last executing test programs: 6.604434519s ago: executing program 0 (id=1425): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/nbd14/queue/io_timeout\x00', 0x200b03, 0x0) r0 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) getcpu$auto(&(0x7f0000000080)=0x8010001, &(0x7f00000000c0)=0x7f, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/oom_adj\x00', 0x49402, 0x0) read$auto(r2, 0x0, 0x9a28) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000100)={0x0, 0x7}, 0x4000000000007) getsockopt$auto_SO_NOFCS(r1, 0x68c, 0x2b, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/trace\x00', 0x705040, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/workqueue/cpumask\x00', 0x2, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x20) write$auto(0x3, 0x0, 0xffd8) mknod$auto(0x0, 0x9, 0x10e72d) fcntl$auto(0x3, 0x4, 0xa553) mmap$auto(0x0, 0x9, 0x1, 0xfffd, r0, 0x8000) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x62, 0x0, 0xffffffff, 0x7fffffff, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x6, 0x7, 0xf7ffffffffffffb9, 0x8}) r5 = socket(0xa, 0x5, 0x84) r6 = getpid() process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x9, 0x0) setsockopt$auto(r5, 0x10000000084, 0x9, 0x0, 0x98) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x4, 0x0) 5.938400223s ago: executing program 0 (id=1427): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) ioctl$auto_BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000140)={@raw, 0x2, 0x0, 0x929, 0xe5c1, 0x7cd, "abfd2e69df26f540a1d748ceff20c3ed69a359d46ed201e13aea69af"}) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x7, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x7ffa) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) r1 = fcntl$auto_F_DUPFD_CLOEXEC(r0, 0x406, r0) ioctl$auto_EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0xff800000, 0x144, 0x8}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x400000008, 0x20000000000000da, 0x9b76, 0xffffffffffffffff, 0x20008000) read$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffffff, 0x0, 0x0) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x302, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x24, 0x1001, 0x1, 0x717e, 0x0, 0x7, 0xf6b, 0xd, 0x2, 0x4080001, 0x4, 0x1ffffffffffd, 0x224a, 0x2, 0x7, 0x6, 0x7f, 0x3ff, 0x2, 0xa, 0x1004, 0x40200, 0x6, 0x84, 0x3, 0x0, 0x0, 0x4, 0xfffffffc, [0x2, 0x0, 0x10000000000200, 0x4000401, 0x0, 0xa, 0x9, 0xffffffff80000000, 0x0, 0x42, 0x1, 0x3, 0x0, 0x80000000000000, 0x8, 0x4, 0x400, 0x0, 0x100000000, 0x2, 0xfffffffdfffffffe, 0x1, 0x668, 0x0, 0x9, 0x0, 0xc2e5, 0x14, 0x0, 0x1000000, 0x0, 0x1000000000000000, 0xfffffffffffffffc, 0x83, 0x400, 0x6, 0x0, 0x0, 0xb457195, 0x6, 0xffffffffffffffff, 0x2]}, 0x1fe, 0xd) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/ati_remote2/parameters/mode_mask\x00', 0x0, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x2200, 0x0) read$auto(r4, 0x0, 0x10001) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x4000, 0x0) close_range$auto(0x0, 0x5, 0x0) socket(0x1d, 0x2, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/tty12\x00', 0x10bc41, 0x0) r5 = socketpair$auto(0x2, 0x4, 0x8000000000000000, 0x0) ioctl$auto(0xffffffffffffffff, 0x3ff, r5) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000100)=""/45, 0x2d) r6 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x9c9e2984648407a4, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r6, 0xfffffffffffffd01, &(0x7f00000001c0)) ioctl$auto(r2, 0x4008af23, 0xffffffffffffffff) 5.369824186s ago: executing program 0 (id=1431): r0 = openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_clock\x00', 0x185000, 0x0) mmap$auto(0x800000000000001, 0x2020005, 0x3, 0xeb1, r0, 0x5) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x6) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sda1\x00', 0x8800, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/image_size\x00', 0x182b02, 0x0) sendfile$auto(r2, r2, 0x0, 0xccda) madvise$auto(0x0, 0xffffffffffff0005, 0x17) brk$auto(0x7ffffffff001) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101600, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x161782, 0x0) getrlimit$auto(0x3, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r3, 0x127f, 0x0) ioctl$auto_KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x59) preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x2e) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) close_range$auto(0x2, 0x8, 0x0) set_mempolicy$auto(0x1, 0x0, 0x21) unshare$auto(0x80000040000080) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto(0xffffffffffffffff, 0x3ff, r1) 4.532925591s ago: executing program 2 (id=1436): write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mount$auto(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/bluetooth/hci3/rfkill29/power/runtime_status\x00', 0x0, 0x0) (async, rerun: 64) lseek$auto(0x3, 0x2, 0x1ff) (async, rerun: 64) unshare$auto(0x40000080) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x0) (rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) io_uring_setup$auto(0xb, 0x0) (rerun: 64) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyr9\x00', 0x40001, 0x0) (async, rerun: 64) ioctl$auto(0x3, 0x80045438, r0) (async, rerun: 64) shmget$auto(0x8, 0x10565, 0x7ff) (async) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) 4.239085248s ago: executing program 0 (id=1437): r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/loop7/hctx0/state\x00', 0x2440, 0x0) write$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r0, &(0x7f0000000040)="e34e26d1b0f9fd11d1940cde06c65f6b2d11f39879eb48b733ac84ee0026f960766a2ac015a8e656f1b9388742bef131352a171193e56d81a4040682dbd5fb30263ba1c24ee0ca75eed40b57587c4595df0d084bdc3ace6089dd90f46027f11c488634452d1861eefac64ec7427f0df56f61b1bb90b4c331fb04bff36a4a9fd225f2bce32ca2e8c411b8c09b68d76e8ccc733e173bc3710d806288cc7d105e053960aec65ee74c3986a64a22fa628daa5a337583b9d9251b619c9173bdbe75a810ca29f236844cf6efbc7dbad45a8f04e60abd87cb1223018d7067bfa0989f3e5ecfda940c6ca8c07442ae1d012a20ac5ab7473f61b7366d43a572fe9920021bbebcbac5275ee922695e81ba520089ed9b8860de8a4632c5c21815594fef5ff6a0fc03fdb0d1c127aa3bd4e5172429c98fed823a4baeb1b2cf4f88e44e132c5dab4d6ffacaff710007dbafd293758360356e97c5b695a5fb6301353afb1e3ebf92af867e8adeeffde8e355443c46fbd31d61687b40608593cf36b94e4166a8cec97e72f103cdb93faf27cbb913a4e2dfe4b159a114812bd1fc826090fd6a4909eafec272bdf0f23bef151577c183a236b080bbfceb1e0b4f3effca26141d42d1da1428774db7ed12dbffed054c90ca9bff9a723ba08dc311320bfca3e8358679e465de09370d8980831042de8ed0d0fd02a83d6f61119e9a9b197b3a199c6e003cacd61b32ac366a83716f62f608255d99909b887f1c6e8cf893c43ec6d44d8624f7a29f716e27a5ae8c5b38226a1d6e22313162ef71d6dc0b7aa2e1a2560ab94f96ee9c40d842b8df4a131e218253e487affd546c72ed4648f507b6b2e91267ae5b3f48beb3a776906fdf3c005a896bd08647ff69d39623a96dd2566a35a6713e48227d2426b6764c07befc0c3398ddf8e19005d7714f5d43b5a9a78e0fd5091a8573a881def71aa508dab80d43002817f24a9eac8b517b18800a769eb29feabde5c6e8144c0c05168cc60da52112b1338cd0b82c11e8e9169bf25750ec63f08dbc7d9ede8952d5caf2a6657b57c152ec237c19cca91b09e20cdcbfeeedd60a5db06f9b56ae4a2540e63b769ca747c933b23090f458c8980614e52c216cb13527c382d10ccc125e48754e989855d83490e27f6db2946fb516164bfbd0c2a97c3efcc63ece98314a1eb997a40bc202647196d54f537646855e5148ac3e239e12a1417425b2559456a4caaf5ab63cd7aeef0f3aca8ff078698fa5c92f2c5f502a68d483f7d12bfb405e7d52e97a94ff365ec0826e2cd6d886c6d5ec0d0f3990432a68db5a0548715738f3883d1c126f0a77b24a293d26da5b1bdb42d5d74b0293d79d70d57c9c89395f6ec446bc9a86bd4b2560064999e0db3bcfdb07744df0dc30a57ed486e5519710e25406fc32cb47a1e65d92200a5a4f572a83a3cfc461ab51ae95390abfe50a1ff8839e439124878a18ac5ab961fe88240b0c4f93df7921dd5b2a7e47e26ba497f31a32bdeb07b1d099fe235ed0dd4569451937ce1ecebc996fecb67b3b15f2c559f5dacca0bfab247b6c274f6c32cd6399f3b1407ac23f1148b108fc8ae0caf7cdb33fb5648038a23cc9f44120e18dea6908752f04c2fba591afab38b79627f5eadeec9a49ce735b9a377369a80706ba015ff440854d4fcc4d5cc3476f8eb8d0d9f40e90631e17f228bc47ccf38fb94c40aa3b272f791e65b7fb09dde49c6bcbfb18432f60b7d31a1e9ddaa913c032a631c42f7c630bc4056ea3852dff102de3facbe83b0c2be9bdc1ab5545d542954dba89e215d13ce6cd158ede701724005731e391e6d0ec789e9b4d41c55b3afd8a296e2251e27be16c5101c1a7c6661415eb18b171a590acadad14568f30cb823f894b6a1e20db946d4e37dcacb1a5a7380faa958f9070bbdf1688b8609645f7ffa219e3c8a2aa1d5b9316c3d59a9172b39f0f90598743f6f141d8a661c422e7dfddfad4ab669aa7fc240ed5c0547e29023902a0cb073853de24ff6140a76cad3d41e5aeae43c60d7021d9050b9bf225bf52a56ab742e9bfe5a29db0398df5ed09198633322e75bf58674d6e9c61493383fc9b6077fedd692ea0818afa554e2b10942a44a3808a20a89e166f05a4531eb0f91b3fc37b996a8488dcd05b0686d603d007db21cb4f5651981bb09eb72d7b88d5f7a6f585dbb399183fcc054b733fdc9907badde864c4160e71cade4f949a6c4f6f2bbcd79fc706cd574a5b87a1a2e4f0f38dff6181c1512b819b3be0c8dc64938f479dea687c7bcbe057e60700fdd2bcb37a59f03cc26a7550927845a164ef82415c74ec2a353608eed024d422b67dc0efa26fd2a921511bbf2088cc68badafa10b8c0b2176a41fb476da59d9ae86e1c70d1be9ac4d2c2cadb7a9d559a3206321bb14f6eeeea89dc4928723e6856bfb304e5e57981fb0897aa993b1a58edbabd583b97b36717fc225b8f8f7eef349d8b71ca6439fa82fbdd4bba41917c4416ee80c48d72f4e6badf1180170dab0e1f0fee5bc411ca66b8e14b243feabe56b0f7de973e3fe3427f0ddfe8a32d7179bb32101ed66ea4416b94211cb0a1b63e3af4dd371a94bc7ee3b4e91add9e813bcb307feb8fc89ba535aa53854a6bb5859dafd82e992b4a3e82fc81c7717e751597ee76a519d9d036910aa9516f0a08572eb54d994b4669da5eb7b715eeb2422c8d5ea4923ef0cd978637ca95968be838a196726047007e57cf66724f51544ea74325642fd99b4785b978d8f41e4a45d2f818b100612f55a4e84b833b11e24c9ad51f16e354fa8c4a7e9f9f1fc204b01cf6ce445d6d286f733ce03d0b5e5e0137cbb59203a2315b633b0bf71ce30ea7f16da02c3dd19d8dd8a7fa3e8c62ae3eba85fb9d2f07547f64", 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = getuid() msgctl$auto_MSG_STAT(0xffff0000, 0xb, &(0x7f0000001100)={{0xb88, 0x0, 0xffffffffffffffff, 0x2, 0x4, 0xfff, 0x98c4}, &(0x7f0000001080)=0x7, &(0x7f00000010c0), 0x5, 0x4, 0x4, 0x1, 0x7fff, 0x1, 0xba28, 0x0, @raw=0x2, @inferred=0x0}) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000001cc0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001280)={0x974, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xcc, 0x7, 0x0, 0x1, [@nested={0xc8, 0x95, 0x0, 0x1, [@generic="a7815bbb94889f85793938f687f27951c0db8670f5eb91f252a935c3890a71dfb9e48e49fa2c4a2ffc5e0fbf748864023e84a623be8ce9ec71947429f55c05ebb8488e87063f853b1dd0d7776834d67ebddf38d498ff097564a7cc2a93c1952b97a61a797b77381b54d95b9154a71c7b6176d8fbd5632460091190e7862c57935784ce4c1095c9e9", @generic="6e0213ffea07e66478ef6980f848921c5bf913d60dd5c01874a010ec3f598e3ccf4a9b607bcf7768", @typed={0x8, 0xc1, 0x0, 0x0, @uid=r2}, @nested={0x4, 0x51}, @nested={0x4, 0x6}, @nested={0x4, 0x52}]}]}, @TIPC_NLA_SOCK={0x226, 0x2, 0x0, 0x1, [@nested={0xc3, 0x3, 0x0, 0x1, [@generic="ef66e573184f0588c39c9ace71d3a1bceda035f745f414c43d74e406d0a933e4aa11c92897d674f2d72e2b8e046686c380203abf8175cad20dcc8be1819461f2895c46a4b08ef38db62646caa089cc11acbd206cfcff02574644157fd6372b519cf688c05bcc99012feb6bd2a04e6161ffeb30964863c13e173769da8c670b75b925b3c4305420da7f43319564ce4afab5fbb9dee9b64426dc12b5dcc57c7822607242e252cd1f31e985070f89de09d3dd816d6c08642e3ebaa25b7f9f2d68"]}, @generic="5fbb2c84ca9f1c310da93cc2f7b6eaf36b481229d6a4481aad92cc91c97860f2a7701de7786ea8c333414705ba3efc3d7148ac1efe1511bb08ade3822e49fef9d95d340490d663b0dfbdc60b1a72b3e7ebf694c3072cf9d9738fa9", @typed={0x14, 0xcb, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @typed={0x8, 0xd2, 0x0, 0x0, @u32=0x2}, @generic="865a1a9ccb4ac3a03256d4c6a5bd67cb9a7a28314d6d6852a80b81793c8f3ccb08f828f806d70deb73514e1e4236f3747643800746ef48e65de178601f4ed7acf23f8fa58f1cdce43fae1cc5b54ea9388d9b4f8692893d02f96325d314fe547ae9b2443a585b350a42ecc832c7fe1318c8a5b475afee56fde5a424b8089a4cf7029b1b8edf473a724491bb69ccbd6c51cc73c4652e0b0f074bb4dd69143b98d8b74805b578300ab8e2e0ebf003394372827fd109025f7a5a4ee97dcbd6e9ee48b07136d8254b923d1e2a4d9acc49a9f355f3873d43398877258c", @generic="7eca43e5bed0770cb2415e383e"]}, @TIPC_NLA_UNSPEC={0x72, 0x0, "2f5eed6f4ba7b8110a9a091443891b4bbf31a94588ac39005afa8078d752bdcf26a8bed98c323036b9825b5c894157353c6d1ce51eeea260989d2046b6b074439cb12c0da218a136824ac640f671618179ddca4388662a0867d2ab4a6eecd9b92d87a1822fec638194cea1aa7cdc"}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@generic="a9a9fef8667c1a5913d45121dd96d74ee3f5660e85c961b369e6b9170615759b1fed46496562d03f04278469a6904704faffa298b296e810ee02b59abebe1a29c5edf102f8034626f0749e34c12815eb"]}, @TIPC_NLA_MEDIA={0x2fc, 0x5, 0x0, 0x1, [@generic="4152fc6088a4e683cde662b318bc8679446ee8dedaa517c22dff987de67a1f96e8c524639dc4003aef736b90d58c98e323135e93519d09d52aa151e0ae57cf7ade3f32629f357506e6b54f7be2b533429e2c06c7df8cc8b7f537fa3458b47c6829217f056685e5a6a5e31ea478ef1f906e510faffdc54612412a5a435520445bf5d91c61dc1ba1e8", @generic="6ce7dbf62d4ce06369ffc394686c6a72d5228ac829c7601348236cccf28d95d869944767e3a72fee0148b4ce9ba251b48072a20c57251ccd7919e46de53a5746b42cc8ff5527e029391e4c05bd817ccebea985b0a8ecf766130f36ad24e93aaebf5d68e491487c9d05205047572cbe5117d60d019aa1d926e26f19834af6b5d9d3e1c81beda009f8b1d638933d80b38b876c2057d2714709036db9ec5235719054e6b3378ce8b438e9c8cbd00f423b2848fae9c730bcda5b6348cacd138e0c823cd0b19112ed60be036ca195ef60359fcc47b99e228a4f9e3ca005d85af4136247ce24fd265c7f150743a9be6e1dca6f9713866eead453", @generic="097787717a68932a5790dac9243709d128c359f9ea6a00812b6412780b120caf876fce68c664f2", @generic="86f9ed09d222af9ffc29461833c61e89bf19e39c0ae766a271fb3aefd4c72852809ac1cef986bcfd0f1bbda10df5233a61d6a1bdf37ca6b330c6e94f790918728a61197e07953f2210a67e08506ad9447a052193056753a1f1012ab7b793f066156ef2fa0478476866405cc35f9c437b84d35a20fec74bd4b22ac7fcf0ea3d605cf9f5b0b094b5bee652d80942eacec3258e9e4ff6a7e3f596fd343d204c4010b8a45a0f1c8b5eb5400098bc8259a93ad265e9c147a8532562d5c3e8b789cd32e390732d78e1b7c805598d9048c1edbae6eb80e2b2cb43e4aee2885b44", @typed={0x8, 0x1d, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x162, 0x0, 0x0, @fd=r0}, @generic="4db6b56d023e7fd3f299773e640563fbbca7cb6206a879f36f57075544df47ea9123e6aff71028939ad02d78e49c557e44f50b83485ab623aa1527a4dddf122a88e9ec5086423a0bbcb7110e1f9a39bf7104d24139eb7462a2746232afa67ee79d97d1bdeb"]}, @TIPC_NLA_UNSPEC={0x9c, 0x0, "a365fc933f4bcc09562ff985a6769ae54c536009c0e641daa720009767aace600ca12ca36f47ef3b22544e4b142e4edab191cb3d7f360ea9abf5da6c9e4b7497dadc5d9a98803b90a616604a54d7e09fa32a99769b32ce09fd77e9e176fcf879a39b246aab7e9c5226ea0ad1552eecdc266c5995302b4a446dafabfe2bc97c0cbfcfd9fff479d3368edeae16ac0655d7f851dcbb73f772d1"}, @TIPC_NLA_NAME_TABLE={0xb0, 0x8, 0x0, 0x1, [@nested={0xa9, 0x5, 0x0, 0x1, [@nested={0x4, 0xe5}, @generic="4426df77e6ff2b0e6be1583b27f5468452145e5bf5beb2aebb2190d6cf46fe0b415da7ea7f328a7252ac20e24e0035f2d0e6f648605f94061362fe6f4422f010e6fefdd0407e738fbfe9254666d1689f000851802529500141ef49662d34310ac2e9e13c4d0c05df04956349a48ccfb6c69e74e908b83908e1c6f96a35fd5c62e354eebb6d12513491383c9899db4a0a50f1b45cd5802ccb45bf1e0841ea1b128e"]}]}, @TIPC_NLA_PUBL={0x15c, 0x3, 0x0, 0x1, [@typed={0x8, 0x15, 0x0, 0x0, @u32=0x3}, @nested={0x144, 0x63, 0x0, 0x1, [@typed={0x8, 0x21, 0x0, 0x0, @uid=r3}, @typed={0xcc, 0xdf, 0x0, 0x0, @binary="74dc0132b7f7ff0dc7e8d3fedbf25a5110ec40b12d24f2f8365e7f4c21958510a1b89df34133701aa861a57a6a5e67c83ca72fedaa1db4f3b9c8cf778490f8a29c304c2b98d55c6de8d79aa6cbbf35e45a6202ca96869ea53c596c70f1354cbefcac2f388c8120720a79cc6cde2ace4429a0e3d7454c6c9c1b3d8019dd6302e21b876b34bcef14a37eac64313e2701a913efe8cc23af62cdc0c3f085a790284b62add031f19989aae5e650ae2cc4da48e9e3d3718f6040fdd99d1e391aa21904d93e5303b7024c86"}, @typed={0x4b, 0xb2, 0x0, 0x0, @binary="83de676765ee64c0071e8516eea4a14929a512056423620d59657d249c138a206e369ccbf12e7b94f10923ce016d0498350e5b59ba3c4906024cc6f15f8eacb6b1bc830a63d4ab"}, @nested={0x4, 0x13}, @nested={0x4, 0xea}, @nested={0x4, 0x7e}, @typed={0x14, 0xf7, 0x0, 0x0, @ipv6=@mcast1}]}, @nested={0xc, 0x138, 0x0, 0x1, [@typed={0x8, 0x15c, 0x0, 0x0, @uid}]}]}]}, 0x974}, 0x1, 0x0, 0x0, 0x8800}, 0x805) shmctl$auto_SHM_LOCK(0x0, 0xb, &(0x7f0000001e00)={{0x9, 0x0, r4, 0x7, 0x7, 0x9869, 0x8}, 0x1, 0x8001, 0xebe1, 0x1a, @inferred, @raw=0x3, 0x4, 0x0, &(0x7f0000001d00)="646c7fbd6cfaa1bb2314e658c6f3ca53e8094b9b2a1bde976a0f31cf25c8c9ee1a7e9bd208c856ea7c43e41d6cb4b9a3683cf70e39babb431b89a95794762ca973e91e69989f2abde593e5770d901d5cf0f9ef5e3cfb9a56fc404d4ef6acbf40b4415a2b120d066ef8915555d0d9bd", &(0x7f0000001d80)="b919263f5e5c34ce91f181b3b3af7a25b6ea55da8ab22bb46b6defb6dd87c4db2da03d84b12c760750df024e8162282147bd2abbfaed8b0562174e044f2878850784cffd84c95dfcf8e7f99eb61e0d7cff9d2ea25c9c4b5c8849a0a5fc4d0fbfa8569c186b265e7647510da4bc7ffbfaa9d574a6f12f6998d0a080"}) msgctl$auto_MSG_STAT(0x5bb1, 