last executing test programs: 5m59.21217313s ago: executing program 0 (id=580): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x300c00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x2, 0x8) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x2, 0x7, 0x48, 0x7ff, 0x5, 0x7, 0x4, 0x6, 0x8, 0x3, 0x5, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x800000, 0x7, 0x8, 0x200, 0xfffffffd, 0x84, 0x0, 0x6, 0x2, 0x0, 0x0, [0x0, 0x1ff, 0x1, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8003, 0x4000000, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x20000000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xec4e, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x24, 0x4008) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r1, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x4a7) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000002c0)={{@inferred=0xffffffffffffffff, 0x4, 0x1, 0x0, "bfc956f7b829ea9bc64a831c54b927c5c84cdfcb6d840bf6034bbe162b339fcc0b9ad62f05f5e47256dc5c36", @raw=0x4}, 0x0, 0x5, 0xd77e, @inferred, @integer={0x5, 0x2, 0x5}, "ff0931dc5a3fb879791acf380abcfd7f9f393a68114cc9d69244416e96525a166b971aae562cbc70472d48eb5f54d36edf407701d0d1c4e40409e86cafa60765"}) close_range$auto(0x2, 0x8, 0x0) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, 0x0, 0x414041, 0x0) mmap$auto(0x0, 0x400008, 0xde, 0x9b72, 0x2, 0x800008000) 5m56.583239714s ago: executing program 0 (id=583): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x2, 0x1) r1 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f00000000c0), 0x183002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mknod$auto(&(0x7f0000000080)='}[,&*}\x00', 0xe6c, 0x17) llistxattr$auto(&(0x7f0000000040)='}[,&*}\x00', 0x0, 0x7) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRESDEC=r1, @ANYBLOB="010026bd7000fddbdf2507"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x10000007}, 0x3, 0x0) write$auto_zero_fops_mem(r1, 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x420201, 0x0) sysfs$auto(0x4, 0x8, 0x9) openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim1/ports/0/pp_hold\x00', 0x400900, 0x0) inotify_rm_watch$auto(r1, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) r5 = memfd_create$auto(0x0, 0xe) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r7 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000340), r5) shmctl$auto(0xdc, 0x9, &(0x7f0000000500)={{0x0, 0xee01, 0xee00, 0xe9, 0x5e, 0x5, 0xb}, 0xc875, 0x1, 0xd, 0x19, @raw=0x5a5, @raw=0x1, 0x4, 0x0, &(0x7f0000000380)="fb0dd5a69e5294bcfcb5268258e9c204419562fc664c6b13f68ef96f4f410a9f49daf36232c73946aa2aed28423e1a533d445cee6509983d6d6e964566d22c5c251bebf69abcdec3ebf675f80eb27234c54a57f3742cd56fdce135dcd6fada864c5e860d1673c2ba18acf02d44b6aa592f30f4a1b4cf94b9688ea0431cfa9bbb84b4dcc7f896db4e051cdf719c65d02f00b820bec2e8c377538daf4072fc924ff441ca9db76cf62b5134fc319cd50709", &(0x7f0000000440)="0b4a4f53cf2325c26f80c6c2c10f6c1d069d7179ed53ad367ac967940b60a1641337b30fcf30594ca8a8cb9f9cd6ee5f425e7e93c0bfe45b8f0fc4ea08fb7f58d1b8702114c3ec155f1f20c0a0c5c47f8e06f0c07f7c27e69dc1a578cba924c25fee89f342121b21a8bcace393298ee9a0a0449ff036d731952c09b4c4aae90f024fa2802e250f3330ff08d593df80a2e3"}) sendmsg$auto_MAC802154_HWSIM_CMD_GET_RADIO(r5, &(0x7f0000000b80)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b40)={&(0x7f0000001180)={0x55c, r7, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@MAC802154_HWSIM_ATTR_RADIO_EDGES={0x206, 0x3, 0x0, 0x1, [@typed={0x8, 0x6f, 0x0, 0x0, @u32=0x1}, @generic="5b27ca31014d4d17ebc3c24c830061a27aff51d5e3a1521a62aa650b26009779b958e1053ca15101e87a6877d7427782801820e6ede9bc5f82480a771ec260b7b6bd8775c9431f256d16fa7b4d7a5f69143e86e13e10cb6088429bb0737e13fb2d1e046c4fecec43c6864285bdc990d87326", @nested={0x118, 0x9a, 0x0, 0x1, [@nested={0x4, 0x56}, @generic="63635fd79642c18a635555bbb4e447aadeea0872d625df4757daf8fcb2f43540ba1cac33488b4a9a9de60d8c2857b9db8090fcb7812bd3a891317355f51e1a4f7f02725cefdc7e8a40aa47eb3af5bb156c764b1517", @nested={0x4, 0x155}, @generic="11f44ecef2128fc9f9aefbc25312b2e8e18c485647ef38288ae34fc872a12b718b3cf4662ff9d80ed319b227255d1baa74c75218e354ef7d5f24f396298baa6689a70a3e4739a3cac33b0732996582a04ac5285b3f4e66ebc8880612e09355c42d659edc3d537f9e839458edb22dfbab332b9f00bed95a620c20ad84b7dd41fde8430d6a65d6553df787d5d992c8076271e21aa75358c16d8da5f933a2357ae3a537a7812274294f71d84fd7b10faabb82e15c35fc84db"]}, @nested={0x28, 0xab, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0x9}, @nested={0x4, 0xad}, @typed={0x14, 0xb3, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, @typed={0x8, 0x7a, 0x0, 0x0, @ipv4=@remote}, @nested={0xc, 0x43, 0x0, 0x1, [@typed={0x8, 0x2c, 0x0, 0x0, @uid=r8}]}, @nested={0x32, 0x158, 0x0, 0x1, [@typed={0x14, 0xb9, 0x0, 0x0, @ipv6=@remote}, @nested={0x4, 0xf8}, @generic="6f9e013df72e782e606f343047be", @nested={0x4, 0x33}, @typed={0x4, 0xa1}]}]}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0xb6, 0x3, 0x0, 0x1, [@generic="078bc50d4827e2d8b76969dc67953b7e60fe8e309c55bf46f37a6a6c2ce14042379e9c7ae085e2efc324117b05bcaaaf332aa8b2472304ca25eb74f4f59123be9ea118cf21022eb068a95904888ee74c5255f17ac8471ebd9d023a77d41916416d332116f3143e52b8181d5c1e6fd33de14dd7b05eab5733c13cdbe0bc81ef0253b4304e96eef0618aa32f407147cbbffe1d1e7520d13a8a9dca24a26d821c528f344b38342b3de26034", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}]}, @MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0xff}, @MAC802154_HWSIM_ATTR_RADIO_EDGE={0x87, 0x2, 0x0, 0x1, [@generic="f58ffbe371f035057f04be0ec45e78a060d40550793d4b17eb91abf69ab5df5a35e6e862ebcd6fd25c553d7f5d666552c186454a2189ca72285babcea13f5dfdda6df6a8a6917152e2b88175fc52b4989f46b36170c1cbbe859c470f17795ea06a97b1e38c9a7268923d2eaf199b5752c45598ff586533e7076fab", @typed={0x8, 0xbf, 0x0, 0x0, @fd=r6}]}, @MAC802154_HWSIM_ATTR_RADIO_EDGE={0xb8, 0x2, 0x0, 0x1, [@typed={0xc, 0x9b, 0x0, 0x0, @u64=0xe}, @nested={0xa6, 0x14, 0x0, 0x1, [@typed={0x14, 0x37, 0x0, 0x0, @ipv6=@remote}, @nested={0x4, 0xa2}, @nested={0x4, 0x15c}, @generic="89f68d5acc90640e52b29a9926a1be9655ecab356c0e2bf1bc87ea6a315625ca13dad566f45d35f69ed828c512712ffca9712e4c7d98f94bf3fef819e8a8f819ecd1b2f4d44ff66faa0667d2aa9d22520f1d7c9f175c535599dadc4270ad0bfe7c740ff9069e75b89d93c6f182e89cc55a4da310f90ca45973924e66700e85f42af3dba94bcc"]}]}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0x13e, 0x3, 0x0, 0x1, [@nested={0xd3, 0x8b, 0x0, 0x1, [@generic="749311a8c293a0ca4a2403b0500af7718a1f30a37cc7d0a4537b73a3e01f8ca6d158b85df7519637cc778a5f57e1b724142e6dd3d87f656973722412b9eda965dde278ccfa25cce299e70ab97ba7141ea191a77ade5840c8f1a287072e70fc69dff3a20044f4d2c4d6a801b3a32572590562de0cf07defaec31e8bf75c27102f3fb822950d106e56a72b1e319ab57621ecad3602ec164ca29462928ced1c54bcf51440e1cfd42d30361f30e9d4491559e744f5a7962d8b51805bff7fbea406665e932b0c19218c4429293a2b9a580b"]}, @typed={0x8, 0xbf, 0x0, 0x0, @fd=r3}, @generic="2bbf253e43c0f1ef8ca90b497179", @generic="e4ee86b4d1b087d8e4f272df24413525cef4ab88d0824cf23fa8932f100bdf55fc0e1ce56b2edb6118b0e63b1576c4299294139267b482356ff845b7bf5f1ca6beed667cc8fb6169", @typed={0x8, 0x3d, 0x0, 0x0, @uid=r8}]}]}, 0x55c}, 0x1, 0x0, 0x0, 0x4008880}, 0x1) shmctl$auto_IPC_INFO(0x7, 0x3, &(0x7f0000000400)={{0x4, 0xee00, 0xee01, 0x80000000, 0x2, 0x4, 0x6}, 0x10000, 0x8, 0x8000, 0x9, @raw=0x28fc, @inferred, 0xf5fe, 0x0, &(0x7f0000000180)="46e911aa86ba71d9e2f755bc2d6dfdef9f39caa45ab135a1bbe8d85783daaa528739eef747a7a803991d96e3086e7f5a260400df2ca941af6644e911798652c18bd717fe7c1221009b5b009f685dc44e63fd38699ba06bd337b80dda7697e71913bea39348eaf0409fe5943bd68e08452e30", &(0x7f0000000340)="ca35dacb4891d004f2e13a928c7faeff69e522a60009f3affc0cc6abb054ce3b2ed8fb44af8a6fce161a7ff5ea1b1419f3eee781611bafb4cb8df16a6fbe2e323ab1bdc4ead9d6c4bd87901f2445c2419bea9cc5a2c562f2c0d2947ac9364e3e7fa9f5c3696c7199908c7ef2948a3bd3d95cc5ffd8602209cd2df138236747119da178c9dae76d6af6"}) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(r2, &(0x7f0000001140)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001100)={&(0x7f0000002380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="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", @ANYRES32=r1, @ANYRES8=r0, @ANYRES16=r2, @ANYBLOB="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"], 0xc74}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$auto(r4, 0x2, 0x9) ioctl$auto(0x3, 0x400c4d05, r4) ioctl$auto(0x3, 0x400c4d00, r4) setsockopt$auto(r0, 0x0, 0x80, 0x0, 0x78) 5m55.889651296s ago: executing program 0 (id=586): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) keyctl$auto(0x3, 0xfffffffd, 0x101, 0x1, 0x4000000000b8c) madvise$auto(0x0, 0x20499d, 0x9) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(0x8000000000000001, 0x7, 0x0) fcntl$auto(r0, 0x7, 0x4) socket(0x29, 0x2, 0x0) r1 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa1\x00', 0x101041, 0x0) write$auto(r1, 0x0, 0x5) close_range$auto(0x0, 0xfffffffffffff000, 0x2) io_uring_setup$auto(0x59, &(0x7f0000000000)={0x3, 0x3ff, 0x2, 0x1, 0x2, 0xa, 0xffffffffffffffff, [], {0x8, 0x1, 0x1, 0x22b, 0x8000100, 0x581, 0x104, 0x1000006, 0xffffffffffffffff}, {0xbfc7, 0x1, 0x52, 0x8, 0x3, 0x3d, 0x8, 0x7, 0x100000000}}) r2 = open(&(0x7f0000000080)='./bus\x00', 0x64040, 0xc0) fcntl$auto(r2, 0x0, 0xa8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) execve$auto(&(0x7f00000000c0)='.\x00', &(0x7f0000000140)=&(0x7f0000000100)='[#-:\x00', &(0x7f00000001c0)=&(0x7f0000000180)=')\x00') mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) close_range$auto(0x0, 0xfffffffffffff000, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) ioctl$auto(r3, 0x40104d04, r3) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, 0x0, 0x42000, 0x0) 5m52.776023881s ago: executing program 0 (id=595): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pipe2$auto(0x0, 0x80) io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000280), 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0xa, 0x0) io_uring_register$auto(0x2, 0x2, 0x0, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) ioctl$auto_X86_IOC_WRMSR_REGS(r0, 0xc02063a1, 0x0) 5m52.311409328s ago: executing program 0 (id=597): socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) unshare$auto(0x40000080) close_range$auto(0x0, 0x5, 0x0) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x2001, 0x0) mmap$auto(0x0, 0x400008, 0x34, 0x1009b72, 0x2, 0x808000) mprotect$auto(0x0, 0x8000000000000001, 0x8) mmap$auto(0x0, 0xe983, 0x7, 0xebd, 0xffffffffffffffff, 0x8000) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x8000, 0x0) pread64$auto(0xffffffffffffffff, &(0x7f0000000340)='\xd5u+~\xa7x\xe0VQ\x1a6\xcf\xce\xfa\xfbN\x19\b\xf64\r\x122i\xd6\x0e\xfa\x96\x9aV:\xe1G\x14\xb2\xd4N\x0e#jX:\xd0\xe4\xa9\xda\xaf\x98\x94G\xa8\xb4\xa7uPc\x1ang\xdb\xb4\xa7\xad\x1b\xcbonh\xd8\x99\x03\x10\xb0\xa5\xfey\xd5F,70\xecG\x8a\fz\x95\x7f\xb0Y{\xdd\xa1\xa3E\x03\xd4\xc67U\x93\n\xfc\xa4\x0e_\xf8\x94\xc3a\x00\xe6\xea4\xa2\x7ft\xeb\x8b$\x16\x0e\xe8j\xcaI\xe0c\x05\x12(\v\xef\xc5\a\x00\x00\x00\x01\x001\xa5\x18%\xae/\x1b6\xaa\xf5ysD\xa6\xee\xbf\xc0v\"\x93\x96\"\xcak.\x0e_\xb3\xf7\xac\x9e\xbd/w\xdf\xfc\xe24z\x0f\x8f\b\xbe\xda\xfb\xd0Jj\x97\xfa{\x9d\xfd\xfb\x14\x1f\xb0\xe7\b#\xb9\x01\xf7\xf5\x1c1\xfbNX\xd9\xf0\x97@\xff(\x99\x13M\xadM\b\xf5\xcd\xa3\xe1Q|\r\x18\xd5\xb4\x1c\xa5R\x87\xc3\xfd\xdf\x98\xd9\xa7\xf3u\xa8ak\xfaHS\xfa\x12\x85\x85\x14\b\x9c\x15\xc10\xb3\xd5.\x13\xc6\xb6\xbak:\xbf\x8f\xcd\x7f\a\xb8\x00\x00\x00', 0x7, 0x8000009) exit$auto(0x7fff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x68) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, 0x0, 0x2a41, 0x0) openat$auto_component_list_fops_(0xffffffffffffff9c, &(0x7f0000000300), 0x901000, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) 5m50.288884494s ago: executing program 0 (id=601): mmap$auto(0x0, 0x400008, 0xdf, 0x2000000009b72, 0xffffffffffffffff, 0x0) getsockopt$auto(0x3, 0x200000000001, 0x1f, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x1ff, 0x40eb1, 0x401, 0x300000000001) openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, 0x0, 0x183400, 0x0) bind$auto(0xffffffffffffffff, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x3, 0x4001}, 0x4006b) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) unshare$auto(0x40000080) semctl$auto(0xa, 0x2, 0x13, 0xde) r0 = socket(0x2, 0x801, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6d) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020209, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)={0x2c, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_MODULE_FW_FLASH_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x400c080) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_SET(r0, 0x0, 0x24044010) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS0\x00', 0x101e81, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/net/dummy0/proto_down\x00', 0x60282, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x3, 0x0, 0xffd8) recvmmsg$auto(0x3, 0x0, 0x80000401, 0x4000, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0x9) sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) 5m35.111395696s ago: executing program 32 (id=601): mmap$auto(0x0, 0x400008, 0xdf, 0x2000000009b72, 0xffffffffffffffff, 0x0) getsockopt$auto(0x3, 0x200000000001, 0x1f, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x1ff, 0x40eb1, 0x401, 0x300000000001) openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, 0x0, 0x183400, 0x0) bind$auto(0xffffffffffffffff, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x3, 0x4001}, 0x4006b) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) unshare$auto(0x40000080) semctl$auto(0xa, 0x2, 0x13, 0xde) r0 = socket(0x2, 0x801, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6d) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020209, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)={0x2c, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_MODULE_FW_FLASH_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x400c080) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_SET(r0, 0x0, 0x24044010) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS0\x00', 0x101e81, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/net/dummy0/proto_down\x00', 0x60282, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x3, 0x0, 0xffd8) recvmmsg$auto(0x3, 0x0, 0x80000401, 0x4000, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0x9) sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) 8.900632643s ago: executing program 2 (id=1790): mmap$auto(0x0, 0x800002020009, 0x3, 0xeb3, 0xfffffffffffffffa, 0x7ffd) setitimer$auto_ITIMER_REAL(0x0, &(0x7f0000000180)={{0x7, 0x6}, {0x51, 0xd8bd}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x8002, 0x0) writev$auto(r1, &(0x7f0000000000)={&(0x7f0000000180)="df0eae125b9f", 0x9}, 0x1) (async) writev$auto(r1, &(0x7f0000000000)={&(0x7f0000000180)="df0eae125b9f", 0x9}, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = open(&(0x7f0000000000)='./file0\x00', 0x246142, 0xe) close_range$auto(r2, r2, 0x9) (async) close_range$auto(r2, r2, 0x9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_udc.0/gadget.0/function\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000001080)=""/98, 0x62) write$auto_nsim_nexthop_bucket_activity_fops_fib(r2, &(0x7f0000000080)="56f7d583625d94c47bc12e525841ae4b2303e8373f1be0568da45798985aadcd40f21555c30cd858851f20c0d06317efd432f50b81a7bcb391ff19c4b0383ac1b5ea480674cb5177f7c58e71758e2f1fb4460f921b45079adb2b49e3f26054c7e577c3a80704d05a30f84c458c39c2a3ab37ab1a4d922496dfe3750adf2d0cc1c4474df77258a016127e5529ea0f3cbd3508e31c61e59fe2cc466ae5e248ad988b42a767d06f8a02b03c55e835352435db0eed877ae3aeaa0d40ebded2976039a70b452984451d42fea383709c58a15ffb67eaf530d8539b6a70b02ff038bd8821631609f162a965029230", 0xeb) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop13\x00', 0x8202, 0x0) read$auto(0xc8, 0x0, 0x0) (async) read$auto(0xc8, 0x0, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r4, 0x4c00, 0x0) (async) ioctl$auto_SG_GET_RESERVED_SIZE(r4, 0x4c00, 0x0) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="46b249f0", @ANYRES16=r5, @ANYBLOB="010028bd7000fbdbdf25020000000800020000080000090004006e66736400000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x90) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="46b249f0", @ANYRES16=r5, @ANYBLOB="010028bd7000fbdbdf25020000000800020000080000090004006e66736400000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x90) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) (async) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) 8.55698524s ago: executing program 2 (id=1791): mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) r0 = socket(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000"], 0x1ac}}, 0x40000) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000000)="c80d1b5d399b71", 0x7) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r2 = socket(0x25, 0x1, 0x5) recvfrom$auto(r2, 0x0, 0x0, 0x40, 0x0, 0x0) clock_adjtime$auto(0xd2d5, 0x0) clock_adjtime$auto(0x9, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) fstat$auto(r3, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) copy_file_range$auto(r1, 0x0, r1, &(0x7f0000000080)=0xeb2f, 0xfffffffffffffffe, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80) syz_genetlink_get_family_id$auto_tipcv2(0x0, r0) 7.943759784s ago: executing program 2 (id=1794): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x204880, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101200, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae90, &(0x7f0000000100)={0x2, 0x0, [{0x1, 0x7ff, 0x8}, {0x0, 0xfffffffd, 0x7}]}) r2 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) capset$auto(0x0, 0x0) write$auto(0x3, 0x0, 0x7fffffff) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x23c, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFNAME={0x14, 0x4, 'wg2\x00'}, @NL802154_ATTR_COORDINATOR={0x1fc, 0x1e, 0x0, 0x1, [@typed={0xf8, 0x6, 0x0, 0x0, @binary="77c4ffea7fe8e6ea5bb21b4ac3d67a4ae6312b57b389ceef77ba833c672e12acb3b2c8bbff2abe57f5d43571666263c0a0bad72fdd4c8af1593cd84bce4f722db568cbf3d8dfccade1845477e6762374315480b3cf9acb042a2c10e633d20f3b28e80ffbb5893b0415fc3a346d4c2e10d8cb0b20bfaa89c7f8d86d843afc8644fa8db3993859d1f82d8ac0780741d206f7ca936a7b61ef276397a9dd0ea8122c0710af325992bf6cd2e2d325f2e8588408e63311b9bbb03e2df81b44080a1c5cb4bcba1e5336854a5000657363765f00e5b31585b322cc03f35fb4e7e7a5894fd11c12f059c12ec4b7d07837f1e1b6269438b1bd"}, @nested={0xff, 0xb1, 0x0, 0x1, [@nested={0x4, 0xba}, @nested={0x4, 0x48}, @generic="afdcf219126e16fde5fba22fb526169de98de04cdfcc61a5d0446e07a18c839616c18fe97c46bda85cdd26cdf5c17cee5f9f41caeeec3c0c4ebe", @nested={0x4, 0x12c}, @typed={0x8, 0x102, 0x0, 0x0, @fd=r2}, @generic="b00a54f07ff974729a1b7e52924cf295f7e872acef2f05769b199d2195d9c44f3728a5c7f29dd91c6cccfc63c6ee13d5f66705b20449195a12ff2724b4f9370e7e1cbdddcf258867e5abb619492906506abcc51abb51beff38c056b0e65037bc2475b8d1503761b4d0a21e91180954066e7c98435a29ed7902bf0ebe09bc2ced29cc11da3eaba959052f3c128d8ac0ea5fc00378c97b18a0728fc3765ae6d5ddff9a697bed", @typed={0x8, 0x158, 0x0, 0x0, @fd=r2}]}]}, @NL802154_ATTR_WPAN_PHY_NAME={0x5, 0x2, '\x00'}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7fff}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x7}]}, 0x23c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) pread64$auto(0xffffffffffffffff, 0x0, 0xf42c, 0x1000000000400) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 5.514768921s ago: executing program 2 (id=1803): io_uring_setup$auto(0x59, &(0x7f0000000080)={0xb, 0x40000d, 0x10400, 0x6, 0x4, 0x3, 0xffffffffffffffff, [], {0x7, 0x200004, 0x7, 0x2a3, 0x100, 0x3, 0x40100101, 0x6}, {0xf8, 0x4, 0x9, 0x1, 0x3, 0x40, 0xcc, 0x8, 0x100000000}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x24, r1, 0x9ec6579d452c1f15, 0x70bd2e, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x25, 0x0, 0x0, @uid}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x20000080) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) socketpair$auto(0x6, 0x2, 0x20000007, 0x0) pselect6$auto(0x5, &(0x7f0000000400)={[0x8, 0x5, 0x0, 0x5, 0x8001, 0x6, 0xac, 0x2000009, 0x3, 0xffffffff, 0x7fffffffffffffff, 0x0, 0x1000, 0x2, 0x8, 0x3ff]}, 0x0, 0x0, 0x0, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x10080, 0x0) io_uring_enter$auto(0x3, 0x4, 0xffffffff, 0x6, 0x0, 0x2) 5.44942231s ago: executing program 4 (id=1804): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) statx$auto(r0, 0x0, 0x401006, 0x4015, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) fstat$auto(r1, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0xfffffff5, 0x9}, 0x7}, 0x3, 0x0) 5.389926504s ago: executing program 3 (id=1805): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/ext4/sda1/fc_info\x00', 0x10b402, 0x0) pread64$auto(r0, &(0x7f0000000340)='/proc/Nes\x00'/22, 0x100000001, 0x100) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) (async) r1 = getsockopt$auto(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) (async) mmap$auto(0x0, 0x810004, 0x400000000fff, 0x8000000008011, 0x3, 0x8000) (async) r2 = socket(0xa, 0x3, 0x3a) close$auto(r2) (async) io_uring_register$auto(r2, 0x8, 0x0, 0x0) write$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffffff, 0x0, 0x0) (async) write$auto(0x3, 0x0, 0xfffffdef) (async) sendmmsg$auto(r2, &(0x7f0000000440)={{&(0x7f0000000080)="3b61f2ca87fcb11b5c114635ed234e599aa925079f2f45ff5685ec666ea89dad5b8bef2dba565b7956478b288af5541005efa0cf8e028e90f9485011", 0x985c, &(0x7f0000000200)={&(0x7f0000000140)="10cbfd7ae057484100da67334ddc6e2f3abd0103057a2f8afd528432e360f42729b550496571c65ee592ff06a0c94e1658518394408b03f45f7d3e06275159562339314ef73b35146a146a295ea54eabab96b8ccfb986a316a66fe17f815323912b7a922a082e2e03c5f2cd1db877de42c03086a41b0cb3c8caea3ed203f6d48420bc0eed81aa4f436127d46d3823e943ca621d2a6e256815cdd26ca3e2706860c14b1031c668e9795c60da6ed6e918e504ee24d2a0a9fe1a78bde9f", 0x6}, 0x40, &(0x7f0000000380)="21e66cd4ca4a5087bf830acc1ff2d11608c05201a19ab29007afb014a1d47151bb5227f716d7c1b9f43be2c7bb91bec43239047317f62786e691bb6aa7b8e7f96a8c4114d1f3c6887bdd14482c6c17bd7db127d735766b0ccd966f4a3d64c766370c1051a1e03a5205515e9f02a0db2c583542de200992fd6901aaa4c54fda18d8c87f692f509c9b7d28234ad4fcbe2f70710c3f5f745ce9bc2f03de86e89dbbd0e6ee", 0x0, 0x80000001}, 0x527}, 0x7, 0xd87) (async) sendfile$auto(r1, 0x3, 0x0, 0x1) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) (async) open(&(0x7f00000000c0)='./cgroup\x00', 0xe6a9030037b8afae, 0x69) (async) mkdir$auto(&(0x7f0000000040)='./cgroup\x00', 0x6) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/cgroup.type\x00', 0x103042, 0x0) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0x2003ec, 0x14) 5.20477021s ago: executing program 4 (id=1806): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) getsockname$auto(r0, &(0x7f0000000040)=@phonet={0x23, 0x2, 0xe, 0x37}, &(0x7f00000000c0)=0xd) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) unshare$auto(0x40000080) r1 = socket(0xa, 0x5, 0x0) mmap$auto(0x4, 0xa020009, 0x3, 0xeb1, r1, 0x7ffe) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/mount_params\x00', 0x802, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/system/machinecheck/machinecheck0/cmci_disabled\x00', 0x2062, 0x0) sendfile$auto(r3, r2, 0x0, 0x800) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) close_range$auto(0x2, r4, 0x401) r5 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0) poll$auto(&(0x7f0000000180)={r5, 0xfff7, 0x9816}, 0x7f, 0x9) r6 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) ioctl$auto_UBI_IOCDET(r6, 0x40046f41, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f00000000c0)=0x52a6, &(0x7f0000000140)=0x2) ioctl$auto_VHOST_SET_LOG_FD2(r5, 0x4004af07, &(0x7f00000003c0)) r7 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r7, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xff, 0x400000000000401, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r7, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x0, 0x401, 0x7}, 0x9, 0x0) 5.200855477s ago: executing program 1 (id=1807): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) getsockname$auto(r0, &(0x7f0000000040)=@phonet={0x23, 0x2, 0xe, 0x37}, &(0x7f00000000c0)=0xd) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) unshare$auto(0x40000080) r1 = socket(0xa, 0x5, 0x0) mmap$auto(0x4, 0xa020009, 0x3, 0xeb1, r1, 0x7ffe) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/mount_params\x00', 0x802, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/system/machinecheck/machinecheck0/cmci_disabled\x00', 0x2062, 0x0) sendfile$auto(r4, r3, 0x0, 0x800) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000640)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\xff\x7f\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc:\xfa\x01\xd1\xa3\xb5\xc2B\xa5\xac:woR^a\xb9}\xe7\xbd\xe1\xf77.