last executing test programs: 8.711091758s ago: executing program 0 (id=548): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000100)={{@raw=0xb, 0x3, 0xcf, 0x8, "16a0d89bf208384515b5375a677609aa1bc737276563c3d5a2fca999d5797ab7a10a4d2bc341c4bd369ae535", @raw=0x1}, 0x1, @integer=@value=[0x6d, 0x7, 0x0, 0xbb, 0x4, 0x80000000, 0x1, 0x10001, 0x1, 0x400000000009, 0xc4, 0x9, 0x6, 0x4, 0x3, 0x6, 0x1, 0x3, 0x4, 0x401, 0x6, 0x0, 0xa0, 0x5, 0x2, 0x3, 0x5, 0xa, 0x8, 0x1, 0x8, 0x7f, 0xffffffffffffdb75, 0x100000000, 0x3, 0x7, 0x7fffffffffffffff, 0x1, 0xd, 0x1, 0x71, 0x0, 0x8, 0x2, 0x3, 0x3, 0x2d7, 0x1, 0x0, 0x6, 0x2, 0x800000001, 0x6, 0x7, 0x0, 0x6, 0x4, 0x3, 0x40a, 0xd, 0x3fd, 0x8, 0x7, 0xffff, 0x50ce0883, 0xbd9, 0x5, 0x2, 0xd8f, 0x80000000, 0x0, 0x7, 0x46e, 0xa5cf, 0x8, 0x7, 0xc16b, 0x6, 0x9, 0x6, 0x9000002, 0x6, 0x1, 0x3, 0x3, 0xfffffffffffff16a, 0x6, 0xffffffffffff0001, 0x100000000, 0x4, 0x8, 0x4, 0x2, 0x2000000003, 0xfffffffffffffffe, 0x20007cf9, 0x40, 0x2, 0x7, 0x100, 0x14b, 0x20000000002, 0x45f3, 0x0, 0x0, 0x4, 0x0, 0x8001, 0x0, 0x1, 0x7, 0xcf4, 0x1, 0x3, 0x0, 0x4, 0x7, 0x6, 0x25e2, 0xc9a, 0xd09, 0x40, 0x2, 0xffffffffffffff00, 0x7, 0x9, 0xfffffffffffffff8, 0x40], "f3fadb90a56b67d92a5b28b4b23f332550b1e5454e2027fb1a37efe81bbc27deaf7c3100aab088cdb3b40dad335c9174f18934845ac3152fef1e0f42b42471efc0225a4ebe7e05ce3d4ab429805d5921633ffbce8f1a82ff9dec6c288f431cb7005b85ca8633c55d49bbdf4bd9cac1046064001bca7ba37e4b5eacf1940c9a78"}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) io_uring_setup$auto(0x8, &(0x7f0000000140)={0x0, 0x1, 0x9, 0x210001, 0xc, 0xc05, 0xffffffffffffffff, [0x7fd, 0x1001, 0x3], {0x9, 0x3, 0x6, 0x0, 0x4, 0x895, 0x3fdc, 0x6, 0x5}, {0x2, 0x1d11, 0x54ed, 0x0, 0x101, 0xff, 0x7, 0xa, 0xb}}) sendmsg$auto_NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="000329bd7000fedbdf250900000008000c000100008008000300", @ANYRES32, @ANYBLOB="08002c000001000008001d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000828}, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x2000, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0x20202, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0xa0540, 0x0) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x3, 0x1002, 0xfffffffc, 0x5, 0x2}, "654c6dbc7a4d30983899a7e1325b6a29ba1e18441074052a3fa6c3ccf1bf00"}) readv$auto(r1, &(0x7f0000000a80)={0x0, 0x2}, 0x2) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60343, 0x0) fdatasync$auto(r2) r3 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0x2000, 0x0) write$auto_ftrace_system_enable_fops_trace_events(r3, &(0x7f0000000640)="35fffcdfd046797422570b36e810fca23a3fa25e09eb1c7bfa46b263e65b06afc0248c57edbb9261189b2e3a2784c8f5133545ebfea3ecc15c855fec23a37d341cc7be225afc0e43a38f09cc4a4bec926b64fdcc984963175312e36feffde3baaee6455cb4f940d394f5cc48fa4ebb26b5", 0x71) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) userfaultfd$auto(0x1) ioctl$auto(0x3, 0xc018aa3f, 0xc) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x3}, 0x3ef3}, 0x3, 0x0) 7.335191032s ago: executing program 0 (id=551): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x22062, 0x0) mincore$auto(0x1000, 0x8001, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000400), 0x189d82, 0x0) close_range$auto(0x2, 0x8, 0x0) stat$auto(0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0xc0000, 0x0) sendmsg$auto_MACSEC_CMD_ADD_RXSA(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)=ANY=[@ANYBLOB="88020000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fbdbdf250700000008000000", @ANYRES32=0x0, @ANYBLOB="04000980650209800c008b800600d60029000000984d5707fc7f308e4f1bb513c28243af784351615c4e5f795e1dedacf7d10672fb74558096367c9b4db543bcfed7f41fe8ab7cc4b41178e2d71cfda4d85eb1021f9dc3b8c4467cec90019d16824ff8c322f32875ccfef02230599283a0c2c81b93fcdaaab9ab48f25ed10e9d5387aebabb40b01f5fcfbceb6ab14beaf20602c0f907acefb53e86f9d4f93c82e6640b27c61f53c6975044ba63fd60c211df7f46dbf638c8eca9ca5d008480c8ba8a9d4c9c2aa0aaafd831b589e0b334bea741b6f6e27ac93ff72c3cb109ee7f2339362279"], 0x288}, 0x1, 0x0, 0x0, 0x40014}, 0x48845) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003040), r2) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000380)={0x34, r3, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x2004c840) r4 = socketcall$auto(0x4, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r6 = ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, r8, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40014}, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000440)={0x10001, "2639b9a91c2da3880b31d13e736ca7c94755fc34f356bac2ab617a8341395f61", @raw=0xa62}) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r1, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) 6.645382396s ago: executing program 0 (id=557): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x02', 0x80000002) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = fsmount$auto(0xffffffffffffffff, 0xfffffff8, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) read$auto(r2, 0x0, 0x1f40) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) pwritev$auto(0x3, 0x0, 0x5, 0x3, 0x9) ioctl$auto__dev_ioctl_fops_dev_ioctl(r1, 0x97, &(0x7f0000000180)="af0beed15241a226dcea29a8542c2c3c6cbc59dc785ce7624fa3fec23a3b5de38b23a79590f694ac31de3baec8438bc4f7eb1b9363e4e8c99b55ac5e7456a8e7a5dabda7e1add72089f10d05c28a3574fb4a12d2d7894e61aff1d62c1b9bc5ba6930c1f121c104085b") madvise$auto(0x0, 0x400053, 0x9) 4.985535704s ago: executing program 1 (id=563): close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/fwmark_reflect\x00', 0x760800, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000100), 0x28000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) (async) socket(0x2, 0x2, 0x0) (async) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0040, 0x0) select$auto(0xf, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x6, 0x4000007, 0x2a, 0x6, 0x0, 0x7, 0x2, 0x0, 0x7, 0x40, 0xfffffffffffffff9, 0x1, 0x1000, 0x5, 0xc92]}, 0x0) (async) pipe2$auto(&(0x7f00000000c0), 0xfffffbff) (async) writev$auto(0xca, &(0x7f0000000080)={&(0x7f00000000c0), 0x2}, 0x2000000000000003) 4.885604001s ago: executing program 1 (id=564): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="00022abd6842a1920d1ed3d8cdbc207c570000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/most/drivers/most_core/links\x00', 0x800, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) setresuid$auto(0x8, 0x8, 0x0) r1 = setfsuid$auto(0x0) setreuid$auto(r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="24001000542237e3b864a0138a93c2f5ec61bc166bc58cc3e702f50d78075f40847fb3e770b7b7cc4d404e3f8da3ef94521af87d47575cf331acff6f963d4d1dbf9a5b03fd79eb21564284139d7e15661c532d4723dbb2e17f425a09511b0ee4f45611d351e9749ef17f412e137312fe5066496ce61fb608c2fea054f1b2a182a78bd5127be8ffd4e57cbfbbed7e652b49ce47064b6236c1025232afa785960d30e71eb459cbba816ae761fbdfc71ba2a1f6acfecf7ab70d89403989defe92f3cfeac81a28a383036a4f7e25aa7edad5faeec01790de2dbd50365b0edbf39f9a4086a409b0a8b1bd89e45016d91271c08e0e57ba318804c2550d31318278e8c80b296baeabae153977c08d2e34ca5b48680a512e98268b42d7f8", @ANYRES16=r3, @ANYBLOB="090027bd7000fbdbdf250300000008000800", @ANYRES32=r4, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r4, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0xc050) msgsnd$auto(0x2, &(0x7f0000000300)={0x4, 0x9}, 0x65, 0xfffffffd) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff) mmap$auto(0xc, 0x20009, 0x5, 0x14, 0xffffffffffffffff, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fcntl$auto(0x0, 0x407, 0x8100000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap$auto(0xffffffffffffffff, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x5) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) bpf$auto(0x1a, &(0x7f0000000440)=@link_create={@prog_fd, @target_ifindex=r6, 0x3, 0x81, @kprobe_multi={0x1, 0x7, 0x6, 0x3, 0x6}}, 0x96) close_range$auto(r2, r5, 0x8000) io_uring_setup$auto(0x1, &(0x7f0000000000)={0x3, 0x3ff, 0x2, 0x1, 0x2, 0xa, 0xffffffffffffffff, [], {0x8, 0x400, 0x1, 0x8998d5c, 0x8000100, 0x581, 0x101, 0x0, 0xffffffffffffffff}, {0xbfc7, 0x1, 0x52, 0x8, 0x2000003, 0x3d, 0x8, 0x20000007, 0x7fff}}) open(&(0x7f0000000080)='./bus\x00', 0x64040, 0xc0) 4.668704522s ago: executing program 3 (id=565): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) ioctl$auto_TCSBRKP2(r0, 0x5425, 0x0) close_range$auto(0x2, 0xa, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/tty12\x00', 0x101840, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) ioctl$auto(r2, 0x4b68, 0xffffffffffffffff) ioctl$auto_TCFLSH2(r1, 0x5408, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/loop11/queue/io_poll_delay\x00', 0xa8002, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r6 = ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) ioctl$auto_KVM_GET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)={0xdb, 0x0, [{0xc0010015, 0x3fd, 0x28e5}]}) mremap$auto(0x200000000000, 0x4, 0x4, 0x3, 0x100000000) getcpu$auto(&(0x7f0000000880)=0x7ff, &(0x7f00000008c0)=0x3, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) ioctl$auto_AUTOFS_IOC_ASKUMOUNT(r6, 0x80049370, &(0x7f0000000040)=0x6) 3.877663803s ago: executing program 1 (id=567): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/slabinfo\x00', 0x88880, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=@bpf_attr_5={@target_ifindex, 0xffffffffffffffff, 0x9, 0xa37, 0xffffffffffffffff, @relative_id=0x4000, 0x4}, 0xd7) socket(0x2, 0x80000, 0xa) socket(0x28, 0x1, 0x0) r1 = socket(0x10, 0x2, 0x4) write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRESHEX, @ANYBLOB="010029bd7000fedbdf250d0000000c000600010000000000000008000100"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket(0xa, 0x802, 0x8000) bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, r2, 0x3, 0x0, 0x85, 0x7, 0x9, 0x6, 0x8001}, 0x100) write$auto(0x3, 0x0, 0x5c8) mmap$auto(0x0, 0x5810, 0xffb, 0x8000000008011, 0x3, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x60800, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000840)={{@raw=0x8, 0x7, 0xba28, 0x0, "708c58271a7985a7704331f78af8d149fc53d81fd4a7553c2ff48b48a8a57689adcc1ca6d2cbfa93b50590c9", @raw=0x6}, 0x0, @bytes=@data="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", "fa491e08108961dd5708680f1134935851612a52d629535f54f3832490fc4e7f79daef312b3df3307044713a4801d409aefe3f932f78fc311771094e769c0095f94ee6d74f2517f34a0bbbf502bf3392ac4d93bde5f733ba936c0890312cf035bc44117db9b683eedc5e02a703fc82750d8d6ebac0c3019ef8e6c1eecea33a59"}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getsockopt$auto_SO_RCVMARK(r0, 0x2, 0x4b, &(0x7f0000000540)='^+[\x00\xc2\xe9\xdf\x00\x15\x1a!\x99\x1f\xc1\x8e\xbc\xd1\xcc\xc7\xca\f5\xea\xcb\xa4W\xb2n\x7f\xb4\x0f\xd7^9_\xa9\xab*X\x9fsvub\xcc\x1b.\xe9\x01\xf0L\x1c=0\xafswanV\x02\xb8dt\xfc\x0f\xbdx\xe6\x1f\f\xb5>\'NV\xd2\x0e\r(\xca\xd0z\xf0\x1de\x0fc`pG\xa6\x9b\xe3\vY\x90\x93\xe8\x17\xa3\xa5\xa3~~}\xc8\xbd\xd2K\xf1C92\x8a&\xfe\xf6F\x17]\r\xc0 B\x882/+\x954\xf8\xcd\xbd[M\xcb\xd3\x16\x1b\xf0\xb2J\xc3}g/\xd2/\xb2\xee\x8e}\xb0D\v\xfaa6HE\x9b\xb937\x06\b2\x8f\xdb\x9bh\xb3Q3\xdb\xfd\xd7Y\xc8\xb3\xb7Q\xbb\xa1z\xe5\xb9\xa8V\xba\x1f\xb0b65\x81C_Lm\x97/\xef\x83\x8c\xcc\xf6\xbf\xa6\xc9J\xef\xc3\xd8X\xe0\x1cb.\x90\xcehr\x8dj', &(0x7f0000000140)=0x400) r5 = socket(0x15, 0x5, 0x0) bind$auto(r5, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sendmsg$auto_NFC_CMD_SE_IO(r3, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x62c9fa299accf613) sendmsg$auto(r5, &(0x7f0000000180)={&(0x7f0000000040), 0x7bc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x86bc) r6 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000002880), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002900)={&(0x7f00000028c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="010027bd7000fbdbdf25040000000800090003000000"], 0x1c}}, 0x0) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy$auto(0x1, 0x0, 0x1) 3.877034636s ago: executing program 3 (id=568): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x3, 0xfff, 0x9b72, 0xffffffffffffffff, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x3, 0x15) madvise$auto(0x108000, 0x800032, 0x4) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x7, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0x8640, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) preadv$auto(0x3, 0x0, 0x3, 0x3, 0x10) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x582, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') socket(0x2, 0xa, 0xe) ioctl$auto(0x1, 0x890b, 0x8) 3.080371429s ago: executing program 1 (id=569): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/ip6gre0/netdev_group\x00', 0x102, 0x0) sendfile$auto(r0, r0, 0x0, 0xb) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:01.0/remove\x00', 0xb01, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)='7', 0x1) write$auto(r1, &(0x7f0000000100)='9\x00d1L\xff\x15\xba\xa17=w\xc1\xf8\xff\xff\v\xb5^\xa1/\xfb\xaf\xc8\xfc\\\xa9@\xc0\xee\xa2[', 0x1) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x20200, 0x1001, 0x24, 0x1, 0xffffffffffffffff, 0x0, 0x5}, 0x4f4) r3 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r3, 0x0, 0xfffffdf1) linkat$auto(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mknod$auto(&(0x7f0000000040)='&&\x00', 0xcb, 0x6862) utimes$auto(&(0x7f00000000c0)=':,\x00', 0x0) mprotect$auto(0x0, 0x8000000000000001, 0x8) 2.967141859s ago: executing program 2 (id=570): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0xe, 0x1, 0x0, 0x5eaf, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) lsetxattr$auto(0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x3ff) socket(0xa, 0x2, 0x0) setsockopt$auto(0x3, 0x0, 0x19, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x2, 0xdf, 0x9b72, 0x2, 0x808000) madvise$auto(0x0, 0x200007, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000ffdbdf250400000014001a80ffff04800c0001"], 0x28}, 0x1, 0x0, 0x0, 0x894}, 0x4) openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62bd) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c003b", @ANYRES8], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) sendmsg$auto_NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="88b3c9f21738f24400000094e082eef0cee78574b06abd4936f5aeeb9714792787e2b9a8a8eae7cb97c9f426b2943a", @ANYRES16=r2, @ANYBLOB="100029bd7000fddbdf252b000000510017004ba739840aa1e279d6e0b3fcfe4f4a16794e46169e4e188b7b81d924ab93a2c2c4df138af3180cc483929b192edb94252fe6049c4aaa2a14787bd1b41e03f2981ec84b251f7ee0ed62740d01d2000000080022010000000005003d000e00000008000900010000000800c30000010000"], 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x40090) socket(0x29, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) mmap$auto(0xffffffffffffffff, 0x20009, 0x7, 0xeb1, 0x40000000000a5, 0x8000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x311) setregid$auto(0x81, 0x5) clone$auto(0x7fff, 0xff, &(0x7f0000000600)=0x8000, 0x0, 0x7) poll$auto(&(0x7f0000000080)={0x2, 0x0, 0x1a}, 0xff, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r3, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) 2.808483309s ago: executing program 0 (id=571): mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8000) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mtd0\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/vivid.0/video4linux/radio5/power/runtime_status\x00', 0x10d800, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/ip6_flowlabel\x00', 0x42000, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r1 = getpgrp(0xffffffffffffffff) r2 = socket(0x29, 0x5, 0x0) write$auto(r2, &(0x7f0000000080)='/de$-audio1\x00', 0x100000a3dc) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/ext4/sda1/mb_groups\x00', 0x109180, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0xa, 0x2, 0x805) socket(0x2, 0x2, 0x1) bind$auto(0x3, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x0, 0x3}}, 0x6a) prctl$auto(0x1000000003b, 0x1, r1, 0x8000000000000001, 0x2d) statmount$auto(0x0, 0x0, 0x7d, 0x84) mmap$auto(0x464, 0x4000000000040009, 0xdf, 0x9b72, 0x7, 0x28000) epoll_create1$auto(0x10040c9d) close_range$auto(0x2, r0, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) ioctl$auto(0x3, 0x4188aec6, 0x38) write$auto(0xca, &(0x7f0000000000)='\x0462\x0f\x00\x00\x96\x18am\xea\xf4\x1b\xf8', 0x7e) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x4c0205, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mknod$auto(&(0x7f0000000080)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x1081, 0x8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="535ebf7d3594c0aca50256be87d5afb0d4a2ea78d3451b017343291cf26bae17254e980084fe92d6757c073575a19212886e21b007a0f59ff6813bec5dd11e81dc715b43a25476093c135c449e6075275a5e115fe4a2751834071bc41d3aaa23b0c1f15a0f9155c530d35cabed531c50", @ANYBLOB="0100cda4429629bd7100f9db5f2502000000", @ANYRES16=r3, @ANYBLOB="6799dc1ffae26d8c36aa4ce5705b4b3722d848f7db51af219e6217601fd99b7bf45574236b5ba7b28aa20c630147f36ae7b44f0f821c678bdd2b08b4576cbd784568c4ac77f36567615d2cfafebbb1b0dadb7b19fa1ac7f18ece1a444c9418fed63746"], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x20000080) socket(0x10, 0x2, 0x0) 2.357478523s ago: executing program 1 (id=572): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) ustat$auto(0x801, 0x0) (async) open(0x0, 0x22240, 0x155) (async) socket(0x2, 0x2, 0x0) (async) socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) (async) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0x0, 0x29f, 0x100, 0x7f, 0xffffffff, 0x6, 0x2}, {0x8000100, 0x1, 0x8000052, 0x5, 0x1, 0x40, 0x76c5, 0x9a, 0x100000000}}) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) unshare$auto(0x40000080) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) fanotify_init$auto(0x8, 0x2000000000002) open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) (async) r0 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r0) (async) mkdir$auto(&(0x7f0000000040)='./cgroup\x00', 0x6) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/cgroup.type\x00', 0x103042, 0x0) (async) rmdir$auto(&(0x7f0000000080)='./cgroup\x00') lseek$auto(0x3, 0x7ffffffffffffffd, 0x2) (async) unshare$auto(0x8000000) shmget$auto(0x0, 0x200000005, 0x7d) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) (async) r2 = timerfd_create$auto_CLOCK_TAI(0xb, 0x41) r3 = ioctl$auto_TUNSETOWNER(r2, 0x400454cc, &(0x7f0000000340)=0x80000000) sendmsg$auto_NL80211_CMD_MODIFY_LINK_STA(r3, 0x0, 0x0) (async) r4 = socket(0x23, 0x5, 0x0) bind$auto(r4, &(0x7f0000000140)=@phonet={0x23, 0x6, 0x0, 0xa3}, 0x80) socket(0x23, 0x5, 0x0) 2.357222317s ago: executing program 2 (id=573): openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, 0x0, 0x5a1380, 0x0) bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0xfffffff8, 0x8, 0xae85, 0xffffffffffffffff, 0x4, 0x7ff}, 0x6f4) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f00000006c0)="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", 0xff, 0x0, 0x9, 0x0, 0x8, 0x20000b}, 0x800009}, 0x9, 0x20000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r1 = socket(0x2, 0x1, 0x105) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, 0x0, 0x11d802, 0x0) sendmsg$auto_CGROUPSTATS_CMD_GET(r1, 0x0, 0x20000000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xa9}, 0x2, 0x0, 0x7, 0x4}, 0xd38e}, 0xa, 0x4004) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x52) read$auto_hwsim_fops_ps_(0xffffffffffffffff, &(0x7f0000000180)=""/115, 0x73) r2 = socket(0x2b, 0x2, 0x81) write$auto_tracing_saved_cmdlines_size_fops_trace(0xffffffffffffffff, &(0x7f0000000380)="aebfa89cf81033baceab9078f4cd367873d65bc937be14df1489ead062cf781c4627b8c9f11cf9ff75f773f4d643f14aa6354790eee07bfb81400805470b1cd51edb2b5b71a293200ad8a186a57253482d2f302f61dae1a04bedda9ad90cda8b7631278f31f85beb2351554bf701bdacfa8cbe94396914cfa173fa6972396f4653b5aeb9ad5e51829fda8453f7ed1b9b78be4cbb1dff6e99c7035b66c2347a607df737a3f36989ace0b28ebf791530dfe72194aa3f4454d3e5a0cf8e53071c4e93ea9c8c26225d1562fb8b37342bec8d1a51e54079c2e46c5aeddbcb899f5cbece3a1e101582", 0xe6) ioctl$auto(r2, 0x89a0, 0x4) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) unshare$auto(0x40000080) sendto$auto(0x3, 0x0, 0x100000000, 0x40000008, 0x0, 0x19) socket(0x2, 0x1, 0x106) socket(0x2, 0x3, 0xa) setsockopt$auto(0x4, 0x0, 0x3, &(0x7f0000000000)='!