last executing test programs: 1m55.245699633s ago: executing program 2 (id=465): r0 = socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0xe883, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}}, 0x24004000) bpf$auto(0x3, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x8, 0x10035, 0x80208000008, 0x2, r0, 0x20000000000803}, 0x6f0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) recvfrom$auto(r0, &(0x7f0000000300)="2b6af907802a62440597d2de949fea4c7458c6db172c81f7b75094a9bdf7df6b732d49298c948aff0f41021d948e4f9e8ae5f21eef02e858406c0a42ecccc9799dc709affecbcf9f0a7c1290d620eca2b1d3c25b240c6a15cb8022393bfdc3951eddfbc4cfdd6bcdf2c02dc11546696b9e34a1ccf4d4ffd167f4928f1b9e3b706def39935343abc1fa95dd998ee82a7f497305", 0x5, 0xfff, &(0x7f0000000000)=@qipcrtr={0x2a, 0x0, 0x1}, &(0x7f0000000040)=0x7) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000003c0)='/proc/self/p\xb6/veth0_to_hsr\x00'/38, &(0x7f0000000440)={0xae, 0x1, "7b5f630f02980a355dcd3f82e7300ddd07288ef6c1cbcbb4b79294f92b9e4dc7a2858718b96f868121df9c247fdf02ff2b740cfe56a4c68e8e3f7bd79d0715e4b4837e6a3c58c1bba5c5ab1e2427eaff806b38856a00e57ecc0386f90a8decfe8cb0504bdac74436b1d0155baddbee6773c01ae6c37b7557def505612d8d6a7d6361a86764eebf2819c24149d752e3d5771c8b75e561acd7c1533efa685bcbea8a4ff6ea66d25023e0013e8e6a07"}, &(0x7f0000000480), 0x200) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1m55.193381465s ago: executing program 2 (id=466): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bpq1/flags\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000001140), r3) sendmsg$auto_WG_CMD_SET_DEVICE(r3, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000002900)={0x30, r4, 0x21, 0x70bd27, 0x25dfdc00, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}}, 0xc0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@HWSIM_ATTR_MULTI_RADIO={0x4}, @HWSIM_ATTR_CHANNELS={0x8, 0x9, 0x10000}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r5 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x49402, 0x0) read$auto(r5, 0x0, 0x9a28) ioctl$auto_BLKRRPART(r5, 0x125f, 0x0) setuid$auto(0xe) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000002100), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_DISCONNECT(r6, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000000000)={0x14, r7, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20044800}, 0x4000) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket(0x10, 0x4, 0x6) read$auto_proc_fail_nth_operations_base(0xffffffffffffffff, 0x0, 0x0) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) 1m54.978536444s ago: executing program 2 (id=469): prctl$auto(0x5, 0x80000000, 0x0, 0x78, 0x8) bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e}, 0x1) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) umount2$auto(&(0x7f0000000180)='/proc/bus/pci/00/01.3\x00', 0x1) mmap$auto(0x0, 0x400008, 0x36, 0x1009b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x200400, 0x0) close_range$auto(0x0, r0, 0xffffffff) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x0) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.7/usb8/configuration\x00', 0x10b800, 0x0) prctl$auto_PR_MCE_KILL_GET(0x22, 0x8, 0x0, 0xfff, 0x9) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x100, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r1, 0x4601, 0x0) socket(0xa, 0x2, 0x3a) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D1c\x00', 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x0, 0x2, 0x20000000000000, 0x1, 0x8, 0x300000000000000, 0x80000001, 0x7, 0x4d40, 0x5, 0x2]}, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x409, 0x5, 0xffffffff, 0x0) socket(0x2, 0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_udc.1/udc/dummy_udc.1/uevent\x00', 0x40000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)=""/195, 0xc3) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 1m53.967300052s ago: executing program 2 (id=475): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x5, 0x25dfdbfd, {0x0, 0x0, 0xffff}, [@GTPA_I_TEI={0x8, 0x8, 0x5}, @GTPA_LINK={0x8, 0x1, 0x6551e4e0}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x14) 1m53.852107908s ago: executing program 2 (id=476): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = socket(0x1e, 0x805, 0x0) sendmsg$auto_IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf252b000000050013051475945474cf6858762d7e0581af000c0000000c0009007400000000000089f99222f76787f000f980bb91a86bbae84bea0126350a0a4a4654fbbd5d7c83b3ae6dedbb6be93bec4d9708fbe502b20963571c0b24675e1dd6fd7c9de58e508d438abc3d042b2c8a591c80f72956e6d90074d70af2169ad8e4d93a068bfb2373f09fa1cc9124077eeabf1839f0359eb8f784051fc8715548563bf7"], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x50) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000080), r0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="90030000", @ANYRES16=r1, @ANYBLOB="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"], 0x390}, 0x1, 0x0, 0x0, 0x800}, 0x1) r2 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D1p\x00', 0x10000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto_SO_SELECT_ERR_QUEUE(r2, 0x80, 0x2d, &(0x7f00000004c0)='\x00', 0xfffffffc) mmap$auto(0x0, 0x40000000005, 0x2, 0x40eb2, r0, 0x2ffffffffffd) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e) ioctl$sock_SIOCGIFINDEX(r3, 0x401c5820, 0x0) link$auto(&(0x7f0000003240)='./file0\x00', 0x0) setreuid$auto(0x0, 0xee00) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event2\x00', 0x143203, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x14, r5, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004055}, 0x400c0c0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) fstat$auto(0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x2, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) 1m53.615393629s ago: executing program 2 (id=479): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bpq1/flags\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000001140), r3) sendmsg$auto_WG_CMD_SET_DEVICE(r3, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000002900)={0x30, r4, 0x21, 0x70bd27, 0x25dfdc00, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}}, 0xc0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@HWSIM_ATTR_MULTI_RADIO={0x4}, @HWSIM_ATTR_CHANNELS={0x8, 0x9, 0x10000}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r5 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x49402, 0x0) read$auto(r5, 0x0, 0x9a28) ioctl$auto_BLKRRPART(r5, 0x125f, 0x0) setuid$auto(0xe) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000002100), 0xffffffffffffffff) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket(0x10, 0x4, 0x6) read$auto_proc_fail_nth_operations_base(r6, 0x0, 0x0) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) 1m38.497664144s ago: executing program 32 (id=479): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bpq1/flags\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000001140), r3) sendmsg$auto_WG_CMD_SET_DEVICE(r3, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000002900)={0x30, r4, 0x21, 0x70bd27, 0x25dfdc00, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}}, 0xc0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@HWSIM_ATTR_MULTI_RADIO={0x4}, @HWSIM_ATTR_CHANNELS={0x8, 0x9, 0x10000}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r5 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x49402, 0x0) read$auto(r5, 0x0, 0x9a28) ioctl$auto_BLKRRPART(r5, 0x125f, 0x0) setuid$auto(0xe) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000002100), 0xffffffffffffffff) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket(0x10, 0x4, 0x6) read$auto_proc_fail_nth_operations_base(r6, 0x0, 0x0) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) 9.400757012s ago: executing program 1 (id=1035): mmap$auto(0x6, 0x2020009, 0x3, 0x9000000eb1, 0xffffffffffffffff, 0x2) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mpls/platform_labels\x00', 0x202, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/wg0/unres_qlen\x00', 0x20202, 0x0) sendfile$auto(r0, r1, 0x0, 0x3) (fail_nth: 4) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000580)={{@inferred, 0xf0ee, 0x20009, 0x3, "790eb700ffff8eac2cdab25160860043eeb0b053030001ffff000e00"}, 0x4, 0x966, 0x3, @inferred, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) getrlimit$auto(0x3, 0x0) r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) ioctl$auto_FS_IOC_FSSETXATTR(r3, 0x401c5820, 0x100000000) ioctl$auto_EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/set_event\x00', 0x121000, 0x0) 8.471336059s ago: executing program 1 (id=1038): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv6/neigh/virt_wifi0/unres_qlen_bytes\x00', 0x4001, 0x0) socket(0xa, 0x5, 0x0) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) r0 = socket(0x1, 0x80000, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) connect$auto(r0, &(0x7f0000000080)=@generic={0xa, "509235679a5532c63bacddae0710"}, 0x54) write$auto(0xffffffffffffffff, 0x0, 0x6) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video43\x00', 0x24840, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) rt_sigtimedwait$auto(&(0x7f00000010c0)={0x2dda}, &(0x7f00000011c0)={@siginfo_0_0={0x3, 0x10001, 0x18, @_sigsys={&(0x7f0000001100)="b8b596e2b833f004e2b356f49dd9b4b4519cb39912e1267c3d4e9b764015e94859ecc3802c0ad16152e8eb033bcde2594d4268bb4537e6b99eea8cddd953e044c067ebbfb4e02de3f99f3c6b55bea2971d10651e8ef9379ccdb5f2f806daa1370329b78e1f5b648ff59282bd918933e78b2fbe6e5780b63fb16d8fcc8ed6f706f4ef0ccca231a9a7d01c390b80be336cdd7c39fd589bd25f6127e8369efe77641fd354fc20d637416ee5cbc0f1972ff5476cbb7cf338b36a8982dade5c7594", 0x7, 0x4}}}, &(0x7f0000001240)={0x0, 0x7fffffffffffffff}, 0x8) write$auto(r1, 0x0, 0x80000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(r2, r2, 0x0, 0x7ffff003) vmsplice$auto(0x2, &(0x7f00000000c0)={0x0, 0x7ff}, 0x8000000000000001, 0x0) write$auto(0x1, 0x0, 0x80000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/cpu/vulnerabilities/retbleed\x00', 0x101000, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x28641, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x200, 0x0) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x5f166916f50fb718, 0x0) socket(0xa, 0x5, 0x0) socket(0xa, 0x3, 0xff) socket$nl_generic(0x10, 0x3, 0x10) 7.387206712s ago: executing program 1 (id=1046): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000164c0), 0xffffffffffffffff) socket(0x2, 0x80002, 0x73) (async) socket(0xf, 0x6, 0x40) (async) socket(0x2, 0x2, 0x0) (async) setsockopt$auto(0x4, 0x0, 0x480, 0xfffffffffffffffe, 0x0) (async, rerun: 64) sendmsg$auto_NL80211_CMD_GET_SCAN(r0, &(0x7f00000165c0)={0x0, 0x0, &(0x7f0000016580)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="79a327bd7000fbdbdf642000009b02000f00"], 0x18}, 0x1, 0x0, 0x0, 0x2404c000}, 0x0) (rerun: 64) 6.762514401s ago: executing program 1 (id=1048): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x1) io_uring_setup$auto(0x2, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, 0x0, 0x55) io_uring_setup$auto(0x6, 0x0) write$auto(0x3, 0x0, 0xfdef) io_uring_setup$auto(0x62e, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x400000003) shmctl$auto_SHM_INFO(0xc, 0xe, &(0x7f0000000180)={{0x9, 0xee01, 0xee00, 0x7, 0x1, 0x80000000, 0x8}, 0x4, 0x6, 0x2, 0x5, @raw, @raw=0x7, 0x5, 0x0, &(0x7f0000000240)="667be35c1cb9804024aa71536648bd81f695754b779a835d39b6026590e4c765bbefc443cedf0281ea1cd1321563d919f2d1d41fd116c1754fb0167b36fb6a7508ec26ad3ddbbe8561f2b76c0ce54819e205f1ad2589bdb9962e03d06f04670ace7f79d54d9d14007d773ef26b1499a52be3caf3a1bfa83ea01b06da97b7526cd0056ed91da8cdb15e9ae6937894f2733d627b198c5dc3c2990deb1729e7f35cb250113dc616e49e9a7d6292db4dbb8b5299ae6686dc098750ca6c01042b5e7e8ba4e0f0c3eb4627ec105b8565cfe8d263348a87ebd2daf5000000000000000000", &(0x7f0000000340)="d14f34c8480b1a3140a0eec2a15d1057b0e2d2477f2e6fe3831856b84e8ee533db6d5a0fe86d84b8a969f9cd077e01612feff57ba94853d5ef01561b6bf876d7698541ddd353edc529b0839d0744e4ddb851da86885ded3701ba52ed99a7b456b9b09026c4a9cbe97204997fa934e169fdd199c3d8822cb81010142ee39765ca21be2c261ce1166db8509b71aca9e06da2ff379e649ef85eb73b53e50fad733235a697b43b5d77414562d05e48e36c8829830a6b13ae2d7e0241cf83ca9db1aa7f76b3c11e1c168958a11aa476ab6875756318c426ae037dd2767a1c9344e1a8"}) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x0) clock_adjtime$auto(0x0, &(0x7f0000000040)={0xfbd, 0x0, 0x7f, 0xfffffffff7fffffe, 0x800, 0x4, 0x100007, 0x0, 0xff, 0xf, 0x7ffffffc, {0x3ff, 0x7}, 0x100000000, 0x1, 0xa, 0x13c, 0x0, 0xc3, 0x7, 0x2, 0x6, 0x800090, 0x6}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbf4250200080008000300000000001b0004"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0d566b3dd008e4edd9650200000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0xffffffffffffffff, 0x9}, 0x7}, 0x3, 0x0) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) r4 = fcntl$auto_F_GETOWN(r3, 0x9, 0xea6) bpf$auto_BPF_LINK_CREATE(0x1c, &(0x7f0000000300)=@task_fd_query={r4, r3, 0x6, 0xa, 0x5, 0x5, r2, 0x3, 0xffff}, 0x19) r5 = setfsgid$auto(0xee01) setresgid$auto(r5, 0x0, 0x0) 6.594863754s ago: executing program 1 (id=1049): r0 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000280)='/dev/psaux\x00', 0x2082, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/boot_params/version\x00', 0x80000, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x7fffeffe, 0x0, 0x1, 0x0, 0x4, 0x2}, 0x20000007}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) adjtimex$auto(&(0x7f0000000400)={0x3ffa34bb, 0x0, 0xfffffffffffffff8, 0x5, 0x3, 0x9, 0x26ab, 0x0, 0xc63, 0xa, 0x0, {0x7, 0x3}, 0x10, 0x1, 0xffffffffffffffff, 0x8, 0x0, 0x5, 0x8, 0x8001, 0x51b, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/lockdep\x00', 0x5c5b04, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400000020009, 0x10000000000df, 0xeb2, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = bpf$auto(0x0, &(0x7f0000000100)=@link_create={@map_fd=r0, @target_fd=r0, 0x4, 0xb, @perf_event={0x8325}}, 0x4) r3 = io_uring_setup$auto(0x3, 0x0) sendmsg$auto_GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20004016) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0x1002}, 0x1, &(0x7f00000002c0)={&(0x7f0000000080), 0xffffffff}, 0x4, 0x0) rename$auto(0x0, 0x0) close_range$auto(0xffffffffffffffff, r3, 0x802) socket(0x2, 0x2, 0x1) bpf$auto(0x0, &(0x7f00000000c0)=@test={r2, 0x8, 0xffffff01, 0x9, 0x4, 0x8, 0xffffff01, 0x8, 0x890, 0x2, 0xfff, 0x9, 0xa7c4, 0x78a2, 0x2}, 0x10) ppoll$auto(&(0x7f00000001c0)={0xffffffffffffffff, 0xf7f, 0xbfff}, 0x40001, 0x0, 0x0, 0x8) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000580)=""/216, 0xd8) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x7, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r6 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv$auto(r6, 0x0, 0x7) fspick$auto(r5, 0x0, 0x400009) mmap$auto(0xfffffffffffffffc, 0x400007, 0x10001, 0x9b74, 0x2, 0x7) io_uring_setup$auto(0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) 6.482833782s ago: executing program 1 (id=1050): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/003/001\x00', 0x8001, 0x0) ioctl$auto_USBDEVFS_RELEASE_PORT(r0, 0x80045519, 0x0) mmap$auto(0x10000000000000, 0x400004, 0xdf, 0x9b70, 0xffffffffffffffff, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x881, 0x0) openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000140), 0x20402, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) ioctl$auto(r2, 0x80045500, 0xffffffffffffffff) r3 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000040), 0x12a382, 0x0) write$auto_split_huge_pages_fops_huge_memory(r3, &(0x7f0000000100)='1', 0x1) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x3) ioctl$auto_MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000000)={0x75, 0x5}) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r1) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8001, 0x0) ioctl$auto_HDIO_GETGEO(r4, 0x301, &(0x7f00000001c0)) sendmsg$auto_NL80211_CMD_GET_WIPHY(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0200, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x7, 0x1000019) rt_sigprocmask$auto(0x0, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x7, 0x4000000000df, 0x80000010, 0x401, 0x7ffd) recvmmsg$auto(0xffffffffffffffff, 0x0, 0xfffffff9, 0x10, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x201, 0x0) 5.114516854s ago: executing program 4 (id=1056): mmap$auto(0x0, 0x2020009, 0x3, 0xeb3, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, r0, 0x7fff) sysfs$auto(0x2, 0x10000000000048, 0x0) r1 = fsopen$auto(0x0, 0x40001) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1202, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) socket(0x2d, 0x1, 0x0) listen$auto(0x3, 0x81) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/bpq2/statistics/rx_missed_errors\x00', 0x48500, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000010c0)=""/4090, 0xffa) r3 = socket(0x2, 0x1, 0x106) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/nbd11/hctx0/busy\x00', 0x60000, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmmsg$auto(r3, &(0x7f0000000340)={{&(0x7f00000020c0), 0x20000009, &(0x7f0000000180)={0x0}, 0x200, &(0x7f0000000200)="a8455b9ac3ae75c32cd23820e5f4259979ef460f793bae2ab4873c67752deca9595b5a0f5d9091d27ce7025a1bc6c01e6c2176e64ca654f09d3b831aed374fa148d5ecc297569882266d305b96d02992b4bbd1a84ab93a8a0776e81ebf06f07c", 0x8, 0xb}, 0xc8}, 0x1, 0x5) openat$auto_fake_panic_fops_(0xffffffffffffff9c, 0x0, 0x501080, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x800, 0xe) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x1, 0x0) write$auto_configfs_file_operations_configfs_internal(r1, &(0x7f0000000080)="04", 0x1) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0xc, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0xa, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f0000000400)='\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto(0x3, 0x4188aec6, r1) socket(0x2, 0x1, 0x106) 3.990466093s ago: executing program 4 (id=1064): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x38, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) getpgid(0x0) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/gretap0/ra_defrtr_metric\x00', 0x8202, 0x0) 3.745968332s ago: executing program 0 (id=1066): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) waitid$auto_P_ALL(0x0, 0x1ff, &(0x7f0000000240)={@_si_pad}, 0x1, &(0x7f00000002c0)={{0x4, 0xa4}, {0x2, 0x8000000000000001}, 0xfffffffffffffff8, 0x4, 0x4, 0x4, 0x1, 0x7, 0x4, 0x6, 0x0, 0x101, 0x5, 0x4, 0x7, 0x100000000}) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r3 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) ustat$auto(0x801, 0x0) sendmsg$auto(r3, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x81) openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x101202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x10005, 0x1, 0xeb1, 0x40000000000a5, 0x8000) r4 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) ioctl$auto_UBI_IOCATT(r4, 0x40186f40, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0}, 0x100000007) 3.529891403s ago: executing program 3 (id=1067): mmap$auto(0x0, 0x400008, 0x36, 0x1009b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x5, 0x6, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x2}, 0x9}, 0x1, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000) r1 = socketpair$auto(0x409, 0x5, 0xffffffff, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto_null_fops_mem(r1, &(0x7f0000000380)="ab9e3167fad2f44711ef77cd81ee4aaa760231f34a428e8e4f131ee2d03511badfb6ac06267a838e2cbc9f55db2d02653c91bdc4ad682f43ae9578e7afe7e5cc057d41b313212dd75b5797f8408b700c0cd11ccfe08bcb41ecb3326227c0200a7fe19659aa982d41608577b873d337a8cba34f5cc4f1e5c271e17147cb2dd95409a6a314486f5c4425ab0a9391d99118df500450d6adbd893f24b016cbce80596d7719555f0591a3f2b853d6dbc40475461d094a3448abdc7805b8bd3c7f050ec1bff04981c7246c91f5550a6d4a73e08bf5c68543137ef16f57dfb9c471455060", 0xe1) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(r2, 0xffffffff, r3) ioctl$auto_KVM_CREATE_VM(r2, 0xc048aeca, 0x0) r4 = semctl$auto_GETPID(0x6, 0x6, 0xb, 0x6) prctl$auto(0x3e, 0x1, r4, 0x2000000000000001, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x7fff, 0xdf, 0x9b72, r5, 0x7ffc) finit_module$auto(r5, &(0x7f0000000040)='/dev/audio\x00', 0x0) 3.284990142s ago: executing program 0 (id=1068): close_range$auto(0x2, 0x8, 0x0) socket(0xf, 0x3, 0x2) socket(0x9, 0x801, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000100)='\x01\x00\xa8a\xe0a\x1cJ4\x00\xaaN\xc8\xf9\x12\xeb\x00\xab`{U\x04\x12\xb0\x96\x82\x1f\x16\x11_\x97\x0e\x06\xa7Y}`@\x1b\x00\x00\x00\x00\x00\x00\x00\x00\xd22z\x14z\xbf\xf94\x92mP\x87[\xa4p\x93\xd4\xe3\xe8Vhpy\xf6\xce\xbb\x8c\xb2\xc9>\xd9Y\x8d\xbe\x90\xbcu*\xc8\xdc\x0e]\x01\xd1\x9e\x0f\x05_\xfc\xb8\xeb\xd9\xb7\xa4\a\xae\xa5I\f7\x17\x91L}m\xea\r+\xecy\xe1\xe0D\x824\xfc[+\x0f\xe0\x11\xe8\x83\xc4\"\xcc&z\x8c@pC\xb2\xf6k\x14~iA?