\xa3\xd8\xc2T\x95\x13\x91\xb6p\xf3\xb2w\xe6\xd7\x94DW\x97\x90a\xe6c\xfb\x88x\xd5L\xa9\xe4\x82\x04\xb1\x8b\r\xcaP\\\x1aVP\xc9\xa4`\xfd\v\x94\f\xc1\x0fQ\xc9\xdcL\x03\x9c\xbfk\xa6\xb1\xb0\xa1\xeeJ\xd8\xef\xc8t\x9d\x1e=J\x91W\xc6AuJ\xb9Q\xed\xd1\a\x05\x9d\x85\xb7b#r\xcd\xaf\xb7\x9f\xf7\xd2\xae\x0f\x98\xa9&\xb6~\xd4\xbd\xbbr\xb9\xc3\xacH!\xc1\x90K2\x05K@\xee\xac\xe8\xc7\t\xab\xbf\xa3\xedb\xd7\xb5\xd7\x83&\x95\xb2?\x0e\x85\xaaIGu\xd6$\xeb\xb6\xdd\a\x121\a\xac\x1bx#\x87\xa9\x10\x9b\xf8YD\x04ZL\xca\x99]\x8f[\x90[\xa8\xbf\x98\xa6\xe50(zC\xe84*w\x13\x96\xd5\xd0\x877\x12\xbc\xa1\xd0h@|\xf9\xfa\x9b\x17\x94\xb9\xe7\xf3\x15\x05\x91\xe8\x98p\x7f:\xd7s\xd9wo\x82\xda\xec\x91\xb7\xd9;H\x8a\b\x00\x00\x00\x00\x00\x00\x00\x8aZ\x94\x14$X7\xaeW6=^I\x9fQ\r5c\x81\xca]\x97m\x89o\x8f\xd8}P>I\xd0\xb3\x88C\xd7', 0x100000a3d9) close_range$auto(0x2, r5, 0x401) r6 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0) poll$auto(&(0x7f0000000180)={r6, 0xfff7, 0x9816}, 0x7f, 0x9) r7 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) ioctl$auto_UBI_IOCDET(r7, 0x40046f41, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f00000000c0)=0x52a6, &(0x7f0000000140)=0x2) ioctl$auto_VHOST_SET_LOG_FD2(r6, 0x4004af07, &(0x7f00000003c0)) r8 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r8, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xff, 0x400000000000401, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r8, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x0, 0x401, 0x7}, 0x9, 0x0) 5.100977848s ago: executing program 2 (id=1808): mmap$auto(0x0, 0x10001, 0x8, 0x1009b72, 0xffffffffffffffff, 0x8000) lseek$auto(0xffffffffffffffff, 0x8a05, 0x1) close_range$auto(0x2, 0x8, 0x0) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a4000000beca54358d3336bf934a21cc21e7d2a1324741fbf236a1fafecb0ab9e71338cbb1e19f66ab17846f38ac5d1b9c9d00fed37e092ed95b4c1b156a4682e2ef4c793ea655ff1bdefec75479655991fbda6796114c6c317bb5b32a9f7ecfe1aed6bd6223b59162c1035b02be0000fbe6b0089334ce8db80149d69a6db94e73c8c89242f8a359b69144bfceaba5e6b8b499a61b3ff7ecead44e16a29aeb821f26461bebc473aad744", @ANYRES16=r0, @ANYBLOB="13002ebd70005641e3a81394531d08000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894) r3 = socket$nl_generic(0x10, 0x3, 0x10) timerfd_create$auto(0x9, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) ioctl$auto(0x3, 0x40085400, 0x5) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r3) sendmsg$auto_NL80211_CMD_SET_KEY(r4, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f00000001c0)={0xa4, r5, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_SAE_PWE={0x5, 0x12a, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}, @NL80211_ATTR_PREV_BSSID={0x2c, 0x4f, "3e6294e2d5d71455bc4d54d2dfcec2d40aebfca49c0e5c0a08380d0df1105a95931d0809ac5cd0c5"}, @NL80211_ATTR_TID_CONFIG={0x28, 0x11d, 0x0, 0x1, [{0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x9}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9}]}, {0x4}]}, @NL80211_ATTR_MAC={0x11, 0x6, "37d1e74dac801696d948e641f5"}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0xa4}, 0x1, 0x0, 0x0, 0x84}, 0x41) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x20003b46, 0x7, 0x0, 0x0, 0x2) r6 = socket(0xa, 0x2, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x240202, 0x0) close_range$auto(0x2, 0x8, 0x0) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r6) memfd_create$auto(&(0x7f00000000c0)='nl80211\x00', 0x4b) ioctl$auto_KVM_CREATE_VM(r7, 0x4048aecb, 0x0) 4.118479244s ago: executing program 4 (id=1809): r0 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_options\x00', 0x88402, 0x0) getpgrp(0xffffffffffffffff) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x80, 0x0) close_range$auto(0x2, r1, 0x0) r2 = socket(0x10, 0x2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r3, 0x0, 0x40540d1) r4 = socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x0, 0x60, 0x0, 0x10001) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(0xffffffffffffffff, 0x0, 0x810) mmap$auto(0x0, 0x1000000000, 0x3, 0x38, r4, 0x8002) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, 0x0, 0x1, 0x0) pwritev$auto(r5, 0x0, 0x4, 0x4, 0x9) close_range$auto(0x2, 0x8, 0x0) r6 = socket(0x10, 0x2, 0xc) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk\x00', 0xda25b84c77ef907d, 0x0) r7 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRES64=r6, @ANYRES8=r7, @ANYRES32=r2], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) preadv$auto(r0, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x3, 0x7ffffffd, 0x5) 3.957271648s ago: executing program 3 (id=1810): io_uring_setup$auto(0x59, &(0x7f0000000080)={0xb, 0x40000d, 0x10400, 0x6, 0x4, 0x3, 0xffffffffffffffff, [], {0x7, 0x200004, 0x7, 0x2a3, 0x100, 0x3, 0x40100101, 0x6}, {0xf8, 0x4, 0x9, 0x1, 0x3, 0x40, 0xcc, 0x8, 0x100000000}}) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) socketpair$auto(0x6, 0x2, 0x20000007, 0x0) pselect6$auto(0x5, &(0x7f0000000400)={[0x8, 0x5, 0x0, 0x5, 0x8001, 0x6, 0xac, 0x2000009, 0x3, 0xffffffff, 0x7fffffffffffffff, 0x0, 0x1000, 0x2, 0x8, 0x3ff]}, 0x0, 0x0, 0x0, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x10080, 0x0) io_uring_enter$auto(0x3, 0x4, 0xffffffff, 0x6, 0x0, 0x2) 3.919946875s ago: executing program 2 (id=1811): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x0, 0x5, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vivid.0/video4linux/video62/name\x00', 0x100, 0x0) close_range$auto(0x0, 0x5, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x3c9400, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0x4048aec9, r0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x40004) io_uring_setup$auto(0x6, 0x0) openat$auto_debug_help_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x8e801, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone3(&(0x7f0000000140)={0x1045100, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) read$auto(r2, 0x0, 0x39b8) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(0xffffffffffffffff, 0x0, 0x810) 3.706365537s ago: executing program 4 (id=1812): r0 = openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x2002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) mseal$auto(0x0, 0x7dda, 0x0) mseal$auto(0x0, 0x7dda, 0x0) r1 = socket(0x2, 0x3, 0x2) rseq$auto(&(0x7f00000004c0)={0x12, 0x401, 0x3, 0x8, 0xfffffeff, 0x2}, 0x8002, 0x0, 0x9) openat$auto_severities_coverage_fops_severity(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/zram0/algorithm_params\x00', 0xa001, 0x0) write$auto(r2, 0x0, 0x81) shutdown$auto(0x200000003, 0x2) ioctl$auto_FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f00000000c0)="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") mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ipvlan1\x00'}) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r3, 0x1269, 0x0) sendmmsg$auto(r0, &(0x7f0000001680)={{&(0x7f0000000500)="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", 0x14de4000, &(0x7f0000001580)={&(0x7f0000001500)="7897a24478bd71ace958c72c6ec62b16065c896e28b58fd5fa7f2bd11895fa2c479728e3cf6cd46b5b5ee3f18dcd310e99d114dd3f0f052553c6ea17f960e1b4d92ba987874e9e5a1a07c0fabf70e901a459b2fe0a4287c64b9b5bf8c7090f159e01f5d6569fce5d19", 0x1}, 0x8000, &(0x7f00000015c0)="f77c1542e9e1d916331b57d6e03a6413023b267835cf3735c7f23ec9a7131d797168d82873cbf15869b80ffd309486b1130170354e7c8eeb5dd5df73d008ec4c2d6fa3643ce6934a29e4bff0d091d33a7570febbbe672bfef15f6b0a4f5ca38bd742871e2ebbb5baf2883e51ed58cc098b5ae9e4747e326f2e4547fff3f17d5277961b4f898d25185a87fb2bcb435b", 0x5, 0x2a}, 0x7}, 0xd, 0x5) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) 3.602562087s ago: executing program 3 (id=1813): io_uring_setup$auto(0x59, &(0x7f0000000080)={0xb, 0x40000d, 0x10400, 0x6, 0x4, 0x3, 0xffffffffffffffff, [], {0x7, 0x200004, 0x7, 0x2a3, 0x100, 0x3, 0x40100101, 0x6}, {0xf8, 0x4, 0x9, 0x1, 0x3, 0x40, 0xcc, 0x8, 0x100000000}}) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) socketpair$auto(0x6, 0x2, 0x20000007, 0x0) pselect6$auto(0x5, &(0x7f0000000400)={[0x8, 0x5, 0x0, 0x5, 0x8001, 0x6, 0xac, 0x2000009, 0x3, 0xffffffff, 0x7fffffffffffffff, 0x0, 0x1000, 0x2, 0x8, 0x3ff]}, 0x0, 0x0, 0x0, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x10080, 0x0) io_uring_enter$auto(0x3, 0x4, 0xffffffff, 0x6, 0x0, 0x2) (fail_nth: 2) 2.651518249s ago: executing program 1 (id=1814): sendmsg$auto_NFSD_CMD_LISTENER_GET(0xffffffffffffffff, 0x0, 0x20004080) bpf$auto(0x2, 0x0, 0x9) syz_clone3(0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram10\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000000)='//\xf2\x00', 0x80000000) 2.453331302s ago: executing program 3 (id=1815): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) statx$auto(r0, 0x0, 0x401006, 0x4015, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) fstat$auto(r1, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x700000000000000, 0x9}, 0x7}, 0x3, 0x0) 2.105463598s ago: executing program 1 (id=1816): membarrier$auto_MEMBARRIER_CMD_PRIVATE_EXPEDITED(0x8, 0x9, 0x6) membarrier$auto_MEMBARRIER_CMD_PRIVATE_EXPEDITED(0x8, 0x2, 0x8) membarrier$auto_MEMBARRIER_CMD_PRIVATE_EXPEDITED(0x8, 0x7, 0x48) membarrier$auto_MEMBARRIER_CMD_PRIVATE_EXPEDITED(0x8, 0x6, 0x7f) membarrier$auto_MEMBARRIER_CMD_PRIVATE_EXPEDITED(0x8, 0x193, 0xd8000000) membarrier$auto_MEMBARRIER_CMD_PRIVATE_EXPEDITED(0x8, 0x81, 0x0) membarrier$auto_MEMBARRIER_CMD_PRIVATE_EXPEDITED(0x8, 0x5, 0x400) r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$auto_TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x5b9) membarrier$auto_MEMBARRIER_CMD_PRIVATE_EXPEDITED(0x8, 0x80000000, 0x7fff) membarrier$auto_MEMBARRIER_CMD_PRIVATE_EXPEDITED(0x8, 0x6f2, 0x1) membarrier$auto_MEMBARRIER_CMD_PRIVATE_EXPEDITED(0x8, 0x81, 0x8) setsockopt$auto_SO_DEBUG(r0, 0x2, 0x1, &(0x7f0000000080)='@\x00', 0x7fff) r1 = prctl$auto_PR_SCHED_CORE_CREATE(0x2, 0x1, 0x0, 0x4, 0x81) ioctl$auto_VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f00000000c0)={0x1, 0xff}) membarrier$auto_MEMBARRIER_CMD_PRIVATE_EXPEDITED(0x8, 0x4, 0xe) membarrier$auto_MEMBARRIER_CMD_PRIVATE_EXPEDITED(0x8, 0x1, 0x8) membarrier$auto_MEMBARRIER_CMD_PRIVATE_EXPEDITED(0x8, 0xffff, 0xfffff9a7) membarrier$auto_MEMBARRIER_CMD_PRIVATE_EXPEDITED(0x8, 0x1, 0x4) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) membarrier$auto_MEMBARRIER_CMD_PRIVATE_EXPEDITED(0x8, 0x1, 0x401) membarrier$auto_MEMBARRIER_CMD_PRIVATE_EXPEDITED(0x8, 0x2, 0x1) membarrier$auto_MEMBARRIER_CMD_PRIVATE_EXPEDITED(0x8, 0x0, 0x7) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyva\x00', 0x5399cf0da154e1d8, 0x0) ioctl$auto_TUNGETIFF(r1, 0x800454d2, &(0x7f0000000140)) ioctl$auto_TIOCNXCL2(r1, 0x540d, &(0x7f0000000180)="9a4865350ffb6dea820603317fcee55d849e5df1beb2a27d2b4e6b71f57ca36b75396244bc8db03449f5882712fe52029b5f5bb763ec") membarrier$auto_MEMBARRIER_CMD_PRIVATE_EXPEDITED(0x8, 0x4, 0x100) membarrier$auto_MEMBARRIER_CMD_PRIVATE_EXPEDITED(0x8, 0xffffff0c, 0x0) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000200), r2) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r1, &(0x7f0000002200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000021c0)={&(0x7f00000005c0)={0x1c00, r3, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x10000}]}, @ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_CABLE_TEST_TDR_CFG={0x4b4, 0x2, 0x0, 0x1, [@nested={0xe6, 0x5d, 0x0, 0x1, [@generic="f9eba7f9ba4c11b0ffa60a7ea4fda795ee2354a342ff055f688ba7e95ce1581ab72429843bb064998ec7d445cc5f5bce03713079fdbaf2f8c0ff9735f70676b6884de872648b97f695167dd6286d42074d8e46014581a84fb7766f60f2b28e475e3b7f4f62e7360c345e900ba36f9c2d9c7b70a0de55970a7f1ea00d62eddb434ae83c714abd9d64c2881c9bbef3ba6b5e3b63092719477d41e02d3258959857480091233f56e6c72c20ffb1aec6eddff4ee6bcda0e3817a651bc1021b0950a1b8ffbb44ff556c67257b79ec54dc424c59d53a0a56d3f8143e63", @typed={0x8, 0xbb, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @typed={0x4, 0x30, 0x0, 0x0, @binary}, @generic="d01f01ada1d411262d737096241f44326dc5e5de586c1a033b847e471d2a3ea06dc6ca4ce39d1c0f5acbc4544e7c257d59778c03d8473888537aff917e527b582dcb3fe047caedeac6fe6c9ae1bee730d7999a9364809884d95aec11edaa12e55f363f5bf135a1bdcb63a80beb", @nested={0xf5, 0x155, 0x0, 0x1, [@generic, @nested={0x4, 0x41}, @generic="680ab5bbc8e699ddd841cb0622b9a5a9ffce6adc6353b9af70878bb018352ec0bf4ee5ed18c6ee2a44c0a07141fd9b181f5f6f46d124fa9def510dc828aea255ac5079d8f1ce2b0d0e8c43155993dd849ab7c4684c0a631ab1296d11147f2d6f3bc23dc5e1b720102cb74d01ca663b7717311f52f3c927b60b4cb592df9e6e831499e7a2260a2f8abd1312c5f3cdca118fb3e18afb837d68cdb5e5ff89d3c7d73f5f4ef652098b03ce11cc69612ed09e2bcd774d50b2939c6205524a6ea320a9d92b09ba78e5bc0e851b1d0df4ef005908cf3cd8668589b8a27de8499a396fff3c8281efdb34424e55e56596a8"]}, @nested={0x24, 0xc9, 0x0, 0x1, [@nested={0x4, 0x63}, @nested={0x4, 0x85}, @nested={0x4, 0x55}, @nested={0x4, 0x107}, @typed={0xf, 0x17, 0x0, 0x0, @str='/dev/ptyva\x00'}]}, @generic="3e8d2bf7ada69f8ea6bc8ffc9de24c959b7b44e91848464eafb79a2bbc23da0a9c58cc29a7d8e1af79438d722fc6876e6c41cb70ea53f5ad60c7d05b940de2494350839e15", @typed={0x8, 0xb9, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x121}, @nested={0x112, 0xfd, 0x0, 0x1, [@nested={0x4, 0x13}, @nested={0x4, 0x3b}, @generic="c859b279ad4fa6e0de6a1301426664c3f1d2c65f0d6ae39cd1ff253adaa8d151208e2adfa51ccbafc90127877b40d3fd86cabc256762c6a20753723ac100c80d0573e2bb1bb0b1794504a879c96379ccdd5492a763f619197ac41902eee58018d8880846e0c9cfd74470adfbe3dc1a4d02fdffe3dcfe6c261cd0bb542b5a2260d504801a2b318ccc9d", @nested={0x4, 0xd8}, @nested={0x4, 0x15d}, @typed={0x8, 0x120, 0x0, 0x0, @uid}, @generic="00a8a9d88669c7ae1a0c1c56824520945a2eeba7de13159f4a810a5513bf227ccedb80aa4c3ef16a0f9879da90da68053c577aee97710b67ec9a6ade93d288b853d1980941f3888512df49e42f75f017b32b6079b797faad64bd39239e440ba95d65d5e60e2363edbebfd79d79"]}, @generic="bb9f7dcb2699a5961b0d3dd61b3556a223596580c1da7365bc2e007e957b162e63f06906760347fabfbafa292196a4cc9a78f086a178f1067b19263ad9990971c8fa47b7e66e8498f85c1b592194c71d3b2cd025a8e417c41069de8ad909c7a13a9ab9fb9e9b7ea170c0154833083db8dcfa6a2f7dff3e2d4908a6ecd41ab662228ba0297401bbbc41376ee05a9ac8a6b32e3b211604b927cc2405739a7be2f1ed290908dcdc0672097c606420da3c64e0fecde2459745e17bf432a9abd6f3a1f43460be6b557fdf2f41fcd096e90d1402ad382005a5"]}, @ETHTOOL_A_CABLE_TEST_TDR_CFG={0x1c9, 0x2, 0x0, 0x1, [@generic="1b2b4a83ee432e65f14a5de571dc55daa4fe27d8c402dd4936bd5f5e78edddfa7ef4ffc5b33f2e9c87c0ff24f5be0bb9c86b92e007e092c8a0f90855cf3e9e283b", @nested={0x68, 0x88, 0x0, 0x1, [@generic="f762586bc00b545f208f7d0b13c1a8dfa9396e2dd4e059b95578bc62b476fd0255269c0771abd646230d8a55544d88757c8169cc9d565702b1748248266a80f972f31ecca02bd089b607aac5b5aa4826df4f89a11e740d689dc14772e40375fce077d76e"]}, @typed={0x8, 0x11, 0x0, 0x0, @u32=0x24}, @generic="7ad0c2e7f577ef7ff119fee7efa50af855128555431bbb89276385d9243195ed3c0c2985045c2775f3018998781d73c19d6bd012cf30f984b3d9eae47f1136c6d7aca8f121ebf4b1b44a9d5e3b8247cda206053784c64cdc3bed644c5e548bd11f80f4bbb87b29413db61e4fc7156251d98dfbfa6234b70204ec6ecc2c327e8cdbde879170c1450b7966fa28118405a784270f18", @typed={0x4, 0x104}, @typed={0x7c, 0x85, 0x0, 0x0, @binary="14505adb32aeb945f5fc57a7ee77fcdfc9a3a5639123a4abd3248c2503d618dd25da3f7727e91675892182bc0932468cfe02697fafd469bd841c231a0efaaee08ec8c28c0b3e4e96eae9a0698eb896e2fa6e76a286e4066d7dfb562c55cda39cc2fa97d87205aaccaf96b28a39ecb899669015cb0d9e458d"}]}, @ETHTOOL_A_CABLE_TEST_TDR_CFG={0x13b8, 0x2, 0x0, 0x1, [@generic="9e9429e1443b667eb3161d758a53345faa307dc66adb76e327c0d5efef9da6dd5acb4b4723d413d81dbbbc277965ad8bc42e0726e073e9a64baa1d33fb9140cf7f03c82ccaaf5a6f5da1fc2273cea644a34eaa24e4077737653b24f113a6bef125c8cd58c8ac9b0cc8fabd9560195ce1eb19607deabd21eaaae65a", @typed={0x4, 0x11a}, @typed={0x14, 0xd, 0x0, 0x0, @ipv6=@private0}, @generic="e69da96b9b190853fd9de9766f8be178cdf4e28e106952d60a09152b288f7da32cb2f10473c850279df17c39890e937532f25a4b40d4dca46c50c2c42bfc6088d64999ac83577e181e0b2001596c779deb7b37dd5ac2a3bf442c46c013347e9517341a6cc35cf4a3cc8a367f13910a581baaad7f638a934c08999fe9900832a484dbfa8b23777f25760c3a582b8e323d9ac493c937b9a4171e70a6e1d7b45c6afc2e73ceaf2ff7572d272d0c8b2d4d3026d6d0635e2a949a914168e10f1ebdf31401fceb3e25097024dd85c8d2", @nested={0x8, 0xdd, 0x0, 0x1, [@nested={0x4, 0x11}]}, @typed={0x8, 0x5a, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x1014, 0x30, 0x0, 0x1, [@typed={0xc, 0x38, 0x0, 0x0, @u64=0x5}, @generic="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", @nested={0x4, 0xbe}]}, @typed={0x8, 0x15b, 0x0, 0x0, @fd=r1}, @nested={0x130, 0xdd, 0x0, 0x1, [@typed={0x8, 0x76, 0x0, 0x0, @ipv4=@empty}, @typed={0x8, 0x114, 0x0, 0x0, @u32=0xfff}, @generic="07eb776ccb5240e5c40028311486453beb0806d5aff579f18d47087e82d9574e84c23646e9ae7429165861e01cba770723ed7b3f252e89885e87588dba6b485b246cfdb115c4", @generic="eb0cb23dbd692a72bf3ee63292d309527569dec14e4d449b314bcff29175a771aa6da623df7dbde66c48a66901a4fb534152771babf6c921e76e24ad3f795fda5c7f92f700a473d8ff101d079a892600804b868ffb192871b3f58e14027c44b6868985b8d6028956bb519919d6b9b11983927634bf3a69ad7b09af99a9ef5e8518625bcf7d390dead76d0a9bbd23eb793599575cd731b316a12ea285f9d6105ee7caedab2cf555a615cf9e19de7ed120244ff3787d86408c6cfb997fa070001de51c1619b2a38cdd73f8", @nested={0x4, 0xe3}, @typed={0x8, 0x99, 0x0, 0x0, @fd}]}, @nested={0xf7, 0xbc, 0x0, 0x1, [@generic="9d6a04d3", @typed={0x8, 0x115, 0x0, 0x0, @ipv4=@broadcast}, @generic="64b998770c7839e34bce8ecf015f380549628f0f002571e9b1805b775b7de61529f9f939785f3af75819e42dfb23925d929a049eec37d498d957b9941b79240d27b2d00063d179689042d5aa71f04f1892328730425a86373ff476e4f8560efe393baacce9666e37f48797a2d6210082c14bca4cd498a5c873a2084b32432a01fa371a02265688fecfb9f5749ef99580ba68640c6c2acae9425ebb3fd89ec453c306c1e6c8cb51f32ef3e2a8e1a30a950a145d2586e125578c6ef5356d6ead496fa26a6d0f6172de1256c5", @typed={0x4, 0xac}, @nested={0x4, 0x113}, @typed={0x8, 0x110, 0x0, 0x0, @pid}, @nested={0x4, 0xa4}, @typed={0x4, 0xad}, @nested={0x4, 0x99}]}]}, @ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x10000}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @ETHTOOL_A_CABLE_TEST_TDR_CFG={0x95, 0x2, 0x0, 0x1, [@typed={0x8, 0x43, 0x0, 0x0, @uid}, @generic="4cfccdaba88c3c03041a61e3f20c3cd0a87287abf2e7a607c745ac67c8d65e1c894fd5be62eb7f4c9c5c4655326ceed5ceb20b5bd468c21d3a29caa6df1f5883d4f783acfa02bc706c", @nested={0x40, 0xe8, 0x0, 0x1, [@typed={0xc, 0x145, 0x0, 0x0, @u64=0xe}, @nested={0x4, 0x8c}, @generic="d7f171ef742965f11dc67e0e77852cb63257022308db97aac2801d5cccbffdd4d29f0ec47b9f04d26e0450", @generic="11"]}]}]}, 0x1c00}, 0x1, 0x0, 0x0, 0x4c000}, 0x80) 1.945932462s ago: executing program 3 (id=1817): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r1, 0x80045439, 0x0) r2 = pidfd_open$auto(0x1, 0x0) setns(r2, 0x60020000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto(r0, 0x89f3, r0) 1.844640059s ago: executing program 1 (id=1818): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x3ff, 0x0) mmap$auto(0x0, 0x8004008, 0x2000000329, 0x2000000010011, r0, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) (async) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000180)="fe3eef5c013a7dcbca7b56a9cf898fe5ce", 0x8) mprotect$auto(0x0, 0x5, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.137248659s ago: executing program 1 (id=1819): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000002080)='/dev/ptyd8\x00', 0x480, 0x0) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) mbind$auto(0xf000, 0x8000000000000001, 