+0x10/0x10 [ 1617.197337][T30058] vfs_open+0x82/0x3f0 [ 1617.201477][T30058] path_openat+0x208c/0x31a0 [ 1617.206687][T30058] ? __pfx_path_openat+0x10/0x10 [ 1617.211849][T30058] do_file_open+0x20e/0x430 [ 1617.216725][T30058] ? __pfx_do_file_open+0x10/0x10 [ 1617.221884][T30058] ? alloc_fd+0x476/0x790 [ 1617.226494][T30058] ? do_getname+0x191/0x390 [ 1617.231239][T30058] do_sys_openat2+0x10d/0x1e0 [ 1617.236111][T30058] ? __pfx_do_sys_openat2+0x10/0x10 [ 1617.241392][T30058] __x64_sys_openat+0x12d/0x210 [ 1617.246248][T30058] ? __pfx___x64_sys_openat+0x10/0x10 [ 1617.251752][T30058] ? rcu_is_watching+0x12/0xc0 [ 1617.256561][T30058] do_syscall_64+0x115/0x840 [ 1617.261214][T30058] ? clear_bhb_loop+0x40/0x90 [ 1617.265889][T30058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1617.271820][T30058] RIP: 0033:0x7f471059ce59 [ 1617.276232][T30058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1617.296382][T30058] RSP: 002b:00007f47113ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1617.305014][T30058] RAX: ffffffffffffffda RBX: 00007f4710816090 RCX: 00007f471059ce59 [ 1617.313342][T30058] RDX: 0000000000020201 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1617.321515][T30058] RBP: 00007f4710632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1617.329792][T30058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1617.338103][T30058] R13: 00007f4710816128 R14: 00007f4710816090 R15: 00007fffcea4ff38 [ 1617.346143][T30058] [ 1617.349176][T30058] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1617.356457][T30058] CPU: 0 UID: 0 PID: 30058 Comm: syz.0.5053 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1617.367396][T30058] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1617.372592][T30058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1617.382646][T30058] Call Trace: [ 1617.385922][T30058] [ 1617.388841][T30058] dump_stack_lvl+0x100/0x190 [ 1617.393516][T30058] vpanic+0x552/0x970 [ 1617.397486][T30058] ? __pfx_vpanic+0x10/0x10 [ 1617.401981][T30058] panic+0xd1/0xe0 [ 1617.405706][T30058] ? __pfx_panic+0x10/0x10 [ 1617.410135][T30058] check_panic_on_warn.cold+0x19/0x34 [ 1617.415506][T30058] ? tracepoint_probe_unregister+0x837/0xd10 [ 1617.421496][T30058] __warn.cold+0x191/0x328 [ 1617.425920][T30058] __report_bug+0x296/0x3d0 [ 1617.430423][T30058] ? tracepoint_probe_unregister+0x837/0xd10 [ 1617.436405][T30058] ? __pfx___report_bug+0x10/0x10 [ 1617.441508][T30058] ? rcu_is_watching+0x12/0xc0 [ 1617.446277][T30058] ? trace_contention_end+0x122/0x170 [ 1617.451925][T30058] ? __mutex_lock+0x26d/0x1b10 [ 1617.456703][T30058] ? tracepoint_probe_unregister+0x31/0xd10 [ 1617.462605][T30058] ? rcu_is_watching+0x12/0xc0 [ 1617.467461][T30058] ? trace_contention_end+0x122/0x170 [ 1617.472826][T30058] ? tracepoint_probe_unregister+0x837/0xd10 [ 1617.478806][T30058] report_bug+0xb2/0x220 [ 1617.483047][T30058] ? tracepoint_probe_unregister+0x837/0xd10 [ 1617.489066][T30058] handle_bug+0x16a/0x2a0 [ 1617.493383][T30058] exc_invalid_op+0x17/0x50 [ 1617.497887][T30058] asm_exc_invalid_op+0x1a/0x20 [ 1617.502725][T30058] RIP: 0010:tracepoint_probe_unregister+0x837/0xd10 [ 1617.509312][T30058] Code: 09 e8 4d 23 fe ff 48 8d 73 f0 48 c7 c2 40 c9 09 82 48 c7 c7 80 30 87 8e e8 d6 24 e2 ff eb ba bb fe ff ff ff e8 2a 23 fe ff 90 <0f> 0b 90 eb ac e8 1f 23 fe ff 49 89 dd 45 31 ff 49 be 00 00 00 00 [ 1617.529038][T30058] RSP: 0018:ffffc90003f7f8b0 EFLAGS: 00010283 [ 1617.535116][T30058] RAX: 00000000000354e9 RBX: 00000000fffffffe RCX: ffffc90011287000 [ 1617.543172][T30058] RDX: 0000000000080000 RSI: ffffffff8209da36 RDI: ffff88807a840000 [ 1617.551318][T30058] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 1617.559364][T30058] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff82103030 [ 1617.567320][T30058] R13: 0000000000000302 R14: 0000000000000002 R15: ffffffff8ec14340 [ 1617.575280][T30058] ? __pfx_probe_sched_switch+0x10/0x10 [ 1617.580916][T30058] ? tracepoint_probe_unregister+0x836/0xd10 [ 1617.586898][T30058] tracing_stop_cmdline_record+0x66/0xa0 [ 1617.592525][T30058] __ftrace_event_enable_disable+0x5c4/0x6f0 [ 1617.598519][T30058] ftrace_event_set_open+0x224/0x380 [ 1617.603823][T30058] do_dentry_open+0x6ab/0x14d0 [ 1617.608593][T30058] ? __pfx_ftrace_event_set_open+0x10/0x10 [ 1617.614398][T30058] vfs_open+0x82/0x3f0 [ 1617.618463][T30058] path_openat+0x208c/0x31a0 [ 1617.623050][T30058] ? __pfx_path_openat+0x10/0x10 [ 1617.627987][T30058] do_file_open+0x20e/0x430 [ 1617.632486][T30058] ? __pfx_do_file_open+0x10/0x10 [ 1617.637514][T30058] ? alloc_fd+0x476/0x790 [ 1617.641834][T30058] ? do_getname+0x191/0x390 [ 1617.646347][T30058] do_sys_openat2+0x10d/0x1e0 [ 1617.651035][T30058] ? __pfx_do_sys_openat2+0x10/0x10 [ 1617.656244][T30058] __x64_sys_openat+0x12d/0x210 [ 1617.661099][T30058] ? __pfx___x64_sys_openat+0x10/0x10 [ 1617.666469][T30058] ? rcu_is_watching+0x12/0xc0 [ 1617.671219][T30058] do_syscall_64+0x115/0x840 [ 1617.675813][T30058] ? clear_bhb_loop+0x40/0x90 [ 1617.680483][T30058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1617.686362][T30058] RIP: 0033:0x7f471059ce59 [ 1617.690766][T30058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1617.710377][T30058] RSP: 002b:00007f47113ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1617.718790][T30058] RAX: ffffffffffffffda RBX: 00007f4710816090 RCX: 00007f471059ce59 [ 1617.726841][T30058] RDX: 0000000000020201 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1617.734809][T30058] RBP: 00007f4710632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1617.742767][T30058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1617.750824][T30058] R13: 00007f4710816128 R14: 00007f4710816090 R15: 00007fffcea4ff38 [ 1617.758794][T30058] [ 1617.761865][T30058] Kernel Offset: disabled [ 1617.766178][T30058] Rebooting in 86400 seconds..