0xb, &(0x7f0000001f00)={{0x7fff, r6, r4, 0x1, 0x2, 0x93b, 0x6}, &(0x7f0000001e80)=0x14, &(0x7f0000001ec0)=0x3, 0x3, 0xc7, 0xf09, 0x6, 0x7, 0xd, 0x0, 0x1, @inferred, @inferred=r5}) msgctl$auto_MSG_STAT(0x7, 0xb, &(0x7f0000002000)={{0x5, r7, 0x0, 0x2, 0x358, 0x1}, &(0x7f0000001f80)=0x1, &(0x7f0000001fc0)=0x5, 0x7, 0x1, 0x401, 0xc0, 0x9, 0x4, 0x2, 0x3, @inferred, @raw=0x3}) r10 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000002080)='/proc/buddyinfo\x00', 0x60a840, 0x0) r11 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000002100), r1) sendmsg$auto_OVS_VPORT_CMD_SET(r1, &(0x7f00000021c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x1c, r11, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@OVS_VPORT_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4005) writev$auto(r10, &(0x7f0000002300)={&(0x7f0000002200)="ac07621cb93bb855ec95863093e422cf30ee155528c944d36c903f8224b74c839e94b84d1c3f5aab45ecf87d247141173129b0dbd667a23447f81698984a5daf40ce1f00b7049d93d7777ca58b796a71f8b351e16516c81cad2cf6d2aeb1f2f1da1889a0b306f16ec90f1a05faf2881932b301e798477318f7c675a5d8a8ffc72a538e0bbbf4a2fdfaa6fa48d757ed369991caaf287a41c26d7f828985199b41a28695c3e9d4cc396272b2962b6b4295bed390154c6eab89ca25c21553bb4f210a747f3070e8a6a7f92a83b7c49c8dbdfc6ae91055216a5f8a67ae2308247d6c0009aac22caad998237840a141b84a2605d256a5cfd39d2591c79cc4", 0xafce}, 0x7) r12 = syz_clone(0x21400, &(0x7f0000002340)="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", 0x1000, &(0x7f0000003340), &(0x7f0000003380), &(0x7f00000033c0)="b92f21b08eb1bec60bf9842e71bb958d4834950703f270ba7547fcbec359e63a899368ce9533f7cacc5e1c1b6b713786f22c154ab65b7882d1c485a63427e7ab442fc76926c8bde56fc8c9f54147d6f6f02073242cab055b9319b392b191f5e61d0e0f44baa41c876c64efe0a31cf66fad04e44afa1ec917c04778ed1d8a1933750c30666f9bae2ffd15c5d2a2455395983ccbb17c21872c5e533cf569f768e396a1b8dd42b64d9b99a44daccf2ab786b9a143e3db3cb9e3b38302245f6d6ea3ba819c3bc93cc45241989a411d224c12f02ca0084f9b4273867e1a715252fe5a163fa8c2eb54f8b0f2f4a4f9ea405863025c6c2c8b1bd9c964eb45d20158") waitid$auto_P_PID(0x1, r12, &(0x7f00000034c0)={@siginfo_0_0={0x1, 0x7, 0x3, @_timer={r9, 0xd5c, @sival_int=0x3, 0x1ff}}}, 0x5, &(0x7f0000003540)={{0x7, 0x8001}, {0x9, 0x2}, 0xd, 0x1, 0x1, 0x6, 0xb57, 0x0, 0x0, 0xdbaa, 0x3, 0x4, 0x2477, 0x400, 0x9, 0x81}) ptrace$auto_PTRACE_PEEKSIGINFO(0x4209, r5, 0xff, 0x8000000000000001) r13 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000003600)='/sys/kernel/debug/block/loop14/rqos/wbt/min_lat_nsec\x00', 0x8242, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r13, &(0x7f0000003640)=""/232, 0xe8) rt_sigtimedwait$auto(&(0x7f0000003740)={0x3}, &(0x7f0000003780)={@_si_pad}, &(0x7f0000003800)={0x80000001, 0x6}, 0x8) mmap$auto(0x7, 0xfffffffffffffff8, 0x100, 0x18, 0xffffffffffffffff, 0x7) r14 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000003880), r1) sendmsg$auto_NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000003e40)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003e00)={&(0x7f00000038c0)={0x534, r14, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0xfffffff9}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x2}, @NL80211_ATTR_HE_BSS_COLOR={0x8, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xcd, 0xbd, "3edd11cb2f231204ca3120d74d66084d0f9890d2a88ab0a589e5c821b3e5574fa76e6dc78f5fe96db9f1d5f3c509ccd11c7986ff801e644cbb4ff8d7cb8cf655d1ca746f3d2341ae7f3fbc6601a0815ecddfa5c9c926aade22fba76068f19391d88bef9926fa4d452369111c464927278d5c379d6e4aebd8141b55b7fac1d6e41db6ec9c1957f732f55789d0fa13875cc7f7eae60c7fbff6053ec2a9ece1280dfc309f49ae5e089cd08b47900022ad5e30df71512657a2e8e75269a4414774d7dc82e90c3d4dc653c8"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x10000}, @NL80211_ATTR_PROBE_RESP={0x42e, 0x91, "c7564b8f6e0206bfe63e183ef79e8e7c2ca083886831fa27e661849869d016a722d02beef88199bf7e5075a3ae14dde1b0197911183e8dcdf8a7250821fc162d2ae66fbdc31b7a2712d7741ab0e2e738a49a80896cab67b678586ae43e5da1e8cda437ea9a3bca5466324e69ad9eb634f77120e66f4185894a1913214de49da03a5ab572b160bf7ed8a0c9b0e983adbf801bfb210bb9ca0b134b9023f9c9d31b70578f312b181b250dc0cec33b6e72cecb763d180cad2c77a959825054652ad5b2f42b713522d2c957e9c92dbc4bd59cb171f4a7c3c3dc22326cebee26df94393fdf2732caec87bf090198e2e451d9b06c875e2ff47dc0945146e6a62b5d952123d0400a2700f143190c00da4374f2b9a2063905f6056484bcc8252ce22592e287e65679d5b101946ffb4d1fe522956d3c9a1a4b44c1c96219f0da0e88116b1e82e32a1efad1b9ce249d9fa68c692bd2389c3225b191d518360133d036a68f6e4ad9b0b42a7c521f78256d414af38bcc1bd15d601f565dae9d7ec5897e2a638adb0631e5b0ad1e9654793c25251716bd7888c1bebfc1f95050812b7a56726876e133005271b22838d2a3aa7990b3baa80f36605c034892a2248dde330ff7bd6ba59702346ede78a1e6e77cc3fed3a5e73bb395add0030278932110730bdf467cfc1a6388389c4ecbbc586639344a48a55585294e5a5748bf5d774b84bbf86d2f68674934131133ad306b9dddd921b41ef11ee4c766eef7db29258bbfd148b2b4628fe86112f33504cd6a272ec9b2b0d973870804d8069172e59652ef07cd75fe127ee18e232044b26f563ea162512845624977a8328744b6acb60bd2ec61f2f229832ca028b751bc564e3f2b6ec423bc0ece6219e525a33981fdbed612609bad9c46bf56e2b915dbfe1321749e5b0b13a3541849243e7a173e7a825e223b4540a4e84584d93ae80c27c49bdb5c3eab0d1061bd6dfed869a0903c88e9d7319c874d4620fa97ce9cf9d473f78cd2c62cb5dcc67e7175f368c2bafa09c9a79c74df42f126460e8f81da195dd1f9f7b99fc797f83c6e4103a762174c7b60020765b9fce5b75567757c557f2c3a87f32ec739a5a57f55e24089dd06b2bbf14303f666131d901ae939b84ec5f352480aa6e464265736ab25ee166770b9594d0d5debefb99abad3f05fc69a737e783641e17de28670add60ce3b496f855fd6afef7724b16a2539ea924ca5dc2ad914e47de1b95f9628923a58c3b0d857b7b215000a7aaa2654838cae6b91334ce1da3f9a7ced748b7920317ac1b2fccd921a985097a8df7cd73121add0c9fb4dd210ec84d0e7dddd60ef616ae521e0d5a95d182ecacf5e7c115e7ea51f8e1c6fe7ed2dc63feb759aba74051f47c397799fc75b6355007bc0dac2e1f948abd3cf71f2fe1bd59ec6703afe50707dfd25b44d7286c602f80fa984bad21693c7a06c1c60c14bdb075f05d41bb9df917a1e35e604a7eb1996dd0a8daee345be170c582"}]}, 0x534}, 0x1, 0x0, 0x0, 0x4}, 0x20000050) r15 = open$dir(&(0x7f0000003e80)='./file0\x00', 0x400800, 0x106) fchmodat$auto(r15, &(0x7f0000003ec0)='./file0\x00', 0x6544) r16 = ioctl$auto_SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f0000003f00)=0xfb) write$auto(r16, &(0x7f0000003f40)='\\&!-*\x00', 0x3) listmount$auto(&(0x7f0000003f80)={0x6, @raw, 0xffff, 0x3, 0x7}, &(0x7f0000003fc0)=0xffffffff7fffffff, 0x4, 0x80000000) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000004000), 0x101482, 0x0) newfstatat$auto(r15, &(0x7f0000004040)='./file0\x00', &(0x7f0000004080)={0x4a215d74, 0x7, 0x76b3, 0xfffffff9, r7, r8, 0x0, 0xffffffffffffad66, 0x4, 0xfffffffffffffff8, 0x0, 0x9, 0x3, 0x1, 0x0, 0x2, 0x2}, 0x8) 3.578444234s ago: executing program 1 (id=1439): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x6) (async) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tty23\x00', 0x41, 0x0) ioctl$auto(r0, 0x540a, 0x1) (async) shmctl$auto(0x9, 0xfffffff7, &(0x7f0000000200)={{0x1e, 0xee00, 0xffffffffffffffff, 0x401, 0x8000, 0x7, 0xd85a}, 0x0, 0x8, 0xfffffffffffffffe, 0xca15, @raw=0x2, @inferred=0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000100)="86ec12c981fe68a42c1af9fc1195d08341f185a13f69c13aaeb98e999e4f41b54f5cf052bfc4dbeb502e2ea6a46f96d107c44280e555018a18571b995e9a4df8c62051670818287179fb23da65f80150c4dfb1f795beb6bae0e75a7e3156bcd368a4f6f915f97d7761250229b61a51e0a6794124a69b069d395c668babf5e9c1a59006b5f8b2b6a6fa6dde02ef038c4f6de02dd47e16d402f6bfd81a9e3afe", &(0x7f00000001c0)="1fd3e1f508c0cc952ae77b749bd28870eeac9e7803bee277c1566ea23f2e4b8538d79bacf9a209"}) msgctl$auto_IPC_SET(0x3, 0x1, &(0x7f00000002c0)={{0xb3, r1, r2, 0x5, 0x4, 0x2, 0x5}, &(0x7f0000000080)=0xac, &(0x7f0000000280)=0x1, 0x1, 0xb2, 0xc, 0x9d, 0xab9, 0x9, 0x6, 0x4, @inferred=r3, @raw=0x800}) keyctl$auto(0x15, r1, r4, r2, 0x8) (async) keyctl$auto_KEY_REQKEY_DEFL_NO_CHANGE(0x4, 0xffffffffffffffff, 0x0, 0x0, 0xf0) unshare$auto(0x40000080) r5 = socket(0x1e, 0x4, 0x0) (async, rerun: 64) get_robust_list$auto(0x0, 0x0, 0x0) (rerun: 64) setsockopt$auto(r5, 0x10f, 0x87, 0x0, 0x14) (async) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async, rerun: 32) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (rerun: 32) write$auto(r6, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async) close_range$auto(0x2, 0x8, 0x0) 2.926790908s ago: executing program 2 (id=1440): truncate$auto(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x6) (async) listxattr$auto(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x7) (async, rerun: 32) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x4040, 0x1) (rerun: 32) mkdirat$auto(r0, &(0x7f0000000180)='./cgroup.cpu/cgroup.procs\x00', 0x2) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r1, 0xffffffffffffffff, 0x0) (async) ioctl$auto_KVM_GET_SUPPORTED_HV_CPUID(r1, 0xc008aec1, &(0x7f00000000c0)={0x8, 0x0, [{0x6, 0x1, 0xa, 0x4, 0x3d85, 0x80000001, 0x78c4}, {0xd, 0xfffffffd, 0x0, 0x353, 0x0, 0x0, 0xc}, {0x8, 0x9, 0xffffff00, 0x5, 0xffffffff, 0x6}, {0x8, 0x5, 0x3, 0x2, 0xa, 0x0, 0x4}]}) 2.876431549s ago: executing program 1 (id=1441): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) setuid$auto(0xe) prctl$auto(0x1000000001c, 0x800, 0x8, 0x9, 0x38000000) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x0, 0x0) lseek$auto(0x3, 0x2, 0x4) open(&(0x7f0000000100)='.\x00', 0x0, 0x57e) r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x7, 0xeb1, 0x401, 0x8000) lsetxattr$auto(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='\x00!\xf7m\xc4\xbe\x02\xbd\b\x19tUhrR\a\x00\x00\x00\xbc\xa5\x97\xee\xd2\xecr#9.\x1d\xb6\x9e\x95!\xaf\xe3\xfe\xbbB\x80\xff\xfb\x83\x05\xbd\xcc\xfc\x8a-\xa5\xd65&I\x8b\xa2/\\V\xce\xfa\nH\xae\v\x1d\xac\xc3\xac/~\xc6\xb9]\xe5\x10', 0x0, 0x7, 0x7) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) io_uring_setup$auto(0x1, 0x0) munmap$auto(0x9, 0x9076) setsockopt$auto(0x3, 0x0, 0x2, 0x0, 0x3) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) read$auto(0xffffffffffffffff, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) r1 = socket(0x2, 0x5, 0x0) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) semtimedop$auto(0x0, &(0x7f0000000100)={0x0, 0x7, 0xd}, 0x1, &(0x7f0000000140)={0x300000000000000, 0x9}) close_range$auto(0x2, 0x8, 0x0) 2.723087416s ago: executing program 2 (id=1442): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC0D0p\x00', 0x0, 0x0) (async) ioctl$auto(0x3, 0x80000541b, 0x38) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x2000000000000006, 0xeb1, 0xffffffffffffffff, 0x8000) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd706c1d616b368cc93a0000000500040000000000ee08d4f540b7079fefe0f89f9037374dc0dc31252ca157f80776532a4579fe94810d1d01ae1c96adcc1032e0fb56c8f1048fef79f5628235bbf680243d9a2ccb8090eed6d2f61b185383af92a18c13045836390d8a8b01072c1483485e3006be801aab2d16ab3be5077b112482e5fed6684b99f4c9e5ae574ef4ec5c5c55faf26172a1af87a413a9d4e4c3d2359169d9019f1ee95830cab2bde0a18ce643a135e04ba1deb9bf3e58b2bd0557ee26cdb151cb12ce7fce9ab3121b337f49f897dab908e47d3d9ab3"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$auto_L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x8004) (async) mmap$auto(0x6, 0xfff, 0x88e, 0x11, r0, 0x7) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x11, 0x3, 0x9) r1 = openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0) unshare$auto(0x40000080) (async) timerfd_create$auto_CLOCK_BOOTTIME_ALARM(0x9, 0x3) (async) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r2, 0x8000) (async, rerun: 64) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) (async, rerun: 64) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/maps\x00', 0x0, 0x0) (async) pread64$auto(r1, 0x0, 0xeda5, 0xc86) (async) waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x4, &(0x7f0000000140)={{0x5, 0x6}, {0x0, 0xa}, 0x7607, 0x2, 0x0, 0x6, 0x3, 0x9, 0x3ff, 0x401, 0x24f0, 0x4, 0x6, 0x5, 0x4, 0x1ff}) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto(0x3, 0xc1485544, 0xb551) 2.655547616s ago: executing program 3 (id=1443): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) r1 = open_tree$auto(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80000401) r2 = syz_clone(0x90000c00, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r2, 0x9, 0x802) readv$auto(r0, &(0x7f00000000c0)={0x0, 0x8090000fffc}, 0x7) close_range$auto(0x2, 0x8, 0x0) r3 = io_uring_setup$auto(0x6, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20100, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) getsockopt$auto(0x3, 0x200000000001, 0x1d, 0x0, 0x0) r4 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, 0x0, 0x1940, 0x0) ioctl$auto_IOCTL_GET_NUM_DEVICES(r4, 0x40046104, 0x0) sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES8=r3, @ANYBLOB="1f6fcf0e6d7230e09553e21158b5340f7fc295bf87fd99d3c9d7980653ee7e9b38719d", @ANYRES64=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x8005}, 0x0) socket(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1$auto(0xdd83) epoll_wait$auto(0x5, 0x0, 0x2, 0x100000000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x43102, 0x0) madvise$auto(0x110c230000, 0x1, 0x9) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) ioctl$auto_KVM_CHECK_EXTENSION(r5, 0xae03, 0xa) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x2000000081, 0x2, 0x80000015) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) socket(0x2c, 0x3, 0x10000) set_mempolicy$auto(0x6, 0x0, 0x21) 2.547257026s ago: executing program 1 (id=1444): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x0, 0x5, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x80000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/etherd/flush\x00', 0x80a02, 0x0) pipe$auto(0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback}, 0x55) mincore$auto(0x0, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x35, 0x0, 0x9) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2202, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card1\x00', 0x0, 0x0) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/bdi/mtd-0/wb_stats\x00', 0x24002, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xc048aec8, r0) mmap$auto(0x0, 0x810004, 0xffb, 0x4008000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0xa, 0x300) sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) 2.381476895s ago: executing program 3 (id=1445): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip_vti0\x00'}) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) rseq$auto(0x0, 0x20, 0x0, 0x8000006) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x129400, 0x0) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socket(0x2, 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ptys7\x00', 0x135741, 0x0) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000200)='/dev/etherd/err\x00', 0x101383, 0x0) r2 = pipe$auto(0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f00000000c0), r1) r4 = getpgid$auto(0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_DEL(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_UFID={0x5, 0x9, 0xe}, @OVS_FLOW_ATTR_ACTIONS={0x44, 0x2, 0x0, 0x1, [@typed={0xf, 0x149, 0x0, 0x0, @str='/dev/tty45\x00'}, @typed={0x8, 0xae, 0x0, 0x0, @pid=r4}, @generic="fd44e185f8957f69d1d5d7820ffca5b8543b8cdc0fcfdabc365669cb2c76fd9584bd45cb1ee76846"]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4800}, 0x4800) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback}, 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto_SO_NO_CHECK(r2, 0x7d, 0xb, &(0x7f0000000240)='/dev/ptys7\x00', 0x7ff) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timerfd_create$auto(0x9, 0x0) r5 = socket(0x10, 0x2, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r6 = socket(0xa, 0x2, 0x3a) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r6, 0x10000, r5}, 0x11) socket(0xa, 0x801, 0x84) r7 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000f40), 0x2100, 0x0) ioctl$auto_BTRFS_IOC_GET_SUPPORTED_FEATURES(r7, 0x80489439, &(0x7f0000000f80)=[{0x3ff, 0x3, 0x8000000000000000}, {0x5, 0x5, 0x2}, {0xa6, 0x1, 0x2}]) 2.106040401s ago: executing program 1 (id=1446): statmount$auto(0x0, &(0x7f0000000180)={0x3, 0xb9, 0x44f, 0xa, 0xffffffff, 0x1007181, 0x8a0d, 0x5, 0xb9, 0x247, 0xd281, 0x29, 0x4, 0x1ffffffffffe, 0x1, 0xfffffffffffffff5, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffb, 0x6, 0x8401, 0x22402, 0x9, 0x0, 0x84, 0x0, 0x0, 0x710, 0x0, 0x1ff, [0x70e2, 0x0, 0x3, 0xb7, 0x0, 0x0, 0x8, 0x1ff, 0xb, 0x100000, 0x10004, 0x15b, 0x7, 0x1fc, 0x5, 0x10000000000002, 0x100000000000000, 0x4, 0x146, 0x0, 