0x100000000, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) (async) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_RTC_PARAM_GET(r0, 0x40187013, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000680)='/dev/v4l-subdev5\x00', 0x20281, 0x0) (async) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000680)='/dev/v4l-subdev5\x00', 0x20281, 0x0) mmap$auto(0x0, 0x8001, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) semctl$auto(0x2, 0x5, 0x13, 0x9) ioctl$auto(r2, 0xc038563c, r1) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async) r3 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) statx$auto(r3, 0x0, 0x1003, 0xf, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) write$auto(0x4, 0x0, 0x100082) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) (async) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) socket(0x11, 0x80003, 0x300) socket(0x10, 0x2, 0x4) (async) r4 = socket(0x10, 0x2, 0x4) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x20008800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES32=r4], 0x38}}, 0x40008c0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x65, 0x2) (async) fanotify_init$auto(0x65, 0x2) socket(0x1d, 0x2, 0x2) (async) socket(0x1d, 0x2, 0x2) connect$auto(0x3, 0x0, 0x53) 1.102300363s ago: executing program 3 (id=1820): mmap$auto(0xffffffffffbfffff, 0xfffffffffffffffe, 0x4, 0x1410, 0xffffffffffffffff, 0xfffffffeffffffff) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r0, 0x8000) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x141401, 0x0) ppoll$auto(&(0x7f0000003600)={0x8, 0x800, 0x1}, 0xd6, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r1, 0x0, 0x100000001, 0x100) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a9402, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0xd73, 0x7) r3 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) shutdown$auto(0x200000003, 0x2) read$auto(0xffffffffffffffff, 0x0, 0x1f40) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x880) read$auto(0x3, 0x0, 0x8080) write$auto(0x3, 0x0, 0xffd8) write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, &(0x7f0000000200)="624d1bfe595046ab5c98199adfff0600de16b8ef6176e6021e1dce210500e8fdffff0000000000fffffffe00a7ed73de11691c13403c82be18ecfdf9b0a051779efa1a756fdbf986a298215baf3e6bd7a97b26aebb478bfaac553da2f50d0e1531162fd9c6c6ca7d2316eb660cab29b8e5c0ce1574ef9370005da1efe6c293cb02d95ffe803df1c59b6ccc0b02ec896766cfe3c729ffce659ca157173397d4c5c5e74218ddf46aed92103afc30c34f52", 0xb0) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x12, r3, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) 1.091330173s ago: executing program 4 (id=1821): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/iuu_phoenix/parameters/xmas\x00', 0x101342, 0x0) ioctl$auto_SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000200)=0x6) ioctl$auto_PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000000)=0x3) mmap$auto(0x1, 0x6b4, 0xdf, 0xeb1, 0xffffffffffffffff, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x12, 0x93f, 0x1fee1, 0x3, 0x6, 0xfffffffffffffffe, 0x9, 0x5, 0x8005, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x8, 0x4, 0x10, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, [0x2, 0x4, 0x0, 0xfffffffffffffff9, 0x0, 0xfffffffffffffffe, 0x0, 0x9, 0x1, 0x0, 0x0, 0xeffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x1000000000000, 0xfffffffffffffffc, 0x0, 0x7fffffffffff, 0x9, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x1]}, 0x1fe, 0x100082) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x80002, 0x73) setpriority$auto(0x2, 0x8, 0x8) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x30b083, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/kernel/nmi_watchdog\x00', 0xe8002, 0x0) write$auto(0x3, 0x0, 0x7fffffff) read$auto_tracing_pipe_fops_trace(r0, &(0x7f00000004c0)=""/110, 0x6e) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r3, 0x5522, 0xf15) ioctl$auto(r3, 0x5523, r2) acct$auto(&(0x7f0000000080)='/dev/bus/usb/015/001\x00') r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x840042, 0x0) write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000003900)='\t', 0x1) sendfile$auto(r1, 0x3, 0x0, 0xc01) mmap$auto(0x0, 0xc11, 0xdf, 0x9b72, r4, 0xe) sysfs$auto(0x2, 0xe, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r5 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r5, 0x40146f2c, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x401, 0x0) 533.366527ms ago: executing program 1 (id=1822): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/kernel/parameters/panic_print\x00', 0x80862, 0x0) mmap$auto(0x0, 0x800061, 0x2, 0x9b72, r0, 0x8000) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/neigh/lo/mcast_solicit\x00', 0x2, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) move_pages$auto(0x0, 0x1001, 0x0, 0x0, 0x0, 0x0) (async) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/controlC2\x00', 0x80, 0x0) (async, rerun: 32) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) (rerun: 32) ioctl$auto(r2, 0xc040563d, r1) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r3 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r3, 0x107, 0xf, 0x0, 0x6) (async) sendmsg$auto_OVS_VPORT_CMD_GET(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8804}, 0x20000000) (async) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x5, 0x100}) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000280)={&(0x7f0000000200), 0x23ef2}, 0x5, 0x0, 0x5, 0x1}, 0x2000005}, 0x30000000, 0x100) 0s ago: executing program 4 (id=1823): io_uring_setup$auto(0x59, &(0x7f0000000080)={0xb, 0x40000d, 0x10400, 0x6, 0x4, 0x3, 0xffffffffffffffff, [], {0x7, 0x200004, 0x7, 0x2a3, 0x100, 0x3, 0x40100101, 0x6}, {0xf8, 0x4, 0x9, 0x1, 0x3, 0x40, 0xcc, 0x8, 0x100000000}}) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) socketpair$auto(0x6, 0x2, 0x20000007, 0x0) pselect6$auto(0x5, &(0x7f0000000400)={[0x8, 0x5, 0x0, 0x5, 0x8001, 0x6, 0xac, 0x2000009, 0x3, 0xffffffff, 0x7fffffffffffffff, 0x0, 0x1000, 0x2, 0x8, 0x3ff]}, 0x0, 0x0, 0x0, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x10080, 0x0) io_uring_enter$auto(0x3, 0x4, 0xffffffff, 0x6, 0x0, 0x2) (fail_nth: 3) kernel console output (not intermixed with test programs): compressor not available [ 406.860707][T10209] FAULT_INJECTION: forcing a failure. [ 406.860707][T10209] name fail_futex, interval 1, probability 0, space 0, times 0 [ 407.111198][T10209] CPU: 0 UID: 0 PID: 10209 Comm: syz.4.930 Tainted: G U L syzkaller #0 PREEMPT(full) [ 407.111231][T10209] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 407.111238][T10209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 407.111248][T10209] Call Trace: [ 407.111254][T10209] [ 407.111261][T10209] dump_stack_lvl+0x100/0x190 [ 407.111297][T10209] should_fail_ex.cold+0x5/0xa [ 407.111321][T10209] get_futex_key+0x1d2/0x1510 [ 407.111360][T10209] ? __pfx_get_futex_key+0x10/0x10 [ 407.111386][T10209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.111413][T10209] futex_wait_setup+0x83/0x510 [ 407.111442][T10209] __futex_wait+0x19f/0x300 [ 407.111465][T10209] ? __pfx___futex_wait+0x10/0x10 [ 407.111490][T10209] ? __pfx_futex_wake_mark+0x10/0x10 [ 407.111515][T10209] ? futex_hash+0x2ad/0x370 [ 407.111544][T10209] ? futex_hash+0x141/0x370 [ 407.111574][T10209] futex_wait+0xe6/0x370 [ 407.111601][T10209] ? __pfx_futex_wait+0x10/0x10 [ 407.111627][T10209] ? do_writev+0x214/0x340 [ 407.111659][T10209] do_futex+0x1ef/0x350 [ 407.111676][T10209] ? __pfx_do_futex+0x10/0x10 [ 407.111695][T10209] ? __fget_files+0x21f/0x3d0 [ 407.111725][T10209] __x64_sys_futex+0x34f/0x4d0 [ 407.111746][T10209] ? __pfx___x64_sys_futex+0x10/0x10 [ 407.111764][T10209] ? __pfx_do_writev+0x10/0x10 [ 407.111792][T10209] ? rcu_is_watching+0x12/0xc0 [ 407.111815][T10209] do_syscall_64+0x10b/0xf80 [ 407.111837][T10209] ? clear_bhb_loop+0x40/0x90 [ 407.111858][T10209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.111877][T10209] RIP: 0033:0x7fbbec59c819 [ 407.111893][T10209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.111910][T10209] RSP: 002b:00007fbbed4980e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 407.111929][T10209] RAX: ffffffffffffffda RBX: 00007fbbec816098 RCX: 00007fbbec59c819 [ 407.111940][T10209] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbbec816098 [ 407.111951][T10209] RBP: 00007fbbec816090 R08: 0000000000000000 R09: 0000000000000000 [ 407.111961][T10209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 407.111971][T10209] R13: 00007fbbec816128 R14: 00007ffd31cdf880 R15: 00007ffd31cdf968 [ 407.111994][T10209] [ 412.316005][T10256] netlink: 575 bytes leftover after parsing attributes in process `syz.4.941'. [ 417.174141][T10316] netlink: 206 bytes leftover after parsing attributes in process `syz.4.955'. [ 418.381100][T10339] random: crng reseeded on system resumption [ 418.679696][T10339] hub 1-0:1.0: USB hub found [ 418.791742][T10339] hub 1-0:1.0: 1 port detected [ 423.093668][ T30] audit: type=1807 audit(1843105770.807:19): UNKNOWN= [ 423.109287][ T30] audit: type=1802 audit(1843105770.827:20): pid=10363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.964" res=0 errno=0 [ 423.250950][T10363] ima: policy update failed [ 423.691171][ T30] audit: type=1802 audit(1843105771.017:21): pid=10363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.964" res=0 errno=0 [ 423.760183][T10370] nfs4: Unknown parameter 'Ip"' [ 428.081852][T10409] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 428.485826][T10391] kexec: Could not allocate control_code_buffer [ 429.321688][T10413] netlink: 17 bytes leftover after parsing attributes in process `syz.1.977'. [ 429.331629][T10417] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 429.339570][T10417] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 429.488000][T10418] netlink: 16 bytes leftover after parsing attributes in process `syz.2.976'. [ 429.735934][T10418] hsr_slave_0: left promiscuous mode [ 429.781896][ T8480] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 429.820398][T10418] hsr_slave_1: left promiscuous mode [ 429.941895][T10428] FAULT_INJECTION: forcing a failure. [ 429.941895][T10428] name failslab, interval 1, probability 0, space 0, times 0 [ 429.941990][T10428] CPU: 0 UID: 14 PID: 10428 Comm: syz.1.980 Tainted: G U L syzkaller #0 PREEMPT(full) [ 429.942019][T10428] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 429.942026][T10428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 429.942036][T10428] Call Trace: [ 429.942042][T10428] [ 429.942049][T10428] dump_stack_lvl+0x100/0x190 [ 429.942084][T10428] should_fail_ex.cold+0x5/0xa [ 429.942108][T10428] should_failslab+0xc2/0x120 [ 429.942127][T10428] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 429.942152][T10428] ? mas_preallocate+0x1105/0x14a0 [ 429.942184][T10428] mas_preallocate+0x1105/0x14a0 [ 429.942214][T10428] ? __pfx_mas_preallocate+0x10/0x10 [ 429.942264][T10428] ? anon_vma_name+0x5a/0x250 [ 429.942289][T10428] __split_vma+0x33d/0xd90 [ 429.942316][T10428] ? __pfx___split_vma+0x10/0x10 [ 429.942358][T10428] ? __pfx___up_read+0x10/0x10 [ 429.942375][T10428] ? vms_complete_munmap_vmas+0xaac/0xdd0 [ 429.942400][T10428] ? vms_complete_munmap_vmas+0xaac/0xdd0 [ 429.942428][T10428] vms_gather_munmap_vmas+0x1d2/0x1720 [ 429.942455][T10428] ? vms_complete_munmap_vmas+0x1e1/0xdd0 [ 429.942483][T10428] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 429.942510][T10428] ? __pfx_vms_complete_munmap_vmas+0x10/0x10 [ 429.942550][T10428] do_vmi_align_munmap+0x287/0x5f0 [ 429.942579][T10428] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 429.942605][T10428] ? cap_mmap_addr+0x4b/0x120 [ 429.942653][T10428] do_vmi_munmap+0x1f8/0x3e0 [ 429.942682][T10428] __vm_munmap+0x196/0x390 [ 429.942710][T10428] ? __pfx___vm_munmap+0x10/0x10 [ 429.942751][T10428] __x64_sys_munmap+0x59/0x80 [ 429.942771][T10428] do_syscall_64+0x10b/0xf80 [ 429.942792][T10428] ? clear_bhb_loop+0x40/0x90 [ 429.942815][T10428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.942834][T10428] RIP: 0033:0x7f9ac919c647 [ 429.942850][T10428] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.942867][T10428] RSP: 002b:00007f9aca0e5d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 429.942885][T10428] RAX: ffffffffffffffda RBX: 00007f9ac0000000 RCX: 00007f9ac919c647 [ 429.942897][T10428] RDX: 0000000000000000 RSI: 0000000003200000 RDI: 00007f9ac4000000 [ 429.942908][T10428] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 429.942918][T10428] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 429.942929][T10428] R13: 0000000000001000 R14: 00007f9ac4000000 R15: 0000000000e00000 [ 429.942952][T10428] [ 432.165063][T10456] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 432.262553][T10456] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 432.329634][T10456] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 432.391754][T10456] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 433.462483][T10477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.991'. [ 433.635202][T10468] netlink: 342 bytes leftover after parsing attributes in process `syz.1.988'. [ 434.166708][ T8480] Bluetooth: hci2: command 0x0c1a tx timeout [ 434.327145][ T8480] Bluetooth: hci1: command 0x0c1a tx timeout [ 434.407176][ T8199] Bluetooth: hci3: command 0x0c1a tx timeout [ 434.413276][ T8480] Bluetooth: hci4: command 0x0c1a tx timeout [ 434.911671][T10498] netlink: 330 bytes leftover after parsing attributes in process `syz.2.995'. [ 437.321244][T10534] QAT: failed to copy from user. [ 438.475796][ T30] audit: type=1800 audit(1843105786.179:22): pid=10578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1015" name="dbroot" dev="configfs" ino=129841 res=0 errno=0 [ 438.518035][T10578] QAT: failed to copy from user cfg_data. [ 438.547046][T10580] FAULT_INJECTION: forcing a failure. [ 438.547046][T10580] name failslab, interval 1, probability 0, space 0, times 0 [ 438.591715][T10580] CPU: 0 UID: 0 PID: 10580 Comm: syz.4.1016 Tainted: G U L syzkaller #0 PREEMPT(full) [ 438.591749][T10580] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 438.591756][T10580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 438.591766][T10580] Call Trace: [ 438.591773][T10580] [ 438.591781][T10580] dump_stack_lvl+0x100/0x190 [ 438.591816][T10580] should_fail_ex.cold+0x5/0xa [ 438.591840][T10580] should_failslab+0xc2/0x120 [ 438.591858][T10580] __kmalloc_cache_noprof+0x7a/0x6f0 [ 438.591881][T10580] ? snd_ctl_open+0x174/0x5e0 [ 438.591906][T10580] ? _raw_spin_unlock+0x28/0x50 [ 438.591926][T10580] ? snd_card_file_add+0x257/0x330 [ 438.591949][T10580] snd_ctl_open+0x174/0x5e0 [ 438.591977][T10580] ? __pfx_snd_ctl_open+0x10/0x10 [ 438.592003][T10580] snd_open+0x201/0x450 [ 438.592022][T10580] ? __pfx_snd_open+0x10/0x10 [ 438.592040][T10580] chrdev_open+0x234/0x6a0 [ 438.592058][T10580] ? __pfx_apparmor_file_open+0x10/0x10 [ 438.592077][T10580] ? __pfx_chrdev_open+0x10/0x10 [ 438.592096][T10580] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 438.592121][T10580] do_dentry_open+0x6d8/0x1660 [ 438.592137][T10580] ? __pfx_chrdev_open+0x10/0x10 [ 438.592159][T10580] vfs_open+0x82/0x3f0 [ 438.592183][T10580] path_openat+0x208c/0x31a0 [ 438.592207][T10580] ? __pfx_path_openat+0x10/0x10 [ 438.592232][T10580] do_file_open+0x20e/0x430 [ 438.592251][T10580] ? __pfx_do_file_open+0x10/0x10 [ 438.592295][T10580] ? alloc_fd+0x476/0x790 [ 438.592313][T10580] ? do_getname+0x191/0x390 [ 438.592337][T10580] do_sys_openat2+0x10d/0x1e0 [ 438.592359][T10580] ? __pfx_do_sys_openat2+0x10/0x10 [ 438.592384][T10580] ? __fget_files+0x21f/0x3d0 [ 438.592416][T10580] __x64_sys_openat+0x12d/0x210 [ 438.592439][T10580] ? __pfx___x64_sys_openat+0x10/0x10 [ 438.592467][T10580] ? rcu_is_watching+0x12/0xc0 [ 438.592490][T10580] do_syscall_64+0x10b/0xf80 [ 438.592512][T10580] ? clear_bhb_loop+0x40/0x90 [ 438.592534][T10580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.592553][T10580] RIP: 0033:0x7fbbec59c819 [ 438.592569][T10580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.592586][T10580] RSP: 002b:00007fbbed4b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 438.592605][T10580] RAX: ffffffffffffffda RBX: 00007fbbec815fa0 RCX: 00007fbbec59c819 [ 438.592616][T10580] RDX: 0000000000000080 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 438.592627][T10580] RBP: 00007fbbec632c91 R08: 0000000000000000 R09: 0000000000000000 [ 438.592638][T10580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.592648][T10580] R13: 00007fbbec816038 R14: 00007fbbec815fa0 R15: 00007ffd31cdf968 [ 438.592670][T10580] [ 439.319021][T10573] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 439.362662][T10573] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 439.396997][T10573] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 439.422418][T10573] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 439.893800][T10593] i2c i2c-0: new_device: Missing parameters [ 439.988022][T10590] can: request_module (can-proto-0) failed. [ 440.336127][T10600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1021'. [ 440.424340][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.431463][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.740562][T10608] can: request_module (can-proto-5) failed. [ 441.382616][T10619] futex_wake_op: syz.4.1025 tries to shift op by -2048; fix this program [ 441.424857][T10619] 0x000000000001-0x000000020000 : "" [ 441.450789][ T8480] Bluetooth: hci1: command 0x0c1a tx timeout [ 441.456945][ T8199] Bluetooth: hci2: command 0x0c1a tx timeout [ 441.474618][T10619] ftl_cs: FTL header corrupt! [ 441.530441][ T8480] Bluetooth: hci4: command 0x0c1a tx timeout [ 441.536796][ T8199] Bluetooth: hci3: command 0x0c1a tx timeout [ 443.815679][T10663] NFSD: Failed to start, no listeners configured. [ 443.978824][T10660] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 444.104115][T10660] vhci_hcd vhci_hcd.2: invalid port number 111 [ 444.131165][ T30] audit: type=1800 audit(1843105791.836:23): pid=10686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1039" name="dbroot" dev="configfs" ino=130482 res=0 errno=0 [ 444.236754][T10660] vhci_hcd vhci_hcd.2: invalid port number 111 [ 446.467155][T10718] Invalid ELF header magic: != ELF [ 446.531393][T10721] FAULT_INJECTION: forcing a failure. [ 446.531393][T10721] name failslab, interval 1, probability 0, space 0, times 0 [ 446.607170][T10721] CPU: 0 UID: 0 PID: 10721 Comm: syz.2.1048 Tainted: G U L syzkaller #0 PREEMPT(full) [ 446.607204][T10721] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 446.607211][T10721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 446.607221][T10721] Call Trace: [ 446.607228][T10721] [ 446.607234][T10721] dump_stack_lvl+0x100/0x190 [ 446.607270][T10721] should_fail_ex.cold+0x5/0xa [ 446.607293][T10721] should_failslab+0xc2/0x120 [ 446.607312][T10721] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 446.607339][T10721] ? shmem_alloc_inode+0x25/0x50 [ 446.607362][T10721] ? __lock_acquire+0x4a5/0x2630 [ 446.607391][T10721] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 446.607416][T10721] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 446.607437][T10721] shmem_alloc_inode+0x25/0x50 [ 446.607456][T10721] alloc_inode+0x68/0x250 [ 446.607480][T10721] new_inode+0x22/0x1c0 [ 446.607505][T10721] shmem_get_inode+0x1e3/0xfb0 [ 446.607529][T10721] ? __pfx_shmem_get_inode+0x10/0x10 [ 446.607558][T10721] __shmem_file_setup+0x382/0x460 [ 446.607588][T10721] ? __pfx___shmem_file_setup+0x10/0x10 [ 446.607613][T10721] ? vm_area_alloc+0x1f/0x160 [ 446.607640][T10721] shmem_zero_setup+0x96/0x1b0 [ 446.607670][T10721] __mmap_region+0x2590/0x2dc0 [ 446.607701][T10721] ? __pfx___mmap_region+0x10/0x10 [ 446.607731][T10721] ? __lock_acquire+0x4a5/0x2630 [ 446.607768][T10721] ? lock_acquire+0x1b1/0x370 [ 446.607796][T10721] ? find_held_lock+0x2b/0x80 [ 446.607818][T10721] ? clockevents_program_event+0x23e/0x7e0 [ 446.607862][T10721] ? rcu_is_watching+0x12/0xc0 [ 446.607883][T10721] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 446.607942][T10721] mmap_region+0x35d/0x620 [ 446.607969][T10721] ? rcu_is_watching+0x12/0xc0 [ 446.607989][T10721] ? __pfx_mmap_region+0x10/0x10 [ 446.608018][T10721] ? cap_mmap_addr+0x4b/0x120 [ 446.608034][T10721] ? bpf_lsm_mmap_addr+0x9/0x30 [ 446.608062][T10721] ? security_mmap_addr+0x71/0x1e0 [ 446.608085][T10721] ? __get_unmapped_area+0x255/0x3e0 [ 446.608108][T10721] do_mmap+0xc63/0x12f0 [ 446.608131][T10721] ? __pfx_do_mmap+0x10/0x10 [ 446.608151][T10721] ? __pfx_down_write_killable+0x10/0x10 [ 446.608182][T10721] vm_mmap_pgoff+0x29e/0x470 [ 446.608207][T10721] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 446.608228][T10721] ? do_futex+0x192/0x350 [ 446.608246][T10721] ? __pfx_do_futex+0x10/0x10 [ 446.608262][T10721] ? __pfx_do_sys_openat2+0x10/0x10 [ 446.608289][T10721] ksys_mmap_pgoff+0xe4/0x610 [ 446.608308][T10721] ? __x64_sys_futex+0x358/0x4d0 [ 446.608326][T10721] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 446.608344][T10721] ? xfd_validate_state+0x129/0x190 [ 446.608367][T10721] __x64_sys_mmap+0x125/0x190 [ 446.608389][T10721] do_syscall_64+0x10b/0xf80 [ 446.608411][T10721] ? clear_bhb_loop+0x40/0x90 [ 446.608433][T10721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.608453][T10721] RIP: 0033:0x7fb57e99c819 [ 446.608468][T10721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.608486][T10721] RSP: 002b:00007fb57f8d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 446.608504][T10721] RAX: ffffffffffffffda RBX: 00007fb57ec16090 RCX: 00007fb57e99c819 [ 446.608516][T10721] RDX: 00000000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 446.608527][T10721] RBP: 00007fb57ea32c91 R08: 0000000000000401 R09: 0000000000008000 [ 446.608538][T10721] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 446.608548][T10721] R13: 00007fb57ec16128 R14: 00007fb57ec16090 R15: 00007ffcd65784e8 [ 446.608576][T10721] [ 447.827476][T10738] FAULT_INJECTION: forcing a failure. [ 