/*:(*\'\x00', 0x800000e) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0xfffffffffffffffd) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000040)=0x5) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) 1.8814228s ago: executing program 3 (id=574): r0 = openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000300), 0x412042, 0x0) read$auto_ima_measurements_ops_ima_fs(r0, &(0x7f0000000380)=""/86, 0x56) mmap$auto(0x0, 0xe, 0x3, 0xeb1, 0xfffffffffffffffa, 0x101) socketpair$auto(0x9, 0x1, 0x9, &(0x7f0000000000)=0x5) mmap$auto(0x2, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r1, 0x0, 0xfffffdf1) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x1a1000, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x3, 0x6) socket(0x25, 0x1, 0x3) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc", @ANYRES32, @ANYBLOB='\b'], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x7}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) rmdir$auto(&(0x7f0000000080)='./cgroup/../file0\x00') r3 = socket(0x2, 0x1, 0x106) sendmsg$auto_OVS_VPORT_CMD_SET(r3, 0x0, 0x20000000) setsockopt$auto(r3, 0x6, 0x5, &(0x7f0000000080)='*\x00', 0xe6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000003100), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000400)=ANY=[@ANYRESOCT, @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r4, @ANYRESOCT=r2], 0x200}, 0x1, 0x0, 0x0, 0x20045040}, 0x20040000) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x3, 0x21) 1.456192341s ago: executing program 0 (id=575): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x4000000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x4000000) r1 = bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x8000007, 0xffff, 0x6, 0x81, 0x68198}, 0x6f3) rt_tgsigqueueinfo$auto(0x3, 0x96, 0x803, &(0x7f0000000180)={@siginfo_0_0={0x8, 0x7, 0x8000, @_sigpoll={0x8000000000000000, r1}}}) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) (async) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async) r3 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'macvlan0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ip6tnl0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'bond0\x00'}) sendmsg$auto_ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="50010000", @ANYRES16=r4, @ANYBLOB="01002abd7000fcdbdf250f00000020000180140002007665746830000000000000000000000008000100", @ANYRES32=r0, @ANYBLOB="18000180140002006d6163767461703000000000000000003400018008000100", @ANYRES32=0x0, @ANYBLOB="1400020069703667726574617030000000000000140002006272696467655f736c6176655f3000001c0001800800030007000000080003000001000008000100", @ANYRES32=r5, @ANYBLOB="3c00018008000100", @ANYRES32=0x0, @ANYBLOB="14000200766574685f627269646765000800030007000000140002007465616d5f736c6176655f3100000000780001801400020067726530000000000000000000000000140002006261746164763000000000000000000008000100000000008d357191fd0356f907d90bc81692b2cc355eb4e2696f67933faee304ec8f2740f096076830faf4a9a91bf97201243ffce28a87bb90fe0a8f62d44067ef52f1f91c9d0cd5cf66f8b1b9c37e7d911cf5bf3376c8b030ac652f749009a28645f8793331deee7ad522763861993de7459844d75abcee3a606ced54ed17b583d54a4035fb989f82", @ANYRESDEC=r1, @ANYBLOB="1400020076657468305f746f5f627269646765001400020074756e6c3000000000000000000000001400020069705f767469300000000000000000000800030000000000"], 0x150}, 0x1, 0x0, 0x0, 0x2400c8c1}, 0x40000) socket(0x11, 0x2, 0x300) (async) socket(0x11, 0x2, 0x300) sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa) socket(0x25, 0x5, 0x3) (async) r6 = socket(0x25, 0x5, 0x3) setsockopt$auto(r6, 0x2000000000000116, 0x80, 0xfffffffffffffffd, 0xe) socket(0x2, 0x801, 0x6) (async) socket(0x2, 0x801, 0x6) ioctl$auto_FIOQSIZE(r3, 0x5460, 0x1) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) 1.393420791s ago: executing program 1 (id=576): r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/block/nbd2/hctx0/sched_tags_bitmap\x00', 0xa2140, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x3, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8002) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x28201, 0x0) mmap$auto(0x0, 0x8000000000000000, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) (async) write$auto(0x3, 0x0, 0xffd8) (async) prctl$auto_PR_SET_VMA_ANON_NAME(0x401, 0x0, 0x0, 0x30000001, 0x3) read$auto(r0, &(0x7f0000000040)='\x00', 0x3) 1.235401643s ago: executing program 3 (id=577): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/slabinfo\x00', 0x88880, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=@bpf_attr_5={@target_ifindex, 0xffffffffffffffff, 0x9, 0xa37, 0xffffffffffffffff, @relative_id=0x4000, 0x4}, 0xd7) socket(0x2, 0x80000, 0xa) socket(0x28, 0x1, 0x0) r1 = socket(0x10, 0x2, 0x4) write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRESHEX, @ANYBLOB="010029bd7000fedbdf250d0000000c000600010000000000000008000100"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket(0xa, 0x802, 0x8000) bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, r2, 0x3, 0x0, 0x85, 0x7, 0x9, 0x6, 0x8001}, 0x100) write$auto(0x3, 0x0, 0x5c8) mmap$auto(0x0, 0x5810, 0xffb, 0x8000000008011, 0x3, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x60800, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000840)={{@raw=0x8, 0x7, 0xba28, 0x0, "708c58271a7985a7704331f78af8d149fc53d81fd4a7553c2ff48b48a8a57689adcc1ca6d2cbfa93b50590c9", @raw=0x6}, 0x0, @bytes=@data="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", "fa491e08108961dd5708680f1134935851612a52d629535f54f3832490fc4e7f79daef312b3df3307044713a4801d409aefe3f932f78fc311771094e769c0095f94ee6d74f2517f34a0bbbf502bf3392ac4d93bde5f733ba936c0890312cf035bc44117db9b683eedc5e02a703fc82750d8d6ebac0c3019ef8e6c1eecea33a59"}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getsockopt$auto_SO_RCVMARK(r0, 0x2, 0x4b, &(0x7f0000000540)='^+[\x00\xc2\xe9\xdf\x00\x15\x1a!\x99\x1f\xc1\x8e\xbc\xd1\xcc\xc7\xca\f5\xea\xcb\xa4W\xb2n\x7f\xb4\x0f\xd7^9_\xa9\xab*X\x9fsvub\xcc\x1b.\xe9\x01\xf0L\x1c=0\xafswanV\x02\xb8dt\xfc\x0f\xbdx\xe6\x1f\f\xb5>\'NV\xd2\x0e\r(\xca\xd0z\xf0\x1de\x0fc`pG\xa6\x9b\xe3\vY\x90\x93\xe8\x17\xa3\xa5\xa3~~}\xc8\xbd\xd2K\xf1C92\x8a&\xfe\xf6F\x17]\r\xc0 B\x882/+\x954\xf8\xcd\xbd[M\xcb\xd3\x16\x1b\xf0\xb2J\xc3}g/\xd2/\xb2\xee\x8e}\xb0D\v\xfaa6HE\x9b\xb937\x06\b2\x8f\xdb\x9bh\xb3Q3\xdb\xfd\xd7Y\xc8\xb3\xb7Q\xbb\xa1z\xe5\xb9\xa8V\xba\x1f\xb0b65\x81C_Lm\x97/\xef\x83\x8c\xcc\xf6\xbf\xa6\xc9J\xef\xc3\xd8X\xe0\x1cb.\x90\xcehr\x8dj', &(0x7f0000000140)=0x400) r5 = socket(0x15, 0x5, 0x0) bind$auto(r5, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sendmsg$auto_NFC_CMD_SE_IO(r3, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x62c9fa299accf613) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000002880), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002900)={&(0x7f00000028c0)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="010027bd7000fbdbdf25040000000800090003000000"], 0x1c}}, 0x0) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy$auto(0x1, 0x0, 0x1) 999.54794ms ago: executing program 0 (id=578): pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x51c, 0x8000) r0 = socket(0xa, 0x2, 0x73) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0x3) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000840)="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", 0xdd4) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0x7fffffff) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1000000000000001, 0x0, 0x1, 0x0) unshare$auto(0x1) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x80000000001002, 0x12000000000000, 0x4000000000df, 0xeb4, 0x6, 0x8000008003) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) r4 = socket(0x31, 0x6, 0x7fff) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00V\x00\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r1, &(0x7f0000000080)={&(0x7f0000000040)="32e3eec48051c4cc1bd9d90076d5507aee20a1ffccd1c9977b45b2ce215a1ae8", 0xfff}, 0x3) r6 = socket(0x15, 0x6, 0x1e8) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r0) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r7, 0x100, 0xd9, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x2000c090}, 0x40081) connect$auto(r6, 0x0, 0x3a) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000240), r4) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r3, 0x0, 0x30004850) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) 885.249795ms ago: executing program 2 (id=579): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), r1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="110b27bd7000fbdbdf250900000008000300", @ANYRES32=r3, @ANYBLOB="08000600", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x24044001}, 0x9800) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) r4 = socket(0xa, 0x2, 0x0) (async) getsockopt$auto(0x3, 0x200000000001, 0x2a, 0x0, 0x0) (async) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) ioctl$auto(r5, 0x80045438, 0xffffffffffffffff) (async, rerun: 32) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x40100, 0x0) (rerun: 32) read$auto_proc_pagemap_operations_internal(r6, &(0x7f0000001540)=""/209, 0xd1) (async) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MEDIA_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x2000000, 0x0, 0x20010}, 0x20040880) (async) shmctl$auto(0x4, 0x4, &(0x7f0000000180)={{0x4, 0x0, 0x0, 0xffffffff, 0x401, 0x8, 0x9}, 0x3, 0x5, 0x7, 0x8, @raw=0x7fff, @inferred, 0x4, 0x0, &(0x7f0000000280)="baa5e711c9d2939c4bc49c79120fc58d8cd08ec9b8d4b8326f6a0236ed9a725ba84bb7e25d4e1530afbf8c4b1c7bde663b61949bb01b122ff95e688bbc42d2ecef2fe33013c3b67c45e37c3029a2f5cbb28619657311c41c0f3d2288b304839928e37dd296ec3db36f0e10ef591a7a67409ba318d756200cfaca0e474b91625f65458d3ef6e67d70f0c86b4fe31329a57c80d17cbdd741c35cbe5f87d9e53ea21077f85499b6f915c85d5d91b4086e23ae2e8e944b42d8565dfd3d15a895bf44e30198527faf5e0ed5b881d6dff876f53fbf", &(0x7f0000000100)="9cd19996a9284a01da58fe28b01b3947ba021730aef831e289a6cfa497537898ae682b00d534057693e4bca691"}) r10 = getpid() pidfd_open$auto(r10, 0x0) (async) r11 = getpid() sendmsg$auto_TIPC_NL_SOCK_GET(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="28040000", @ANYRES16=r11, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="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"], 0x428}, 0x1, 0x0, 0x0, 0x8040080}, 0x20040040) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r12 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) write$auto(r12, &(0x7f0000000140)='0[.[\x00', 0xcd04) 449.191659ms ago: executing program 3 (id=580): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x1, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x8001}, 0x7, 0x20020000) 447.510352ms ago: executing program 2 (id=581): r0 = openat$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x6, 0x7) sendmsg$auto_VDPA_CMD_DEV_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x120, 0x0, 0x1a, 0x70bd27, 0x25dfdbfc, {}, [@VDPA_ATTR_DEV_QUEUE_INDEX={0x8, 0x11, 0x5}, @VDPA_ATTR_DEV_NET_CFG_MACADDR={0x103, 0xa, "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"}]}, 0x120}, 0x1, 0x0, 0x0, 0x2000001}, 0x0) sendmmsg$auto(r0, &(0x7f0000001300)={{&(0x7f0000000240)="51287295fd2c99a5d6f9cf11", 0x80000000, &(0x7f0000001280)={&(0x7f0000000280)="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", 0x4}, 0x81, &(0x7f00000012c0)="7923df5bd5c61d10c9f22ac7eaadf6002ae3745756add573d6793bc3c4ee43227135f0d7a68ed88e8667d3cb2e09953be8792d1053919075303a83a999", 0x6a55, 0xd9}, 0x7f}, 0x6, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fcntl$auto_F_GETOWN(r0, 0x9, 0x0) sendmsg$auto_NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f00000014c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001480)={&(0x7f0000001380)={0xcc, 0x0, 0x302, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_SCAN_SSIDS={0xa2, 0x2d, 0x0, 0x1, [@generic="6b7d7c068ae11f9dd0ef93195ec7b8a3d59980ffb711a6df0bcd6a10d728fd69aec63b1c74fbc251035406576768b419b16a8aa30c9b90d45c2f78b96cd39be687eb0b36ae42daf9d17d7e56a4a5adc31da130ae81b0c96836f2a4a6b9c7a22724a0631f8befa99b2f190f23919e8d18101a10c459089853890220b0adb4ef8d2faf9b546a801d7a59a93eb82dbd", @typed={0x8, 0x14a, 0x0, 0x0, @uid=0xee00}, @typed={0x8, 0x70, 0x0, 0x0, @pid=r2}]}, @NL80211_ATTR_TIMEOUT_REASON={0x8, 0xf8, 0x98c}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x9}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000040}, 0x8005) sendto$auto(r0, &(0x7f0000001500)="ed5958308c41efe3ef33792c74f0e60582921ff5741052e8fef7517d56f1f6c4c0f3ea549f493defcab7fd13e1d0401369c1ae89cc165ad5e239fabaff28f8264e7d98d8dd788a30e4c44c55423dc8a46ce89f995b870a70b6d60f0edf2efaf3e03c5e6549d733a01234875e826e7ff373b8e27a3864557f14e5d954aa86cace6f9548b86b873f654ba189ad6256e0fa5a736c4160a0691d316be487ce6f0fba5f5084bbac0472b346883269a1b89e64fc696e769ea5c5b476ff775daba051bd4c9b5a115408c234a758a99b6ebaf765416fd2900cdfe1ceedd35852ab4bfe", 0x7, 0x0, &(0x7f0000001600)=@nl=@kern={0x10, 0x0, 0x0, 0x1000}, 0xb) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000001680), r0) sendmsg$auto_IPVS_CMD_GET_SERVICE(r1, &(0x7f00000017c0)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001780)={&(0x7f00000016c0)={0x8c, r3, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@generic="c05c9177fb85746b3a6a7fffdecaab94865b96aaa46e7e2412f5c38470c206208923c39c8fb65c2f084f153ec85b31835c66bed89a322403d160c9a06afc6af4d32e98dc34521598c14d98c4cfd077c4108fd775abb5861593145ffe"]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0xc040) ioctl$auto_FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x6) r4 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000001840), r0) sendmsg$auto_IEEE802154_LIST_PHY(r1, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x8820004}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x40, r4, 0x501, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x76}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x3ff}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x3}, @IEEE802154_ATTR_DEST_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x40880}, 0x10) fcntl$auto_F_SETLEASE(r0, 0x400, 0xf08) r5 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000001940), 0x240000, 0x0) fcntl$auto_F_DUPFD_QUERY(r0, 0x403, r5) ioctl$auto_EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000001980)=0xe) mprotect$auto(0x6, 0x7f, 0x3) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001a00), r0) sendmsg$auto_NL80211_CMD_DEL_PMK(r1, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x1c, r6, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004010}, 0x20000002) mprotect$auto(0x1, 0xfffffffffffffff7, 0x735) r7 = ioctl$auto_userfaultfd_dev_fops_userfaultfd(r0, 0x5442, &(0x7f0000001b00)="098c6b8a22bb34aaf3181359a6cf21") mkdirat$auto(r7, &(0x7f0000001b40)='./file0\x00', 0x6) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_SET_BACKOFF_EXPONENT(r8, &(0x7f0000001d40)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001bc0)={0x120, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0xb80}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x14, 0x2b, 0x0, 0x1, [@nested={0x10, 0xdf, 0x0, 0x1, [@typed={0xc, 0x4b, 0x0, 0x0, @u64=0x101}]}]}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x78}, @NL802154_ATTR_SEC_KEY={0xe6, 0x30, 0x0, 0x1, [@typed={0xc, 0x40, 0x0, 0x0, @u64=0x4d}, @typed={0x5, 0x9d, 0x0, 0x0, @str='\x00'}, @generic="416a686f1fdf5dce63c94436e170baa7dc441336f3a934b466cf3a7d1ed43eea413a6f98a9fc28c9ab", @nested={0x24, 0x4d, 0x0, 0x1, [@typed={0xc, 0x137, 0x0, 0x0, @u64=0x1}, @typed={0xc, 0x13f, 0x0, 0x0, @u64=0x9}, @nested={0x4, 0xbd}, @nested={0x4, 0x13c}]}, @generic="a5c3c68e45c095d7e724c19d84d7f864bbc076712230aaf7d9c75c532cf99366e5432631921225c85883e7241b5c474c9dfe796e44b5fb2439353d09526ee1625f6139d3e4376448b1cb29a6468aecec7667bee35a5080ca5b6485f04f5da478d4ca1842ee9f68eda74f8d89985c6230df727d39d4e75e11ac45a158dc0f9215d4"]}]}, 0x120}, 0x1, 0x0, 0x0, 0x40800}, 0x10) r9 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001dc0), 0xffffffffffffffff) fstat$auto(r0, &(0x7f0000001e00)={0x4279, 0x1e4, 0x4602, 0x9, 0xee00, 0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x7, 0x5, 0xb0, 0x9, 0x400, 0x0, 0x4, 0x2}) shmctl$auto_SHM_INFO(0x7, 0xe, &(0x7f0000002000)={{0x7, 0xee00, 0xee01, 0x101, 0xe, 0xb8, 0x6}, 0x5, 0xafa4, 0x2, 0x2, @raw=0x4e, @inferred=r2, 0x2, 0x0, &(0x7f0000001ec0)="716b8867c7abeb5f45c8ec1da41655d31a36c52380924cec37a86d28e486d50482e3fe5a2b88bc703b1a2e598476325d2e66e8602f9c09cfef1a2e119c1b7775c63500ab247efdac85d475d61ffbdec1c8d51775dbf6f903da7fa3ef01e2b4d48e1b45ccaed560f7b2213c2ac33799753fabac5acd7c00b3c7d3c456003645b867a75a4aa2143642b404b165df8dc00dbf3fa141d1999f919ed1957cabdb66a310d6236e79b2df1dca54e9bc696abf2269d4e30a0a9784", &(0x7f0000001f80)="094a858477c3971b912fb59a05408da84087d6e1e79c458147ae9d8a326ed7e7e94dfc014ad3eb34662ca2f22342005cf618c3b26fb0a1350faea0207cde181096aad3e5ee64339ce0e620b48b882334851eb146bca9e0183bc3f8356cebbb40b10b07484b83665a9434421e5d5368eb54a7304d0a216b472506ea"}) sendmsg$auto_MACSEC_CMD_UPD_RXSC(r1, &(0x7f0000003740)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003700)={&(0x7f0000002080)={0x1680, r9, 0x20, 0x70bd25, 0x25dfdbff, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x131d, 0x2, 0x0, 0x1, [@generic="521d3649a8498c53911c5de9b0d8a2e69c52ad7fa74a06900332bf0590f9c2e272d71c5e6ca53af99c74178fa1938fd8e4e236ec69ddc0ff1462f198a1827db2817fa6eacc628d7ca0b170703fab897bb46edb276aae9d51a5133169ebfb112242e034c4262c171ad33793f1b187e66908d1a96d86580fa1f45a11d61d04a4a78b7ef93d3c54a7c116582dc2cda21dc51b8fb6204aa15a4d90b6662da84f466e5ebc637730f9b436dd930822e3d11c6051a35dd1f36a6e8a46acc5bb430424b39dea1cf5f5bb5fcb", @nested={0x4, 0xd4}, @nested={0x115e, 0x103, 0x0, 0x1, [@generic="40a1d39bf7cf125f83cda0d0cda6ed4aa8d7b1f6ecc0903d36ce8b5d5e40396e6c52cc1ba75cb45832f6aebcc21e760d0d3b4a7996ff0ec0e0561b8b32bff1da1a0d4f0b728cdc76aed0d439142fbf37d506f5a9cac593200b09331993ecce8cd4ca487c8c321432884cc74d0c73cac5e174349fd1a5461ac962ef4649", @typed={0x8, 0x94, 0x0, 0x0, @uid=r10}, @typed={0x8, 0xda, 0x0, 0x0, @pid=r2}, @generic="6cebdee56e7b4d2a1d2d5a6602507b874a2f2fc0a8", @typed={0xb1, 0x71, 0x0, 0x0, @binary="fb9d9efaae70df9fb0dbccfbd7e4171cfa51b9cf625e86ac93a9b9e3fa02b7072b3a28c28feb90bac63be5aa2616f7443175de8e8aa10973d8332cd9b77b35221c21a499bf9d877585aafea3b58e33926ae97aeed36d5a7e4c2ffa6f20191fc37d6b8121ca45bf425247eda968c985eda792ab6184b0ac7e14d364b32d0a6d2e0771d8a01714d41528a0aef22ba507c9113cd9a18a4fcc405647355d2341bb4760b96c88ee453e474757f58e38"}, @nested={0x4, 0x67}, @generic="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"]}, @generic="f9299767f7e3199f5d63664dc8a821bbe027f228db1d45bb5f83df82c0ab5a7ab30d2e8fc7b58201bed3191f91332b6ab5f932ff09247f43f90530e24c5ae9a4d3cb68b3fa9b71c9bd5c5b82eca35417dff83671fb6317fd72964dbe8a938c557e952e98ab5c6e3d7d9fcb4459869ad63dde39dc52c3cf70dbe85e0ce75aa53881d9bbb563873db5f70299429ed3659f421a27a79cb9fcbbe8114b1bb0f515b31e29f98cb67278e1ec9bd519f22c1297dd5463e7286646e70d1c7122e90ff07efda9cf971b201db13aa6e618bf366341c6d5a3ec454eac4f09751f4ab80302fabd6ab25a2264c8bf36dbc454fd"]}, @MACSEC_ATTR_SA_CONFIG={0x34c, 0x3, 0x0, 0x1, [@typed={0x4, 0x23}, @generic="2c8cb62397e955b474f2881d0202d40291146275fd2b01e0efa99710ac3ecd4b88989dafefe5a923012d090f5e9dd8658dea63f63c34c0b1abb0a9d3617ac2c92ade6d51858e06dd4e3e1df11378c5784188c6408d40854c2299a96364a8ae00e5a97cc1ad070d9faf060add612791deeac5d2fc8385b6497035b2a4cdd2d8238f3bbaa85c07b5769b9f28e8030461c9576fcda43fd0e16b431a2aa66c10877afe7dfbddc11bfe", @generic="24269a9543a223ec55dcac6f58d9c3fb8a86de1d08a71f5caaa3262305357affa33598b0d204406e3567432ea97fd1b0b690000f1d86c7959104265c5277ef7122e659ea71a4b910da83a044156757639a7fd9030138c95621c1d2a90b288d2bf8781c66698f04604b71deee5c16e9989dfaf3322b2f8d4aa9f964605836fde0ba162369eaaa490da1c1d75de82c084c44b2cb628d18a77304bfd6a1667e2e6540a75f002ebdecf19f595e503d725670be0aea3d102c6f24a1669df1a6d214cbba65", @typed={0x8, 0x3b, 0x0, 0x0, @uid=r11}, @typed={0x8, 0x82, 0x0, 0x0, @ipv4=@local}, @generic="2dd524942eb5d1b42748ca766fe18cc12c5504a6268cb0fbeddf4f9cad07df1c5656526f1411e83b9e4632d455a73176a50c1979a0c543109c767874027c8f4fa9bfef60f04f7853ab22f7abbb9514f2249fcaed4902da80f238efccebebcbfeffe9d5cf7536c2ffd08dbb20310f3b893c05f75d35011b3622af827c570fc96e256ef937afc62bd7c3c5d87d2055f46390ca1a97f794ebd1d955adb7d23ef0d05f7dbafd19b7668d5e860b422f922a4473e8ec567324370120f756b64fe8f43736b7e5", @typed={0x4, 0x98}, @typed={0x8, 0x116, 0x0, 0x0, @fd=r1}, @nested={0xe7, 0xf, 0x0, 0x1, [@generic="abd1a7fc397fc7af512e2373874542618167654727bf44ce12a64bcf69702652d2afe74168d392882593d0323e1bcceb07f441224b3ce2841624a4721d3f54cc54ffc37a539ae6edbe81448d00dd64a2b1bf3b73fe16f7a03e035ed8a39e855e3ec3ee01fd0bc6ee19e122a2d03992c077f914a10d44e19b49c75064a8e2e4cfd87f8cc4d158ea978decd388ce0670333c5e4222216c9a9075cd5bdc4ad40f7d35f8335037e60be43e6a1f221f", @generic="18957c80778554f89119f7ef896cde816e311337a9f41e0a9e35aa7abce171470fc8d1a9bfdee3596af5db60c0e66cfcb33f016bf5c5"]}, @typed={0x14, 0x130, 0x0, 0x0, @ipv6=@local}]}]}, 0x1680}, 0x1, 0x0, 0x0, 0x10}, 0x80) ioctl$auto__ctl_fops_dm_ioctl(r7, 0x4, &(0x7f0000003780)='$Zq') prctl$auto_PR_SYS_DISPATCH_ON(0x6, 0x1, r2, 0x3, 0x9) 304.953582ms ago: executing program 2 (id=582): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = syz_genetlink_get_family_id$auto_thermal(&(0x7f00000003c0), r1) msgctl$auto_IPC_STAT(0xba9, 0x2, &(0x7f0000000480)={{0x4, 0xee00, 0xee01, 0xb, 0x40, 0x3, 0x4}, &(0x7f0000000400)=0x68, &(0x7f0000000440)=0x8, 0x6c, 0x100000000, 0x7, 0xb46, 0x0, 0x0, 0x2894, 0x5, @raw, @raw=0x2000000}) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(r0, &(0x7f0000000900)={&(0x7f0000000300), 0xc, &(0x7f00000008c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="94030000", @ANYRES16=r2, @ANYBLOB="10082bbd7000fbdbdf250a0000005e03188008004c00", @ANYRES32=r1, @ANYBLOB="0800e700", @ANYRES32=r3, @ANYBLOB="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"], 0x394}}, 0x5) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) r5 = io_uring_setup$auto(0x6, 0x0) ioctl$auto(r4, 0xc1205531, r5) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0xffffffffffffffff, 0x1ff, 0x7fa, 0x22104, 0x9, 0x7, 0x7ff, 0x20010180, 0x4000000f}, 0xe) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), r0) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r6, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x40010) socketpair$auto(0x4b33, 0x7, 0x2, &(0x7f0000000380)=0x8) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r7 = socket(0x1e, 0x4, 0x0) epoll_ctl$auto(0xffffffffffffffff, 