\x90Pnj\x82\xea\xf0\xfa\xe8\xe1\x81Q6\x11\xe4T\xd5\xf0\xb1\xc65tr\x8b\x83^\xa17uX\x01\xd4\x14', 0x7, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001180)=ANY=[@ANYBLOB="540000002e3e0b15e9c1cdf29f97bf614e4033cfd2442eb4c844383b0c0a702a952300"/45, @ANYRES16=r3, @ANYBLOB="1b0026bd7000fedbdf250300000004000380040008000400028012000100898035000000000000000000000000000c000380050017801f000000"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0x4800) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_DEL(r4, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000002e00)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000100)=""/4096, 0x1000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/tasks\x00', 0x63102, 0x0) socket(0x3, 0xa, 0x10) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) socket(0xa, 0x3, 0x3a) 2.891824965s ago: executing program 3 (id=1071): mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000b80), r0) sendmsg$auto_IOAM6_CMD_DEL_SCHEMA(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@IOAM6_ATTR_SC_ID={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x1000000, 0x80}, 0x40040) io_uring_setup$auto(0x4, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = socket(0x11, 0x80003, 0x300) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) fstat$auto(r3, 0x0) setsockopt$auto(r2, 0x107, 0x1, 0x0, 0x8004) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xb5f0, 0x7352, 0x3a, 0x65f, 0x1ffde, 0x7, 0x3, 0x2, 0x9, 0x7, 0x80000006, 0x4, 0xb4, 0x3, 0x9, 0x10003, 0x80, 0x8, 0x0, 0x7, 0x2000, 0x3, 0x0, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, [0xc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0xe) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="1100"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x1f, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 2.821701525s ago: executing program 0 (id=1072): socket(0x23, 0x5, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x2800, 0x0) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) setfsuid$auto(0xee00) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/mtd/mtd0ro/power/runtime_suspended_time\x00', 0xb744cd732eb9d1ec, 0x0) sendfile$auto(r1, r1, 0x0, 0x8) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) r2 = gettid() mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) unshare$auto(0x0) socket(0xa, 0x2, 0x73) setpriority$auto(0x2, 0x8, 0x8) lseek$auto(0x3, 0x8, 0x3) kexec_load$auto(0x5, 0x2, 0x0, 0x4) kill$auto(r2, 0x11) io_uring_setup$auto(0x59, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x800, 0x0) r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x40, 0x0) ioctl$auto(r4, 0x90006440, 0xc35) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x2000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) madvise$auto(0x2, 0x7fffffffffff0005, 0x219) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x1, 0x300) socket(0x1, 0x6, 0x1000ab) open(&(0x7f0000000040)='./cgroup\x00', 0x80, 0xb5d1af1605322de0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff011) read$auto(r3, 0x0, 0x7) 2.329076625s ago: executing program 3 (id=1073): symlink$auto(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000440)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) mmap$auto(0xffffffffffff61c0, 0x20009, 0xe2, 0x8eb1, 0x405, 0x8001) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x1, 0x1) timerfd_create$auto(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = io_uring_setup$auto(0xc, 0x0) mmap$auto(0x0, 0x400408, 0x10005, 0x10000411, r0, 0x8000) mprotect$auto(0x8000, 0x20000000000008, 0x73b5) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/sctp/assocs\x00', 0x6441c3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) prctl$auto(0x3, 0x1, 0xffffffffffffffff, 0xff, 0x8000) r1 = socket(0x10, 0x2, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb) close_range$auto(0x2, 0xffffffffffffffff, 0x1) acct$auto(&(0x7f0000000000)='/dev/bus/usb/036/001\x00') 2.120635732s ago: executing program 4 (id=1074): mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r0 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x14, r0, 0xea47) ioctl$auto_USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)={0x1000, 0x3, &(0x7f0000000340)="6a5dcf6476ad2ce6710e564029cdd6bffd1b5403ad1c10aae12ba38313b3046ce606cc72782cccc557f05d2447b16c6299044fae5cdb69ffa13d1e4c66b7d067e94bac3ab5aca997c2fc1a74faf5be01203f1b8afea5479c5ef515d496c6e13fdb4f391669ace08019cbe59b722e62a1047426a71023d9b619bf98ce35f95b206a0baf82c15ea103c2f0afdb6bca68c66ef2c4b2120062f6421dc77dbea97523d0c1d513c0aaa10e6e7c"}) ioctl$auto_NS_GET_OWNER_UID(r0, 0xb704, 0x0) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x0, 0x0) ioctl$auto(r1, 0x921064a1, 0x8) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/mount_params\x00', 0x802, 0x0) set_mempolicy$auto(0x6, 0x0, 0x3) unshare$auto(0x40000080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f000000ac80)={0x14, r3, 0x401, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x2400c001}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x2, 0x0) futex_requeue$auto(&(0x7f00000000c0)={0xfffffffffffffffa, 0x1, 0x7f}, 0x0, 0xfffffffe, 0x0) sendmsg$auto_IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="90070000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000c003d05000006f3f15ee773298aba24165625e11f138abc9f82afde899851e0f38768071d8c70fb55747dd23c0044d767b025f03fa7efb81e270596a889ef20a952116c6a288b39dc86cdce373e27cbe34668a7ec551767f128a4a08b79b2edd73ff7112275f818a6e839ca8abb902a978a960849eb91d65f01dc9eb56f73f4fcc190e5556cbf94bb76c4997ba9fdd3ff0ac0cb2598a39627b16c7a00dbc1470ad585305042318e4362f4abcf7ced27f83d4eebb1b824a226cdab6cc4ff12b790bf79988c396b02a36d42407f8338febac27ee72ebcc54ab681b05404703043335f760f79eb5da4bfd5c77ba7e3b14845d8e600fa8fffd0ff53cae39ddc5b8ed7c86a72332219a48e4f360162894127ccf5925e4849a22ee4770801aa35773d7443b17d619f8d6c52e64bcf98cfbacc1c479b941f3c77f482cb84212d9def88b66ae088a3766bd880f82fb65e142b925691d232c2d8082969bafd470e191097098388a457c48f562ab49e134863cf1fbeb220dc3e2b0c3b8252cba1b6733df7e6832e1b84bfaf911add5a8f5cc322193ab9d57f574b6974031dbda51e05258eb1ce980af4ef7abdc71377b39b4c11e0648ba3f81b22ca8b71ac995e7897fa5d300fda3a3639a6288fa203f028b2c4237fa0e049f1b4cd0de2015845f5d68782bc66abffc951d14bf2acf15c641e5ee4e664e8e026dc0fbdc9461c2458e3f1bb8845e0712de7c38dfdc6cab65ff9ca101f8a51afc064c78426fdb3ef6735bc04d6bdf77355d4adbdb628c5216e908b829fccfd138acda02bf9545161e1650cb74972e72347ebf1a1fb8898d6f7537b2326f4cb5e3ba782a16ef4604c0a0ca2cafcff262e86c79f2ac8ccfa88502d26d2c83e27ed2f65a7b8e2812fd8da9228ab9944c3a627ba3e69af2661b0002408a1fa4ba4a80b746dc27377ceb8207402184ce3cc6b4b253fa7e38546fad0ecf4e346d109d41a7685600c566ce66bb3032d4e3ae81f5b9cc66e143b7073ab77231a08c291e8c6182426c71006296b40b85f9ca6c0e40f8535b6b0498983a79bd4eff2a9868d7c32d0986ce7f8fc5f26f238266668ba6c943923586b531fbef2eba0450ae9f8d731912a528ae95ba8328fb672b15bcf2859f001ef28a12031a8b43f3cd578baf23d03698200df46d1c395fcb2e2ff5c899a468c899e1427285d0df06991b8c00a48e680a1cb87eba1dbf1577eb5cb94c9aedaa5ba1383b0830c6e2b0b23cb1bc0e50fe8cdf6b1719052d75c4a06b36a9facc647454ed31623aa2af76665600a42bcd97ae0a3a92d342151a59083010e889417e42d4bf8c6e8d7d21643de3a5d3e7ee718b00dee00f718fa0ef3ddda8d5dbfce49ef628120857efb66fd6df89b4038dbf17b50bec33f4c2e965700a91516e29de4d6592be383fb9d7c82b6e179b98edd8120254da7414cb9d914815b55258726c0132aaf0c7413c13e4a06caf45e65af5beee3dcffb81c6a839ba23bf9d31167cbd07a198b5e985b417a9530fbaf724ba5cffc0ba279779e8ac7bf91df65f106543acdf38b382e27b35a97c964446ac0239c46675a434db5f0e12419fda17c75cd432ec84db5573beb218f658cf8903200a26e02eae53f1045e9039721f06da2c61192171f011cd4762847193e383fd8c09c96b0b57b3061746a4e89a7f6335dd402787aa180b044789a5ce13cb50b3586d88e9802d28aa1ce15690dc024dea8b0e4aa953f2e1eebc34d1bcb0af20477b0ca1e3b5cb2ad2a94aac01420567ea18a18dc00bee747ed29e1fca8b48984a5105ba4124b578613e95f4e222d9ff936c00667201e93363000ab1e5676ccaae733177f111abf774010783326269124d3c4965e578777db3773452c8b0211f7382fdcd7a484cc17f7f7e83b793f80e428fcef5880b23d4e6690344d4c0e113689733c33ca53b22a664e19c35136f87d8d198eef66254c2eeefafaca1df12f32a7c7572d89707f450dad9c7c5e8de6e9912129438e34929a7f4d1a61bd895ef3d725c7f0d9e9e3961887592800000000"], 0x790}, 0x1, 0x0, 0x0, 0x90}, 0x0) write$auto(r0, &(0x7f0000000180)='\x00', 0x8) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) r5 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0xb213, 0x2c, 0x800}) sendmmsg$auto(r5, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f00000000c0)={&(0x7f0000000080)='L', 0x49}, 0x2, &(0x7f0000000700), 0x5, 0x1}, 0x5}, 0x2, 0x100) recvmmsg$auto(r4, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) 2.030222595s ago: executing program 3 (id=1075): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyy2\x00', 0x100, 0x0) io_uring_setup$auto(0x7e1b, 0x0) r1 = socket(0x23, 0x80805, 0x0) setsockopt$auto(r1, 0x113, 0x9, 0x0, 0x79ad2269) ioctl$auto(0x3, 0x5420, 0x38) read$auto(r0, 0x0, 0x73) ioctl$auto(0x3, 0x802c542a, 0x38) 1.419659338s ago: executing program 0 (id=1076): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) vmsplice$auto(0x2, 0x0, 0x8000000000000001, 0x0) write$auto(0x1, 0x0, 0x80000000) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r1, 0x10, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r3, 0x0, 0x4) kexec_load$auto(0x200000000007, 0x1, 0x0, 0x4) 1.321619252s ago: executing program 4 (id=1077): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/sysname\x00', 0xaa102, 0x0) bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, 0xffffffffffffffff, 0x3, 0x0, 0x85, 0x7, 0x9, 0x6, 0x8001}, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = getpid() process_vm_readv$auto(r0, 0x0, 0x1, 0x0, 0x6, 0x0) bpf$auto(0x5, 0x0, 0x7) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) unshare$auto(0x40000080) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20048890}, 0x2000c041) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 890.084935ms ago: executing program 3 (id=1078): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) ioctl$auto(0x3, 0x5386, 0xffffffffffffffff) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) madvise$auto(0xb4d2, 0x20006, 0x2) syz_clone3(&(0x7f0000000300)={0x12a004080, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0x0], 0x1}, 0x58) ioctl$auto_VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000000)=0xffffffffffffffff) setsockopt$auto_SO_BUSY_POLL(r1, 0x8, 0x2e, &(0x7f0000000040)='\x00', 0xf) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) socketpair$auto(0x6, 0x8000, 0x3, 0x0) mmap$auto(0x10, 0x401, 0x6, 0xeb1, r0, 0x4) socket(0x2d, 0x2, 0x0) ioctl$auto(r1, 0x9, r1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x3, 0x89e0, 0x91) socket(0x1d, 0x2, 0x6) read$auto_regulator_summary_fops_(r1, &(0x7f00000003c0)=""/5, 0x5) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x80000, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xffffffff, 0xfffff7fffffffffd, 0x7, 0x10001, 0x7181, 0x4, 0xc8c000, 0x7, 0x9, 0x6, 0x80003, 0x4, 0x1ffffffffffd, 0x8, 0x1004, 0x7, 0x9, 0x80, 0x8000000000000000, 0x0, 0xc, 0x6, 0x200, 0x1000004, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}, 0x1fe, 0x5) socket$nl_generic(0x10, 0x3, 0x10) 384.599481ms ago: executing program 3 (id=1079): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) close_range$auto(0x2, r0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x7, 0x19, 0xffffffffffffffff, 0xf4e) mmap$auto(0x3, 0x9, 0x7, 0xeb1, 0x404, 0x10008000) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000840)="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", 0xdc7) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0x7fffffff) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1000000000000001, 0x0, 0x1, 0x0) unshare$auto(0x1) write$auto(r2, 0x0, 0x100000a3d9) mmap$auto(0x80000000001002, 0x12000000000000, 0x1, 0xeb4, 0x6, 0x8000008003) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) r3 = socket(0x31, 0x6, 0x7fff) r4 = prctl$auto(0x3e, 0x10001, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x3, 0x0) getsockopt$auto_SO_REUSEADDR(r3, 0x9, 0x2, &(0x7f00000001c0)='(\x00', &(0x7f0000000200)) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) write$auto_mousedev_fops_mousedev(r4, &(0x7f0000000180)="02c15d97e66c431589a0775dae8ea50c01", 0x11) writev$auto(r1, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/version\x00', 0x20002, 0x0) mmap$auto(0x0, 0x6, 0xdf, 0x4000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x10400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) 207.364153ms ago: executing program 4 (id=1080): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyy2\x00', 0x100, 0x0) io_uring_setup$auto(0x7e1b, 0x0) r1 = socket(0x10, 0x80800, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) read$auto_fragmentation_threshold_ops_(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto(r2, 0x29, 0x36, 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000140)='0[.[\x00', 0xcd04) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x401, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x2584, 0x0) ioctl$auto(0x3, 0x40045542, 0xffffffffffffffff) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = prctl$auto(0x39, 0x0, 0x0, 0x0, 0x0) ioctl$auto(0x3, 0xae41, 0x38) madvise$auto(0x101, 0x7, 0x1) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/anycast6\x00', 0x101940, 0x0) pread64$auto(r5, 0x0, 0x1ff, 0x5) setsockopt$auto(r1, 0x113, 0x9, 0x0, 0x79ad2269) ioctl$auto(r4, 0x5420, 0x38) read$auto(r0, 0x0, 0x73) ioctl$auto(0x3, 0x402c542c, 0x38) 0s ago: executing program 0 (id=1081): mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_fops_x64_ro_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy15/netdev:wlan1/stations/08:02:11:00:00:00/driver_buffered_tids\x00', 0x100, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x400000003) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/sg/def_reserved_size\x00', 0x402, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mount$auto(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) kernel console output (not intermixed with test programs): n process `syz.2.357'. [ 169.758864][ T7371] FAULT_INJECTION: forcing a failure. [ 169.758864][ T7371] name failslab, interval 1, probability 0, space 0, times 0 [ 169.771687][ T7371] CPU: 0 UID: 0 PID: 7371 Comm: syz.0.363 Not tainted syzkaller #0 PREEMPT(full) [ 169.771723][ T7371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 169.771738][ T7371] Call Trace: [ 169.771747][ T7371] [ 169.771757][ T7371] dump_stack_lvl+0x16c/0x1f0 [ 169.771798][ T7371] should_fail_ex+0x512/0x640 [ 169.771823][ T7371] ? __kmalloc_noprof+0xca/0x910 [ 169.771853][ T7371] should_failslab+0xc2/0x120 [ 169.771887][ T7371] __kmalloc_noprof+0xeb/0x910 [ 169.771911][ T7371] ? __pfx_inc_ucount+0x10/0x10 [ 169.771933][ T7371] ? net_alloc_generic+0x1e/0x70 [ 169.771969][ T7371] ? net_alloc_generic+0x1e/0x70 [ 169.771997][ T7371] net_alloc_generic+0x1e/0x70 [ 169.772028][ T7371] copy_net_ns+0xc6/0x7c0 [ 169.772060][ T7371] ? copy_cgroup_ns+0x71/0x980 [ 169.772087][ T7371] create_new_namespaces+0x3ea/0xab0 [ 169.772126][ T7371] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 169.772160][ T7371] ksys_unshare+0x45b/0xa40 [ 169.772194][ T7371] ? __pfx_ksys_unshare+0x10/0x10 [ 169.772229][ T7371] ? xfd_validate_state+0x61/0x180 [ 169.772262][ T7371] __x64_sys_unshare+0x31/0x40 [ 169.772283][ T7371] do_syscall_64+0xcd/0xf80 [ 169.772318][ T7371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.772342][ T7371] RIP: 0033:0x7fa57db8f7c9 [ 169.772362][ T7371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.772385][ T7371] RSP: 002b:00007fa57eab9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 169.772407][ T7371] RAX: ffffffffffffffda RBX: 00007fa57dde5fa0 RCX: 00007fa57db8f7c9 [ 169.772423][ T7371] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 169.772444][ T7371] RBP: 00007fa57dc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 169.772460][ T7371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.772474][ T7371] R13: 00007fa57dde6038 R14: 00007fa57dde5fa0 R15: 00007ffdaf9c5a38 [ 169.772510][ T7371] [ 170.798507][ T7381] netlink: 326 bytes leftover after parsing attributes in process `syz.2.366'. [ 171.470733][ T7393] netlink: 16 bytes leftover after parsing attributes in process `syz.3.368'. [ 171.693479][ T7411] usb usb3: usbfs: process 7411 (syz.0.376) did not claim interface 2 before use [ 174.694553][ T7462] netlink: 350 bytes leftover after parsing attributes in process `syz.3.386'. [ 175.379236][ T7487] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 175.396639][ T7487] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 175.438972][ T7487] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 175.445035][ T7487] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 175.451392][ T7487] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 175.597582][ T7488] netlink: 16 bytes leftover after parsing attributes in process `syz.1.394'. [ 177.419198][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 177.422551][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 177.503549][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 177.503600][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 178.406467][ T7568] netlink: 16 bytes leftover after parsing attributes in process `syz.3.408'. [ 178.460855][ T7570] ptp ptp0: only physical clock in use now [ 179.577712][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 180.276402][ T7612] netlink: 16 bytes leftover after parsing attributes in process `syz.2.421'. [ 180.287447][ T7614] program syz.1.422 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.525156][ T7615] FAULT_INJECTION: forcing a failure. [ 180.525156][ T7615] name failslab, interval 1, probability 0, space 0, times 0 [ 180.599870][ T7615] CPU: 0 UID: 0 PID: 7615 Comm: syz.1.422 Not tainted syzkaller #0 PREEMPT(full) [ 180.599906][ T7615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 180.599921][ T7615] Call Trace: [ 180.599930][ T7615] [ 180.599945][ T7615] dump_stack_lvl+0x16c/0x1f0 [ 180.599988][ T7615] should_fail_ex+0x512/0x640 [ 180.600014][ T7615] ? fs_reclaim_acquire+0xae/0x150 [ 180.600054][ T7615] should_failslab+0xc2/0x120 [ 180.600100][ T7615] kmem_cache_alloc_noprof+0x83/0x770 [ 180.600130][ T7615] ? __pfx_map_id_range_down+0x10/0x10 [ 180.600183][ T7615] ? security_inode_alloc+0x3b/0x2b0 [ 180.600218][ T7615] ? security_inode_alloc+0x3b/0x2b0 [ 180.600243][ T7615] security_inode_alloc+0x3b/0x2b0 [ 180.600270][ T7615] inode_init_always_gfp+0xced/0x1040 [ 180.600309][ T7615] alloc_inode+0x86/0x240 [ 180.600336][ T7615] path_from_stashed+0x25b/0x750 [ 180.600370][ T7615] ? do_raw_read_unlock+0x44/0xe0 [ 180.600408][ T7615] ns_get_path+0x60/0x80 [ 180.600517][ T7615] proc_ns_get_link+0x121/0x230 [ 180.600544][ T7615] ? __pfx_proc_ns_get_link+0x10/0x10 [ 180.600583][ T7615] ? atime_needs_update+0x8b/0x710 [ 180.600617][ T7615] pick_link+0xc96/0x13b0 [ 180.600647][ T7615] ? __pfx_proc_ns_get_link+0x10/0x10 [ 180.600679][ T7615] step_into_slowpath+0x6c6/0xf50 [ 180.600716][ T7615] ? __pfx_step_into_slowpath+0x10/0x10 [ 180.600745][ T7615] ? find_held_lock+0x2b/0x80 [ 180.600786][ T7615] path_openat+0x10db/0x3140 [ 180.600828][ T7615] ? __pfx_path_openat+0x10/0x10 [ 180.600874][ T7615] do_filp_open+0x20b/0x470 [ 180.600909][ T7615] ? __pfx_do_filp_open+0x10/0x10 [ 180.600982][ T7615] ? alloc_fd+0x471/0x7d0 [ 180.601026][ T7615] do_sys_openat2+0x121/0x290 [ 