447.827476][T10738] name failslab, interval 1, probability 0, space 0, times 0 [ 447.902434][T10738] CPU: 0 UID: 0 PID: 10738 Comm: syz.2.1051 Tainted: G U L syzkaller #0 PREEMPT(full) [ 447.902468][T10738] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 447.902474][T10738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 447.902485][T10738] Call Trace: [ 447.902491][T10738] [ 447.902498][T10738] dump_stack_lvl+0x100/0x190 [ 447.902534][T10738] should_fail_ex.cold+0x5/0xa [ 447.902557][T10738] ? tomoyo_realpath_from_path+0xb6/0x690 [ 447.902583][T10738] should_failslab+0xc2/0x120 [ 447.902602][T10738] __kmalloc_noprof+0xe0/0x850 [ 447.902627][T10738] ? kfree+0x1dd/0x6c0 [ 447.902653][T10738] tomoyo_realpath_from_path+0xb6/0x690 [ 447.902684][T10738] tomoyo_path_number_perm+0x23c/0x580 [ 447.902705][T10738] ? tomoyo_path_number_perm+0x22e/0x580 [ 447.902729][T10738] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 447.902772][T10738] ? find_held_lock+0x2b/0x80 [ 447.902794][T10738] ? __fget_files+0x215/0x3d0 [ 447.902822][T10738] ? hook_file_ioctl_common+0x149/0x410 [ 447.902843][T10738] ? __fget_files+0x215/0x3d0 [ 447.902876][T10738] ? __fget_files+0x21f/0x3d0 [ 447.902908][T10738] security_file_ioctl+0xd3/0x230 [ 447.902931][T10738] __x64_sys_ioctl+0xb7/0x210 [ 447.902958][T10738] do_syscall_64+0x10b/0xf80 [ 447.902981][T10738] ? clear_bhb_loop+0x40/0x90 [ 447.903004][T10738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.903023][T10738] RIP: 0033:0x7fb57e99c819 [ 447.903038][T10738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.903055][T10738] RSP: 002b:00007fb57f8f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 447.903073][T10738] RAX: ffffffffffffffda RBX: 00007fb57ec15fa0 RCX: 00007fb57e99c819 [ 447.903085][T10738] RDX: 0000200000000180 RSI: 00000000c0105512 RDI: 0000000000000003 [ 447.903096][T10738] RBP: 00007fb57f8f8090 R08: 0000000000000000 R09: 0000000000000000 [ 447.903107][T10738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.903118][T10738] R13: 00007fb57ec16038 R14: 00007fb57ec15fa0 R15: 00007ffcd65784e8 [ 447.903141][T10738] [ 447.903148][T10738] ERROR: Out of memory at tomoyo_realpath_from_path. [ 449.276606][T10754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1058'. [ 450.851040][T10767] netlink: 146 bytes leftover after parsing attributes in process `syz.3.1061'. [ 453.402962][T10824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1075'. [ 454.817010][ T8480] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 455.781152][T10847] FAULT_INJECTION: forcing a failure. [ 455.781152][T10847] name failslab, interval 1, probability 0, space 0, times 0 [ 455.855454][T10847] CPU: 0 UID: 0 PID: 10847 Comm: syz.3.1082 Tainted: G U L syzkaller #0 PREEMPT(full) [ 455.855488][T10847] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 455.855495][T10847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 455.855506][T10847] Call Trace: [ 455.855512][T10847] [ 455.855519][T10847] dump_stack_lvl+0x100/0x190 [ 455.855564][T10847] should_fail_ex.cold+0x5/0xa [ 455.855588][T10847] should_failslab+0xc2/0x120 [ 455.855606][T10847] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 455.855632][T10847] ? taskstats_exit+0x67b/0xc10 [ 455.855655][T10847] ? rcu_is_watching+0x12/0xc0 [ 455.855678][T10847] taskstats_exit+0x67b/0xc10 [ 455.855701][T10847] ? __pfx_acct_update_integrals+0x10/0x10 [ 455.855727][T10847] ? __pfx_taskstats_exit+0x10/0x10 [ 455.855752][T10847] ? rcu_read_lock_any_held+0x6a/0xa0 [ 455.855774][T10847] ? exit_signals+0x395/0xaf0 [ 455.855798][T10847] do_exit+0x65c/0x2a60 [ 455.855823][T10847] ? __pfx___might_resched+0x10/0x10 [ 455.855845][T10847] ? __pfx_do_exit+0x10/0x10 [ 455.855872][T10847] ? do_raw_spin_lock+0x128/0x260 [ 455.855890][T10847] ? find_held_lock+0x2b/0x80 [ 455.855911][T10847] ? get_signal+0x7e0/0x21e0 [ 455.855934][T10847] do_group_exit+0xd5/0x2a0 [ 455.855962][T10847] get_signal+0x1ec7/0x21e0 [ 455.855987][T10847] ? __pfx_do_recvmmsg+0x10/0x10 [ 455.856011][T10847] ? __pfx_get_signal+0x10/0x10 [ 455.856033][T10847] ? do_futex+0x192/0x350 [ 455.856053][T10847] arch_do_signal_or_restart+0x91/0x770 [ 455.856082][T10847] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 455.856115][T10847] ? __x64_sys_recvmmsg+0x1d9/0x280 [ 455.856144][T10847] ? rcu_is_watching+0x12/0xc0 [ 455.856166][T10847] exit_to_user_mode_loop+0x86/0x4a0 [ 455.856195][T10847] ? do_syscall_64+0x519/0xf80 [ 455.856220][T10847] do_syscall_64+0x6f2/0xf80 [ 455.856241][T10847] ? clear_bhb_loop+0x40/0x90 [ 455.856264][T10847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.856283][T10847] RIP: 0033:0x7fd857f9c819 [ 455.856305][T10847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.856324][T10847] RSP: 002b:00007fd858f0b028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 455.856342][T10847] RAX: fffffffffffffe00 RBX: 00007fd858215fa0 RCX: 00007fd857f9c819 [ 455.856353][T10847] RDX: 0000000000000007 RSI: 0000200000000100 RDI: 0000000000000003 [ 455.856364][T10847] RBP: 00007fd858032c91 R08: 0000000000000000 R09: 0000000000000000 [ 455.856374][T10847] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 455.856385][T10847] R13: 00007fd858216038 R14: 00007fd858215fa0 R15: 00007ffd58c16848 [ 455.856408][T10847] [ 457.294788][ T30] audit: type=1800 audit(1843105804.920:24): pid=10876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1091" name="dbroot" dev="configfs" ino=131524 res=0 errno=0 [ 457.343580][T10879] Format for deleting device is "id" (uint). [ 457.982382][ T30] audit: type=1800 audit(1843105805.679:25): pid=10888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1093" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 462.073948][T10951] binder: 10949:10951 ioctl 4018620d 9 returned -22 [ 462.365719][T10956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1106'. [ 463.273163][T10979] futex_wake_op: syz.3.1114 tries to shift op by -2048; fix this program [ 463.549776][T10986] FAULT_INJECTION: forcing a failure. [ 463.549776][T10986] name failslab, interval 1, probability 0, space 0, times 0 [ 463.634475][T10986] CPU: 0 UID: 0 PID: 10986 Comm: syz.3.1116 Tainted: G U L syzkaller #0 PREEMPT(full) [ 463.634508][T10986] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 463.634515][T10986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 463.634525][T10986] Call Trace: [ 463.634532][T10986] [ 463.634539][T10986] dump_stack_lvl+0x100/0x190 [ 463.634576][T10986] should_fail_ex.cold+0x5/0xa [ 463.634600][T10986] should_failslab+0xc2/0x120 [ 463.634619][T10986] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 463.634648][T10986] ? kstrdup_const+0x63/0x80 [ 463.634681][T10986] kstrdup+0x51/0xe0 [ 463.634710][T10986] kstrdup_const+0x63/0x80 [ 463.634770][T10986] alloc_vfsmnt+0xe5/0x6a0 [ 463.634795][T10986] clone_mnt+0x4b/0x930 [ 463.634823][T10986] copy_mnt_ns+0x8a1/0x1180 [ 463.634848][T10986] ? __pfx_copy_mnt_ns+0x10/0x10 [ 463.634871][T10986] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 463.634898][T10986] ? create_new_namespaces+0x30/0xac0 [ 463.634927][T10986] ? rcu_is_watching+0x12/0xc0 [ 463.634950][T10986] create_new_namespaces+0xd3/0xac0 [ 463.634972][T10986] ? bpf_lsm_capable+0x9/0x10 [ 463.634990][T10986] ? security_capable+0x80/0x260 [ 463.635023][T10986] unshare_nsproxy_namespaces+0xf2/0x220 [ 463.635048][T10986] ksys_unshare+0x438/0xab0 [ 463.635075][T10986] ? __pfx_ksys_unshare+0x10/0x10 [ 463.635100][T10986] ? ksys_write+0x1ac/0x250 [ 463.635135][T10986] __x64_sys_unshare+0x31/0x40 [ 463.635161][T10986] do_syscall_64+0x10b/0xf80 [ 463.635184][T10986] ? clear_bhb_loop+0x40/0x90 [ 463.635206][T10986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.635233][T10986] RIP: 0033:0x7fd857f9c819 [ 463.635248][T10986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.635271][T10986] RSP: 002b:00007fd858f0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 463.635289][T10986] RAX: ffffffffffffffda RBX: 00007fd858215fa0 RCX: 00007fd857f9c819 [ 463.635301][T10986] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008100000 [ 463.635312][T10986] RBP: 00007fd858f0b090 R08: 0000000000000000 R09: 0000000000000000 [ 463.635323][T10986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.635333][T10986] R13: 00007fd858216038 R14: 00007fd858215fa0 R15: 00007ffd58c16848 [ 463.635357][T10986] [ 463.941335][T10977] FAULT_INJECTION: forcing a failure. [ 463.941335][T10977] name failslab, interval 1, probability 0, space 0, times 0 [ 463.954629][T10977] CPU: 0 UID: 0 PID: 10977 Comm: syz.1.1113 Tainted: G U L syzkaller #0 PREEMPT(full) [ 463.954662][T10977] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 463.954668][T10977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 463.954678][T10977] Call Trace: [ 463.954684][T10977] [ 463.954691][T10977] dump_stack_lvl+0x100/0x190 [ 463.954727][T10977] should_fail_ex.cold+0x5/0xa [ 463.954750][T10977] should_failslab+0xc2/0x120 [ 463.954768][T10977] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 463.954793][T10977] ? sk_prot_alloc+0x60/0x2a0 [ 463.954815][T10977] sk_prot_alloc+0x60/0x2a0 [ 463.954834][T10977] sk_alloc+0x36/0xe80 [ 463.954860][T10977] inet6_create+0x385/0x12b0 [ 463.954888][T10977] ? inet6_create+0x7f/0x12b0 [ 463.954918][T10977] __sock_create+0x339/0x860 [ 463.954940][T10977] __sys_socket+0x14d/0x260 [ 463.954961][T10977] ? __pfx___sys_socket+0x10/0x10 [ 463.954988][T10977] __x64_sys_socket+0x72/0xb0 [ 463.955007][T10977] ? lockdep_hardirqs_on+0x78/0x100 [ 463.955030][T10977] do_syscall_64+0x10b/0xf80 [ 463.955051][T10977] ? clear_bhb_loop+0x40/0x90 [ 463.955073][T10977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.955091][T10977] RIP: 0033:0x7f9ac919c819 [ 463.955106][T10977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.955123][T10977] RSP: 002b:00007f9aca129028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 463.955141][T10977] RAX: ffffffffffffffda RBX: 00007f9ac9415fa0 RCX: 00007f9ac919c819 [ 463.955153][T10977] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 463.955163][T10977] RBP: 00007f9ac9232c91 R08: 0000000000000000 R09: 0000000000000000 [ 463.955173][T10977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 463.955184][T10977] R13: 00007f9ac9416038 R14: 00007f9ac9415fa0 R15: 00007ffd63504428 [ 463.955206][T10977] [ 464.882972][T10990] netlink: 'syz.4.1117': attribute type 3 has an invalid length. [ 464.958948][T10990] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1117'. [ 464.998042][T10996] FAULT_INJECTION: forcing a failure. [ 464.998042][T10996] name failslab, interval 1, probability 0, space 0, times 0 [ 465.102416][T10996] CPU: 0 UID: 0 PID: 10996 Comm: syz.2.1119 Tainted: G U L syzkaller #0 PREEMPT(full) [ 465.102449][T10996] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 465.102457][T10996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 465.102467][T10996] Call Trace: [ 465.102473][T10996] [ 465.102480][T10996] dump_stack_lvl+0x100/0x190 [ 465.102517][T10996] should_fail_ex.cold+0x5/0xa [ 465.102540][T10996] should_failslab+0xc2/0x120 [ 465.102559][T10996] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 465.102586][T10996] ? __kernfs_new_node+0xd2/0x9f0 [ 465.102617][T10996] __kernfs_new_node+0xd2/0x9f0 [ 465.102648][T10996] ? __pfx___kernfs_new_node+0x10/0x10 [ 465.102681][T10996] ? find_held_lock+0x2b/0x80 [ 465.102703][T10996] ? kernfs_root+0xee/0x2a0 [ 465.102728][T10996] ? kernfs_root+0xee/0x2a0 [ 465.102760][T10996] kernfs_new_node+0x11b/0x1a0 [ 465.102781][T10996] __kernfs_create_file+0x53/0x350 [ 465.102807][T10996] sysfs_add_file_mode_ns+0x207/0x3c0 [ 465.102838][T10996] internal_create_group+0x593/0xf40 [ 465.102873][T10996] ? __pfx_internal_create_group+0x10/0x10 [ 465.102905][T10996] ? kernfs_create_link+0x1bd/0x240 [ 465.102931][T10996] internal_create_groups+0x9d/0x150 [ 465.102962][T10996] device_add+0x71a/0x1920 [ 465.102990][T10996] ? __pfx_device_add+0x10/0x10 [ 465.103014][T10996] ? lockdep_init_map_type+0x5c/0x250 [ 465.103044][T10996] ? __init_waitqueue_head+0xca/0x150 [ 465.103070][T10996] rfkill_register+0x1ad/0xb30 [ 465.103103][T10996] nfc_register_device+0x11f/0x3e0 [ 465.103128][T10996] nci_register_device+0x7f1/0xb80 [ 465.103159][T10996] ? __pfx_nci_register_device+0x10/0x10 [ 465.103193][T10996] ? lockdep_init_map_type+0x5c/0x250 [ 465.103226][T10996] virtual_ncidev_open+0x141/0x220 [ 465.103256][T10996] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 465.103285][T10996] misc_open+0x26d/0x450 [ 465.103317][T10996] ? __pfx_misc_open+0x10/0x10 [ 465.103342][T10996] chrdev_open+0x234/0x6a0 [ 465.103359][T10996] ? __pfx_apparmor_file_open+0x10/0x10 [ 465.103380][T10996] ? __pfx_chrdev_open+0x10/0x10 [ 465.103399][T10996] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 465.103423][T10996] do_dentry_open+0x6d8/0x1660 [ 465.103444][T10996] ? __pfx_chrdev_open+0x10/0x10 [ 465.103468][T10996] vfs_open+0x82/0x3f0 [ 465.103492][T10996] path_openat+0x208c/0x31a0 [ 465.103519][T10996] ? __pfx_path_openat+0x10/0x10 [ 465.103545][T10996] do_file_open+0x20e/0x430 [ 465.103565][T10996] ? __pfx_do_file_open+0x10/0x10 [ 465.103600][T10996] ? alloc_fd+0x476/0x790 [ 465.103619][T10996] ? do_getname+0x191/0x390 [ 465.103643][T10996] do_sys_openat2+0x10d/0x1e0 [ 465.103666][T10996] ? __pfx_do_sys_openat2+0x10/0x10 [ 465.103691][T10996] ? __sys_sendmsg+0x18f/0x220 [ 465.103723][T10996] __x64_sys_openat+0x12d/0x210 [ 465.103747][T10996] ? __pfx___x64_sys_openat+0x10/0x10 [ 465.103775][T10996] ? rcu_is_watching+0x12/0xc0 [ 465.103799][T10996] do_syscall_64+0x10b/0xf80 [ 465.103821][T10996] ? clear_bhb_loop+0x40/0x90 [ 465.103844][T10996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.103862][T10996] RIP: 0033:0x7fb57e99c819 [ 465.103878][T10996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.103896][T10996] RSP: 002b:00007fb57f8d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 465.103914][T10996] RAX: ffffffffffffffda RBX: 00007fb57ec16090 RCX: 00007fb57e99c819 [ 465.103927][T10996] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 465.103937][T10996] RBP: 00007fb57ea32c91 R08: 0000000000000000 R09: 0000000000000000 [ 465.103948][T10996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.103959][T10996] R13: 00007fb57ec16128 R14: 00007fb57ec16090 R15: 00007ffcd65784e8 [ 465.103982][T10996] [ 466.081667][T11014] Unable to find swap-space signature [ 466.119611][T11014] FAULT_INJECTION: forcing a failure. [ 466.119611][T11014] name failslab, interval 1, probability 0, space 0, times 0 [ 466.147777][T11014] CPU: 0 UID: 0 PID: 11014 Comm: syz.3.1120 Tainted: G U L syzkaller #0 PREEMPT(full) [ 466.147813][T11014] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 466.147820][T11014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 466.147830][T11014] Call Trace: [ 466.147837][T11014] [ 466.147844][T11014] dump_stack_lvl+0x100/0x190 [ 466.147881][T11014] should_fail_ex.cold+0x5/0xa [ 466.147904][T11014] should_failslab+0xc2/0x120 [ 466.147923][T11014] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 466.147948][T11014] ? vm_area_alloc+0x1f/0x160 [ 466.147976][T11014] vm_area_alloc+0x1f/0x160 [ 466.147998][T11014] __mmap_region+0x104d/0x2dc0 [ 466.148028][T11014] ? __pfx___mmap_region+0x10/0x10 [ 466.148073][T11014] ? find_held_lock+0x2b/0x80 [ 466.148095][T11014] ? ima_match_policy+0x8c4/0x2350 [ 466.148117][T11014] ? ima_match_policy+0x8c4/0x2350 [ 466.148161][T11014] ? process_measurement+0x4c8/0x2350 [ 466.148226][T11014] mmap_region+0x527/0x620 [ 466.148254][T11014] ? __pfx_mmap_region+0x10/0x10 [ 466.148281][T11014] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 466.148301][T11014] ? cap_mmap_addr+0x4b/0x120 [ 466.148317][T11014] ? bpf_lsm_mmap_addr+0x9/0x30 [ 466.148344][T11014] ? security_mmap_addr+0x71/0x1e0 [ 466.148367][T11014] ? __get_unmapped_area+0x255/0x3e0 [ 466.148388][T11014] do_mmap+0xc63/0x12f0 [ 466.148411][T11014] ? __pfx_do_mmap+0x10/0x10 [ 466.148430][T11014] ? __pfx_down_write_killable+0x10/0x10 [ 466.148461][T11014] vm_mmap_pgoff+0x29e/0x470 [ 466.148485][T11014] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 466.148503][T11014] ? __fget_files+0x215/0x3d0 [ 466.148543][T11014] ? __fget_files+0x21f/0x3d0 [ 466.148575][T11014] ksys_mmap_pgoff+0x3cb/0x610 [ 466.148594][T11014] ? __x64_sys_futex+0x358/0x4d0 [ 466.148613][T11014] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 466.148631][T11014] ? xfd_validate_state+0x129/0x190 [ 466.148649][T11014] ? ksys_write+0x1ac/0x250 [ 466.148681][T11014] __x64_sys_mmap+0x125/0x190 [ 466.148702][T11014] do_syscall_64+0x10b/0xf80 [ 466.148724][T11014] ? clear_bhb_loop+0x40/0x90 [ 466.148745][T11014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.148764][T11014] RIP: 0033:0x7fd857f9c819 [ 466.148780][T11014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.148797][T11014] RSP: 002b:00007fd858f0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 466.148815][T11014] RAX: ffffffffffffffda RBX: 00007fd858215fa0 RCX: 00007fd857f9c819 [ 466.148827][T11014] RDX: 0000000000000007 RSI: 00000000003fffff RDI: 0000000000009000 [ 466.148841][T11014] RBP: 00007fd858032c91 R08: 00000000000000dd R09: 0000000000000000 [ 466.148852][T11014] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 466.148862][T11014] R13: 00007fd858216038 R14: 00007fd858215fa0 R15: 00007ffd58c16848 [ 466.148886][T11014] [ 466.868563][T11025] netlink: 4361 bytes leftover after parsing attributes in process `syz.2.1124'. [ 467.103996][T11033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1126'. [ 467.182296][T11039] FAULT_INJECTION: forcing a failure. [ 467.182296][T11039] name failslab, interval 1, probability 0, space 0, times 0 [ 467.243517][T11039] CPU: 0 UID: 0 PID: 11039 Comm: syz.3.1128 Tainted: G U L syzkaller #0 PREEMPT(full) [ 467.243549][T11039] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 467.243556][T11039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 467.243567][T11039] Call Trace: [ 467.243573][T11039] [ 467.243580][T11039] dump_stack_lvl+0x100/0x190 [ 467.243616][T11039] should_fail_ex.cold+0x5/0xa [ 467.243639][T11039] should_failslab+0xc2/0x120 [ 467.243658][T11039] __kmalloc_cache_noprof+0x7a/0x6f0 [ 467.243682][T11039] ? copy_ipcs+0x10d/0x7e0 [ 467.243705][T11039] copy_ipcs+0x10d/0x7e0 [ 467.243726][T11039] create_new_namespaces+0x20a/0xac0 [ 467.243749][T11039] ? security_capable+0x80/0x260 [ 467.243781][T11039] unshare_nsproxy_namespaces+0xf2/0x220 [ 467.243806][T11039] ksys_unshare+0x438/0xab0 [ 467.243833][T11039] ? __pfx_ksys_unshare+0x10/0x10 [ 467.243858][T11039] ? ksys_write+0x1ac/0x250 [ 467.243898][T11039] __x64_sys_unshare+0x31/0x40 [ 467.243923][T11039] do_syscall_64+0x10b/0xf80 [ 467.243946][T11039] ? clear_bhb_loop+0x40/0x90 [ 467.243968][T11039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.243987][T11039] RIP: 0033:0x7fd857f9c819 [ 467.244002][T11039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.244020][T11039] RSP: 002b:00007fd858f0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 467.244038][T11039] RAX: ffffffffffffffda RBX: 00007fd858215fa0 RCX: 00007fd857f9c819 [ 467.244050][T11039] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008100000 [ 467.244060][T11039] RBP: 00007fd858f0b090 R08: 0000000000000000 R09: 0000000000000000 [ 467.244071][T11039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.244082][T11039] R13: 00007fd858216038 R14: 00007fd858215fa0 R15: 00007ffd58c16848 [ 467.244104][T11039] [ 468.109126][T11047] FAULT_INJECTION: forcing a failure. [ 468.109126][T11047] name failslab, interval 1, probability 0, space 0, times 0 [ 468.159858][T11047] CPU: 0 UID: 0 PID: 11047 Comm: syz.4.1129 Tainted: G U L syzkaller #0 PREEMPT(full) [ 468.159892][T11047] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 468.159898][T11047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 468.159909][T11047] Call Trace: [ 468.159915][T11047] [ 468.159922][T11047] dump_stack_lvl+0x100/0x190 [ 468.159958][T11047] should_fail_ex.cold+0x5/0xa [ 468.159982][T11047] should_failslab+0xc2/0x120 [ 468.160001][T11047] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 468.160026][T11047] ? taskstats_exit+0x67b/0xc10 [ 468.160050][T11047] ? rcu_is_watching+0x12/0xc0 [ 468.160073][T11047] taskstats_exit+0x67b/0xc10 [ 468.160096][T11047] ? __pfx_acct_update_integrals+0x10/0x10 [ 468.160122][T11047] ? __pfx_taskstats_exit+0x10/0x10 [ 468.160147][T11047] ? rcu_read_lock_any_held+0x6a/0xa0 [ 468.160170][T11047] ? exit_signals+0x395/0xaf0 [ 468.160201][T11047] do_exit+0x65c/0x2a60 [ 468.160232][T11047] ? __pfx_do_exit+0x10/0x10 [ 468.160258][T11047] ? do_raw_spin_lock+0x128/0x260 [ 468.160276][T11047] ? find_held_lock+0x2b/0x80 [ 468.160298][T11047] ? get_signal+0x7e0/0x21e0 [ 468.160321][T11047] do_group_exit+0xd5/0x2a0 [ 468.160349][T11047] get_signal+0x1ec7/0x21e0 [ 468.160374][T11047] ? ksys_write+0x190/0x250 [ 468.160405][T11047] ? __pfx_get_signal+0x10/0x10 [ 468.160427][T11047] ? do_futex+0x192/0x350 [ 468.160448][T11047] arch_do_signal_or_restart+0x91/0x770 [ 468.160477][T11047] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 468.160511][T11047] ? __pfx___x64_sys_futex+0x10/0x10 [ 468.160529][T11047] ? rcu_is_watching+0x12/0xc0 [ 468.160551][T11047] exit_to_user_mode_loop+0x86/0x4a0 [ 468.160580][T11047] ? do_syscall_64+0x519/0xf80 [ 468.160604][T11047] do_syscall_64+0x6f2/0xf80 [ 468.160626][T11047] ? clear_bhb_loop+0x40/0x90 [ 468.160648][T11047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.160667][T11047] RIP: 0033:0x7fbbec59c819 [ 468.160683][T11047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.160701][T11047] RSP: 002b:00007fbbed4980e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 468.160719][T11047] RAX: fffffffffffffe00 RBX: 00007fbbec816098 RCX: 00007fbbec59c819 [ 468.160731][T11047] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbbec816098 [ 468.160742][T11047] RBP: 00007fbbec816090 R08: 0000000000000000 R09: 0000000000000000 [ 