0x1, r7, 0x0) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETPAGEFILE(r5, 0x7a9, 0x0) r8 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) r9 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtd0\x00', 0x48002, 0x0) r10 = pidfd_open$auto(0x1, 0x0) ioctl$auto_FS_IOC_GETVERSION(r10, 0x80087601, &(0x7f0000000080)=0x80) ioctl$auto_OTPLOCK(r9, 0x800c4d10, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f00000001c0)={{@inferred, 0x100110d, 0x10003, 0x6, "e927783f468fa2e92fe8ec7a46cbb766439daa1ee1aa00000000e1800000000000000000040000660e070100", @raw=0x7}, 0x6, 0x0, 0x4, @raw=0x404, @integer64={0x20006, 0x8, 0x6}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"}) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r11 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x42840, 0x95) read$auto(r11, 0x0, 0x1) r12 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/rpc/use-gss-proxy\x00', 0x48041, 0x0) write$auto(r12, 0x0, 0x6) 177.616667ms ago: executing program 3 (id=583): unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x2060009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000005c0)={{0x0, 0xffffffff, &(0x7f0000000200)={0x0, 0x7fd}, 0x3, &(0x7f0000000340)="063d24cbe5c9ca1aef9c7578cb2141bd1f80d7aa2176494418f06d586e98ab0cfbffffff963bb445e7a7ffe1a21b7671f4ffcdd22c673a61241e5d3d82540abeaeaf2c8ede950f8c764d5f0c06de7af259e47f6bb1552dee345b52c96ef20160f96c8ad7f822c2c0e7f01edbc7fbf4330380a29db97ae462173288c1c4652af5d70504adf4d16629a9403e4fa302b1ffa380f09587f11447d84b7893755c5798e98e958fd3cd52912260ef1fc7cfbd58044ea641f20e21c6f04224bf0dd1fba3411f5baa0e0da470fc5ece295ece41a8562c1e701fec60fcb10195bbd4230ec69b882320e409", 0x1, 0x200a505}, 0xa788}, 0x7fff, 0x1) (async, rerun: 32) mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) madvise$auto(0xffffffffffffffff, 0xffffffffffff0005, 0x19) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000440)='/dev/bus/usb/005/001\x00', 0x4000, 0x0) (async, rerun: 32) madvise$auto(0x0, 0x2003f2, 0x15) (async, rerun: 32) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) madvise$auto(0x0, 0x200007, 0x19) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x0, 0xd) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket(0x10, 0x3, 0x9) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async, rerun: 64) ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0x1ff, 0x0) (async, rerun: 64) r2 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000880), 0xffffffffffffffff) (rerun: 64) sendmsg$auto_NFC_CMD_STOP_POLL(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5d14f42ce68ab3b37b14450000005d576e9b2518aab55001916f472a269fee", @ANYRES16=r2, @ANYBLOB="00087f000000fbdbdf250700000008001e00050000000500100007000000060011000100000008000100040000000600110040000000080004000200000005000f000600000005000c000600000008001500626a0000"], 0x5c}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) (async) sendmsg$auto_NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)=ANY=[@ANYBLOB="e4270000ae3f8f21a233ee66e9fabef3f7643e943523f154fdaad879d5421554a5ee4417c73cc8ee65073ae6113000414d14e8dc26ef847b0fc93a187c4700168216d140ef76fb3a9418a8c6d74d1891babe5ab988b500231b449c9c9dcd43429b048fb5d6fa9188fec2cb3d1da30000000000000000000000000000000003683b9a0f46732e8beeeb55bd9c9f0247e50b737dd20fadb20717a3422599d0ea5e19a0f174a9aadcd65d16341341d4e16a424605489eb72cea50517993d47570bdec7dff", @ANYRES16=r2, @ANYBLOB="04002dbd7000fddbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x40c8000}, 0x4008000) sendmsg$auto_NFC_CMD_VENDOR(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB=';\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="200029bd70eefbdbdf251d000000"], 0x14}, 0x1, 0x0, 0x0, 0x200480d1}, 0x4040044) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r3, 0x0, 0xb4d3) 0s ago: executing program 2 (id=584): socket(0xa, 0x2, 0x88) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x1f, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84}, 0x1fe, 0xd) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYRESOCT=0x0], 0x1ac}}, 0x40000c0) getsockname$auto(0x3, &(0x7f00000002c0), &(0x7f0000000180)=0x4) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0xfffffea7, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) kernel console output (not intermixed with test programs): 71] do_syscall_64+0xcd/0xf80 [ 104.563125][ T6171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.563153][ T6171] RIP: 0033:0x7f416b58f7c9 [ 104.563175][ T6171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.563201][ T6171] RSP: 002b:00007f416c4a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 104.563227][ T6171] RAX: ffffffffffffffda RBX: 00007f416b7e5fa0 RCX: 00007f416b58f7c9 [ 104.563246][ T6171] RDX: 0000000000182b02 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 104.563265][ T6171] RBP: 00007f416b613f91 R08: 0000000000000000 R09: 0000000000000000 [ 104.563282][ T6171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.563299][ T6171] R13: 00007f416b7e6038 R14: 00007f416b7e5fa0 R15: 00007ffc4f08c4a8 [ 104.563344][ T6171] [ 106.565381][ T6201] FAULT_INJECTION: forcing a failure. [ 106.565381][ T6201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.595908][ T6201] CPU: 0 UID: 0 PID: 6201 Comm: syz.2.62 Tainted: G L syzkaller #0 PREEMPT(full) [ 106.595948][ T6201] Tainted: [L]=SOFTLOCKUP [ 106.595957][ T6201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 106.595972][ T6201] Call Trace: [ 106.595980][ T6201] [ 106.595990][ T6201] dump_stack_lvl+0x16c/0x1f0 [ 106.596035][ T6201] should_fail_ex+0x512/0x640 [ 106.596070][ T6201] _copy_from_user+0x2e/0xd0 [ 106.596113][ T6201] copy_mount_options+0x76/0x190 [ 106.596148][ T6201] __x64_sys_mount+0x1ab/0x310 [ 106.596177][ T6201] ? __pfx___x64_sys_mount+0x10/0x10 [ 106.596215][ T6201] do_syscall_64+0xcd/0xf80 [ 106.596258][ T6201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.596287][ T6201] RIP: 0033:0x7f18ebb8f7c9 [ 106.596310][ T6201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.596335][ T6201] RSP: 002b:00007f18eca7f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 106.596361][ T6201] RAX: ffffffffffffffda RBX: 00007f18ebde6090 RCX: 00007f18ebb8f7c9 [ 106.596380][ T6201] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 0000200000000180 [ 106.596397][ T6201] RBP: 00007f18ebc13f91 R08: 0000200000000280 R09: 0000000000000000 [ 106.596414][ T6201] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 106.596430][ T6201] R13: 00007f18ebde6128 R14: 00007f18ebde6090 R15: 00007ffeab78c478 [ 106.596467][ T6201] [ 107.413785][ T6211] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.151985][ T6230] mmap: syz.3.69 (6230) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 108.441317][ T6235] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.708159][ T6242] netlink: 20 bytes leftover after parsing attributes in process `syz.2.71'. [ 110.476615][ T6273] FAULT_INJECTION: forcing a failure. [ 110.476615][ T6273] name failslab, interval 1, probability 0, space 0, times 0 [ 110.518636][ T6273] CPU: 0 UID: 0 PID: 6273 Comm: syz.1.78 Tainted: G L syzkaller #0 PREEMPT(full) [ 110.518676][ T6273] Tainted: [L]=SOFTLOCKUP [ 110.518684][ T6273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 110.518697][ T6273] Call Trace: [ 110.518705][ T6273] [ 110.518715][ T6273] dump_stack_lvl+0x16c/0x1f0 [ 110.518757][ T6273] should_fail_ex+0x512/0x640 [ 110.518783][ T6273] ? __kmalloc_noprof+0xca/0x910 [ 110.518811][ T6273] should_failslab+0xc2/0x120 [ 110.518848][ T6273] __kmalloc_noprof+0xeb/0x910 [ 110.518874][ T6273] ? kernfs_fop_write_iter+0x237/0x570 [ 110.518914][ T6273] ? kernfs_fop_write_iter+0x237/0x570 [ 110.518947][ T6273] kernfs_fop_write_iter+0x237/0x570 [ 110.518992][ T6273] vfs_write+0x7d3/0x11d0 [ 110.519025][ T6273] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 110.519064][ T6273] ? __pfx_vfs_write+0x10/0x10 [ 110.519118][ T6273] ksys_write+0x12a/0x250 [ 110.519150][ T6273] ? __pfx_ksys_write+0x10/0x10 [ 110.519192][ T6273] do_syscall_64+0xcd/0xf80 [ 110.519229][ T6273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.519254][ T6273] RIP: 0033:0x7ff5af38f7c9 [ 110.519273][ T6273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.519295][ T6273] RSP: 002b:00007ff5b02aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 110.519318][ T6273] RAX: ffffffffffffffda RBX: 00007ff5af5e5fa0 RCX: 00007ff5af38f7c9 [ 110.519334][ T6273] RDX: 00000000000098c7 RSI: 0000200000000440 RDI: 0000000000000003 [ 110.519349][ T6273] RBP: 00007ff5b02aa090 R08: 0000000000000000 R09: 0000000000000000 [ 110.519363][ T6273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.519377][ T6273] R13: 00007ff5af5e6038 R14: 00007ff5af5e5fa0 R15: 00007ffc8c804928 [ 110.519410][ T6273] [ 111.145212][ T6278] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 111.395042][ T6283] zswap: compressor not available [ 113.195126][ T6311] netlink: 28 bytes leftover after parsing attributes in process `syz.2.84'. [ 115.157199][ T6343] random: crng reseeded on system resumption [ 115.801441][ T6352] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input7 [ 117.553808][ T5834] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 117.941024][ T6388] FAULT_INJECTION: forcing a failure. [ 117.941024][ T6388] name failslab, interval 1, probability 0, space 0, times 0 [ 117.955548][ T6388] CPU: 0 UID: 0 PID: 6388 Comm: syz.2.105 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.955593][ T6388] Tainted: [L]=SOFTLOCKUP [ 117.955604][ T6388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 117.955623][ T6388] Call Trace: [ 117.955632][ T6388] [ 117.955641][ T6388] dump_stack_lvl+0x16c/0x1f0 [ 117.955687][ T6388] should_fail_ex+0x512/0x640 [ 117.955717][ T6388] ? __kmalloc_cache_noprof+0x5f/0x800 [ 117.955753][ T6388] should_failslab+0xc2/0x120 [ 117.955794][ T6388] __kmalloc_cache_noprof+0x80/0x800 [ 117.955827][ T6388] ? cec_open+0xdb/0x690 [ 117.955864][ T6388] ? __lock_acquire+0x436/0x2890 [ 117.955893][ T6388] ? cec_open+0xdb/0x690 [ 117.955920][ T6388] cec_open+0xdb/0x690 [ 117.955949][ T6388] ? __pfx_cec_open+0x10/0x10 [ 117.955982][ T6388] ? kobject_get_unless_zero+0x156/0x1e0 [ 117.956024][ T6388] ? find_held_lock+0x2b/0x80 [ 117.956059][ T6388] ? chrdev_open+0x10b/0x6a0 [ 117.956102][ T6388] ? __pfx_cec_open+0x10/0x10 [ 117.956134][ T6388] chrdev_open+0x234/0x6a0 [ 117.956181][ T6388] ? __pfx_apparmor_file_open+0x10/0x10 [ 117.956207][ T6388] ? __pfx_chrdev_open+0x10/0x10 [ 117.956249][ T6388] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 117.956295][ T6388] do_dentry_open+0x748/0x1590 [ 117.956333][ T6388] ? __pfx_chrdev_open+0x10/0x10 [ 117.956381][ T6388] vfs_open+0x82/0x3f0 [ 117.956414][ T6388] path_openat+0x2078/0x3140 [ 117.956460][ T6388] ? __pfx_path_openat+0x10/0x10 [ 117.956515][ T6388] do_filp_open+0x20b/0x470 [ 117.956555][ T6388] ? __pfx_do_filp_open+0x10/0x10 [ 117.956627][ T6388] ? alloc_fd+0x471/0x7d0 [ 117.956679][ T6388] do_sys_openat2+0x121/0x290 [ 117.956708][ T6388] ? __pfx_do_sys_openat2+0x10/0x10 [ 117.956740][ T6388] ? find_held_lock+0x2b/0x80 [ 117.956788][ T6388] __x64_sys_openat+0x174/0x210 [ 117.956819][ T6388] ? __pfx___x64_sys_openat+0x10/0x10 [ 117.956865][ T6388] do_syscall_64+0xcd/0xf80 [ 117.956908][ T6388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.956936][ T6388] RIP: 0033:0x7f18ebb8f7c9 [ 117.956958][ T6388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.956984][ T6388] RSP: 002b:00007f18ecaa0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 117.957010][ T6388] RAX: ffffffffffffffda RBX: 00007f18ebde5fa0 RCX: 00007f18ebb8f7c9 [ 117.957030][ T6388] RDX: 0000000000101000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 117.957049][ T6388] RBP: 00007f18ebc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 117.957065][ T6388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.957081][ T6388] R13: 00007f18ebde6038 R14: 00007f18ebde5fa0 R15: 00007ffeab78c478 [ 117.957119][ T6388] [ 118.361027][ T6389] FAULT_INJECTION: forcing a failure. [ 118.361027][ T6389] name failslab, interval 1, probability 0, space 0, times 0 [ 118.361087][ T6389] CPU: 1 UID: 0 PID: 6389 Comm: syz.2.105 Tainted: G L syzkaller #0 PREEMPT(full) [ 118.361126][ T6389] Tainted: [L]=SOFTLOCKUP [ 118.361136][ T6389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 118.361151][ T6389] Call Trace: [ 118.361160][ T6389] [ 118.361171][ T6389] dump_stack_lvl+0x16c/0x1f0 [ 118.361217][ T6389] should_fail_ex+0x512/0x640 [ 118.361248][ T6389] ? __kmalloc_cache_node_noprof+0x62/0x830 [ 118.361291][ T6389] should_failslab+0xc2/0x120 [ 118.361333][ T6389] __kmalloc_cache_node_noprof+0x83/0x830 [ 118.361373][ T6389] ? __get_vm_area_node+0x101/0x330 [ 118.361413][ T6389] ? __pfx__prb_read_valid+0x10/0x10 [ 118.361445][ T6389] ? find_held_lock+0x2b/0x80 [ 118.361483][ T6389] ? __get_vm_area_node+0x101/0x330 [ 118.361523][ T6389] __get_vm_area_node+0x101/0x330 [ 118.361572][ T6389] __vmalloc_node_range_noprof+0x247/0x16b0 [ 118.361602][ T6389] ? vc_uniscr_check+0x1a0/0x5a0 [ 118.361638][ T6389] ? prb_read_valid+0x78/0xa0 [ 118.361677][ T6389] ? vc_uniscr_check+0x1a0/0x5a0 [ 118.361715][ T6389] ? __pfx_console_unlock+0x10/0x10 [ 118.361756][ T6389] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 118.361786][ T6389] ? __lock_acquire+0x436/0x2890 [ 118.361826][ T6389] ? vc_uniscr_check+0x1a0/0x5a0 [ 118.361870][ T6389] __vmalloc_node_noprof+0xad/0xf0 [ 118.361902][ T6389] ? vc_uniscr_check+0x1a0/0x5a0 [ 118.361943][ T6389] vc_uniscr_check+0x1a0/0x5a0 [ 118.361991][ T6389] do_con_write+0x662/0x8280 [ 118.362057][ T6389] ? __pfx_do_con_write+0x10/0x10 [ 118.362097][ T6389] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 118.362156][ T6389] con_write+0x23/0xb0 [ 118.362195][ T6389] n_tty_write+0x434/0x1280 [ 118.362247][ T6389] ? __pfx_n_tty_write+0x10/0x10 [ 118.362277][ T6389] ? __pfx_woken_wake_function+0x10/0x10 [ 118.362313][ T6389] ? file_tty_write.constprop.0+0x6f3/0x9b0 [ 118.362355][ T6389] ? __pfx_n_tty_write+0x10/0x10 [ 118.362382][ T6389] file_tty_write.constprop.0+0x503/0x9b0 [ 118.362433][ T6389] vfs_write+0x7d3/0x11d0 [ 118.362474][ T6389] ? __pfx_tty_write+0x10/0x10 [ 118.362515][ T6389] ? __pfx_vfs_write+0x10/0x10 [ 118.362551][ T6389] ? find_held_lock+0x2b/0x80 [ 118.362611][ T6389] ksys_write+0x12a/0x250 [ 118.362649][ T6389] ? __pfx_ksys_write+0x10/0x10 [ 118.362700][ T6389] do_syscall_64+0xcd/0xf80 [ 118.362744][ T6389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.362773][ T6389] RIP: 0033:0x7f18ebb8f7c9 [ 118.362796][ T6389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.362822][ T6389] RSP: 002b:00007f18eca7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 118.362848][ T6389] RAX: ffffffffffffffda RBX: 00007f18ebde6090 RCX: 00007f18ebb8f7c9 [ 118.362877][ T6389] RDX: 0000000000000060 RSI: 00002000000001c0 RDI: 000000000000000a [ 118.362895][ T6389] RBP: 00007f18ebc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 118.362912][ T6389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.362928][ T6389] R13: 00007f18ebde6128 R14: 00007f18ebde6090 R15: 00007ffeab78c478 [ 118.362969][ T6389] [ 118.385299][ T6389] syz.2.105: vmalloc error: size 24960, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 118.385575][ T6389] CPU: 1 UID: 0 PID: 6389 Comm: syz.2.105 Tainted: G L syzkaller #0 PREEMPT(full) [ 118.385615][ T6389] Tainted: [L]=SOFTLOCKUP [ 118.385626][ T6389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 118.385640][ T6389] Call Trace: [ 118.385648][ T6389] [ 118.385658][ T6389] dump_stack_lvl+0x16c/0x1f0 [ 118.385704][ T6389] warn_alloc+0x248/0x3a0 [ 118.385740][ T6389] ? __pfx_warn_alloc+0x10/0x10 [ 118.385771][ T6389] ? trace_kmalloc+0x2b/0xb0 [ 118.385813][ T6389] ? __get_vm_area_node+0x101/0x330 [ 118.385853][ T6389] ? __pfx__prb_read_valid+0x10/0x10 [ 118.385887][ T6389] ? __kasan_kmalloc+0x8a/0xb0 [ 118.385936][ T6389] ? __get_vm_area_node+0x208/0x330 [ 118.385989][ T6389] __vmalloc_node_range_noprof+0xbe0/0x16b0 [ 118.386031][ T6389] ? vc_uniscr_check+0x1a0/0x5a0 [ 118.386072][ T6389] ? __pfx_console_unlock+0x10/0x10 [ 118.386111][ T6389] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 118.386140][ T6389] ? __lock_acquire+0x436/0x2890 [ 118.386179][ T6389] ? vc_uniscr_check+0x1a0/0x5a0 [ 118.386214][ T6389] __vmalloc_node_noprof+0xad/0xf0 [ 118.386240][ T6389] ? vc_uniscr_check+0x1a0/0x5a0 [ 118.386279][ T6389] vc_uniscr_check+0x1a0/0x5a0 [ 118.386325][ T6389] do_con_write+0x662/0x8280 [ 118.386389][ T6389] ? __pfx_do_con_write+0x10/0x10 [ 118.386428][ T6389] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 118.386486][ T6389] con_write+0x23/0xb0 [ 118.386524][ T6389] n_tty_write+0x434/0x1280 [ 118.386569][ T6389] ? __pfx_n_tty_write+0x10/0x10 [ 118.386599][ T6389] ? __pfx_woken_wake_function+0x10/0x10 [ 118.386633][ T6389] ? file_tty_write.constprop.0+0x6f3/0x9b0 [ 118.386676][ T6389] ? __pfx_n_tty_write+0x10/0x10 [ 118.386705][ T6389] file_tty_write.constprop.0+0x503/0x9b0 [ 118.386755][ T6389] vfs_write+0x7d3/0x11d0 [ 118.386794][ T6389] ? __pfx_tty_write+0x10/0x10 [ 118.386834][ T6389] ? __pfx_vfs_write+0x10/0x10 [ 118.386868][ T6389] ? find_held_lock+0x2b/0x80 [ 118.386934][ T6389] ksys_write+0x12a/0x250 [ 118.386972][ T6389] ? __pfx_ksys_write+0x10/0x10 [ 118.387022][ T6389] do_syscall_64+0xcd/0xf80 [ 118.387066][ T6389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.387093][ T6389] RIP: 0033:0x7f18ebb8f7c9 [ 118.387117][ T6389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.387143][ T6389] RSP: 002b:00007f18eca7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 118.387167][ T6389] RAX: ffffffffffffffda RBX: 00007f18ebde6090 RCX: 00007f18ebb8f7c9 [ 118.387186][ T6389] RDX: 0000000000000060 RSI: 00002000000001c0 RDI: 000000000000000a [ 118.387203][ T6389] RBP: 00007f18ebc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 118.387220][ T6389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.387237][ T6389] R13: 00007f18ebde6128 R14: 00007f18ebde6090 R15: 00007ffeab78c478 [ 118.387277][ T6389] [ 118.398036][ T6389] Mem-Info: [ 118.398054][ T6389] active_anon:5518 inactive_anon:0 isolated_anon:0 [ 118.398054][ T6389] active_file:14716 inactive_file:40672 isolated_file:0 [ 118.398054][ T6389] unevictable:768 dirty:708 writeback:0 [ 118.398054][ T6389] slab_reclaimable:10500 slab_unreclaimable:91211 [ 118.398054][ T6389] mapped:24991 shmem:1358 pagetables:1029 [ 118.398054][ T6389] sec_pagetables:0 bounce:0 [ 118.398054][ T6389] kernel_misc_reclaimable:0 [ 118.398054][ T6389] free:1330395 free_pcp:13541 free_cma:0 [ 118.398140][ T6389] Node 0 active_anon:22072kB inactive_anon:0kB active_file:58864kB inactive_file:162496kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99904kB dirty:2772kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11812kB pagetables:3956kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 118.398213][ T6389] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:60kB dirty:60kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 118.398282][ T6389] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 118.398370][ T6389] lowmem_reserve[]: 0 2481 2483 2483 2483 [ 118.398430][ T6389] Node 0 DMA32 free:1396256kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22072kB inactive_anon:0kB active_file:58864kB inactive_file:162496kB unevictable:1536kB writepending:2772kB zspages:0kB present:3129332kB managed:2541024kB mlocked:0kB bounce:0kB free_pcp:53704kB local_pcp:18000kB free_cma:0kB [ 118.398519][ T6389] lowmem_reserve[]: 0 0 1 1 1 [ 118.398577][ T6389] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 118.398660][ T6389] lowmem_reserve[]: 0 0 0 0 0 [ 118.398716][ T6389] Node 1 Normal free:3909964kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB writepending:60kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:460kB local_pcp:0kB free_cma:0kB [ 118.398800][ T6389] lowmem_reserve[]: 0 0 0 0 0 [ 118.398857][ T6389] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 118.399064][ T6389] Node 0 DMA32: 1958*4kB (UM) 1205*8kB (UM) 694*16kB (UME) 333*32kB (UME) 148*64kB (UME) 58*128kB (UME) 47*256kB (UME) 40*512kB (UME) 23*1024kB (UME) 25*2048kB (UME) 301*4096kB (UM) = 1396288kB [ 118.399331][ T6389] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 118.399493][ T6389] Node 1 Normal: 199*4kB (UME) 50*8kB (UME) 44*16kB (UME) 227*32kB (UME) 112*64kB (UME) 31*128kB (UM) 12*256kB (UME) 7*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 947*4096kB (UM) = 3909964kB [ 118.399748][ T6389] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 118.399771][ T6389] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 118.399794][ T6389] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 118.399818][ T6389] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 118.399842][ T6389] 56742 total pagecache pages [ 118.399854][ T6389] 0 pages in swap cache [ 118.399870][ T6389] Free swap = 124996kB [ 118.399882][ T6389] Total swap = 124996kB [ 118.399900][ T6389] 2097051 pages RAM [ 118.399910][ T6389] 0 pages HighMem/MovableOnly [ 118.399921][ T6389] 429769 pages reserved [ 118.399932][ T6389] 0 pages cma reserved [ 122.706026][ T6463] FAULT_INJECTION: forcing a failure. [ 122.706026][ T6463] name failslab, interval 1, probability 0, space 0, times 0 [ 122.750582][ T6463] CPU: 0 UID: 0 PID: 6463 Comm: syz.2.122 