0x3a, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6312, 0x0, 0x400000000, 0x0, 0x2, 0x80000001, 0x0, 0x1, 0x0, 0xfffffffffffffffc, 0x3, 0xe, 0x0, 0x1, 0x0, 0x80, 0x6, 0xfffffffffffffffd]}, 0x7, 0xd) r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r0, 0xfffffff7effffd04, &(0x7f00000001c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002d40)={0x3c, r2, 0x1b, 0x70bd26, 0x25dfdbfb, {}, [@OVS_PACKET_ATTR_ACTIONS={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) r4 = getpgid$auto(0x0) pidfd_open$auto(r4, 0x20000) syz_open_procfs$namespace(r4, &(0x7f0000000080)='ns/ipc\x00') r5 = setfsuid$auto(0xee00) r6 = setfsuid$auto(0xee01) setresuid$auto(r5, r6, r5) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x3, 0x8000000000000000, 0x0) shutdown$auto(0x200000003, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x8, 0xffffffffffffff49, 0x5, 0x5, 0x800000000004, 0x1, 0x5, 0x19, 0x10000000010, 0x5, 0x3, 0x4000000000008, 0xfffffffffffffffa, 0xab, 0x0, 0x9]}, &(0x7f0000000040)={0x0, 0x7}) sendmsg$auto_NL802154_CMD_STOP_BEACONS(r1, &(0x7f0000000ac0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a80)={&(0x7f0000000380)={0x348, r3, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x7}, @NL802154_ATTR_BEACON_INTERVAL={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0xaa6b}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x400}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7}, @NL802154_ATTR_SEC_KEY={0x301, 0x30, 0x0, 0x1, [@generic="57ffed3a659baa569666d49a322b27e7231f3f5aae3ef7a2eeb36027c3072a8c384252bcb1bf38b93ab9a1ba2dceec0760e9d8fb2b1bb8b208bf64831790bf3386477db76976e7537872ba124548b484fbc5dee2ddf48d0c81cc9bda9ee945414b41427e3a800542c973c3919173564b349bc96902342c995809ad402e9a8f67d55f15a100b1cb2a1ee3608fc657e8bd280b40d569b2303613ca58794790d27e1567738e848d1b065c1018964f4e4d32fe70de885ca645f8e8e1397b10", @generic="10ec6889a03d6c01aabcaea07bdb0196e81557835c69a75f750d0bc3a5accb95e6538f7a6a9a80e9993d158bbd9e501312cd40eb109742d6466fc4565a9c92fa1812b71a31745bbeec99d7afa550b1d1a11049ef18394c213a7d9e91fe5289e6", @nested={0xc8, 0xd7, 0x0, 0x1, [@generic="f877dd4eb481b6475f6c6aeb64e4d4bbd92093ab21d2e597f3b600fb28c1d33076b2cbf527dd74465c31755a7f692cd7e913719f2cfe4cd790e84972bb1c8b8ff8b0bbd033c075792584678b9ad5f5af4168cc46c51714e111f9df9d4b35bcaeeb16e7432a71389d5a2a270c28899c420189f4838e8567cb31a3acedf84ecc6e73827919cb44d76ecfde33a5661ff47add425a2ddfc1949d356fa2d31540656f47f545701dd2b32662721811e84b7a5dc34cf18715e5ba68d1b398e5", @typed={0x8, 0xf5, 0x0, 0x0, @uid=r6}]}, @typed={0x8, 0xb8, 0x0, 0x0, @uid=0xee00}, @nested={0x102, 0x1d, 0x0, 0x1, [@typed={0x9, 0x2b, 0x0, 0x0, @str='$}\t-\x00'}, @nested={0x4, 0x61}, @generic="988d2627556af7e524ddb19cb2f2d2ab500187192dfbc638849e59288ab2703a8e278a1f932dd4e771292fd5e78eafa3ac211caa89ed12ced1a365aba9483095609c70d7838755cfd7af19fc888174b1be2f24f556bb5342572eaafae8e5c51b0188b0c9db8aa3e7dcadbbda78dd467c84167e7f4a610208e788d8028e0602690994a03f44f89bdae08eb2cb26709e911214d20ae1fbd746582d319768cabd6b115fde35fd4c1b410c01f1d0348b94663d3042248d59078cbe0c431ccf7efc8adf1731d96f02a61505c01f41499c966c1670370534c3fb6c42719b4669d36df42d7046297c6693eaa3432f49504d"]}, @nested={0x8, 0xaa, 0x0, 0x1, [@typed={0x4, 0xb0}]}, @typed={0x4, 0x15}]}]}, 0x348}, 0x1, 0x0, 0x0, 0x80001}, 0x1) 1.906192554s ago: executing program 2 (id=1447): r0 = socket(0x2, 0x2, 0x0) connect$auto(r0, 0x0, 0x52) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) socket(0xa, 0x1, 0x84) setsockopt$auto_SO_NOFCS(r0, 0x800, 0x2b, &(0x7f0000000000)='/sys/kernel/debug/sync/info\x00', 0xaca000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0300, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0x80111500, 0xffffffffffffffff) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000040)=""/43, 0x2b) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bus/usb/020/001\x00', 0xa2000, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, r2, 0x8000) io_uring_setup$auto(0x6, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) read$auto_zero_fops_mem(r3, &(0x7f0000000080)=""/56, 0x38) statmount$auto(0x0, &(0x7f0000000180)={0x3, 0x1, 0x9, 0x7352, 0x3d, 0x65f, 0x1ffde, 0x7, 0x3, 0x2, 0xb, 0x3, 0x5, 0x101, 0xb4, 0x9, 0x6, 0x7ff, 0x84, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0xb4, 0x4, 0xfffffff8, 0x0, 0x0, 0xfffffff9, [0x7, 0x0, 0x68, 0x0, 0x100000000, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x1000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800000000000000, 0x5]}, 0x1fe, 0xf) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x24048890}, 0x40000) r4 = socket(0x10, 0x2, 0x0) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/scsi/sg/device_hdr\x00', 0x40082, 0x0) pread64$auto(r5, 0x0, 0x8100000041, 0x413e) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008004) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xdc5e}, 0x800}, 0x7, 0x4008) 1.857242529s ago: executing program 3 (id=1448): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x2a, 0x5, 0x6) mmap$auto(0x0, 0x20009, 0xfff, 0x40000000000eb1, 0xffffffffffffffff, 0x8000008000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS1\x00', 0x20100, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/security/tomoyo/query\x00', 0x20c42, 0x0) r1 = epoll_create$auto(0x8800001) epoll_ctl$auto(r1, 0x1, r0, 0x0) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x38, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0xc}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x3}, @OVS_DP_ATTR_NAME={0x11, 0x1, 'ovs_datapath\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f0000000000)=@raw_tracepoint={0x1ff, r3, 0x0, 0x2}, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r4, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000004c0)={0x2c, r5, 0x789, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_MODULE_EEPROM_LENGTH={0x8, 0x3, 0x5}, @ETHTOOL_A_MODULE_EEPROM_OFFSET={0x8, 0x2, 0xdc}, @ETHTOOL_A_MODULE_EEPROM_PAGE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004840) r6 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000140)='/dev/usbmon37\x00', 0x640, 0x0) r7 = socket(0x10, 0x2, 0xc) r8 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14, r8, 0x100, 0x70bd28, 0x25dfdbfb, {0xa, 0x0, 0x700}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0x2082, 0x0) r9 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/block/loop5/hctx0/dispatch\x00', 0x129100, 0x0) pread64$auto(r9, 0x0, 0x2, 0x100) r10 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x2, 0x0) write$auto(r10, &(0x7f0000000540)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3\xb8\xc0\x1f\xe6\x9f\x9cy\xa9\xad\x96\x19Fy\x11}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdf\x17\xe4\xcbA\xa5[\x1aG\xa6\x94\xe0\xdf\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(W| \xce\xcc\xdd%\xcf\xab\xa8\xafhM\x0f%\xc4C9~\xfe\x02]\xedVfQ', 0xf) write$auto(0x3, 0x0, 0x100082) ioctl$auto_MON_IOCG_STATS(r6, 0x80089203, 0x0) socket(0xa, 0x5, 0x84) 1.795516634s ago: executing program 1 (id=1449): openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x2, 0x0) utimensat$auto(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x0, 0x1000) unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sr0\x00', 0x60742, 0x0) fallocate$auto(r0, 0x0, 0x4e84, 0x4cbd5d) r1 = memfd_secret$auto(0x80) ftruncate$auto(0x3, 0x700) statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0) sendmsg$auto_HWSIM_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="10010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x20000000}, 0x40090) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0x4008ae8a, &(0x7f00000000c0)={0xfc}) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.5/usb6/power/connected_duration\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000240)=""/217, 0x115) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="251729bd2b164d7000fcdbc725010000000800010009"], 0x1c}, 0x1, 0x0, 0x0, 0x1000}, 0x64810) close_range$auto(0x2, r1, 0x0) mmap$auto(0x9, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) lseek$auto(0x3, 0x10000000002, 0x20000005) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000000080)='5', 0x1) ioctl$auto(0xffffffffffffffff, 0x80885659, 0xffffffffffffffff) memfd_create$auto(&(0x7f0000000300)='/sys/kernel/debug/x86/boot_params/data\x00\"F\xb6\xcd\x06\xd6\x97\\L\xe1\xb2\xee\xb8\x8e\xd6O\xa1j\x90w\xc7\x94\xb7yi\x01&\x04b/\xaa\xfb#s\xc4\xa3\xa7\xacj\xc6\x8e\xf4L\x9a\xf8\xcc\xdcy\x9f\x93\xbc\xf6\xc8\xdb\x05w,|B\xfc\x04\x97\xd3\x0f\x8b\x81\xe8\xbc\x81\x0e\xd7o\xd2\xcd\x18z\xc2\xb7|\xe1\xa6\x9a~\x96\x10rnLnt\xdb\xdb-\x1b\x99\xd4\xed;\xf8\x13a\r\xf2\a\x85%\xef\xa7\x7f#\x96\xf2S\xb0\xf1Hq\x0f;\x83\xb7\x0fz\x9dN\xc9\x1e\x15r\x97|\xbfE\xce\"', 0xc) 1.577229039s ago: executing program 2 (id=1450): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x80, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0xfffffffffffffc96) r1 = epoll_create$auto(0x70c) clock_gettime$auto(0x7, &(0x7f0000000240)={0x8000, 0xd}) epoll_ctl$auto(r1, 0x1, r0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x40006) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x301481, 0x0) setsockopt$auto(0x3, 0x1, 0x2e, 0x0, 0x9) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x0, 0x0) ioctl$auto(r2, 0x64cd, r2) getsockopt$auto(0xffffffffffffffff, 0x1, 0x7fffffff, 0x0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x7f) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/binderfs/binder0\x00', 0x0, 0x0) r3 = timerfd_create$auto_CLOCK_REALTIME(0x0, 0x8000) r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/binderfs/binder1\x00', 0x80, 0x0) ioctl$auto_BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f0000000c40)) r5 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x5, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB='\rV'], 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x200000c4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='^'], 0x1ac}, 0x1, 0x0, 0x0, 0xc000}, 0xc814) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x7}, 0x3, 0x0) 1.168643638s ago: executing program 0 (id=1451): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x810000, 0xffb, 0x8000000008011, 0x3, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x181881, 0x0) openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) socket(0x15, 0x5, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88400, 0x0) pipe2$auto(0x0, 0x80) r0 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x2406a90b, 0x83, 0x3}, 0x20, 0x0, 0x8000006) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fcntl$auto(r1, 0x400, 0x1) truncate$auto(&(0x7f0000000080)='./file0\x00', 0x7f) close_range$auto(0x2, 0xa, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto(r2, 0x540b, r0) 1.003851605s ago: executing program 3 (id=1452): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/smaps\x00', 0x800, 0x0) r0 = open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) statx$auto(r0, 0x0, 0x1003, 0x4005, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) pwrite64$auto(0xc8, 0x0, 0xedef, 0x3) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) setsockopt$auto(0xffffffffffffffff, 0x1, 0x9, 0x0, 0xeb66) 831.531238ms ago: executing program 3 (id=1453): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto(0x0, 0x100c, 0xfffffffffffffff9, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x3, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1e, 0x2, 0x0) getsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x0) socket(0x10, 0x2, 0x4) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x80000, 0x0) bind$auto(0x3, &(0x7f0000000000)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x40}, 0x68) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00') r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(0xffffffffffffffff, 0x802c550a, &(0x7f0000000080)={0x4, 0x4, 0x8, 0x9, 0x7, 0x7fffffff, 0x7, 0x80000000, 0x4, 0xff, 0x0, 0x2, [{0xa, 0x1ff, 0x1}, {0xb, 0x72, 0x5}, {0x8, 0x9, 0x5}, {0xffffffff, 0x400000, 0x2}, {0x8000, 0x7, 0x2}, {0x4dc, 0x7, 0xec43}, {0x0, 0x2, 0x3}, {0x606, 0x6d, 0x8}]}) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/net/bond0/queues/rx-4/rps_cpus\x00', 0xa0666, 0x0) write$auto(r2, &(0x7f00000000c0)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1dS\xf2~>\xb1\xc6\xd1\xee\xc8\x19e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}\xfcD', 0x85) read$auto(0x3, 0x0, 0x8080) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) socket(0x2, 0x1, 0x106) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4068aea3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 694.986088ms ago: executing program 1 (id=1454): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto(0x0, 0x100c, 0xfffffffffffffff9, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x3, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1e, 0x2, 0x0) getsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x0) socket(0x10, 0x2, 0x4) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x80000, 0x0) bind$auto(0x3, &(0x7f0000000000)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x40}, 0x68) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00') r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) ioctl$auto_USBDEVFS_SUBMITURB32(0xffffffffffffffff, 0x802c550a, &(0x7f0000000080)={0x4, 0x4, 0x8, 0x9, 0x7, 0x7fffffff, 0x7, 0x80000000, 0x4, 0xff, 0x0, 0x2, [{0xa, 0x1ff, 0x1}, {0xb, 0x72, 0x5}, {0x8, 0x9, 0x5}, {0xffffffff, 0x400000, 0x2}, {0x8000, 0x7, 0x2}, {0x4dc, 0x7, 0xec43}, {0x0, 0x2, 0x3}, {0x606, 0x6d, 0x8}]}) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/net/bond0/queues/rx-4/rps_cpus\x00', 0xa0666, 0x0) write$auto(r2, &(0x7f00000000c0)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1dS\xf2~>\xb1\xc6\xd1\xee\xc8\x19e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}\xfcD', 0x85) read$auto(0x3, 0x0, 0x8080) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) socket(0x2, 0x1, 0x106) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4068aea3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 669.810152ms ago: executing program 2 (id=1455): unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xfffffffe, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x7, 0xb, 0x2de, 0x504, 0x1, 0x80, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) r1 = getpid() set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x2b, 0x1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0x2, 0x1, 0x106) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe\x00', 0x400, 0x0) read$auto_tracing_pipe_fops_trace(r4, 0x0, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x6) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0) open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0xc0842, 0x95) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x1, 0xd8]}, 0x0) r5 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$auto_UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000400)={{0x3, 0x24, 0xa6, 0x83}, "66ac010005000000000068d190eb0d4a4cada7272464294b9183349eef4c1f028fdcc8ecc66fdd02316f064ebd893007abb4c0bbc3b822f66eaf240963110d61771552c03de65800", 0x2}) ioctl$auto_UI_DEV_CREATE(r5, 0x5501, 0x0) kcmp$auto_KCMP_FILE(r1, r1, 0x0, r2, r5) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x7ff, 0x3, 0x103, 0x10001, 0x400000000003, 0x3, 0x801f, 0xfffffffffffffffe, 0x80000000, 0x335b0eef, 0xffffdfffffffff81, 0x4]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) 61.786791ms ago: executing program 0 (id=1456): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = prctl$auto(0x436, 0x1, 0x0, 0x5, 0x7fff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xfffe, 0x3, 0x3) r1 = socket(0x11, 0x2, 0xfffffffd) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081) sendmsg$auto_NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000980)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000940)={&(0x7f00000009c0)=ANY=[@ANYBLOB="8cca31b56ac91900fd0b83d10171e0b84e0476f942156bcd7fc31516ec1b230251b2bceb6ba1200949b9de557ad0c9f31cac24c3c0104d1bbc5cced9c1656f9af05c6ebf87cec6cd97cb3f3bb3fb28926b9e4777e2fd4b6d1686ead0e087700cab2cd869c438dfe40250deef00ea72d903901168493c8bcbcc8eaa8e7fe97bd58d1d9670d83a55268423d2e0e773e24306a7e14f468461271cd6e4d9373be7ea10eac3a4fbadc4ed73b1e6aa0a74606acee16100f3367badaf6c02115d34f00245e29f4828fac62d6d8e0c96354320c96a", @ANYRES16=0x0, @ANYBLOB="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"], 0x3f4}, 0x1, 0x0, 0x0, 0x20000041}, 0x8810) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x802, 0x9, 0x63, 0x0, 0x0, 0x0, 0x7, 0x7ff, 0x800000000100002, 0x0, 0x2, 0xc, 0x40, 0x1c, 0x20000000009, 0xb}) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x1, 0x84) r2 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa1\x00', 0x101041, 0x0) poll$auto(&(0x7f0000000000)={0x3, 0x1, 0xa}, 0x5, 0x108) write$auto(r2, &(0x7f0000000000)='/sys/kernel/security/integrity/evm/evm_xattrs\x00', 0x20000003) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYRES32, @ANYRES16=r3, @ANYBLOB="060007000080000006000700050000000a00050000000000000000000a00010000000000000000000a0001000000000000000000060006000d00000006000600070000000a0001"], 0x6c}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r4 = inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(r4, 0x0, 0x81000002) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(r1, 0x107, 0xf, 0x0, 0x6) getcwd$auto(&(0x7f0000000280)='/!