468.160752][T11047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.160763][T11047] R13: 00007fbbec816128 R14: 00007ffd31cdf880 R15: 00007ffd31cdf968 [ 468.160785][T11047] [ 470.135644][T11100] FAULT_INJECTION: forcing a failure. [ 470.135644][T11100] name failslab, interval 1, probability 0, space 0, times 0 [ 470.218738][T11100] CPU: 0 UID: 0 PID: 11100 Comm: syz.4.1139 Tainted: G U L syzkaller #0 PREEMPT(full) [ 470.218772][T11100] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 470.218779][T11100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 470.218790][T11100] Call Trace: [ 470.218796][T11100] [ 470.218803][T11100] dump_stack_lvl+0x100/0x190 [ 470.218846][T11100] should_fail_ex.cold+0x5/0xa [ 470.218870][T11100] ? usb_hcd_submit_urb+0x601/0x2150 [ 470.218896][T11100] should_failslab+0xc2/0x120 [ 470.218915][T11100] __kmalloc_noprof+0xe0/0x850 [ 470.218940][T11100] ? mark_held_locks+0x40/0x70 [ 470.218971][T11100] usb_hcd_submit_urb+0x601/0x2150 [ 470.219006][T11100] usb_submit_urb+0x8aa/0x1910 [ 470.219028][T11100] ? __init_swait_queue_head+0xca/0x150 [ 470.219050][T11100] usb_start_wait_urb+0x10e/0x580 [ 470.219070][T11100] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 470.219096][T11100] ? __asan_memset+0x23/0x50 [ 470.219123][T11100] usb_control_msg+0x328/0x4b0 [ 470.219143][T11100] ? __pfx_usb_control_msg+0x10/0x10 [ 470.219161][T11100] ? __lock_acquire+0x4a5/0x2630 [ 470.219193][T11100] hub_ext_port_status+0x152/0x600 [ 470.219231][T11100] hub_activate+0x6d8/0x1d50 [ 470.219255][T11100] ? __pfx_hub_activate+0x10/0x10 [ 470.219281][T11100] ? usb_generic_driver_resume+0x70/0xa0 [ 470.219299][T11100] ? usbdev_ioctl+0x2380/0x3aa0 [ 470.219340][T11100] hub_resume+0xb0/0x400 [ 470.219358][T11100] ? usb_hub_find_child+0x1d6/0x240 [ 470.219387][T11100] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 470.219413][T11100] ? __pfx_hub_resume+0x10/0x10 [ 470.219432][T11100] ? __pfx_hcd_bus_resume+0x10/0x10 [ 470.219464][T11100] usb_resume_interface.isra.0+0x2ce/0x3d0 [ 470.219492][T11100] usb_resume_both+0x53a/0x7f0 [ 470.219519][T11100] ? __pfx_usb_resume_both+0x10/0x10 [ 470.219542][T11100] ? __rpm_callback+0x272/0x620 [ 470.219562][T11100] ? __pfx_usb_runtime_resume+0x10/0x10 [ 470.219588][T11100] ? rcu_is_watching+0x12/0xc0 [ 470.219610][T11100] ? __pfx_usb_runtime_resume+0x10/0x10 [ 470.219638][T11100] __rpm_callback+0xc8/0x620 [ 470.219657][T11100] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 470.219683][T11100] ? __pfx_usb_runtime_resume+0x10/0x10 [ 470.219710][T11100] rpm_callback+0x16a/0x1b0 [ 470.219730][T11100] ? __pfx_usb_runtime_resume+0x10/0x10 [ 470.219762][T11100] rpm_resume+0xd22/0x1330 [ 470.219782][T11100] ? usbdev_open+0x1b6/0x870 [ 470.219813][T11100] ? __pfx_rpm_resume+0x10/0x10 [ 470.219832][T11100] ? do_raw_spin_lock+0x128/0x260 [ 470.219851][T11100] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 470.219872][T11100] ? _raw_spin_lock_irqsave+0x52/0x60 [ 470.219896][T11100] __pm_runtime_resume+0xb6/0x170 [ 470.219920][T11100] usb_autoresume_device+0x23/0xe0 [ 470.219948][T11100] usbdev_open+0x228/0x870 [ 470.219975][T11100] ? kobject_get_unless_zero+0x156/0x200 [ 470.220002][T11100] ? __pfx_usbdev_open+0x10/0x10 [ 470.220027][T11100] ? chrdev_open+0x10b/0x6a0 [ 470.220043][T11100] ? chrdev_open+0x10b/0x6a0 [ 470.220064][T11100] ? __pfx_usbdev_open+0x10/0x10 [ 470.220089][T11100] chrdev_open+0x234/0x6a0 [ 470.220106][T11100] ? __pfx_apparmor_file_open+0x10/0x10 [ 470.220126][T11100] ? __pfx_chrdev_open+0x10/0x10 [ 470.220145][T11100] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 470.220169][T11100] do_dentry_open+0x6d8/0x1660 [ 470.220185][T11100] ? __pfx_chrdev_open+0x10/0x10 [ 470.220208][T11100] vfs_open+0x82/0x3f0 [ 470.220232][T11100] path_openat+0x208c/0x31a0 [ 470.220257][T11100] ? __pfx_path_openat+0x10/0x10 [ 470.220289][T11100] do_file_open+0x20e/0x430 [ 470.220308][T11100] ? __pfx_do_file_open+0x10/0x10 [ 470.220342][T11100] ? alloc_fd+0x476/0x790 [ 470.220361][T11100] ? do_getname+0x191/0x390 [ 470.220385][T11100] do_sys_openat2+0x10d/0x1e0 [ 470.220407][T11100] ? __pfx_do_sys_openat2+0x10/0x10 [ 470.220432][T11100] ? __fget_files+0x21f/0x3d0 [ 470.220465][T11100] __x64_sys_openat+0x12d/0x210 [ 470.220489][T11100] ? __pfx___x64_sys_openat+0x10/0x10 [ 470.220517][T11100] ? rcu_is_watching+0x12/0xc0 [ 470.220540][T11100] do_syscall_64+0x10b/0xf80 [ 470.220563][T11100] ? clear_bhb_loop+0x40/0x90 [ 470.220586][T11100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.220604][T11100] RIP: 0033:0x7fbbec59c819 [ 470.220621][T11100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.220638][T11100] RSP: 002b:00007fbbed4b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 470.220656][T11100] RAX: ffffffffffffffda RBX: 00007fbbec815fa0 RCX: 00007fbbec59c819 [ 470.220668][T11100] RDX: 0000000000020882 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 470.220679][T11100] RBP: 00007fbbec632c91 R08: 0000000000000000 R09: 0000000000000000 [ 470.220689][T11100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 470.220700][T11100] R13: 00007fbbec816038 R14: 00007fbbec815fa0 R15: 00007ffd31cdf968 [ 470.220723][T11100] [ 470.758695][T11105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1140'. [ 471.195464][T11100] hub 37-0:1.0: hub_ext_port_status failed (err = -12) [ 471.395328][T11103] can: request_module (can-proto-5) failed. [ 472.033551][T11101] vivid-007: ================= START STATUS ================= [ 472.104375][T11101] vivid-007: Generate PTS: true [ 472.176926][T11101] vivid-007: Generate SCR: true [ 472.199707][T11101] tpg source WxH: 320x240 (Y'CbCr) [ 472.242735][T11101] tpg field: 1 [ 472.279398][T11101] tpg crop: (0,0)/320x240 [ 472.350271][T11101] tpg compose: (0,0)/320x240 [ 472.414018][T11101] tpg colorspace: 8 [ 472.455851][T11101] tpg transfer function: 0/0 [ 472.497697][T11101] tpg Y'CbCr encoding: 0/0 [ 472.537592][T11101] tpg quantization: 0/0 [ 472.574304][T11101] tpg RGB range: 0/2 [ 472.616249][T11101] vivid-007: ================== END STATUS ================== [ 473.519329][T11145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1146'. [ 475.125061][T11171] random: crng reseeded on system resumption [ 475.890475][T11197] FAULT_INJECTION: forcing a failure. [ 475.890475][T11197] name failslab, interval 1, probability 0, space 0, times 0 [ 475.943093][T11197] CPU: 0 UID: 0 PID: 11197 Comm: syz.3.1159 Tainted: G U L syzkaller #0 PREEMPT(full) [ 475.943127][T11197] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 475.943134][T11197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 475.943144][T11197] Call Trace: [ 475.943151][T11197] [ 475.943158][T11197] dump_stack_lvl+0x100/0x190 [ 475.943193][T11197] should_fail_ex.cold+0x5/0xa [ 475.943217][T11197] should_failslab+0xc2/0x120 [ 475.943235][T11197] __kmalloc_cache_noprof+0x7a/0x6f0 [ 475.943258][T11197] ? alloc_super+0x52/0xd20 [ 475.943296][T11197] alloc_super+0x52/0xd20 [ 475.943325][T11197] ? __pfx_mqueue_fill_super+0x10/0x10 [ 475.943358][T11197] sget_fc+0x117/0xc70 [ 475.943384][T11197] ? __pfx_set_anon_super_fc+0x10/0x10 [ 475.943411][T11197] ? __pfx_mqueue_fill_super+0x10/0x10 [ 475.943439][T11197] get_tree_nodev+0x28/0x190 [ 475.943468][T11197] mqueue_get_tree+0xf1/0x130 [ 475.943497][T11197] vfs_get_tree+0x92/0x320 [ 475.943522][T11197] fc_mount_longterm+0x1a/0x270 [ 475.943549][T11197] mq_init_ns+0x482/0x820 [ 475.943570][T11197] copy_ipcs+0x3dd/0x7e0 [ 475.943591][T11197] create_new_namespaces+0x20a/0xac0 [ 475.943614][T11197] ? security_capable+0x80/0x260 [ 475.943647][T11197] unshare_nsproxy_namespaces+0xf2/0x220 [ 475.943671][T11197] ksys_unshare+0x438/0xab0 [ 475.943698][T11197] ? __pfx_ksys_unshare+0x10/0x10 [ 475.943723][T11197] ? ksys_write+0x1ac/0x250 [ 475.943758][T11197] __x64_sys_unshare+0x31/0x40 [ 475.943783][T11197] do_syscall_64+0x10b/0xf80 [ 475.943806][T11197] ? clear_bhb_loop+0x40/0x90 [ 475.943828][T11197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.943847][T11197] RIP: 0033:0x7fd857f9c819 [ 475.943864][T11197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.943882][T11197] RSP: 002b:00007fd858f0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 475.943900][T11197] RAX: ffffffffffffffda RBX: 00007fd858215fa0 RCX: 00007fd857f9c819 [ 475.943911][T11197] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008100000 [ 475.943922][T11197] RBP: 00007fd858f0b090 R08: 0000000000000000 R09: 0000000000000000 [ 475.943933][T11197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.943943][T11197] R13: 00007fd858216038 R14: 00007fd858215fa0 R15: 00007ffd58c16848 [ 475.943966][T11197] [ 476.993571][T11214] ovs_: entered promiscuous mode [ 477.088568][T11217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1165'. [ 477.104042][T11217] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1165'. [ 477.262197][T11219] netlink: 326 bytes leftover after parsing attributes in process `syz.3.1166'. [ 477.968874][T11229] futex_wake_op: syz.1.1171 tries to shift op by -2048; fix this program [ 478.029653][T11229] 0x000000000001-0x000000020000 : "" [ 478.109566][T11229] ftl_cs: FTL header corrupt! [ 478.856540][ T30] audit: type=1326 audit(1843105826.539:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11254 comm="syz.1.1177" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9ac919c819 code=0x0 [ 480.815055][T11306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1187'. [ 481.140107][T11316] FAULT_INJECTION: forcing a failure. [ 481.140107][T11316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 481.215781][T11316] CPU: 0 UID: 0 PID: 11316 Comm: syz.2.1190 Tainted: G U L syzkaller #0 PREEMPT(full) [ 481.215814][T11316] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 481.215821][T11316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 481.215831][T11316] Call Trace: [ 481.215838][T11316] [ 481.215845][T11316] dump_stack_lvl+0x100/0x190 [ 481.215881][T11316] should_fail_ex.cold+0x5/0xa [ 481.215905][T11316] _copy_from_user+0x2e/0xd0 [ 481.215927][T11316] snd_seq_write+0x413/0x6d0 [ 481.215952][T11316] ? __pfx_snd_seq_write+0x10/0x10 [ 481.215974][T11316] ? bpf_lsm_file_permission+0x9/0x10 [ 481.216002][T11316] ? security_file_permission+0x76/0x210 [ 481.216027][T11316] ? rw_verify_area+0xce/0x6d0 [ 481.216054][T11316] vfs_write+0x2aa/0x1070 [ 481.216087][T11316] ? __pfx_snd_seq_write+0x10/0x10 [ 481.216109][T11316] ? __pfx_vfs_write+0x10/0x10 [ 481.216135][T11316] ? find_held_lock+0x2b/0x80 [ 481.216157][T11316] ? __fget_files+0x215/0x3d0 [ 481.216185][T11316] ? __fget_files+0x215/0x3d0 [ 481.216217][T11316] ? __fget_files+0x21f/0x3d0 [ 481.216252][T11316] ksys_write+0x1f8/0x250 [ 481.216281][T11316] ? __pfx_ksys_write+0x10/0x10 [ 481.216311][T11316] ? rcu_is_watching+0x12/0xc0 [ 481.216334][T11316] do_syscall_64+0x10b/0xf80 [ 481.216357][T11316] ? clear_bhb_loop+0x40/0x90 [ 481.216380][T11316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.216399][T11316] RIP: 0033:0x7fb57e99c819 [ 481.216414][T11316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.216456][T11316] RSP: 002b:00007fb57f8f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 481.216478][T11316] RAX: ffffffffffffffda RBX: 00007fb57ec15fa0 RCX: 00007fb57e99c819 [ 481.216490][T11316] RDX: 0000000000000038 RSI: 0000200000000000 RDI: 0000000000000003 [ 481.216501][T11316] RBP: 00007fb57f8f8090 R08: 0000000000000000 R09: 0000000000000000 [ 481.216512][T11316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.216538][T11316] R13: 00007fb57ec16038 R14: 00007fb57ec15fa0 R15: 00007ffcd65784e8 [ 481.216567][T11316] [ 482.723066][T11338] kafs: addr_prefs: Invalid Command [ 483.175242][T11342] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1196'. [ 483.283822][T11342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 483.339511][T11342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 483.448263][T11342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 483.717532][T11342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.376507][T11352] FAULT_INJECTION: forcing a failure. [ 484.376507][T11352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 484.441383][T11352] CPU: 0 UID: 0 PID: 11352 Comm: syz.2.1200 Tainted: G U L syzkaller #0 PREEMPT(full) [ 484.441416][T11352] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 484.441422][T11352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 484.441433][T11352] Call Trace: [ 484.441439][T11352] [ 484.441446][T11352] dump_stack_lvl+0x100/0x190 [ 484.441484][T11352] should_fail_ex.cold+0x5/0xa [ 484.441507][T11352] _copy_to_user+0x32/0xd0 [ 484.441530][T11352] simple_read_from_buffer+0xcb/0x170 [ 484.441561][T11352] proc_fail_nth_read+0x1af/0x230 [ 484.441586][T11352] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 484.441611][T11352] ? rw_verify_area+0xce/0x6d0 [ 484.441635][T11352] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 484.441664][T11352] vfs_read+0x1e4/0xb30 [ 484.441694][T11352] ? __pfx_vfs_read+0x10/0x10 [ 484.441722][T11352] ? __fget_files+0x215/0x3d0 [ 484.441756][T11352] ? __fget_files+0x21f/0x3d0 [ 484.441790][T11352] ksys_read+0x12a/0x250 [ 484.441818][T11352] ? __pfx_ksys_read+0x10/0x10 [ 484.441848][T11352] ? rcu_is_watching+0x12/0xc0 [ 484.441872][T11352] do_syscall_64+0x10b/0xf80 [ 484.441896][T11352] ? clear_bhb_loop+0x40/0x90 [ 484.441918][T11352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.441937][T11352] RIP: 0033:0x7fb57e95d04e [ 484.441952][T11352] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 484.441970][T11352] RSP: 002b:00007fb57f8f7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 484.441988][T11352] RAX: ffffffffffffffda RBX: 00007fb57f8f86c0 RCX: 00007fb57e95d04e [ 484.441999][T11352] RDX: 000000000000000f RSI: 00007fb57f8f80a0 RDI: 0000000000000004 [ 484.442010][T11352] RBP: 00007fb57f8f8090 R08: 0000000000000000 R09: 0000000000000000 [ 484.442021][T11352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.442032][T11352] R13: 00007fb57ec16038 R14: 00007fb57ec15fa0 R15: 00007ffcd65784e8 [ 484.442055][T11352] [ 485.134528][T11365] netlink: 4680 bytes leftover after parsing attributes in process `syz.3.1204'. [ 485.167615][T11365] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 485.361971][T11365] mkiss: ax0: crc mode is auto. [ 486.463708][T11391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1208'. [ 489.702735][T11442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1219'. [ 490.471961][T11458] futex_wake_op: syz.4.1222 tries to shift op by -2048; fix this program [ 490.518399][T11458] futex_wake_op: syz.4.1222 tries to shift op by -2048; fix this program [ 490.573873][T11458] 0x000000000001-0x000000020000 : "" [ 490.661676][T11458] ftl_cs: FTL header corrupt! [ 493.075397][T11499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1230'. [ 495.731432][ T30] audit: type=1800 audit(1843105843.410:27): pid=11527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1236" name="discovery_nqn" dev="configfs" ino=135268 res=0 errno=0 [ 497.725205][T11557] netlink: zone id is out of range [ 497.793519][T11557] netlink: zone id is out of range [ 497.996474][T11561] ovs_: entered promiscuous mode [ 498.064777][T11557] netlink: zone id is out of range [ 498.130873][T11566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1246'. [ 498.214120][T11562] netlink: zone id is out of range [ 498.282179][T11562] netlink: zone id is out of range [ 498.378405][T11562] netlink: zone id is out of range [ 498.444363][T11557] netlink: set zone limit has 8 unknown bytes [ 498.478376][T11562] netlink: zone id is out of range [ 498.541257][T11562] netlink: zone id is out of range [ 498.593869][T11562] netlink: zone id is out of range [ 500.038543][ T30] audit: type=1800 audit(1843105847.708:28): pid=11600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1254" name="file0" dev="tmpfs" ino=1694 res=0 errno=0 [ 500.292623][T11613] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1254'. [ 500.741170][T11607] ACPI: button: Initial lid state set to 'ignore' [ 501.884044][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.893721][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.015840][T11644] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1263'. [ 502.193258][T11644] veth0_vlan: entered allmulticast mode [ 503.064181][T11660] futex_wake_op: syz.1.1267 tries to shift op by -2048; fix this program [ 503.128768][T11660] 0x000000000001-0x000000020000 : "" [ 503.164251][T11660] ftl_cs: FTL header corrupt! [ 503.206702][T11662] futex_wake_op: syz.2.1268 tries to shift op by -2048; fix this program [ 503.304052][T11662] 0x000000000001-0x000000020000 : "" [ 503.352758][T11662] ftl_cs: FTL header corrupt! [ 503.856982][T11674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1270'. [ 505.197488][T11695] futex_wake_op: syz.1.1275 tries to shift op by -2048; fix this program [ 505.248959][T11697] 0x000000000001-0x000000020000 : "" [ 505.294379][T11697] ftl_cs: FTL header corrupt! [ 505.885418][ T8480] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 506.014561][T11707] futex_wake_op: syz.1.1277 tries to shift op by -2048; fix this program [ 506.539873][T11716] zswap: compressor not available [ 506.827791][T11727] random: crng reseeded on system resumption [ 507.612829][T11746] futex_wake_op: syz.2.1286 tries to shift op by -2048; fix this program [ 507.666513][T11750] 0x000000000001-0x000000020000 : "" [ 507.710388][T11750] ftl_cs: FTL header corrupt! [ 508.297865][T11769] netlink: 'syz.2.1291': attribute type 11 has an invalid length. [ 508.701580][T11785] FAULT_INJECTION: forcing a failure. [ 508.701580][T11785] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 508.806864][T11785] CPU: 0 UID: 0 PID: 11785 Comm: syz.4.1295 Tainted: G U L syzkaller #0 PREEMPT(full) [ 508.806898][T11785] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 508.806906][T11785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 508.806917][T11785] Call Trace: [ 508.806923][T11785] [ 508.806930][T11785] dump_stack_lvl+0x100/0x190 [ 508.806970][T11785] should_fail_ex.cold+0x5/0xa [ 508.806990][T11785] ? prepare_alloc_pages+0x16d/0x5f0 [ 508.807013][T11785] should_fail_alloc_page+0xeb/0x140 [ 508.807034][T11785] prepare_alloc_pages+0x1f0/0x5f0 [ 508.807057][T11785] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 508.807085][T11785] ? do_raw_spin_lock+0x128/0x260 [ 508.807106][T11785] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 508.807125][T11785] ? find_held_lock+0x2b/0x80 [ 508.807148][T11785] ? rcu_is_watching+0x12/0xc0 [ 508.807168][T11785] ? trace_hrtimer_start+0x79/0x230 [ 508.807190][T11785] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 508.807221][T11785] ? __lock_acquire+0x4a5/0x2630 [ 508.807257][T11785] ? lock_acquire+0x1b1/0x370 [ 508.807283][T11785] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 508.807309][T11785] ? policy_nodemask+0xed/0x4f0 [ 508.807328][T11785] alloc_pages_mpol+0x1fb/0x540 [ 508.807347][T11785] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 508.807367][T11785] ? __lock_acquire+0x4a5/0x2630 [ 508.807396][T11785] folio_alloc_mpol_noprof+0x36/0x260 [ 508.807419][T11785] vma_alloc_folio_noprof+0xed/0x1d0 [ 508.807440][T11785] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 508.807475][T11785] do_anonymous_page+0xb46/0x2050 [ 508.807500][T11785] ? rcu_read_unlock+0x2d/0xb0 [ 508.807530][T11785] __handle_mm_fault+0x1d2c/0x2a00 [ 508.807556][T11785] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 508.807578][T11785] ? __pfx___handle_mm_fault+0x10/0x10 [ 508.807603][T11785] ? pte_offset_map_lock+0x174/0x320 [ 508.807621][T11785] ? find_held_lock+0x2b/0x80 [ 508.807648][T11785] ? follow_page_pte+0x4d0/0x13f0 [ 508.807671][T11785] handle_mm_fault+0x36d/0xa20 [ 508.807700][T11785] __get_user_pages+0x1178/0x32a0 [ 508.807728][T11785] ? __pfx___get_user_pages+0x10/0x10 [ 508.807754][T11785] populate_vma_page_range+0x267/0x3f0 [ 508.807778][T11785] ? __pfx_populate_vma_page_range+0x10/0x10 [ 508.807799][T11785] ? __pfx_find_vma_intersection+0x10/0x10 [ 508.807818][T11785] ? do_mmap+0x93f/0x12f0 [ 508.807839][T11785] __mm_populate+0x107/0x3a0 [ 508.807861][T11785] ? __pfx___mm_populate+0x10/0x10 [ 508.807883][T11785] ? up_write+0x28c/0x4f0 [ 508.807903][T11785] vm_mmap_pgoff+0x37f/0x470 [ 508.807925][T11785] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 508.807946][T11785] ? do_futex+0x192/0x350 [ 508.807963][T11785] ? __pfx_do_futex+0x10/0x10 [ 508.807979][T11785] ? __pfx_do_sys_openat2+0x10/0x10 [ 508.808006][T11785] ksys_mmap_pgoff+0xe4/0x610 [ 508.808025][T11785] ? __x64_sys_futex+0x358/0x4d0 [ 508.808043][T11785] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 508.808061][T11785] ? xfd_validate_state+0x129/0x190 [ 508.808083][T11785] __x64_sys_mmap+0x125/0x190 [ 508.808105][T11785] do_syscall_64+0x10b/0xf80 [ 508.808127][T11785] ? clear_bhb_loop+0x40/0x90 [ 508.808149][T11785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.808167][T11785] RIP: 0033:0x7fbbec59c819 [ 508.808184][T11785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.808202][T11785] RSP: 002b:00007fbbed4b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 508.808221][T11785] RAX: ffffffffffffffda RBX: 00007fbbec815fa0 RCX: 00007fbbec59c819 [ 508.808233][T11785] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 508.808244][T11785] RBP: 00007fbbec632c91 R08: 0000000000000002 R09: 0000000800008000 [ 508.808255][T11785] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 508.808265][T11785] R13: 00007fbbec816038 R14: 00007fbbec815fa0 R15: 00007ffd31cdf968 [ 508.808288][T11785] [ 509.989306][T11796] futex_wake_op: syz.3.1299 tries to shift op by -2048; fix this program [ 510.022655][T11796] 0x000000000001-0x000000020000 : "" [ 510.066376][T11796] ftl_cs: FTL header corrupt! [ 510.238267][T11803] FAULT_INJECTION: forcing a failure. [ 510.238267][T11803] name fail_futex, interval 1, probability 0, space 0, times 0 [ 510.381193][T11803] CPU: 0 UID: 0 PID: 11803 Comm: syz.3.1301 Tainted: G U L syzkaller #0 