Tainted: G L syzkaller #0 PREEMPT(full) [ 122.750625][ T6463] Tainted: [L]=SOFTLOCKUP [ 122.750635][ T6463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 122.750649][ T6463] Call Trace: [ 122.750658][ T6463] [ 122.750669][ T6463] dump_stack_lvl+0x16c/0x1f0 [ 122.750716][ T6463] should_fail_ex+0x512/0x640 [ 122.750749][ T6463] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 122.750794][ T6463] should_failslab+0xc2/0x120 [ 122.750836][ T6463] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 122.750877][ T6463] ? vidtv_psi_service_desc_init+0x27c/0x4c0 [ 122.750924][ T6463] ? kstrdup+0x53/0x100 [ 122.750952][ T6463] kstrdup+0x53/0x100 [ 122.750983][ T6463] vidtv_psi_service_desc_init+0x27c/0x4c0 [ 122.751023][ T6463] vidtv_psi_desc_clone+0x4fe/0x5d0 [ 122.751063][ T6463] vidtv_channel_si_init+0x4bd/0x1a50 [ 122.751100][ T6463] vidtv_mux_init+0x526/0xbe0 [ 122.751134][ T6463] vidtv_start_feed+0x33e/0x4d0 [ 122.751169][ T6463] ? __pfx_vidtv_start_feed+0x10/0x10 [ 122.751205][ T6463] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 122.751255][ T6463] ? __pfx_vidtv_start_feed+0x10/0x10 [ 122.751286][ T6463] dmx_ts_feed_start_filtering+0xf6/0x220 [ 122.751321][ T6463] dvb_dmxdev_start_feed+0x273/0x3f0 [ 122.751350][ T6463] dvb_dmxdev_filter_start+0x1b6/0xe10 [ 122.751383][ T6463] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 122.751414][ T6463] dvb_demux_do_ioctl+0x9de/0x12f0 [ 122.751465][ T6463] dvb_usercopy+0x167/0x340 [ 122.751505][ T6463] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 122.751536][ T6463] ? __pfx_dvb_usercopy+0x10/0x10 [ 122.751595][ T6463] ? __fget_files+0x20e/0x3c0 [ 122.751642][ T6463] dvb_demux_ioctl+0x29/0x40 [ 122.751667][ T6463] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 122.751693][ T6463] __x64_sys_ioctl+0x18e/0x210 [ 122.751730][ T6463] do_syscall_64+0xcd/0xf80 [ 122.751773][ T6463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.751801][ T6463] RIP: 0033:0x7f18ebb8f7c9 [ 122.751824][ T6463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.751849][ T6463] RSP: 002b:00007f18ecaa0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 122.751876][ T6463] RAX: ffffffffffffffda RBX: 00007f18ebde5fa0 RCX: 00007f18ebb8f7c9 [ 122.751895][ T6463] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000003 [ 122.751912][ T6463] RBP: 00007f18ebc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 122.751929][ T6463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.751946][ T6463] R13: 00007f18ebde6038 R14: 00007f18ebde5fa0 R15: 00007ffeab78c478 [ 122.751986][ T6463] [ 126.428614][ T5914] smpboot: CPU 1 is now offline [ 126.817029][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.136'. [ 126.917437][ T6526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.136'. [ 127.035712][ T6524] Invalid ELF header magic: != ELF [ 127.074471][ T6523] delete_channel: no stack [ 127.186434][ T6531] FAULT_INJECTION: forcing a failure. [ 127.186434][ T6531] name fail_futex, interval 1, probability 0, space 0, times 1 [ 127.281743][ T6531] CPU: 0 UID: 0 PID: 6531 Comm: syz.2.139 Tainted: G L syzkaller #0 PREEMPT(full) [ 127.281769][ T6531] Tainted: [L]=SOFTLOCKUP [ 127.281774][ T6531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 127.281782][ T6531] Call Trace: [ 127.281788][ T6531] [ 127.281794][ T6531] dump_stack_lvl+0x16c/0x1f0 [ 127.281820][ T6531] should_fail_ex+0x512/0x640 [ 127.281836][ T6531] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 127.281860][ T6531] get_futex_key+0x1d0/0x15f0 [ 127.281877][ T6531] ? __pfx_get_futex_key+0x10/0x10 [ 127.281895][ T6531] ? mas_next_slot+0x12d3/0x1cb0 [ 127.281914][ T6531] futex_wait_setup+0x9d/0x570 [ 127.281938][ T6531] __futex_wait+0x193/0x2f0 [ 127.281958][ T6531] ? __pfx___futex_wait+0x10/0x10 [ 127.281980][ T6531] ? __pfx_futex_wake_mark+0x10/0x10 [ 127.282008][ T6531] ? futex_hash+0x2c5/0x380 [ 127.282025][ T6531] ? futex_private_hash_put+0x160/0x1b0 [ 127.282042][ T6531] futex_wait+0xe8/0x380 [ 127.282061][ T6531] ? __pfx_futex_wait+0x10/0x10 [ 127.282086][ T6531] ? up_write+0x282/0x4e0 [ 127.282106][ T6531] do_futex+0x229/0x350 [ 127.282122][ T6531] ? __pfx_do_futex+0x10/0x10 [ 127.282143][ T6531] __x64_sys_futex+0x1e0/0x4c0 [ 127.282161][ T6531] ? __pfx___x64_sys_futex+0x10/0x10 [ 127.282176][ T6531] ? ksys_mmap_pgoff+0x85/0x5c0 [ 127.282196][ T6531] ? xfd_validate_state+0x61/0x180 [ 127.282209][ T6531] ? __pfx_do_writev+0x10/0x10 [ 127.282233][ T6531] do_syscall_64+0xcd/0xf80 [ 127.282255][ T6531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.282271][ T6531] RIP: 0033:0x7f18ebb8f7c9 [ 127.282284][ T6531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.282297][ T6531] RSP: 002b:00007f18ecaa00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 127.282312][ T6531] RAX: ffffffffffffffda RBX: 00007f18ebde5fa8 RCX: 00007f18ebb8f7c9 [ 127.282321][ T6531] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f18ebde5fa8 [ 127.282330][ T6531] RBP: 00007f18ebde5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 127.282338][ T6531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.282346][ T6531] R13: 00007f18ebde6038 R14: 00007ffeab78c390 R15: 00007ffeab78c478 [ 127.282365][ T6531] [ 127.736174][ T6546] FAULT_INJECTION: forcing a failure. [ 127.736174][ T6546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.786297][ T6546] CPU: 0 UID: 0 PID: 6546 Comm: syz.3.144 Tainted: G L syzkaller #0 PREEMPT(full) [ 127.786329][ T6546] Tainted: [L]=SOFTLOCKUP [ 127.786334][ T6546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 127.786343][ T6546] Call Trace: [ 127.786348][ T6546] [ 127.786355][ T6546] dump_stack_lvl+0x16c/0x1f0 [ 127.786382][ T6546] should_fail_ex+0x512/0x640 [ 127.786403][ T6546] _copy_from_iter+0x43b/0x16c0 [ 127.786422][ T6546] ? __alloc_skb+0x220/0x410 [ 127.786438][ T6546] ? __pfx__copy_from_iter+0x10/0x10 [ 127.786453][ T6546] ? __pfx___alloc_skb+0x10/0x10 [ 127.786472][ T6546] ? __asan_memset+0x23/0x50 [ 127.786490][ T6546] ? skb_put+0x138/0x1b0 [ 127.786513][ T6546] tipc_msg_build+0x7e9/0x1150 [ 127.786536][ T6546] ? __pfx_tipc_msg_build+0x10/0x10 [ 127.786563][ T6546] tipc_send_group_bcast+0x7cc/0xa50 [ 127.786591][ T6546] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 127.786616][ T6546] ? __pfx_woken_wake_function+0x10/0x10 [ 127.786635][ T6546] ? find_held_lock+0x2b/0x80 [ 127.786658][ T6546] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 127.786676][ T6546] ? kernel_text_address+0x8d/0x100 [ 127.786695][ T6546] __tipc_sendmsg+0x4ab/0x1970 [ 127.786711][ T6546] ? __lock_acquire+0x436/0x2890 [ 127.786729][ T6546] ? __pfx___tipc_sendmsg+0x10/0x10 [ 127.786744][ T6546] ? __lock_acquire+0x436/0x2890 [ 127.786773][ T6546] ? __local_bh_enable_ip+0xa4/0x120 [ 127.786795][ T6546] tipc_sendmsg+0x4f/0x70 [ 127.786811][ T6546] sock_write_iter+0x566/0x610 [ 127.786833][ T6546] ? __pfx_sock_write_iter+0x10/0x10 [ 127.786862][ T6546] ? preempt_schedule_common+0x44/0xc0 [ 127.786883][ T6546] ? copy_iovec_from_user+0x131/0x170 [ 127.786900][ T6546] do_iter_readv_writev+0x662/0x9e0 [ 127.786920][ T6546] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 127.786939][ T6546] ? common_file_perm+0x1b1/0x500 [ 127.786957][ T6546] ? bpf_lsm_file_permission+0x9/0x10 [ 127.786974][ T6546] ? security_file_permission+0x71/0x210 [ 127.786992][ T6546] ? rw_verify_area+0xcf/0x6c0 [ 127.787011][ T6546] vfs_writev+0x35f/0xde0 [ 127.787034][ T6546] ? __pfx_vfs_writev+0x10/0x10 [ 127.787054][ T6546] ? vfs_read+0x23b/0xcf0 [ 127.787089][ T6546] ? do_writev+0x28c/0x340 [ 127.787106][ T6546] do_writev+0x28c/0x340 [ 127.787124][ T6546] ? __pfx_do_writev+0x10/0x10 [ 127.787148][ T6546] do_syscall_64+0xcd/0xf80 [ 127.787170][ T6546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.787185][ T6546] RIP: 0033:0x7f416b58f7c9 [ 127.787222][ T6546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.787236][ T6546] RSP: 002b:00007f416c4a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 127.787251][ T6546] RAX: ffffffffffffffda RBX: 00007f416b7e5fa0 RCX: 00007f416b58f7c9 [ 127.787261][ T6546] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 127.787270][ T6546] RBP: 00007f416b613f91 R08: 0000000000000000 R09: 0000000000000000 [ 127.787279][ T6546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.787288][ T6546] R13: 00007f416b7e6038 R14: 00007f416b7e5fa0 R15: 00007ffc4f08c4a8 [ 127.787308][ T6546] [ 130.874456][ T6612] process 'syz.0.159' launched ':,' with NULL argv: empty string added [ 130.987225][ T6614] zswap: compressor not available [ 131.081184][ T6620] batman_adv: Routing algorithm '7' is not supported [ 131.231507][ T1941] netdevsim netdevsim511 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.577009][ T6626] FAULT_INJECTION: forcing a failure. [ 131.577009][ T6626] name failslab, interval 1, probability 0, space 0, times 0 [ 131.749320][ T6626] CPU: 0 UID: 0 PID: 6626 Comm: syz.2.162 Tainted: G L syzkaller #0 PREEMPT(full) [ 131.749346][ T6626] Tainted: [L]=SOFTLOCKUP [ 131.749351][ T6626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 131.749359][ T6626] Call Trace: [ 131.749365][ T6626] [ 131.749371][ T6626] dump_stack_lvl+0x16c/0x1f0 [ 131.749397][ T6626] should_fail_ex+0x512/0x640 [ 131.749413][ T6626] ? kmem_cache_alloc_noprof+0x62/0x770 [ 131.749432][ T6626] should_failslab+0xc2/0x120 [ 131.749453][ T6626] kmem_cache_alloc_noprof+0x83/0x770 [ 131.749470][ T6626] ? ep_ptable_queue_proc+0x5b/0x280 [ 131.749547][ T6626] ? ep_ptable_queue_proc+0x5b/0x280 [ 131.749566][ T6626] ep_ptable_queue_proc+0x5b/0x280 [ 131.749586][ T6626] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 131.749606][ T6626] snd_seq_pool_poll_wait+0x5b/0x190 [ 131.749622][ T6626] snd_seq_kernel_client_write_poll+0xaa/0x110 [ 131.749645][ T6626] snd_seq_oss_poll+0x17d/0x1d0 [ 131.749660][ T6626] ? __pfx_odev_poll+0x10/0x10 [ 131.749679][ T6626] odev_poll+0x4a/0x90 [ 131.749699][ T6626] ep_item_poll+0x141/0x1f0 [ 131.749720][ T6626] do_epoll_ctl+0x1fae/0x3790 [ 131.749753][ T6626] ? __pfx_do_epoll_ctl+0x10/0x10 [ 131.749773][ T6626] ? find_held_lock+0x2b/0x80 [ 131.749791][ T6626] ? __might_fault+0xe3/0x190 [ 131.749807][ T6626] ? __might_fault+0xe3/0x190 [ 131.749827][ T6626] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 131.749854][ T6626] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 131.749874][ T6626] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 131.749896][ T6626] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 131.749924][ T6626] do_syscall_64+0xcd/0xf80 [ 131.749950][ T6626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.749964][ T6626] RIP: 0033:0x7f18ebb8f7c9 [ 131.749976][ T6626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.749989][ T6626] RSP: 002b:00007f18ecaa0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 131.750003][ T6626] RAX: ffffffffffffffda RBX: 00007f18ebde5fa0 RCX: 00007f18ebb8f7c9 [ 131.750012][ T6626] RDX: 0000000000000026 RSI: 0000000000000001 RDI: 000000000000002e [ 131.750020][ T6626] RBP: 00007f18ebc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 131.750028][ T6626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.750036][ T6626] R13: 00007f18ebde6038 R14: 00007f18ebde5fa0 R15: 00007ffeab78c478 [ 131.750055][ T6626] [ 132.181397][ T6648] FAULT_INJECTION: forcing a failure. [ 132.181397][ T6648] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.195509][ T6648] CPU: 0 UID: 0 PID: 6648 Comm: syz.3.165 Tainted: G L syzkaller #0 PREEMPT(full) [ 132.195534][ T6648] Tainted: [L]=SOFTLOCKUP [ 132.195540][ T6648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 132.195548][ T6648] Call Trace: [ 132.195553][ T6648] [ 132.195559][ T6648] dump_stack_lvl+0x16c/0x1f0 [ 132.195586][ T6648] should_fail_ex+0x512/0x640 [ 132.195606][ T6648] _copy_from_user+0x2e/0xd0 [ 132.195623][ T6648] copy_mount_options+0x76/0x190 [ 132.195641][ T6648] __x64_sys_mount+0x1ab/0x310 [ 132.195656][ T6648] ? __pfx___x64_sys_mount+0x10/0x10 [ 132.195676][ T6648] do_syscall_64+0xcd/0xf80 [ 132.195698][ T6648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.195713][ T6648] RIP: 0033:0x7f416b58f7c9 [ 132.195725][ T6648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.195738][ T6648] RSP: 002b:00007f416c485038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 132.195752][ T6648] RAX: ffffffffffffffda RBX: 00007f416b7e6090 RCX: 00007f416b58f7c9 [ 132.195762][ T6648] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 0000200000000180 [ 132.195770][ T6648] RBP: 00007f416b613f91 R08: 0000200000000280 R09: 0000000000000000 [ 132.195779][ T6648] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 132.195787][ T6648] R13: 00007f416b7e6128 R14: 00007f416b7e6090 R15: 00007ffc4f08c4a8 [ 132.195806][ T6648] [ 136.141015][ T6675] FAULT_INJECTION: forcing a failure. [ 136.141015][ T6675] name failslab, interval 1, probability 0, space 0, times 0 [ 136.224985][ T6675] CPU: 0 UID: 0 PID: 6675 Comm: syz.0.169 Tainted: G L syzkaller #0 PREEMPT(full) [ 136.225012][ T6675] Tainted: [L]=SOFTLOCKUP [ 136.225018][ T6675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 136.225026][ T6675] Call Trace: [ 136.225032][ T6675] [ 136.225038][ T6675] dump_stack_lvl+0x16c/0x1f0 [ 136.225064][ T6675] should_fail_ex+0x512/0x640 [ 136.225080][ T6675] ? __kmalloc_cache_noprof+0x5f/0x800 [ 136.225099][ T6675] should_failslab+0xc2/0x120 [ 136.225121][ T6675] __kmalloc_cache_noprof+0x80/0x800 [ 136.225138][ T6675] ? snd_pcm_oss_change_params_locked+0x1db/0x3ab0 [ 136.225157][ T6675] ? snd_pcm_oss_change_params_locked+0x1db/0x3ab0 [ 136.225171][ T6675] snd_pcm_oss_change_params_locked+0x1db/0x3ab0 [ 136.225186][ T6675] ? trace_contention_end+0x85/0x110 [ 136.225203][ T6675] ? __mutex_lock+0x27b/0x1ca0 [ 136.225226][ T6675] ? snd_pcm_oss_make_ready+0xc4/0x1b0 [ 136.225242][ T6675] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 136.225266][ T6675] ? __pfx___mutex_lock+0x10/0x10 [ 136.225293][ T6675] ? __fsnotify_parent+0x24b/0xcc0 [ 136.225326][ T6675] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 136.225342][ T6675] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 136.225355][ T6675] snd_pcm_oss_sync+0x1de/0x840 [ 136.225369][ T6675] ? kmem_cache_free+0x171/0x770 [ 136.225389][ T6675] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 136.225403][ T6675] snd_pcm_oss_release+0x28b/0x310 [ 136.225419][ T6675] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 136.225432][ T6675] __fput+0x402/0xb70 [ 136.225451][ T6675] task_work_run+0x150/0x240 [ 136.225467][ T6675] ? __pfx_task_work_run+0x10/0x10 [ 136.225481][ T6675] ? __do_sys_close_range+0x278/0x730 [ 136.225507][ T6675] exit_to_user_mode_loop+0xfb/0x540 [ 136.225527][ T6675] do_syscall_64+0x4ee/0xf80 [ 136.225550][ T6675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.225565][ T6675] RIP: 0033:0x7ff8b998f7c9 [ 136.225578][ T6675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.225591][ T6675] RSP: 002b:00007ff8ba8e1038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 136.225606][ T6675] RAX: 0000000000000000 RBX: 00007ff8b9be5fa0 RCX: 00007ff8b998f7c9 [ 136.225615][ T6675] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 136.225623][ T6675] RBP: 00007ff8b9a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 136.225631][ T6675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.225639][ T6675] R13: 00007ff8b9be6038 R14: 00007ff8b9be5fa0 R15: 00007fff1212e068 [ 136.225658][ T6675] [ 136.944634][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.951068][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.103805][ T6686] FAULT_INJECTION: forcing a failure. [ 137.103805][ T6686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.204959][ T6686] CPU: 0 UID: 0 PID: 6686 Comm: syz.0.170 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.204993][ T6686] Tainted: [L]=SOFTLOCKUP [ 137.204999][ T6686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 137.205007][ T6686] Call Trace: [ 137.205013][ T6686] [ 137.205019][ T6686] dump_stack_lvl+0x16c/0x1f0 [ 137.205046][ T6686] should_fail_ex+0x512/0x640 [ 137.205065][ T6686] strncpy_from_user+0x3b/0x2e0 [ 137.205082][ T6686] getname_flags.part.0+0x8f/0x550 [ 137.205102][ T6686] getname_flags+0x93/0xf0 [ 137.205120][ T6686] user_path_at+0x24/0x60 [ 137.205140][ T6686] __x64_sys_mount+0x1fb/0x310 [ 137.205155][ T6686] ? __pfx___x64_sys_mount+0x10/0x10 [ 137.205174][ T6686] do_syscall_64+0xcd/0xf80 [ 137.205196][ T6686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.205210][ T6686] RIP: 0033:0x7ff8b998f7c9 [ 137.205223][ T6686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.205236][ T6686] RSP: 002b:00007ff8ba8c0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 137.205250][ T6686] RAX: ffffffffffffffda RBX: 00007ff8b9be6090 RCX: 00007ff8b998f7c9 [ 137.205259][ T6686] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 0000200000000180 [ 137.205268][ T6686] RBP: 00007ff8b9a13f91 R08: 0000200000000280 R09: 0000000000000000 [ 137.205277][ T6686] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 137.205285][ T6686] R13: 00007ff8b9be6128 R14: 00007ff8b9be6090 R15: 00007fff1212e068 [ 137.205304][ T6686] [ 139.903234][ T6734] netlink: 326 bytes leftover after parsing attributes in process `syz.0.179'. [ 140.029250][ T6717] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.177: iget: checksum invalid [ 140.082067][ T6717] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 140.156321][ T6717] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.177: iget: checksum invalid [ 140.238485][ T6717] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 140.322822][ T6717] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.177: iget: checksum invalid [ 140.373360][ T6717] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 140.415178][ T6717] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.177: iget: checksum invalid [ 140.448486][ T6734] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 140.468885][ T6717] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 140.484723][ T6734] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 140.521413][ T6717] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 140.536122][ T6734] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 140.563221][ T6734] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 140.574984][ T6717] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 140.601401][ T6734] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 140.636282][ T6734] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 140.695293][ T6734] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 140.716468][ T6734] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 140.752424][ T6734] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 140.803115][ T6734] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 140.825740][ T6734] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 140.856739][ T6734] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 141.186144][ T6746] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 141.196997][ T6747] FAULT_INJECTION: forcing a failure. [ 141.196997][ T6747] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 141.288183][ T6747] CPU: 0 UID: 0 PID: 6747 Comm: syz.0.183 Tainted: G L syzkaller #0 PREEMPT(full) [ 141.288210][ T6747] Tainted: [L]=SOFTLOCKUP [ 141.288215][ T6747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 141.288224][ T6747] Call Trace: [ 141.288230][ T6747] [ 141.288237][ T6747] dump_stack_lvl+0x16c/0x1f0 [ 141.288265][ T6747] should_fail_ex+0x512/0x640 [ 141.288284][ T6747] should_fail_alloc_page+0xe7/0x130 [ 141.288308][ T6747] prepare_alloc_pages+0x401/0x670 [ 141.288330][ T6747] ? rcu_is_watching+0x12/0xc0 [ 141.288352][ T6747] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 141.288369][ T6747] ? should_fail_alloc_page+0xee/0x130 [ 141.288393][ T6747] ? rcu_is_watching+0x12/0xc0 [ 141.288412][ T6747] ? trace_mm_page_alloc+0x11b/0x180 [ 141.288433][ T6747] ? __alloc_frozen_pages_noprof+0x292/0x2430 [ 141.288453][ T6747] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 141.288470][ T6747] ? find_held_lock+0x2b/0x80 [ 141.288489][ T6747] ? is_bpf_text_address+0x8a/0x1a0 [ 141.288507][ T6747] ? bpf_ksym_find+0x124/0x1c0 [ 141.288524][ T6747] ? kernel_text_address+0x8d/0x100 [ 141.288540][ T6747] ? __kernel_text_address+0xd/0x40 [ 141.288555][ T6747] ? unwind_get_return_address+0x59/0xa0 [ 141.288581][ T6747] alloc_pages_bulk_noprof+0x77a/0x1410 [ 141.288610][ T6747] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 141.288634][ T6747] ? policy_nodemask+0xea/0x4e0 [ 141.288658][ T6747] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 141.288677][ T6747] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 141.288706][ T6747] __kasan_populate_vmalloc+0xfb/0x220 [ 141.288729][ T6747] alloc_vmap_area+0x98d/0x2a50 [ 141.288758][ T6747] ? __pfx_alloc_vmap_area+0x10/0x10 [ 141.288783][ T6747] __get_vm_area_node+0x1ca/0x330 [ 141.288806][ T6747] ? vb2_vmalloc_alloc+0x135/0x410 [ 141.288824][ T6747] __vmalloc_node_range_noprof+0x247/0x16b0 [ 141.288838][ T6747] ? vb2_vmalloc_alloc+0x135/0x410 [ 141.288853][ T6747] ? do_syscall_64+0xcd/0xf80 [ 141.288873][ T6747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.288894][ T6747] ? vb2_vmalloc_alloc+0x135/0x410 [ 141.288914][ T6747] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 