\x00', 0x1) r5 = socketcall$auto(0x80000001, &(0x7f0000000000)=0x1ff) syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000180), r5) openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace_marker_raw\x00', 0xadc5c0584442f3a7, 0x0) 0s ago: executing program 3 (id=1457): openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) setregid$auto(0xffffffffffffffff, 0xfffe) setresgid$auto(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x21, 0x2, 0xfffffffd) setsockopt$auto(r0, 0x107, 0xf, 0x0, 0x6) kernel console output (not intermixed with test programs): 212.380300][ T7733] CPU: 1 UID: 0 PID: 7733 Comm: syz.1.370 Not tainted syzkaller #0 PREEMPT(full) [ 212.380352][ T7733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 212.380372][ T7733] Call Trace: [ 212.380382][ T7733] [ 212.380396][ T7733] dump_stack_lvl+0x100/0x190 [ 212.380443][ T7733] should_fail_ex.cold+0x5/0xa [ 212.380483][ T7733] should_failslab+0xc2/0x120 [ 212.380526][ T7733] kmem_cache_alloc_noprof+0x91/0x6a0 [ 212.380563][ T7733] ? __pfx_map_id_range_down+0x10/0x10 [ 212.380604][ T7733] ? rcu_is_watching+0x12/0xc0 [ 212.380638][ T7733] ? security_inode_alloc+0x3b/0x2c0 [ 212.380679][ T7733] security_inode_alloc+0x3b/0x2c0 [ 212.380727][ T7733] inode_init_always_gfp+0xc77/0xfb0 [ 212.380789][ T7733] alloc_inode+0x8e/0x250 [ 212.380829][ T7733] new_inode+0x22/0x1c0 [ 212.380870][ T7733] shmem_get_inode+0x1e3/0xf70 [ 212.380916][ T7733] ? __pfx_shmem_get_inode+0x10/0x10 [ 212.380971][ T7733] shmem_tmpfile+0xc1/0x210 [ 212.381011][ T7733] ? d_alloc+0x176/0x1e0 [ 212.381043][ T7733] ? __pfx_shmem_tmpfile+0x10/0x10 [ 212.381087][ T7733] ? do_raw_spin_unlock+0x145/0x1e0 [ 212.381124][ T7733] ? _raw_spin_unlock+0x28/0x50 [ 212.381176][ T7733] vfs_tmpfile+0x4d7/0xbb0 [ 212.381241][ T7733] path_openat+0x10b6/0x4280 [ 212.381291][ T7733] ? kasan_save_track+0x14/0x30 [ 212.381327][ T7733] ? __kasan_slab_alloc+0x89/0x90 [ 212.381376][ T7733] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 212.381412][ T7733] ? do_sys_openat2+0xc7/0x1e0 [ 212.381456][ T7733] ? __x64_sys_open+0xfe/0x1d0 [ 212.381494][ T7733] ? do_syscall_64+0x115/0x840 [ 212.381538][ T7733] ? __pfx_path_openat+0x10/0x10 [ 212.381603][ T7733] do_file_open+0x20e/0x430 [ 212.381655][ T7733] ? __lock_acquire+0x49f/0x1a40 [ 212.381707][ T7733] ? __pfx_do_file_open+0x10/0x10 [ 212.381790][ T7733] ? _raw_spin_unlock+0x28/0x50 [ 212.381835][ T7733] ? alloc_fd+0x471/0x7a0 [ 212.381898][ T7733] do_sys_openat2+0x10f/0x1e0 [ 212.381938][ T7733] ? __pfx_do_sys_openat2+0x10/0x10 [ 212.381977][ T7733] ? do_raw_spin_lock+0x128/0x260 [ 212.382021][ T7733] __x64_sys_open+0xfe/0x1d0 [ 212.382061][ T7733] ? __pfx___x64_sys_open+0x10/0x10 [ 212.382119][ T7733] do_syscall_64+0x115/0x840 [ 212.382148][ T7733] ? clear_bhb_loop+0x40/0x90 [ 212.382189][ T7733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.382224][ T7733] RIP: 0033:0x7fb8e379de59 [ 212.382253][ T7733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.382285][ T7733] RSP: 002b:00007fb8e4660028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 212.382316][ T7733] RAX: ffffffffffffffda RBX: 00007fb8e3a26090 RCX: 00007fb8e379de59 [ 212.382347][ T7733] RDX: 0000000000000408 RSI: 0000000000595002 RDI: 0000200000000100 [ 212.382368][ T7733] RBP: 00007fb8e3833e6f R08: 0000000000000000 R09: 0000000000000000 [ 212.382389][ T7733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.382419][ T7733] R13: 00007fb8e3a26128 R14: 00007fb8e3a26090 R15: 00007ffd878270f8 [ 212.382469][ T7733] [ 213.217637][ T7737] Process accounting paused [ 213.977039][ T7769] netlink: 16 bytes leftover after parsing attributes in process `syz.1.379'. [ 214.273338][ T7774] FAULT_INJECTION: forcing a failure. [ 214.273338][ T7774] name fail_futex, interval 1, probability 0, space 0, times 0 [ 214.413291][ T7774] CPU: 0 UID: 0 PID: 7774 Comm: syz.1.379 Not tainted syzkaller #0 PREEMPT(full) [ 214.413336][ T7774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 214.413356][ T7774] Call Trace: [ 214.413367][ T7774] [ 214.413380][ T7774] dump_stack_lvl+0x100/0x190 [ 214.413428][ T7774] should_fail_ex.cold+0x5/0xa [ 214.413466][ T7774] get_futex_key+0x1d2/0x14f0 [ 214.413522][ T7774] ? __pfx_get_futex_key+0x10/0x10 [ 214.413576][ T7774] ? rcu_is_watching+0x12/0xc0 [ 214.413613][ T7774] ? sock_write_iter+0x31d/0x5b0 [ 214.413660][ T7774] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.413719][ T7774] futex_wake+0xf4/0x5e0 [ 214.413764][ T7774] ? __pfx_futex_wake+0x10/0x10 [ 214.413805][ T7774] ? rw_verify_area+0xce/0x6d0 [ 214.413853][ T7774] ? vfs_write+0x15d/0x1050 [ 214.413909][ T7774] do_futex+0x2b2/0x440 [ 214.413944][ T7774] ? __pfx_do_futex+0x10/0x10 [ 214.413988][ T7774] __x64_sys_futex+0x34f/0x4d0 [ 214.414025][ T7774] ? fput+0x79/0x100 [ 214.414056][ T7774] ? __pfx___x64_sys_futex+0x10/0x10 [ 214.414088][ T7774] ? ksys_write+0x1ac/0x250 [ 214.414134][ T7774] ? __pfx_ksys_write+0x10/0x10 [ 214.414206][ T7774] do_syscall_64+0x115/0x840 [ 214.414235][ T7774] ? clear_bhb_loop+0x40/0x90 [ 214.414276][ T7774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.414310][ T7774] RIP: 0033:0x7fb8e379de59 [ 214.414338][ T7774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.414370][ T7774] RSP: 002b:00007fb8e46600e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 214.414402][ T7774] RAX: ffffffffffffffda RBX: 00007fb8e3a26098 RCX: 00007fb8e379de59 [ 214.414425][ T7774] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb8e3a2609c [ 214.414446][ T7774] RBP: 00007fb8e3a26090 R08: 0000000000000001 R09: 0000000000000000 [ 214.414467][ T7774] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000000 [ 214.414487][ T7774] R13: 00007fb8e3a26128 R14: 00007ffd87827010 R15: 00007ffd878270f8 [ 214.414528][ T7774] [ 217.070617][ T7835] netlink: 16 bytes leftover after parsing attributes in process `syz.1.393'. [ 217.319074][ T7835] FAULT_INJECTION: forcing a failure. [ 217.319074][ T7835] name failslab, interval 1, probability 0, space 0, times 0 [ 217.320282][ T7837] can: request_module (can-proto-3) failed. [ 217.331909][ T7835] CPU: 0 UID: 0 PID: 7835 Comm: syz.1.393 Not tainted syzkaller #0 PREEMPT(full) [ 217.331951][ T7835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 217.332003][ T7835] Call Trace: [ 217.332054][ T7835] [ 217.332108][ T7835] dump_stack_lvl+0x100/0x190 [ 217.332234][ T7835] should_fail_ex.cold+0x5/0xa [ 217.332317][ T7835] ? __skb_get_hash_net+0x153/0x560 [ 217.332470][ T7835] should_failslab+0xc2/0x120 [ 217.332587][ T7835] kmem_cache_alloc_noprof+0x91/0x6a0 [ 217.332690][ T7835] ? lock_acquire+0x1b9/0x370 [ 217.332840][ T7835] ? skb_clone+0x190/0x400 [ 217.332950][ T7835] skb_clone+0x190/0x400 [ 217.333057][ T7835] dev_queue_xmit_nit+0x255/0xa60 [ 217.333218][ T7835] dev_hard_start_xmit+0x2f5/0x760 [ 217.333383][ T7835] __dev_queue_xmit+0x1b9d/0x4940 [ 217.333599][ T7835] ? __pfx___dev_queue_xmit+0x10/0x10 [ 217.333784][ T7835] ? rcu_is_watching+0x12/0xc0 [ 217.333888][ T7835] ? trace_kmem_cache_alloc+0xdd/0x100 [ 217.333990][ T7835] ? __kasan_slab_alloc+0x89/0x90 [ 217.334106][ T7835] ? __asan_memcpy+0x3c/0x60 [ 217.334189][ T7835] ? __asan_memcpy+0x3c/0x60 [ 217.334277][ T7835] ? __skb_clone+0x570/0x760 [ 217.334387][ T7835] netlink_deliver_tap+0xa4d/0xcc0 [ 217.334555][ T7835] netlink_unicast+0x62b/0x850 [ 217.334709][ T7835] ? __pfx_netlink_unicast+0x10/0x10 [ 217.334901][ T7835] netlink_sendmsg+0x8b0/0xda0 [ 217.335074][ T7835] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.335231][ T7835] ? apparmor_socket_sendmsg+0x15b/0x270 [ 217.335405][ T7835] sock_write_iter+0x53a/0x5b0 [ 217.335530][ T7835] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.335669][ T7835] ? __pfx_sock_write_iter+0x10/0x10 [ 217.335824][ T7835] ? bpf_lsm_file_permission+0x9/0x10 [ 217.335950][ T7835] ? security_file_permission+0x76/0x210 [ 217.336063][ T7835] ? rw_verify_area+0xce/0x6d0 [ 217.336183][ T7835] vfs_write+0x6ac/0x1050 [ 217.336357][ T7835] ? __pfx_sock_write_iter+0x10/0x10 [ 217.336505][ T7835] ? __pfx_vfs_write+0x10/0x10 [ 217.336623][ T7835] ? find_held_lock+0x2b/0x80 [ 217.336793][ T7835] ksys_write+0x1f8/0x250 [ 217.336933][ T7835] ? __pfx_ksys_write+0x10/0x10 [ 217.337099][ T7835] do_syscall_64+0x115/0x840 [ 217.337165][ T7835] ? clear_bhb_loop+0x40/0x90 [ 217.337276][ T7835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.337372][ T7835] RIP: 0033:0x7fb8e379de59 [ 217.337444][ T7835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.337531][ T7835] RSP: 002b:00007fb8e4681028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 217.337622][ T7835] RAX: ffffffffffffffda RBX: 00007fb8e3a25fa0 RCX: 00007fb8e379de59 [ 217.337679][ T7835] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000003 [ 217.337733][ T7835] RBP: 00007fb8e3833e6f R08: 0000000000000000 R09: 0000000000000000 [ 217.337789][ T7835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.337843][ T7835] R13: 00007fb8e3a26038 R14: 00007fb8e3a25fa0 R15: 00007ffd878270f8 [ 217.337893][ T7835] [ 217.735956][ T7837] FAULT_INJECTION: forcing a failure. [ 217.735956][ T7837] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 217.801400][ T7837] CPU: 1 UID: 0 PID: 7837 Comm: syz.3.394 Not tainted syzkaller #0 PREEMPT(full) [ 217.801444][ T7837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 217.801463][ T7837] Call Trace: [ 217.801474][ T7837] [ 217.801487][ T7837] dump_stack_lvl+0x100/0x190 [ 217.801529][ T7837] should_fail_ex.cold+0x5/0xa [ 217.801560][ T7837] ? fs_reclaim_acquire+0x70/0x100 [ 217.801610][ T7837] should_fail_alloc_page+0xeb/0x140 [ 217.801658][ T7837] prepare_alloc_pages+0x1f0/0x5f0 [ 217.801710][ T7837] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 217.801755][ T7837] ? rcu_is_watching+0x12/0xc0 [ 217.801793][ T7837] ? trace_mm_page_alloc+0x164/0x1c0 [ 217.801840][ T7837] ? __alloc_frozen_pages_noprof+0x2d1/0x2dc0 [ 217.801883][ T7837] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 217.801933][ T7837] ? stack_trace_save+0x8e/0xc0 [ 217.801977][ T7837] ? __pfx_stack_trace_save+0x10/0x10 [ 217.802021][ T7837] ? stack_depot_save_flags+0x27/0x9d0 [ 217.802073][ T7837] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 217.802117][ T7837] ? __kasan_slab_alloc+0x89/0x90 [ 217.802156][ T7837] ? kmem_cache_alloc_node_noprof+0x27d/0x6b0 [ 217.802196][ T7837] ? alloc_vmap_area+0x640/0x2bb0 [ 217.802235][ T7837] ? __get_vm_area_node+0x1ca/0x330 [ 217.802277][ T7837] ? get_vm_area_caller+0x71/0xa0 [ 217.802319][ T7837] ? vmap+0x131/0x2f0 [ 217.802358][ T7837] ? relay_open_buf.part.0+0x40f/0xb70 [ 217.802395][ T7837] ? relay_open+0x7b9/0xa00 [ 217.802434][ T7837] ? blk_trace_setup_prepare+0x35c/0x6c0 [ 217.802469][ T7837] ? blk_trace_setup+0x217/0x440 [ 217.802504][ T7837] ? blk_trace_ioctl+0x245/0x320 [ 217.802542][ T7837] ? blkdev_ioctl+0x17c/0x6f0 [ 217.802590][ T7837] ? __x64_sys_ioctl+0x18e/0x210 [ 217.802632][ T7837] ? do_syscall_64+0x115/0x840 [ 217.802661][ T7837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.802708][ T7837] alloc_pages_bulk_noprof+0x5de/0x13c0 [ 217.802754][ T7837] ? policy_nodemask+0xed/0x4f0 [ 217.802803][ T7837] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 217.802863][ T7837] __kasan_populate_vmalloc+0xf0/0x210 [ 217.802918][ T7837] alloc_vmap_area+0x95d/0x2bb0 [ 217.802974][ T7837] ? kasan_save_track+0x14/0x30 [ 217.803012][ T7837] ? __kasan_kmalloc+0xaa/0xb0 [ 217.803050][ T7837] ? __pfx_alloc_vmap_area+0x10/0x10 [ 217.803094][ T7837] ? __get_vm_area_node+0x101/0x330 [ 217.803144][ T7837] __get_vm_area_node+0x1ca/0x330 [ 217.803193][ T7837] ? relay_open_buf.part.0+0x40f/0xb70 [ 217.803233][ T7837] get_vm_area_caller+0x71/0xa0 [ 217.803277][ T7837] ? relay_open_buf.part.0+0x40f/0xb70 [ 217.803318][ T7837] vmap+0x131/0x2f0 [ 217.803360][ T7837] ? __pfx_vmap+0x10/0x10 [ 217.803416][ T7837] relay_open_buf.part.0+0x40f/0xb70 [ 217.803469][ T7837] relay_open+0x7b9/0xa00 [ 217.803513][ T7837] blk_trace_setup_prepare+0x35c/0x6c0 [ 217.803556][ T7837] blk_trace_setup+0x217/0x440 [ 217.803601][ T7837] ? __pfx_blk_trace_setup+0x10/0x10 [ 217.803638][ T7837] ? lockdep_hardirqs_on+0x16/0x100 [ 217.803700][ T7837] ? __pfx_vsnprintf+0x10/0x10 [ 217.803777][ T7837] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 217.803826][ T7837] ? do_vfs_ioctl+0x226/0x13e0 [ 217.803875][ T7837] blk_trace_ioctl+0x245/0x320 [ 217.803926][ T7837] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 217.803974][ T7837] ? find_held_lock+0x2b/0x80 [ 217.804012][ T7837] ? __fget_files+0x215/0x3d0 [ 217.804060][ T7837] ? hook_file_ioctl_common+0x140/0x440 [ 217.804104][ T7837] blkdev_ioctl+0x17c/0x6f0 [ 217.804160][ T7837] ? __pfx_blkdev_ioctl+0x10/0x10 [ 217.804222][ T7837] ? __pfx_blkdev_ioctl+0x10/0x10 [ 217.804275][ T7837] __x64_sys_ioctl+0x18e/0x210 [ 217.804323][ T7837] do_syscall_64+0x115/0x840 [ 217.804353][ T7837] ? clear_bhb_loop+0x40/0x90 [ 217.804395][ T7837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.804431][ T7837] RIP: 0033:0x7fdcde79de59 [ 217.804459][ T7837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.804490][ T7837] RSP: 002b:00007fdcdf63c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 217.804522][ T7837] RAX: ffffffffffffffda RBX: 00007fdcdea25fa0 RCX: 00007fdcde79de59 [ 217.804544][ T7837] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000009 [ 217.804564][ T7837] RBP: 00007fdcde833e6f R08: 0000000000000000 R09: 0000000000000000 [ 217.804585][ T7837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.804604][ T7837] R13: 00007fdcdea26038 R14: 00007fdcdea25fa0 R15: 00007ffd632ae6e8 [ 217.804648][ T7837] [ 219.250855][ T7843] Process accounting resumed [ 220.655091][ T7888] random: crng reseeded on system resumption [ 220.909705][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 221.296248][ T7906] ======================================================= [ 221.296248][ T7906] WARNING: The mand mount option has been deprecated and [ 221.296248][ T7906] and is ignored by this kernel. Remove the mand [ 221.296248][ T7906] option from the mount to silence this warning. [ 221.296248][ T7906] ======================================================= [ 221.871940][ T7917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.410'. [ 222.014106][ T7886] Bluetooth: hci2: command 0x2016 tx timeout [ 222.022920][ T7885] Bluetooth: hci0: command 0x0406 tx timeout [ 222.035800][ T7886] Bluetooth: hci3: command 0x0406 tx timeout [ 222.043242][ T7885] Bluetooth: hci1: command 0x0406 tx timeout [ 224.393927][ T7949] nbd: nbd4129 already in use [ 225.790759][ T5646] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 227.795600][ T8008] netlink: 16 bytes leftover after parsing attributes in process `syz.1.429'. [ 228.098802][ T8008] FAULT_INJECTION: forcing a failure. [ 228.098802][ T8008] name failslab, interval 1, probability 0, space 0, times 0 [ 228.111547][ T8008] CPU: 1 UID: 0 PID: 8008 Comm: syz.1.429 Not tainted syzkaller #0 PREEMPT(full) [ 228.111578][ T8008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 228.111593][ T8008] Call Trace: [ 228.111602][ T8008] [ 228.111611][ T8008] dump_stack_lvl+0x100/0x190 [ 228.111642][ T8008] should_fail_ex.cold+0x5/0xa [ 228.111664][ T8008] ? __skb_get_hash_net+0x153/0x560 [ 228.111706][ T8008] should_failslab+0xc2/0x120 [ 228.111737][ T8008] kmem_cache_alloc_noprof+0x91/0x6a0 [ 228.111790][ T8008] ? lock_acquire+0x1b9/0x370 [ 228.111842][ T8008] ? skb_clone+0x190/0x400 [ 228.111883][ T8008] skb_clone+0x190/0x400 [ 228.111911][ T8008] dev_queue_xmit_nit+0x255/0xa60 [ 228.111953][ T8008] dev_hard_start_xmit+0x2f5/0x760 [ 228.111998][ T8008] __dev_queue_xmit+0x1b9d/0x4940 [ 228.112047][ T8008] ? __pfx___dev_queue_xmit+0x10/0x10 [ 228.112099][ T8008] ? rcu_is_watching+0x12/0xc0 [ 228.112125][ T8008] ? trace_kmem_cache_alloc+0xdd/0x100 [ 228.112155][ T8008] ? __kasan_slab_alloc+0x89/0x90 [ 228.112207][ T8008] ? __asan_memcpy+0x3c/0x60 [ 228.112239][ T8008] ? __asan_memcpy+0x3c/0x60 [ 228.112269][ T8008] ? __skb_clone+0x570/0x760 [ 228.112309][ T8008] netlink_deliver_tap+0xa4d/0xcc0 [ 228.112368][ T8008] netlink_unicast+0x62b/0x850 [ 228.112409][ T8008] ? __pfx_netlink_unicast+0x10/0x10 [ 228.112457][ T8008] netlink_sendmsg+0x8b0/0xda0 [ 228.112505][ T8008] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.112546][ T8008] ? apparmor_socket_sendmsg+0x15b/0x270 [ 228.112590][ T8008] sock_write_iter+0x53a/0x5b0 [ 228.112624][ T8008] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.112660][ T8008] ? __pfx_sock_write_iter+0x10/0x10 [ 228.112703][ T8008] ? bpf_lsm_file_permission+0x9/0x10 [ 228.112739][ T8008] ? security_file_permission+0x76/0x210 [ 228.112772][ T8008] ? rw_verify_area+0xce/0x6d0 [ 228.112807][ T8008] vfs_write+0x6ac/0x1050 [ 228.112843][ T8008] ? __pfx_sock_write_iter+0x10/0x10 [ 228.112904][ T8008] ? __pfx_vfs_write+0x10/0x10 [ 228.112958][ T8008] ? find_held_lock+0x2b/0x80 [ 228.113018][ T8008] ksys_write+0x1f8/0x250 [ 228.113055][ T8008] ? __pfx_ksys_write+0x10/0x10 [ 228.113099][ T8008] do_syscall_64+0x115/0x840 [ 228.113121][ T8008] ? clear_bhb_loop+0x40/0x90 [ 228.113149][ T8008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.113174][ T8008] RIP: 0033:0x7fb8e379de59 [ 228.113194][ T8008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.113216][ T8008] RSP: 002b:00007fb8e4681028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 228.113239][ T8008] RAX: ffffffffffffffda RBX: 00007fb8e3a25fa0 RCX: 00007fb8e379de59 [ 228.113254][ T8008] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000003 [ 228.113268][ T8008] RBP: 00007fb8e3833e6f R08: 0000000000000000 R09: 0000000000000000 [ 228.113282][ T8008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.113296][ T8008] R13: 00007fb8e3a26038 R14: 00007fb8e3a25fa0 R15: 00007ffd878270f8 [ 228.113326][ T8008] [ 229.959020][ T8044] netlink: 'syz.3.436': attribute type 22 has an invalid length. [ 230.018347][ T8044] netlink: 330 bytes leftover after parsing attributes in process `syz.3.436'. [ 231.712695][ T8064] Process accounting resumed [ 231.800458][ T8082] netlink: 16 bytes leftover after parsing attributes in process `syz.0.443'. [ 232.109644][ T8082] FAULT_INJECTION: forcing a failure. [ 232.109644][ T8082] name fail_futex, interval 1, probability 0, space 0, times 0 [ 232.162811][ T8082] CPU: 1 UID: 0 PID: 8082 Comm: syz.0.443 Not tainted syzkaller #0 PREEMPT(full) [ 232.162855][ T8082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 232.162875][ T8082] Call Trace: [ 232.162885][ T8082] [ 232.162897][ T8082] dump_stack_lvl+0x100/0x190 [ 232.162937][ T8082] should_fail_ex.cold+0x5/0xa [ 232.162974][ T8082] get_futex_key+0x1d2/0x14f0 [ 232.163034][ T8082] ? __pfx_get_futex_key+0x10/0x10 [ 232.163099][ T8082] ? rcu_is_watching+0x12/0xc0 [ 232.163138][ T8082] ? sock_write_iter+0x31d/0x5b0 [ 232.163187][ T8082] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.163247][ T8082] futex_wake+0xf4/0x5e0 [ 232.163298][ T8082] ? __pfx_futex_wake+0x10/0x10 [ 232.163340][ T8082] ? rw_verify_area+0xce/0x6d0 [ 232.163388][ T8082] ? vfs_write+0x15d/0x1050 [ 232.163446][ T8082] do_futex+0x2b2/0x440 [ 232.163483][ T8082] ? __pfx_do_futex+0x10/0x10 [ 232.163528][ T8082] __x64_sys_futex+0x34f/0x4d0 [ 232.163566][ T8082] ? fput+0x79/0x100 [ 232.163600][ T8082] ? __pfx___x64_sys_futex+0x10/0x10 [ 232.163633][ T8082] ? ksys_write+0x1ac/0x250 [ 232.163683][ T8082] ? __pfx_ksys_write+0x10/0x10 [ 232.163746][ T8082] do_syscall_64+0x115/0x840 [ 232.163777][ T8082] ? clear_bhb_loop+0x40/0x90 [ 232.163819][ T8082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.163857][ T8082] RIP: 0033:0x7f27cf59de59 [ 232.163886][ T8082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.163917][ T8082] RSP: 002b:00007f27d04970e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 232.163949][ T8082] RAX: ffffffffffffffda RBX: 00007f27cf825fa8 RCX: 00007f27cf59de59 [ 232.163970][ T8082] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f27cf825fac [ 232.163990][ T8082] RBP: 00007f27cf825fa0 R08: 0000000000000001 R09: 0000000000000000 [ 232.164008][ T8082] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000000 [ 232.164028][ T8082] R13: 00007f27cf826038 R14: 00007ffde486d7c0 R15: 00007ffde486d8a8 [ 232.164072][ T8082] [ 233.211772][ T8093] hub 1-0:1.0: USB hub found [ 233.225208][ T8093] hub 1-0:1.0: 1 port detected [ 233.643328][ T8105] vivid-011: ================= START STATUS ================= [ 233.701425][ T8105] vivid-011: Radio HW Seek Mode: Bounded [ 233.761740][ T8105] vivid-011: Radio Programmable HW Seek: false [ 233.817840][ T8105] vivid-011: RDS Rx I/O Mode: Block I/O [ 233.889657][ T8105] vivid-011: Generate RBDS Instead of RDS: false [ 233.915739][ T8105] vivid-011: RDS Reception: true [ 233.934769][ T8105] vivid-011: RDS Program Type: 0 inactive [ 233.949803][ T8105] vivid-011: RDS PS Name: inactive [ 233.978380][ T8105] vivid-011: RDS Radio Text: inactive [ 233.991848][ T8105] vivid-011: RDS Traffic Announcement: false inactive [ 234.007906][ T8105] vivid-011: RDS Traffic Program: false inactive [ 234.023138][ T8105] vivid-011: RDS Music: false inactive [ 234.038694][ T8105] vivid-011: ================== END STATUS ================== [ 234.420325][ T8124] netlink: 326 bytes leftover after parsing attributes in process `syz.0.452'. [ 234.782389][ T8129] netlink: 16 bytes leftover after parsing attributes in process `syz.0.454'. [ 235.001605][ T8131] FAULT_INJECTION: forcing a failure. [ 235.001605][ T8131] name failslab, interval 1, probability 0, space 0, times 0 [ 235.014396][ T8131] CPU: 1 UID: 0 PID: 8131 Comm: syz.0.454 Not tainted syzkaller #0 PREEMPT(full) [ 235.014439][ T8131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 235.014459][ T8131] Call Trace: [ 235.014470][ T8131] [ 235.014496][ T8131] dump_stack_lvl+0x100/0x190 [ 235.014538][ T8131] should_fail_ex.cold+0x5/0xa [ 235.014570][ T8131] ? __skb_get_hash_net+0x153/0x560 [ 235.014643][ T8131] should_failslab+0xc2/0x120 [ 235.014688][ T8131] kmem_cache_alloc_noprof+0x91/0x6a0 [ 235.014726][ T8131] ? lock_acquire+0x1b9/0x370 [ 235.014775][ T8131] ? skb_clone+0x190/0x400 [ 235.014820][ T8131] skb_clone+0x190/0x400 [ 235.014871][ T8131] dev_queue_xmit_nit+0x255/0xa60 [ 235.014925][ T8131] dev_hard_start_xmit+0x2f5/0x760 [ 235.014989][ T8131] __dev_queue_xmit+0x1b9d/0x4940 [ 235.015058][ T8131] ? __pfx___dev_queue_xmit+0x10/0x10 [ 235.015133][ T8131] ? rcu_is_watching+0x12/0xc0 [ 235.015170][ T8131] ? trace_kmem_cache_alloc+0xdd/0x100 [ 235.015223][ T8131] ? __kasan_slab_alloc+0x89/0x90 [ 235.015265][ T8131] ? __asan_memcpy+0x3c/0x60 [ 235.015298][ T8131] ? __asan_memcpy+0x3c/0x60 [ 235.015328][ T8131] ? __skb_clone+0x570/0x760 [ 235.015369][ T8131] netlink_deliver_tap+0xa4d/0xcc0 [ 235.015427][ T8131] netlink_unicast+0x62b/0x850 [ 235.015482][ T8131] ? __pfx_netlink_unicast+0x10/0x10 [ 235.015543][ T8131] netlink_sendmsg+0x8b0/0xda0 [ 235.015599][ T8131] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.015655][ T8131] ? apparmor_socket_sendmsg+0x15b/0x270 [ 235.015715][ T8131] sock_write_iter+0x53a/0x5b0 [ 235.015761][ T8131] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.015811][ T8131] ? __pfx_sock_write_iter+0x10/0x10 [ 235.015881][ T8131] ? bpf_lsm_file_permission+0x9/0x10 [ 235.015929][ T8131] ? security_file_permission+0x76/0x210 [ 235.015969][ T8131] ? rw_verify_area+0xce/0x6d0 [ 235.016017][ T8131] vfs_write+0x6ac/0x1050 [ 235.016067][ T8131] ? __pfx_sock_write_iter+0x10/0x10 [ 235.016119][ T8131] ? __pfx_vfs_write+0x10/0x10 [ 235.016166][ T8131] ? find_held_lock+0x2b/0x80 [ 235.016227][ T8131] ksys_write+0x1f8/0x250 [ 235.016274][ T8131] ? __pfx_ksys_write+0x10/0x10 [ 235.016334][ T8131] do_syscall_64+0x115/0x840 [ 235.016363][ T8131] ? clear_bhb_loop+0x40/0x90 [ 235.016405][ T8131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.016438][ T8131] RIP: 0033:0x7f27cf59de59 [ 235.016465][ T8131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.016497][ T8131] RSP: 002b:00007f27d0476028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 235.016535][ T8131] RAX: ffffffffffffffda RBX: 00007f27cf826090 RCX: 00007f27cf59de59 [ 235.016556][ T8131] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000003 [ 235.016594][ T8131] RBP: 00007f27cf633e6f R08: 0000000000000000 R09: 0000000000000000 [ 235.016614][ T8131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.016634][ T8131] R13: 00007f27cf826128 R14: 00007f27cf826090 R15: 00007ffde486d8a8 [ 235.016680][ T8131] [ 236.790906][ T8165] netlink: 20 bytes leftover after parsing attributes in process `syz.0.458'. [ 238.626244][ T8197] netlink: 16 bytes leftover after parsing attributes in process `syz.1.467'. [ 239.022910][ T8199] FAULT_INJECTION: forcing a failure. [ 239.022910][ T8199] name failslab, interval 1, probability 0, space 0, times 0 [ 239.035658][ T8199] CPU: 1 UID: 0 PID: 8199 Comm: syz.1.467 Not tainted syzkaller #0 PREEMPT(full) [ 239.035688][ T8199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 239.035718][ T8199] Call Trace: [ 239.035726][ T8199] [ 239.035735][ T8199] dump_stack_lvl+0x100/0x190 [ 239.035767][ T8199] should_fail_ex.cold+0x5/0xa [ 239.035789][ T8199] ? __skb_get_hash_net+0x153/0x560 [ 239.035829][ T8199] should_failslab+0xc2/0x120 [ 239.035860][ T8199] kmem_cache_alloc_noprof+0x91/0x6a0 [ 239.035888][ T8199] ? lock_acquire+0x1b9/0x370 [ 239.035923][ T8199] ? skb_clone+0x190/0x400 [ 239.035955][ T8199] skb_clone+0x190/0x400 [ 239.035984][ T8199] dev_queue_xmit_nit+0x255/0xa60 [ 239.036024][ T8199] dev_hard_start_xmit+0x2f5/0x760 [ 239.036069][ T8199] __dev_queue_xmit+0x1b9d/0x4940 [ 239.036117][ T8199] ? __pfx___dev_queue_xmit+0x10/0x10 [ 239.036168][ T8199] ? rcu_is_watching+0x12/0xc0 [ 239.036194][ T8199] ? trace_kmem_cache_alloc+0xdd/0x100 [ 239.036224][ T8199] ? __kasan_slab_alloc+0x89/0x90 [ 239.036254][ T8199] ? __asan_memcpy+0x3c/0x60 [ 239.036277][ T8199] ? __asan_memcpy+0x3c/0x60 [ 239.036298][ T8199] ? __skb_clone+0x570/0x760 [ 239.036327][ T8199] netlink_deliver_tap+0xa4d/0xcc0 [ 239.036369][ T8199] netlink_unicast+0x62b/0x850 [ 239.036410][ T8199] ? __pfx_netlink_unicast+0x10/0x10 [ 239.036455][ T8199] netlink_sendmsg+0x8b0/0xda0 [ 239.036503][ T8199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.036552][ T8199] ? apparmor_socket_sendmsg+0x15b/0x270 [ 239.036596][ T8199] sock_write_iter+0x53a/0x5b0 [ 239.036630][ T8199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.036674][ T8199] ? __pfx_sock_write_iter+0x10/0x10 [ 239.036716][ T8199] ? bpf_lsm_file_permission+0x9/0x10 [ 239.036752][ T8199] ? security_file_permission+0x76/0x210 [ 239.036782][ T8199] ? rw_verify_area+0xce/0x6d0 [ 239.036817][ T8199] vfs_write+0x6ac/0x1050 [ 239.036853][ T8199] ? __pfx_sock_write_iter+0x10/0x10 [ 239.036890][ T8199] ? __pfx_vfs_write+0x10/0x10 [ 239.036923][ T8199] ? find_held_lock+0x2b/0x80 [ 239.036968][ T8199] ksys_write+0x1f8/0x250 [ 239.037003][ T8199] ? __pfx_ksys_write+0x10/0x10 [ 239.037048][ T8199] do_syscall_64+0x115/0x840 [ 239.037068][ T8199] ? clear_bhb_loop+0x40/0x90 [ 239.037097][ T8199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.037122][ T8199] RIP: 0033:0x7fb8e379de59 [ 239.037142][ T8199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.037165][ T8199] RSP: 002b:00007fb8e4660028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 239.037194][ T8199] RAX: ffffffffffffffda RBX: 00007fb8e3a26090 RCX: 00007fb8e379de59 [ 239.037210][ T8199] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000003 [ 239.037224][ T8199] RBP: 00007fb8e3833e6f R08: 0000000000000000 R09: 0000000000000000 [ 239.037238][ T8199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.037252][ T8199] R13: 00007fb8e3a26128 R14: 00007fb8e3a26090 R15: 00007ffd878270f8 [ 239.037282][ T8199] [ 242.112318][ T8218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.470'. [ 243.660207][ T8220] kexec: Could not allocate control_code_buffer [ 243.909965][ T8232] netlink: 16 bytes leftover after parsing attributes in process `syz.2.473'. [ 246.079233][ T8261] netlink: 16 bytes leftover after parsing attributes in process `syz.2.479'. [ 246.121989][ T8262] FAULT_INJECTION: forcing a failure. [ 246.121989][ T8262] name failslab, interval 1, probability 0, space 0, times 0 [ 246.158788][ T8262] CPU: 1 UID: 0 PID: 8262 Comm: syz.0.487 Not tainted syzkaller #0 PREEMPT(full) [ 246.158828][ T8262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 246.158843][ T8262] Call Trace: [ 246.158851][ T8262] [ 246.158860][ T8262] dump_stack_lvl+0x100/0x190 [ 246.158892][ T8262] should_fail_ex.cold+0x5/0xa [ 246.158918][ T8262] should_failslab+0xc2/0x120 [ 246.158953][ T8262] __kmalloc_noprof+0xfc/0x820 [ 246.158979][ T8262] ? rcu_is_watching+0x12/0xc0 [ 246.159005][ T8262] ? tomoyo_realpath_from_path+0xb6/0x690 [ 246.159044][ T8262] tomoyo_realpath_from_path+0xb6/0x690 [ 246.159084][ T8262] tomoyo_check_open_permission+0x2af/0x3c0 [ 246.159113][ T8262] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 246.159150][ T8262] ? hook_file_open+0x24f/0x8f0 [ 246.159198][ T8262] ? path_get+0x61/0x80 [ 246.159226][ T8262] tomoyo_file_open+0x6b/0x90 [ 246.159263][ T8262] security_file_open+0xb5/0x1e0 [ 246.159294][ T8262] do_dentry_open+0x588/0x14d0 [ 246.159341][ T8262] vfs_open+0x82/0x3f0 [ 246.159371][ T8262] path_openat+0x2873/0x4280 [ 246.159422][ T8262] ? __pfx_path_openat+0x10/0x10 [ 246.159474][ T8262] do_file_open+0x20e/0x430 [ 246.159528][ T8262] ? __pfx_do_file_open+0x10/0x10 [ 246.159605][ T8262] ? alloc_fd+0x471/0x7a0 [ 246.159645][ T8262] ? do_getname+0x191/0x390 [ 246.159675][ T8262] do_sys_openat2+0x10f/0x1e0 [ 246.159704][ T8262] ? __pfx_do_sys_openat2+0x10/0x10 [ 246.159735][ T8262] ? fdget+0x18b/0x210 [ 246.159776][ T8262] __x64_sys_openat+0x12d/0x210 [ 246.159806][ T8262] ? __pfx___x64_sys_openat+0x10/0x10 [ 246.159877][ T8262] do_syscall_64+0x115/0x840 [ 246.159908][ T8262] ? clear_bhb_loop+0x40/0x90 [ 246.159949][ T8262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.159984][ T8262] RIP: 0033:0x7f27cf59de59 [ 246.160017][ T8262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.160042][ T8262] RSP: 002b:00007f27d0497028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 246.160065][ T8262] RAX: ffffffffffffffda RBX: 00007f27cf825fa0 RCX: 00007f27cf59de59 [ 246.160081][ T8262] RDX: 0000000000088000 RSI: 0000200000001a00 RDI: ffffffffffffff9c [ 246.160096][ T8262] RBP: 00007f27cf633e6f R08: 0000000000000000 R09: 0000000000000000 [ 246.160110][ T8262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.160124][ T8262] R13: 00007f27cf826038 R14: 00007f27cf825fa0 R15: 00007ffde486d8a8 [ 246.160154][ T8262] [ 246.160190][ T8262] ERROR: Out of memory at tomoyo_realpath_from_path. [ 246.488794][ T5646] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 246.743204][ T8157] Process accounting resumed [ 247.966913][ T8274] netlink: 28 bytes leftover after parsing attributes in process `syz.2.482'. [ 248.082988][ T5646] Bluetooth: hci3: Unexpected cc 0x7c89 with no status [ 248.695958][ T8296] snd_virmidi snd_virmidi.0: control 4096:33685515:3:y:3 is already present [ 251.375729][ T8306] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.998167][ T8332] Process accounting paused [ 253.310145][ T8351] netlink: 24 bytes leftover after parsing attributes in process `syz.0.501'. [ 253.845680][ T8360] can: request_module (can-proto-4) failed. [ 254.403318][ T8382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.508'. [ 255.228770][ T8400] random: crng reseeded on system resumption [ 255.304667][ T5646] Bluetooth: hci1: unexpected event 0x02 length: 1021 > 260 [ 255.605576][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.612425][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.304010][ T8442] FAULT_INJECTION: forcing a failure. [ 257.304010][ T8442] name failslab, interval 1, probability 0, space 0, times 0 [ 257.341966][ T8442] CPU: 0 UID: 0 PID: 8442 Comm: syz.3.518 Not tainted syzkaller #0 PREEMPT(full) [ 257.342015][ T8442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 257.342037][ T8442] Call Trace: [ 257.342049][ T8442] [ 257.342063][ T8442] dump_stack_lvl+0x100/0x190 [ 257.342111][ T8442] should_fail_ex.cold+0x5/0xa [ 257.342154][ T8442] should_failslab+0xc2/0x120 [ 257.342201][ T8442] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 257.342247][ T8442] ? __d_alloc+0x35/0xa50 [ 257.342289][ T8442] __d_alloc+0x35/0xa50 [ 257.342328][ T8442] d_alloc_pseudo+0x1c/0xc0 [ 257.342374][ T8442] alloc_file_pseudo+0x118/0x290 [ 257.342419][ T8442] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 257.342463][ T8442] ? alloc_fd+0x471/0x7a0 [ 257.342524][ T8442] sock_alloc_file+0x50/0x210 [ 257.342571][ T8442] __sys_socket+0x1c0/0x260 [ 257.342628][ T8442] ? __pfx___sys_socket+0x10/0x10 [ 257.342695][ T8442] __x64_sys_socket+0x72/0xb0 [ 257.342749][ T8442] ? lockdep_hardirqs_on+0x78/0x100 [ 257.342808][ T8442] do_syscall_64+0x115/0x840 [ 257.342838][ T8442] ? clear_bhb_loop+0x40/0x90 [ 257.342879][ T8442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.342914][ T8442] RIP: 0033:0x7fdcde79de59 [ 257.342943][ T8442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.343099][ T8442] RSP: 002b:00007fdcdf63c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 257.343226][ T8442] RAX: ffffffffffffffda RBX: 00007fdcdea25fa0 RCX: 00007fdcde79de59 [ 257.343288][ T8442] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 257.343356][ T8442] RBP: 00007fdcde833e6f R08: 0000000000000000 R09: 0000000000000000 [ 257.343408][ T8442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.343471][ T8442] R13: 00007fdcdea26038 R14: 00007fdcdea25fa0 R15: 00007ffd632ae6e8 [ 257.343604][ T8442] [ 258.342379][ T8477] device-mapper: ioctl: Invalid ioctl structure: name d, dev 3000000000 [ 258.751674][ T8491] bonding: no command found in bonding_masters - use +ifname or -ifname [ 260.202055][ T8532] futex_wake_op: syz.1.535 tries to shift op by -2048; fix this program [ 260.214537][ T8532] futex_wake_op: syz.1.535 tries to shift op by -2048; fix this program [ 260.229272][ T8532] 0x000000000001-0x000000020000 : "" [ 260.255904][ T8532] ftl_cs: FTL header corrupt! [ 260.565826][ T8533] ubi0: attaching mtd0 [ 260.597052][ T8533] ubi0: scanning is finished [ 260.612947][ T8533] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 260.924567][ T8533] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 261.145855][ T8539] ubi0: attaching mtd0 [ 261.166542][ T8539] ubi0: scanning is finished [ 261.174026][ T8539] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 261.491403][ T8539] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 261.741109][ T8551] FAULT_INJECTION: forcing a failure. [ 261.741109][ T8551] name fail_futex, interval 1, probability 0, space 0, times 0 [ 261.790260][ T8551] CPU: 1 UID: 0 PID: 8551 Comm: syz.3.538 Tainted: G L syzkaller #0 PREEMPT(full) [ 261.790315][ T8551] Tainted: [L]=SOFTLOCKUP [ 261.790327][ T8551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 261.790348][ T8551] Call Trace: [ 261.790359][ T8551] [ 261.790371][ T8551] dump_stack_lvl+0x100/0x190 [ 261.790413][ T8551] should_fail_ex.cold+0x5/0xa [ 261.790451][ T8551] get_futex_key+0x1d2/0x14f0 [ 261.790510][ T8551] ? __pfx_get_futex_key+0x10/0x10 [ 261.790564][ T8551] ? rcu_is_watching+0x12/0xc0 [ 261.790611][ T8551] ? sock_write_iter+0x31d/0x5b0 [ 261.790660][ T8551] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.790718][ T8551] futex_wake+0xf4/0x5e0 [ 261.790767][ T8551] ? __pfx_futex_wake+0x10/0x10 [ 261.790806][ T8551] ? rw_verify_area+0xce/0x6d0 [ 261.790855][ T8551] ? vfs_write+0x15d/0x1050 [ 261.790912][ T8551] do_futex+0x2b2/0x440 [ 261.790947][ T8551] ? __pfx_do_futex+0x10/0x10 [ 261.790991][ T8551] __x64_sys_futex+0x34f/0x4d0 [ 261.791029][ T8551] ? fput+0x79/0x100 [ 261.791062][ T8551] ? __pfx___x64_sys_futex+0x10/0x10 [ 261.791095][ T8551] ? ksys_write+0x1ac/0x250 [ 261.791142][ T8551] ? __pfx_ksys_write+0x10/0x10 [ 261.791203][ T8551] do_syscall_64+0x115/0x840 [ 261.791232][ T8551] ? clear_bhb_loop+0x40/0x90 [ 261.791273][ T8551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.791308][ T8551] RIP: 0033:0x7fdcde79de59 [ 261.791337][ T8551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.791369][ T8551] RSP: 002b:00007fdcdf61b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 261.791403][ T8551] RAX: ffffffffffffffda RBX: 00007fdcdea26098 RCX: 00007fdcde79de59 [ 261.791425][ T8551] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fdcdea2609c [ 261.791446][ T8551] RBP: 00007fdcdea26090 R08: 0000000000000001 R09: 0000000000000000 [ 261.791466][ T8551] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000000 [ 261.791485][ T8551] R13: 00007fdcdea26128 R14: 00007ffd632ae600 R15: 00007ffd632ae6e8 [ 261.791527][ T8551] [ 262.312594][ T8538] Process accounting paused [ 264.511029][ T8614] netlink: 'syz.0.551': attribute type 1 has an invalid length. [ 264.552899][ T8614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.551'. [ 264.580485][ T8616] netlink: 24 bytes leftover after parsing attributes in process `syz.3.552'. [ 265.108276][ T8620] FAULT_INJECTION: forcing a failure. [ 265.108276][ T8620] name failslab, interval 1, probability 0, space 0, times 0 [ 265.173576][ T8620] CPU: 0 UID: 0 PID: 8620 Comm: syz.3.553 Tainted: G L syzkaller #0 PREEMPT(full) [ 265.173616][ T8620] Tainted: [L]=SOFTLOCKUP [ 265.173624][ T8620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 265.173638][ T8620] Call Trace: [ 265.173646][ T8620] [ 265.173654][ T8620] dump_stack_lvl+0x100/0x190 [ 265.173685][ T8620] should_fail_ex.cold+0x5/0xa [ 265.173712][ T8620] should_failslab+0xc2/0x120 [ 265.173785][ T8620] __kvmalloc_node_noprof+0x116/0x970 [ 265.173827][ T8620] ? bucket_table_alloc.isra.0+0x88/0x460 [ 265.173862][ T8620] bucket_table_alloc.isra.0+0x88/0x460 [ 265.173893][ T8620] __rhashtable_init_noprof+0x43a/0x890 [ 265.173926][ T8620] ioam6_net_init+0xb8/0x190 [ 265.173963][ T8620] ? __pfx_ioam6_net_init+0x10/0x10 [ 265.173999][ T8620] ops_init+0x1e2/0x5f0 [ 265.174031][ T8620] setup_net+0x118/0x3a0 [ 265.174060][ T8620] ? __pfx_setup_net+0x10/0x10 [ 265.174089][ T8620] ? mutex_init_lockdep+0xf1/0x120 [ 265.174132][ T8620] copy_net_ns+0x46f/0x7c0 [ 265.174166][ T8620] create_new_namespaces+0x3ea/0xac0 [ 265.174215][ T8620] unshare_nsproxy_namespaces+0xf2/0x220 [ 265.174248][ T8620] ksys_unshare+0x438/0xab0 [ 265.174278][ T8620] ? __pfx_ksys_unshare+0x10/0x10 [ 265.174318][ T8620] __x64_sys_unshare+0x31/0x40 [ 265.174346][ T8620] do_syscall_64+0x115/0x840 [ 265.174368][ T8620] ? clear_bhb_loop+0x40/0x90 [ 265.174397][ T8620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.174422][ T8620] RIP: 0033:0x7fdcde79de59 [ 265.174442][ T8620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.174465][ T8620] RSP: 002b:00007fdcdf63c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 265.174487][ T8620] RAX: ffffffffffffffda RBX: 00007fdcdea25fa0 RCX: 00007fdcde79de59 [ 265.174503][ T8620] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 265.174517][ T8620] RBP: 00007fdcde833e6f R08: 0000000000000000 R09: 0000000000000000 [ 265.174531][ T8620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.174545][ T8620] R13: 00007fdcdea26038 R14: 00007fdcdea25fa0 R15: 00007ffd632ae6e8 [ 265.174575][ T8620] [ 265.697052][ T5646] Bluetooth: hci1: unexpected event 0x35 length: 725 > 6 [ 268.313661][ T8687] nbd: socks must be embedded in a SOCK_ITEM attr [ 268.342527][ T8684] netlink: 28 bytes leftover after parsing attributes in process `syz.2.562'. [ 268.389356][ T8687] block nbd0: shutting down sockets [ 268.459463][ T8695] netlink: 28 bytes leftover after parsing attributes in process `syz.3.563'. [ 268.519626][ T8682] bond0: invalid ARP target specified [ 268.560628][ T8695] team0 (unregistering): Port device team_slave_0 removed [ 268.587773][ T8695] team0 (unregistering): Port device team_slave_1 removed [ 269.368501][ T8699] FAULT_INJECTION: forcing a failure. [ 269.368501][ T8699] name fail_futex, interval 1, probability 0, space 0, times 0 [ 269.396307][ T8699] CPU: 1 UID: 0 PID: 8699 Comm: syz.3.565 Tainted: G L syzkaller #0 PREEMPT(full) [ 269.396364][ T8699] Tainted: [L]=SOFTLOCKUP [ 269.396375][ T8699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 269.396393][ T8699] Call Trace: [ 269.396403][ T8699] [ 269.396414][ T8699] dump_stack_lvl+0x100/0x190 [ 269.396455][ T8699] should_fail_ex.cold+0x5/0xa [ 269.396491][ T8699] get_futex_key+0xf74/0x14f0 [ 269.396548][ T8699] ? __pfx_get_futex_key+0x10/0x10 [ 269.396599][ T8699] ? lock_acquire+0x1b9/0x370 [ 269.396657][ T8699] futex_wake+0xf4/0x5e0 [ 269.396700][ T8699] ? __pfx_futex_wake+0x10/0x10 [ 269.396740][ T8699] ? find_held_lock+0x2b/0x80 [ 269.396777][ T8699] ? exit_mm_release+0x19/0x30 [ 269.396822][ T8699] do_futex+0x2b2/0x440 [ 269.396855][ T8699] ? __pfx_do_futex+0x10/0x10 [ 269.396884][ T8699] ? __might_fault+0xc5/0x140 [ 269.396926][ T8699] mm_release+0x24a/0x2f0 [ 269.396957][ T8699] do_exit+0x707/0x2ae0 [ 269.397007][ T8699] ? __pfx_do_exit+0x10/0x10 [ 269.397043][ T8699] ? do_raw_spin_lock+0x128/0x260 [ 269.397070][ T8699] ? find_held_lock+0x2b/0x80 [ 269.397101][ T8699] ? get_signal+0x7e0/0x21e0 [ 269.397133][ T8699] do_group_exit+0xd5/0x2a0 [ 269.397173][ T8699] get_signal+0x1ec7/0x21e0 [ 269.397215][ T8699] ? __pfx_get_signal+0x10/0x10 [ 269.397247][ T8699] ? do_futex+0x190/0x440 [ 269.397278][ T8699] arch_do_signal_or_restart+0x91/0x7a0 [ 269.397326][ T8699] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 269.397399][ T8699] exit_to_user_mode_loop+0x139/0x6f0 [ 269.397445][ T8699] ? rcu_is_watching+0x12/0xc0 [ 269.397480][ T8699] do_syscall_64+0x652/0x840 [ 269.397511][ T8699] ? clear_bhb_loop+0x40/0x90 [ 269.397548][ T8699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.397579][ T8699] RIP: 0033:0x7fdcde79de59 [ 269.397606][ T8699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.397637][ T8699] RSP: 002b:00007fdcdf61b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 269.397667][ T8699] RAX: fffffffffffffe00 RBX: 00007fdcdea26098 RCX: 00007fdcde79de59 [ 269.397688][ T8699] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdcdea26098 [ 269.397708][ T8699] RBP: 00007fdcdea26090 R08: 0000000000000000 R09: 0000000000000000 [ 269.397727][ T8699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.397745][ T8699] R13: 00007fdcdea26128 R14: 00007ffd632ae600 R15: 00007ffd632ae6e8 [ 269.397787][ T8699] [ 270.256828][ T8714] can: request_module (can-proto-0) failed. [ 271.047136][ T8739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.575'. [ 272.593950][ T30] audit: type=1800 audit(1784068856.578:7): pid=8769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.582" name="dbroot" dev="configfs" ino=25064 res=0 errno=0 [ 275.083581][ T8811] futex_wake_op: syz.3.590 tries to shift op by -2048; fix this program [ 275.264626][ T8814] FAULT_INJECTION: forcing a failure. [ 275.264626][ T8814] name failslab, interval 1, probability 0, space 0, times 0 [ 275.277459][ T8814] CPU: 1 UID: 0 PID: 8814 Comm: syz.3.591 Tainted: G L syzkaller #0 PREEMPT(full) [ 275.277509][ T8814] Tainted: [L]=SOFTLOCKUP [ 275.277521][ T8814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 275.277540][ T8814] Call Trace: [ 275.277550][ T8814] [ 275.277563][ T8814] dump_stack_lvl+0x100/0x190 [ 275.277607][ T8814] should_fail_ex.cold+0x5/0xa [ 275.277638][ T8814] ? __skb_get_hash_net+0x153/0x560 [ 275.277694][ T8814] should_failslab+0xc2/0x120 [ 275.277739][ T8814] kmem_cache_alloc_noprof+0x91/0x6a0 [ 275.277776][ T8814] ? lock_acquire+0x1b9/0x370 [ 275.277824][ T8814] ? skb_clone+0x190/0x400 [ 275.277870][ T8814] skb_clone+0x190/0x400 [ 275.277912][ T8814] dev_queue_xmit_nit+0x255/0xa60 [ 275.277964][ T8814] dev_hard_start_xmit+0x2f5/0x760 [ 275.278027][ T8814] __dev_queue_xmit+0x1b9d/0x4940 [ 275.278096][ T8814] ? __pfx___dev_queue_xmit+0x10/0x10 [ 275.278172][ T8814] ? rcu_is_watching+0x12/0xc0 [ 275.278209][ T8814] ? trace_kmem_cache_alloc+0xdd/0x100 [ 275.278252][ T8814] ? __kasan_slab_alloc+0x89/0x90 [ 275.278305][ T8814] ? __asan_memcpy+0x3c/0x60 [ 275.278340][ T8814] ? __asan_memcpy+0x3c/0x60 [ 275.278374][ T8814] ? __skb_clone+0x570/0x760 [ 275.278417][ T8814] netlink_deliver_tap+0xa4d/0xcc0 [ 275.278478][ T8814] netlink_unicast+0x62b/0x850 [ 275.278535][ T8814] ? __pfx_netlink_unicast+0x10/0x10 [ 275.278598][ T8814] netlink_sendmsg+0x8b0/0xda0 [ 275.278656][ T8814] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.278715][ T8814] ? apparmor_socket_sendmsg+0x15b/0x270 [ 275.278778][ T8814] sock_write_iter+0x53a/0x5b0 [ 275.278829][ T8814] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.278885][ T8814] ? __pfx_sock_write_iter+0x10/0x10 [ 275.278946][ T8814] ? bpf_lsm_file_permission+0x9/0x10 [ 275.278998][ T8814] ? security_file_permission+0x76/0x210 [ 275.279042][ T8814] ? rw_verify_area+0xce/0x6d0 [ 275.279093][ T8814] vfs_write+0x6ac/0x1050 [ 275.279144][ T8814] ? __pfx_sock_write_iter+0x10/0x10 [ 275.279196][ T8814] ? __pfx_vfs_write+0x10/0x10 [ 275.279242][ T8814] ? find_held_lock+0x2b/0x80 [ 275.279316][ T8814] ksys_write+0x1f8/0x250 [ 275.279368][ T8814] ? __pfx_ksys_write+0x10/0x10 [ 275.279430][ T8814] do_syscall_64+0x115/0x840 [ 275.279461][ T8814] ? clear_bhb_loop+0x40/0x90 [ 275.279503][ T8814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.279539][ T8814] RIP: 0033:0x7fdcde79de59 [ 275.279568][ T8814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.279601][ T8814] RSP: 002b:00007fdcdf61b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 275.279633][ T8814] RAX: ffffffffffffffda RBX: 00007fdcdea26090 RCX: 00007fdcde79de59 [ 275.279656][ T8814] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000003 [ 275.279677][ T8814] RBP: 00007fdcde833e6f R08: 0000000000000000 R09: 0000000000000000 [ 275.279699][ T8814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.279719][ T8814] R13: 00007fdcdea26128 R14: 00007fdcdea26090 R15: 00007ffd632ae6e8 [ 275.279764][ T8814] [ 276.132297][ T8827] sg_read: process 601 (syz.3.595) changed security contexts after opening file descriptor, this is not allowed. [ 276.368801][ T8828] synth uevent: /bus/mei: unknown uevent action string [ 276.930509][ T8846] misc userio: No port type given on /dev/userio [ 277.159418][ T8846] Process accounting paused [ 278.404511][ T8898] FAULT_INJECTION: forcing a failure. [ 278.404511][ T8898] name failslab, interval 1, probability 0, space 0, times 0 [ 278.417270][ T8898] CPU: 1 UID: 0 PID: 8898 Comm: syz.3.603 Tainted: G L syzkaller #0 PREEMPT(full) [ 278.417308][ T8898] Tainted: [L]=SOFTLOCKUP [ 278.417317][ T8898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 278.417331][ T8898] Call Trace: [ 278.417341][ T8898] [ 278.417349][ T8898] dump_stack_lvl+0x100/0x190 [ 278.417380][ T8898] should_fail_ex.cold+0x5/0xa [ 278.417403][ T8898] ? __skb_get_hash_net+0x153/0x560 [ 278.417443][ T8898] should_failslab+0xc2/0x120 [ 278.417474][ T8898] kmem_cache_alloc_noprof+0x91/0x6a0 [ 278.417501][ T8898] ? lock_acquire+0x1b9/0x370 [ 278.417536][ T8898] ? skb_clone+0x190/0x400 [ 278.417568][ T8898] skb_clone+0x190/0x400 [ 278.417597][ T8898] dev_queue_xmit_nit+0x255/0xa60 [ 278.417634][ T8898] dev_hard_start_xmit+0x2f5/0x760 [ 278.417716][ T8898] __dev_queue_xmit+0x1b9d/0x4940 [ 278.417766][ T8898] ? __pfx___dev_queue_xmit+0x10/0x10 [ 278.417819][ T8898] ? rcu_is_watching+0x12/0xc0 [ 278.417845][ T8898] ? trace_kmem_cache_alloc+0xdd/0x100 [ 278.417875][ T8898] ? __kasan_slab_alloc+0x89/0x90 [ 278.417906][ T8898] ? __asan_memcpy+0x3c/0x60 [ 278.417928][ T8898] ? __asan_memcpy+0x3c/0x60 [ 278.417950][ T8898] ? __skb_clone+0x570/0x760 [ 278.417980][ T8898] netlink_deliver_tap+0xa4d/0xcc0 [ 278.418050][ T8898] netlink_unicast+0x62b/0x850 [ 278.418110][ T8898] ? __pfx_netlink_unicast+0x10/0x10 [ 278.418162][ T8898] netlink_sendmsg+0x8b0/0xda0 [ 278.418204][ T8898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.418247][ T8898] ? apparmor_socket_sendmsg+0x15b/0x270 [ 278.418290][ T8898] sock_write_iter+0x53a/0x5b0 [ 278.418325][ T8898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.418362][ T8898] ? __pfx_sock_write_iter+0x10/0x10 [ 278.418405][ T8898] ? bpf_lsm_file_permission+0x9/0x10 [ 278.418443][ T8898] ? security_file_permission+0x76/0x210 [ 278.418504][ T8898] ? rw_verify_area+0xce/0x6d0 [ 278.418539][ T8898] vfs_write+0x6ac/0x1050 [ 278.418575][ T8898] ? __pfx_sock_write_iter+0x10/0x10 [ 278.418613][ T8898] ? __pfx_vfs_write+0x10/0x10 [ 278.418647][ T8898] ? find_held_lock+0x2b/0x80 [ 278.418694][ T8898] ksys_write+0x1f8/0x250 [ 278.418730][ T8898] ? __pfx_ksys_write+0x10/0x10 [ 278.418774][ T8898] do_syscall_64+0x115/0x840 [ 278.418795][ T8898] ? clear_bhb_loop+0x40/0x90 [ 278.418824][ T8898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.418852][ T8898] RIP: 0033:0x7fdcde79de59 [ 278.418872][ T8898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.418895][ T8898] RSP: 002b:00007fdcdf63c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 278.418918][ T8898] RAX: ffffffffffffffda RBX: 00007fdcdea25fa0 RCX: 00007fdcde79de59 [ 278.418934][ T8898] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000003 [ 278.418948][ T8898] RBP: 00007fdcde833e6f R08: 0000000000000000 R09: 0000000000000000 [ 278.418963][ T8898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.418977][ T8898] R13: 00007fdcdea26038 R14: 00007fdcdea25fa0 R15: 00007ffd632ae6e8 [ 278.419008][ T8898] [ 279.800174][ T8929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.608'. [ 281.268170][ T8970] FAULT_INJECTION: forcing a failure. [ 281.268170][ T8970] name failslab, interval 1, probability 0, space 0, times 0 [ 281.280961][ T8970] CPU: 1 UID: 0 PID: 8970 Comm: syz.1.613 Tainted: G L syzkaller #0 PREEMPT(full) [ 281.281014][ T8970] Tainted: [L]=SOFTLOCKUP [ 281.281026][ T8970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 281.281047][ T8970] Call Trace: [ 281.281058][ T8970] [ 281.281070][ T8970] dump_stack_lvl+0x100/0x190 [ 281.281116][ T8970] should_fail_ex.cold+0x5/0xa [ 281.281148][ T8970] ? __skb_get_hash_net+0x153/0x560 [ 281.281204][ T8970] should_failslab+0xc2/0x120 [ 281.281249][ T8970] kmem_cache_alloc_noprof+0x91/0x6a0 [ 281.281288][ T8970] ? lock_acquire+0x1b9/0x370 [ 281.281345][ T8970] ? skb_clone+0x190/0x400 [ 281.281390][ T8970] skb_clone+0x190/0x400 [ 281.281431][ T8970] dev_queue_xmit_nit+0x255/0xa60 [ 281.281483][ T8970] dev_hard_start_xmit+0x2f5/0x760 [ 281.281547][ T8970] __dev_queue_xmit+0x1b9d/0x4940 [ 281.281616][ T8970] ? __pfx___dev_queue_xmit+0x10/0x10 [ 281.281692][ T8970] ? rcu_is_watching+0x12/0xc0 [ 281.281729][ T8970] ? trace_kmem_cache_alloc+0xdd/0x100 [ 281.281772][ T8970] ? __kasan_slab_alloc+0x89/0x90 [ 281.281814][ T8970] ? __asan_memcpy+0x3c/0x60 [ 281.281847][ T8970] ? __asan_memcpy+0x3c/0x60 [ 281.281880][ T8970] ? __skb_clone+0x570/0x760 [ 281.281923][ T8970] netlink_deliver_tap+0xa4d/0xcc0 [ 281.281982][ T8970] netlink_unicast+0x62b/0x850 [ 281.282042][ T8970] ? __pfx_netlink_unicast+0x10/0x10 [ 281.282104][ T8970] netlink_sendmsg+0x8b0/0xda0 [ 281.282163][ T8970] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.282223][ T8970] ? apparmor_socket_sendmsg+0x15b/0x270 [ 281.282285][ T8970] sock_write_iter+0x53a/0x5b0 [ 281.282339][ T8970] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.282396][ T8970] ? __pfx_sock_write_iter+0x10/0x10 [ 281.282457][ T8970] ? bpf_lsm_file_permission+0x9/0x10 [ 281.282516][ T8970] ? security_file_permission+0x76/0x210 [ 281.282559][ T8970] ? rw_verify_area+0xce/0x6d0 [ 281.282609][ T8970] vfs_write+0x6ac/0x1050 [ 281.282662][ T8970] ? __pfx_sock_write_iter+0x10/0x10 [ 281.282715][ T8970] ? __pfx_vfs_write+0x10/0x10 [ 281.282763][ T8970] ? find_held_lock+0x2b/0x80 [ 281.282828][ T8970] ksys_write+0x1f8/0x250 [ 281.282879][ T8970] ? __pfx_ksys_write+0x10/0x10 [ 281.282941][ T8970] do_syscall_64+0x115/0x840 [ 281.282972][ T8970] ? clear_bhb_loop+0x40/0x90 [ 281.283015][ T8970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.283050][ T8970] RIP: 0033:0x7fb8e379de59 [ 281.283077][ T8970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.283110][ T8970] RSP: 002b:00007fb8e4681028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 281.283142][ T8970] RAX: ffffffffffffffda RBX: 00007fb8e3a25fa0 RCX: 00007fb8e379de59 [ 281.283165][ T8970] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000003 [ 281.283185][ T8970] RBP: 00007fb8e3833e6f R08: 0000000000000000 R09: 0000000000000000 [ 281.283205][ T8970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.283225][ T8970] R13: 00007fb8e3a26038 R14: 00007fb8e3a25fa0 R15: 00007ffd878270f8 [ 281.283269][ T8970] [ 281.915016][ T8971] Process accounting resumed [ 282.429334][ T8992] net_ratelimit: 197 callbacks suppressed [ 282.429356][ T8992] netlink: Unknown NAT attribute (type=262, max=9) [ 282.700972][ T8998] netlink: 16 bytes leftover after parsing attributes in process `syz.3.621'. [ 285.897252][ T9041] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 287.516928][ T9073] smpboot: CPU 1 is now offline [ 289.002035][ T9097] syz.0.638(9097): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 289.521988][ T9111] netlink: 16 bytes leftover after parsing attributes in process `syz.2.639'. [ 289.879775][ T9111] netdevsim netdevsim2 eth0: entered promiscuous mode [ 289.910300][ T9111] netdevsim netdevsim2 eth0: entered allmulticast mode [ 289.976668][ T9111] 8021q: adding VLAN 0 to HW filter on device eth0 [ 290.974374][ T9136] netlink: 'syz.2.645': attribute type 1 has an invalid length. [ 292.999607][ T9144] Process accounting resumed [ 294.505524][ T9182] bridge0: port 3(dummy0) entered blocking state [ 294.546102][ T9182] bridge0: port 3(dummy0) entered disabled state [ 294.583066][ T9182] dummy0: entered allmulticast mode [ 294.628991][ T9182] dummy0: entered promiscuous mode [ 294.672272][ T9182] bridge0: port 3(dummy0) entered blocking state [ 294.680397][ T9182] bridge0: port 3(dummy0) entered forwarding state [ 297.116220][ T9226] netlink: 338 bytes leftover after parsing attributes in process `syz.3.665'. [ 299.957488][ T9257] block nbd2: not configured, cannot reconfigure [ 307.050918][ T9365] netlink: 16 bytes leftover after parsing attributes in process `syz.3.698'. [ 307.210050][ T9365] Process accounting resumed [ 308.410770][ T9401] FAULT_INJECTION: forcing a failure. [ 308.410770][ T9401] name failslab, interval 1, probability 0, space 0, times 0 [ 308.452451][ T9404] netlink: 48 bytes leftover after parsing attributes in process `syz.1.707'. [ 308.506868][ T9401] CPU: 0 UID: 0 PID: 9401 Comm: syz.0.706 Tainted: G L syzkaller #0 PREEMPT(full) [ 308.506909][ T9401] Tainted: [L]=SOFTLOCKUP [ 308.506917][ T9401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 308.506932][ T9401] Call Trace: [ 308.506940][ T9401] [ 308.506949][ T9401] dump_stack_lvl+0x100/0x190 [ 308.506979][ T9401] should_fail_ex.cold+0x5/0xa [ 308.507006][ T9401] should_failslab+0xc2/0x120 [ 308.507038][ T9401] __kmalloc_noprof+0xfc/0x820 [ 308.507064][ T9401] ? rcu_is_watching+0x12/0xc0 [ 308.507091][ T9401] ? tomoyo_realpath_from_path+0xb6/0x690 [ 308.507130][ T9401] tomoyo_realpath_from_path+0xb6/0x690 [ 308.507170][ T9401] tomoyo_check_open_permission+0x2af/0x3c0 [ 308.507200][ T9401] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 308.507237][ T9401] ? hook_file_open+0x24f/0x8f0 [ 308.507286][ T9401] ? path_get+0x61/0x80 [ 308.507321][ T9401] tomoyo_file_open+0x6b/0x90 [ 308.507358][ T9401] security_file_open+0xb5/0x1e0 [ 308.507394][ T9401] do_dentry_open+0x588/0x14d0 [ 308.507441][ T9401] vfs_open+0x82/0x3f0 [ 308.507472][ T9401] path_openat+0x2873/0x4280 [ 308.507528][ T9401] ? __pfx_path_openat+0x10/0x10 [ 308.507576][ T9401] do_file_open+0x20e/0x430 [ 308.507617][ T9401] ? __pfx_do_file_open+0x10/0x10 [ 308.507676][ T9401] ? alloc_fd+0x471/0x7a0 [ 308.507717][ T9401] ? do_getname+0x191/0x390 [ 308.507747][ T9401] do_sys_openat2+0x10f/0x1e0 [ 308.507777][ T9401] ? __pfx_do_sys_openat2+0x10/0x10 [ 308.507808][ T9401] ? _raw_spin_unlock_irq+0x23/0x50 [ 308.507850][ T9401] __x64_sys_openat+0x12d/0x210 [ 308.507880][ T9401] ? __pfx___x64_sys_openat+0x10/0x10 [ 308.507921][ T9401] do_syscall_64+0x115/0x840 [ 308.507942][ T9401] ? clear_bhb_loop+0x40/0x90 [ 308.507971][ T9401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.507996][ T9401] RIP: 0033:0x7f27cf59de59 [ 308.508054][ T9401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.508079][ T9401] RSP: 002b:00007f27d0497028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 308.508102][ T9401] RAX: ffffffffffffffda RBX: 00007f27cf825fa0 RCX: 00007f27cf59de59 [ 308.508119][ T9401] RDX: 00000000001e0240 RSI: 00002000000011c0 RDI: ffffffffffffff9c [ 308.508134][ T9401] RBP: 00007f27cf633e6f R08: 0000000000000000 R09: 0000000000000000 [ 308.508149][ T9401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.508164][ T9401] R13: 00007f27cf826038 R14: 00007f27cf825fa0 R15: 00007ffde486d8a8 [ 308.508194][ T9401] [ 308.800251][ T9401] ERROR: Out of memory at tomoyo_realpath_from_path. [ 310.902978][ T9451] block2mtd: parameter too long [ 312.507444][ T9474] random: crng reseeded on system resumption [ 312.666897][ T5646] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 312.821818][ T5640] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 312.830273][ T5633] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 312.837857][ T4947] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 312.850387][ T7885] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 312.858171][ T7920] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 313.060976][ T7886] Bluetooth: hci10: Opcode 0x0c03 failed: -110 [ 313.069903][ T9456] Bluetooth: hci12: Opcode 0x0c03 failed: -110 [ 313.077423][ T9457] Bluetooth: hci11: Opcode 0x0c03 failed: -110 [ 313.087086][ T51] Bluetooth: hci13: Opcode 0x0c03 failed: -110 [ 313.140240][ T9459] Bluetooth: hci14: Opcode 0x0c03 failed: -110 [ 314.308492][ T9489] nvme_fabrics: missing parameter 'transport=%s' [ 314.456401][ T9489] nvme_fabrics: missing parameter 'nqn=%s' [ 315.305976][ T9494] Process accounting paused [ 315.836557][ T9527] futex_wake_op: syz.2.725 tries to shift op by -2048; fix this program [ 316.729618][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.739139][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.691002][ T9595] netlink: 'syz.1.741': attribute type 21 has an invalid length. [ 321.738705][ T9595] netlink: 326 bytes leftover after parsing attributes in process `syz.1.741'. [ 322.917951][ T9594] Process accounting paused [ 323.136399][ T9613] FAULT_INJECTION: forcing a failure. [ 323.136399][ T9613] name failslab, interval 1, probability 0, space 0, times 0 [ 323.188796][ T9613] CPU: 0 UID: 0 PID: 9613 Comm: syz.1.745 Tainted: G L syzkaller #0 PREEMPT(full) [ 323.188835][ T9613] Tainted: [L]=SOFTLOCKUP [ 323.188843][ T9613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 323.188858][ T9613] Call Trace: [ 323.188865][ T9613] [ 323.188875][ T9613] dump_stack_lvl+0x100/0x190 [ 323.188906][ T9613] should_fail_ex.cold+0x5/0xa [ 323.188933][ T9613] should_failslab+0xc2/0x120 [ 323.188964][ T9613] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 323.188998][ T9613] ? shmem_alloc_inode+0x25/0x50 [ 323.189029][ T9613] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 323.189061][ T9613] shmem_alloc_inode+0x25/0x50 [ 323.189097][ T9613] alloc_inode+0x68/0x250 [ 323.189127][ T9613] new_inode+0x22/0x1c0 [ 323.189157][ T9613] shmem_get_inode+0x1e3/0xf70 [ 323.189194][ T9613] ? __pfx_shmem_get_inode+0x10/0x10 [ 323.189235][ T9613] __shmem_file_setup+0x382/0x460 [ 323.189270][ T9613] ? __pfx___shmem_file_setup+0x10/0x10 [ 323.189308][ T9613] ? vm_area_alloc+0x1f/0x160 [ 323.189347][ T9613] shmem_zero_setup+0x96/0x1b0 [ 323.189374][ T9613] __mmap_region+0x24ef/0x2db0 [ 323.189419][ T9613] ? __pfx___mmap_region+0x10/0x10 [ 323.189456][ T9613] ? __pfx___might_resched+0x10/0x10 [ 323.189498][ T9613] ? __lock_acquire+0x49f/0x1a40 [ 323.189551][ T9613] ? __lock_acquire+0x49f/0x1a40 [ 323.189599][ T9613] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 323.189640][ T9613] ? rcu_is_watching+0x12/0xc0 [ 323.189666][ T9613] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 323.189691][ T9613] ? lockdep_hardirqs_on+0x78/0x100 [ 323.189773][ T9613] mmap_region+0x35d/0x620 [ 323.189798][ T9613] ? rcu_is_watching+0x12/0xc0 [ 323.189824][ T9613] ? __pfx_mmap_region+0x10/0x10 [ 323.189851][ T9613] ? cap_mmap_addr+0x4b/0x120 [ 323.189889][ T9613] ? bpf_lsm_mmap_addr+0x9/0x30 [ 323.189925][ T9613] ? security_mmap_addr+0x71/0x1e0 [ 323.189955][ T9613] ? __get_unmapped_area+0x255/0x3e0 [ 323.189991][ T9613] do_mmap+0xc63/0x12f0 [ 323.190027][ T9613] ? __pfx_do_mmap+0x10/0x10 [ 323.190058][ T9613] ? __pfx_down_write_killable+0x10/0x10 [ 323.190084][ T9613] ? __pfx_futex_wait+0x10/0x10 [ 323.190123][ T9613] vm_mmap_pgoff+0x29e/0x470 [ 323.190159][ T9613] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 323.190195][ T9613] ? __pfx_do_futex+0x10/0x10 [ 323.190224][ T9613] ksys_mmap_pgoff+0xe4/0x610 [ 323.190255][ T9613] ? __x64_sys_futex+0x358/0x4d0 [ 323.190279][ T9613] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 323.190310][ T9613] ? xfd_validate_state+0x129/0x190 [ 323.190342][ T9613] __x64_sys_mmap+0x125/0x190 [ 323.190372][ T9613] do_syscall_64+0x115/0x840 [ 323.190393][ T9613] ? clear_bhb_loop+0x40/0x90 [ 323.190423][ T9613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.190448][ T9613] RIP: 0033:0x7fb8e379de59 [ 323.190468][ T9613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.190492][ T9613] RSP: 002b:00007fb8e4681028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 323.190515][ T9613] RAX: ffffffffffffffda RBX: 00007fb8e3a25fa0 RCX: 00007fb8e379de59 [ 323.190531][ T9613] RDX: 00000000000000e2 RSI: 0000000000020009 RDI: 0000000000000000 [ 323.190546][ T9613] RBP: 00007fb8e3833e6f R08: 0000000000000405 R09: 0000000000008000 [ 323.190561][ T9613] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 323.190576][ T9613] R13: 00007fb8e3a26038 R14: 00007fb8e3a25fa0 R15: 00007ffd878270f8 [ 323.190606][ T9613] [ 323.971135][ T9615] vivid-007: ================= START STATUS ================= [ 323.994580][ T9615] vivid-007: Generate PTS: true [ 324.026599][ T9615] vivid-007: Generate SCR: true [ 324.045196][ T9615] tpg source WxH: 320x240 (Y'CbCr) [ 324.061330][ T9615] tpg field: 1 [ 324.072747][ T9615] tpg crop: (0,0)/320x240 [ 324.086471][ T9615] tpg compose: (0,0)/320x240 [ 324.112847][ T9615] tpg colorspace: 8 [ 324.140134][ T9615] tpg transfer function: 0/0 [ 324.161849][ T9615] tpg Y'CbCr encoding: 0/0 [ 324.175387][ T9615] tpg quantization: 0/0 [ 324.188388][ T9615] tpg RGB range: 0/2 [ 324.201379][ T9615] vivid-007: ================== END STATUS ================== [ 324.685842][ T9626] FAULT_INJECTION: forcing a failure. [ 324.685842][ T9626] name failslab, interval 1, probability 0, space 0, times 0 [ 324.737270][ T9626] CPU: 0 UID: 0 PID: 9626 Comm: syz.3.748 Tainted: G L syzkaller #0 PREEMPT(full) [ 324.737307][ T9626] Tainted: [L]=SOFTLOCKUP [ 324.737315][ T9626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 324.737329][ T9626] Call Trace: [ 324.737337][ T9626] [ 324.737346][ T9626] dump_stack_lvl+0x100/0x190 [ 324.737377][ T9626] should_fail_ex.cold+0x5/0xa [ 324.737403][ T9626] should_failslab+0xc2/0x120 [ 324.737433][ T9626] __kmalloc_cache_noprof+0x91/0x6c0 [ 324.737473][ T9626] ? proc_self_get_link+0x189/0x1f0 [ 324.737511][ T9626] proc_self_get_link+0x189/0x1f0 [ 324.737544][ T9626] pick_link+0xac2/0x13c0 [ 324.737575][ T9626] ? __pfx_proc_self_get_link+0x10/0x10 [ 324.737612][ T9626] step_into_slowpath+0x9ba/0xf90 [ 324.737650][ T9626] ? __pfx_step_into_slowpath+0x10/0x10 [ 324.737687][ T9626] ? lookup_fast+0x2da/0x600 [ 324.737715][ T9626] ? inode_permission+0x374/0x620 [ 324.737747][ T9626] link_path_walk+0xf28/0x1cc0 [ 324.737792][ T9626] path_openat+0x1c9/0x4280 [ 324.737828][ T9626] ? __kasan_slab_alloc+0x89/0x90 [ 324.737854][ T9626] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 324.737879][ T9626] ? do_getname+0x35/0x390 [ 324.737904][ T9626] ? __x64_sys_openat+0x12d/0x210 [ 324.737942][ T9626] ? __pfx_path_openat+0x10/0x10 [ 324.737994][ T9626] do_file_open+0x20e/0x430 [ 324.738034][ T9626] ? __pfx_do_file_open+0x10/0x10 [ 324.738092][ T9626] ? alloc_fd+0x471/0x7a0 [ 324.738131][ T9626] ? do_getname+0x191/0x390 [ 324.738159][ T9626] do_sys_openat2+0x10f/0x1e0 [ 324.738188][ T9626] ? __pfx_do_sys_openat2+0x10/0x10 [ 324.738227][ T9626] __x64_sys_openat+0x12d/0x210 [ 324.738256][ T9626] ? __pfx___x64_sys_openat+0x10/0x10 [ 324.738296][ T9626] do_syscall_64+0x115/0x840 [ 324.738317][ T9626] ? clear_bhb_loop+0x40/0x90 [ 324.738346][ T9626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.738370][ T9626] RIP: 0033:0x7fdcde75e68e [ 324.738389][ T9626] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 324.738412][ T9626] RSP: 002b:00007fdcdf63bec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 324.738434][ T9626] RAX: ffffffffffffffda RBX: 00007fdcdf63c6c0 RCX: 00007fdcde75e68e [ 324.738450][ T9626] RDX: 0000000000000002 RSI: 