180.601054][ T7615] ? __pfx_do_sys_openat2+0x10/0x10 [ 180.601094][ T7615] __x64_sys_openat+0x174/0x210 [ 180.601262][ T7615] ? __pfx___x64_sys_openat+0x10/0x10 [ 180.601305][ T7615] do_syscall_64+0xcd/0xf80 [ 180.601344][ T7615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.601369][ T7615] RIP: 0033:0x7ff12338e010 [ 180.601391][ T7615] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 180.601417][ T7615] RSP: 002b:00007ff12427ff10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 180.601442][ T7615] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007ff12338e010 [ 180.601459][ T7615] RDX: 0000000000000002 RSI: 00007ff12427ffa0 RDI: 00000000ffffff9c [ 180.601473][ T7615] RBP: 00007ff12427ffa0 R08: 0000000000000000 R09: 0000000000000000 [ 180.601489][ T7615] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 180.601503][ T7615] R13: 00007ff1235e6128 R14: 00007ff1235e6090 R15: 00007ffca3659b68 [ 180.601538][ T7615] [ 183.606319][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 184.166673][ T7736] ubi: mtd0 is already attached to ubi31 [ 184.247248][ T7738] FAULT_INJECTION: forcing a failure. [ 184.247248][ T7738] name failslab, interval 1, probability 0, space 0, times 0 [ 184.275708][ T7738] CPU: 1 UID: 0 PID: 7738 Comm: syz.0.454 Not tainted syzkaller #0 PREEMPT(full) [ 184.275738][ T7738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 184.275750][ T7738] Call Trace: [ 184.275757][ T7738] [ 184.275763][ T7738] dump_stack_lvl+0x16c/0x1f0 [ 184.275799][ T7738] should_fail_ex+0x512/0x640 [ 184.275821][ T7738] ? kmem_cache_alloc_noprof+0x62/0x770 [ 184.275849][ T7738] should_failslab+0xc2/0x120 [ 184.275881][ T7738] kmem_cache_alloc_noprof+0x83/0x770 [ 184.275907][ T7738] ? ptlock_alloc+0x1f/0x70 [ 184.275936][ T7738] ? ptlock_alloc+0x1f/0x70 [ 184.275956][ T7738] ptlock_alloc+0x1f/0x70 [ 184.275978][ T7738] pte_alloc_one+0x84/0x3d0 [ 184.276009][ T7738] __do_fault+0x320/0x490 [ 184.276039][ T7738] do_fault+0x302/0x1ad0 [ 184.276067][ T7738] ? __pfx_filemap_map_pages+0x10/0x10 [ 184.276099][ T7738] ? __pmd_alloc+0x6aa/0x9c0 [ 184.276133][ T7738] __handle_mm_fault+0x1919/0x2bb0 [ 184.276167][ T7738] ? __pfx___handle_mm_fault+0x10/0x10 [ 184.276209][ T7738] ? find_vma+0xbf/0x140 [ 184.276236][ T7738] ? __pfx_find_vma+0x10/0x10 [ 184.276268][ T7738] handle_mm_fault+0x3fe/0xad0 [ 184.276297][ T7738] do_user_addr_fault+0x7a6/0x1370 [ 184.276327][ T7738] ? rcu_is_watching+0x12/0xc0 [ 184.276360][ T7738] exc_page_fault+0x64/0xc0 [ 184.276392][ T7738] asm_exc_page_fault+0x26/0x30 [ 184.276414][ T7738] RIP: 0010:__put_user_4+0xd/0x20 [ 184.276444][ T7738] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 c7 c0 03 00 0f 1f 80 00 00 00 00 90 90 90 [ 184.276464][ T7738] RSP: 0018:ffffc9000d3d7b28 EFLAGS: 00050206 [ 184.276483][ T7738] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000009 [ 184.276496][ T7738] RDX: ffff88802c150000 RSI: ffffffff852aa9bc RDI: ffffffff8bf2b500 [ 184.276511][ T7738] RBP: 0000000000000001 R08: 00000000ffffffff R09: 00000000ffffffff [ 184.276524][ T7738] R10: 0000000000000001 R11: ffff88802c150b30 R12: 0000000000000009 [ 184.276536][ T7738] R13: 0000000000000000 R14: 1ffff92001a7af76 R15: ffff8880348d2000 [ 184.276561][ T7738] ? vt_do_diacrit+0x42c/0xbf0 [ 184.276598][ T7738] vt_do_diacrit+0x437/0xbf0 [ 184.276634][ T7738] vt_ioctl+0x505/0x30a0 [ 184.276662][ T7738] ? __pfx_vt_ioctl+0x10/0x10 [ 184.276686][ T7738] ? tomoyo_path_number_perm+0x295/0x580 [ 184.276737][ T7738] ? tomoyo_path_number_perm+0x18d/0x580 [ 184.276765][ T7738] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 184.276791][ T7738] ? find_held_lock+0x2b/0x80 [ 184.276818][ T7738] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 184.276852][ T7738] ? tty_jobctrl_ioctl+0x152/0xe00 [ 184.276879][ T7738] ? __pfx_vt_ioctl+0x10/0x10 [ 184.276900][ T7738] tty_ioctl+0x661/0x1650 [ 184.276931][ T7738] ? __pfx_tty_ioctl+0x10/0x10 [ 184.276971][ T7738] ? find_held_lock+0x2b/0x80 [ 184.277014][ T7738] ? hook_file_ioctl_common+0x144/0x410 [ 184.277049][ T7738] ? __fget_files+0x20e/0x3c0 [ 184.277091][ T7738] ? __pfx_tty_ioctl+0x10/0x10 [ 184.277121][ T7738] __x64_sys_ioctl+0x18e/0x210 [ 184.277151][ T7738] do_syscall_64+0xcd/0xf80 [ 184.277185][ T7738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.277207][ T7738] RIP: 0033:0x7fa57db8f7c9 [ 184.277226][ T7738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.277247][ T7738] RSP: 002b:00007fa57eab9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 184.277267][ T7738] RAX: ffffffffffffffda RBX: 00007fa57dde5fa0 RCX: 00007fa57db8f7c9 [ 184.277282][ T7738] RDX: 0000000000000009 RSI: 0000000000004b4a RDI: 0000000000000003 [ 184.277296][ T7738] RBP: 00007fa57eab9090 R08: 0000000000000000 R09: 0000000000000000 [ 184.277309][ T7738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.277322][ T7738] R13: 00007fa57dde6038 R14: 00007fa57dde5fa0 R15: 00007ffdaf9c5a38 [ 184.277357][ T7738] [ 184.839775][ T7743] netlink: 16 bytes leftover after parsing attributes in process `syz.0.456'. [ 185.647723][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 185.734996][ T7760] FAULT_INJECTION: forcing a failure. [ 185.734996][ T7760] name failslab, interval 1, probability 0, space 0, times 0 [ 185.747926][ T7760] CPU: 1 UID: 0 PID: 7760 Comm: syz.2.462 Not tainted syzkaller #0 PREEMPT(full) [ 185.747960][ T7760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 185.747975][ T7760] Call Trace: [ 185.747983][ T7760] [ 185.747992][ T7760] dump_stack_lvl+0x16c/0x1f0 [ 185.748034][ T7760] should_fail_ex+0x512/0x640 [ 185.748060][ T7760] ? __kmalloc_cache_noprof+0x5f/0x800 [ 185.748091][ T7760] should_failslab+0xc2/0x120 [ 185.748125][ T7760] __kmalloc_cache_noprof+0x80/0x800 [ 185.748152][ T7760] ? io_uring_alloc_task_context+0x96/0x650 [ 185.748184][ T7760] ? io_uring_alloc_task_context+0x96/0x650 [ 185.748207][ T7760] ? percpu_counter_add_batch+0xca/0x200 [ 185.748230][ T7760] io_uring_alloc_task_context+0x96/0x650 [ 185.748258][ T7760] ? file_init_path+0x4fe/0x760 [ 185.748284][ T7760] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 185.748312][ T7760] ? alloc_file_pseudo+0x1b3/0x230 [ 185.748344][ T7760] __io_uring_add_tctx_node+0x2dd/0x500 [ 185.748371][ T7760] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 185.748399][ T7760] ? __anon_inode_getfile+0x17c/0x280 [ 185.748428][ T7760] io_uring_setup+0x145e/0x1f60 [ 185.748461][ T7760] ? __pfx_io_uring_setup+0x10/0x10 [ 185.748496][ T7760] ? __pfx_do_futex+0x10/0x10 [ 185.748537][ T7760] ? __pfx___x64_sys_futex+0x10/0x10 [ 185.748563][ T7760] ? rcu_is_watching+0x12/0xc0 [ 185.748610][ T7760] __x64_sys_io_uring_setup+0xc2/0x170 [ 185.748644][ T7760] do_syscall_64+0xcd/0xf80 [ 185.748682][ T7760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.748706][ T7760] RIP: 0033:0x7f270fd8f7c9 [ 185.748726][ T7760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.748748][ T7760] RSP: 002b:00007f2710bf9038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 185.748771][ T7760] RAX: ffffffffffffffda RBX: 00007f270ffe5fa0 RCX: 00007f270fd8f7c9 [ 185.748787][ T7760] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 185.748801][ T7760] RBP: 00007f270fe13f91 R08: 0000000000000000 R09: 0000000000000000 [ 185.748815][ T7760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.748828][ T7760] R13: 00007f270ffe6038 R14: 00007f270ffe5fa0 R15: 00007ffe82a662e8 [ 185.748862][ T7760] [ 186.465748][ T7781] ptp ptp0: only physical clock in use now [ 186.565064][ T7784] FAULT_INJECTION: forcing a failure. [ 186.565064][ T7784] name failslab, interval 1, probability 0, space 0, times 0 [ 186.577963][ T7784] CPU: 0 UID: 0 PID: 7784 Comm: syz.0.471 Not tainted syzkaller #0 PREEMPT(full) [ 186.577994][ T7784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 186.578003][ T7784] Call Trace: [ 186.578010][ T7784] [ 186.578016][ T7784] dump_stack_lvl+0x16c/0x1f0 [ 186.578040][ T7784] should_fail_ex+0x512/0x640 [ 186.578056][ T7784] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 186.578074][ T7784] should_failslab+0xc2/0x120 [ 186.578095][ T7784] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 186.578110][ T7784] ? do_raw_spin_unlock+0x172/0x230 [ 186.578126][ T7784] ? alloc_inode+0xc3/0x240 [ 186.578143][ T7784] ? alloc_inode+0xc3/0x240 [ 186.578155][ T7784] ? __pfx_d_alloc_name+0x10/0x10 [ 186.578166][ T7784] alloc_inode+0xc3/0x240 [ 186.578180][ T7784] new_inode+0x22/0x1c0 [ 186.578193][ T7784] ? dput.part.0+0xd8/0x570 [ 186.578207][ T7784] simple_fill_super+0x306/0x730 [ 186.578228][ T7784] ? __pfx_nfsd_fill_super+0x10/0x10 [ 186.578248][ T7784] nfsd_fill_super+0x90/0x5a0 [ 186.578266][ T7784] ? __pfx_set_anon_super_fc+0x10/0x10 [ 186.578283][ T7784] ? __pfx_nfsd_fill_super+0x10/0x10 [ 186.578302][ T7784] get_tree_keyed+0x10e/0x1d0 [ 186.578319][ T7784] vfs_get_tree+0x8e/0x330 [ 186.578334][ T7784] path_mount+0x7bf/0x23a0 [ 186.578346][ T7784] ? rcu_is_watching+0x12/0xc0 [ 186.578366][ T7784] ? __pfx_path_mount+0x10/0x10 [ 186.578378][ T7784] ? kmem_cache_free+0x2d8/0x770 [ 186.578394][ T7784] ? putname+0xf5/0x1a0 [ 186.578408][ T7784] ? putname+0xf5/0x1a0 [ 186.578418][ T7784] ? putname+0xf5/0x1a0 [ 186.578432][ T7784] ? __x64_sys_mount+0x293/0x310 [ 186.578442][ T7784] __x64_sys_mount+0x293/0x310 [ 186.578455][ T7784] ? __pfx___x64_sys_mount+0x10/0x10 [ 186.578473][ T7784] do_syscall_64+0xcd/0xf80 [ 186.578505][ T7784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.578519][ T7784] RIP: 0033:0x7fa57db8f7c9 [ 186.578531][ T7784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.578544][ T7784] RSP: 002b:00007fa57eab9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 186.578557][ T7784] RAX: ffffffffffffffda RBX: 00007fa57dde5fa0 RCX: 00007fa57db8f7c9 [ 186.578566][ T7784] RDX: 0000200000000140 RSI: 0000200000000040 RDI: 0000000000000000 [ 186.578574][ T7784] RBP: 00007fa57dc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 186.578581][ T7784] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 186.578589][ T7784] R13: 00007fa57dde6038 R14: 00007fa57dde5fa0 R15: 00007ffdaf9c5a38 [ 186.578608][ T7784] [ 187.053974][ T7788] FAULT_INJECTION: forcing a failure. [ 187.053974][ T7788] name fail_futex, interval 1, probability 0, space 0, times 0 [ 187.077900][ T7788] CPU: 1 UID: 0 PID: 7788 Comm: syz.0.472 Not tainted syzkaller #0 PREEMPT(full) [ 187.077933][ T7788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 187.077946][ T7788] Call Trace: [ 187.077954][ T7788] [ 187.077963][ T7788] dump_stack_lvl+0x16c/0x1f0 [ 187.078000][ T7788] should_fail_ex+0x512/0x640 [ 187.078030][ T7788] get_futex_key+0x1d0/0x15f0 [ 187.078060][ T7788] ? __pfx_get_futex_key+0x10/0x10 [ 187.078096][ T7788] futex_wake+0xea/0x530 [ 187.078129][ T7788] ? __pfx_futex_wake+0x10/0x10 [ 187.078173][ T7788] do_futex+0x1e3/0x350 [ 187.078199][ T7788] ? __pfx_do_futex+0x10/0x10 [ 187.078221][ T7788] ? __might_fault+0xe3/0x190 [ 187.078260][ T7788] mm_release+0x24e/0x300 [ 187.078291][ T7788] do_exit+0x69e/0x2bd0 [ 187.078320][ T7788] ? __pfx_do_exit+0x10/0x10 [ 187.078341][ T7788] ? do_raw_spin_lock+0x12c/0x2b0 [ 187.078365][ T7788] ? find_held_lock+0x2b/0x80 [ 187.078398][ T7788] do_group_exit+0xd3/0x2a0 [ 187.078422][ T7788] get_signal+0x2671/0x26d0 [ 187.078464][ T7788] ? __pfx_get_signal+0x10/0x10 [ 187.078495][ T7788] ? do_futex+0x122/0x350 [ 187.078522][ T7788] arch_do_signal_or_restart+0x8f/0x7a0 [ 187.078554][ T7788] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 187.078592][ T7788] ? fput+0x70/0xf0 [ 187.078613][ T7788] ? __pfx___x64_sys_futex+0x10/0x10 [ 187.078645][ T7788] exit_to_user_mode_loop+0x8c/0x540 [ 187.078683][ T7788] do_syscall_64+0x4ee/0xf80 [ 187.078716][ T7788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.078740][ T7788] RIP: 0033:0x7fa57db8f7c9 [ 187.078758][ T7788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.078779][ T7788] RSP: 002b:00007fa57ea980e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 187.078801][ T7788] RAX: fffffffffffffe00 RBX: 00007fa57dde6098 RCX: 00007fa57db8f7c9 [ 187.078816][ T7788] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa57dde6098 [ 187.078830][ T7788] RBP: 00007fa57dde6090 R08: 0000000000000000 R09: 0000000000000000 [ 187.078844][ T7788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.078857][ T7788] R13: 00007fa57dde6128 R14: 00007ffdaf9c5950 R15: 00007ffdaf9c5a38 [ 187.078891][ T7788] [ 187.727858][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 187.972516][ T7813] FAULT_INJECTION: forcing a failure. [ 187.972516][ T7813] name failslab, interval 1, probability 0, space 0, times 0 [ 188.001705][ T7813] CPU: 1 UID: 0 PID: 7813 Comm: syz.0.481 Not tainted syzkaller #0 PREEMPT(full) [ 188.001738][ T7813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 188.001753][ T7813] Call Trace: [ 188.001761][ T7813] [ 188.001770][ T7813] dump_stack_lvl+0x16c/0x1f0 [ 188.001810][ T7813] should_fail_ex+0x512/0x640 [ 188.001836][ T7813] ? fs_reclaim_acquire+0xae/0x150 [ 188.001874][ T7813] should_failslab+0xc2/0x120 [ 188.001906][ T7813] kmem_cache_alloc_noprof+0x83/0x770 [ 188.001934][ T7813] ? __pfx_map_id_range_down+0x10/0x10 [ 188.001965][ T7813] ? security_inode_alloc+0x3b/0x2b0 [ 188.001996][ T7813] ? security_inode_alloc+0x3b/0x2b0 [ 188.002018][ T7813] security_inode_alloc+0x3b/0x2b0 [ 188.002042][ T7813] inode_init_always_gfp+0xced/0x1040 [ 188.002080][ T7813] alloc_inode+0x86/0x240 [ 188.002108][ T7813] new_inode+0x22/0x1c0 [ 188.002131][ T7813] ? dput.part.0+0xd8/0x570 [ 188.002158][ T7813] simple_fill_super+0x306/0x730 [ 188.002195][ T7813] ? __pfx_nfsd_fill_super+0x10/0x10 [ 188.002231][ T7813] nfsd_fill_super+0x90/0x5a0 [ 188.002264][ T7813] ? __pfx_set_anon_super_fc+0x10/0x10 [ 188.002294][ T7813] ? __pfx_nfsd_fill_super+0x10/0x10 [ 188.002326][ T7813] get_tree_keyed+0x10e/0x1d0 [ 188.002358][ T7813] vfs_get_tree+0x8e/0x330 [ 188.002385][ T7813] path_mount+0x7bf/0x23a0 [ 188.002407][ T7813] ? rcu_is_watching+0x12/0xc0 [ 188.002443][ T7813] ? __pfx_path_mount+0x10/0x10 [ 188.002468][ T7813] ? kmem_cache_free+0x2d8/0x770 [ 188.002497][ T7813] ? putname+0xf5/0x1a0 [ 188.002525][ T7813] ? putname+0xf5/0x1a0 [ 188.002543][ T7813] ? putname+0xf5/0x1a0 [ 188.002578][ T7813] ? __x64_sys_mount+0x293/0x310 [ 188.002599][ T7813] __x64_sys_mount+0x293/0x310 [ 188.002625][ T7813] ? __pfx___x64_sys_mount+0x10/0x10 [ 188.002661][ T7813] do_syscall_64+0xcd/0xf80 [ 188.002697][ T7813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.002722][ T7813] RIP: 0033:0x7fa57db8f7c9 [ 188.002741][ T7813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.002763][ T7813] RSP: 002b:00007fa57eab9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 188.002782][ T7813] RAX: ffffffffffffffda RBX: 00007fa57dde5fa0 RCX: 00007fa57db8f7c9 [ 188.002797][ T7813] RDX: 0000200000000140 RSI: 0000200000000040 RDI: 0000000000000000 [ 188.002811][ T7813] RBP: 00007fa57dc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 188.002825][ T7813] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 188.002839][ T7813] R13: 00007fa57dde6038 R14: 00007fa57dde5fa0 R15: 00007ffdaf9c5a38 [ 188.002875][ T7813] [ 189.560786][ T7843] FAULT_INJECTION: forcing a failure. [ 189.560786][ T7843] name failslab, interval 1, probability 0, space 0, times 0 [ 189.576662][ T7843] CPU: 1 UID: 0 PID: 7843 Comm: syz.0.489 Not tainted syzkaller #0 PREEMPT(full) [ 189.576691][ T7843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 189.576703][ T7843] Call Trace: [ 189.576710][ T7843] [ 189.576720][ T7843] dump_stack_lvl+0x16c/0x1f0 [ 189.576753][ T7843] should_fail_ex+0x512/0x640 [ 189.576774][ T7843] ? kmem_cache_alloc_noprof+0x62/0x770 [ 189.576801][ T7843] should_failslab+0xc2/0x120 [ 189.576830][ T7843] kmem_cache_alloc_noprof+0x83/0x770 [ 189.576853][ T7843] ? ptlock_alloc+0x1f/0x70 [ 189.576879][ T7843] ? ptlock_alloc+0x1f/0x70 [ 189.576898][ T7843] ptlock_alloc+0x1f/0x70 [ 189.576918][ T7843] pte_alloc_one+0x84/0x3d0 [ 189.576946][ T7843] __do_fault+0x320/0x490 [ 189.576973][ T7843] do_fault+0x302/0x1ad0 [ 189.576999][ T7843] ? __pfx_filemap_map_pages+0x10/0x10 [ 189.577021][ T7843] ? __pmd_alloc+0x6aa/0x9c0 [ 189.577053][ T7843] __handle_mm_fault+0x1919/0x2bb0 [ 189.577089][ T7843] ? __pfx___handle_mm_fault+0x10/0x10 [ 189.577138][ T7843] ? find_vma+0xbf/0x140 [ 189.577164][ T7843] ? __pfx_find_vma+0x10/0x10 [ 189.577194][ T7843] handle_mm_fault+0x3fe/0xad0 [ 189.577221][ T7843] do_user_addr_fault+0x7a6/0x1370 [ 189.577248][ T7843] ? rcu_is_watching+0x12/0xc0 [ 189.577279][ T7843] exc_page_fault+0x64/0xc0 [ 189.577317][ T7843] asm_exc_page_fault+0x26/0x30 [ 189.577339][ T7843] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 189.577363][ T7843] Code: 81 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 189.577383][ T7843] RSP: 0018:ffffc9000e6779a8 EFLAGS: 00050202 [ 189.577402][ T7843] RAX: 0000000000000001 RBX: 0000000000000102 RCX: 0000000000000102 [ 189.577416][ T7843] RDX: ffffed100f493421 RSI: ffff88807a49a000 RDI: 0000000000000000 [ 189.577430][ T7843] RBP: 0000000000000102 R08: 0000000000000000 R09: ffffed100f493420 [ 189.577443][ T7843] R10: ffff88807a49a101 R11: 0000000000000000 R12: 0000000000000000 [ 189.577455][ T7843] R13: ffffc9000e677bc0 R14: ffff88807a49a000 R15: 0000000000000000 [ 189.577488][ T7843] _copy_to_iter+0x4eb/0x1710 [ 189.577519][ T7843] ? __pfx__copy_to_iter+0x10/0x10 [ 189.577543][ T7843] ? netstat_seq_show+0x67d/0xa00 [ 189.577594][ T7843] seq_read_iter+0xd02/0x12d0 [ 189.577639][ T7843] seq_read+0x3a3/0x570 [ 189.577665][ T7843] ? __pfx_seq_read+0x10/0x10 [ 189.577698][ T7843] ? lock_acquire+0x179/0x330 [ 189.577730][ T7843] ? __pfx_seq_read+0x10/0x10 [ 189.577755][ T7843] proc_reg_read+0x240/0x330 [ 189.577778][ T7843] ? __pfx_proc_reg_read+0x10/0x10 [ 189.577805][ T7843] vfs_read+0x1e4/0xcf0 [ 189.577835][ T7843] ? __pfx___mutex_lock+0x10/0x10 [ 189.577869][ T7843] ? __pfx_vfs_read+0x10/0x10 [ 189.577907][ T7843] ? __fget_files+0x20e/0x3c0 [ 189.577947][ T7843] ksys_read+0x12a/0x250 [ 189.577975][ T7843] ? __pfx_ksys_read+0x10/0x10 [ 189.578015][ T7843] do_syscall_64+0xcd/0xf80 [ 189.578048][ T7843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.578071][ T7843] RIP: 0033:0x7fa57db8f7c9 [ 189.578089][ T7843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.578118][ T7843] RSP: 002b:00007fa57eab9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 189.578138][ T7843] RAX: ffffffffffffffda RBX: 00007fa57dde5fa0 RCX: 00007fa57db8f7c9 [ 189.578153][ T7843] RDX: 0000000000000102 RSI: 0000000000000000 RDI: 0000000000000003 [ 189.578166][ T7843] RBP: 00007fa57eab9090 R08: 0000000000000000 R09: 0000000000000000 [ 189.578180][ T7843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.578192][ T7843] R13: 00007fa57dde6038 R14: 00007fa57dde5fa0 R15: 00007ffdaf9c5a38 [ 189.578228][ T7843] [ 190.335530][ T7848] ptp ptp0: only physical clock in use now [ 191.211862][ T7858] FAULT_INJECTION: forcing a failure. [ 191.211862][ T7858] name fail_futex, interval 1, probability 0, space 0, times 0 [ 191.302971][ T7858] CPU: 1 UID: 0 PID: 7858 Comm: syz.3.493 Not tainted syzkaller #0 PREEMPT(full) [ 191.303003][ T7858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 191.303017][ T7858] Call Trace: [ 191.303024][ T7858] [ 191.303033][ T7858] dump_stack_lvl+0x16c/0x1f0 [ 191.303071][ T7858] should_fail_ex+0x512/0x640 [ 191.303101][ T7858] get_futex_key+0x1d0/0x15f0 [ 191.303125][ T7858] ? task_work_run+0x150/0x240 [ 191.303148][ T7858] ? exit_to_user_mode_loop+0xfb/0x540 [ 191.303189][ T7858] ? __pfx_get_futex_key+0x10/0x10 [ 191.303226][ T7858] futex_wake+0xea/0x530 [ 191.303259][ T7858] ? __pfx_futex_wake+0x10/0x10 [ 191.303300][ T7858] do_futex+0x1e3/0x350 [ 191.303326][ T7858] ? __pfx_do_futex+0x10/0x10 [ 191.303351][ T7858] ? __pfx___might_resched+0x10/0x10 [ 191.303382][ T7858] ? blkcg_maybe_throttle_current+0x650/0xf30 [ 191.303409][ T7858] ? cleanup_mnt+0x26b/0x450 [ 191.303441][ T7858] __x64_sys_futex+0x1e0/0x4c0 [ 191.303472][ T7858] ? __pfx___x64_sys_futex+0x10/0x10 [ 191.303500][ T7858] ? rcu_is_watching+0x12/0xc0 [ 191.303539][ T7858] do_syscall_64+0xcd/0xf80 [ 191.303574][ T7858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.303597][ T7858] RIP: 0033:0x7fc51058f7c9 [ 191.303617][ T7858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.303640][ T7858] RSP: 002b:00007fc51136f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 191.303662][ T7858] RAX: ffffffffffffffda RBX: 00007fc5107e5fa8 RCX: 00007fc51058f7c9 [ 191.303676][ T7858] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc5107e5fac [ 191.303690][ T7858] RBP: 00007fc5107e5fa0 R08: 00007fc511370000 R09: 0000000000000000 [ 191.303704][ T7858] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 191.303718][ T7858] R13: 00007fc5107e6038 R14: 00007fff69a9c070 R15: 00007fff69a9c158 [ 191.303749][ T7858] [ 191.306852][ T7861] netlink: 350 bytes leftover after parsing attributes in process `syz.0.494'. [ 191.989971][ T7875] FAULT_INJECTION: forcing a failure. [ 191.989971][ T7875] name failslab, interval 1, probability 0, space 0, times 0 [ 192.003849][ T7875] CPU: 0 UID: 0 PID: 7875 Comm: syz.0.497 Not tainted syzkaller #0 PREEMPT(full) [ 192.003883][ T7875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 192.003898][ T7875] Call Trace: [ 192.003906][ T7875] [ 192.003915][ T7875] dump_stack_lvl+0x16c/0x1f0 [ 192.003956][ T7875] should_fail_ex+0x512/0x640 [ 192.003979][ T7875] ? kmem_cache_alloc_noprof+0x62/0x770 [ 192.004010][ T7875] should_failslab+0xc2/0x120 [ 192.004043][ T7875] kmem_cache_alloc_noprof+0x83/0x770 [ 192.004070][ T7875] ? alloc_vfsmnt+0x23/0x6b0 [ 192.004099][ T7875] ? alloc_vfsmnt+0x23/0x6b0 [ 192.004121][ T7875] alloc_vfsmnt+0x23/0x6b0 [ 192.004143][ T7875] path_mount+0x1e42/0x23a0 [ 192.004170][ T7875] ? rcu_is_watching+0x12/0xc0 [ 192.004204][ T7875] ? __pfx_path_mount+0x10/0x10 [ 192.004225][ T7875] ? kmem_cache_free+0x2d8/0x770 [ 192.004253][ T7875] ? putname+0xf5/0x1a0 [ 192.004278][ T7875] ? putname+0xf5/0x1a0 [ 192.004296][ T7875] ? putname+0xf5/0x1a0 [ 192.004319][ T7875] ? __x64_sys_mount+0x293/0x310 [ 192.004338][ T7875] __x64_sys_mount+0x293/0x310 [ 192.004361][ T7875] ? __pfx___x64_sys_mount+0x10/0x10 [ 192.004392][ T7875] do_syscall_64+0xcd/0xf80 [ 192.004437][ T7875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.004462][ T7875] RIP: 0033:0x7fa57db8f7c9 [ 192.004482][ T7875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.004503][ T7875] RSP: 002b:00007fa57eab9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 192.004526][ T7875] RAX: ffffffffffffffda RBX: 00007fa57dde5fa0 RCX: 00007fa57db8f7c9 [ 192.004542][ T7875] RDX: 0000200000000140 RSI: 0000200000000040 RDI: 0000000000000000 [ 192.004557][ T7875] RBP: 00007fa57dc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 192.004569][ T7875] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 192.004581][ T7875] R13: 00007fa57dde6038 R14: 00007fa57dde5fa0 R15: 00007ffdaf9c5a38 [ 192.004623][ T7875] [ 192.389521][ T7882] ptp ptp0: only physical clock in use now [ 194.451159][ T7917] ptp ptp0: only physical clock in use now [ 195.725755][ T7951] ptp ptp0: only physical clock in use now [ 196.373248][ T7965] netlink: 28 bytes leftover after parsing attributes in process `syz.0.525'. [ 196.383011][ T7965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.416930][ T7965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.077471][ T8007] binder: 8005:8007 ioctl c0306201 0 returned -14 [ 199.420170][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.428024][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.507898][ T8032] netlink: 16 bytes leftover after parsing attributes in process `syz.3.540'. [ 200.101935][ T8045] ptp ptp0: only physical clock in use now [ 200.522366][ T8050] FAULT_INJECTION: forcing a failure. [ 200.522366][ T8050] name failslab, interval 1, probability 0, space 0, times 0 [ 200.538050][ T8050] CPU: 1 UID: 0 PID: 8050 Comm: syz.0.548 Not tainted syzkaller #0 PREEMPT(full) [ 200.538073][ T8050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 200.538082][ T8050] Call Trace: [ 200.538088][ T8050] [ 200.538094][ T8050] dump_stack_lvl+0x16c/0x1f0 [ 200.538123][ T8050] should_fail_ex+0x512/0x640 [ 200.538142][ T8050] ? kmem_cache_alloc_noprof+0x62/0x770 [ 200.538163][ T8050] should_failslab+0xc2/0x120 [ 200.538183][ T8050] kmem_cache_alloc_noprof+0x83/0x770 [ 200.538200][ T8050] ? __proc_create+0x2c8/0x8d0 [ 200.538223][ T8050] ? __proc_create+0x2c8/0x8d0 [ 200.538240][ T8050] __proc_create+0x2c8/0x8d0 [ 200.538269][ T8050] ? __pfx___proc_create+0x10/0x10 [ 200.538300][ T8050] ? _raw_write_unlock+0x28/0x50 [ 200.538319][ T8050] ? proc_register+0x559/0x8b0 [ 200.538338][ T8050] proc_create_reg+0x7d/0x180 [ 200.538358][ T8050] proc_create_data+0x86/0x110 [ 200.538377][ T8050] ? __pfx_proc_create_data+0x10/0x10 [ 200.538396][ T8050] ? cache_register_net+0x137/0x5e0 [ 200.538421][ T8050] cache_register_net+0x2d6/0x5e0 [ 200.538443][ T8050] nfsd_idmap_init+0xb6/0x250 [ 200.538459][ T8050] ? __pfx_nfsd_net_init+0x10/0x10 [ 200.538537][ T8050] nfsd_net_init+0x69/0x3d0 [ 200.538566][ T8050] ? __pfx_nfsd_net_init+0x10/0x10 [ 200.538587][ T8050] ops_init+0x1e2/0x5f0 [ 200.538608][ T8050] setup_net+0x11d/0x3a0 [ 200.538627][ T8050] ? __pfx_setup_net+0x10/0x10 [ 200.538643][ T8050] ? lockdep_init_map_type+0x5c/0x270 [ 200.538659][ T8050] ? mutex_init_lockep+0x110/0x150 [ 200.538691][ T8050] copy_net_ns+0x351/0x7c0 [ 200.538712][ T8050] create_new_namespaces+0x3ea/0xab0 [ 200.538749][ T8050] copy_namespaces+0x468/0x570 [ 200.538778][ T8050] copy_process+0x2a70/0x7430 [ 200.538824][ T8050] ? __pfx_copy_process+0x10/0x10 [ 200.538856][ T8050] ? find_held_lock+0x2b/0x80 [ 200.538889][ T8050] ? futex_private_hash_put+0x160/0x1b0 [ 200.538910][ T8050] kernel_clone+0xfc/0x910 [ 200.538996][ T8050] ? __pfx_kernel_clone+0x10/0x10 [ 200.539029][ T8050] __do_sys_clone+0xce/0x120 [ 200.539049][ T8050] ? __pfx___do_sys_clone+0x10/0x10 [ 200.539089][ T8050] ? find_held_lock+0x2b/0x80 [ 200.539116][ T8050] ? fdget+0x187/0x210 [ 200.539139][ T8050] do_syscall_64+0xcd/0xf80 [ 200.539160][ T8050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.539176][ T8050] RIP: 0033:0x7fa57db8f7c9 [ 200.539196][ T8050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.539217][ T8050] RSP: 002b:00007fa57eab8fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 200.539231][ T8050] RAX: ffffffffffffffda RBX: 00007fa57dde5fa0 RCX: 00007fa57db8f7c9 [ 200.539241][ T8050] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000040180211 [ 200.539250][ T8050] RBP: 00007fa57dc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 200.539260][ T8050] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 200.539268][ T8050] R13: 00007fa57dde6038 R14: 00007fa57dde5fa0 R15: 00007ffdaf9c5a38 [ 200.539289][ T8050] [ 201.391489][ T8065] binder: 8061:8065 ioctl c018620c 0 returned -22 [ 202.141423][ T8084] netlink: 'syz.0.559': attribute type 8 has an invalid length. [ 202.466743][ T8097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.565'. [ 203.683105][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 203.693813][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 203.704354][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 203.715897][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 203.732410][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 204.385237][ T8125] chnl_net:caif_netlink_parms(): no params data found [ 204.600655][ T8125] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.608011][ T8125] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.615235][ T8125] bridge_slave_0: entered allmulticast mode [ 204.629618][ T8125] bridge_slave_0: entered promiscuous mode [ 204.645869][ T8125] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.655640][ T8125] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.663571][ T8125] bridge_slave_1: entered allmulticast mode [ 204.673155][ T8125] bridge_slave_1: entered promiscuous mode [ 204.714251][ T8125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.798157][ T8125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.053951][ T8125] team0: Port device team_slave_0 added [ 205.078493][ T8125] team0: Port device team_slave_1 added [ 205.161948][ T8170] netlink: 326 bytes leftover after parsing attributes in process `syz.3.576'. [ 205.565492][ T8125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.592293][ T8125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.622020][ T8125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.666433][ T8183] FAULT_INJECTION: forcing a failure. [ 205.666433][ T8183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.692882][ T8183] CPU: 1 UID: 0 PID: 8183 Comm: syz.3.578 Tainted: G L syzkaller #0 PREEMPT(full) [ 205.692919][ T8183] Tainted: [L]=SOFTLOCKUP [ 205.692927][ T8183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 205.692940][ T8183] Call Trace: [ 205.692948][ T8183] [ 205.692958][ T8183] dump_stack_lvl+0x16c/0x1f0 [ 205.692998][ T8183] should_fail_ex+0x512/0x640 [ 205.693026][ T8183] _copy_from_user+0x2e/0xd0 [ 205.693050][ T8183] get_itimerspec64+0x15b/0x2d0 [ 205.693075][ T8183] ? __pfx_get_itimerspec64+0x10/0x10 [ 205.693105][ T8183] ? _copy_from_user+0x59/0xd0 [ 205.693136][ T8183] __x64_sys_timerfd_settime+0x15f/0x280 [ 205.693165][ T8183] ? __pfx___x64_sys_timerfd_settime+0x10/0x10 [ 205.693211][ T8183] do_syscall_64+0xcd/0xf80 [ 205.693245][ T8183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.693276][ T8183] RIP: 0033:0x7fc51058f7c9 [ 205.693295][ T8183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.693318][ T8183] RSP: 002b:00007fc51136f038 EFLAGS: 00000246 ORIG_RAX: 000000000000011e [ 205.693342][ T8183] RAX: ffffffffffffffda RBX: 00007fc5107e5fa0 RCX: 00007fc51058f7c9 [ 205.693359][ T8183] RDX: 0000200000000000 RSI: 0000000000000008 RDI: ffffffffffffffff [ 205.693374][ T8183] RBP: 00007fc510613f91 R08: 0000000000000000 R09: 0000000000000000 [ 205.693387][ T8183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.693401][ T8183] R13: 00007fc5107e6038 R14: 00007fc5107e5fa0 R15: 00007fff69a9c158 [ 205.693441][ T8183] [ 205.899504][ T5840] Bluetooth: hci4: command tx timeout [ 205.909382][ T8125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.917157][ T8125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.946210][ T8125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.219406][ T8125] hsr_slave_0: entered promiscuous mode [ 206.238813][ T8125] hsr_slave_1: entered promiscuous mode [ 206.246305][ T8125] debugfs: 'hsr0' already exists in 'hsr' [ 206.275962][ T8125] Cannot create hsr debugfs directory [ 206.460100][ T8206] netlink: 28 bytes leftover after parsing attributes in process `syz.0.583'. [ 206.512833][ T8208] FAULT_INJECTION: forcing a failure. [ 206.512833][ T8208] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 206.563769][ T8209] hub 8-0:1.0: USB hub found [ 206.571933][ T8209] hub 8-0:1.0: 1 port detected [ 206.632343][ T8208] CPU: 0 UID: 0 PID: 8208 Comm: syz.1.582 Tainted: G L syzkaller #0 PREEMPT(full) [ 206.632381][ T8208] Tainted: [L]=SOFTLOCKUP [ 206.632387][ T8208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 206.632399][ T8208] Call Trace: [ 206.632407][ T8208] [ 206.632416][ T8208] dump_stack_lvl+0x16c/0x1f0 [ 206.632453][ T8208] should_fail_ex+0x512/0x640 [ 206.632483][ T8208] should_fail_alloc_page+0xe7/0x130 [ 206.632517][ T8208] prepare_alloc_pages+0x401/0x670 [ 206.632556][ T8208] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 206.632593][ T8208] ? __lock_acquire+0x436/0x2890 [ 206.632623][ T8208] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 206.632660][ T8208] ? is_bpf_text_address+0x8a/0x1a0 [ 206.632688][ T8208] ? bpf_ksym_find+0x124/0x1c0 [ 206.632711][ T8208] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 206.632743][ T8208] ? is_bpf_text_address+0x94/0x1a0 [ 206.632767][ T8208] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 206.632799][ T8208] ? policy_nodemask+0xea/0x4e0 [ 206.632833][ T8208] alloc_pages_mpol+0x1fb/0x550 [ 206.632866][ T8208] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 206.632908][ T8208] folio_alloc_mpol_noprof+0x36/0x2f0 [ 206.632934][ T8208] shmem_alloc_folio+0x135/0x160 [ 206.632968][ T8208] shmem_alloc_and_add_folio+0x494/0xc20 [ 206.633002][ T8208] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 206.633031][ T8208] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 206.633064][ T8208] shmem_get_folio_gfp+0x67f/0x1610 [ 206.633098][ T8208] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 206.633134][ T8208] shmem_fault+0x1fe/0xa00 [ 206.633161][ T8208] ? __pfx_shmem_fault+0x10/0x10 [ 206.633184][ T8208] ? trace_kmem_cache_alloc+0x28/0xb0 [ 206.633216][ T8208] ? ptlock_alloc+0x1f/0x70 [ 206.633241][ T8208] ? lockdep_init_map_type+0x5c/0x270 [ 206.633276][ T8208] ? __raw_spin_lock_init+0x3a/0x110 [ 206.633307][ T8208] __do_fault+0x10d/0x490 [ 206.633337][ T8208] do_fault+0x302/0x1ad0 [ 206.633365][ T8208] ? __pfx_filemap_map_pages+0x10/0x10 [ 206.633390][ T8208] ? __pmd_alloc+0x6aa/0x9c0 [ 206.633424][ T8208] __handle_mm_fault+0x1919/0x2bb0 [ 206.633459][ T8208] ? __pfx___handle_mm_fault+0x10/0x10 [ 206.633504][ T8208] ? find_vma+0xbf/0x140 [ 206.633539][ T8208] ? __pfx_find_vma+0x10/0x10 [ 206.633571][ T8208] handle_mm_fault+0x3fe/0xad0 [ 206.633602][ T8208] do_user_addr_fault+0x7a6/0x1370 [ 206.633633][ T8208] ? rcu_is_watching+0x12/0xc0 [ 206.633667][ T8208] exc_page_fault+0x64/0xc0 [ 206.633699][ T8208] asm_exc_page_fault+0x26/0x30 [ 206.633722][ T8208] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 206.633747][ T8208] Code: 81 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 206.633767][ T8208] RSP: 0018:ffffc9000c2279a8 EFLAGS: 00050202 [ 206.633786][ T8208] RAX: 0000000000000001 RBX: 0000000000000102 RCX: 0000000000000102 [ 206.633800][ T8208] RDX: ffffed100b420c21 RSI: ffff88805a106000 RDI: 0000000000000000 [ 206.633814][ T8208] RBP: 0000000000000102 R08: 0000000000000000 R09: ffffed100b420c20 [ 206.633828][ T8208] R10: ffff88805a106101 R11: 0000000000000000 R12: 0000000000000000 [ 206.633841][ T8208] R13: ffffc9000c227bc0 R14: ffff88805a106000 R15: 0000000000000000 [ 206.633876][ T8208] _copy_to_iter+0x4eb/0x1710 [ 206.633914][ T8208] ? __pfx__copy_to_iter+0x10/0x10 [ 206.633940][ T8208] ? netstat_seq_show+0x67d/0xa00 [ 206.633977][ T8208] seq_read_iter+0xd02/0x12d0 [ 206.634024][ T8208] seq_read+0x3a3/0x570 [ 206.634053][ T8208] ? __pfx_seq_read+0x10/0x10 [ 206.634088][ T8208] ? lock_acquire+0x179/0x330 [ 206.634123][ T8208] ? __pfx_seq_read+0x10/0x10 [ 206.634169][ T8208] proc_reg_read+0x240/0x330 [ 206.634197][ T8208] ? __pfx_proc_reg_read+0x10/0x10 [ 206.634224][ T8208] vfs_read+0x1e4/0xcf0 [ 206.634261][ T8208] ? __pfx___mutex_lock+0x10/0x10 [ 206.634292][ T8208] ? __pfx_vfs_read+0x10/0x10 [ 206.634328][ T8208] ? __fget_files+0x20e/0x3c0 [ 206.634366][ T8208] ksys_read+0x12a/0x250 [ 206.634394][ T8208] ? __pfx_ksys_read+0x10/0x10 [ 206.634430][ T8208] do_syscall_64+0xcd/0xf80 [ 206.634463][ T8208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.634485][ T8208] RIP: 0033:0x7ff12338f7c9 [ 206.634503][ T8208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.634522][ T8208] RSP: 002b:00007ff1242a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 206.634540][ T8208] RAX: ffffffffffffffda RBX: 00007ff1235e5fa0 RCX: 00007ff12338f7c9 [ 206.634554][ T8208] RDX: 0000000000000102 RSI: 0000000000000000 RDI: 0000000000000003 [ 206.634565][ T8208] RBP: 00007ff1242a1090 R08: 0000000000000000 R09: 0000000000000000 [ 206.634577][ T8208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.634589][ T8208] R13: 00007ff1235e6038 R14: 00007ff1235e5fa0 R15: 00007ffca3659b68 [ 206.634621][ T8208] [ 207.428371][ T8125] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 207.454401][ T8125] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 207.474015][ T8125] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 207.498413][ T8125] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 207.654162][ T8125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.741542][ T8125] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.770098][ T3920] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.777284][ T3920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.798981][ T3920] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.806145][ T3920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.978033][ T5840] Bluetooth: hci4: command tx timeout [ 209.263026][ T8125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.822655][ T8278] netlink: 16 bytes leftover after parsing attributes in process `syz.3.593'. [ 210.048121][ T5840] Bluetooth: hci4: command tx timeout [ 210.631914][ T8125] veth0_vlan: entered promiscuous mode [ 210.684745][ T8125] veth1_vlan: entered promiscuous mode [ 210.796543][ T8125] veth0_macvtap: entered promiscuous mode [ 210.805741][ T8297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.596'. [ 210.833558][ T8125] veth1_macvtap: entered promiscuous mode [ 210.893748][ T8125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.971027][ T8125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.133149][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.182455][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.225579][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.255743][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.535252][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.593356][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.813930][ T3842] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.857839][ T3842] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.127984][ T5840] Bluetooth: hci4: command tx timeout [ 212.470844][ T8349] random: crng reseeded on system resumption [ 212.640451][ T8354] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 213.552013][ T8369] ptp ptp0: only physical clock in use now [ 214.141855][ T8378] netlink: 16 bytes leftover after parsing attributes in process `syz.0.611'. [ 215.063996][ T8390] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 215.378877][ T8396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.617'. [ 215.395378][ T8396] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 217.359115][ T8447] netlink: 16 bytes leftover after parsing attributes in process `syz.4.633'. [ 217.461356][ T8447] : Can't lookup blockdev [ 217.998892][ T8459] netlink: 326 bytes leftover after parsing attributes in process `syz.0.638'. [ 218.798125][ T8476] binder: 8475:8476 ioctl c018620c 0 returned -22 [ 219.248973][ T8489] ubi: mtd0 is already attached to ubi31 [ 219.581330][ T8496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.648'. [ 219.694110][ T30] audit: type=1806 audit(1765965048.811:6): xattr="." res=0 [ 219.819931][ T8505] ptp ptp0: only physical clock in use now [ 219.984669][ T8510] netlink: 334 bytes leftover after parsing attributes in process `syz.0.653'. [ 220.166680][ T8492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.352537][ T8535] synth uevent: /devices/platform/dummy_hcd.4/usbmon/usbmon5: unknown uevent action string [ 221.417010][ T8535] usbmon usbmon5: uevent: failed to send synthetic uevent: -22 [ 221.860127][ T8541] netlink: 'syz.0.662': attribute type 8 has an invalid length. [ 222.987534][ T8566] Unable to find swap-space signature [ 223.355200][ T8577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.675'. [ 223.360201][ T8579] sctp: [Deprecated]: syz.3.674 (pid 8579) Use of int in maxseg socket option. [ 223.360201][ T8579] Use struct sctp_assoc_value instead [ 223.380998][ T8577] netlink: 13 bytes leftover after parsing attributes in process `syz.1.675'. [ 223.610546][ T8585] FAULT_INJECTION: forcing a failure. [ 223.610546][ T8585] name failslab, interval 1, probability 0, space 0, times 0 [ 223.648194][ T8585] CPU: 1 UID: 7 PID: 8585 Comm: syz.3.677 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.648239][ T8585] Tainted: [L]=SOFTLOCKUP [ 223.648250][ T8585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 223.648266][ T8585] Call Trace: [ 223.648277][ T8585] [ 223.648287][ T8585] dump_stack_lvl+0x16c/0x1f0 [ 223.648339][ T8585] should_fail_ex+0x512/0x640 [ 223.648372][ T8585] ? __kmalloc_cache_noprof+0x5f/0x800 [ 223.648404][ T8585] should_failslab+0xc2/0x120 [ 223.648440][ T8585] __kmalloc_cache_noprof+0x80/0x800 [ 223.648469][ T8585] ? __do_sys_fanotify_init+0x5e7/0xed0 [ 223.648520][ T8585] ? __do_sys_fanotify_init+0x5e7/0xed0 [ 223.648551][ T8585] __do_sys_fanotify_init+0x5e7/0xed0 [ 223.648588][ T8585] do_syscall_64+0xcd/0xf80 [ 223.648628][ T8585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.648651][ T8585] RIP: 0033:0x7fc51058f7c9 [ 223.648676][ T8585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.648698][ T8585] RSP: 002b:00007fc51136f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 223.648719][ T8585] RAX: ffffffffffffffda RBX: 00007fc5107e5fa0 RCX: 00007fc51058f7c9 [ 223.648735][ T8585] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000c00 [ 223.648750][ T8585] RBP: 00007fc510613f91 R08: 0000000000000000 R09: 0000000000000000 [ 223.648764][ T8585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.648778][ T8585] R13: 00007fc5107e6038 R14: 00007fc5107e5fa0 R15: 00007fff69a9c158 [ 223.648813][ T8585] [ 224.449594][ T8604] netlink: 16 bytes leftover after parsing attributes in process `syz.0.682'. [ 224.972267][ T8614] ptp ptp0: only physical clock in use now [ 228.059063][ T8651] overlayfs: missing 'lowerdir' [ 229.116069][ T8673] FAULT_INJECTION: forcing a failure. [ 229.116069][ T8673] name failslab, interval 1, probability 0, space 0, times 0 [ 229.183335][ T8667] netlink: 16 bytes leftover after parsing attributes in process `syz.4.697'. [ 229.289332][ T8676] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 229.308369][ T8676] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 229.316629][ T8676] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 229.323486][ T8676] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 229.332070][ T8676] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 229.380011][ T8676] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 229.415389][ T8673] CPU: 0 UID: 0 PID: 8673 Comm: syz.1.698 Tainted: G L syzkaller #0 PREEMPT(full) [ 229.415427][ T8673] Tainted: [L]=SOFTLOCKUP [ 229.415434][ T8673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 229.415444][ T8673] Call Trace: [ 229.415450][ T8673] [ 229.415456][ T8673] dump_stack_lvl+0x16c/0x1f0 [ 229.415480][ T8673] should_fail_ex+0x512/0x640 [ 229.415496][ T8673] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 229.415515][ T8673] should_failslab+0xc2/0x120 [ 229.415535][ T8673] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 229.415552][ T8673] ? __d_alloc+0x35/0xa80 [ 229.415567][ T8673] ? __d_alloc+0x35/0xa80 [ 229.415578][ T8673] __d_alloc+0x35/0xa80 [ 229.415592][ T8673] d_alloc_pseudo+0x1c/0xc0 [ 229.415608][ T8673] alloc_file_pseudo+0xcf/0x230 [ 229.415624][ T8673] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 229.415639][ T8673] ? alloc_fd+0x471/0x7d0 [ 229.415704][ T8673] sock_alloc_file+0x50/0x210 [ 229.415724][ T8673] __sys_socket+0x1c0/0x260 [ 229.415736][ T8673] ? __x64_sys_openat+0x174/0x210 [ 229.415751][ T8673] ? __pfx___sys_socket+0x10/0x10 [ 229.415763][ T8673] ? xfd_validate_state+0x61/0x180 [ 229.415781][ T8673] __x64_sys_socket+0x72/0xb0 [ 229.415792][ T8673] ? lockdep_hardirqs_on+0x7c/0x110 [ 229.415812][ T8673] do_syscall_64+0xcd/0xf80 [ 229.415833][ T8673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.415846][ T8673] RIP: 0033:0x7ff12338f7c9 [ 229.415857][ T8673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.415870][ T8673] RSP: 002b:00007ff12425f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 229.415883][ T8673] RAX: ffffffffffffffda RBX: 00007ff1235e6180 RCX: 00007ff12338f7c9 [ 229.415893][ T8673] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 229.415900][ T8673] RBP: 00007ff123413f91 R08: 0000000000000000 R09: 0000000000000000 [ 229.415911][ T8673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.415919][ T8673] R13: 00007ff1235e6218 R14: 00007ff1235e6180 R15: 00007ffca3659b68 [ 229.415937][ T8673] [ 230.159405][ T8682] snd_virmidi snd_virmidi.0: control 61678:131081:3:y·:0 is already present [ 230.323412][ T8687] netlink: 16 bytes leftover after parsing attributes in process `syz.0.704'. [ 230.514158][ T8690] FAULT_INJECTION: forcing a failure. [ 230.514158][ T8690] name fail_futex, interval 1, probability 0, space 0, times 0 [ 230.545818][ T8690] CPU: 0 UID: 0 PID: 8690 Comm: syz.4.701 Tainted: G L syzkaller #0 PREEMPT(full) [ 230.545851][ T8690] Tainted: [L]=SOFTLOCKUP [ 230.545857][ T8690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 230.545868][ T8690] Call Trace: [ 230.545875][ T8690] [ 230.545881][ T8690] dump_stack_lvl+0x16c/0x1f0 [ 230.545913][ T8690] should_fail_ex+0x512/0x640 [ 230.545934][ T8690] get_futex_key+0x1d0/0x15f0 [ 230.545955][ T8690] ? __pfx_get_futex_key+0x10/0x10 [ 230.545975][ T8690] futex_wake+0xea/0x530 [ 230.545994][ T8690] ? futex_wait+0x120/0x380 [ 230.546013][ T8690] ? __pfx_futex_wait+0x10/0x10 [ 230.546032][ T8690] ? __pfx_futex_wake+0x10/0x10 [ 230.546058][ T8690] ? __do_sys_clone3+0xd7/0x290 [ 230.546082][ T8690] ? __pfx___do_sys_clone3+0x10/0x10 [ 230.546106][ T8690] do_futex+0x1e3/0x350 [ 230.546125][ T8690] ? __pfx_do_futex+0x10/0x10 [ 230.546144][ T8690] ? __sys_sendmsg+0x18c/0x220 [ 230.546172][ T8690] __x64_sys_futex+0x1e0/0x4c0 [ 230.546191][ T8690] ? __pfx___x64_sys_futex+0x10/0x10 [ 230.546209][ T8690] ? xfd_validate_state+0x61/0x180 [ 230.546226][ T8690] ? keyctl_keyring_move+0x117/0x150 [ 230.546244][ T8690] do_syscall_64+0xcd/0xf80 [ 230.546265][ T8690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.546280][ T8690] RIP: 0033:0x7fa63c98f7c9 [ 230.546293][ T8690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.546307][ T8690] RSP: 002b:00007fa63d81c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 230.546321][ T8690] RAX: ffffffffffffffda RBX: 00007fa63cbe6098 RCX: 00007fa63c98f7c9 [ 230.546330][ T8690] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa63cbe609c [ 230.546338][ T8690] RBP: 00007fa63cbe6090 R08: 00007fa63d83e000 R09: 0000000000000000 [ 230.546347][ T8690] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 230.546356][ T8690] R13: 00007fa63cbe6128 R14: 00007ffd0866f840 R15: 00007ffd0866f928 [ 230.546377][ T8690] [ 230.810811][ T132] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.235817][ T8694] FAULT_INJECTION: forcing a failure. [ 231.235817][ T8694] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 231.250569][ T8694] CPU: 0 UID: 0 PID: 8694 Comm: syz.0.706 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.250609][ T8694] Tainted: [L]=SOFTLOCKUP [ 231.250617][ T8694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 231.250633][ T8694] Call Trace: [ 231.250650][ T8694] [ 231.250660][ T8694] dump_stack_lvl+0x16c/0x1f0 [ 231.250705][ T8694] should_fail_ex+0x512/0x640 [ 231.250738][ T8694] should_fail_alloc_page+0xe7/0x130 [ 231.250774][ T8694] prepare_alloc_pages+0x401/0x670 [ 231.250808][ T8694] ? rcu_is_watching+0x12/0xc0 [ 231.250842][ T8694] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 231.250872][ T8694] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 231.250906][ T8694] ? is_bpf_text_address+0x94/0x1a0 [ 231.250935][ T8694] ? kernel_text_address+0x8d/0x100 [ 231.250961][ T8694] ? __kernel_text_address+0xd/0x40 [ 231.250983][ T8694] ? unwind_get_return_address+0x59/0xa0 [ 231.251013][ T8694] ? arch_stack_walk+0xa6/0x100 [ 231.251043][ T8694] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 231.251084][ T8694] ? stack_depot_save_flags+0x29/0x9b0 [ 231.251110][ T8694] ? __pfx_stack_trace_save+0x10/0x10 [ 231.251145][ T8694] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 231.251180][ T8694] ? policy_nodemask+0xea/0x4e0 [ 231.251217][ T8694] alloc_pages_mpol+0x1fb/0x550 [ 231.251251][ T8694] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 231.251295][ T8694] alloc_pages_noprof+0x131/0x390 [ 231.251352][ T8694] kimage_alloc_pages+0x74/0x350 [ 231.251391][ T8694] kimage_alloc_control_pages+0x153/0xa00 [ 231.251432][ T8694] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 231.251475][ T8694] do_kexec_load+0x439/0x860 [ 231.251499][ T8694] ? __pfx_do_kexec_load+0x10/0x10 [ 231.251525][ T8694] ? _copy_from_user+0x59/0xd0 [ 231.251554][ T8694] __x64_sys_kexec_load+0x1bf/0x230 [ 231.251591][ T8694] do_syscall_64+0xcd/0xf80 [ 231.251632][ T8694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.251666][ T8694] RIP: 0033:0x7fa57db8f7c9 [ 231.251686][ T8694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.251711][ T8694] RSP: 002b:00007fa57eab9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 231.251735][ T8694] RAX: ffffffffffffffda RBX: 00007fa57dde5fa0 RCX: 00007fa57db8f7c9 [ 231.251753][ T8694] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000007 [ 231.251769][ T8694] RBP: 00007fa57dc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 231.251784][ T8694] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 231.251798][ T8694] R13: 00007fa57dde6038 R14: 00007fa57dde5fa0 R15: 00007ffdaf9c5a38 [ 231.251831][ T8694] [ 231.251867][ T8694] kexec: Could not allocate control_code_buffer [ 231.373810][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 231.418720][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 231.420861][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 231.437161][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 231.675310][ T8694] openvswitch: netlink: IP tunnel dst address not specified [ 232.475732][ T8715] ptp ptp0: only physical clock in use now [ 232.493087][ T8716] netlink: 16 bytes leftover after parsing attributes in process `syz.3.711'. [ 233.412348][ T8728] FAULT_INJECTION: forcing a failure. [ 233.412348][ T8728] name failslab, interval 1, probability 0, space 0, times 0 [ 233.488942][ T8728] CPU: 0 UID: 0 PID: 8728 Comm: syz.3.717 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.488985][ T8728] Tainted: [L]=SOFTLOCKUP [ 233.488995][ T8728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 233.489009][ T8728] Call Trace: [ 233.489018][ T8728] [ 233.489029][ T8728] dump_stack_lvl+0x16c/0x1f0 [ 233.489071][ T8728] should_fail_ex+0x512/0x640 [ 233.489096][ T8728] ? __kmalloc_noprof+0xca/0x910 [ 233.489127][ T8728] should_failslab+0xc2/0x120 [ 233.489163][ T8728] __kmalloc_noprof+0xeb/0x910 [ 233.489190][ T8728] ? cache_create_net+0x9d/0x220 [ 233.489234][ T8728] ? cache_create_net+0x9d/0x220 [ 233.489267][ T8728] cache_create_net+0x9d/0x220 [ 233.489302][ T8728] nfsd_idmap_init+0x11f/0x250 [ 233.489329][ T8728] ? __pfx_nfsd_net_init+0x10/0x10 [ 233.489373][ T8728] nfsd_net_init+0x69/0x3d0 [ 233.489419][ T8728] ? __pfx_nfsd_net_init+0x10/0x10 [ 233.489454][ T8728] ops_init+0x1e2/0x5f0 [ 233.489490][ T8728] setup_net+0x11d/0x3a0 [ 233.489520][ T8728] ? __pfx_setup_net+0x10/0x10 [ 233.489548][ T8728] ? lockdep_init_map_type+0x5c/0x270 [ 233.489574][ T8728] ? mutex_init_lockep+0x110/0x150 [ 233.489604][ T8728] copy_net_ns+0x351/0x7c0 [ 233.489640][ T8728] create_new_namespaces+0x3ea/0xab0 [ 233.489680][ T8728] copy_namespaces+0x468/0x570 [ 233.489714][ T8728] copy_process+0x2a70/0x7430 [ 233.489765][ T8728] ? __pfx_copy_process+0x10/0x10 [ 233.489816][ T8728] kernel_clone+0xfc/0x910 [ 233.489852][ T8728] ? __pfx_kernel_clone+0x10/0x10 [ 233.489883][ T8728] ? rcu_is_watching+0x12/0xc0 [ 233.489921][ T8728] ? rcu_is_watching+0x12/0xc0 [ 233.489950][ T8728] ? trace_sched_exit_tp+0xd1/0x110 [ 233.489981][ T8728] ? __schedule+0x10b9/0x6150 [ 233.490010][ T8728] ? __schedule+0x114c/0x6150 [ 233.490043][ T8728] __do_sys_clone+0xce/0x120 [ 233.490076][ T8728] ? __pfx___do_sys_clone+0x10/0x10 [ 233.490139][ T8728] do_syscall_64+0xcd/0xf80 [ 233.490176][ T8728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.490200][ T8728] RIP: 0033:0x7fc51058f7c9 [ 233.490220][ T8728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.490245][ T8728] RSP: 002b:00007fc51136efe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 233.490269][ T8728] RAX: ffffffffffffffda RBX: 00007fc5107e5fa0 RCX: 00007fc51058f7c9 [ 233.490286][ T8728] RDX: 0000000000000000 RSI: 00000000000097f0 RDI: 0000000040180211 [ 233.490301][ T8728] RBP: 00007fc510613f91 R08: 0000000000000000 R09: 0000000000000000 [ 233.490316][ T8728] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 233.490331][ T8728] R13: 00007fc5107e6038 R14: 00007fc5107e5fa0 R15: 00007fff69a9c158 [ 233.490376][ T8728] [ 233.806125][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 234.275709][ T8754] netlink: 16 bytes leftover after parsing attributes in process `syz.0.726'. [ 234.480412][ T8759] snd_virmidi snd_virmidi.0: control 61678:131081:3:y·:0 is already present [ 235.741717][ T8801] snd_virmidi snd_virmidi.0: control 61678:131081:3:y·:0 is already present [ 235.891557][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 236.867382][ T8833] snd_virmidi snd_virmidi.0: control 61678:131081:3:y·:0 is already present [ 237.963602][ T8858] FAULT_INJECTION: forcing a failure. [ 237.963602][ T8858] name failslab, interval 1, probability 0, space 0, times 0 [ 237.980774][ T8858] CPU: 1 UID: 0 PID: 8858 Comm: syz.0.759 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.980827][ T8858] Tainted: [L]=SOFTLOCKUP [ 237.980836][ T8858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 237.980851][ T8858] Call Trace: [ 237.980860][ T8858] [ 237.980870][ T8858] dump_stack_lvl+0x16c/0x1f0 [ 237.980912][ T8858] should_fail_ex+0x512/0x640 [ 237.980938][ T8858] ? fs_reclaim_acquire+0xae/0x150 [ 237.980980][ T8858] should_failslab+0xc2/0x120 [ 237.981016][ T8858] __kmalloc_noprof+0xeb/0x910 [ 237.981042][ T8858] ? tomoyo_encode2+0x100/0x3e0 [ 237.981078][ T8858] ? tomoyo_encode2+0x100/0x3e0 [ 237.981107][ T8858] tomoyo_encode2+0x100/0x3e0 [ 237.981140][ T8858] tomoyo_encode+0x29/0x50 [ 237.981169][ T8858] tomoyo_realpath_from_path+0x18f/0x6e0 [ 237.981210][ T8858] tomoyo_check_open_permission+0x2ab/0x3c0 [ 237.981239][ T8858] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 237.981301][ T8858] ? do_raw_spin_lock+0x12c/0x2b0 [ 237.981338][ T8858] tomoyo_file_open+0x6b/0x90 [ 237.981372][ T8858] security_file_open+0x84/0x1e0 [ 237.981401][ T8858] do_dentry_open+0x597/0x1590 [ 237.981435][ T8858] ? security_inode_permission+0xbf/0x260 [ 237.981466][ T8858] vfs_open+0x82/0x3f0 [ 237.981494][ T8858] path_openat+0x2078/0x3140 [ 237.981532][ T8858] ? __pfx_path_openat+0x10/0x10 [ 237.981574][ T8858] do_filp_open+0x20b/0x470 [ 237.981608][ T8858] ? __pfx_do_filp_open+0x10/0x10 [ 237.981667][ T8858] ? alloc_fd+0x471/0x7d0 [ 237.981709][ T8858] do_sys_openat2+0x121/0x290 [ 237.981735][ T8858] ? __pfx_do_sys_openat2+0x10/0x10 [ 237.981776][ T8858] __x64_sys_openat+0x174/0x210 [ 237.981811][ T8858] ? __pfx___x64_sys_openat+0x10/0x10 [ 237.981853][ T8858] do_syscall_64+0xcd/0xf80 [ 237.981890][ T8858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.981915][ T8858] RIP: 0033:0x7fa57db8f7c9 [ 237.981935][ T8858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.981958][ T8858] RSP: 002b:00007fa57eab9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 237.981981][ T8858] RAX: ffffffffffffffda RBX: 00007fa57dde5fa0 RCX: 00007fa57db8f7c9 [ 237.981998][ T8858] RDX: 0000000000141401 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 237.982015][ T8858] RBP: 00007fa57dc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 237.982029][ T8858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.982043][ T8858] R13: 00007fa57dde6038 R14: 00007fa57dde5fa0 R15: 00007ffdaf9c5a38 [ 237.982077][ T8858] [ 237.982105][ T8858] ERROR: Out of memory at tomoyo_realpath_from_path. [ 238.558151][ T8875] ptp ptp0: only physical clock in use now [ 239.979135][ T8907] Unable to find swap-space signature [ 240.121962][ T8908] bond0: no command found in slaves file - use +ifname or -ifname [ 240.353174][ T8915] ptp ptp0: only physical clock in use now [ 240.539738][ T8917] snd_virmidi snd_virmidi.0: control 61678:131081:3:y·:0 is already present [ 241.059451][ T8931] FAULT_INJECTION: forcing a failure. [ 241.059451][ T8931] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 241.088250][ T8931] CPU: 1 UID: 0 PID: 8931 Comm: syz.4.777 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.088289][ T8931] Tainted: [L]=SOFTLOCKUP [ 241.088297][ T8931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 241.088310][ T8931] Call Trace: [ 241.088318][ T8931] [ 241.088327][ T8931] dump_stack_lvl+0x16c/0x1f0 [ 241.088364][ T8931] should_fail_ex+0x512/0x640 [ 241.088394][ T8931] should_fail_alloc_page+0xe7/0x130 [ 241.088429][ T8931] prepare_alloc_pages+0x401/0x670 [ 241.088466][ T8931] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 241.088493][ T8931] ? bpf_ksym_find+0x124/0x1c0 [ 241.088518][ T8931] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 241.088552][ T8931] ? is_bpf_text_address+0x94/0x1a0 [ 241.088579][ T8931] ? kernel_text_address+0x8d/0x100 [ 241.088605][ T8931] ? __kernel_text_address+0xd/0x40 [ 241.088628][ T8931] ? unwind_get_return_address+0x59/0xa0 [ 241.088657][ T8931] ? arch_stack_walk+0xa6/0x100 [ 241.088684][ T8931] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 241.088717][ T8931] ? __lock_acquire+0x436/0x2890 [ 241.088740][ T8931] ? __pfx_stack_trace_save+0x10/0x10 [ 241.088772][ T8931] ? stack_depot_save_flags+0x29/0x9b0 [ 241.088800][ T8931] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 241.088834][ T8931] ? policy_nodemask+0xea/0x4e0 [ 241.088868][ T8931] alloc_pages_mpol+0x1fb/0x550 [ 241.088901][ T8931] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 241.088944][ T8931] folio_alloc_mpol_noprof+0x36/0x2f0 [ 241.088970][ T8931] shmem_alloc_folio+0x135/0x160 [ 241.089006][ T8931] shmem_alloc_and_add_folio+0x494/0xc20 [ 241.089040][ T8931] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 241.089069][ T8931] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 241.089103][ T8931] shmem_get_folio_gfp+0x67f/0x1610 [ 241.089136][ T8931] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 241.089163][ T8931] ? filemap_map_pages+0x12dd/0x1e00 [ 241.089377][ T8931] shmem_fault+0x1fe/0xa00 [ 241.089418][ T8931] ? __pfx_shmem_fault+0x10/0x10 [ 241.089450][ T8931] ? __pfx_filemap_map_pages+0x10/0x10 [ 241.089484][ T8931] ? __pfx_filemap_map_pages+0x10/0x10 [ 241.089506][ T8931] __do_fault+0x10d/0x490 [ 241.089533][ T8931] ? __pfx_filemap_map_pages+0x10/0x10 [ 241.089555][ T8931] do_fault+0xae4/0x1ad0 [ 241.089583][ T8931] ? __pfx_filemap_map_pages+0x10/0x10 [ 241.089612][ T8931] __handle_mm_fault+0x1919/0x2bb0 [ 241.089646][ T8931] ? __pfx___handle_mm_fault+0x10/0x10 [ 241.089690][ T8931] ? find_vma+0xbf/0x140 [ 241.089718][ T8931] ? __pfx_find_vma+0x10/0x10 [ 241.089751][ T8931] handle_mm_fault+0x3fe/0xad0 [ 241.089781][ T8931] do_user_addr_fault+0x7a6/0x1370 [ 241.089812][ T8931] ? rcu_is_watching+0x12/0xc0 [ 241.089846][ T8931] exc_page_fault+0x64/0xc0 [ 241.089877][ T8931] asm_exc_page_fault+0x26/0x30 [ 241.089900][ T8931] RIP: 0010:__get_user_8+0x14/0x30 [ 241.089927][ T8931] Code: ca e9 c0 79 04 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <48> 8b 10 31 c0 0f 01 ca e9 8f 79 04 00 66 66 2e 0f 1f 84 00 00 00 [ 241.089949][ T8931] RSP: 0018:ffffc90002f67d48 EFLAGS: 00050287 [ 241.089969][ T8931] RAX: 0000000000001000 RBX: 0000000000000000 RCX: ffffc90002f67cec [ 241.089984][ T8931] RDX: 00007ffffffff000 RSI: ffffffff8228fef0 RDI: ffffffff8bf2b500 [ 241.090000][ T8931] RBP: 0000000000000200 R08: 00000000ffffffff R09: 00000000ffffffff [ 241.090015][ T8931] R10: 0000000000000001 R11: ffff888077efe6b0 R12: 00000000ffffffff [ 241.090030][ T8931] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 241.090055][ T8931] ? kernel_move_pages+0x320/0x12f0 [ 241.090086][ T8931] kernel_move_pages+0x32e/0x12f0 [ 241.090123][ T8931] ? __pfx_kernel_move_pages+0x10/0x10 [ 241.090158][ T8931] ? fput+0x70/0xf0 [ 241.090181][ T8931] ? ksys_write+0x1ac/0x250 [ 241.090225][ T8931] ? __pfx_ksys_write+0x10/0x10 [ 241.090268][ T8931] __x64_sys_move_pages+0xe0/0x1c0 [ 241.090291][ T8931] ? do_syscall_64+0x91/0xf80 [ 241.090321][ T8931] ? lockdep_hardirqs_on+0x7c/0x110 [ 241.090351][ T8931] do_syscall_64+0xcd/0xf80 [ 241.090383][ T8931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.090404][ T8931] RIP: 0033:0x7fa63c98f7c9 [ 241.090423][ T8931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.090443][ T8931] RSP: 002b:00007fa63d83d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 241.090464][ T8931] RAX: ffffffffffffffda RBX: 00007fa63cbe5fa0 RCX: 00007fa63c98f7c9 [ 241.090480][ T8931] RDX: 0000000000000000 RSI: 0000000000001002 RDI: 0000000000000000 [ 241.090493][ T8931] RBP: 00007fa63d83d090 R08: 0000000000000000 R09: 0000000000000002 [ 241.090504][ T8931] R10: 0000200000001140 R11: 0000000000000246 R12: 0000000000000001 [ 241.090517][ T8931] R13: 00007fa63cbe6038 R14: 00007fa63cbe5fa0 R15: 00007ffd0866f928 [ 241.090547][ T8931] [ 243.002897][ T8962] netlink: 16 bytes leftover after parsing attributes in process `syz.0.784'. [ 243.082113][ T8964] ptp ptp0: only physical clock in use now [ 243.353581][ T8975] kAFS: Invalid Command on /proc/fs/afs/cells file [ 243.442893][ T8975] zero sized request [ 243.576758][ T8982] netlink: 16 bytes leftover after parsing attributes in process `syz.0.788'. [ 245.907232][ T9028] netlink: 16 bytes leftover after parsing attributes in process `syz.4.801'. [ 247.950799][ T9071] usb usb3: usbfs: process 9071 (syz.1.814) did not claim interface 2 before use [ 248.250139][ T9085] netlink: 350 bytes leftover after parsing attributes in process `syz.1.818'. [ 249.224322][ T9114] ptp ptp0: only physical clock in use now [ 250.955193][ T9155] Unable to find swap-space signature [ 251.183588][ T9162] netlink: 16 bytes leftover after parsing attributes in process `syz.0.838'. [ 252.185739][ T9166] can: request_module (can-proto-4) failed. [ 252.547233][ T9192] Unable to find swap-space signature [ 252.736710][ T9198] bond0: no command found in slaves file - use +ifname or -ifname [ 253.496890][ T30] audit: type=1326 audit(1765965082.611:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.1.857" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff12338f7c9 code=0x0 [ 253.829345][ T9225] usb usb36: usbfs: process 9225 (syz.3.861) did not claim interface 0 before use [ 254.466541][ T9237] netlink: 326 bytes leftover after parsing attributes in process `syz.3.863'. [ 254.602371][ T9242] FAULT_INJECTION: forcing a failure. [ 254.602371][ T9242] name failslab, interval 1, probability 0, space 0, times 0 [ 254.629980][ T9242] CPU: 1 UID: 0 PID: 9242 Comm: syz.1.865 Tainted: G L syzkaller #0 PREEMPT(full) [ 254.630020][ T9242] Tainted: [L]=SOFTLOCKUP [ 254.630029][ T9242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 254.630043][ T9242] Call Trace: [ 254.630052][ T9242] [ 254.630061][ T9242] dump_stack_lvl+0x16c/0x1f0 [ 254.630102][ T9242] should_fail_ex+0x512/0x640 [ 254.630127][ T9242] ? kmem_cache_alloc_noprof+0x62/0x770 [ 254.630157][ T9242] should_failslab+0xc2/0x120 [ 254.630192][ T9242] kmem_cache_alloc_noprof+0x83/0x770 [ 254.630218][ T9242] ? dup_fd+0x52/0xc70 [ 254.630252][ T9242] ? dup_fd+0x52/0xc70 [ 254.630277][ T9242] dup_fd+0x52/0xc70 [ 254.630307][ T9242] ? apparmor_task_alloc+0x2c1/0x3b0 [ 254.630334][ T9242] copy_process+0x255d/0x7430 [ 254.630368][ T9242] ? __pfx___futex_wait+0x10/0x10 [ 254.630398][ T9242] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 254.630443][ T9242] ? __pfx_copy_process+0x10/0x10 [ 254.630494][ T9242] kernel_clone+0xfc/0x910 [ 254.630530][ T9242] ? __pfx_kernel_clone+0x10/0x10 [ 254.630562][ T9242] ? rcu_is_watching+0x12/0xc0 [ 254.630601][ T9242] ? rcu_is_watching+0x12/0xc0 [ 254.630631][ T9242] ? trace_sched_exit_tp+0xd1/0x110 [ 254.630676][ T9242] ? __schedule+0x10b9/0x6150 [ 254.630709][ T9242] ? __schedule+0x114c/0x6150 [ 254.630744][ T9242] __do_sys_clone+0xce/0x120 [ 254.630779][ T9242] ? __pfx___do_sys_clone+0x10/0x10 [ 254.630843][ T9242] do_syscall_64+0xcd/0xf80 [ 254.630881][ T9242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.630904][ T9242] RIP: 0033:0x7ff12338f7c9 [ 254.630922][ T9242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.630944][ T9242] RSP: 002b:00007ff1242a0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 254.630965][ T9242] RAX: ffffffffffffffda RBX: 00007ff1235e5fa0 RCX: 00007ff12338f7c9 [ 254.630978][ T9242] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 254.630990][ T9242] RBP: 00007ff123413f91 R08: 0000000000000000 R09: 0000000000000000 [ 254.631001][ T9242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.631013][ T9242] R13: 00007ff1235e6038 R14: 00007ff1235e5fa0 R15: 00007ffca3659b68 [ 254.631045][ T9242] [ 255.602616][ T9260] snd_virmidi snd_virmidi.0: control 61678:131081:3:y·:0 is already present [ 255.741320][ T9263] input: 00 [ 255.741320][ T9263] as /devices/virtual/input/input12 [ 255.755018][ T9263] FAULT_INJECTION: forcing a failure. [ 255.755018][ T9263] name failslab, interval 1, probability 0, space 0, times 0 [ 255.779064][ T9263] CPU: 1 UID: 0 PID: 9263 Comm: syz.0.870 Tainted: G L syzkaller #0 PREEMPT(full) [ 255.779105][ T9263] Tainted: [L]=SOFTLOCKUP [ 255.779113][ T9263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 255.779127][ T9263] Call Trace: [ 255.779135][ T9263] [ 255.779144][ T9263] dump_stack_lvl+0x16c/0x1f0 [ 255.779185][ T9263] should_fail_ex+0x512/0x640 [ 255.779212][ T9263] ? kmem_cache_alloc_noprof+0x62/0x770 [ 255.779243][ T9263] should_failslab+0xc2/0x120 [ 255.779277][ T9263] kmem_cache_alloc_noprof+0x83/0x770 [ 255.779304][ T9263] ? check_path.constprop.0+0x24/0x50 [ 255.779333][ T9263] ? __kernfs_new_node+0xd2/0x990 [ 255.779363][ T9263] ? __kernfs_new_node+0xd2/0x990 [ 255.779385][ T9263] __kernfs_new_node+0xd2/0x990 [ 255.779411][ T9263] ? lockdep_unlock+0x64/0xd0 [ 255.779435][ T9263] ? __lock_acquire+0x12c2/0x2890 [ 255.779453][ T9263] ? __pfx___kernfs_new_node+0x10/0x10 [ 255.779489][ T9263] ? find_held_lock+0x2b/0x80 [ 255.779514][ T9263] ? kernfs_root+0xee/0x2a0 [ 255.779544][ T9263] kernfs_new_node+0x13c/0x1e0 [ 255.779582][ T9263] __kernfs_create_file+0x53/0x350 [ 255.779617][ T9263] sysfs_add_file_mode_ns+0x207/0x3c0 [ 255.779649][ T9263] sysfs_create_file_ns+0x13d/0x1d0 [ 255.779673][ T9263] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 255.779701][ T9263] ? mark_held_locks+0x49/0x80 [ 255.779726][ T9263] device_create_file+0xf2/0x1e0 [ 255.779770][ T9263] device_add+0xa51/0x1980 [ 255.779805][ T9263] ? __pfx_device_add+0x10/0x10 [ 255.779833][ T9263] ? __pfx_exact_lock+0x10/0x10 [ 255.779872][ T9263] ? kobject_get+0xbb/0x150 [ 255.779907][ T9263] cdev_device_add+0x12b/0x270 [ 255.779943][ T9263] evdev_connect+0x3a4/0x4c0 [ 255.779978][ T9263] input_attach_handler.isra.0+0x176/0x250 [ 255.780009][ T9263] input_register_device+0xab9/0x11b0 [ 255.780043][ T9263] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 255.780067][ T9263] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 255.780096][ T9263] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 255.780129][ T9263] ? find_held_lock+0x2b/0x80 [ 255.780176][ T9263] ? __pfx_uinput_ioctl+0x10/0x10 [ 255.780199][ T9263] __x64_sys_ioctl+0x18e/0x210 [ 255.780230][ T9263] do_syscall_64+0xcd/0xf80 [ 255.780263][ T9263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.780288][ T9263] RIP: 0033:0x7fa57db8f7c9 [ 255.780306][ T9263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.780327][ T9263] RSP: 002b:00007fa57eab9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 255.780348][ T9263] RAX: ffffffffffffffda RBX: 00007fa57dde5fa0 RCX: 00007fa57db8f7c9 [ 255.780362][ T9263] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 255.780374][ T9263] RBP: 00007fa57dc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 255.780386][ T9263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.780399][ T9263] R13: 00007fa57dde6038 R14: 00007fa57dde5fa0 R15: 00007ffdaf9c5a38 [ 255.780431][ T9263] [ 256.240061][ T9263] input: failed to attach handler evdev to device input12, error: -12 [ 256.528249][ T9272] usb usb3: usbfs: process 9272 (syz.1.871) did not claim interface 2 before use syzkaller syzkaller login: [ 257.776452][ T9288] FAULT_INJECTION: forcing a failure. [ 257.776452][ T9288] name failslab, interval 1, probability 0, space 0, times 0 [ 257.789822][ T9288] CPU: 1 UID: 0 PID: 9288 Comm: syz.1.878 Tainted: G L syzkaller #0 PREEMPT(full) [ 257.789849][ T9288] Tainted: [L]=SOFTLOCKUP [ 257.789854][ T9288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 257.789865][ T9288] Call Trace: [ 257.789871][ T9288] [ 257.789878][ T9288] dump_stack_lvl+0x16c/0x1f0 [ 257.789907][ T9288] should_fail_ex+0x512/0x640 [ 257.789923][ T9288] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 257.789942][ T9288] should_failslab+0xc2/0x120 [ 257.789962][ T9288] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 257.789983][ T9288] ? proc_alloc_inode+0x25/0x200 [ 257.790003][ T9288] ? __pfx_proc_alloc_inode+0x10/0x10 [ 257.790017][ T9288] ? proc_alloc_inode+0x25/0x200 [ 257.790031][ T9288] proc_alloc_inode+0x25/0x200 [ 257.790046][ T9288] alloc_inode+0x64/0x240 [ 257.790061][ T9288] new_inode+0x22/0x1c0 [ 257.790091][ T9288] proc_pid_make_inode+0x22/0x160 [ 257.790111][ T9288] proc_pident_instantiate+0x85/0x310 [ 257.790132][ T9288] proc_pident_lookup+0x1f5/0x270 [ 257.790155][ T9288] __lookup_slow+0x251/0x460 [ 257.790173][ T9288] ? __pfx___lookup_slow+0x10/0x10 [ 257.790209][ T9288] lookup_slow+0x50/0x70 [ 257.790225][ T9288] link_path_walk+0x12d8/0x1c70 [ 257.790254][ T9288] path_openat+0x1bd/0x3140 [ 257.790271][ T9288] ? do_syscall_64+0xcd/0xf80 [ 257.790302][ T9288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.790325][ T9288] ? __pfx_path_openat+0x10/0x10 [ 257.790355][ T9288] do_filp_open+0x20b/0x470 [ 257.790378][ T9288] ? __pfx_do_filp_open+0x10/0x10 [ 257.790405][ T9288] ? __pfx_kfree_link+0x10/0x10 [ 257.790427][ T9288] ? alloc_fd+0x471/0x7d0 [ 257.790451][ T9288] do_sys_openat2+0x121/0x290 [ 257.790465][ T9288] ? __pfx_do_sys_openat2+0x10/0x10 [ 257.790481][ T9288] ? find_held_lock+0x2b/0x80 [ 257.790503][ T9288] __x64_sys_openat+0x174/0x210 [ 257.790518][ T9288] ? __pfx___x64_sys_openat+0x10/0x10 [ 257.790533][ T9288] ? syscall_user_dispatch+0x78/0x140 [ 257.790555][ T9288] do_syscall_64+0xcd/0xf80 [ 257.790575][ T9288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.790588][ T9288] RIP: 0033:0x7ff12338e010 [ 257.790609][ T9288] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 257.790625][ T9288] RSP: 002b:00007ff1242a0f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 257.790640][ T9288] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007ff12338e010 [ 257.790650][ T9288] RDX: 0000000000000002 RSI: 00007ff1242a0fa0 RDI: 00000000ffffff9c [ 257.790660][ T9288] RBP: 00007ff1242a0fa0 R08: 0000000000000000 R09: 0000000000000000 [ 257.790670][ T9288] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 257.790680][ T9288] R13: 00007ff1235e6038 R14: 00007ff1235e5fa0 R15: 00007ffca3659b68 [ 257.790702][ T9288] [ 259.067321][ T9304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.882'. [ 259.434419][ T9313] ptp ptp0: only physical clock in use now [ 259.490679][ T9315] netlink: 'syz.3.884': attribute type 5 has an invalid length. [ 260.888364][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.895604][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.002640][ T9359] netlink: 16 bytes leftover after parsing attributes in process `syz.1.897'. [ 262.217585][ T9355] netlink: 16 bytes leftover after parsing attributes in process `syz.4.893'. [ 262.726489][ T9367] FAULT_INJECTION: forcing a failure. [ 262.726489][ T9367] name failslab, interval 1, probability 0, space 0, times 0 [ 262.739704][ T9367] CPU: 1 UID: 0 PID: 9367 Comm: syz.0.900 Tainted: G L syzkaller #0 PREEMPT(full) [ 262.739729][ T9367] Tainted: [L]=SOFTLOCKUP [ 262.739734][ T9367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 262.739743][ T9367] Call Trace: [ 262.739751][ T9367] [ 262.739758][ T9367] dump_stack_lvl+0x16c/0x1f0 [ 262.739784][ T9367] should_fail_ex+0x512/0x640 [ 262.739805][ T9367] ? kmem_cache_alloc_noprof+0x62/0x770 [ 262.739825][ T9367] should_failslab+0xc2/0x120 [ 262.739846][ T9367] kmem_cache_alloc_noprof+0x83/0x770 [ 262.739863][ T9367] ? __pmd_alloc+0xbf/0x9c0 [ 262.739884][ T9367] ? __pmd_alloc+0xbf/0x9c0 [ 262.739909][ T9367] __pmd_alloc+0xbf/0x9c0 [ 262.739931][ T9367] __handle_mm_fault+0xbeb/0x2bb0 [ 262.739950][ T9367] ? __pfx___handle_mm_fault+0x10/0x10 [ 262.739982][ T9367] handle_mm_fault+0x3fe/0xad0 [ 262.740000][ T9367] __get_user_pages+0x54e/0x3590 [ 262.740034][ T9367] ? __pfx___get_user_pages+0x10/0x10 [ 262.740059][ T9367] populate_vma_page_range+0x267/0x3f0 [ 262.740082][ T9367] ? __pfx_populate_vma_page_range+0x10/0x10 [ 262.740102][ T9367] ? __pfx_find_vma_intersection+0x10/0x10 [ 262.740123][ T9367] ? do_mmap+0x69c/0x1210 [ 262.740144][ T9367] __mm_populate+0x1d8/0x380 [ 262.740164][ T9367] ? __pfx___mm_populate+0x10/0x10 [ 262.740184][ T9367] ? up_write+0x282/0x4e0 [ 262.740201][ T9367] vm_mmap_pgoff+0x37f/0x470 [ 262.740221][ T9367] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 262.740244][ T9367] ? __x64_sys_futex+0x1e0/0x4c0 [ 262.740258][ T9367] ? __x64_sys_futex+0x1e9/0x4c0 [ 262.740275][ T9367] ksys_mmap_pgoff+0x7d/0x5c0 [ 262.740292][ T9367] ? xfd_validate_state+0x61/0x180 [ 262.740304][ T9367] ? __pfx_ksys_write+0x10/0x10 [ 262.740325][ T9367] __x64_sys_mmap+0x125/0x190 [ 262.740340][ T9367] do_syscall_64+0xcd/0xf80 [ 262.740360][ T9367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.740375][ T9367] RIP: 0033:0x7fa57db8f7c9 [ 262.740387][ T9367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.740400][ T9367] RSP: 002b:00007fa57eab9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 262.740415][ T9367] RAX: ffffffffffffffda RBX: 00007fa57dde5fa0 RCX: 00007fa57db8f7c9 [ 262.740425][ T9367] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 262.740433][ T9367] RBP: 00007fa57dc13f91 R08: 0000000000000002 R09: 0000000000008000 [ 262.740442][ T9367] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 262.740451][ T9367] R13: 00007fa57dde6038 R14: 00007fa57dde5fa0 R15: 00007ffdaf9c5a38 [ 262.740470][ T9367] [ 264.444459][ T9382] snd_virmidi snd_virmidi.0: control 61678:131081:3:y·:0 is already present [ 264.742500][ T9391] snd_virmidi snd_virmidi.0: control 61678:131081:3:y·:0 is already present [ 264.946103][ T9397] netlink: 16 bytes leftover after parsing attributes in process `syz.0.910'. [ 265.054956][ T9398] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(512.0.1), cmd(16) [ 265.230545][ T9399] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(512.0.1), cmd(2) [ 266.792629][ T9415] usb usb3: usbfs: process 9415 (syz.0.914) did not claim interface 0 before use [ 266.980644][ T9419] netlink: 326 bytes leftover after parsing attributes in process `syz.0.915'. [ 267.165772][ T9421] zram0: detected capacity change from 0 to 8 [ 267.378422][ T9426] random: crng reseeded on system resumption [ 267.404779][ T51] Bluetooth: hci1: unexpected event 0x1c length: 725 > 5 [ 268.259100][ T9441] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 268.855485][ T30] audit: type=1804 audit(1765965097.971:8): pid=9449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.922" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 268.943759][ T30] audit: type=1804 audit(1765965098.061:9): pid=9449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.922" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 269.005332][ T9451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.924'. [ 269.068416][ T9455] netlink: 16 bytes leftover after parsing attributes in process `syz.1.923'. [ 271.299067][ T9494] bridge0: port 3(gretap0) entered blocking state [ 271.313708][ T9494] bridge0: port 3(gretap0) entered disabled state [ 271.339098][ T9494] gretap0: entered allmulticast mode [ 271.353103][ T9494] gretap0: entered promiscuous mode [ 271.367730][ T9494] bridge0: port 3(gretap0) entered blocking state [ 271.376076][ T9494] bridge0: port 3(gretap0) entered listening state [ 271.570519][ T9497] ptrace attach of "./syz-executor exec"[9498] was attempted by "./syz-executor exec"[9497] [ 271.584598][ T9497] netlink: 217 bytes leftover after parsing attributes in process `syz.0.938'. [ 271.663487][ T9501] Unable to find swap-space signature [ 273.163156][ T9537] FAULT_INJECTION: forcing a failure. [ 273.163156][ T9537] name failslab, interval 1, probability 0, space 0, times 0 [ 273.185681][ T9537] CPU: 1 UID: 0 PID: 9537 Comm: syz.0.946 Tainted: G L syzkaller #0 PREEMPT(full) [ 273.185719][ T9537] Tainted: [L]=SOFTLOCKUP [ 273.185728][ T9537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 273.185742][ T9537] Call Trace: [ 273.185751][ T9537] [ 273.185761][ T9537] dump_stack_lvl+0x16c/0x1f0 [ 273.185803][ T9537] should_fail_ex+0x512/0x640 [ 273.185828][ T9537] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 273.185861][ T9537] should_failslab+0xc2/0x120 [ 273.185893][ T9537] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 273.185922][ T9537] ? proc_alloc_inode+0x25/0x200 [ 273.185952][ T9537] ? __pfx_proc_alloc_inode+0x10/0x10 [ 273.185979][ T9537] ? proc_alloc_inode+0x25/0x200 [ 273.186005][ T9537] proc_alloc_inode+0x25/0x200 [ 273.186031][ T9537] alloc_inode+0x64/0x240 [ 273.186057][ T9537] new_inode+0x22/0x1c0 [ 273.186084][ T9537] proc_pid_make_inode+0x22/0x160 [ 273.186111][ T9537] proc_pident_instantiate+0x85/0x310 [ 273.186143][ T9537] proc_pident_lookup+0x1f5/0x270 [ 273.186179][ T9537] __lookup_slow+0x251/0x460 [ 273.186204][ T9537] ? __pfx___lookup_slow+0x10/0x10 [ 273.186255][ T9537] lookup_slow+0x50/0x70 [ 273.186279][ T9537] link_path_walk+0x12d8/0x1c70 [ 273.186318][ T9537] path_openat+0x1bd/0x3140 [ 273.186345][ T9537] ? do_syscall_64+0xcd/0xf80 [ 273.186366][ T9537] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.186388][ T9537] ? __pfx_path_openat+0x10/0x10 [ 273.186414][ T9537] do_filp_open+0x20b/0x470 [ 273.186433][ T9537] ? __pfx_do_filp_open+0x10/0x10 [ 273.186457][ T9537] ? __pfx_kfree_link+0x10/0x10 [ 273.186478][ T9537] ? alloc_fd+0x471/0x7d0 [ 273.186501][ T9537] do_sys_openat2+0x121/0x290 [ 273.186542][ T9537] ? __pfx_do_sys_openat2+0x10/0x10 [ 273.186559][ T9537] ? find_held_lock+0x2b/0x80 [ 273.186582][ T9537] __x64_sys_openat+0x174/0x210 [ 273.186597][ T9537] ? __pfx___x64_sys_openat+0x10/0x10 [ 273.186614][ T9537] ? syscall_user_dispatch+0x78/0x140 [ 273.186636][ T9537] do_syscall_64+0xcd/0xf80 [ 273.186655][ T9537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.186669][ T9537] RIP: 0033:0x7fa57db8e010 [ 273.186681][ T9537] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 273.186694][ T9537] RSP: 002b:00007fa57eab8f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 273.186708][ T9537] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fa57db8e010 [ 273.186716][ T9537] RDX: 0000000000000002 RSI: 00007fa57eab8fa0 RDI: 00000000ffffff9c [ 273.186724][ T9537] RBP: 00007fa57eab8fa0 R08: 0000000000000000 R09: 0000000000000000 [ 273.186733][ T9537] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 273.186741][ T9537] R13: 00007fa57dde6038 R14: 00007fa57dde5fa0 R15: 00007ffdaf9c5a38 [ 273.186760][ T9537] [ 273.551020][ T9539] ptp ptp0: only physical clock in use now [ 273.913591][ T9544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.949'. [ 274.769426][ T9544] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 274.889584][ T9544] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 274.963537][ T9544] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 274.988329][ T9544] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 276.288896][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 276.927821][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 277.010320][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 277.017141][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 278.165750][ T9617] ptrace attach of "./syz-executor exec"[9619] was attempted by "./syz-executor exec"[9617] [ 278.219594][ T9617] netlink: 217 bytes leftover after parsing attributes in process `syz.1.964'. [ 279.531357][ T9636] FAULT_INJECTION: forcing a failure. [ 279.531357][ T9636] name failslab, interval 1, probability 0, space 0, times 0 [ 279.551620][ T9636] CPU: 0 UID: 0 PID: 9636 Comm: syz.0.970 Tainted: G L syzkaller #0 PREEMPT(full) [ 279.551653][ T9636] Tainted: [L]=SOFTLOCKUP [ 279.551660][ T9636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 279.551671][ T9636] Call Trace: [ 279.551679][ T9636] [ 279.551688][ T9636] dump_stack_lvl+0x16c/0x1f0 [ 279.551721][ T9636] should_fail_ex+0x512/0x640 [ 279.551736][ T9636] ? __kmalloc_cache_noprof+0x5f/0x800 [ 279.551754][ T9636] should_failslab+0xc2/0x120 [ 279.551775][ T9636] __kmalloc_cache_noprof+0x80/0x800 [ 279.551793][ T9636] ? alloc_pipe_info+0x10e/0x590 [ 279.551816][ T9636] ? alloc_pipe_info+0x10e/0x590 [ 279.551835][ T9636] alloc_pipe_info+0x10e/0x590 [ 279.551857][ T9636] splice_direct_to_actor+0x77d/0xa30 [ 279.551878][ T9636] ? __lock_acquire+0x436/0x2890 [ 279.551891][ T9636] ? __pfx_direct_splice_actor+0x10/0x10 [ 279.551909][ T9636] ? __pfx_aa_file_perm+0x10/0x10 [ 279.551929][ T9636] ? find_held_lock+0x2b/0x80 [ 279.551947][ T9636] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 279.551965][ T9636] ? get_pid_task+0xfc/0x250 [ 279.551982][ T9636] do_splice_direct+0x174/0x240 [ 279.552002][ T9636] ? __pfx_do_splice_direct+0x10/0x10 [ 279.552020][ T9636] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 279.552049][ T9636] ? rw_verify_area+0xcf/0x6c0 [ 279.552068][ T9636] do_sendfile+0xb06/0xe50 [ 279.552089][ T9636] ? __pfx_do_sendfile+0x10/0x10 [ 279.552106][ T9636] ? __fget_files+0x20e/0x3c0 [ 279.552130][ T9636] __x64_sys_sendfile64+0x1d8/0x220 [ 279.552143][ T9636] ? ksys_write+0x1ac/0x250 [ 279.552161][ T9636] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 279.552184][ T9636] do_syscall_64+0xcd/0xf80 [ 279.552206][ T9636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.552220][ T9636] RIP: 0033:0x7fa57db8f7c9 [ 279.552231][ T9636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.552245][ T9636] RSP: 002b:00007fa57eab9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 279.552259][ T9636] RAX: ffffffffffffffda RBX: 00007fa57dde5fa0 RCX: 00007fa57db8f7c9 [ 279.552268][ T9636] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 279.552276][ T9636] RBP: 00007fa57eab9090 R08: 0000000000000000 R09: 0000000000000000 [ 279.552284][ T9636] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 279.552292][ T9636] R13: 00007fa57dde6038 R14: 00007fa57dde5fa0 R15: 00007ffdaf9c5a38 [ 279.552310][ T9636] [ 279.552845][ T9636] snd_virmidi snd_virmidi.0: control 61678:131081:3:y·:0 is already present [ 279.997249][ T9638] netlink: 16 bytes leftover after parsing attributes in process `syz.1.969'. [ 280.805059][ T9656] FAULT_INJECTION: forcing a failure. [ 280.805059][ T9656] name failslab, interval 1, probability 0, space 0, times 0 [ 280.819145][ T9656] CPU: 0 UID: 0 PID: 9656 Comm: syz.3.976 Tainted: G L syzkaller #0 PREEMPT(full) [ 280.819187][ T9656] Tainted: [L]=SOFTLOCKUP [ 280.819198][ T9656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 280.819213][ T9656] Call Trace: [ 280.819222][ T9656] [ 280.819232][ T9656] dump_stack_lvl+0x16c/0x1f0 [ 280.819274][ T9656] should_fail_ex+0x512/0x640 [ 280.819300][ T9656] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 280.819336][ T9656] should_failslab+0xc2/0x120 [ 280.819370][ T9656] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 280.819402][ T9656] ? proc_alloc_inode+0x25/0x200 [ 280.819436][ T9656] ? __pfx_proc_alloc_inode+0x10/0x10 [ 280.819462][ T9656] ? proc_alloc_inode+0x25/0x200 [ 280.819487][ T9656] proc_alloc_inode+0x25/0x200 [ 280.819512][ T9656] alloc_inode+0x64/0x240 [ 280.819538][ T9656] new_inode+0x22/0x1c0 [ 280.819564][ T9656] proc_pid_make_inode+0x22/0x160 [ 280.819593][ T9656] proc_pident_instantiate+0x85/0x310 [ 280.819626][ T9656] proc_pident_lookup+0x1f5/0x270 [ 280.819660][ T9656] __lookup_slow+0x251/0x460 [ 280.819737][ T9656] ? __pfx___lookup_slow+0x10/0x10 [ 280.819798][ T9656] lookup_slow+0x50/0x70 [ 280.819825][ T9656] link_path_walk+0x12d8/0x1c70 [ 280.819870][ T9656] path_openat+0x1bd/0x3140 [ 280.819901][ T9656] ? do_syscall_64+0xcd/0xf80 [ 280.819931][ T9656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.819967][ T9656] ? __pfx_path_openat+0x10/0x10 [ 280.820013][ T9656] do_filp_open+0x20b/0x470 [ 280.820051][ T9656] ? __pfx_do_filp_open+0x10/0x10 [ 280.820098][ T9656] ? __pfx_kfree_link+0x10/0x10 [ 280.820141][ T9656] ? alloc_fd+0x471/0x7d0 [ 280.820183][ T9656] do_sys_openat2+0x121/0x290 [ 280.820209][ T9656] ? __pfx_do_sys_openat2+0x10/0x10 [ 280.820236][ T9656] ? find_held_lock+0x2b/0x80 [ 280.820275][ T9656] __x64_sys_openat+0x174/0x210 [ 280.820303][ T9656] ? __pfx___x64_sys_openat+0x10/0x10 [ 280.820332][ T9656] ? syscall_user_dispatch+0x78/0x140 [ 280.820372][ T9656] do_syscall_64+0xcd/0xf80 [ 280.820408][ T9656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.820433][ T9656] RIP: 0033:0x7fc51058e010 [ 280.820453][ T9656] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 280.820477][ T9656] RSP: 002b:00007fc51136ef10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 280.820501][ T9656] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fc51058e010 [ 280.820517][ T9656] RDX: 0000000000000002 RSI: 00007fc51136efa0 RDI: 00000000ffffff9c [ 280.820532][ T9656] RBP: 00007fc51136efa0 R08: 0000000000000000 R09: 0000000000000000 [ 280.820546][ T9656] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 280.820560][ T9656] R13: 00007fc5107e6038 R14: 00007fc5107e5fa0 R15: 00007fff69a9c158 [ 280.820596][ T9656] [ 281.213290][ T9661] FAULT_INJECTION: forcing a failure. [ 281.213290][ T9661] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 281.230362][ T9661] CPU: 1 UID: 0 PID: 9661 Comm: syz.0.977 Tainted: G L syzkaller #0 PREEMPT(full) [ 281.230403][ T9661] Tainted: [L]=SOFTLOCKUP [ 281.230412][ T9661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 281.230427][ T9661] Call Trace: [ 281.230436][ T9661] [ 281.230446][ T9661] dump_stack_lvl+0x16c/0x1f0 [ 281.230487][ T9661] should_fail_ex+0x512/0x640 [ 281.230519][ T9661] should_fail_alloc_page+0xe7/0x130 [ 281.230552][ T9661] prepare_alloc_pages+0x401/0x670 [ 281.230582][ T9661] ? rcu_is_watching+0x12/0xc0 [ 281.230615][ T9661] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 281.230654][ T9661] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 281.230750][ T9661] ? is_bpf_text_address+0x94/0x1a0 [ 281.230783][ T9661] ? kernel_text_address+0x8d/0x100 [ 281.230811][ T9661] ? __kernel_text_address+0xd/0x40 [ 281.230837][ T9661] ? unwind_get_return_address+0x59/0xa0 [ 281.230866][ T9661] ? arch_stack_walk+0xa6/0x100 [ 281.230898][ T9661] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 281.230938][ T9661] ? stack_depot_save_flags+0x29/0x9b0 [ 281.230963][ T9661] ? __pfx_stack_trace_save+0x10/0x10 [ 281.231001][ T9661] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 281.231037][ T9661] ? policy_nodemask+0xea/0x4e0 [ 281.231073][ T9661] alloc_pages_mpol+0x1fb/0x550 [ 281.231108][ T9661] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 281.231150][ T9661] alloc_pages_noprof+0x131/0x390 [ 281.231184][ T9661] kimage_alloc_pages+0x74/0x350 [ 281.231221][ T9661] kimage_alloc_control_pages+0x153/0xa00 [ 281.231264][ T9661] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 281.231308][ T9661] do_kexec_load+0x439/0x860 [ 281.231332][ T9661] ? __pfx_do_kexec_load+0x10/0x10 [ 281.231356][ T9661] ? _copy_from_user+0x59/0xd0 [ 281.231386][ T9661] __x64_sys_kexec_load+0x1bf/0x230 [ 281.231411][ T9661] do_syscall_64+0xcd/0xf80 [ 281.231445][ T9661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.231470][ T9661] RIP: 0033:0x7fa57db8f7c9 [ 281.231491][ T9661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.231514][ T9661] RSP: 002b:00007fa57ea77038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 281.231539][ T9661] RAX: ffffffffffffffda RBX: 00007fa57dde6180 RCX: 00007fa57db8f7c9 [ 281.231557][ T9661] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000007 [ 281.231572][ T9661] RBP: 00007fa57dc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 281.231587][ T9661] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 281.231601][ T9661] R13: 00007fa57dde6218 R14: 00007fa57dde6180 R15: 00007ffdaf9c5a38 [ 281.231633][ T9661] [ 281.231691][ T9661] kexec: Could not allocate control_code_buffer [ 281.926211][ T9665] netlink: 16 bytes leftover after parsing attributes in process `syz.3.978'. [ 282.103615][ T9674] netlink: 16 bytes leftover after parsing attributes in process `syz.0.982'. [ 282.275278][ T9675] netlink: 'syz.1.983': attribute type 1 has an invalid length. [ 282.284103][ T9675] nbd: error processing sock list [ 283.115624][ T9691] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 283.150186][ T9677] FAULT_INJECTION: forcing a failure. [ 283.150186][ T9677] name failslab, interval 1, probability 0, space 0, times 0 [ 283.284139][ T9692] snd_virmidi snd_virmidi.0: control 61678:131081:3:y·:0 is already present [ 283.289432][ T9677] CPU: 1 UID: 0 PID: 9677 Comm: syz.1.983 Tainted: G L syzkaller #0 PREEMPT(full) [ 283.289476][ T9677] Tainted: [L]=SOFTLOCKUP [ 283.289485][ T9677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 283.289500][ T9677] Call Trace: [ 283.289509][ T9677] [ 283.289519][ T9677] dump_stack_lvl+0x16c/0x1f0 [ 283.289561][ T9677] should_fail_ex+0x512/0x640 [ 283.289588][ T9677] ? __kmalloc_cache_noprof+0x5f/0x800 [ 283.289620][ T9677] should_failslab+0xc2/0x120 [ 283.289668][ T9677] __kmalloc_cache_noprof+0x80/0x800 [ 283.289698][ T9677] ? rfkill_fop_open+0x1b6/0x750 [ 283.289733][ T9677] ? rfkill_fop_open+0x1b6/0x750 [ 283.289761][ T9677] rfkill_fop_open+0x1b6/0x750 [ 283.289801][ T9677] ? __pfx_rfkill_fop_open+0x10/0x10 [ 283.289833][ T9677] misc_open+0x26d/0x450 [ 283.289862][ T9677] ? __pfx_misc_open+0x10/0x10 [ 283.289889][ T9677] chrdev_open+0x234/0x6a0 [ 283.289924][ T9677] ? __pfx_apparmor_file_open+0x10/0x10 [ 283.289949][ T9677] ? __pfx_chrdev_open+0x10/0x10 [ 283.289986][ T9677] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 283.290031][ T9677] do_dentry_open+0x748/0x1590 [ 283.290065][ T9677] ? __pfx_chrdev_open+0x10/0x10 [ 283.290110][ T9677] vfs_open+0x82/0x3f0 [ 283.290141][ T9677] path_openat+0x2078/0x3140 [ 283.290187][ T9677] ? __pfx_path_openat+0x10/0x10 [ 283.290235][ T9677] do_filp_open+0x20b/0x470 [ 283.290268][ T9677] ? __pfx_do_filp_open+0x10/0x10 [ 283.290330][ T9677] ? alloc_fd+0x471/0x7d0 [ 283.290373][ T9677] do_sys_openat2+0x121/0x290 [ 283.290400][ T9677] ? __pfx_do_sys_openat2+0x10/0x10 [ 283.290441][ T9677] __x64_sys_openat+0x174/0x210 [ 283.290473][ T9677] ? __pfx___x64_sys_openat+0x10/0x10 [ 283.290515][ T9677] do_syscall_64+0xcd/0xf80 [ 283.290556][ T9677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.290580][ T9677] RIP: 0033:0x7ff12338f7c9 [ 283.290601][ T9677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.290631][ T9677] RSP: 002b:00007ff124280038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 283.290655][ T9677] RAX: ffffffffffffffda RBX: 00007ff1235e6090 RCX: 00007ff12338f7c9 [ 283.290671][ T9677] RDX: 0000000000000040 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 283.290687][ T9677] RBP: 00007ff123413f91 R08: 0000000000000000 R09: 0000000000000000 [ 283.290703][ T9677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.290718][ T9677] R13: 00007ff1235e6128 R14: 00007ff1235e6090 R15: 00007ffca3659b68 [ 283.290768][ T9677] [ 283.771644][ T9678] warning: `syz.4.981' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 284.265968][ T9707] zswap: compressor not available [ 286.029071][ T9735] snd_virmidi snd_virmidi.0: control 61678:131081:3:y·:0 is already present [ 286.322712][ T9743] FAULT_INJECTION: forcing a failure. [ 286.322712][ T9743] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 286.449018][ C0] bridge0: port 3(gretap0) entered learning state [ 286.484039][ T9743] CPU: 0 UID: 0 PID: 9743 Comm: syz.1.998 Tainted: G L syzkaller #0 PREEMPT(full) [ 286.484080][ T9743] Tainted: [L]=SOFTLOCKUP [ 286.484088][ T9743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 286.484099][ T9743] Call Trace: [ 286.484107][ T9743] [ 286.484115][ T9743] dump_stack_lvl+0x16c/0x1f0 [ 286.484153][ T9743] should_fail_ex+0x512/0x640 [ 286.484184][ T9743] should_fail_alloc_page+0xe7/0x130 [ 286.484217][ T9743] prepare_alloc_pages+0x401/0x670 [ 286.484247][ T9743] ? rcu_is_watching+0x12/0xc0 [ 286.484277][ T9743] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 286.484304][ T9743] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 286.484335][ T9743] ? is_bpf_text_address+0x94/0x1a0 [ 286.484364][ T9743] ? kernel_text_address+0x8d/0x100 [ 286.484387][ T9743] ? __kernel_text_address+0xd/0x40 [ 286.484408][ T9743] ? unwind_get_return_address+0x59/0xa0 [ 286.484435][ T9743] ? arch_stack_walk+0xa6/0x100 [ 286.484460][ T9743] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 286.484498][ T9743] ? stack_depot_save_flags+0x29/0x9b0 [ 286.484519][ T9743] ? __pfx_stack_trace_save+0x10/0x10 [ 286.484549][ T9743] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 286.484580][ T9743] ? policy_nodemask+0xea/0x4e0 [ 286.484614][ T9743] alloc_pages_mpol+0x1fb/0x550 [ 286.484645][ T9743] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 286.484689][ T9743] alloc_pages_noprof+0x131/0x390 [ 286.484718][ T9743] kimage_alloc_pages+0x74/0x350 [ 286.484751][ T9743] kimage_alloc_control_pages+0x153/0xa00 [ 286.484801][ T9743] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 286.484844][ T9743] do_kexec_load+0x439/0x860 [ 286.484866][ T9743] ? __pfx_do_kexec_load+0x10/0x10 [ 286.484888][ T9743] ? _copy_from_user+0x59/0xd0 [ 286.484916][ T9743] __x64_sys_kexec_load+0x1bf/0x230 [ 286.484942][ T9743] do_syscall_64+0xcd/0xf80 [ 286.484974][ T9743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.485023][ T9743] RIP: 0033:0x7ff12338f7c9 [ 286.485041][ T9743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.485063][ T9743] RSP: 002b:00007ff12425f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 286.485087][ T9743] RAX: ffffffffffffffda RBX: 00007ff1235e6180 RCX: 00007ff12338f7c9 [ 286.485103][ T9743] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000007 [ 286.485117][ T9743] RBP: 00007ff123413f91 R08: 0000000000000000 R09: 0000000000000000 [ 286.485129][ T9743] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 286.485141][ T9743] R13: 00007ff1235e6218 R14: 00007ff1235e6180 R15: 00007ffca3659b68 [ 286.485171][ T9743] [ 286.485197][ T9743] kexec: Could not allocate control_code_buffer [ 287.178673][ T51] Bluetooth: hci1: unexpected event 0x1d length: 6 > 5 [ 287.507355][ T9761] FAULT_INJECTION: forcing a failure. [ 287.507355][ T9761] name fail_futex, interval 1, probability 0, space 0, times 0 [ 287.528939][ T9761] CPU: 0 UID: 0 PID: 9761 Comm: syz.0.1006 Tainted: G L syzkaller #0 PREEMPT(full) [ 287.528982][ T9761] Tainted: [L]=SOFTLOCKUP [ 287.528990][ T9761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 287.529003][ T9761] Call Trace: [ 287.529010][ T9761] [ 287.529019][ T9761] dump_stack_lvl+0x16c/0x1f0 [ 287.529060][ T9761] should_fail_ex+0x512/0x640 [ 287.529102][ T9761] get_futex_key+0x1d0/0x15f0 [ 287.529133][ T9761] ? up_write+0x282/0x4e0 [ 287.529160][ T9761] ? __pfx_get_futex_key+0x10/0x10 [ 287.529188][ T9761] ? do_mremap+0xa8f/0x2020 [ 287.529225][ T9761] futex_wake+0xea/0x530 [ 287.529253][ T9761] ? futex_wait+0x120/0x380 [ 287.529283][ T9761] ? __pfx_futex_wait+0x10/0x10 [ 287.529313][ T9761] ? __pfx_futex_wake+0x10/0x10 [ 287.529350][ T9761] ? up_write+0x282/0x4e0 [ 287.529380][ T9761] do_futex+0x1e3/0x350 [ 287.529407][ T9761] ? __pfx_do_futex+0x10/0x10 [ 287.529431][ T9761] ? __pfx___do_sys_mremap+0x10/0x10 [ 287.529467][ T9761] __x64_sys_futex+0x1e0/0x4c0 [ 287.529508][ T9761] ? __pfx___x64_sys_futex+0x10/0x10 [ 287.529536][ T9761] ? xfd_validate_state+0x61/0x180 [ 287.529573][ T9761] do_syscall_64+0xcd/0xf80 [ 287.529611][ T9761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.529635][ T9761] RIP: 0033:0x7fa57db8f7c9 [ 287.529655][ T9761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.529685][ T9761] RSP: 002b:00007fa57eab90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 287.529709][ T9761] RAX: ffffffffffffffda RBX: 00007fa57dde5fa8 RCX: 00007fa57db8f7c9 [ 287.529726][ T9761] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa57dde5fac [ 287.529748][ T9761] RBP: 00007fa57dde5fa0 R08: 00007fa57eaba000 R09: 0000000000000000 [ 287.529763][ T9761] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.529778][ T9761] R13: 00007fa57dde6038 R14: 00007ffdaf9c5950 R15: 00007ffdaf9c5a38 [ 287.529815][ T9761] [ 287.568121][ T30] audit: type=1800 audit(1765965116.621:10): pid=9761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1006" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 287.803001][ T9763] usb usb3: usbfs: process 9763 (syz.1.1005) did not claim interface 2 before use [ 287.905906][ T9769] input: f¬ as /devices/virtual/input/input15 [ 287.977157][ T9765] netlink: 'syz.4.1007': attribute type 11 has an invalid length. [ 288.020711][ T9765] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 288.918979][ T9790] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582) [ 289.139310][ T9790] FAULT_INJECTION: forcing a failure. [ 289.139310][ T9790] name failslab, interval 1, probability 0, space 0, times 0 [ 289.185473][ T9802] random: crng reseeded on system resumption [ 289.214559][ T9790] CPU: 0 UID: 0 PID: 9790 Comm: syz.4.1012 Tainted: G L syzkaller #0 PREEMPT(full) [ 289.214601][ T9790] Tainted: [L]=SOFTLOCKUP [ 289.214608][ T9790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 289.214621][ T9790] Call Trace: [ 289.214628][ T9790] [ 289.214636][ T9790] dump_stack_lvl+0x16c/0x1f0 [ 289.214672][ T9790] should_fail_ex+0x512/0x640 [ 289.214695][ T9790] ? __kmalloc_noprof+0xca/0x910 [ 289.214722][ T9790] should_failslab+0xc2/0x120 [ 289.214752][ T9790] __kmalloc_noprof+0xeb/0x910 [ 289.214779][ T9790] ? lsm_blob_alloc+0x68/0x90 [ 289.214808][ T9790] ? lsm_blob_alloc+0x68/0x90 [ 289.214833][ T9790] lsm_blob_alloc+0x68/0x90 [ 289.214861][ T9790] security_sk_alloc+0x2f/0x270 [ 289.214884][ T9790] sk_prot_alloc+0x1c7/0x2a0 [ 289.214915][ T9790] sk_alloc+0x36/0xe30 [ 289.214940][ T9790] __netlink_create+0x5e/0x2c0 [ 289.214963][ T9790] ? __wake_up+0x3f/0x60 [ 289.214992][ T9790] netlink_create+0x39e/0x620 [ 289.215020][ T9790] ? __pfx_genl_bind+0x10/0x10 [ 289.215057][ T9790] ? __pfx_genl_unbind+0x10/0x10 [ 289.215083][ T9790] ? __pfx_genl_release+0x10/0x10 [ 289.215107][ T9790] __sock_create+0x339/0x8a0 [ 289.215146][ T9790] __sys_socket+0x14d/0x260 [ 289.215169][ T9790] ? __pfx___sys_socket+0x10/0x10 [ 289.215194][ T9790] ? do_user_addr_fault+0x843/0x1370 [ 289.215226][ T9790] __x64_sys_socket+0x72/0xb0 [ 289.215246][ T9790] ? lockdep_hardirqs_on+0x7c/0x110 [ 289.215277][ T9790] do_syscall_64+0xcd/0xf80 [ 289.215310][ T9790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.215333][ T9790] RIP: 0033:0x7fa63c9916e7 [ 289.215352][ T9790] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.215374][ T9790] RSP: 002b:00007fa63d81afa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 289.215397][ T9790] RAX: ffffffffffffffda RBX: 00007fa63cbe6090 RCX: 00007fa63c9916e7 [ 289.215412][ T9790] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 289.215426][ T9790] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 289.215439][ T9790] R10: 0000200000000680 R11: 0000000000000286 R12: 0000000000000000 [ 289.215453][ T9790] R13: 00007fa63cbe6128 R14: 00007fa63cbe6090 R15: 00007ffd0866f928 [ 289.215488][ T9790] [ 289.457320][ T9801] hub 1-0:1.0: USB hub found [ 289.463886][ T9801] hub 1-0:1.0: 1 port detected [ 289.718548][ T9806] netlink: 'syz.3.1018': attribute type 1 has an invalid length. [ 289.740214][ T9808] netlink: 'syz.4.1017': attribute type 3 has an invalid length. [ 290.119124][ T9819] netlink: 326 bytes leftover after parsing attributes in process `syz.1.1022'. [ 291.745184][ T9852] zswap: compressor 000 not available [ 291.978881][ T9857] FAULT_INJECTION: forcing a failure. [ 291.978881][ T9857] name failslab, interval 1, probability 0, space 0, times 0 [ 292.012044][ T9860] FAULT_INJECTION: forcing a failure. [ 292.012044][ T9860] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 292.030957][ T9857] CPU: 1 UID: 0 PID: 9857 Comm: syz.4.1033 Tainted: G L syzkaller #0 PREEMPT(full) [ 292.031001][ T9857] Tainted: [L]=SOFTLOCKUP [ 292.031011][ T9857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 292.031026][ T9857] Call Trace: [ 292.031035][ T9857] [ 292.031045][ T9857] dump_stack_lvl+0x16c/0x1f0 [ 292.031095][ T9857] should_fail_ex+0x512/0x640 [ 292.031123][ T9857] ? fs_reclaim_acquire+0xae/0x150 [ 292.031163][ T9857] should_failslab+0xc2/0x120 [ 292.031198][ T9857] kmem_cache_alloc_noprof+0x83/0x770 [ 292.031227][ T9857] ? __pfx_map_id_range_down+0x10/0x10 [ 292.031260][ T9857] ? security_inode_alloc+0x3b/0x2b0 [ 292.031293][ T9857] ? security_inode_alloc+0x3b/0x2b0 [ 292.031318][ T9857] security_inode_alloc+0x3b/0x2b0 [ 292.031345][ T9857] inode_init_always_gfp+0xced/0x1040 [ 292.031386][ T9857] alloc_inode+0x86/0x240 [ 292.031414][ T9857] new_inode+0x22/0x1c0 [ 292.031436][ T9857] ? dput.part.0+0xd8/0x570 [ 292.031466][ T9857] simple_fill_super+0x306/0x730 [ 292.031545][ T9857] ? __pfx_nfsd_fill_super+0x10/0x10 [ 292.031585][ T9857] nfsd_fill_super+0x90/0x5a0 [ 292.031620][ T9857] ? __pfx_set_anon_super_fc+0x10/0x10 [ 292.031652][ T9857] ? __pfx_nfsd_fill_super+0x10/0x10 [ 292.031693][ T9857] get_tree_keyed+0x10e/0x1d0 [ 292.031729][ T9857] vfs_get_tree+0x8e/0x330 [ 292.031759][ T9857] path_mount+0x7bf/0x23a0 [ 292.031783][ T9857] ? rcu_is_watching+0x12/0xc0 [ 292.031821][ T9857] ? __pfx_path_mount+0x10/0x10 [ 292.031850][ T9857] ? kmem_cache_free+0x2d8/0x770 [ 292.031885][ T9857] ? putname+0xf5/0x1a0 [ 292.031914][ T9857] ? putname+0xf5/0x1a0 [ 292.031935][ T9857] ? putname+0xf5/0x1a0 [ 292.031964][ T9857] ? __x64_sys_mount+0x293/0x310 [ 292.031986][ T9857] __x64_sys_mount+0x293/0x310 [ 292.032012][ T9857] ? __pfx___x64_sys_mount+0x10/0x10 [ 292.032049][ T9857] do_syscall_64+0xcd/0xf80 [ 292.032086][ T9857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.032111][ T9857] RIP: 0033:0x7fa63c98f7c9 [ 292.032132][ T9857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.032157][ T9857] RSP: 002b:00007fa63d83d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 292.032180][ T9857] RAX: ffffffffffffffda RBX: 00007fa63cbe5fa0 RCX: 00007fa63c98f7c9 [ 292.032198][ T9857] RDX: 0000200000000140 RSI: 0000200000000040 RDI: 0000000000000000 [ 292.032214][ T9857] RBP: 00007fa63ca13f91 R08: 0000000000000000 R09: 0000000000000000 [ 292.032234][ T9857] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 292.032249][ T9857] R13: 00007fa63cbe6038 R14: 00007fa63cbe5fa0 R15: 00007ffd0866f928 [ 292.032305][ T9857] [ 292.190852][ T9845] kexec: Could not allocate control_code_buffer [ 292.196564][ T9860] CPU: 1 UID: 0 PID: 9860 Comm: syz.1.1035 Tainted: G L syzkaller #0 PREEMPT(full) [ 292.196610][ T9860] Tainted: [L]=SOFTLOCKUP [ 292.196619][ T9860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 292.196632][ T9860] Call Trace: [ 292.196640][ T9860] [ 292.196649][ T9860] dump_stack_lvl+0x16c/0x1f0 [ 292.196687][ T9860] should_fail_ex+0x512/0x640 [ 292.196717][ T9860] should_fail_alloc_page+0xe7/0x130 [ 292.196753][ T9860] prepare_alloc_pages+0x401/0x670 [ 292.196791][ T9860] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 292.196824][ T9860] ? stack_trace_save+0x8e/0xc0 [ 292.196856][ T9860] ? __pfx_stack_trace_save+0x10/0x10 [ 292.196888][ T9860] ? stack_depot_save_flags+0x29/0x9b0 [ 292.196913][ T9860] ? bpf_ksym_find+0x124/0x1c0 [ 292.196941][ T9860] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 292.196967][ T9860] ? __kasan_kmalloc+0xaa/0xb0 [ 292.196995][ T9860] ? copy_splice_read+0x1a8/0xc20 [ 292.197027][ T9860] ? splice_direct_to_actor+0x2a1/0xa30 [ 292.197055][ T9860] ? do_splice_direct+0x174/0x240 [ 292.197083][ T9860] ? do_sendfile+0xb06/0xe50 [ 292.197110][ T9860] ? __x64_sys_sendfile64+0x1d8/0x220 [ 292.197129][ T9860] ? do_syscall_64+0xcd/0xf80 [ 292.197158][ T9860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.197206][ T9860] alloc_pages_bulk_noprof+0x77a/0x1410 [ 292.197245][ T9860] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 292.197282][ T9860] ? copy_splice_read+0x1a8/0xc20 [ 292.197316][ T9860] copy_splice_read+0x1e1/0xc20 [ 292.197354][ T9860] ? __pfx_copy_splice_read+0x10/0x10 [ 292.197387][ T9860] ? look_up_lock_class+0x59/0x130 [ 292.197423][ T9860] ? lockdep_init_map_type+0x5c/0x270 [ 292.197448][ T9860] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 292.197495][ T9860] ? __pfx_copy_splice_read+0x10/0x10 [ 292.197525][ T9860] do_splice_read+0x285/0x370 [ 292.197558][ T9860] splice_direct_to_actor+0x2a1/0xa30 [ 292.197601][ T9860] ? __pfx_direct_splice_actor+0x10/0x10 [ 292.197641][ T9860] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 292.197673][ T9860] ? get_pid_task+0xfc/0x250 [ 292.197702][ T9860] do_splice_direct+0x174/0x240 [ 292.197734][ T9860] ? __pfx_do_splice_direct+0x10/0x10 [ 292.197766][ T9860] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 292.197801][ T9860] ? rw_verify_area+0xcf/0x6c0 [ 292.197831][ T9860] do_sendfile+0xb06/0xe50 [ 292.197865][ T9860] ? __pfx_do_sendfile+0x10/0x10 [ 292.197894][ T9860] ? __fget_files+0x20e/0x3c0 [ 292.197931][ T9860] __x64_sys_sendfile64+0x1d8/0x220 [ 292.197952][ T9860] ? ksys_write+0x1ac/0x250 [ 292.197980][ T9860] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 292.198012][ T9860] do_syscall_64+0xcd/0xf80 [ 292.198045][ T9860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.198067][ T9860] RIP: 0033:0x7ff12338f7c9 [ 292.198086][ T9860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.198107][ T9860] RSP: 002b:00007ff1242a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 292.198129][ T9860] RAX: ffffffffffffffda RBX: 00007ff1235e5fa0 RCX: 00007ff12338f7c9 [ 292.198144][ T9860] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 292.198157][ T9860] RBP: 00007ff1242a1090 R08: 0000000000000000 R09: 0000000000000000 [ 292.198171][ T9860] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 292.198184][ T9860] R13: 00007ff1235e6038 R14: 00007ff1235e5fa0 R15: 00007ffca3659b68 [ 292.198216][ T9860] [ 292.200021][ T9860] snd_virmidi snd_virmidi.0: control 61678:131081:3:y·:0 is already present [ 292.430257][ T9871] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1036'. [ 292.768898][ T9871] usb usb3: usbfs: process 9871 (syz.0.1036) did not claim interface 2 before use [ 293.024861][ T9883] nvme_fcloop: unknown parameter or missing value '¿' [ 293.100849][ T9862] KVM: debugfs: duplicate directory 9862-3 [ 293.987522][ T9900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1046'. [ 294.014279][ T9900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1046'. [ 294.063199][ T9900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1046'. [ 294.105675][ T9900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1046'. [ 294.127026][ T9900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1046'. [ 294.180245][ T9900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1046'. [ 294.217260][ T9900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1046'. [ 294.244031][ T9900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1046'. [ 295.174250][ T9898] kexec: Could not allocate control_code_buffer [ 295.330851][ T9915] __nla_validate_parse: 40 callbacks suppressed [ 295.345127][ T9915] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1051'. [ 296.107147][ T9932] netlink: 350 bytes leftover after parsing attributes in process `syz.0.1055'. [ 297.653712][ T9965] ubi: mtd0 is already attached to ubi31 [ 298.221594][ T9976] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1067'. [ 298.252305][ T9972] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1069'. [ 299.847087][ T9984] kexec: Could not allocate control_code_buffer [ 301.265973][T10001] kexec: Could not allocate control_code_buffer [ 301.358781][T10016] FAULT_INJECTION: forcing a failure. [ 301.358781][T10016] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 301.374854][T10016] CPU: 1 UID: 0 PID: 10016 Comm: syz.0.1081 Tainted: G L syzkaller #0 PREEMPT(full) [ 301.374895][T10016] Tainted: [L]=SOFTLOCKUP [ 301.374904][T10016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 301.374917][T10016] Call Trace: [ 301.374926][T10016] [ 301.374936][T10016] dump_stack_lvl+0x16c/0x1f0 [ 301.374976][T10016] should_fail_ex+0x512/0x640 [ 301.375007][T10016] should_fail_alloc_page+0xe7/0x130 [ 301.375045][T10016] prepare_alloc_pages+0x401/0x670 [ 301.375078][T10016] ? rcu_is_watching+0x12/0xc0 [ 301.375111][T10016] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 301.375146][T10016] ? kasan_save_stack+0x42/0x60 [ 301.375173][T10016] ? kasan_save_stack+0x33/0x60 [ 301.375198][T10016] ? kasan_save_track+0x14/0x30 [ 301.375224][T10016] ? __kasan_slab_alloc+0x89/0x90 [ 301.375252][T10016] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 301.375292][T10016] ? __anon_vma_prepare+0x344/0x5e0 [ 301.375321][T10016] ? rcu_is_watching+0x12/0xc0 [ 301.375353][T10016] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 301.375380][T10016] ? __mod_zone_page_state+0xcc/0x1a0 [ 301.375407][T10016] ? lru_gen_add_folio+0x1a4/0xef0 [ 301.375437][T10016] ? __lock_acquire+0x436/0x2890 [ 301.375462][T10016] ? __lock_acquire+0x436/0x2890 [ 301.375483][T10016] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 301.375517][T10016] ? policy_nodemask+0xea/0x4e0 [ 301.375550][T10016] alloc_pages_mpol+0x1fb/0x550 [ 301.375584][T10016] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 301.375634][T10016] folio_alloc_mpol_noprof+0x36/0x2f0 [ 301.375661][T10016] vma_alloc_folio_noprof+0xed/0x1e0 [ 301.375685][T10016] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 301.375719][T10016] do_anonymous_page+0xc81/0x2190 [ 301.375756][T10016] __handle_mm_fault+0x1ecf/0x2bb0 [ 301.375790][T10016] ? __pfx___handle_mm_fault+0x10/0x10 [ 301.375817][T10016] ? __pte_offset_map_lock+0x174/0x310 [ 301.375847][T10016] ? find_held_lock+0x2b/0x80 [ 301.375890][T10016] ? follow_page_pte+0x5cf/0x1390 [ 301.375930][T10016] handle_mm_fault+0x3fe/0xad0 [ 301.375964][T10016] __get_user_pages+0x54e/0x3590 [ 301.376012][T10016] ? __pfx___get_user_pages+0x10/0x10 [ 301.376053][T10016] populate_vma_page_range+0x267/0x3f0 [ 301.376088][T10016] ? __pfx_populate_vma_page_range+0x10/0x10 [ 301.376119][T10016] ? __pfx_find_vma_intersection+0x10/0x10 [ 301.376151][T10016] ? do_mmap+0x69c/0x1210 [ 301.376184][T10016] __mm_populate+0x1d8/0x380 [ 301.376218][T10016] ? __pfx___mm_populate+0x10/0x10 [ 301.376252][T10016] ? up_write+0x282/0x4e0 [ 301.376291][T10016] vm_mmap_pgoff+0x37f/0x470 [ 301.376328][T10016] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 301.376355][T10016] ? __pfx_do_sys_openat2+0x10/0x10 [ 301.376383][T10016] ? __x64_sys_futex+0x1e0/0x4c0 [ 301.376404][T10016] ? __x64_sys_futex+0x1e9/0x4c0 [ 301.376430][T10016] ksys_mmap_pgoff+0x7d/0x5c0 [ 301.376459][T10016] ? xfd_validate_state+0x61/0x180 [ 301.376488][T10016] __x64_sys_mmap+0x125/0x190 [ 301.376517][T10016] do_syscall_64+0xcd/0xf80 [ 301.376556][T10016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.376583][T10016] RIP: 0033:0x7fa57db8f7c9 [ 301.376604][T10016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.376629][T10016] RSP: 002b:00007fa57eab9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 301.376653][T10016] RAX: ffffffffffffffda RBX: 00007fa57dde5fa0 RCX: 00007fa57db8f7c9 [ 301.376670][T10016] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000 [ 301.376684][T10016] RBP: 00007fa57dc13f91 R08: 0000000000000007 R09: 0000000000028000 [ 301.376697][T10016] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 301.376709][T10016] R13: 00007fa57dde6038 R14: 00007fa57dde5fa0 R15: 00007ffdaf9c5a38 [ 301.376739][T10016] [ 301.807757][ C0] bridge0: port 3(gretap0) entered forwarding state [ 301.807817][ C0] bridge0: topology change detected, propagating [ 301.893177][T10012] ================================================================== [ 301.893194][T10012] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 301.893240][T10012] Write of size 8 at addr ffffc90003ff9000 by task syz.3.1079/10012 [ 301.893260][T10012] [ 301.893276][T10012] CPU: 1 UID: 0 PID: 10012 Comm: syz.3.1079 Tainted: G L syzkaller #0 PREEMPT(full) [ 301.893310][T10012] Tainted: [L]=SOFTLOCKUP [ 301.893317][T10012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 301.893341][T10012] Call Trace: [ 301.893351][T10012] [ 301.893362][T10012] dump_stack_lvl+0x116/0x1f0 [ 301.893398][T10012] print_report+0xcd/0x630 [ 301.893430][T10012] ? __virt_addr_valid+0x81/0x610 [ 301.893467][T10012] ? sys_imageblit+0x1a6f/0x1e60 [ 301.893499][T10012] kasan_report+0xe0/0x110 [ 301.893533][T10012] ? sys_imageblit+0x1a6f/0x1e60 [ 301.893577][T10012] sys_imageblit+0x1a6f/0x1e60 [ 301.893616][T10012] ? __pfx_sys_imageblit+0x10/0x10 [ 301.893649][T10012] ? find_held_lock+0x2b/0x80 [ 301.893678][T10012] ? up+0xcb/0x140 [ 301.893698][T10012] ? do_raw_spin_unlock+0x172/0x230 [ 301.893725][T10012] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 301.893759][T10012] ? prb_read_valid+0x78/0xa0 [ 301.893783][T10012] ? __pfx_prb_read_valid+0x10/0x10 [ 301.893811][T10012] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 301.893846][T10012] soft_cursor+0x524/0xa10 [ 301.893876][T10012] ? fb_get_color_depth+0x120/0x250 [ 301.893902][T10012] bit_cursor+0xe8c/0x17e0 [ 301.893932][T10012] ? __pfx_bit_cursor+0x10/0x10 [ 301.893958][T10012] ? __lock_acquire+0x436/0x2890 [ 301.893984][T10012] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 301.894018][T10012] ? get_color+0x1da/0x450 [ 301.894040][T10012] ? __pfx_bit_cursor+0x10/0x10 [ 301.894066][T10012] fbcon_cursor+0x437/0x5d0 [ 301.894089][T10012] ? add_softcursor+0x11/0x290 [ 301.894117][T10012] set_cursor+0x1db/0x250 [ 301.894144][T10012] con_write+0x89/0xb0 [ 301.894174][T10012] do_output_char+0x5d9/0x840 [ 301.894209][T10012] n_tty_write+0x514/0x1280 [ 301.894240][T10012] ? __pfx_n_tty_write+0x10/0x10 [ 301.894263][T10012] ? __pfx_woken_wake_function+0x10/0x10 [ 301.894293][T10012] ? __pfx___might_resched+0x10/0x10 [ 301.894323][T10012] ? __pfx_n_tty_write+0x10/0x10 [ 301.894347][T10012] file_tty_write.constprop.0+0x503/0x9b0 [ 301.894383][T10012] redirected_tty_write+0xd4/0x120 [ 301.894414][T10012] do_iter_readv_writev+0x662/0x9e0 [ 301.894445][T10012] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 301.894475][T10012] ? common_file_perm+0x1b1/0x500 [ 301.894503][T10012] ? bpf_lsm_file_permission+0x9/0x10 [ 301.894544][T10012] ? security_file_permission+0x71/0x210 [ 301.894587][T10012] ? rw_verify_area+0xcf/0x6c0 [ 301.894618][T10012] vfs_writev+0x35f/0xde0 [ 301.894650][T10012] ? __lock_acquire+0x436/0x2890 [ 301.894673][T10012] ? __pfx_vfs_writev+0x10/0x10 [ 301.894703][T10012] ? putname+0xf5/0x1a0 [ 301.894733][T10012] ? __fget_files+0x20e/0x3c0 [ 301.894766][T10012] ? do_writev+0x132/0x340 [ 301.894793][T10012] do_writev+0x132/0x340 [ 301.894821][T10012] ? __pfx_do_writev+0x10/0x10 [ 301.894854][T10012] do_syscall_64+0xcd/0xf80 [ 301.894888][T10012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.894913][T10012] RIP: 0033:0x7fc51058f7c9 [ 301.894934][T10012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.894960][T10012] RSP: 002b:00007fc51134e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 301.894985][T10012] RAX: ffffffffffffffda RBX: 00007fc5107e6090 RCX: 00007fc51058f7c9 [ 301.895003][T10012] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000002 [ 301.895019][T10012] RBP: 00007fc510613f91 R08: 0000000000000000 R09: 0000000000000000 [ 301.895035][T10012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.895050][T10012] R13: 00007fc5107e6128 R14: 00007fc5107e6090 R15: 00007fff69a9c158 [ 301.895077][T10012] [ 301.895086][T10012] [ 301.895094][T10012] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc90003cf9000 allocated at drm_gem_shmem_vmap_locked+0x561/0x7e0 [ 301.895146][T10012] Memory state around the buggy address: [ 301.895170][T10012] ffffc90003ff8f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 301.895188][T10012] ffffc90003ff8f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 301.895206][T10012] >ffffc90003ff9000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 301.895220][T10012] ^ [ 301.895232][T10012] ffffc90003ff9080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 301.895250][T10012] ffffc90003ff9100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 301.895264][T10012] ================================================================== [ 301.895282][T10012] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 301.895301][T10012] CPU: 1 UID: 0 PID: 10012 Comm: syz.3.1079 Tainted: G L syzkaller #0 PREEMPT(full) [ 301.895338][T10012] Tainted: [L]=SOFTLOCKUP [ 301.895347][T10012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 301.895361][T10012] Call Trace: [ 301.895371][T10012] [ 301.895380][T10012] dump_stack_lvl+0x3d/0x1f0 [ 301.895413][T10012] vpanic+0x640/0x6f0 [ 301.895437][T10012] panic+0xca/0xd0 [ 301.895460][T10012] ? __pfx_panic+0x10/0x10 [ 301.895490][T10012] check_panic_on_warn+0xab/0xb0 [ 301.895515][T10012] end_report+0x107/0x160 [ 301.895547][T10012] kasan_report+0xee/0x110 [ 301.895590][T10012] ? sys_imageblit+0x1a6f/0x1e60 [ 301.895629][T10012] sys_imageblit+0x1a6f/0x1e60 [ 301.895672][T10012] ? __pfx_sys_imageblit+0x10/0x10 [ 301.895705][T10012] ? find_held_lock+0x2b/0x80 [ 301.895737][T10012] ? up+0xcb/0x140 [ 301.895757][T10012] ? do_raw_spin_unlock+0x172/0x230 [ 301.895790][T10012] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 301.895824][T10012] ? prb_read_valid+0x78/0xa0 [ 301.895849][T10012] ? __pfx_prb_read_valid+0x10/0x10 [ 301.895876][T10012] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 301.895911][T10012] soft_cursor+0x524/0xa10 [ 301.895941][T10012] ? fb_get_color_depth+0x120/0x250 [ 301.895968][T10012] bit_cursor+0xe8c/0x17e0 [ 301.895998][T10012] ? __pfx_bit_cursor+0x10/0x10 [ 301.896024][T10012] ? __lock_acquire+0x436/0x2890 [ 301.896051][T10012] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 301.896085][T10012] ? get_color+0x1da/0x450 [ 301.896108][T10012] ? __pfx_bit_cursor+0x10/0x10 [ 301.896133][T10012] fbcon_cursor+0x437/0x5d0 [ 301.896157][T10012] ? add_softcursor+0x11/0x290 [ 301.896185][T10012] set_cursor+0x1db/0x250 [ 301.896212][T10012] con_write+0x89/0xb0 [ 301.896241][T10012] do_output_char+0x5d9/0x840 [ 301.896276][T10012] n_tty_write+0x514/0x1280 [ 301.896306][T10012] ? __pfx_n_tty_write+0x10/0x10 [ 301.896326][T10012] ? __pfx_woken_wake_function+0x10/0x10 [ 301.896355][T10012] ? __pfx___might_resched+0x10/0x10 [ 301.896386][T10012] ? __pfx_n_tty_write+0x10/0x10 [ 301.896409][T10012] file_tty_write.constprop.0+0x503/0x9b0 [ 301.896446][T10012] redirected_tty_write+0xd4/0x120 [ 301.896478][T10012] do_iter_readv_writev+0x662/0x9e0 [ 301.896509][T10012] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 301.896538][T10012] ? common_file_perm+0x1b1/0x500 [ 301.896577][T10012] ? bpf_lsm_file_permission+0x9/0x10 [ 301.896603][T10012] ? security_file_permission+0x71/0x210 [ 301.896631][T10012] ? rw_verify_area+0xcf/0x6c0 [ 301.896659][T10012] vfs_writev+0x35f/0xde0 [ 301.896687][T10012] ? __lock_acquire+0x436/0x2890 [ 301.896709][T10012] ? __pfx_vfs_writev+0x10/0x10 [ 301.896742][T10012] ? putname+0xf5/0x1a0 [ 301.896771][T10012] ? __fget_files+0x20e/0x3c0 [ 301.896804][T10012] ? do_writev+0x132/0x340 [ 301.896830][T10012] do_writev+0x132/0x340 [ 301.896857][T10012] ? __pfx_do_writev+0x10/0x10 [ 301.896890][T10012] do_syscall_64+0xcd/0xf80 [ 301.896922][T10012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.896946][T10012] RIP: 0033:0x7fc51058f7c9 [ 301.896964][T10012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.896987][T10012] RSP: 002b:00007fc51134e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 301.897017][T10012] RAX: ffffffffffffffda RBX: 00007fc5107e6090 RCX: 00007fc51058f7c9 [ 301.897034][T10012] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000002 [ 301.897049][T10012] RBP: 00007fc510613f91 R08: 0000000000000000 R09: 0000000000000000 [ 301.897064][T10012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.897078][T10012] R13: 00007fc5107e6128 R14: 00007fc5107e6090 R15: 00007fff69a9c158 [ 301.897103][T10012] [ 301.897603][T10012] Kernel Offset: disabled