141.288936][ T6747] ? vb2_vmalloc_alloc+0x135/0x410 [ 141.288952][ T6747] vmalloc_user_noprof+0x9e/0xe0 [ 141.288966][ T6747] ? vb2_vmalloc_alloc+0x135/0x410 [ 141.288982][ T6747] vb2_vmalloc_alloc+0x135/0x410 [ 141.289000][ T6747] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 141.289016][ T6747] __vb2_queue_alloc+0x8c9/0x1280 [ 141.289040][ T6747] vb2_core_reqbufs+0xa90/0xfe0 [ 141.289060][ T6747] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 141.289086][ T6747] __vb2_init_fileio+0x3f1/0x1100 [ 141.289101][ T6747] ? lockdep_hardirqs_on+0x7c/0x110 [ 141.289121][ T6747] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 141.289141][ T6747] ? __pollwait+0x271/0x460 [ 141.289162][ T6747] vb2_core_poll+0x5ec/0x700 [ 141.289179][ T6747] vb2_poll+0x4b/0xe0 [ 141.289192][ T6747] vb2_fop_poll+0x10f/0x2c0 [ 141.289208][ T6747] ? __pfx_vb2_fop_poll+0x10/0x10 [ 141.289221][ T6747] v4l2_poll+0x163/0x320 [ 141.289240][ T6747] ? __pfx_v4l2_poll+0x10/0x10 [ 141.289258][ T6747] do_sys_poll+0x55c/0xdf0 [ 141.289283][ T6747] ? __pfx_do_sys_poll+0x10/0x10 [ 141.289319][ T6747] ? __futex_wait+0x24b/0x2f0 [ 141.289338][ T6747] ? __pfx___pollwait+0x10/0x10 [ 141.289358][ T6747] ? __pfx_pollwake+0x10/0x10 [ 141.289404][ T6747] ? __pfx_timespec64_add_safe+0x10/0x10 [ 141.289421][ T6747] ? ktime_get_ts64+0x2d2/0x400 [ 141.289436][ T6747] ? read_tsc+0x9/0x20 [ 141.289454][ T6747] ? ktime_get_ts64+0x256/0x400 [ 141.289472][ T6747] __x64_sys_poll+0x1a6/0x450 [ 141.289492][ T6747] ? __pfx___x64_sys_poll+0x10/0x10 [ 141.289517][ T6747] do_syscall_64+0xcd/0xf80 [ 141.289539][ T6747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.289554][ T6747] RIP: 0033:0x7ff8b998f7c9 [ 141.289569][ T6747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.289582][ T6747] RSP: 002b:00007ff8ba8e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 141.289604][ T6747] RAX: ffffffffffffffda RBX: 00007ff8b9be5fa0 RCX: 00007ff8b998f7c9 [ 141.289614][ T6747] RDX: 0000000000000008 RSI: 0000000000000003 RDI: 0000200000000480 [ 141.289623][ T6747] RBP: 00007ff8b9a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 141.289632][ T6747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.289641][ T6747] R13: 00007ff8b9be6038 R14: 00007ff8b9be5fa0 R15: 00007fff1212e068 [ 141.289661][ T6747] [ 141.289823][ T6747] syz.0.183: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 142.337930][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 142.672877][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 142.783783][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 142.880182][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 143.239570][ T6770] nvme_fabrics: unknown parameter or missing value '@' in ctrl creation request [ 143.393966][ T6747] ,cpuset=/,mems_allowed=0-1 [ 143.426910][ T6747] CPU: 0 UID: 0 PID: 6747 Comm: syz.0.183 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.426935][ T6747] Tainted: [L]=SOFTLOCKUP [ 143.426941][ T6747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 143.426949][ T6747] Call Trace: [ 143.426954][ T6747] [ 143.426961][ T6747] dump_stack_lvl+0x16c/0x1f0 [ 143.426988][ T6747] warn_alloc+0x248/0x3a0 [ 143.427008][ T6747] ? __pfx_warn_alloc+0x10/0x10 [ 143.427027][ T6747] ? __get_vm_area_node+0x2cd/0x330 [ 143.427053][ T6747] ? __get_vm_area_node+0x2cd/0x330 [ 143.427075][ T6747] ? __get_vm_area_node+0x208/0x330 [ 143.427098][ T6747] ? vb2_vmalloc_alloc+0x135/0x410 [ 143.427117][ T6747] __vmalloc_node_range_noprof+0xbe0/0x16b0 [ 143.427132][ T6747] ? do_syscall_64+0xcd/0xf80 [ 143.427160][ T6747] ? vb2_vmalloc_alloc+0x135/0x410 [ 143.427181][ T6747] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 143.427204][ T6747] ? vb2_vmalloc_alloc+0x135/0x410 [ 143.427221][ T6747] vmalloc_user_noprof+0x9e/0xe0 [ 143.427235][ T6747] ? vb2_vmalloc_alloc+0x135/0x410 [ 143.427252][ T6747] vb2_vmalloc_alloc+0x135/0x410 [ 143.427269][ T6747] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 143.427286][ T6747] __vb2_queue_alloc+0x8c9/0x1280 [ 143.427321][ T6747] vb2_core_reqbufs+0xa90/0xfe0 [ 143.427342][ T6747] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 143.427368][ T6747] __vb2_init_fileio+0x3f1/0x1100 [ 143.427384][ T6747] ? lockdep_hardirqs_on+0x7c/0x110 [ 143.427406][ T6747] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 143.427426][ T6747] ? __pollwait+0x271/0x460 [ 143.427448][ T6747] vb2_core_poll+0x5ec/0x700 [ 143.427466][ T6747] vb2_poll+0x4b/0xe0 [ 143.427479][ T6747] vb2_fop_poll+0x10f/0x2c0 [ 143.427495][ T6747] ? __pfx_vb2_fop_poll+0x10/0x10 [ 143.427509][ T6747] v4l2_poll+0x163/0x320 [ 143.427530][ T6747] ? __pfx_v4l2_poll+0x10/0x10 [ 143.427548][ T6747] do_sys_poll+0x55c/0xdf0 [ 143.427574][ T6747] ? __pfx_do_sys_poll+0x10/0x10 [ 143.427611][ T6747] ? __futex_wait+0x24b/0x2f0 [ 143.427632][ T6747] ? __pfx___pollwait+0x10/0x10 [ 143.427653][ T6747] ? __pfx_pollwake+0x10/0x10 [ 143.427700][ T6747] ? __pfx_timespec64_add_safe+0x10/0x10 [ 143.427717][ T6747] ? ktime_get_ts64+0x2d2/0x400 [ 143.427732][ T6747] ? read_tsc+0x9/0x20 [ 143.427752][ T6747] ? ktime_get_ts64+0x256/0x400 [ 143.427771][ T6747] __x64_sys_poll+0x1a6/0x450 [ 143.427791][ T6747] ? __pfx___x64_sys_poll+0x10/0x10 [ 143.427817][ T6747] do_syscall_64+0xcd/0xf80 [ 143.427840][ T6747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.427855][ T6747] RIP: 0033:0x7ff8b998f7c9 [ 143.427869][ T6747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.427883][ T6747] RSP: 002b:00007ff8ba8e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 143.427897][ T6747] RAX: ffffffffffffffda RBX: 00007ff8b9be5fa0 RCX: 00007ff8b998f7c9 [ 143.427907][ T6747] RDX: 0000000000000008 RSI: 0000000000000003 RDI: 0000200000000480 [ 143.427916][ T6747] RBP: 00007ff8b9a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 143.427924][ T6747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.427933][ T6747] R13: 00007ff8b9be6038 R14: 00007ff8b9be5fa0 R15: 00007fff1212e068 [ 143.427953][ T6747] [ 143.427958][ T6747] Mem-Info: [ 144.442244][ T6781] FAULT_INJECTION: forcing a failure. [ 144.442244][ T6781] name failslab, interval 1, probability 0, space 0, times 0 [ 144.442327][ T6781] CPU: 0 UID: 0 PID: 6781 Comm: syz.3.190 Tainted: G L syzkaller #0 PREEMPT(full) [ 144.442349][ T6781] Tainted: [L]=SOFTLOCKUP [ 144.442353][ T6781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 144.442362][ T6781] Call Trace: [ 144.442367][ T6781] [ 144.442373][ T6781] dump_stack_lvl+0x16c/0x1f0 [ 144.442398][ T6781] should_fail_ex+0x512/0x640 [ 144.442415][ T6781] ? __kmalloc_node_noprof+0xcd/0x930 [ 144.442436][ T6781] should_failslab+0xc2/0x120 [ 144.442458][ T6781] __kmalloc_node_noprof+0xee/0x930 [ 144.442479][ T6781] ? alloc_slab_obj_exts+0x43/0xf0 [ 144.442493][ T6781] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 144.442518][ T6781] ? alloc_slab_obj_exts+0x43/0xf0 [ 144.442541][ T6781] alloc_slab_obj_exts+0x43/0xf0 [ 144.442557][ T6781] new_slab+0x353/0x430 [ 144.442574][ T6781] ___slab_alloc+0xe18/0x1c90 [ 144.442589][ T6781] ? lock_acquire+0x179/0x330 [ 144.442604][ T6781] ? __pcs_replace_empty_main+0x2b2/0x4e0 [ 144.442627][ T6781] ? __kmem_cache_alloc_bulk+0x1fb/0x6c0 [ 144.442644][ T6781] __kmem_cache_alloc_bulk+0x1fb/0x6c0 [ 144.442666][ T6781] __pcs_replace_empty_main+0x2b2/0x4e0 [ 144.442685][ T6781] kmem_cache_alloc_noprof+0x5af/0x770 [ 144.442701][ T6781] ? vm_area_dup+0x27/0x8d0 [ 144.442719][ T6781] ? vm_area_dup+0x27/0x8d0 [ 144.442732][ T6781] vm_area_dup+0x27/0x8d0 [ 144.442747][ T6781] dup_mmap+0x6a4/0x20e0 [ 144.442767][ T6781] ? __pfx_dup_mmap+0x10/0x10 [ 144.442801][ T6781] copy_process+0x3b9f/0x7430 [ 144.442822][ T6781] ? __pfx___futex_wait+0x10/0x10 [ 144.442849][ T6781] ? __pfx_copy_process+0x10/0x10 [ 144.442873][ T6781] ? futex_private_hash_put+0x160/0x1b0 [ 144.442892][ T6781] kernel_clone+0xfc/0x910 [ 144.442914][ T6781] ? __pfx_kernel_clone+0x10/0x10 [ 144.442945][ T6781] __do_sys_clone+0xce/0x120 [ 144.442965][ T6781] ? __pfx___do_sys_clone+0x10/0x10 [ 144.442994][ T6781] ? xfd_validate_state+0x61/0x180 [ 144.443007][ T6781] ? __pfx_do_writev+0x10/0x10 [ 144.443032][ T6781] do_syscall_64+0xcd/0xf80 [ 144.443054][ T6781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.443069][ T6781] RIP: 0033:0x7f416b58f7c9 [ 144.443082][ T6781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.443095][ T6781] RSP: 002b:00007f416c484fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 144.443109][ T6781] RAX: ffffffffffffffda RBX: 00007f416b7e6090 RCX: 00007f416b58f7c9 [ 144.443119][ T6781] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 144.443127][ T6781] RBP: 00007f416b613f91 R08: 0000000000000000 R09: 0000000000000000 [ 144.443136][ T6781] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 144.443144][ T6781] R13: 00007f416b7e6128 R14: 00007f416b7e6090 R15: 00007ffc4f08c4a8 [ 144.443173][ T6781] [ 144.464714][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 144.589468][ T6775] zswap: compressor not available [ 144.606661][ T6747] active_anon:8338 inactive_anon:0 isolated_anon:0 [ 144.606661][ T6747] active_file:15621 inactive_file:43385 isolated_file:0 [ 144.606661][ T6747] unevictable:768 dirty:457 writeback:1024 [ 144.606661][ T6747] slab_reclaimable:11101 slab_unreclaimable:91370 [ 144.606661][ T6747] mapped:27055 shmem:1373 pagetables:1189 [ 144.606661][ T6747] sec_pagetables:0 bounce:0 [ 144.606661][ T6747] kernel_misc_reclaimable:0 [ 144.606661][ T6747] free:1325966 free_pcp:10884 free_cma:0 [ 144.606717][ T6747] Node 0 active_anon:33352kB inactive_anon:0kB active_file:60692kB inactive_file:171300kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:108160kB dirty:1764kB writeback:4096kB shmem:3956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12256kB pagetables:4596kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 144.606755][ T6747] Node 1 active_anon:0kB inactive_anon:0kB active_file:1792kB inactive_file:2240kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:60kB dirty:64kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 144.606790][ T6747] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 144.606833][ T6747] lowmem_reserve[]: 0 2481 2483 2483 2483 [ 144.606863][ T6747] Node 0 DMA32 free:1384384kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33352kB inactive_anon:0kB active_file:60692kB inactive_file:171300kB unevictable:1536kB writepending:5860kB zspages:16kB present:3129332kB managed:2541024kB mlocked:0kB bounce:0kB free_pcp:40916kB local_pcp:40916kB free_cma:0kB [ 144.606907][ T6747] lowmem_reserve[]: 0 0 1 1 1 [ 144.606935][ T6747] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 144.606976][ T6747] lowmem_reserve[]: 0 0 0 0 0 [ 144.607004][ T6747] Node 1 Normal free:3904120kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:1792kB inactive_file:2240kB unevictable:1536kB writepending:64kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:2620kB local_pcp:2620kB free_cma:0kB [ 144.607047][ T6747] lowmem_reserve[]: 0 0 0 0 0 [ 144.607075][ T6747] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 144.607184][ T6747] Node 0 DMA32: 1852*4kB (U) 1094*8kB (UM) 712*16kB (UM) 517*32kB (UME) 92*64kB (UM) 81*128kB (UM) 74*256kB (UME) 37*512kB (UME) 20*1024kB (UME) 22*2048kB (UME) 298*4096kB (UM) = 1384384kB [ 144.607336][ T6747] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 144.607415][ T6747] Node 1 Normal: 200*4kB (UE) 47*8kB (UME) 40*16kB (UE) 225*32kB (UE) 109*64kB (UE) 30*128kB (UM) 11*256kB (UE) 7*512kB (UM) 1*1024kB (E) 1*2048kB (E) 946*4096kB (UM) = 3904120kB [ 144.607545][ T6747] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 144.607557][ T6747] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 144.607569][ T6747] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 144.607580][ T6747] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 144.607592][ T6747] 60442 total pagecache pages [ 144.607598][ T6747] 67 pages in swap cache [ 144.607603][ T6747] Free swap = 120656kB [ 144.607609][ T6747] Total swap = 124996kB [ 144.607614][ T6747] 2097051 pages RAM [ 144.607620][ T6747] 0 pages HighMem/MovableOnly [ 144.607625][ T6747] 429769 pages reserved [ 144.607630][ T6747] 0 pages cma reserved [ 144.726577][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 144.806790][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 144.913267][ T6793] program syz.0.192 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.968966][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 145.798081][ T6801] zswap: compressor not available [ 146.494548][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 146.808767][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 146.888073][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 147.084845][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 147.437254][ T6826] FAULT_INJECTION: forcing a failure. [ 147.437254][ T6826] name failslab, interval 1, probability 0, space 0, times 0 [ 147.437346][ T6826] CPU: 0 UID: 0 PID: 6826 Comm: syz.0.200 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.437368][ T6826] Tainted: [L]=SOFTLOCKUP [ 147.437373][ T6826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 147.437381][ T6826] Call Trace: [ 147.437386][ T6826] [ 147.437392][ T6826] dump_stack_lvl+0x16c/0x1f0 [ 147.437418][ T6826] should_fail_ex+0x512/0x640 [ 147.437435][ T6826] ? kmem_cache_alloc_noprof+0x62/0x770 [ 147.437455][ T6826] should_failslab+0xc2/0x120 [ 147.437476][ T6826] kmem_cache_alloc_noprof+0x83/0x770 [ 147.437494][ T6826] ? ptlock_alloc+0x1f/0x70 [ 147.437513][ T6826] ? ptlock_alloc+0x1f/0x70 [ 147.437527][ T6826] ptlock_alloc+0x1f/0x70 [ 147.437541][ T6826] pte_alloc_one+0x84/0x3d0 [ 147.437561][ T6826] __do_fault+0x320/0x490 [ 147.437579][ T6826] do_fault+0x302/0x1ad0 [ 147.437598][ T6826] ? __pfx_filemap_map_pages+0x10/0x10 [ 147.437615][ T6826] ? __pmd_alloc+0x6aa/0x9c0 [ 147.437637][ T6826] __handle_mm_fault+0x1919/0x2bb0 [ 147.437657][ T6826] ? __pfx___handle_mm_fault+0x10/0x10 [ 147.437683][ T6826] ? find_vma+0xbf/0x140 [ 147.437701][ T6826] ? __pfx_find_vma+0x10/0x10 [ 147.437722][ T6826] handle_mm_fault+0x3fe/0xad0 [ 147.437740][ T6826] do_user_addr_fault+0x7a6/0x1370 [ 147.437758][ T6826] ? rcu_is_watching+0x12/0xc0 [ 147.437785][ T6826] exc_page_fault+0x64/0xc0 [ 147.437808][ T6826] asm_exc_page_fault+0x26/0x30 [ 147.437822][ T6826] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 147.437841][ T6826] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 0d 81 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 147.437855][ T6826] RSP: 0018:ffffc900046c7d90 EFLAGS: 00050246 [ 147.437867][ T6826] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 0000000000000008 [ 147.437876][ T6826] RDX: fffff520008d8fc5 RSI: ffffc900046c7e20 RDI: 000000000000556d [ 147.437885][ T6826] RBP: 000000000000556d R08: 0000000000000000 R09: fffff520008d8fc4 [ 147.437893][ T6826] R10: ffffc900046c7e27 R11: ffff888028b0a9b0 R12: ffffc900046c7e20 [ 147.437910][ T6826] R13: 0000000000005575 R14: 00007ffffffff000 R15: 0000000000000000 [ 147.437929][ T6826] _copy_to_user+0xbb/0xd0 [ 147.437947][ T6826] do_fcntl+0x13f4/0x1660 [ 147.437964][ T6826] ? __pfx_do_fcntl+0x10/0x10 [ 147.437986][ T6826] ? tomoyo_file_fcntl+0x6c/0xc0 [ 147.438011][ T6826] __x64_sys_fcntl+0x163/0x200 [ 147.438028][ T6826] do_syscall_64+0xcd/0xf80 [ 147.438050][ T6826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.438064][ T6826] RIP: 0033:0x7ff8b998f7c9 [ 147.438076][ T6826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.438089][ T6826] RSP: 002b:00007ff8ba8e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 147.438102][ T6826] RAX: ffffffffffffffda RBX: 00007ff8b9be5fa0 RCX: 00007ff8b998f7c9 [ 147.438111][ T6826] RDX: 000000000000556d RSI: 000000000000040b RDI: 0000000000000004 [ 147.438119][ T6826] RBP: 00007ff8b9a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 147.438127][ T6826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.438135][ T6826] R13: 00007ff8b9be6038 R14: 00007ff8b9be5fa0 R15: 00007fff1212e068 [ 147.438155][ T6826] [ 147.872489][ T6829] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(320.8192.104), cmd(14) [ 150.404477][ T6872] zswap: compressor not available [ 151.058719][ T6883] zswap: compressor 000 not available [ 151.283671][ T6899] netlink: 14 bytes leftover after parsing attributes in process `syz.3.216'. [ 152.653348][ T6923] nvme_fcloop: unknown parameter or missing value '7' [ 155.344358][ T6948] zswap: compressor not available [ 155.562796][ T6964] FAULT_INJECTION: forcing a failure. [ 155.562796][ T6964] name failslab, interval 1, probability 0, space 0, times 0 [ 155.622852][ T6964] CPU: 0 UID: 0 PID: 6964 Comm: syz.3.233 Tainted: G L syzkaller #0 PREEMPT(full) [ 155.622878][ T6964] Tainted: [L]=SOFTLOCKUP [ 155.622883][ T6964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 155.622891][ T6964] Call Trace: [ 155.622897][ T6964] [ 155.622903][ T6964] dump_stack_lvl+0x16c/0x1f0 [ 155.622930][ T6964] should_fail_ex+0x512/0x640 [ 155.622947][ T6964] ? kmem_cache_alloc_noprof+0x62/0x770 [ 155.622967][ T6964] should_failslab+0xc2/0x120 [ 155.622990][ T6964] kmem_cache_alloc_noprof+0x83/0x770 [ 155.623006][ T6964] ? find_held_lock+0x2b/0x80 [ 155.623023][ T6964] ? seq_open+0x55/0x170 [ 155.623042][ T6964] ? seq_open+0x55/0x170 [ 155.623056][ T6964] seq_open+0x55/0x170 [ 155.623072][ T6964] dyn_event_open+0xdd/0x120 [ 155.623104][ T6964] do_dentry_open+0x748/0x1590 [ 155.623130][ T6964] ? __pfx_dyn_event_open+0x10/0x10 [ 155.623151][ T6964] vfs_open+0x82/0x3f0 [ 155.623169][ T6964] path_openat+0x2078/0x3140 [ 155.623200][ T6964] ? __pfx_path_openat+0x10/0x10 [ 155.623227][ T6964] do_filp_open+0x20b/0x470 [ 155.623252][ T6964] ? __pfx_do_filp_open+0x10/0x10 [ 155.623290][ T6964] ? alloc_fd+0x471/0x7d0 [ 155.623318][ T6964] do_sys_openat2+0x121/0x290 [ 155.623337][ T6964] ? __pfx_do_sys_openat2+0x10/0x10 [ 155.623360][ T6964] __x64_sys_openat+0x174/0x210 [ 155.623376][ T6964] ? __pfx___x64_sys_openat+0x10/0x10 [ 155.623403][ T6964] do_syscall_64+0xcd/0xf80 [ 155.623425][ T6964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.623440][ T6964] RIP: 0033:0x7f416b58f7c9 [ 155.623453][ T6964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.623467][ T6964] RSP: 002b:00007f416c4a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 155.623481][ T6964] RAX: ffffffffffffffda RBX: 00007f416b7e5fa0 RCX: 00007f416b58f7c9 [ 155.623491][ T6964] RDX: 0000000000000001 RSI: 0000200000000bc0 RDI: ffffffffffffff9c [ 155.623503][ T6964] RBP: 00007f416b613f91 R08: 0000000000000000 R09: 0000000000000000 [ 155.623511][ T6964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.623519][ T6964] R13: 00007f416b7e6038 R14: 00007f416b7e5fa0 R15: 00007ffc4f08c4a8 [ 155.623538][ T6964] [ 156.224766][ T6971] FAULT_INJECTION: forcing a failure. [ 156.224766][ T6971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.354146][ T6971] CPU: 0 UID: 0 PID: 6971 Comm: syz.1.232 Tainted: G L syzkaller #0 PREEMPT(full) [ 156.354182][ T6971] Tainted: [L]=SOFTLOCKUP [ 156.354187][ T6971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 156.354196][ T6971] Call Trace: [ 156.354202][ T6971] [ 156.354208][ T6971] dump_stack_lvl+0x16c/0x1f0 [ 156.354236][ T6971] should_fail_ex+0x512/0x640 [ 156.354255][ T6971] strncpy_from_user+0x3b/0x2e0 [ 156.354272][ T6971] getname_flags.part.0+0x8f/0x550 [ 156.354291][ T6971] getname_flags+0x93/0xf0 [ 156.354309][ T6971] user_path_at+0x24/0x60 [ 156.354329][ T6971] __x64_sys_mount+0x1fb/0x310 [ 156.354344][ T6971] ? __pfx___x64_sys_mount+0x10/0x10 [ 156.354363][ T6971] do_syscall_64+0xcd/0xf80 [ 156.354386][ T6971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.354400][ T6971] RIP: 0033:0x7ff5af38f7c9 [ 156.354413][ T6971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.354427][ T6971] RSP: 002b:00007ff5b0289038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 156.354441][ T6971] RAX: ffffffffffffffda RBX: 00007ff5af5e6090 RCX: 00007ff5af38f7c9 [ 156.354450][ T6971] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 0000200000000180 [ 156.354459][ T6971] RBP: 00007ff5af413f91 R08: 0000200000000280 R09: 0000000000000000 [ 156.354467][ T6971] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 156.354475][ T6971] R13: 00007ff5af5e6128 R14: 00007ff5af5e6090 R15: 00007ffc8c804928 [ 156.354494][ T6971] [ 157.053239][ T6986] FAULT_INJECTION: forcing a failure. [ 157.053239][ T6986] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 157.118374][ T6986] CPU: 0 UID: 0 PID: 6986 Comm: syz.0.236 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.118399][ T6986] Tainted: [L]=SOFTLOCKUP [ 157.118405][ T6986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 157.118414][ T6986] Call Trace: [ 157.118420][ T6986] [ 157.118426][ T6986] dump_stack_lvl+0x16c/0x1f0 [ 157.118453][ T6986] should_fail_ex+0x512/0x640 [ 157.118473][ T6986] should_fail_alloc_page+0xe7/0x130 [ 157.118497][ T6986] prepare_alloc_pages+0x401/0x670 [ 157.118519][ T6986] ? rcu_is_watching+0x12/0xc0 [ 157.118542][ T6986] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 157.118563][ T6986] ? trace_ignore_this_task+0xbc/0x100 [ 157.118591][ T6986] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 157.118609][ T6986] ? __mod_zone_page_state+0xcc/0x1a0 [ 157.118626][ T6986] ? lru_gen_add_folio+0x1a4/0xef0 [ 157.118646][ T6986] ? __lock_acquire+0x436/0x2890 [ 157.118661][ T6986] ? __lock_acquire+0x436/0x2890 [ 157.118674][ T6986] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 157.118696][ T6986] ? policy_nodemask+0xea/0x4e0 [ 157.118719][ T6986] alloc_pages_mpol+0x1fb/0x550 [ 157.118741][ T6986] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 157.118768][ T6986] folio_alloc_mpol_noprof+0x36/0x2f0 [ 157.118792][ T6986] vma_alloc_folio_noprof+0xed/0x1e0 [ 157.118807][ T6986] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 157.118829][ T6986] do_anonymous_page+0xc81/0x2190 [ 157.118858][ T6986] __handle_mm_fault+0x1ecf/0x2bb0 [ 157.118879][ T6986] ? __pfx___handle_mm_fault+0x10/0x10 [ 157.118896][ T6986] ? __pte_offset_map_lock+0x174/0x310 [ 157.118917][ T6986] ? find_held_lock+0x2b/0x80 [ 157.118942][ T6986] ? follow_page_pte+0x5cf/0x1390 [ 157.118968][ T6986] handle_mm_fault+0x3fe/0xad0 [ 157.118986][ T6986] __get_user_pages+0x54e/0x3590 [ 157.119015][ T6986] ? __pfx___get_user_pages+0x10/0x10 [ 157.119041][ T6986] populate_vma_page_range+0x267/0x3f0 [ 157.119064][ T6986] ? __pfx_populate_vma_page_range+0x10/0x10 [ 157.119086][ T6986] ? __pfx_find_vma_intersection+0x10/0x10 [ 157.119107][ T6986] ? do_mmap+0x69c/0x1210 [ 157.119129][ T6986] __mm_populate+0x1d8/0x380 [ 157.119152][ T6986] ? __pfx___mm_populate+0x10/0x10 [ 157.119175][ T6986] ? up_write+0x282/0x4e0 [ 157.119191][ T6986] vm_mmap_pgoff+0x37f/0x470 [ 157.119214][ T6986] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 157.119232][ T6986] ? __pfx___might_resched+0x10/0x10 [ 157.119252][ T6986] ? blkcg_maybe_throttle_current+0x650/0xf30 [ 157.119273][ T6986] ? __x64_sys_futex+0x1e0/0x4c0 [ 157.119288][ T6986] ? __x64_sys_futex+0x1e9/0x4c0 [ 157.119307][ T6986] ksys_mmap_pgoff+0x7d/0x5c0 [ 157.119326][ T6986] ? xfd_validate_state+0x61/0x180 [ 157.119342][ T6986] __x64_sys_mmap+0x125/0x190 [ 157.119359][ T6986] do_syscall_64+0xcd/0xf80 [ 157.119382][ T6986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.119397][ T6986] RIP: 0033:0x7ff8b998f7c9 [ 157.119411][ T6986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.119425][ T6986] RSP: 002b:00007ff8ba8e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 157.119440][ T6986] RAX: ffffffffffffffda RBX: 00007ff8b9be5fa0 RCX: 00007ff8b998f7c9 [ 157.119450][ T6986] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 157.119459][ T6986] RBP: 00007ff8b9a13f91 R08: 0000000000000002 R09: 0000000000008000 [ 157.119467][ T6986] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 157.119476][ T6986] R13: 00007ff8b9be6038 R14: 00007ff8b9be5fa0 R15: 00007fff1212e068 [ 157.119496][ T6986] [ 158.199084][ T6994] FAULT_INJECTION: forcing a failure. [ 158.199084][ T6994] name failslab, interval 1, probability 0, space 0, times 0 [ 158.233358][ T6994] CPU: 0 UID: 0 PID: 6994 Comm: syz.0.239 Tainted: G L syzkaller #0 PREEMPT(full) [ 158.233384][ T6994] Tainted: [L]=SOFTLOCKUP [ 158.233389][ T6994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 158.233398][ T6994] Call Trace: [ 158.233403][ T6994] [ 158.233410][ T6994] dump_stack_lvl+0x16c/0x1f0 [ 158.233437][ T6994] should_fail_ex+0x512/0x640 [ 158.233454][ T6994] ? kmem_cache_alloc_noprof+0x62/0x770 [ 158.233474][ T6994] should_failslab+0xc2/0x120 [ 158.233496][ T6994] kmem_cache_alloc_noprof+0x83/0x770 [ 158.233514][ T6994] ? ptlock_alloc+0x1f/0x70 [ 158.233533][ T6994] ? ptlock_alloc+0x1f/0x70 [ 158.233547][ T6994] ptlock_alloc+0x1f/0x70 [ 158.233562][ T6994] pte_alloc_one+0x84/0x3d0 [ 158.233582][ T6994] do_fault+0x8b8/0x1ad0 [ 158.233602][ T6994] ? __pfx_filemap_map_pages+0x10/0x10 [ 158.233620][ T6994] ? __pmd_alloc+0x6aa/0x9c0 [ 158.233643][ T6994] __handle_mm_fault+0x1919/0x2bb0 [ 158.233664][ T6994] ? __pfx___handle_mm_fault+0x10/0x10 [ 158.233689][ T6994] ? find_vma+0xbf/0x140 [ 158.233708][ T6994] ? __pfx_find_vma+0x10/0x10 [ 158.233735][ T6994] handle_mm_fault+0x3fe/0xad0 [ 158.233754][ T6994] do_user_addr_fault+0x7a6/0x1370 [ 158.233775][ T6994] ? rcu_is_watching+0x12/0xc0 [ 158.233798][ T6994] exc_page_fault+0x64/0xc0 [ 158.233820][ T6994] asm_exc_page_fault+0x26/0x30 [ 158.233834][ T6994] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 158.233851][ T6994] Code: c4 10 e9 44 81 04 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 0d 81 04 00 66 66 [ 158.233865][ T6994] RSP: 0018:ffffc90003677d60 EFLAGS: 00050202 [ 158.233878][ T6994] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000004 [ 158.233887][ T6994] RDX: fffff520006cefba RSI: 0000000000000000 RDI: ffffc90003677dd0 [ 158.233897][ T6994] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff520006cefba [ 158.233906][ T6994] R10: 0000000000000003 R11: ffff88802d3e29b0 R12: 0000000000000000 [ 158.233914][ T6994] R13: ffffc90003677dd0 R14: 0000000000000000 R15: 0000000000000000 [ 158.233933][ T6994] _copy_from_user+0x98/0xd0 [ 158.233949][ T6994] do_sock_getsockopt+0x3a1/0x410 [ 158.233972][ T6994] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 158.233993][ T6994] ? __fget_files+0x204/0x3c0 [ 158.234030][ T6994] __sys_getsockopt+0x123/0x1b0 [ 158.234056][ T6994] __x64_sys_getsockopt+0xbd/0x160 [ 158.234074][ T6994] ? do_syscall_64+0x91/0xf80 [ 158.234094][ T6994] ? lockdep_hardirqs_on+0x7c/0x110 [ 158.234115][ T6994] do_syscall_64+0xcd/0xf80 [ 158.234138][ T6994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.234152][ T6994] RIP: 0033:0x7ff8b998f7c9 [ 158.234164][ T6994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.234177][ T6994] RSP: 002b:00007ff8ba8e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 158.234190][ T6994] RAX: ffffffffffffffda RBX: 00007ff8b9be5fa0 RCX: 00007ff8b998f7c9 [ 158.234200][ T6994] RDX: 0000000000000001 RSI: 000000000000011c RDI: 0000000000000003 [ 158.234208][ T6994] RBP: 00007ff8b9a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 158.234216][ T6994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.234224][ T6994] R13: 00007ff8b9be6038 R14: 00007ff8b9be5fa0 R15: 00007fff1212e068 [ 158.234244][ T6994] [ 159.135032][ T6998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.240'. [ 159.531172][ T7003] FAULT_INJECTION: forcing a failure. [ 159.531172][ T7003] name failslab, interval 1, probability 0, space 0, times 0 [ 159.671175][ T7003] CPU: 0 UID: 0 PID: 7003 Comm: syz.2.241 Tainted: G L syzkaller #0 PREEMPT(full) [ 159.671202][ T7003] Tainted: [L]=SOFTLOCKUP [ 159.671207][ T7003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 159.671216][ T7003] Call Trace: [ 159.671221][ T7003] [ 159.671227][ T7003] dump_stack_lvl+0x16c/0x1f0 [ 159.671254][ T7003] should_fail_ex+0x512/0x640 [ 159.671272][ T7003] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 159.671295][ T7003] should_failslab+0xc2/0x120 [ 159.671318][ T7003] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 159.671339][ T7003] ? key_alloc+0xc4d/0x1330 [ 159.671356][ T7003] ? kmem_cache_alloc_noprof+0x2af/0x770 [ 159.671375][ T7003] ? kmemdup_noprof+0x29/0x60 [ 159.671392][ T7003] kmemdup_noprof+0x29/0x60 [ 159.671409][ T7003] key_alloc+0xc4d/0x1330 [ 159.671433][ T7003] ? __pfx_key_alloc+0x10/0x10 [ 159.671448][ T7003] ? __asan_memcpy+0x3c/0x60 [ 159.671471][ T7003] keyring_alloc+0x44/0xc0 [ 159.671492][ T7003] keyctl_get_persistent+0x750/0x8c0 [ 159.671513][ T7003] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 159.671535][ T7003] ? __x64_sys_futex+0x1e0/0x4c0 [ 159.671551][ T7003] ? __x64_sys_futex+0x1e9/0x4c0 [ 159.671571][ T7003] ? xfd_validate_state+0x61/0x180 [ 159.671584][ T7003] ? __pfx_ksys_write+0x10/0x10 [ 159.671607][ T7003] __do_sys_keyctl+0x1a9/0x590 [ 159.671623][ T7003] do_syscall_64+0xcd/0xf80 [ 159.671646][ T7003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.671661][ T7003] RIP: 0033:0x7f18ebb8f7c9 [ 159.671673][ T7003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.671698][ T7003] RSP: 002b:00007f18eca7f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 159.671713][ T7003] RAX: ffffffffffffffda RBX: 00007f18ebde6090 RCX: 00007f18ebb8f7c9 [ 159.671722][ T7003] RDX: 7fffffffffffffff RSI: 000000000000ee00 RDI: 0000000000000016 [ 159.671732][ T7003] RBP: 00007f18ebc13f91 R08: 000000000000000c R09: 0000000000000000 [ 159.671741][ T7003] R10: 00000000000099a7 R11: 0000000000000246 R12: 0000000000000000 [ 159.671749][ T7003] R13: 00007f18ebde6128 R14: 00007f18ebde6090 R15: 00007ffeab78c478 [ 159.671769][ T7003] [ 161.917578][ T7051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.251'. [ 161.967262][ T7050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.251'. [ 163.884180][ T7083] netlink: 172 bytes leftover after parsing attributes in process `syz.3.258'. [ 164.478012][ T7092] netlink: 342 bytes leftover after parsing attributes in process `syz.0.259'. [ 165.067515][ T7113] FAULT_INJECTION: forcing a failure. [ 165.067515][ T7113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.148834][ T7113] CPU: 0 UID: 0 PID: 7113 Comm: syz.2.265 Tainted: G L syzkaller #0 PREEMPT(full) [ 165.148861][ T7113] Tainted: [L]=SOFTLOCKUP [ 165.148866][ T7113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 165.148875][ T7113] Call Trace: [ 165.148880][ T7113] [ 165.148887][ T7113] dump_stack_lvl+0x16c/0x1f0 [ 165.148914][ T7113] should_fail_ex+0x512/0x640 [ 165.148933][ T7113] strncpy_from_user+0x3b/0x2e0 [ 165.148949][ T7113] getname_flags.part.0+0x8f/0x550 [ 165.148969][ T7113] getname_flags+0x93/0xf0 [ 165.148988][ T7113] user_path_at+0x24/0x60 [ 165.149008][ T7113] __x64_sys_mount+0x1fb/0x310 [ 165.149032][ T7113] ? __pfx___x64_sys_mount+0x10/0x10 [ 165.149055][ T7113] do_syscall_64+0xcd/0xf80 [ 165.149080][ T7113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.149096][ T7113] RIP: 0033:0x7f18ebb8f7c9 [ 165.149109][ T7113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.149122][ T7113] RSP: 002b:00007f18eca7f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 165.149136][ T7113] RAX: ffffffffffffffda RBX: 00007f18ebde6090 RCX: 00007f18ebb8f7c9 [ 165.149146][ T7113] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 0000200000000180 [ 165.149155][ T7113] RBP: 00007f18ebc13f91 R08: 0000200000000280 R09: 0000000000000000 [ 165.149163][ T7113] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 165.149171][ T7113] R13: 00007f18ebde6128 R14: 00007f18ebde6090 R15: 00007ffeab78c478 [ 165.149190][ T7113] [ 166.468492][ T7134] netlink: 206 bytes leftover after parsing attributes in process `syz.3.270'. [ 167.588330][ T7152] warning: `syz.2.274' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 167.748366][ T7157] netlink: 318 bytes leftover after parsing attributes in process `syz.3.276'. [ 168.510655][ T7168] netlink: 302 bytes leftover after parsing attributes in process `syz.2.279'. [ 169.928240][ T7185] netlink: 93 bytes leftover after parsing attributes in process `syz.2.281'. [ 169.973276][ T7178] netlink: 93 bytes leftover after parsing attributes in process `syz.2.281'. [ 170.143333][ T7137] [U] ^@ [ 170.362224][ T7178] random: crng reseeded on system resumption [ 171.425123][ T7198] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 172.168963][ T7219] FAULT_INJECTION: forcing a failure. [ 172.168963][ T7219] name failslab, interval 1, probability 0, space 0, times 0 [ 172.191119][ T7212] FAULT_INJECTION: forcing a failure. [ 172.191119][ T7212] name failslab, interval 1, probability 0, space 0, times 0 [ 172.236559][ T7219] CPU: 0 UID: 0 PID: 7219 Comm: syz.3.290 Tainted: G L syzkaller #0 PREEMPT(full) [ 172.236583][ T7219] Tainted: [L]=SOFTLOCKUP [ 172.236588][ T7219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 172.236596][ T7219] Call Trace: [ 172.236601][ T7219] [ 172.236606][ T7219] dump_stack_lvl+0x16c/0x1f0 [ 172.236632][ T7219] should_fail_ex+0x512/0x640 [ 172.236648][ T7219] ? kmem_cache_alloc_noprof+0x62/0x770 [ 172.236667][ T7219] should_failslab+0xc2/0x120 [ 172.236688][ T7219] kmem_cache_alloc_noprof+0x83/0x770 [ 172.236704][ T7219] ? __lock_acquire+0x436/0x2890 [ 172.236717][ T7219] ? sk_prot_alloc+0x60/0x2a0 [ 172.236741][ T7219] ? sk_prot_alloc+0x60/0x2a0 [ 172.236759][ T7219] sk_prot_alloc+0x60/0x2a0 [ 172.236781][ T7219] sk_alloc+0x36/0xe30 [ 172.236797][ T7219] __vsock_create.constprop.0+0x3c/0xbb0 [ 172.236815][ T7219] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 172.236838][ T7219] vsock_create+0x139/0x500 [ 172.236858][ T7219] __sock_create+0x339/0x8a0 [ 172.236874][ T7219] __sys_socket+0x14d/0x260 [ 172.236887][ T7219] ? __pfx___sys_socket+0x10/0x10 [ 172.236900][ T7219] ? xfd_validate_state+0x61/0x180 [ 172.236913][ T7219] ? __pfx_ksys_write+0x10/0x10 [ 172.236936][ T7219] __x64_sys_socket+0x72/0xb0 [ 172.236949][ T7219] ? lockdep_hardirqs_on+0x7c/0x110 [ 172.236969][ T7219] do_syscall_64+0xcd/0xf80 [ 172.236991][ T7219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.237005][ T7219] RIP: 0033:0x7f416b58f7c9 [ 172.237017][ T7219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.237031][ T7219] RSP: 002b:00007f416c4a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 172.237044][ T7219] RAX: ffffffffffffffda RBX: 00007f416b7e5fa0 RCX: 00007f416b58f7c9 [ 172.237053][ T7219] RDX: 0000000000000000 RSI: 0000000000000805 RDI: 0000000000000028 [ 172.237065][ T7219] RBP: 00007f416b613f91 R08: 0000000000000000 R09: 0000000000000000 [ 172.237073][ T7219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.237081][ T7219] R13: 00007f416b7e6038 R14: 00007f416b7e5fa0 R15: 00007ffc4f08c4a8 [ 172.237100][ T7219] [ 172.463708][ T7212] CPU: 0 UID: 0 PID: 7212 Comm: syz.0.289 Tainted: G L syzkaller #0 PREEMPT(full) [ 172.463735][ T7212] Tainted: [L]=SOFTLOCKUP [ 172.463741][ T7212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 172.463749][ T7212] Call Trace: [ 172.463755][ T7212] [ 172.463760][ T7212] dump_stack_lvl+0x16c/0x1f0 [ 172.463787][ T7212] should_fail_ex+0x512/0x640 [ 172.463804][ T7212] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 172.463827][ T7212] should_failslab+0xc2/0x120 [ 172.463850][ T7212] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 172.463872][ T7212] ? __devinet_sysctl_register+0xbc/0x360 [ 172.463886][ T7212] ? nlmsg_notify+0x11e/0x220 [ 172.463908][ T7212] ? kmemdup_noprof+0x29/0x60 [ 172.463924][ T7212] kmemdup_noprof+0x29/0x60 [ 172.463941][ T7212] __devinet_sysctl_register+0xbc/0x360 [ 172.463958][ T7212] ? rcu_is_watching+0x12/0xc0 [ 172.463978][ T7212] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 172.463991][ T7212] ? __kmalloc_node_track_caller_noprof+0x370/0x930 [ 172.464015][ T7212] ? __asan_memcpy+0x3c/0x60 [ 172.464033][ T7212] devinet_init_net+0x347/0x910 [ 172.464049][ T7212] ? __pfx_devinet_init_net+0x10/0x10 [ 172.464062][ T7212] ops_init+0x1e2/0x5f0 [ 172.464084][ T7212] setup_net+0x11d/0x3a0 [ 172.464103][ T7212] ? __pfx_setup_net+0x10/0x10 [ 172.464120][ T7212] ? lockdep_init_map_type+0x5c/0x270 [ 172.464135][ T7212] ? mutex_init_lockep+0x110/0x150 [ 172.464152][ T7212] copy_net_ns+0x351/0x7c0 [ 172.464174][ T7212] create_new_namespaces+0x3ea/0xab0 [ 172.464199][ T7212] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 172.464220][ T7212] ksys_unshare+0x45b/0xa40 [ 172.464242][ T7212] ? __pfx_ksys_unshare+0x10/0x10 [ 172.464264][ T7212] ? xfd_validate_state+0x61/0x180 [ 172.464283][ T7212] __x64_sys_unshare+0x31/0x40 [ 172.464296][ T7212] do_syscall_64+0xcd/0xf80 [ 172.464318][ T7212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.464333][ T7212] RIP: 0033:0x7ff8b998f7c9 [ 172.464356][ T7212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.464371][ T7212] RSP: 002b:00007ff8ba8e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 172.464386][ T7212] RAX: ffffffffffffffda RBX: 00007ff8b9be5fa0 RCX: 00007ff8b998f7c9 [ 172.464395][ T7212] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 172.464404][ T7212] RBP: 00007ff8b9a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 172.464413][ T7212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.464421][ T7212] R13: 00007ff8b9be6038 R14: 00007ff8b9be5fa0 R15: 00007fff1212e068 [ 172.464441][ T7212] [ 173.243598][ T7231] netlink: 104 bytes leftover after parsing attributes in process `syz.3.292'. [ 173.742344][ T7236] FAULT_INJECTION: forcing a failure. [ 173.742344][ T7236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.967390][ T7236] CPU: 0 UID: 0 PID: 7236 Comm: syz.2.293 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.967416][ T7236] Tainted: [L]=SOFTLOCKUP [ 173.967422][ T7236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 173.967430][ T7236] Call Trace: [ 173.967436][ T7236] [ 173.967442][ T7236] dump_stack_lvl+0x16c/0x1f0 [ 173.967468][ T7236] should_fail_ex+0x512/0x640 [ 173.967487][ T7236] _copy_from_user+0x2e/0xd0 [ 173.967503][ T7236] snd_rawmidi_kernel_write1+0x50a/0x8a0 [ 173.967527][ T7236] snd_rawmidi_write+0x26e/0xc10 [ 173.967547][ T7236] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 173.967563][ T7236] ? common_file_perm+0x1b1/0x500 [ 173.967580][ T7236] ? __pfx_default_wake_function+0x10/0x10 [ 173.967601][ T7236] ? bpf_lsm_file_permission+0x9/0x10 [ 173.967618][ T7236] ? security_file_permission+0x71/0x210 [ 173.967636][ T7236] ? rw_verify_area+0xcf/0x6c0 [ 173.967655][ T7236] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 173.967670][ T7236] vfs_write+0x2a0/0x11d0 [ 173.967693][ T7236] ? __pfx_vfs_write+0x10/0x10 [ 173.967711][ T7236] ? find_held_lock+0x2b/0x80 [ 173.967730][ T7236] ? __fget_files+0x204/0x3c0 [ 173.967752][ T7236] ? __fget_files+0x20e/0x3c0 [ 173.967777][ T7236] ksys_write+0x1f8/0x250 [ 173.967796][ T7236] ? __pfx_ksys_write+0x10/0x10 [ 173.967821][ T7236] do_syscall_64+0xcd/0xf80 [ 173.967843][ T7236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.967857][ T7236] RIP: 0033:0x7f18ebb8f7c9 [ 173.967870][ T7236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.967884][ T7236] RSP: 002b:00007f18ecaa0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 173.967898][ T7236] RAX: ffffffffffffffda RBX: 00007f18ebde5fa0 RCX: 00007f18ebb8f7c9 [ 173.967907][ T7236] RDX: 000000100000a3d9 RSI: 0000200000000400 RDI: 0000000000000008 [ 173.967916][ T7236] RBP: 00007f18ebc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 173.967924][ T7236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.967932][ T7236] R13: 00007f18ebde6038 R14: 00007f18ebde5fa0 R15: 00007ffeab78c478 [ 173.967951][ T7236] [ 174.198901][ T7242] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input10 [ 174.236808][ T7244] random: crng reseeded on system resumption [ 174.324089][ T7246] Invalid input. Must be >= 4608 [ 174.330174][ T7247] Invalid input. Must be >= 4608 [ 174.338526][ T7246] netlink: 'syz.2.296': attribute type 1 has an invalid length. [ 174.621789][ T7251] device-mapper: ioctl: Unable to rename non-existent device,  to [ 174.897180][ T7255] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.298: iget: checksum invalid [ 174.970200][ T7255] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 175.065535][ T7255] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.298: iget: checksum invalid [ 175.092929][ T7266] bond0: option packets_per_slave: invalid value ( Xnp) [ 175.115558][ T7258] binder: BINDER_SET_CONTEXT_MGR already set [ 175.125603][ T7266] bond0: option packets_per_slave: allowed values 0 - 65535 [ 175.137468][ T7258] binder: 7256:7258 ioctl 4018620d 9 returned -16 [ 175.155480][ T7255] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 175.217232][ T7255] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.298: iget: checksum invalid [ 175.278091][ T7255] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 175.328672][ T7255] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.298: iget: checksum invalid [ 175.359262][ T7255] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 175.411162][ T7255] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 175.477711][ T7255] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 175.566585][ T7277] phram: illegal start address [ 175.609376][ T7282] FAULT_INJECTION: forcing a failure. [ 175.609376][ T7282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.754290][ T7285] netlink: 'syz.1.304': attribute type 11 has an invalid length. [ 175.795731][ T7282] CPU: 0 UID: 0 PID: 7282 Comm: syz.3.303 Tainted: G L syzkaller #0 PREEMPT(full) [ 175.795773][ T7282] Tainted: [L]=SOFTLOCKUP [ 175.795778][ T7282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 175.795787][ T7282] Call Trace: [ 175.795793][ T7282] [ 175.795798][ T7282] dump_stack_lvl+0x16c/0x1f0 [ 175.795826][ T7282] should_fail_ex+0x512/0x640 [ 175.795846][ T7282] strncpy_from_user+0x3b/0x2e0 [ 175.795863][ T7282] getname_flags.part.0+0x8f/0x550 [ 175.795882][ T7282] getname_flags+0x93/0xf0 [ 175.795901][ T7282] user_path_at+0x24/0x60 [ 175.795921][ T7282] __x64_sys_mount+0x1fb/0x310 [ 175.795935][ T7282] ? __pfx___x64_sys_mount+0x10/0x10 [ 175.795962][ T7282] do_syscall_64+0xcd/0xf80 [ 175.795986][ T7282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.796002][ T7282] RIP: 0033:0x7f416b58f7c9 [ 175.796014][ T7282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.796028][ T7282] RSP: 002b:00007f416c485038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 175.796042][ T7282] RAX: ffffffffffffffda RBX: 00007f416b7e6090 RCX: 00007f416b58f7c9 [ 175.796051][ T7282] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 0000200000000180 [ 