PREEMPT(full) [ 510.381227][T11803] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 510.381234][T11803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 510.381244][T11803] Call Trace: [ 510.381250][T11803] [ 510.381257][T11803] dump_stack_lvl+0x100/0x190 [ 510.381293][T11803] should_fail_ex.cold+0x5/0xa [ 510.381317][T11803] get_futex_key+0x1d2/0x1510 [ 510.381349][T11803] ? __pfx_get_futex_key+0x10/0x10 [ 510.381376][T11803] ? futex_hash+0x2ad/0x370 [ 510.381405][T11803] ? futex_hash+0x141/0x370 [ 510.381436][T11803] futex_wake+0xea/0x530 [ 510.381458][T11803] ? __pfx_futex_wait+0x10/0x10 [ 510.381487][T11803] ? __pfx_futex_wake+0x10/0x10 [ 510.381510][T11803] ? find_held_lock+0x2b/0x80 [ 510.381532][T11803] ? alloc_fd+0x476/0x790 [ 510.381547][T11803] ? alloc_fd+0x476/0x790 [ 510.381566][T11803] do_futex+0x32b/0x350 [ 510.381584][T11803] ? __pfx_do_futex+0x10/0x10 [ 510.381607][T11803] __x64_sys_futex+0x34f/0x4d0 [ 510.381626][T11803] ? __do_sys_landlock_create_ruleset+0x2b2/0x4b0 [ 510.381646][T11803] ? __pfx___x64_sys_futex+0x10/0x10 [ 510.381668][T11803] ? rcu_is_watching+0x12/0xc0 [ 510.381691][T11803] do_syscall_64+0x10b/0xf80 [ 510.381714][T11803] ? clear_bhb_loop+0x40/0x90 [ 510.381736][T11803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.381755][T11803] RIP: 0033:0x7fd857f9c819 [ 510.381771][T11803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.381789][T11803] RSP: 002b:00007fd858f0b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 510.381807][T11803] RAX: ffffffffffffffda RBX: 00007fd858215fa8 RCX: 00007fd857f9c819 [ 510.381818][T11803] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd858215fac [ 510.381829][T11803] RBP: 00007fd858215fa0 R08: 0000000000000001 R09: 0000000000000000 [ 510.381840][T11803] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 510.381851][T11803] R13: 00007fd858216038 R14: 00007ffd58c16760 R15: 00007ffd58c16848 [ 510.381873][T11803] [ 511.226377][T11820] mkiss: ax0: crc mode is auto. [ 511.253135][T11823] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1303'. [ 511.534032][T11828] netlink: 146 bytes leftover after parsing attributes in process `syz.2.1308'. [ 512.094455][ T30] audit: type=1800 audit(1843105859.762:29): pid=11840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1310" name="dbroot" dev="configfs" ino=137574 res=0 errno=0 [ 512.116625][T11840] db_root: cannot open: /dev/audio1 [ 512.151842][T11840] db_root: not a directory: /dev/audio1 [ 512.293033][T11840] mkiss: ax0: crc mode is auto. [ 512.611322][T11849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1312'. [ 513.560987][ T8480] Bluetooth: hci1: Unexpected cc 0x7c89 with no status [ 513.595211][T11866] FAULT_INJECTION: forcing a failure. [ 513.595211][T11866] name failslab, interval 1, probability 0, space 0, times 0 [ 513.647829][T11866] CPU: 0 UID: 0 PID: 11866 Comm: syz.2.1318 Tainted: G U L syzkaller #0 PREEMPT(full) [ 513.647863][T11866] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 513.647870][T11866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 513.647882][T11866] Call Trace: [ 513.647888][T11866] [ 513.647895][T11866] dump_stack_lvl+0x100/0x190 [ 513.647932][T11866] should_fail_ex.cold+0x5/0xa [ 513.647955][T11866] should_failslab+0xc2/0x120 [ 513.647974][T11866] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 513.648003][T11866] ? cache_create_net+0x2b/0x1f0 [ 513.648028][T11866] ? __pfx_proc_create_data+0x10/0x10 [ 513.648052][T11866] kmemdup_noprof+0x29/0x60 [ 513.648081][T11866] cache_create_net+0x2b/0x1f0 [ 513.648109][T11866] nfsd_idmap_init+0x11f/0x250 [ 513.648136][T11866] ? __pfx_nfsd_net_init+0x10/0x10 [ 513.648163][T11866] nfsd_net_init+0x69/0x3d0 [ 513.648184][T11866] ? __pfx_nfsd_net_init+0x10/0x10 [ 513.648205][T11866] ops_init+0x1e2/0x5f0 [ 513.648234][T11866] setup_net+0x118/0x3a0 [ 513.648262][T11866] ? __pfx_setup_net+0x10/0x10 [ 513.648289][T11866] ? mutex_init_lockdep+0xf1/0x120 [ 513.648323][T11866] copy_net_ns+0x46f/0x7c0 [ 513.648341][T11866] create_new_namespaces+0x3ea/0xac0 [ 513.648369][T11866] unshare_nsproxy_namespaces+0xf2/0x220 [ 513.648394][T11866] ksys_unshare+0x438/0xab0 [ 513.648425][T11866] ? __pfx_ksys_unshare+0x10/0x10 [ 513.648449][T11866] ? xfd_validate_state+0x129/0x190 [ 513.648474][T11866] __x64_sys_unshare+0x31/0x40 [ 513.648498][T11866] do_syscall_64+0x10b/0xf80 [ 513.648521][T11866] ? clear_bhb_loop+0x40/0x90 [ 513.648543][T11866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.648562][T11866] RIP: 0033:0x7fb57e99c819 [ 513.648578][T11866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.648595][T11866] RSP: 002b:00007fb57f8f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 513.648613][T11866] RAX: ffffffffffffffda RBX: 00007fb57ec15fa0 RCX: 00007fb57e99c819 [ 513.648624][T11866] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 513.648635][T11866] RBP: 00007fb57ea32c91 R08: 0000000000000000 R09: 0000000000000000 [ 513.648645][T11866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.648656][T11866] R13: 00007fb57ec16038 R14: 00007fb57ec15fa0 R15: 00007ffcd65784e8 [ 513.648679][T11866] [ 514.191651][T11870] futex_wake_op: syz.1.1320 tries to shift op by -2048; fix this program [ 514.210097][T11870] 0x000000000001-0x000000020000 : "" [ 514.219733][T11870] ftl_cs: FTL header corrupt! [ 518.350350][T11954] Invalid ELF header magic: != ELF [ 524.714416][T12031] futex_wake_op: syz.3.1356 tries to shift op by -2048; fix this program [ 524.758288][T12031] 0x000000000001-0x000000020000 : "" [ 524.808462][T12031] ftl_cs: FTL header corrupt! [ 525.508409][T12039] futex_wake_op: syz.3.1358 tries to shift op by -2048; fix this program [ 525.568725][T12043] 0x000000000001-0x000000020000 : "" [ 525.644174][T12043] ftl_cs: FTL header corrupt! [ 525.898872][T12046] ERROR: Out of memory at tomoyo_memory_ok. [ 526.258478][T12051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1360'. [ 526.782257][T12062] syz.4.1364(12062): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 532.569659][T12178] futex_wake_op: syz.3.1391 tries to shift op by -2048; fix this program [ 532.612536][T12178] 0x000000000001-0x000000020000 : "" [ 532.648695][T12178] ftl_cs: FTL header corrupt! [ 532.874435][T12180] ERROR: Out of memory at tomoyo_memory_ok. [ 533.483994][T12194] netlink: 'syz.1.1397': attribute type 1 has an invalid length. [ 534.750886][T12191] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1396'. [ 534.870458][T12191] veth1_macvtap: left promiscuous mode [ 536.859737][T12248] tc_dump_action: action bad kind [ 537.011501][T12254] netlink: 186 bytes leftover after parsing attributes in process `syz.3.1409'. [ 538.312072][ T8480] Bluetooth: hci3: unexpected event 0x3e length: 358 > 260 [ 538.312109][ T8480] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 538.917112][ T8480] Bluetooth: hci1: unexpected event 0x3e length: 508 > 260 [ 538.917142][ T8480] Bluetooth: hci1: unexpected subevent 0x02 length: 507 > 260 [ 538.932461][ T8480] Bluetooth: hci1: Dropping invalid advertising data [ 538.942760][ T8480] Bluetooth: hci1: Dropping invalid advertising data [ 538.952358][ T8480] Bluetooth: hci1: Malformed LE Event: 0x02 [ 539.675223][T12291] can: request_module (can-proto-0) failed. [ 540.870949][T12300] netlink: 'syz.2.1420': attribute type 1 has an invalid length. [ 542.243012][T12333] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1429'. [ 542.276557][T12331] FAULT_INJECTION: forcing a failure. [ 542.276557][T12331] name failslab, interval 1, probability 0, space 0, times 0 [ 542.359961][T12331] CPU: 0 UID: 0 PID: 12331 Comm: syz.1.1428 Tainted: G U L syzkaller #0 PREEMPT(full) [ 542.359995][T12331] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 542.360002][T12331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 542.360012][T12331] Call Trace: [ 542.360018][T12331] [ 542.360026][T12331] dump_stack_lvl+0x100/0x190 [ 542.360070][T12331] should_fail_ex.cold+0x5/0xa [ 542.360093][T12331] ? net_alloc_generic+0x1e/0x70 [ 542.360121][T12331] should_failslab+0xc2/0x120 [ 542.360139][T12331] __kmalloc_noprof+0xe0/0x850 [ 542.360165][T12331] ? __pfx_copy_mnt_ns+0x10/0x10 [ 542.360189][T12331] net_alloc_generic+0x1e/0x70 [ 542.360216][T12331] copy_net_ns+0xc6/0x7c0 [ 542.360231][T12331] ? copy_cgroup_ns+0x71/0x970 [ 542.360260][T12331] create_new_namespaces+0x3ea/0xac0 [ 542.360287][T12331] unshare_nsproxy_namespaces+0xf2/0x220 [ 542.360311][T12331] ksys_unshare+0x438/0xab0 [ 542.360338][T12331] ? __pfx_ksys_unshare+0x10/0x10 [ 542.360362][T12331] ? xfd_validate_state+0x129/0x190 [ 542.360387][T12331] __x64_sys_unshare+0x31/0x40 [ 542.360411][T12331] do_syscall_64+0x10b/0xf80 [ 542.360433][T12331] ? clear_bhb_loop+0x40/0x90 [ 542.360454][T12331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.360473][T12331] RIP: 0033:0x7f9ac919c819 [ 542.360488][T12331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.360505][T12331] RSP: 002b:00007f9aca129028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 542.360523][T12331] RAX: ffffffffffffffda RBX: 00007f9ac9415fa0 RCX: 00007f9ac919c819 [ 542.360535][T12331] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 542.360545][T12331] RBP: 00007f9ac9232c91 R08: 0000000000000000 R09: 0000000000000000 [ 542.360555][T12331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 542.360566][T12331] R13: 00007f9ac9416038 R14: 00007f9ac9415fa0 R15: 00007ffd63504428 [ 542.360588][T12331] [ 542.908465][T12338] zswap: compressor not available [ 542.993731][T12351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1432'. [ 543.389680][T12353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1433'. [ 543.740274][T12369] netlink: 'syz.4.1436': attribute type 4 has an invalid length. [ 545.259432][T12415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1444'. [ 545.653804][T12418] zswap: compressor not available [ 546.011652][T12427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1447'. [ 547.431132][ T30] audit: type=1800 audit(1843124239.085:30): pid=12459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1453" name="dummy_udc" dev="gadgetfs" ino=7496 res=0 errno=0 [ 550.438877][T12492] netlink: 266 bytes leftover after parsing attributes in process `syz.2.1460'. [ 550.524253][T12492] IPv6: NLM_F_CREATE should be specified when creating new route [ 551.869107][ T8480] Bluetooth: hci1: Malformed LE Event: 0x0b [ 552.545210][T12540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1470'. [ 553.716635][T12553] futex_wake_op: syz.3.1474 tries to shift op by -2048; fix this program [ 553.739170][T12554] futex_wake_op: syz.4.1473 tries to shift op by -2048; fix this program [ 553.771594][T12553] 0x000000000001-0x000000020000 : "" [ 553.826878][T12553] ftl_cs: FTL header corrupt! [ 554.244377][T12559] ERROR: Out of memory at tomoyo_memory_ok. [ 556.073448][T12603] block2mtd: error: cannot open device ext4 [ 557.582717][ T8480] Bluetooth: hci2: unexpected event 0x14 length: 16 > 6 [ 558.256935][T12654] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1498'. [ 558.664733][T12664] FAULT_INJECTION: forcing a failure. [ 558.664733][T12664] name failslab, interval 1, probability 0, space 0, times 0 [ 558.805848][T12664] CPU: 0 UID: 0 PID: 12664 Comm: syz.2.1499 Tainted: G U L syzkaller #0 PREEMPT(full) [ 558.805880][T12664] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 558.805887][T12664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 558.805897][T12664] Call Trace: [ 558.805904][T12664] [ 558.805911][T12664] dump_stack_lvl+0x100/0x190 [ 558.805947][T12664] should_fail_ex.cold+0x5/0xa [ 558.805971][T12664] should_failslab+0xc2/0x120 [ 558.805989][T12664] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 558.806015][T12664] ? security_file_alloc+0x34/0x2c0 [ 558.806038][T12664] ? trace_kmem_cache_alloc+0xd5/0x100 [ 558.806069][T12664] security_file_alloc+0x34/0x2c0 [ 558.806093][T12664] init_file+0x95/0x480 [ 558.806114][T12664] alloc_empty_file+0x79/0x1c0 [ 558.806137][T12664] alloc_file_pseudo+0x13a/0x230 [ 558.806160][T12664] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 558.806183][T12664] ? alloc_fd+0x476/0x790 [ 558.806203][T12664] sock_alloc_file+0x50/0x210 [ 558.806237][T12664] __sys_socket+0x1c0/0x260 [ 558.806259][T12664] ? __pfx___sys_socket+0x10/0x10 [ 558.806286][T12664] __x64_sys_socket+0x72/0xb0 [ 558.806306][T12664] ? lockdep_hardirqs_on+0x78/0x100 [ 558.806329][T12664] do_syscall_64+0x10b/0xf80 [ 558.806351][T12664] ? clear_bhb_loop+0x40/0x90 [ 558.806373][T12664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.806392][T12664] RIP: 0033:0x7fb57e99c819 [ 558.806408][T12664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 558.806426][T12664] RSP: 002b:00007fb57f8b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 558.806444][T12664] RAX: ffffffffffffffda RBX: 00007fb57ec16180 RCX: 00007fb57e99c819 [ 558.806455][T12664] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000022 [ 558.806466][T12664] RBP: 00007fb57ea32c91 R08: 0000000000000000 R09: 0000000000000000 [ 558.806477][T12664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.806487][T12664] R13: 00007fb57ec16218 R14: 00007fb57ec16180 R15: 00007ffcd65784e8 [ 558.806510][T12664] [ 559.415664][ T30] audit: type=1800 audit(1843124251.019:31): pid=12669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1500" name="dbroot" dev="configfs" ino=142739 res=0 errno=0 [ 561.715855][T12708] Invalid ELF header magic: != ELF [ 562.185021][T12713] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1510'. [ 562.242741][T12713] team_slave_0: entered allmulticast mode [ 562.621951][ T30] audit: type=1800 audit(1843124254.277:32): pid=12705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1508" name="dbroot" dev="configfs" ino=142877 res=0 errno=0 [ 563.359114][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.368995][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.850257][T10152] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u10:20: bg 2: bad block bitmap checksum [ 563.915232][T10152] EXT4-fs (sda1): Delayed block allocation failed for inode 2026 at logical offset 7 with max blocks 1 with error 74 [ 564.080467][T10152] EXT4-fs (sda1): This should not happen!! Data will be lost [ 564.080467][T10152] [ 564.318288][T12745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1517'. [ 565.161643][T12761] FAULT_INJECTION: forcing a failure. [ 565.161643][T12761] name failslab, interval 1, probability 0, space 0, times 0 [ 565.330213][T12761] CPU: 0 UID: 0 PID: 12761 Comm: syz.4.1520 Tainted: G U L syzkaller #0 PREEMPT(full) [ 565.330246][T12761] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 565.330253][T12761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 565.330264][T12761] Call Trace: [ 565.330271][T12761] [ 565.330278][T12761] dump_stack_lvl+0x100/0x190 [ 565.330314][T12761] should_fail_ex.cold+0x5/0xa [ 565.330338][T12761] should_failslab+0xc2/0x120 [ 565.330357][T12761] __kmalloc_cache_noprof+0x7a/0x6f0 [ 565.330387][T12761] ? vkms_atomic_crtc_duplicate_state+0x7a/0x1e0 [ 565.330421][T12761] vkms_atomic_crtc_duplicate_state+0x7a/0x1e0 [ 565.330449][T12761] drm_atomic_get_crtc_state+0x1de/0x620 [ 565.330480][T12761] drm_atomic_get_plane_state+0x4a3/0x760 [ 565.330510][T12761] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 565.330531][T12761] ? rcu_is_watching+0x12/0xc0 [ 565.330555][T12761] ? __mutex_lock+0x26d/0x1b10 [ 565.330580][T12761] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 565.330602][T12761] ? drm_master_internal_acquire+0x21/0x80 [ 565.330642][T12761] drm_client_modeset_commit_locked+0x14d/0x580 [ 565.330667][T12761] drm_client_modeset_commit+0x4f/0x80 [ 565.330688][T12761] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 565.330722][T12761] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 565.330756][T12761] drm_fbdev_client_restore+0x1b/0x30 [ 565.330782][T12761] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 565.330808][T12761] drm_client_dev_restore+0x205/0x2a0 [ 565.330833][T12761] drm_release+0x2c6/0x360 [ 565.330851][T12761] ? __pfx_drm_release+0x10/0x10 [ 565.330868][T12761] __fput+0x3ff/0xb50 [ 565.330893][T12761] task_work_run+0x150/0x240 [ 565.330923][T12761] ? __pfx_task_work_run+0x10/0x10 [ 565.330953][T12761] ? rcu_is_watching+0x12/0xc0 [ 565.330976][T12761] exit_to_user_mode_loop+0x100/0x4a0 [ 565.331008][T12761] ? do_syscall_64+0x519/0xf80 [ 565.331033][T12761] do_syscall_64+0x6f2/0xf80 [ 565.331054][T12761] ? clear_bhb_loop+0x40/0x90 [ 565.331076][T12761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.331095][T12761] RIP: 0033:0x7fbbec59c819 [ 565.331111][T12761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.331128][T12761] RSP: 002b:00007fbbed4b9028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 565.331147][T12761] RAX: 0000000000000000 RBX: 00007fbbec815fa0 RCX: 00007fbbec59c819 [ 565.331158][T12761] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 565.331168][T12761] RBP: 00007fbbec632c91 R08: 0000000000000000 R09: 0000000000000000 [ 565.331178][T12761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 565.331189][T12761] R13: 00007fbbec816038 R14: 00007fbbec815fa0 R15: 00007ffd31cdf968 [ 565.331213][T12761] [ 567.762555][T12777] FAULT_INJECTION: forcing a failure. [ 567.762555][T12777] name failslab, interval 1, probability 0, space 0, times 0 [ 567.897578][T12777] CPU: 0 UID: 0 PID: 12777 Comm: syz.1.1523 Tainted: G U L syzkaller #0 PREEMPT(full) [ 567.897614][T12777] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 567.897620][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 567.897630][T12777] Call Trace: [ 567.897637][T12777] [ 567.897644][T12777] dump_stack_lvl+0x100/0x190 [ 567.897680][T12777] should_fail_ex.cold+0x5/0xa [ 567.897704][T12777] should_failslab+0xc2/0x120 [ 567.897723][T12777] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 567.897749][T12777] ? __anon_vma_prepare+0x344/0x5e0 [ 567.897777][T12777] __anon_vma_prepare+0x344/0x5e0 [ 567.897800][T12777] ? __filemap_get_folio_mpol+0x3ba/0xe70 [ 567.897832][T12777] __vmf_anon_prepare+0x11f/0x250 [ 567.897853][T12777] hugetlb_no_page+0xe2e/0x1980 [ 567.897882][T12777] hugetlb_fault+0x5e5/0x1410 [ 567.897907][T12777] ? __pfx_hugetlb_fault+0x10/0x10 [ 567.897937][T12777] ? find_vma+0xbf/0x140 [ 567.897953][T12777] ? __pfx_find_vma+0x10/0x10 [ 567.897972][T12777] handle_mm_fault+0x5f1/0xa20 [ 567.898001][T12777] do_user_addr_fault+0x74c/0x12f0 [ 567.898026][T12777] ? trace_page_fault_kernel+0x7a/0x200 [ 567.898048][T12777] exc_page_fault+0x6f/0xd0 [ 567.898071][T12777] asm_exc_page_fault+0x26/0x30 [ 567.898095][T12777] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 567.898126][T12777] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 567.898143][T12777] RSP: 0018:ffffc900041c7e48 EFLAGS: 00050212 [ 567.898159][T12777] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000010 [ 567.898170][T12777] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc900041c7ea0 [ 567.898181][T12777] RBP: 0000000000000010 R08: 0000000000000001 R09: fffff52000838fd5 [ 567.898192][T12777] R10: ffffc900041c7eaf R11: 0000000000000000 R12: 0000000000000000 [ 567.898202][T12777] R13: ffffc900041c7ea0 R14: 0000000000000000 R15: 00000000000000a0 [ 567.898225][T12777] _copy_from_user+0x98/0xd0 [ 567.898247][T12777] __x64_sys_setrlimit+0xc6/0x160 [ 567.898275][T12777] ? __pfx___x64_sys_setrlimit+0x10/0x10 [ 567.898305][T12777] ? rcu_is_watching+0x12/0xc0 [ 567.898328][T12777] do_syscall_64+0x10b/0xf80 [ 567.898349][T12777] ? clear_bhb_loop+0x40/0x90 [ 567.898371][T12777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.898391][T12777] RIP: 0033:0x7f9ac919c819 [ 567.898406][T12777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.898422][T12777] RSP: 002b:00007f9aca108028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a0 [ 567.898438][T12777] RAX: ffffffffffffffda RBX: 00007f9ac9416090 RCX: 00007f9ac919c819 [ 567.898449][T12777] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 567.898459][T12777] RBP: 00007f9ac9232c91 R08: 0000000000000000 R09: 0000000000000000 [ 567.898469][T12777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 567.898479][T12777] R13: 00007f9ac9416128 R14: 00007f9ac9416090 R15: 00007ffd63504428 [ 567.898502][T12777] [ 569.242105][T12811] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1530'. [ 569.761742][T12811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 569.915377][T12811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 569.942442][T12818] ima: policy update failed [ 569.955487][ T30] audit: type=1802 audit(1843124261.603:33): pid=12818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1533" res=0 errno=0 [ 569.987834][T12811] bond0 (unregistering): Released all slaves [ 570.106926][T12824] futex_wake_op: syz.2.1534 tries to shift op by -2048; fix this program [ 570.266115][T12825] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1534'. [ 570.642715][T12831] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1536'. [ 570.753288][T12831] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.763314][T12831] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.744547][T12844] futex_wake_op: syz.3.1538 tries to shift op by -2048; fix this program [ 571.814492][T12844] 0x000000000001-0x000000020000 : "" [ 571.866677][T12844] ftl_cs: FTL header corrupt! [ 572.073145][T12848] ERROR: Out of memory at tomoyo_memory_ok. [ 572.216756][T12856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1541'. [ 572.269615][T12857] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1541'. [ 573.924634][T12885] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1546'. [ 573.986044][T12889] net_ratelimit: 5 callbacks suppressed [ 573.986069][T12889] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 575.120797][T12901] futex_wake_op: syz.2.1552 tries to shift op by -2048; fix this program [ 575.167393][T12901] 0x000000000001-0x000000020000 : "" [ 575.210250][T12901] ftl_cs: FTL header corrupt! [ 575.443353][T12914] ERROR: Out