175.796060][ T7282] RBP: 00007f416b613f91 R08: 0000200000000280 R09: 0000000000000000 [ 175.796069][ T7282] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 175.796077][ T7282] R13: 00007f416b7e6128 R14: 00007f416b7e6090 R15: 00007ffc4f08c4a8 [ 175.796095][ T7282] [ 176.099811][ T7289] netlink: 'syz.1.304': attribute type 11 has an invalid length. [ 176.107746][ T7289] netlink: 'syz.1.304': attribute type 11 has an invalid length. [ 176.142554][ T7285] netlink: 'syz.1.304': attribute type 11 has an invalid length. [ 176.593198][ T7295] netlink: 25 bytes leftover after parsing attributes in process `syz.1.306'. [ 177.019703][ T7305] can: request_module (can-proto-4) failed. [ 177.327536][ T30] audit: type=1800 audit(1766859130.357:4): pid=7316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.312" name="dbroot" dev="configfs" ino=16885 res=0 errno=0 [ 177.368035][ T7318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.310'. [ 177.631099][ T7313] input: jJǸ-9%vJ86 as /devices/virtual/input/input11 [ 177.987023][ T7328] vhci_hcd: not connected 4 [ 178.227366][ T7328] vhci_hcd: not connected 4 [ 178.253644][ T7328] vhci_hcd: not connected 4 [ 179.586282][ T7352] FAULT_INJECTION: forcing a failure. [ 179.586282][ T7352] name failslab, interval 1, probability 0, space 0, times 0 [ 179.748771][ T7352] CPU: 0 UID: 0 PID: 7352 Comm: syz.1.318 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.748797][ T7352] Tainted: [L]=SOFTLOCKUP [ 179.748803][ T7352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 179.748813][ T7352] Call Trace: [ 179.748818][ T7352] [ 179.748824][ T7352] dump_stack_lvl+0x16c/0x1f0 [ 179.748851][ T7352] should_fail_ex+0x512/0x640 [ 179.748868][ T7352] ? kmem_cache_alloc_noprof+0x62/0x770 [ 179.748888][ T7352] should_failslab+0xc2/0x120 [ 179.748910][ T7352] kmem_cache_alloc_noprof+0x83/0x770 [ 179.748926][ T7352] ? find_held_lock+0x2b/0x80 [ 179.748943][ T7352] ? getname_flags.part.0+0x4c/0x550 [ 179.748962][ T7352] ? getname_flags.part.0+0x4c/0x550 [ 179.748977][ T7352] getname_flags.part.0+0x4c/0x550 [ 179.748995][ T7352] getname_flags+0x93/0xf0 [ 179.749013][ T7352] user_path_at+0x24/0x60 [ 179.749032][ T7352] __x64_sys_mount+0x1fb/0x310 [ 179.749047][ T7352] ? __pfx___x64_sys_mount+0x10/0x10 [ 179.749067][ T7352] do_syscall_64+0xcd/0xf80 [ 179.749089][ T7352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.749104][ T7352] RIP: 0033:0x7ff5af38f7c9 [ 179.749125][ T7352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.749139][ T7352] RSP: 002b:00007ff5b0289038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 179.749154][ T7352] RAX: ffffffffffffffda RBX: 00007ff5af5e6090 RCX: 00007ff5af38f7c9 [ 179.749163][ T7352] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 0000200000000180 [ 179.749172][ T7352] RBP: 00007ff5af413f91 R08: 0000200000000280 R09: 0000000000000000 [ 179.749181][ T7352] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 179.749190][ T7352] R13: 00007ff5af5e6128 R14: 00007ff5af5e6090 R15: 00007ffc8c804928 [ 179.749210][ T7352] [ 181.624468][ T7399] FAULT_INJECTION: forcing a failure. [ 181.624468][ T7399] name failslab, interval 1, probability 0, space 0, times 0 [ 181.782688][ T7399] CPU: 0 UID: 0 PID: 7399 Comm: syz.3.331 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.782715][ T7399] Tainted: [L]=SOFTLOCKUP [ 181.782721][ T7399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 181.782730][ T7399] Call Trace: [ 181.782736][ T7399] [ 181.782744][ T7399] dump_stack_lvl+0x16c/0x1f0 [ 181.782772][ T7399] should_fail_ex+0x512/0x640 [ 181.782789][ T7399] ? kmem_cache_alloc_noprof+0x62/0x770 [ 181.782809][ T7399] should_failslab+0xc2/0x120 [ 181.782832][ T7399] kmem_cache_alloc_noprof+0x83/0x770 [ 181.782849][ T7399] ? find_held_lock+0x2b/0x80 [ 181.782867][ T7399] ? getname_flags.part.0+0x4c/0x550 [ 181.782887][ T7399] ? getname_flags.part.0+0x4c/0x550 [ 181.782902][ T7399] getname_flags.part.0+0x4c/0x550 [ 181.782920][ T7399] getname_flags+0x93/0xf0 [ 181.782940][ T7399] user_path_at+0x24/0x60 [ 181.782959][ T7399] __x64_sys_mount+0x1fb/0x310 [ 181.782974][ T7399] ? __pfx___x64_sys_mount+0x10/0x10 [ 181.782994][ T7399] do_syscall_64+0xcd/0xf80 [ 181.783016][ T7399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.783031][ T7399] RIP: 0033:0x7f416b58f7c9 [ 181.783044][ T7399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.783058][ T7399] RSP: 002b:00007f416c485038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 181.783073][ T7399] RAX: ffffffffffffffda RBX: 00007f416b7e6090 RCX: 00007f416b58f7c9 [ 181.783083][ T7399] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 0000200000000180 [ 181.783092][ T7399] RBP: 00007f416b613f91 R08: 0000200000000280 R09: 0000000000000000 [ 181.783101][ T7399] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 181.783109][ T7399] R13: 00007f416b7e6128 R14: 00007f416b7e6090 R15: 00007ffc4f08c4a8 [ 181.783128][ T7399] [ 182.709276][ T7416] random: crng reseeded on system resumption [ 182.728606][ T7416] FAULT_INJECTION: forcing a failure. [ 182.728606][ T7416] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 182.839631][ T7416] CPU: 0 UID: 0 PID: 7416 Comm: syz.1.336 Tainted: G L syzkaller #0 PREEMPT(full) [ 182.839659][ T7416] Tainted: [L]=SOFTLOCKUP [ 182.839664][ T7416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 182.839673][ T7416] Call Trace: [ 182.839679][ T7416] [ 182.839685][ T7416] dump_stack_lvl+0x16c/0x1f0 [ 182.839714][ T7416] should_fail_ex+0x512/0x640 [ 182.839734][ T7416] should_fail_alloc_page+0xe7/0x130 [ 182.839759][ T7416] prepare_alloc_pages+0x401/0x670 [ 182.839785][ T7416] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 182.839809][ T7416] ? stack_trace_save+0x8e/0xc0 [ 182.839831][ T7416] ? __pfx_stack_trace_save+0x10/0x10 [ 182.839855][ T7416] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 182.839875][ T7416] ? kasan_save_stack+0x42/0x60 [ 182.839893][ T7416] ? kasan_save_stack+0x33/0x60 [ 182.839914][ T7416] ? do_dentry_open+0x748/0x1590 [ 182.839934][ T7416] ? vfs_open+0x82/0x3f0 [ 182.839947][ T7416] ? path_openat+0x2078/0x3140 [ 182.839966][ T7416] ? do_filp_open+0x20b/0x470 [ 182.839986][ T7416] ? do_sys_openat2+0x121/0x290 [ 182.840000][ T7416] ? __x64_sys_openat+0x174/0x210 [ 182.840015][ T7416] ? do_syscall_64+0xcd/0xf80 [ 182.840034][ T7416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.840050][ T7416] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 182.840071][ T7416] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 182.840093][ T7416] ? policy_nodemask+0xea/0x4e0 [ 182.840115][ T7416] alloc_pages_mpol+0x1fb/0x550 [ 182.840142][ T7416] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 182.840168][ T7416] alloc_pages_noprof+0x131/0x390 [ 182.840191][ T7416] get_zeroed_page_noprof+0x18/0xb0 [ 182.840212][ T7416] get_image_page+0x18/0x190 [ 182.840232][ T7416] alloc_rtree_node+0x3c/0xb0 [ 182.840258][ T7416] memory_bm_create+0x519/0x810 [ 182.840286][ T7416] create_basic_memory_bitmaps+0x10b/0x370 [ 182.840310][ T7416] snapshot_open+0x235/0x2b0 [ 182.840333][ T7416] ? __pfx_snapshot_open+0x10/0x10 [ 182.840356][ T7416] misc_open+0x26d/0x450 [ 182.840373][ T7416] ? __pfx_misc_open+0x10/0x10 [ 182.840388][ T7416] chrdev_open+0x234/0x6a0 [ 182.840409][ T7416] ? __pfx_apparmor_file_open+0x10/0x10 [ 182.840424][ T7416] ? __pfx_chrdev_open+0x10/0x10 [ 182.840446][ T7416] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 182.840472][ T7416] do_dentry_open+0x748/0x1590 [ 182.840492][ T7416] ? __pfx_chrdev_open+0x10/0x10 [ 182.840518][ T7416] vfs_open+0x82/0x3f0 [ 182.840536][ T7416] path_openat+0x2078/0x3140 [ 182.840563][ T7416] ? __pfx_path_openat+0x10/0x10 [ 182.840591][ T7416] do_filp_open+0x20b/0x470 [ 182.840613][ T7416] ? __pfx_do_filp_open+0x10/0x10 [ 182.840647][ T7416] ? alloc_fd+0x471/0x7d0 [ 182.840673][ T7416] do_sys_openat2+0x121/0x290 [ 182.840688][ T7416] ? __pfx_do_sys_openat2+0x10/0x10 [ 182.840705][ T7416] ? find_held_lock+0x2b/0x80 [ 182.840728][ T7416] __x64_sys_openat+0x174/0x210 [ 182.840744][ T7416] ? __pfx___x64_sys_openat+0x10/0x10 [ 182.840768][ T7416] do_syscall_64+0xcd/0xf80 [ 182.840791][ T7416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.840806][ T7416] RIP: 0033:0x7ff5af38f7c9 [ 182.840819][ T7416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.840833][ T7416] RSP: 002b:00007ff5b02aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 182.840848][ T7416] RAX: ffffffffffffffda RBX: 00007ff5af5e5fa0 RCX: 00007ff5af38f7c9 [ 182.840859][ T7416] RDX: 0000000000008001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 182.840869][ T7416] RBP: 00007ff5af413f91 R08: 0000000000000000 R09: 0000000000000000 [ 182.840879][ T7416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.840888][ T7416] R13: 00007ff5af5e6038 R14: 00007ff5af5e5fa0 R15: 00007ffc8c804928 [ 182.840908][ T7416] [ 183.579950][ T7433] __vm_enough_memory: pid: 7433, comm: syz.0.340, bytes: 8589938688 not enough memory for the allocation [ 186.937425][ T7511] __vm_enough_memory: pid: 7511, comm: syz.2.353, bytes: 4398046511104 not enough memory for the allocation [ 187.072399][ T7528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.358'. [ 187.624138][ T7537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.361'. [ 190.110328][ T7560] FAULT_INJECTION: forcing a failure. [ 190.110328][ T7560] name failslab, interval 1, probability 0, space 0, times 0 [ 190.195199][ T7560] CPU: 0 UID: 0 PID: 7560 Comm: syz.3.366 Tainted: G L syzkaller #0 PREEMPT(full) [ 190.195225][ T7560] Tainted: [L]=SOFTLOCKUP [ 190.195231][ T7560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 190.195240][ T7560] Call Trace: [ 190.195245][ T7560] [ 190.195252][ T7560] dump_stack_lvl+0x16c/0x1f0 [ 190.195278][ T7560] should_fail_ex+0x512/0x640 [ 190.195302][ T7560] ? __kmalloc_cache_noprof+0x5f/0x800 [ 190.195321][ T7560] should_failslab+0xc2/0x120 [ 190.195345][ T7560] __kmalloc_cache_noprof+0x80/0x800 [ 190.195361][ T7560] ? lockdep_init_map_type+0x5c/0x270 [ 190.195380][ T7560] ? alloc_netdev_mqs+0xe67/0x1550 [ 190.195403][ T7560] ? alloc_netdev_mqs+0xe67/0x1550 [ 190.195423][ T7560] alloc_netdev_mqs+0xe67/0x1550 [ 190.195448][ T7560] internal_dev_create+0x8a/0x520 [ 190.195474][ T7560] ovs_vport_add+0x147/0x4d0 [ 190.195505][ T7560] new_vport+0x16/0x1d0 [ 190.195522][ T7560] ovs_dp_cmd_new+0x6ba/0xe60 [ 190.195547][ T7560] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 190.195570][ T7560] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 190.195595][ T7560] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 190.195624][ T7560] genl_family_rcv_msg_doit+0x209/0x2f0 [ 190.195649][ T7560] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 190.195676][ T7560] ? genl_get_cmd+0x194/0x580 [ 190.195701][ T7560] ? bpf_lsm_capable+0x9/0x10 [ 190.195719][ T7560] ? security_capable+0x7e/0x260 [ 190.195744][ T7560] ? ns_capable+0xd7/0x110 [ 190.195763][ T7560] genl_rcv_msg+0x55c/0x800 [ 190.195779][ T7560] ? __pfx_genl_rcv_msg+0x10/0x10 [ 190.195793][ T7560] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 190.195817][ T7560] netlink_rcv_skb+0x158/0x420 [ 190.195838][ T7560] ? __pfx_genl_rcv_msg+0x10/0x10 [ 190.195853][ T7560] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 190.195881][ T7560] ? netlink_deliver_tap+0x1ae/0xd30 [ 190.195903][ T7560] genl_rcv+0x28/0x40 [ 190.195923][ T7560] netlink_unicast+0x5aa/0x870 [ 190.195945][ T7560] ? __pfx_netlink_unicast+0x10/0x10 [ 190.195972][ T7560] netlink_sendmsg+0x8c8/0xdd0 [ 190.195996][ T7560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.196018][ T7560] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 190.196045][ T7560] ____sys_sendmsg+0xa5d/0xc30 [ 190.196068][ T7560] ? copy_msghdr_from_user+0x10a/0x160 [ 190.196085][ T7560] ? __pfx_____sys_sendmsg+0x10/0x10 [ 190.196106][ T7560] ? preempt_schedule_thunk+0x16/0x30 [ 190.196124][ T7560] ? try_to_wake_up+0xa67/0x1860 [ 190.196145][ T7560] ___sys_sendmsg+0x134/0x1d0 [ 190.196165][ T7560] ? __pfx____sys_sendmsg+0x10/0x10 [ 190.196183][ T7560] ? futex_private_hash_put+0x160/0x1b0 [ 190.196220][ T7560] __sys_sendmsg+0x16d/0x220 [ 190.196238][ T7560] ? __pfx___sys_sendmsg+0x10/0x10 [ 190.196256][ T7560] ? __x64_sys_futex+0x1e0/0x4c0 [ 190.196277][ T7560] ? syscall_user_dispatch+0x78/0x140 [ 190.196301][ T7560] do_syscall_64+0xcd/0xf80 [ 190.196323][ T7560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.196339][ T7560] RIP: 0033:0x7f416b58f7c9 [ 190.196353][ T7560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.196367][ T7560] RSP: 002b:00007f416c4a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.196381][ T7560] RAX: ffffffffffffffda RBX: 00007f416b7e5fa0 RCX: 00007f416b58f7c9 [ 190.196392][ T7560] RDX: 0000000002000000 RSI: 0000200000000080 RDI: 0000000000000009 [ 190.196402][ T7560] RBP: 00007f416b613f91 R08: 0000000000000000 R09: 0000000000000000 [ 190.196411][ T7560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.196420][ T7560] R13: 00007f416b7e6038 R14: 00007f416b7e5fa0 R15: 00007ffc4f08c4a8 [ 190.196440][ T7560] [ 190.748449][ T7568] netlink: 28 bytes leftover after parsing attributes in process `syz.2.370'. [ 190.961192][ T7577] hub 8-0:1.0: USB hub found [ 191.006351][ T7577] hub 8-0:1.0: 1 port detected [ 191.179001][ T7573] kexec: Could not allocate control_code_buffer [ 193.362248][ T7632] openvswitch: netlink: Flow key attr not present in new flow. [ 193.845106][ T7643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.385'. [ 194.036928][ T7634] netlink: 504 bytes leftover after parsing attributes in process `syz.1.382'. [ 194.045147][ T7634] netlink: 350 bytes leftover after parsing attributes in process `syz.1.382'. [ 194.071065][ T7634] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.382: iget: checksum invalid [ 194.071358][ T7634] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 194.071497][ T7634] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.382: iget: checksum invalid [ 194.071734][ T7634] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 194.071846][ T7634] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.382: iget: checksum invalid [ 194.076321][ T7634] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 194.076474][ T7634] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.382: iget: checksum invalid [ 194.076703][ T7634] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 194.076729][ T7634] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 194.076744][ T7634] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 194.263249][ T7648] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 194.735307][ T7654] netlink: 338 bytes leftover after parsing attributes in process `syz.1.388'. [ 196.204694][ T7685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.394'. [ 196.429447][ T7690] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 196.688868][ T7695] syz.0.396 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 197.113230][ T5834] Bluetooth: hci1: unexpected event 0x1d length: 6 > 5 [ 198.379935][ T7726] netlink: 12 bytes leftover after parsing attributes in process `syz.1.403'. [ 198.496570][ T7723] mtrr: base(0x1000) is not aligned on a size(0x0000) boundary [ 198.829770][ T7730] FAULT_INJECTION: forcing a failure. [ 198.829770][ T7730] name failslab, interval 1, probability 0, space 0, times 0 [ 198.927472][ T7730] CPU: 0 UID: 0 PID: 7730 Comm: syz.2.405 Tainted: G L syzkaller #0 PREEMPT(full) [ 198.927500][ T7730] Tainted: [L]=SOFTLOCKUP [ 198.927506][ T7730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 198.927525][ T7730] Call Trace: [ 198.927530][ T7730] [ 198.927536][ T7730] dump_stack_lvl+0x16c/0x1f0 [ 198.927604][ T7730] should_fail_ex+0x512/0x640 [ 198.927621][ T7730] ? __kmalloc_cache_noprof+0x5f/0x800 [ 198.927641][ T7730] should_failslab+0xc2/0x120 [ 198.927664][ T7730] __kmalloc_cache_noprof+0x80/0x800 [ 198.927681][ T7730] ? rcu_is_watching+0x12/0xc0 [ 198.927701][ T7730] ? __request_module+0x2ad/0x660 [ 198.927718][ T7730] ? lockdep_hardirqs_on+0x7c/0x110 [ 198.927741][ T7730] ? __request_module+0x2ad/0x660 [ 198.927758][ T7730] __request_module+0x2ad/0x660 [ 198.927777][ T7730] ? __pfx___request_module+0x10/0x10 [ 198.927803][ T7730] ? find_held_lock+0x2b/0x80 [ 198.927827][ T7730] inet_create+0xa97/0x1040 [ 198.927844][ T7730] ? inet_create+0x93/0x1040 [ 198.927863][ T7730] __sock_create+0x339/0x8a0 [ 198.927880][ T7730] __sys_socket+0x14d/0x260 [ 198.927893][ T7730] ? fput+0x70/0xf0 [ 198.927907][ T7730] ? __pfx___sys_socket+0x10/0x10 [ 198.927921][ T7730] ? syscall_user_dispatch+0x78/0x140 [ 198.927942][ T7730] __x64_sys_socket+0x72/0xb0 [ 198.927957][ T7730] do_syscall_64+0xcd/0xf80 [ 198.927982][ T7730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.927998][ T7730] RIP: 0033:0x7f18ebb8f7c9 [ 198.928011][ T7730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.928025][ T7730] RSP: 002b:00007f18ecaa0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 198.928040][ T7730] RAX: ffffffffffffffda RBX: 00007f18ebde5fa0 RCX: 00007f18ebb8f7c9 [ 198.928050][ T7730] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000002 [ 198.928058][ T7730] RBP: 00007f18ebc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 198.928067][ T7730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.928075][ T7730] R13: 00007f18ebde6038 R14: 00007f18ebde5fa0 R15: 00007ffeab78c478 [ 198.928095][ T7730] [ 199.590452][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.612712][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.690485][ T7745] netlink: 'syz.3.408': attribute type 1 has an invalid length. [ 199.735051][ T7745] netlink: 330 bytes leftover after parsing attributes in process `syz.3.408'. [ 199.828635][ T7752] vivid-015: ================= START STATUS ================= [ 199.866539][ T7752] vivid-015: Radio HW Seek Mode: Bounded [ 199.921010][ T7752] vivid-015: Radio Programmable HW Seek: false [ 199.983888][ T7752] vivid-015: RDS Rx I/O Mode: Block I/O [ 200.013512][ T7752] vivid-015: Generate RBDS Instead of RDS: false [ 200.037268][ T7752] vivid-015: RDS Reception: true [ 200.058408][ T7752] vivid-015: RDS Program Type: 0 inactive [ 200.084698][ T7752] vivid-015: RDS PS Name: inactive [ 200.099155][ T7752] vivid-015: RDS Radio Text: inactive [ 200.117001][ T7752] vivid-015: RDS Traffic Announcement: false inactive [ 200.138170][ T7752] vivid-015: RDS Traffic Program: false inactive [ 200.160262][ T7752] vivid-015: RDS Music: false inactive [ 200.182359][ T7752] vivid-015: ================== END STATUS ================== [ 200.385347][ T7750] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 200.394113][ T7750] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 200.439823][ T7750] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 200.469334][ T7750] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 200.887583][ T7762] FAULT_INJECTION: forcing a failure. [ 200.887583][ T7762] name failslab, interval 1, probability 0, space 0, times 0 [ 200.955446][ T7762] CPU: 0 UID: 0 PID: 7762 Comm: syz.2.412 Tainted: G L syzkaller #0 PREEMPT(full) [ 200.955475][ T7762] Tainted: [L]=SOFTLOCKUP [ 200.955480][ T7762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 200.955489][ T7762] Call Trace: [ 200.955494][ T7762] [ 200.955500][ T7762] dump_stack_lvl+0x16c/0x1f0 [ 200.955527][ T7762] should_fail_ex+0x512/0x640 [ 200.955544][ T7762] ? __kmalloc_noprof+0xca/0x910 [ 200.955562][ T7762] should_failslab+0xc2/0x120 [ 200.955585][ T7762] __kmalloc_noprof+0xeb/0x910 [ 200.955599][ T7762] ? fib_rules_register+0x403/0x500 [ 200.955619][ T7762] ? fib_default_rule_add+0x4f/0x420 [ 200.955642][ T7762] ? fib_default_rule_add+0x4f/0x420 [ 200.955664][ T7762] fib_default_rule_add+0x4f/0x420 [ 200.955685][ T7762] fib4_rules_init+0xa6/0x1c0 [ 200.955703][ T7762] fib_net_init+0x1dc/0x3f0 [ 200.955716][ T7762] ? __pfx___register_sysctl_table+0x10/0x10 [ 200.955736][ T7762] ? __pfx_fib_net_init+0x10/0x10 [ 200.955758][ T7762] ? lockdep_init_map_type+0x5c/0x270 [ 200.955774][ T7762] ? do_init_timer+0xc9/0x110 [ 200.955798][ T7762] ? devinet_init_net+0x5c2/0x910 [ 200.955815][ T7762] ? __pfx_fib_net_init+0x10/0x10 [ 200.955836][ T7762] ops_init+0x1e2/0x5f0 [ 200.955857][ T7762] setup_net+0x11d/0x3a0 [ 200.955876][ T7762] ? __pfx_setup_net+0x10/0x10 [ 200.955894][ T7762] ? lockdep_init_map_type+0x5c/0x270 [ 200.955908][ T7762] ? mutex_init_lockep+0x110/0x150 [ 200.955926][ T7762] copy_net_ns+0x351/0x7c0 [ 200.955948][ T7762] create_new_namespaces+0x3ea/0xab0 [ 200.955972][ T7762] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 200.955993][ T7762] ksys_unshare+0x45b/0xa40 [ 200.956016][ T7762] ? __pfx_ksys_unshare+0x10/0x10 [ 200.956038][ T7762] ? xfd_validate_state+0x61/0x180 [ 200.956057][ T7762] __x64_sys_unshare+0x31/0x40 [ 200.956071][ T7762] do_syscall_64+0xcd/0xf80 [ 200.956094][ T7762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.956109][ T7762] RIP: 0033:0x7f18ebb8f7c9 [ 200.956122][ T7762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.956136][ T7762] RSP: 002b:00007f18ecaa0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 200.956150][ T7762] RAX: ffffffffffffffda RBX: 00007f18ebde5fa0 RCX: 00007f18ebb8f7c9 [ 200.956160][ T7762] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 200.956168][ T7762] RBP: 