of memory at tomoyo_memory_ok. [ 575.735912][T12917] Invalid ELF header magic: != ELF [ 575.775190][T12921] FAULT_INJECTION: forcing a failure. [ 575.775190][T12921] name failslab, interval 1, probability 0, space 0, times 0 [ 575.914565][T12921] CPU: 0 UID: 0 PID: 12921 Comm: syz.3.1555 Tainted: G U L syzkaller #0 PREEMPT(full) [ 575.914598][T12921] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 575.914604][T12921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 575.914614][T12921] Call Trace: [ 575.914621][T12921] [ 575.914628][T12921] dump_stack_lvl+0x100/0x190 [ 575.914663][T12921] should_fail_ex.cold+0x5/0xa [ 575.914686][T12921] should_failslab+0xc2/0x120 [ 575.914705][T12921] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 575.914731][T12921] ? sk_prot_alloc+0x60/0x2a0 [ 575.914747][T12921] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 575.914771][T12921] ? security_inode_alloc+0x3b/0x2c0 [ 575.914794][T12921] sk_prot_alloc+0x60/0x2a0 [ 575.914813][T12921] sk_alloc+0x36/0xe80 [ 575.914839][T12921] unix_create1+0xa6/0x700 [ 575.914859][T12921] unix_create+0x145/0x270 [ 575.914877][T12921] __sock_create+0x339/0x860 [ 575.914900][T12921] __sys_socketpair+0x1e4/0x5b0 [ 575.914923][T12921] ? __pfx___sys_socketpair+0x10/0x10 [ 575.914945][T12921] ? xfd_validate_state+0x129/0x190 [ 575.914969][T12921] __x64_sys_socketpair+0x96/0x100 [ 575.914998][T12921] ? lockdep_hardirqs_on+0x78/0x100 [ 575.915022][T12921] do_syscall_64+0x10b/0xf80 [ 575.915044][T12921] ? clear_bhb_loop+0x40/0x90 [ 575.915065][T12921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.915084][T12921] RIP: 0033:0x7fd857f9c819 [ 575.915099][T12921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.915117][T12921] RSP: 002b:00007fd858eea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 575.915136][T12921] RAX: ffffffffffffffda RBX: 00007fd858216090 RCX: 00007fd857f9c819 [ 575.915148][T12921] RDX: 8000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 575.915158][T12921] RBP: 00007fd858032c91 R08: 0000000000000000 R09: 0000000000000000 [ 575.915170][T12921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.915180][T12921] R13: 00007fd858216128 R14: 00007fd858216090 R15: 00007ffd58c16848 [ 575.915203][T12921] [ 578.525168][T12954] futex_wake_op: syz.3.1564 tries to shift op by -2048; fix this program [ 578.588580][T12956] 0x000000000001-0x000000020000 : "" [ 578.647098][T12956] ftl_cs: FTL header corrupt! [ 578.917878][T12958] ERROR: Out of memory at tomoyo_memory_ok. [ 579.325910][T12963] netlink: 'syz.3.1565': attribute type 11 has an invalid length. [ 580.846674][T12967] ERROR: Out of memory at tomoyo_memory_ok. [ 580.880600][T12967] ERROR: Domain ' /sbin/init /etc/init.d/rcS /etc/init.d/S50sshd /sbin/start-stop-daemon /usr/sbin/sshd /usr/libexec/sshd-session /bin/sh /root/syz-executor /root/syz-executor /newroot/425/file0' not defined. [ 581.080163][T12972] ERROR: Out of memory at tomoyo_memory_ok. [ 581.148252][T13003] futex_wake_op: syz.4.1574 tries to shift op by -2048; fix this program [ 581.158774][T13004] ERROR: Out of memory at tomoyo_memory_ok. [ 581.205409][T13003] futex_wake_op: syz.4.1574 tries to shift op by -2048; fix this program [ 581.287736][T13005] 0x000000000001-0x000000020000 : "" [ 581.364472][T13005] ftl_cs: FTL header corrupt! [ 581.619725][T13006] ERROR: Out of memory at tomoyo_memory_ok. [ 581.973448][T13013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1576'. [ 581.973661][T13014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1576'. [ 583.902129][T13025] zswap: compressor 000 not available [ 584.219267][T13037] FAULT_INJECTION: forcing a failure. [ 584.219267][T13037] name failslab, interval 1, probability 0, space 0, times 0 [ 584.276760][T13037] CPU: 0 UID: 0 PID: 13037 Comm: syz.1.1580 Tainted: G U L syzkaller #0 PREEMPT(full) [ 584.276794][T13037] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 584.276801][T13037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 584.276811][T13037] Call Trace: [ 584.276818][T13037] [ 584.276825][T13037] dump_stack_lvl+0x100/0x190 [ 584.276861][T13037] should_fail_ex.cold+0x5/0xa [ 584.276884][T13037] should_failslab+0xc2/0x120 [ 584.276903][T13037] __kmalloc_node_noprof+0xe6/0x850 [ 584.276929][T13037] ? alloc_slab_obj_exts+0xae/0x270 [ 584.276957][T13037] alloc_slab_obj_exts+0xae/0x270 [ 584.276990][T13037] __memcg_slab_post_alloc_hook+0x294/0xdf0 [ 584.277016][T13037] ? kasan_save_track+0x14/0x30 [ 584.277046][T13037] kmem_cache_alloc_noprof+0x58a/0x6e0 [ 584.277071][T13037] ? alloc_buffer_head+0x21/0x140 [ 584.277096][T13037] alloc_buffer_head+0x21/0x140 [ 584.277117][T13037] folio_alloc_buffers+0x274/0x820 [ 584.277147][T13037] create_empty_buffers+0x3a/0x660 [ 584.277177][T13037] folio_create_buffers+0x13b/0x1a0 [ 584.277203][T13037] __block_write_begin_int+0x393/0x19c0 [ 584.277231][T13037] ? filemap_add_folio+0x114/0x690 [ 584.277260][T13037] ? __pfx_filemap_add_folio+0x10/0x10 [ 584.277293][T13037] ? __pfx___block_write_begin_int+0x10/0x10 [ 584.277327][T13037] iomap_write_begin+0x1664/0x2340 [ 584.277352][T13037] ? fault_in_readable+0xde/0x190 [ 584.277382][T13037] ? fault_in_readable+0xde/0x190 [ 584.277411][T13037] ? __pfx_iomap_write_begin+0x10/0x10 [ 584.277428][T13037] ? fault_in_readable+0x14c/0x190 [ 584.277458][T13037] ? __pfx_fault_in_readable+0x10/0x10 [ 584.277487][T13037] ? rcu_is_watching+0x10/0xc0 [ 584.277507][T13037] ? I_BDEV+0xd/0x20 [ 584.277522][T13037] ? inode_to_bdi+0x9e/0x160 [ 584.277545][T13037] iomap_file_buffered_write+0x48b/0xac0 [ 584.277573][T13037] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 584.277597][T13037] ? inode_set_ctime_current+0x283/0x870 [ 584.277630][T13037] ? __mark_inode_dirty+0x55c/0x1720 [ 584.277656][T13037] ? __pfx_down_read+0x10/0x10 [ 584.277681][T13037] ? preempt_count_add+0x76/0x150 [ 584.277700][T13037] ? mnt_put_write_access_file+0x4e/0x100 [ 584.277730][T13037] ? file_update_time_flags+0x373/0x500 [ 584.277755][T13037] blkdev_write_iter+0x575/0xd70 [ 584.277789][T13037] vfs_write+0x6ac/0x1070 [ 584.277818][T13037] ? __pfx_blkdev_write_iter+0x10/0x10 [ 584.277845][T13037] ? __pfx_vfs_write+0x10/0x10 [ 584.277871][T13037] ? find_held_lock+0x2b/0x80 [ 584.277907][T13037] ksys_write+0x12a/0x250 [ 584.277936][T13037] ? __pfx_ksys_write+0x10/0x10 [ 584.277966][T13037] ? rcu_is_watching+0x12/0xc0 [ 584.277994][T13037] do_syscall_64+0x10b/0xf80 [ 584.278017][T13037] ? clear_bhb_loop+0x40/0x90 [ 584.278039][T13037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.278058][T13037] RIP: 0033:0x7f9ac919c819 [ 584.278074][T13037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.278091][T13037] RSP: 002b:00007f9aca129028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 584.278110][T13037] RAX: ffffffffffffffda RBX: 00007f9ac9415fa0 RCX: 00007f9ac919c819 [ 584.278121][T13037] RDX: 0000000080000000 RSI: 0000200000000000 RDI: 0000000000000002 [ 584.278132][T13037] RBP: 00007f9aca129090 R08: 0000000000000000 R09: 0000000000000000 [ 584.278143][T13037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.278153][T13037] R13: 00007f9ac9416038 R14: 00007f9ac9415fa0 R15: 00007ffd63504428 [ 584.278176][T13037] [ 586.015185][T13056] futex_wake_op: syz.3.1585 tries to shift op by -2048; fix this program [ 586.055973][T13056] futex_wake_op: syz.3.1585 tries to shift op by -2048; fix this program [ 586.090075][T13056] 0x000000000001-0x000000020000 : "" [ 586.125316][T13056] ftl_cs: FTL header corrupt! [ 586.401892][T13061] ERROR: Out of memory at tomoyo_memory_ok. [ 586.675345][ T8480] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 587.646432][T13101] futex_wake_op: syz.3.1599 tries to shift op by -2048; fix this program [ 587.726863][T13101] futex_wake_op: syz.3.1599 tries to shift op by -2048; fix this program [ 588.488565][T13119] bridge0: port 3(gretap0) entered blocking state [ 588.505301][T13119] bridge0: port 3(gretap0) entered disabled state [ 588.530703][T13119] gretap0: entered allmulticast mode [ 588.553027][T13124] FAULT_INJECTION: forcing a failure. [ 588.553027][T13124] name failslab, interval 1, probability 0, space 0, times 0 [ 588.568491][T13119] gretap0: entered promiscuous mode [ 588.581839][T13119] bridge0: port 3(gretap0) entered blocking state [ 588.588426][T13119] bridge0: port 3(gretap0) entered forwarding state [ 588.686538][T13124] CPU: 0 UID: 0 PID: 13124 Comm: syz.4.1602 Tainted: G U L syzkaller #0 PREEMPT(full) [ 588.686572][T13124] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 588.686580][T13124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 588.686591][T13124] Call Trace: [ 588.686598][T13124] [ 588.686605][T13124] dump_stack_lvl+0x100/0x190 [ 588.686640][T13124] should_fail_ex.cold+0x5/0xa [ 588.686662][T13124] ? sk_prot_alloc+0x10b/0x2a0 [ 588.686679][T13124] should_failslab+0xc2/0x120 [ 588.686697][T13124] __kmalloc_noprof+0xe0/0x850 [ 588.686727][T13124] sk_prot_alloc+0x10b/0x2a0 [ 588.686746][T13124] sk_alloc+0x36/0xe80 [ 588.686771][T13124] __netlink_create+0x5e/0x2c0 [ 588.686797][T13124] ? __wake_up+0x3f/0x60 [ 588.686822][T13124] netlink_create+0x298/0x610 [ 588.686848][T13124] ? __pfx_genl_bind+0x10/0x10 [ 588.686867][T13124] ? __pfx_genl_unbind+0x10/0x10 [ 588.686884][T13124] ? __pfx_genl_release+0x10/0x10 [ 588.686906][T13124] __sock_create+0x339/0x860 [ 588.686930][T13124] __sys_socket+0x14d/0x260 [ 588.686950][T13124] ? __pfx___sys_socket+0x10/0x10 [ 588.686977][T13124] __x64_sys_socket+0x72/0xb0 [ 588.686997][T13124] ? lockdep_hardirqs_on+0x78/0x100 [ 588.687019][T13124] do_syscall_64+0x10b/0xf80 [ 588.687040][T13124] ? clear_bhb_loop+0x40/0x90 [ 588.687061][T13124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.687080][T13124] RIP: 0033:0x7fbbec59c819 [ 588.687095][T13124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 588.687112][T13124] RSP: 002b:00007fbbed4b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 588.687135][T13124] RAX: ffffffffffffffda RBX: 00007fbbec815fa0 RCX: 00007fbbec59c819 [ 588.687147][T13124] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 588.687158][T13124] RBP: 00007fbbec632c91 R08: 0000000000000000 R09: 0000000000000000 [ 588.687169][T13124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 588.687179][T13124] R13: 00007fbbec816038 R14: 00007fbbec815fa0 R15: 00007ffd31cdf968 [ 588.687203][T13124] [ 593.039289][T13172] futex_wake_op: syz.3.1615 tries to shift op by -2048; fix this program [ 593.086845][T13172] 0x000000000001-0x000000020000 : "" [ 593.156543][T13172] ftl_cs: FTL header corrupt! [ 593.431394][T13186] ERROR: Out of memory at tomoyo_memory_ok. [ 595.371437][T13216] FAULT_INJECTION: forcing a failure. [ 595.371437][T13216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 595.468962][T13216] CPU: 0 UID: 0 PID: 13216 Comm: syz.2.1623 Tainted: G U L syzkaller #0 PREEMPT(full) [ 595.468995][T13216] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 595.469010][T13216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 595.469020][T13216] Call Trace: [ 595.469026][T13216] [ 595.469033][T13216] dump_stack_lvl+0x100/0x190 [ 595.469069][T13216] should_fail_ex.cold+0x5/0xa [ 595.469092][T13216] _copy_from_user+0x2e/0xd0 [ 595.469114][T13216] copy_msghdr_from_user+0x9f/0x4f0 [ 595.469137][T13216] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 595.469162][T13216] ? __pfx__kstrtoull+0x10/0x10 [ 595.469191][T13216] ___sys_sendmsg+0x106/0x1e0 [ 595.469213][T13216] ? __pfx____sys_sendmsg+0x10/0x10 [ 595.469244][T13216] ? find_held_lock+0x2b/0x80 [ 595.469279][T13216] __sys_sendmmsg+0x205/0x430 [ 595.469308][T13216] ? __pfx___sys_sendmmsg+0x10/0x10 [ 595.469342][T13216] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 595.469377][T13216] ? fput+0x79/0x100 [ 595.469396][T13216] ? ksys_write+0x1ac/0x250 [ 595.469424][T13216] ? __pfx_ksys_write+0x10/0x10 [ 595.469457][T13216] __x64_sys_sendmmsg+0x9c/0x100 [ 595.469487][T13216] ? lockdep_hardirqs_on+0x78/0x100 [ 595.469511][T13216] do_syscall_64+0x10b/0xf80 [ 595.469533][T13216] ? clear_bhb_loop+0x40/0x90 [ 595.469555][T13216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.469574][T13216] RIP: 0033:0x7fb57e99c819 [ 595.469590][T13216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 595.469607][T13216] RSP: 002b:00007fb57f8f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 595.469625][T13216] RAX: ffffffffffffffda RBX: 00007fb57ec15fa0 RCX: 00007fb57e99c819 [ 595.469637][T13216] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 595.469648][T13216] RBP: 00007fb57f8f8090 R08: 0000000000000000 R09: 0000000000000000 [ 595.469659][T13216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 595.469669][T13216] R13: 00007fb57ec16038 R14: 00007fb57ec15fa0 R15: 00007ffcd65784e8 [ 595.469692][T13216] [ 596.115199][T13224] cougar: G6 mapped to space [ 598.057061][T13248] bridge_slave_1: left allmulticast mode [ 598.105140][T13248] bridge_slave_1: left promiscuous mode [ 598.147843][T13248] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.306942][T13262] FAULT_INJECTION: forcing a failure. [ 599.306942][T13262] name failslab, interval 1, probability 0, space 0, times 0 [ 599.330160][T13260] futex_wake_op: syz.2.1633 tries to shift op by -2048; fix this program [ 599.354162][T13260] 0x000000000001-0x000000020000 : "" [ 599.407346][T13262] CPU: 0 UID: 0 PID: 13262 Comm: syz.1.1634 Tainted: G U L syzkaller #0 PREEMPT(full) [ 599.407380][T13262] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 599.407387][T13262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 599.407397][T13262] Call Trace: [ 599.407404][T13262] [ 599.407412][T13262] dump_stack_lvl+0x100/0x190 [ 599.407447][T13262] should_fail_ex.cold+0x5/0xa [ 599.407471][T13262] should_failslab+0xc2/0x120 [ 599.407490][T13262] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 599.407516][T13262] ? __anon_vma_prepare+0xae/0x5e0 [ 599.407543][T13262] ? __pfx_filemap_map_pages+0x10/0x10 [ 599.407569][T13262] __anon_vma_prepare+0xae/0x5e0 [ 599.407596][T13262] ? __pfx_filemap_map_pages+0x10/0x10 [ 599.407620][T13262] __vmf_anon_prepare+0x11f/0x250 [ 599.407641][T13262] do_fault+0x152/0x1750 [ 599.407660][T13262] ? __pmd_alloc+0x3fb/0x950 [ 599.407682][T13262] __handle_mm_fault+0x187d/0x2a00 [ 599.407710][T13262] ? mt_find+0x45e/0x8e0 [ 599.407735][T13262] ? __pfx___handle_mm_fault+0x10/0x10 [ 599.407758][T13262] ? __pfx_mt_find+0x10/0x10 [ 599.407800][T13262] handle_mm_fault+0x36d/0xa20 [ 599.407828][T13262] __get_user_pages+0x1178/0x32a0 [ 599.407856][T13262] ? __pfx___get_user_pages+0x10/0x10 [ 599.407886][T13262] populate_vma_page_range+0x267/0x3f0 [ 599.407909][T13262] ? __pfx_populate_vma_page_range+0x10/0x10 [ 599.407929][T13262] ? __pfx_find_vma_intersection+0x10/0x10 [ 599.407949][T13262] ? do_mmap+0x93f/0x12f0 [ 599.407971][T13262] __mm_populate+0x107/0x3a0 [ 599.408000][T13262] ? __pfx___mm_populate+0x10/0x10 [ 599.408023][T13262] ? up_write+0x28c/0x4f0 [ 599.408043][T13262] vm_mmap_pgoff+0x37f/0x470 [ 599.408066][T13262] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 599.408085][T13262] ? __fget_files+0x215/0x3d0 [ 599.408118][T13262] ? __fget_files+0x21f/0x3d0 [ 599.408150][T13262] ksys_mmap_pgoff+0x3cb/0x610 [ 599.408170][T13262] ? __x64_sys_futex+0x358/0x4d0 [ 599.408188][T13262] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 599.408205][T13262] ? xfd_validate_state+0x129/0x190 [ 599.408222][T13262] ? ksys_write+0x1ac/0x250 [ 599.408254][T13262] __x64_sys_mmap+0x125/0x190 [ 599.408275][T13262] do_syscall_64+0x10b/0xf80 [ 599.408296][T13262] ? clear_bhb_loop+0x40/0x90 [ 599.408319][T13262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.408337][T13262] RIP: 0033:0x7f9ac919c819 [ 599.408353][T13262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.408370][T13262] RSP: 002b:00007f9aca129028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 599.408388][T13262] RAX: ffffffffffffffda RBX: 00007f9ac9415fa0 RCX: 00007f9ac919c819 [ 599.408399][T13262] RDX: 0000000000000002 RSI: 0000000000000009 RDI: 0000000000000000 [ 599.408410][T13262] RBP: 00007f9ac9232c91 R08: 0000000000000003 R09: 0000000000008000 [ 599.408420][T13262] R10: 0000000000008012 R11: 0000000000000246 R12: 0000000000000000 [ 599.408430][T13262] R13: 00007f9ac9416038 R14: 00007f9ac9415fa0 R15: 00007ffd63504428 [ 599.408453][T13262] [ 599.824331][T13260] ftl_cs: FTL header corrupt! [ 599.924577][T13267] ERROR: Out of memory at tomoyo_memory_ok. [ 601.896389][T13304] futex_wake_op: syz.2.1644 tries to shift op by -2048; fix this program [ 601.936900][T13304] 0x000000000001-0x000000020000 : "" [ 601.981891][T13304] ftl_cs: FTL header corrupt! [ 602.105562][T13291] futex_wake_op: syz.3.1641 tries to shift op by -2048; fix this program [ 602.183587][T13308] ERROR: Out of memory at tomoyo_memory_ok. [ 602.221101][T13291] futex_wake_op: syz.3.1641 tries to shift op by -2048; fix this program [ 604.384153][T13348] zswap: compressor not available [ 604.757922][T13360] futex_wake_op: syz.2.1655 tries to shift op by -2048; fix this program [ 604.811011][T13360] 0x000000000001-0x000000020000 : "" [ 604.848852][T13360] ftl_cs: FTL header corrupt! [ 605.021061][T13363] ERROR: Out of memory at tomoyo_memory_ok. [ 605.387165][T13367] futex_wake_op: syz.2.1657 tries to shift op by -1; fix this program [ 605.736518][T13371] netlink: Invalid conntrack timeout [ 606.468404][T13381] netlink: zone id is out of range [ 606.502316][T13381] netlink: zone id is out of range [ 606.530967][T13381] netlink: zone id is out of range [ 606.589379][T13370] Process accounting resumed [ 606.608221][T13385] ovs_: entered promiscuous mode [ 606.671477][T13381] netlink: set zone limit has 8 unknown bytes [ 606.743641][T13385] netlink: zone id is out of range [ 606.763811][T13385] netlink: zone id is out of range [ 606.782012][T13385] netlink: zone id is out of range [ 606.792281][ T30] audit: type=1804 audit(1843124298.415:34): pid=13389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1663" name="/newroot/418/file0" dev="tmpfs" ino=2201 res=1 errno=0 [ 606.829280][T13385] netlink: zone id is out of range [ 606.852426][T13385] netlink: zone id is out of range [ 606.885583][ T30] audit: type=1804 audit(1843124298.445:35): pid=13389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1663" name="/newroot/418/file0" dev="tmpfs" ino=2201 res=1 errno=0 [ 608.231870][T13424] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81b1325a (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 608.247953][T13424] Call Trace: [ 608.251252][T13424] [ 608.254225][T13424] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 608.260937][T13424] mce_cpu_restart+0xd5/0x1f0 [ 608.265724][T13424] ? __pfx_mce_cpu_restart+0x10/0x10 [ 608.271041][T13424] smp_call_function_many_cond+0x1216/0x1500 [ 608.277043][T13424] ? __pfx_mce_cpu_restart+0x10/0x10 [ 608.282338][T13424] ? mark_held_locks+0x40/0x70 [ 608.287119][T13424] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 608.293022][T13424] ? lockdep_hardirqs_on+0x78/0x100 [ 608.298229][T13424] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 608.304048][T13424] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 608.310405][T13424] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 608.316418][T13424] ? __timer_delete_sync+0x151/0x1c0 [ 608.321714][T13424] ? __pfx_mce_cpu_restart+0x10/0x10 [ 608.327021][T13424] on_each_cpu_cond_mask+0x40/0x90 [ 608.332280][T13424] set_bank+0x240/0x3a0 [ 608.336454][T13424] ? __pfx_set_bank+0x10/0x10 [ 608.341169][T13424] ? find_held_lock+0x2b/0x80 [ 608.345871][T13424] ? sysfs_file_kobj+0xe4/0x290 [ 608.350743][T13424] ? sysfs_file_kobj+0xe4/0x290 [ 608.355626][T13424] ? __pfx_set_bank+0x10/0x10 [ 608.360316][T13424] dev_attr_store+0x58/0x80 [ 608.364843][T13424] ? __pfx_dev_attr_store+0x10/0x10 [ 608.370126][T13424] sysfs_kf_write+0xf2/0x150 [ 608.374763][T13424] kernfs_fop_write_iter+0x3e0/0x5f0 [ 608.380085][T13424] ? __pfx_sysfs_kf_write+0x10/0x10 [ 608.385581][T13424] vfs_write+0x6ac/0x1070 [ 608.390019][T13424] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 608.395944][T13424] ? __pfx_vfs_write+0x10/0x10 [ 608.400754][T13424] ksys_write+0x12a/0x250 [ 608.405098][T13424] ? __pfx_ksys_write+0x10/0x10 [ 608.409966][T13424] ? rcu_is_watching+0x12/0xc0 [ 608.414756][T13424] do_syscall_64+0x10b/0xf80 [ 608.419408][T13424] ? clear_bhb_loop+0x40/0x90 [ 608.424121][T13424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.430042][T13424] RIP: 0033:0x7f9ac919c819 [ 608.434471][T13424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 608.454203][T13424] RSP: 002b:00007f9aca108028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 608.462735][T13424] RAX: ffffffffffffffda RBX: 00007f9ac9416090 RCX: 00007f9ac919c819 [ 608.470722][T13424] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000006 [ 608.478725][T13424] RBP: 00007f9ac9232c91 R08: 0000000000000000 R09: 0000000000000000 [ 608.486714][T13424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 608.494728][T13424] R13: 00007f9ac9416128 R14: 00007f9ac9416090 R15: 00007ffd63504428 [ 608.502747][T13424] [ 610.587611][T13455] futex_wake_op: syz.4.1677 tries to shift op by -2048; fix this program [ 613.392780][T13501] misc userio: Invalid payload size [ 613.675424][T13518] futex_wake_op: syz.3.1690 tries to shift op by -2048; fix this program [ 615.098295][T13530] QAT: failed to copy from user cfg_data. [ 617.141799][T13561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1701'. [ 618.591464][ T8480] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 618.777529][T13590] futex_wake_op: syz.4.1704 tries to shift op by -2048; fix this program [ 620.983726][T13563] kexec: Could not allocate control_code_buffer [ 621.636079][T13638] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 621.935912][T13654] block2mtd: error: cannot open device [ 622.961427][T13673] block2mtd: illegal erase size [ 622.994385][T13673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1718'. [ 624.830578][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.840767][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.969149][T13718] ERROR: Out of memory at tomoyo_memory_ok. [ 629.148282][T13767] ERROR: Out of memory at tomoyo_memory_ok. [ 629.199789][T13767] FAULT_INJECTION: forcing a failure. [ 629.199789][T13767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 629.237509][T13764] input: jJǸ-9%vJ86 as /devices/virtual/input/input11 [ 629.290094][T13767] CPU: 0 UID: 0 PID: 13767 Comm: syz.2.1736 Tainted: G U L syzkaller #0 PREEMPT(full) [ 629.290128][T13767] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 629.290134][T13767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 629.290144][T13767] Call Trace: [ 629.290150][T13767] [ 629.290158][T13767] dump_stack_lvl+0x100/0x190 [ 629.290193][T13767] should_fail_ex.cold+0x5/0xa [ 629.290216][T13767] strncpy_from_user+0x3b/0x2d0 [ 629.290241][T13767] do_getname+0x78/0x390 [ 629.290265][T13767] do_sys_openat2+0xc5/0x1e0 [ 629.290288][T13767] ? __pfx_do_sys_openat2+0x10/0x10 [ 629.290318][T13767] __x64_sys_openat+0x12d/0x210 [ 629.290342][T13767] ? __pfx___x64_sys_openat+0x10/0x10 [ 629.290369][T13767] ? rcu_is_watching+0x12/0xc0 [ 629.290392][T13767] do_syscall_64+0x10b/0xf80 [ 629.290414][T13767] ? clear_bhb_loop+0x40/0x90 [ 629.290437][T13767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.290455][T13767] RIP: 0033:0x7fb57e99c819 [ 629.290471][T13767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 629.290489][T13767] RSP: 002b:00007fb57f8f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 629.290507][T13767] RAX: ffffffffffffffda RBX: 00007fb57ec15fa0 RCX: 00007fb57e99c819 [ 629.290518][T13767] RDX: 0000000000080802 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 629.290529][T13767] RBP: 00007fb57ea32c91 R08: 0000000000000000 R09: 0000000000000000 [ 629.290540][T13767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 629.290550][T13767] R13: 00007fb57ec16038 R14: 00007fb57ec15fa0 R15: 00007ffcd65784e8 [ 629.290573][T13767] [ 630.270083][T13780] FAULT_INJECTION: forcing a failure. [ 630.270083][T13780] name fail_futex, interval 1, probability 0, space 0, times 0 [ 630.289665][T13780] CPU: 0 UID: 0 PID: 13780 Comm: syz.3.1739 Tainted: G U L syzkaller #0 PREEMPT(full) [ 630.289698][T13780] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 630.289705][T13780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 630.289716][T13780] Call Trace: [ 630.289722][T13780] [ 630.289730][T13780] dump_stack_lvl+0x100/0x190 [ 630.289765][T13780] should_fail_ex.cold+0x5/0xa [ 630.289789][T13780] get_futex_key+0x295/0x1510 [ 630.289820][T13780] ? __pfx_get_futex_key+0x10/0x10 [ 630.289848][T13780] ? lock_acquire+0x1b1/0x370 [ 630.289883][T13780] futex_wake+0xea/0x530 [ 630.289906][T13780] ? __pfx_futex_wake+0x10/0x10 [ 630.289927][T13780] ? exit_mm_release+0x19/0x30 [ 630.289964][T13780] do_futex+0x32b/0x350 [ 630.289982][T13780] ? __pfx_do_futex+0x10/0x10 [ 630.289998][T13780] ? __might_fault+0xc5/0x140 [ 630.290038][T13780] mm_release+0x24a/0x2f0 [ 630.290059][T13780] do_exit+0x707/0x2a60 [ 630.290089][T13780] ? __pfx_do_exit+0x10/0x10 [ 630.290115][T13780] ? do_raw_spin_lock+0x128/0x260 [ 630.290134][T13780] ? find_held_lock+0x2b/0x80 [ 630.290155][T13780] ? get_signal+0x7e0/0x21e0 [ 630.290178][T13780] do_group_exit+0xd5/0x2a0 [ 630.290207][T13780] get_signal+0x1ec7/0x21e0 [ 630.290236][T13780] ? __pfx_get_signal+0x10/0x10 [ 630.290259][T13780] ? do_futex+0x192/0x350 [ 630.290278][T13780] arch_do_signal_or_restart+0x91/0x770 [ 630.290307][T13780] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 630.290340][T13780] ? __pfx___x64_sys_futex+0x10/0x10 [ 630.290359][T13780] ? rcu_is_watching+0x12/0xc0 [ 630.290382][T13780] exit_to_user_mode_loop+0x86/0x4a0 [ 630.290410][T13780] ? do_syscall_64+0x519/0xf80 [ 630.290435][T13780] do_syscall_64+0x6f2/0xf80 [ 630.290456][T13780] ? clear_bhb_loop+0x40/0x90 [ 630.290479][T13780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.290498][T13780] RIP: 0033:0x7fd857f9c819 [ 630.290513][T13780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 630.290532][T13780] RSP: 002b:00007fd858eea0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 630.290551][T13780] RAX: fffffffffffffe00 RBX: 00007fd858216098 RCX: 00007fd857f9c819 [ 630.290562][T13780] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd858216098 [ 630.290573][T13780] RBP: 00007fd858216090 R08: 0000000000000000 R09: 0000000000000000 [ 630.290584][T13780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 630.290595][T13780] R13: 00007fd858216128 R14: 00007ffd58c16760 R15: 00007ffd58c16848 [ 630.290617][T13780] [ 630.291248][T13782] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1737'. [ 630.637895][T13784] mkiss: ax0: crc mode is auto. [ 631.229834][T13791] delete_channel: no stack [ 631.633924][T13782] \: renamed from lo (while UP) [ 632.877973][T13799] kexec: Could not allocate control_code_buffer [ 633.951370][T13841] futex_wake_op: syz.4.1754 tries to shift op by -2048; fix this program [ 633.976250][T13844] futex_wake_op: syz.1.1755 tries to shift op by -2048; fix this program [ 634.010907][T13841] 0x000000000001-0x000000020000 : "" [ 634.067428][T13841] ftl_cs: FTL header corrupt! [ 634.097067][T13848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1756'. [ 634.302526][T13844] 0x000000000001-0x000000020000 : "" [ 634.385626][T13844] ftl_cs: FTL header corrupt! [ 634.468616][T13852] ERROR: Out of memory at tomoyo_memory_ok. [ 634.678340][T13854] ERROR: Out of memory at tomoyo_memory_ok. [ 634.728940][T13852] ERROR: Out of memory at tomoyo_memory_ok. [ 634.774982][T13854] ERROR: Out of memory at tomoyo_memory_ok. [ 635.675937][T13889] futex_wake_op: syz.2.1768 tries to shift op by -2048; fix this program [ 635.729141][T13890] zram: Removed device: zram0 [ 635.755774][T13889] 0x000000000001-0x000000020000 : "" [ 635.776353][T13889] ftl_cs: FTL header corrupt! [ 636.451684][T13893] ERROR: Out of memory at tomoyo_memory_ok. [ 636.704129][T13898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1769'. [ 636.761638][T13898] netlink: 'syz.3.1769': attribute type 1 has an invalid length. [ 636.819863][T13898] netlink: 'syz.3.1769': attribute type 6 has an invalid length. [ 636.924002][T13898] Process accounting paused [ 638.631231][T13938] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1779'. [ 639.430342][T13947] synth uevent: /devices/virtual/thermal/cooling_device0: unknown uevent action string [ 639.493931][T13947] thermal cooling_device0: uevent: failed to send synthetic uevent: -22 [ 639.532621][T13948] synth uevent: /devices/virtual/thermal/cooling_device0: unknown uevent action string [ 639.578404][T13948] thermal cooling_device0: uevent: failed to send synthetic uevent: -22 [ 639.823881][T13951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1781'. [ 640.542236][T13958] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1783'. [ 642.633087][T13993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1791'. [ 643.547687][T14007] netlink: 326 bytes leftover after parsing attributes in process `syz.4.1795'. [ 644.739634][T14030] FAULT_INJECTION: forcing a failure. [ 644.739634][T14030] name failslab, interval 1, probability 0, space 0, times 0 [ 644.782388][T14030] CPU: 0 UID: 0 PID: 14030 Comm: syz.3.1800 Tainted: G U L syzkaller #0 PREEMPT(full) [ 644.782422][T14030] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 644.782429][T14030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 644.782439][T14030] Call Trace: [ 644.782446][T14030] [ 644.782454][T14030] dump_stack_lvl+0x100/0x190 [ 644.782489][T14030] should_fail_ex.cold+0x5/0xa [ 644.782513][T14030] should_failslab+0xc2/0x120 [ 644.782531][T14030] __kmalloc_cache_noprof+0x7a/0x6f0 [ 644.782554][T14030] ? io_uring_alloc_task_context+0xa7/0x51f [ 644.782585][T14030] ? __lock_acquire+0x4a5/0x2630 [ 644.782617][T14030] io_uring_alloc_task_context+0xa7/0x51f [ 644.782650][T14030] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 644.782688][T14030] __io_uring_add_tctx_node.cold+0x15/0x171 [ 644.782721][T14030] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 644.782741][T14030] ? __fget_files+0x21f/0x3d0 [ 644.782775][T14030] __io_uring_add_tctx_node_from_submit+0x89/0x130 [ 644.782796][T14030] __do_sys_io_uring_enter+0x1656/0x1b50 [ 644.782825][T14030] ? __fget_files+0x21f/0x3d0 [ 644.782853][T14030] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 644.782881][T14030] ? fput+0x79/0x100 [ 644.782901][T14030] ? ksys_write+0x1ac/0x250 [ 644.782929][T14030] ? __pfx_ksys_write+0x10/0x10 [ 644.782964][T14030] ? rcu_is_watching+0x12/0xc0 [ 644.782988][T14030] do_syscall_64+0x10b/0xf80 [ 644.783011][T14030] ? clear_bhb_loop+0x40/0x90 [ 644.783033][T14030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.783053][T14030] RIP: 0033:0x7fd857f9c819 [ 644.783069][T14030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 644.783087][T14030] RSP: 002b:00007fd858eea028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 644.783105][T14030] RAX: ffffffffffffffda RBX: 00007fd858216090 RCX: 00007fd857f9c819 [ 644.783117][T14030] RDX: 00000000ffffffff RSI: 0000000000000004 RDI: 0000000000000003 [ 644.783128][T14030] RBP: 00007fd858eea090 R08: 0000000000000000 R09: 0000000000000002 [ 644.783138][T14030] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 644.783149][T14030] R13: 00007fd858216128 R14: 00007fd858216090 R15: 00007ffd58c16848 [ 644.783171][T14030] [ 645.581843][T14036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1802'. [ 647.576741][T14075] FAULT_INJECTION: forcing a failure. [ 647.576741][T14075] name failslab, interval 1, probability 0, space 0, times 0 [ 647.636408][T14075] CPU: 0 UID: 0 PID: 14075 Comm: syz.3.1813 Tainted: G U L syzkaller #0 PREEMPT(full) [ 647.636441][T14075] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 647.636449][T14075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 647.636460][T14075] Call Trace: [ 647.636467][T14075] [ 647.636474][T14075] dump_stack_lvl+0x100/0x190 [ 647.636511][T14075] should_fail_ex.cold+0x5/0xa [ 647.636535][T14075] should_failslab+0xc2/0x120 [ 647.636554][T14075] __kmalloc_cache_noprof+0x7a/0x6f0 [ 647.636577][T14075] ? io_wq_create+0x6a/0x9a0 [ 647.636599][T14075] ? lockdep_hardirqs_on+0x78/0x100 [ 647.636625][T14075] io_wq_create+0x6a/0x9a0 [ 647.636649][T14075] io_uring_alloc_task_context+0x2d9/0x51f [ 647.636688][T14075] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 647.636726][T14075] __io_uring_add_tctx_node.cold+0x15/0x171 [ 647.636759][T14075] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 647.636779][T14075] ? __fget_files+0x21f/0x3d0 [ 647.636812][T14075] __io_uring_add_tctx_node_from_submit+0x89/0x130 [ 647.636833][T14075] __do_sys_io_uring_enter+0x1656/0x1b50 [ 647.636862][T14075] ? __fget_files+0x21f/0x3d0 [ 647.636891][T14075] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 647.636919][T14075] ? fput+0x79/0x100 [ 647.636946][T14075] ? ksys_write+0x1ac/0x250 [ 647.636974][T14075] ? __pfx_ksys_write+0x10/0x10 [ 647.637004][T14075] ? rcu_is_watching+0x12/0xc0 [ 647.637027][T14075] do_syscall_64+0x10b/0xf80 [ 647.637049][T14075] ? clear_bhb_loop+0x40/0x90 [ 647.637072][T14075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.637091][T14075] RIP: 0033:0x7fd857f9c819 [ 647.637106][T14075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.637125][T14075] RSP: 002b:00007fd858eea028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 647.637144][T14075] RAX: ffffffffffffffda RBX: 00007fd858216090 RCX: 00007fd857f9c819 [ 647.637155][T14075] RDX: 00000000ffffffff RSI: 0000000000000004 RDI: 0000000000000003 [ 647.637166][T14075] RBP: 00007fd858eea090 R08: 0000000000000000 R09: 0000000000000002 [ 647.637177][T14075] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 647.637187][T14075] R13: 00007fd858216128 R14: 00007fd858216090 R15: 00007ffd58c16848 [ 647.637210][T14075] [ 649.232415][T14076] futex_wake_op: syz.4.1812 tries to shift op by -2048; fix this program [ 649.286764][T14076] 0x000000000001-0x000000020000 : "" [ 649.333949][T14076] ftl_cs: FTL header corrupt! [ 649.609054][T14093] ERROR: Out of memory at tomoyo_memory_ok. [ 650.068671][T14107] ERROR: Out of memory at tomoyo_memory_ok. [ 650.684287][T14116] zswap: compressor not available [ 651.163567][T14137] FAULT_INJECTION: forcing a failure. [ 651.163567][T14137] name failslab, interval 1, probability 0, space 0, times 0 [ 651.233622][T14137] CPU: 0 UID: 0 PID: 14137 Comm: syz.4.1823 Tainted: G U L syzkaller #0 PREEMPT(full) [ 651.233654][T14137] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 651.233661][T14137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 651.233671][T14137] Call Trace: [ 651.233677][T14137] [ 651.233684][T14137] dump_stack_lvl+0x100/0x190 [ 651.233720][T14137] should_fail_ex.cold+0x5/0xa [ 651.233744][T14137] should_failslab+0xc2/0x120 [ 651.233762][T14137] __kmalloc_cache_noprof+0x7a/0x6f0 [ 651.233785][T14137] ? __io_uring_add_tctx_node+0x1ac/0x4c0 [ 651.233808][T14137] __io_uring_add_tctx_node+0x1ac/0x4c0 [ 651.233828][T14137] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 651.233847][T14137] ? __fget_files+0x21f/0x3d0 [ 651.233880][T14137] __io_uring_add_tctx_node_from_submit+0x89/0x130 [ 651.233901][T14137] __do_sys_io_uring_enter+0x1656/0x1b50 [ 651.233930][T14137] ? __fget_files+0x21f/0x3d0 [ 651.233958][T14137] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 651.233987][T14137] ? xfd_validate_state+0x129/0x190 [ 651.234003][T14137] ? ksys_write+0x1ac/0x250 [ 651.234035][T14137] ? rcu_is_watching+0x12/0xc0 [ 651.234057][T14137] do_syscall_64+0x10b/0xf80 [ 651.234081][T14137] ? clear_bhb_loop+0x40/0x90 [ 651.234103][T14137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.234122][T14137] RIP: 0033:0x7fbbec59c819 [ 651.234137][T14137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.234155][T14137] RSP: 002b:00007fbbed498028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 651.234174][T14137] RAX: ffffffffffffffda RBX: 00007fbbec816090 RCX: 00007fbbec59c819 [ 651.234185][T14137] RDX: 00000000ffffffff RSI: 0000000000000004 RDI: 0000000000000003 [ 651.234196][T14137] RBP: 00007fbbed498090 R08: 0000000000000000 R09: 0000000000000002 [ 651.234207][T14137] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 651.234224][T14137] R13: 00007fbbec816128 R14: 00007fbbec816090 R15: 00007ffd31cdf968 [ 651.234246][T14137] [ 651.437478][T14137] ------------[ cut here ]------------ [ 651.443441][T14137] !test_bit(IO_WQ_BIT_EXIT, &wq->state) [ 651.443454][T14137] WARNING: io_uring/io-wq.c:1396 at io_wq_put_and_exit+0x8a7/0x9d0, CPU#0: syz.4.1823/14137 [ 651.459478][T14137] Modules linked in: [ 651.463575][T14137] CPU: 0 UID: 0 PID: 14137 Comm: syz.4.1823 Tainted: G U L syzkaller #0 PREEMPT(full) [ 651.474889][T14137] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 651.480246][T14137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 651.490909][T14137] RIP: 0010:io_wq_put_and_exit+0x8a7/0x9d0 [ 651.496901][T14137] Code: ff e8 9d 18 18 fd 44 0f b6 74 24 78 31 ff 44 89 f6 e8 dd 12 18 fd 45 84 f6 0f 85 1a fd ff ff e9 67 fd ff ff e8 7a 18 18 fd 90 <0f> 0b 90 e9 00 f8 ff ff e8 2c dc 83 fd e9 72 f8 ff ff 48 8b 3c 24 [ 651.516902][T14137] RSP: 0018:ffffc9000371fbd0 EFLAGS: 00010293 [ 651.522999][T14137] RAX: 0000000000000000 RBX: ffff88802da90000 RCX: ffffffff84effe06 [ 651.531394][T14137] RDX: ffff888031b65c40 RSI: ffffffff84f00606 RDI: ffff888031b65c40 [ 651.539809][T14137] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 651.548185][T14137] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff920006e3f9c [ 651.556685][T14137] R13: 0000000000000000 R14: ffff888031b665a8 R15: ffff888035747818 [ 651.564726][T14137] FS: 00007fbbed4986c0(0000) GS:ffff8881242fb000(0000) knlGS:0000000000000000 [ 651.573746][T14137] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 651.580387][T14137] CR2: 00007fbbec5e9f00 CR3: 000000005993e000 CR4: 00000000003526f0 [ 651.588403][T14137] Call Trace: [ 651.591689][T14137] [ 651.594621][T14137] ? dump_stack_lvl+0x17c/0x190 [ 651.599583][T14137] ? __pfx_io_wq_put_and_exit+0x10/0x10 [ 651.605239][T14137] ? rcu_is_watching+0x12/0xc0 [ 651.610023][T14137] ? trace_kmalloc+0xe3/0x110 [ 651.614733][T14137] ? __kmalloc_cache_noprof+0x298/0x6f0 [ 651.620329][T14137] ? __io_uring_add_tctx_node+0x1ac/0x4c0 [ 651.626088][T14137] __io_uring_add_tctx_node+0x3e8/0x4c0 [ 651.632188][T14137] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 651.638722][T14137] ? __fget_files+0x21f/0x3d0 [ 651.643447][T14137] __io_uring_add_tctx_node_from_submit+0x89/0x130 [ 651.650239][T14137] __do_sys_io_uring_enter+0x1656/0x1b50 [ 651.656105][T14137] ? __fget_files+0x21f/0x3d0 [ 651.660849][T14137] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 651.667122][T14137] ? xfd_validate_state+0x129/0x190 [ 651.672339][T14137] ? ksys_write+0x1ac/0x250 [ 651.677020][T14137] ? rcu_is_watching+0x12/0xc0 [ 651.681830][T14137] do_syscall_64+0x10b/0xf80 [ 651.686656][T14137] ? clear_bhb_loop+0x40/0x90 [ 651.691343][T14137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.697292][T14137] RIP: 0033:0x7fbbec59c819 [ 651.701742][T14137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.721477][T14137] RSP: 002b:00007fbbed498028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 651.730043][T14137] RAX: ffffffffffffffda RBX: 00007fbbec816090 RCX: 00007fbbec59c819 [ 651.738573][T14137] RDX: 00000000ffffffff RSI: 0000000000000004 RDI: 0000000000000003 [ 651.746787][T14137] RBP: 00007fbbed498090 R08: 0000000000000000 R09: 0000000000000002 [ 651.755030][T14137] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 651.763308][T14137] R13: 00007fbbec816128 R14: 00007fbbec816090 R15: 00007ffd31cdf968 [ 651.771359][T14137] [ 651.774387][T14137] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 651.781672][T14137] CPU: 0 UID: 0 PID: 14137 Comm: syz.4.1823 Tainted: G U L syzkaller #0 PREEMPT(full) [ 651.792698][T14137] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 651.797887][T14137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 651.807946][T14137] Call Trace: [ 651.811230][T14137] [ 651.814185][T14137] dump_stack_lvl+0x100/0x190 [ 651.818883][T14137] vpanic+0x552/0x970 [ 651.822885][T14137] ? __pfx_vpanic+0x10/0x10 [ 651.827501][T14137] panic+0xd1/0xe0 [ 651.831223][T14137] ? __pfx_panic+0x10/0x10 [ 651.835661][T14137] ? check_panic_on_warn+0x1f/0x90 [ 651.840895][T14137] check_panic_on_warn.cold+0x19/0x34 [ 651.846276][T14137] ? io_wq_put_and_exit+0x8a7/0x9d0 [ 651.851572][T14137] __warn.cold+0x191/0x328 [ 651.856006][T14137] __report_bug+0x296/0x3d0 [ 651.860527][T14137] ? io_wq_put_and_exit+0x8a7/0x9d0 [ 651.865732][T14137] ? __pfx___report_bug+0x10/0x10 [ 651.870765][T14137] ? _printk+0xcf/0x110 [ 651.874958][T14137] ? __pfx__printk+0x10/0x10 [ 651.879567][T14137] ? find_held_lock+0x2b/0x80 [ 651.884251][T14137] ? is_bpf_text_address+0x8a/0x1a0 [ 651.889455][T14137] ? bpf_ksym_find+0x124/0x1c0 [ 651.894224][T14137] ? io_wq_put_and_exit+0x8a7/0x9d0 [ 651.899441][T14137] report_bug+0xb2/0x220 [ 651.903688][T14137] ? io_wq_put_and_exit+0x8a7/0x9d0 [ 651.908892][T14137] handle_bug+0x16a/0x2a0 [ 651.913241][T14137] exc_invalid_op+0x17/0x50 [ 651.917760][T14137] asm_exc_invalid_op+0x1a/0x20 [ 651.922610][T14137] RIP: 0010:io_wq_put_and_exit+0x8a7/0x9d0 [ 651.928435][T14137] Code: ff e8 9d 18 18 fd 44 0f b6 74 24 78 31 ff 44 89 f6 e8 dd 12 18 fd 45 84 f6 0f 85 1a fd ff ff e9 67 fd ff ff e8 7a 18 18 fd 90 <0f> 0b 90 e9 00 f8 ff ff e8 2c dc 83 fd e9 72 f8 ff ff 48 8b 3c 24 [ 651.948044][T14137] RSP: 0018:ffffc9000371fbd0 EFLAGS: 00010293 [ 651.954115][T14137] RAX: 0000000000000000 RBX: ffff88802da90000 RCX: ffffffff84effe06 [ 651.962095][T14137] RDX: ffff888031b65c40 RSI: ffffffff84f00606 RDI: ffff888031b65c40 [ 651.970078][T14137] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 651.978135][T14137] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff920006e3f9c [ 651.986127][T14137] R13: 0000000000000000 R14: ffff888031b665a8 R15: ffff888035747818 [ 651.994118][T14137] ? io_wq_put_and_exit+0xa6/0x9d0 [ 651.999604][T14137] ? io_wq_put_and_exit+0x8a6/0x9d0 [ 652.004842][T14137] ? dump_stack_lvl+0x17c/0x190 [ 652.009715][T14137] ? __pfx_io_wq_put_and_exit+0x10/0x10 [ 652.015264][T14137] ? rcu_is_watching+0x12/0xc0 [ 652.020042][T14137] ? trace_kmalloc+0xe3/0x110 [ 652.024721][T14137] ? __kmalloc_cache_noprof+0x298/0x6f0 [ 652.030273][T14137] ? __io_uring_add_tctx_node+0x1ac/0x4c0 [ 652.035999][T14137] __io_uring_add_tctx_node+0x3e8/0x4c0 [ 652.041727][T14137] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 652.047810][T14137] ? __fget_files+0x21f/0x3d0 [ 652.052506][T14137] __io_uring_add_tctx_node_from_submit+0x89/0x130 [ 652.059114][T14137] __do_sys_io_uring_enter+0x1656/0x1b50 [ 652.064760][T14137] ? __fget_files+0x21f/0x3d0 [ 652.069455][T14137] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 652.075644][T14137] ? xfd_validate_state+0x129/0x190 [ 652.080949][T14137] ? ksys_write+0x1ac/0x250 [ 652.085471][T14137] ? rcu_is_watching+0x12/0xc0 [ 652.090242][T14137] do_syscall_64+0x10b/0xf80 [ 652.094849][T14137] ? clear_bhb_loop+0x40/0x90 [ 652.099541][T14137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.105435][T14137] RIP: 0033:0x7fbbec59c819 [ 652.109862][T14137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 652.129572][T14137] RSP: 002b:00007fbbed498028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 652.138097][T14137] RAX: ffffffffffffffda RBX: 00007fbbec816090 RCX: 00007fbbec59c819 [ 652.146079][T14137] RDX: 00000000ffffffff RSI: 0000000000000004 RDI: 0000000000000003 [ 652.154052][T14137] RBP: 00007fbbed498090 R08: 0000000000000000 R09: 0000000000000002 [ 652.162018][T14137] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 652.169992][T14137] R13: 00007fbbec816128 R14: 00007fbbec816090 R15: 00007ffd31cdf968 [ 652.177974][T14137] [ 652.181052][T14137] Kernel Offset: disabled [ 652.185390][T14137] Rebooting in 86400 seconds..