00007f18ebc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 200.956177][ T7762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.956195][ T7762] R13: 00007f18ebde6038 R14: 00007f18ebde5fa0 R15: 00007ffeab78c478 [ 200.956216][ T7762] [ 201.881150][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 202.068200][ T30] audit: type=1804 audit(1766859155.087:5): pid=7776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.415" name="/newroot/111/file0" dev="tmpfs" ino=593 res=1 errno=0 [ 202.379324][ T7788] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 202.416104][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 202.495974][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 202.502067][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 204.203553][ T7801] random: crng reseeded on system resumption [ 204.218879][ T7831] netlink: 350 bytes leftover after parsing attributes in process `syz.3.427'. [ 204.316412][ T7827] netlink: 350 bytes leftover after parsing attributes in process `syz.3.427'. [ 204.377099][ T7831] netlink: 350 bytes leftover after parsing attributes in process `syz.3.427'. [ 204.477655][ T7832] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.427: iget: checksum invalid [ 204.537515][ T7832] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 204.550843][ T7839] netlink: 28 bytes leftover after parsing attributes in process `syz.2.428'. [ 204.580205][ T7839] veth1_macvtap: left promiscuous mode [ 204.628721][ T7832] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.427: iget: checksum invalid [ 204.665443][ T7841] netlink: 25 bytes leftover after parsing attributes in process `syz.2.428'. [ 204.755545][ T7832] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 204.848470][ T7832] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.427: iget: checksum invalid [ 204.900369][ T7832] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 204.946572][ T7832] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.427: iget: checksum invalid [ 204.987665][ T7832] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 205.019751][ T7832] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 205.063607][ T7832] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 205.798442][ T7866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.434'. [ 207.892332][ T7882] delete_channel: no stack [ 208.559996][ T7925] random: crng reseeded on system resumption [ 208.763627][ T7935] : Can't lookup blockdev [ 209.883518][ T7944] zswap: compressor not available [ 210.347654][ T7958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.455'. [ 212.528221][ T7998] bond0: option all_slaves_active: invalid value () [ 213.328488][ T8009] cifs: Unknown parameter ' |#' [ 213.361093][ T8009] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 213.498001][ T8009] CIFS mount error: No usable UNC path provided in device string! [ 213.498001][ T8009] [ 213.554260][ T8009] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 221.032287][ T8149] netlink: 334 bytes leftover after parsing attributes in process `syz.3.495'. [ 221.066305][ T8150] FAULT_INJECTION: forcing a failure. [ 221.066305][ T8150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.251637][ T8150] CPU: 0 UID: 0 PID: 8150 Comm: syz.1.496 Tainted: G L syzkaller #0 PREEMPT(full) [ 221.251663][ T8150] Tainted: [L]=SOFTLOCKUP [ 221.251669][ T8150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 221.251678][ T8150] Call Trace: [ 221.251683][ T8150] [ 221.251690][ T8150] dump_stack_lvl+0x16c/0x1f0 [ 221.251717][ T8150] should_fail_ex+0x512/0x640 [ 221.251738][ T8150] strncpy_from_user+0x3b/0x2e0 [ 221.251755][ T8150] getname_flags.part.0+0x8f/0x550 [ 221.251775][ T8150] getname_flags+0x93/0xf0 [ 221.251794][ T8150] user_path_at+0x24/0x60 [ 221.251814][ T8150] __x64_sys_mount+0x1fb/0x310 [ 221.251829][ T8150] ? __pfx___x64_sys_mount+0x10/0x10 [ 221.251849][ T8150] do_syscall_64+0xcd/0xf80 [ 221.251872][ T8150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.251887][ T8150] RIP: 0033:0x7ff5af38f7c9 [ 221.251900][ T8150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.251915][ T8150] RSP: 002b:00007ff5b0289038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 221.251929][ T8150] RAX: ffffffffffffffda RBX: 00007ff5af5e6090 RCX: 00007ff5af38f7c9 [ 221.251939][ T8150] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 0000200000000180 [ 221.251948][ T8150] RBP: 00007ff5af413f91 R08: 0000200000000280 R09: 0000000000000000 [ 221.251956][ T8150] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 221.251965][ T8150] R13: 00007ff5af5e6128 R14: 00007ff5af5e6090 R15: 00007ffc8c804928 [ 221.251984][ T8150] [ 221.942168][ T8152] zswap: compressor - not available [ 224.348398][ T8185] input: jJǸ-9%vJ86 as /devices/virtual/input/input14 [ 226.766110][ T8211] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 227.686655][ T8228] random: crng reseeded on system resumption [ 227.900435][ T8224] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 229.002285][ T8236] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16 [ 230.133487][ T8267] FAULT_INJECTION: forcing a failure. [ 230.133487][ T8267] name failslab, interval 1, probability 0, space 0, times 0 [ 230.197515][ T8267] CPU: 0 UID: 0 PID: 8267 Comm: syz.0.520 Tainted: G L syzkaller #0 PREEMPT(full) [ 230.197543][ T8267] Tainted: [L]=SOFTLOCKUP [ 230.197548][ T8267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 230.197557][ T8267] Call Trace: [ 230.197563][ T8267] [ 230.197569][ T8267] dump_stack_lvl+0x16c/0x1f0 [ 230.197598][ T8267] should_fail_ex+0x512/0x640 [ 230.197614][ T8267] ? fs_reclaim_acquire+0xae/0x150 [ 230.197639][ T8267] should_failslab+0xc2/0x120 [ 230.197661][ T8267] kmem_cache_alloc_noprof+0x83/0x770 [ 230.197678][ T8267] ? __pfx_map_id_range_down+0x10/0x10 [ 230.197699][ T8267] ? security_inode_alloc+0x3b/0x2b0 [ 230.197717][ T8267] ? security_inode_alloc+0x3b/0x2b0 [ 230.197731][ T8267] security_inode_alloc+0x3b/0x2b0 [ 230.197747][ T8267] inode_init_always_gfp+0xced/0x1040 [ 230.197772][ T8267] alloc_inode+0x86/0x240 [ 230.197788][ T8267] sock_alloc+0x40/0x280 [ 230.197808][ T8267] __sock_create+0xc2/0x8a0 [ 230.197825][ T8267] __sys_socket+0x14d/0x260 [ 230.197839][ T8267] ? __pfx___sys_socket+0x10/0x10 [ 230.197853][ T8267] ? xfd_validate_state+0x61/0x180 [ 230.197866][ T8267] ? __pfx_do_writev+0x10/0x10 [ 230.197890][ T8267] __x64_sys_socket+0x72/0xb0 [ 230.197902][ T8267] ? lockdep_hardirqs_on+0x7c/0x110 [ 230.197923][ T8267] do_syscall_64+0xcd/0xf80 [ 230.197945][ T8267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.197960][ T8267] RIP: 0033:0x7ff8b998f7c9 [ 230.197972][ T8267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.197987][ T8267] RSP: 002b:00007ff8ba8e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 230.198001][ T8267] RAX: ffffffffffffffda RBX: 00007ff8b9be5fa0 RCX: 00007ff8b998f7c9 [ 230.198011][ T8267] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 230.198020][ T8267] RBP: 00007ff8b9a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 230.198028][ T8267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.198037][ T8267] R13: 00007ff8b9be6038 R14: 00007ff8b9be5fa0 R15: 00007fff1212e068 [ 230.198055][ T8267] [ 230.198079][ T8267] socket: no more sockets [ 230.543817][ T8274] random: crng reseeded on system resumption [ 230.914144][ T5838] Bluetooth: hci0: unexpected event 0x1c length: 725 > 5 [ 232.791782][ T8327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.532'. [ 234.477656][ T8352] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.537: iget: checksum invalid [ 234.527240][ T8352] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 234.585059][ T8352] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.537: iget: checksum invalid [ 234.630324][ T8352] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 234.697245][ T8352] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.537: iget: checksum invalid [ 234.775946][ T8352] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 234.816183][ T8352] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.537: iget: checksum invalid [ 234.857615][ T8352] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 234.915870][ T8352] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 234.945819][ T8352] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 234.994530][ T8365] netlink: 28 bytes leftover after parsing attributes in process `syz.0.538'. [ 235.269169][ T8365] netlink: 28 bytes leftover after parsing attributes in process `syz.0.538'. [ 235.553598][ T8365] netlink: 28 bytes leftover after parsing attributes in process `syz.0.538'. [ 236.332853][ T8377] netlink: 62 bytes leftover after parsing attributes in process `syz.2.542'. [ 239.365757][ T30] audit: type=1800 audit(1843104541.320:6): pid=8471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.558" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 239.643794][ T8483] bridge0: port 3(veth0_to_bridge) entered blocking state [ 239.707564][ T8483] bridge0: port 3(veth0_to_bridge) entered disabled state [ 239.764223][ T8483] veth0_to_bridge: entered allmulticast mode [ 239.816998][ T8483] veth0_to_bridge: entered promiscuous mode [ 239.839815][ T8483] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.915974][ T8483] bridge0: port 3(veth0_to_bridge) entered blocking state [ 239.923380][ T8483] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 240.933243][ T8505] capability: warning: `syz.3.565' uses 32-bit capabilities (legacy support in use) [ 241.080759][ T8503] kvm: kvm [8502]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x28a5 [ 241.778544][ T8509] netlink: 'syz.2.566': attribute type 23 has an invalid length. [ 242.916769][ T8529] netlink: 330 bytes leftover after parsing attributes in process `syz.2.570'. [ 243.333585][ T8540] __vm_enough_memory: pid: 8540, comm: syz.1.572, bytes: 8589938688 not enough memory for the allocation [ 243.416371][ T5834] Bluetooth: hci2: unexpected event 0x36 length: 123 > 7 [ 244.672180][ T8578] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78008 [ 244.693531][ T8578] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 244.712894][ T8578] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 244.731499][ T8578] page_type: f5(slab) [ 244.744420][ T8578] raw: 00fff00000000040 ffff88813ff27140 0000000000000000 dead000000000001 [ 244.763457][ T8578] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 244.786331][ T8578] head: 00fff00000000040 ffff88813ff27140 0000000000000000 dead000000000001 [ 244.808464][ T8578] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 244.827186][ T8578] head: 00fff00000000003 ffffea0001e00201 00000000ffffffff 00000000ffffffff [ 244.850455][ T8578] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 244.869954][ T8578] page dumped because: unmovable page [ 244.884033][ T8578] page_owner tracks the page as allocated [ 244.903324][ T8578] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5202, tgid 5202 (udevd), ts 51171059060, free_ts 51157431996 [ 244.903400][ T8578] post_alloc_hook+0x1af/0x220 [ 244.903422][ T8578] get_page_from_freelist+0xd0b/0x31a0 [ 244.903439][ T8578] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 244.903456][ T8578] alloc_pages_mpol+0x1fb/0x550 [ 244.903476][ T8578] new_slab+0x2c3/0x430 [ 244.903490][ T8578] ___slab_alloc+0xe18/0x1c90 [ 244.903504][ T8578] __slab_alloc.constprop.0+0x63/0x110 [ 244.903519][ T8578] __kmalloc_noprof+0x4fc/0x910 [ 244.903533][ T8578] tomoyo_realpath_from_path+0xc2/0x6e0 [ 244.903553][ T8578] tomoyo_check_open_permission+0x2ab/0x3c0 [ 244.903570][ T8578] tomoyo_file_open+0x6b/0x90 [ 244.903590][ T8578] security_file_open+0x84/0x1e0 [ 244.903608][ T8578] do_dentry_open+0x597/0x1590 [ 244.903629][ T8578] vfs_open+0x82/0x3f0 [ 244.903643][ T8578] path_openat+0x2078/0x3140 [ 244.903663][ T8578] do_filp_open+0x20b/0x470 [ 244.903682][ T8578] page last free pid 5205 tgid 5205 stack trace: [ 244.903691][ T8578] __free_frozen_pages+0x7df/0x1170 [ 244.903705][ T8578] __put_partials+0x130/0x170 [ 244.903720][ T8578] qlist_free_all+0x4c/0xf0 [ 244.903737][ T8578] kasan_quarantine_reduce+0x195/0x1e0 [ 244.903755][ T8578] __kasan_slab_alloc+0x69/0x90 [ 244.903776][ T8578] kmem_cache_alloc_lru_noprof+0x262/0x770 [ 244.903792][ T8578] __d_alloc+0x35/0xa80 [ 244.903804][ T8578] d_alloc_parallel+0x111/0x1510 [ 244.903821][ T8578] __lookup_slow+0x193/0x460 [ 244.903835][ T8578] lookup_slow+0x50/0x70 [ 244.903855][ T8578] path_lookupat+0x5e9/0xc40 [ 244.903874][ T8578] filename_lookup+0x224/0x5f0 [ 244.903896][ T8578] vfs_statx+0x101/0x3f0 [ 244.903909][ T8578] vfs_fstatat+0x7b/0xf0 [ 244.903922][ T8578] __do_sys_newfstatat+0x97/0x120 [ 244.903936][ T8578] do_syscall_64+0xcd/0xf80 [ 246.051947][ T8575] ================================================================== [ 246.051959][ T8575] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 246.051989][ T8575] Write of size 8 at addr ffffc90003a19000 by task syz.0.578/8575 [ 246.052002][ T8575] [ 246.052012][ T8575] CPU: 0 UID: 0 PID: 8575 Comm: syz.0.578 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.052033][ T8575] Tainted: [L]=SOFTLOCKUP [ 246.052042][ T8575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 246.052060][ T8575] Call Trace: [ 246.052065][ T8575] [ 246.052071][ T8575] dump_stack_lvl+0x116/0x1f0 [ 246.052095][ T8575] print_report+0xcd/0x630 [ 246.052118][ T8575] ? __virt_addr_valid+0x81/0x610 [ 246.052142][ T8575] ? sys_imageblit+0x1a6f/0x1e60 [ 246.052162][ T8575] kasan_report+0xe0/0x110 [ 246.052183][ T8575] ? sys_imageblit+0x1a6f/0x1e60 [ 246.052206][ T8575] sys_imageblit+0x1a6f/0x1e60 [ 246.052229][ T8575] ? __pfx_sys_imageblit+0x10/0x10 [ 246.052249][ T8575] ? find_held_lock+0x2b/0x80 [ 246.052269][ T8575] ? up+0xcb/0x140 [ 246.052282][ T8575] ? do_raw_spin_unlock+0x172/0x230 [ 246.052299][ T8575] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 246.052321][ T8575] ? prb_read_valid+0x78/0xa0 [ 246.052337][ T8575] ? __pfx_prb_read_valid+0x10/0x10 [ 246.052353][ T8575] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 246.052377][ T8575] soft_cursor+0x524/0xa10 [ 246.052396][ T8575] ? fb_get_color_depth+0x120/0x250 [ 246.052413][ T8575] bit_cursor+0xe8c/0x17e0 [ 246.052432][ T8575] ? __pfx_bit_cursor+0x10/0x10 [ 246.052448][ T8575] ? __lock_acquire+0x436/0x2890 [ 246.052463][ T8575] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 246.052486][ T8575] ? get_color+0x1da/0x450 [ 246.052500][ T8575] ? __pfx_bit_cursor+0x10/0x10 [ 246.052515][ T8575] fbcon_cursor+0x437/0x5d0 [ 246.052530][ T8575] ? add_softcursor+0x31/0x290 [ 246.052549][ T8575] set_cursor+0x1db/0x250 [ 246.052566][ T8575] con_write+0x89/0xb0 [ 246.052586][ T8575] do_output_char+0x5d9/0x840 [ 246.052610][ T8575] n_tty_write+0x514/0x1280 [ 246.052629][ T8575] ? __pfx_n_tty_write+0x10/0x10 [ 246.052643][ T8575] ? __pfx_woken_wake_function+0x10/0x10 [ 246.052662][ T8575] ? __pfx___might_resched+0x10/0x10 [ 246.052684][ T8575] ? __pfx_n_tty_write+0x10/0x10 [ 246.052704][ T8575] file_tty_write.constprop.0+0x503/0x9b0 [ 246.052728][ T8575] redirected_tty_write+0xd4/0x120 [ 246.052748][ T8575] do_iter_readv_writev+0x662/0x9e0 [ 246.052769][ T8575] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 246.052788][ T8575] ? common_file_perm+0x1b1/0x500 [ 246.052806][ T8575] ? bpf_lsm_file_permission+0x9/0x10 [ 246.052824][ T8575] ? security_file_permission+0x71/0x210 [ 246.052844][ T8575] ? rw_verify_area+0xcf/0x6c0 [ 246.052862][ T8575] vfs_writev+0x35f/0xde0 [ 246.052882][ T8575] ? __lock_acquire+0x436/0x2890 [ 246.052895][ T8575] ? __pfx_vfs_writev+0x10/0x10 [ 246.052914][ T8575] ? putname+0xf5/0x1a0 [ 246.052932][ T8575] ? __fget_files+0x20e/0x3c0 [ 246.052955][ T8575] ? do_writev+0x132/0x340 [ 246.052972][ T8575] do_writev+0x132/0x340 [ 246.052991][ T8575] ? __pfx_do_writev+0x10/0x10 [ 246.053012][ T8575] do_syscall_64+0xcd/0xf80 [ 246.053034][ T8575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.053050][ T8575] RIP: 0033:0x7ff8b998f7c9 [ 246.053066][ T8575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.053082][ T8575] RSP: 002b:00007ff8ba8e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 246.053097][ T8575] RAX: ffffffffffffffda RBX: 00007ff8b9be5fa0 RCX: 00007ff8b998f7c9 [ 246.053112][ T8575] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000005 [ 246.053121][ T8575] RBP: 00007ff8b9a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 246.053131][ T8575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.053140][ T8575] R13: 00007ff8b9be6038 R14: 00007ff8b9be5fa0 R15: 00007fff1212e068 [ 246.053154][ T8575] [ 246.053160][ T8575] [ 246.053164][ T8575] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc90003719000 allocated at drm_gem_shmem_vmap_locked+0x561/0x7e0 [ 246.053197][ T8575] Memory state around the buggy address: [ 246.053205][ T8575] ffffc90003a18f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 246.053216][ T8575] ffffc90003a18f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 246.053227][ T8575] >ffffc90003a19000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 246.053235][ T8575] ^ [ 246.053242][ T8575] ffffc90003a19080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 246.053253][ T8575] ffffc90003a19100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 246.053261][ T8575] ================================================================== [ 246.061738][ T8575] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 246.061755][ T8575] CPU: 0 UID: 0 PID: 8575 Comm: syz.0.578 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.061777][ T8575] Tainted: [L]=SOFTLOCKUP [ 246.061783][ T8575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 246.061793][ T8575] Call Trace: [ 246.061798][ T8575] [ 246.061804][ T8575] dump_stack_lvl+0x3d/0x1f0 [ 246.061831][ T8575] vpanic+0x640/0x6f0 [ 246.061847][ T8575] panic+0xca/0xd0 [ 246.061861][ T8575] ? __pfx_panic+0x10/0x10 [ 246.061875][ T8575] ? sys_imageblit+0x1a6f/0x1e60 [ 246.061898][ T8575] ? preempt_schedule_common+0x44/0xc0 [ 246.061919][ T8575] ? preempt_schedule_thunk+0x16/0x30 [ 246.061936][ T8575] check_panic_on_warn+0xab/0xb0 [ 246.061955][ T8575] end_report+0x107/0x160 [ 246.061977][ T8575] kasan_report+0xee/0x110 [ 246.061999][ T8575] ? sys_imageblit+0x1a6f/0x1e60 [ 246.062021][ T8575] sys_imageblit+0x1a6f/0x1e60 [ 246.062045][ T8575] ? __pfx_sys_imageblit+0x10/0x10 [ 246.062066][ T8575] ? find_held_lock+0x2b/0x80 [ 246.062086][ T8575] ? up+0xcb/0x140 [ 246.062098][ T8575] ? do_raw_spin_unlock+0x172/0x230 [ 246.062116][ T8575] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 246.062138][ T8575] ? prb_read_valid+0x78/0xa0 [ 246.062154][ T8575] ? __pfx_prb_read_valid+0x10/0x10 [ 246.062171][ T8575] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 246.062195][ T8575] soft_cursor+0x524/0xa10 [ 246.062215][ T8575] ? fb_get_color_depth+0x120/0x250 [ 246.062232][ T8575] bit_cursor+0xe8c/0x17e0 [ 246.062251][ T8575] ? __pfx_bit_cursor+0x10/0x10 [ 246.062268][ T8575] ? __lock_acquire+0x436/0x2890 [ 246.062284][ T8575] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 246.062307][ T8575] ? get_color+0x1da/0x450 [ 246.062321][ T8575] ? __pfx_bit_cursor+0x10/0x10 [ 246.062338][ T8575] fbcon_cursor+0x437/0x5d0 [ 246.062353][ T8575] ? add_softcursor+0x31/0x290 [ 246.062372][ T8575] set_cursor+0x1db/0x250 [ 246.062389][ T8575] con_write+0x89/0xb0 [ 246.062411][ T8575] do_output_char+0x5d9/0x840 [ 246.062435][ T8575] n_tty_write+0x514/0x1280 [ 246.062454][ T8575] ? __pfx_n_tty_write+0x10/0x10 [ 246.062469][ T8575] ? __pfx_woken_wake_function+0x10/0x10 [ 246.062488][ T8575] ? __pfx___might_resched+0x10/0x10 [ 246.062510][ T8575] ? __pfx_n_tty_write+0x10/0x10 [ 246.062525][ T8575] file_tty_write.constprop.0+0x503/0x9b0 [ 246.062549][ T8575] redirected_tty_write+0xd4/0x120 [ 246.062569][ T8575] do_iter_readv_writev+0x662/0x9e0 [ 246.062591][ T8575] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 246.062610][ T8575] ? common_file_perm+0x1b1/0x500 [ 246.062629][ T8575] ? bpf_lsm_file_permission+0x9/0x10 [ 246.062647][ T8575] ? security_file_permission+0x71/0x210 [ 246.062667][ T8575] ? rw_verify_area+0xcf/0x6c0 [ 246.062686][ T8575] vfs_writev+0x35f/0xde0 [ 246.062711][ T8575] ? __lock_acquire+0x436/0x2890 [ 246.062725][ T8575] ? __pfx_vfs_writev+0x10/0x10 [ 246.062745][ T8575] ? putname+0xf5/0x1a0 [ 246.062762][ T8575] ? __fget_files+0x20e/0x3c0 [ 246.062786][ T8575] ? do_writev+0x132/0x340 [ 246.062804][ T8575] do_writev+0x132/0x340 [ 246.062823][ T8575] ? __pfx_do_writev+0x10/0x10 [ 246.062845][ T8575] do_syscall_64+0xcd/0xf80 [ 246.062867][ T8575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.062883][ T8575] RIP: 0033:0x7ff8b998f7c9 [ 246.062896][ T8575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.062911][ T8575] RSP: 002b:00007ff8ba8e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 246.062927][ T8575] RAX: ffffffffffffffda RBX: 00007ff8b9be5fa0 RCX: 00007ff8b998f7c9 [ 246.062938][ T8575] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000005 [ 246.062947][ T8575] RBP: 00007ff8b9a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 246.062957][ T8575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.062966][ T8575] R13: 00007ff8b9be6038 R14: 00007ff8b9be5fa0 R15: 00007fff1212e068 [ 246.062981][ T8575] [ 246.063056][ T8575] Kernel Offset: disabled