00007fdcdf63bf90 RDI: ffffffffffffff9c [ 324.738465][ T9626] RBP: 00007fdcde833e6f R08: 0000000000000000 R09: 0000000000000000 [ 324.738480][ T9626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.738493][ T9626] R13: 00007fdcdea26038 R14: 00007fdcdea25fa0 R15: 00007ffd632ae6e8 [ 324.738523][ T9626] [ 330.061366][ T9659] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 330.108767][ T9667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.756'. [ 330.345943][ T9666] random: crng reseeded on system resumption [ 331.894330][ T9686] openvswitch: netlink: Key type 303 is out of range max 32 [ 332.019881][ T9695] random: crng reseeded on system resumption [ 333.222638][ T9718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.766'. [ 333.596223][ T9722] program syz.0.767 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 334.004471][ T9726] nbd: must specify at least one socket [ 334.146127][ T9726] ptp ptp0: new virtual clock ptp1 [ 334.190341][ T9726] ptp ptp0: new virtual clock ptp2 [ 334.226784][ T9726] ptp ptp0: new virtual clock ptp3 [ 334.265889][ T9726] ptp ptp0: new virtual clock ptp4 [ 334.319506][ T9726] ptp ptp0: new virtual clock ptp5 [ 334.358722][ T9726] ptp ptp0: new virtual clock ptp6 [ 334.394024][ T9726] ptp ptp0: new virtual clock ptp7 [ 334.458224][ T9726] ptp ptp0: new virtual clock ptp8 [ 334.511088][ T9726] ptp ptp0: new virtual clock ptp9 [ 334.539471][ T9726] ptp ptp0: new virtual clock ptp10 [ 334.594141][ T9726] ptp ptp0: new virtual clock ptp11 [ 334.635612][ T9726] ptp ptp0: new virtual clock ptp12 [ 334.660489][ T9726] ptp ptp0: new virtual clock ptp13 [ 334.685511][ T9726] ptp ptp0: new virtual clock ptp14 [ 334.723913][ T9726] ptp ptp0: new virtual clock ptp15 [ 334.747257][ T9726] ptp ptp0: guarantee physical clock free running [ 336.701097][ T9761] kexec: Could not allocate control_code_buffer [ 337.147754][ T9789] overlayfs: missing 'lowerdir' [ 337.440209][ T9772] Process accounting paused [ 338.209610][ T9810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.786'. [ 338.243445][ T30] audit: type=1800 audit(1784068922.559:8): pid=9802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.784" name="version" dev="configfs" ino=32209 res=0 errno=0 [ 338.757729][ T9825] random: crng reseeded on system resumption [ 339.993891][ T9847] zram: Added device: zram1 [ 341.562848][ T9869] futex_wake_op: syz.3.799 tries to shift op by -2048; fix this program [ 341.629835][ T9869] futex_wake_op: syz.3.799 tries to shift op by -2048; fix this program [ 341.758139][ T9869] FAULT_INJECTION: forcing a failure. [ 341.758139][ T9869] name failslab, interval 1, probability 0, space 0, times 0 [ 341.826581][ T9869] CPU: 0 UID: 0 PID: 9869 Comm: syz.3.799 Tainted: G L syzkaller #0 PREEMPT(full) [ 341.826620][ T9869] Tainted: [L]=SOFTLOCKUP [ 341.826628][ T9869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 341.826646][ T9869] Call Trace: [ 341.826653][ T9869] [ 341.826663][ T9869] dump_stack_lvl+0x100/0x190 [ 341.826694][ T9869] should_fail_ex.cold+0x5/0xa [ 341.826721][ T9869] should_failslab+0xc2/0x120 [ 341.826752][ T9869] kmem_cache_alloc_noprof+0x91/0x6a0 [ 341.826779][ T9869] ? __pfx_map_id_range_down+0x10/0x10 [ 341.826811][ T9869] ? security_inode_alloc+0x3b/0x2c0 [ 341.826840][ T9869] security_inode_alloc+0x3b/0x2c0 [ 341.826865][ T9869] inode_init_always_gfp+0xc77/0xfb0 [ 341.826907][ T9869] alloc_inode+0x8e/0x250 [ 341.826935][ T9869] create_pipe_files+0x4c/0x970 [ 341.826961][ T9869] do_pipe2+0xbd/0x1e0 [ 341.826982][ T9869] ? __pfx_do_pipe2+0x10/0x10 [ 341.827014][ T9869] __x64_sys_pipe+0x33/0x50 [ 341.827036][ T9869] do_syscall_64+0x115/0x840 [ 341.827064][ T9869] ? clear_bhb_loop+0x40/0x90 [ 341.827095][ T9869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.827119][ T9869] RIP: 0033:0x7fdcde79de59 [ 341.827138][ T9869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.827163][ T9869] RSP: 002b:00007fdcdf63c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 341.827185][ T9869] RAX: ffffffffffffffda RBX: 00007fdcdea25fa0 RCX: 00007fdcde79de59 [ 341.827202][ T9869] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000500 [ 341.827216][ T9869] RBP: 00007fdcde833e6f R08: 0000000000000000 R09: 0000000000000000 [ 341.827231][ T9869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 341.827245][ T9869] R13: 00007fdcdea26038 R14: 00007fdcdea25fa0 R15: 00007ffd632ae6e8 [ 341.827275][ T9869] [ 342.292755][ T9876] FAULT_INJECTION: forcing a failure. [ 342.292755][ T9876] name fail_futex, interval 1, probability 0, space 0, times 0 [ 342.323863][ T9876] CPU: 0 UID: 0 PID: 9876 Comm: syz.1.801 Tainted: G L syzkaller #0 PREEMPT(full) [ 342.323903][ T9876] Tainted: [L]=SOFTLOCKUP [ 342.323911][ T9876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 342.323926][ T9876] Call Trace: [ 342.323934][ T9876] [ 342.323943][ T9876] dump_stack_lvl+0x100/0x190 [ 342.323974][ T9876] should_fail_ex.cold+0x5/0xa [ 342.324000][ T9876] get_futex_key+0x1d2/0x14f0 [ 342.324042][ T9876] ? __pfx_get_futex_key+0x10/0x10 [ 342.324081][ T9876] ? rcu_is_watching+0x12/0xc0 [ 342.324108][ T9876] ? sock_write_iter+0x31d/0x5b0 [ 342.324143][ T9876] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.324184][ T9876] futex_wake+0xf4/0x5e0 [ 342.324216][ T9876] ? __pfx_futex_wake+0x10/0x10 [ 342.324249][ T9876] ? rw_verify_area+0xce/0x6d0 [ 342.324284][ T9876] ? vfs_write+0x15d/0x1050 [ 342.324325][ T9876] do_futex+0x2b2/0x440 [ 342.324350][ T9876] ? __pfx_do_futex+0x10/0x10 [ 342.324388][ T9876] __x64_sys_futex+0x34f/0x4d0 [ 342.324415][ T9876] ? fput+0x79/0x100 [ 342.324439][ T9876] ? __pfx___x64_sys_futex+0x10/0x10 [ 342.324463][ T9876] ? ksys_write+0x1ac/0x250 [ 342.324498][ T9876] ? __pfx_ksys_write+0x10/0x10 [ 342.324543][ T9876] do_syscall_64+0x115/0x840 [ 342.324565][ T9876] ? clear_bhb_loop+0x40/0x90 [ 342.324595][ T9876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.324620][ T9876] RIP: 0033:0x7fb8e379de59 [ 342.324640][ T9876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.324664][ T9876] RSP: 002b:00007fb8e46810e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 342.324687][ T9876] RAX: ffffffffffffffda RBX: 00007fb8e3a25fa8 RCX: 00007fb8e379de59 [ 342.324703][ T9876] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb8e3a25fac [ 342.324718][ T9876] RBP: 00007fb8e3a25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 342.324732][ T9876] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000000 [ 342.324747][ T9876] R13: 00007fb8e3a26038 R14: 00007ffd87827010 R15: 00007ffd878270f8 [ 342.324778][ T9876] [ 345.131467][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.811'. [ 346.187909][ T9929] Process accounting resumed [ 346.661664][ T9459] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 346.731352][ T9960] FAULT_INJECTION: forcing a failure. [ 346.731352][ T9960] name fail_futex, interval 1, probability 0, space 0, times 0 [ 346.798567][ T9960] CPU: 0 UID: 0 PID: 9960 Comm: syz.1.815 Tainted: G L syzkaller #0 PREEMPT(full) [ 346.798605][ T9960] Tainted: [L]=SOFTLOCKUP [ 346.798613][ T9960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 346.798627][ T9960] Call Trace: [ 346.798634][ T9960] [ 346.798642][ T9960] dump_stack_lvl+0x100/0x190 [ 346.798672][ T9960] should_fail_ex.cold+0x5/0xa [ 346.798697][ T9960] get_futex_key+0x1d2/0x14f0 [ 346.798738][ T9960] ? __pfx_get_futex_key+0x10/0x10 [ 346.798774][ T9960] ? lock_acquire+0x1b9/0x370 [ 346.798815][ T9960] futex_wake+0xf4/0x5e0 [ 346.798845][ T9960] ? __pfx_futex_wake+0x10/0x10 [ 346.798873][ T9960] ? find_held_lock+0x2b/0x80 [ 346.798899][ T9960] ? exit_mm_release+0x19/0x30 [ 346.798931][ T9960] do_futex+0x2b2/0x440 [ 346.798963][ T9960] ? __pfx_do_futex+0x10/0x10 [ 346.798984][ T9960] ? __might_fault+0xc5/0x140 [ 346.799013][ T9960] mm_release+0x24a/0x2f0 [ 346.799035][ T9960] do_exit+0x707/0x2ae0 [ 346.799069][ T9960] ? __pfx_do_exit+0x10/0x10 [ 346.799097][ T9960] ? do_raw_spin_lock+0x128/0x260 [ 346.799119][ T9960] ? find_held_lock+0x2b/0x80 [ 346.799144][ T9960] ? get_signal+0x7e0/0x21e0 [ 346.799169][ T9960] do_group_exit+0xd5/0x2a0 [ 346.799201][ T9960] get_signal+0x1ec7/0x21e0 [ 346.799234][ T9960] ? __pfx_get_signal+0x10/0x10 [ 346.799258][ T9960] ? do_futex+0x190/0x440 [ 346.799283][ T9960] arch_do_signal_or_restart+0x91/0x7a0 [ 346.799318][ T9960] ? rcu_is_watching+0x12/0xc0 [ 346.799343][ T9960] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 346.799401][ T9960] exit_to_user_mode_loop+0x139/0x6f0 [ 346.799438][ T9960] ? rcu_is_watching+0x12/0xc0 [ 346.799465][ T9960] do_syscall_64+0x652/0x840 [ 346.799486][ T9960] ? clear_bhb_loop+0x40/0x90 [ 346.799514][ T9960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.799537][ T9960] RIP: 0033:0x7fb8e379de59 [ 346.799556][ T9960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.799579][ T9960] RSP: 002b:00007fb8e463f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 346.799601][ T9960] RAX: fffffffffffffe00 RBX: 00007fb8e3a26188 RCX: 00007fb8e379de59 [ 346.799617][ T9960] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb8e3a26188 [ 346.799632][ T9960] RBP: 00007fb8e3a26180 R08: 0000000000000000 R09: 0000000000000000 [ 346.799646][ T9960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.799660][ T9960] R13: 00007fb8e3a26218 R14: 00007ffd87827010 R15: 00007ffd878270f8 [ 346.799690][ T9960] [ 348.716589][ T9459] Bluetooth: hci3: command 0x0406 tx timeout [ 349.788732][T10027] FAULT_INJECTION: forcing a failure. [ 349.788732][T10027] name failslab, interval 1, probability 0, space 0, times 0 [ 349.869147][T10027] CPU: 0 UID: 0 PID: 10027 Comm: syz.1.829 Tainted: G L syzkaller #0 PREEMPT(full) [ 349.869186][T10027] Tainted: [L]=SOFTLOCKUP [ 349.869195][T10027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 349.869210][T10027] Call Trace: [ 349.869217][T10027] [ 349.869227][T10027] dump_stack_lvl+0x100/0x190 [ 349.869258][T10027] should_fail_ex.cold+0x5/0xa [ 349.869285][T10027] should_failslab+0xc2/0x120 [ 349.869317][T10027] __kmalloc_noprof+0xfc/0x820 [ 349.869345][T10027] ? sk_prot_alloc+0x10b/0x2a0 [ 349.869383][T10027] sk_prot_alloc+0x10b/0x2a0 [ 349.869418][T10027] sk_alloc+0x36/0xe80 [ 349.869445][T10027] __netlink_create+0x5e/0x2c0 [ 349.869475][T10027] ? __wake_up+0x3f/0x60 [ 349.869506][T10027] netlink_create+0x29b/0x610 [ 349.869538][T10027] ? __pfx_genl_bind+0x10/0x10 [ 349.869559][T10027] ? __pfx_genl_unbind+0x10/0x10 [ 349.869595][T10027] ? __pfx_genl_release+0x10/0x10 [ 349.869621][T10027] __sock_create+0x339/0x860 [ 349.869662][T10027] __sys_socket+0x14d/0x260 [ 349.869701][T10027] ? exc_page_fault+0x6f/0xd0 [ 349.869738][T10027] ? __pfx___sys_socket+0x10/0x10 [ 349.869784][T10027] __x64_sys_socket+0x72/0xb0 [ 349.869827][T10027] ? lockdep_hardirqs_on+0x78/0x100 [ 349.869866][T10027] do_syscall_64+0x115/0x840 [ 349.869887][T10027] ? clear_bhb_loop+0x40/0x90 [ 349.869917][T10027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.869941][T10027] RIP: 0033:0x7fb8e379f6c7 [ 349.869961][T10027] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.869984][T10027] RSP: 002b:00007fb8e467ff98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 349.870007][T10027] RAX: ffffffffffffffda RBX: 00007fb8e3a25fa0 RCX: 00007fb8e379f6c7 [ 349.870022][T10027] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 349.870037][T10027] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 349.870051][T10027] R10: 0000200000000040 R11: 0000000000000286 R12: 0000000000000000 [ 349.870066][T10027] R13: 00007fb8e3a26038 R14: 00007fb8e3a25fa0 R15: 00007ffd878270f8 [ 349.870129][T10027] [ 350.840327][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 352.548707][T10066] netlink: 'syz.3.836': attribute type 11 has an invalid length. [ 353.662560][T10053] Process accounting resumed [ 355.098452][T10085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.838'. [ 355.244853][T10089] nfs: Bad value for 'source' [ 359.654659][T10151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.853'. [ 361.616995][ T5364] Process accounting resumed [ 362.024156][T10180] Process accounting resumed [ 362.736420][T10212] WARNING! power/level is deprecated; use power/control instead [ 368.249011][T10282] NFSD: Failed to start, no listeners configured. [ 368.491277][T10296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.877'. [ 368.881414][T10294] FAULT_INJECTION: forcing a failure. [ 368.881414][T10294] name failslab, interval 1, probability 0, space 0, times 0 [ 368.989665][T10294] CPU: 0 UID: 0 PID: 10294 Comm: syz.0.878 Tainted: G L syzkaller #0 PREEMPT(full) [ 368.989706][T10294] Tainted: [L]=SOFTLOCKUP [ 368.989715][T10294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 368.989730][T10294] Call Trace: [ 368.989737][T10294] [ 368.989747][T10294] dump_stack_lvl+0x100/0x190 [ 368.989778][T10294] should_fail_ex.cold+0x5/0xa [ 368.989805][T10294] should_failslab+0xc2/0x120 [ 368.989837][T10294] kmem_cache_alloc_noprof+0x91/0x6a0 [ 368.989864][T10294] ? __pfx_map_id_range_down+0x10/0x10 [ 368.989895][T10294] ? rcu_is_watching+0x12/0xc0 [ 368.989921][T10294] ? security_inode_alloc+0x3b/0x2c0 [ 368.989950][T10294] security_inode_alloc+0x3b/0x2c0 [ 368.989976][T10294] inode_init_always_gfp+0xc77/0xfb0 [ 368.990019][T10294] alloc_inode+0x8e/0x250 [ 368.990047][T10294] new_inode+0x22/0x1c0 [ 368.990079][T10294] proc_pid_make_inode+0x22/0x160 [ 368.990114][T10294] proc_pident_instantiate+0x85/0x310 [ 368.990160][T10294] proc_pident_lookup+0x1e3/0x270 [ 368.990197][T10294] ? __pfx_down_read+0x10/0x10 [ 368.990227][T10294] __lookup_slow+0x155/0x320 [ 368.990259][T10294] lookup_slow+0x50/0x70 [ 368.990287][T10294] link_path_walk+0x1712/0x1cc0 [ 368.990333][T10294] path_lookupat+0x74/0xc40 [ 368.990372][T10294] filename_lookup+0x202/0x590 [ 368.990411][T10294] ? __pfx_filename_lookup+0x10/0x10 [ 368.990462][T10294] ? __pfx_kfree_link+0x10/0x10 [ 368.990502][T10294] ? __asan_memcpy+0x3c/0x60 [ 368.990525][T10294] ? do_getname_kernel+0x1be/0x250 [ 368.990553][T10294] kern_path+0x37/0x50 [ 368.990587][T10294] tomoyo_realpath_nofollow+0x8c/0x100 [ 368.990622][T10294] ? __pfx_tomoyo_realpath_nofollow+0x10/0x10 [ 368.990658][T10294] ? tomoyo_profile+0x47/0x60 [ 368.990696][T10294] ? tomoyo_init_request_info+0x101/0x370 [ 368.990723][T10294] tomoyo_find_next_domain+0x2a8/0x2010 [ 368.990770][T10294] ? __pfx___kernel_read+0x10/0x10 [ 368.990805][T10294] ? __pfx___might_resched+0x10/0x10 [ 368.990846][T10294] ? __pfx_tomoyo_find_next_domain+0x10/0x10 [ 368.990899][T10294] tomoyo_bprm_check_security+0x12d/0x1d0 [ 368.990936][T10294] ? tomoyo_bprm_check_security+0x11f/0x1d0 [ 368.990976][T10294] security_bprm_check+0x87/0x1e0 [ 368.991015][T10294] bprm_execve+0x84b/0x1730 [ 368.991055][T10294] ? __pfx_bprm_execve+0x10/0x10 [ 368.991088][T10294] ? copy_string_kernel+0x339/0x3f0 [ 368.991132][T10294] do_execveat_common.isra.0+0x4a5/0x580 [ 368.991174][T10294] __x64_sys_execveat+0xdf/0x130 [ 368.991212][T10294] do_syscall_64+0x115/0x840 [ 368.991233][T10294] ? clear_bhb_loop+0x40/0x90 [ 368.991263][T10294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.991288][T10294] RIP: 0033:0x7f27cf59de59 [ 368.991308][T10294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.991332][T10294] RSP: 002b:00007f27d0497028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 368.991355][T10294] RAX: ffffffffffffffda RBX: 00007f27cf825fa0 RCX: 00007f27cf59de59 [ 368.991372][T10294] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000008 [ 368.991386][T10294] RBP: 00007f27cf633e6f R08: 0000000000000000 R09: 0000000000000000 [ 368.991401][T10294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.991415][T10294] R13: 00007f27cf826038 R14: 00007f27cf825fa0 R15: 00007ffde486d8a8 [ 368.991446][T10294] [ 370.057900][T10301] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5631] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[10301] [ 372.627790][T10312] bridge0: port 3(veth1) entered blocking state [ 372.680035][T10312] bridge0: port 3(veth1) entered disabled state [ 372.738259][T10312] veth1: entered allmulticast mode [ 372.785357][T10312] veth1: entered promiscuous mode [ 372.821687][T10312] bridge0: port 3(veth1) entered blocking state [ 372.828161][T10312] bridge0: port 3(veth1) entered forwarding state [ 373.644263][ T9459] Bluetooth: hci2: unexpected event 0x3e length: 508 > 260 [ 373.645646][ T9459] Bluetooth: hci2: unexpected subevent 0x02 length: 507 > 260 [ 373.661066][ T9459] Bluetooth: hci2: Dropping invalid advertising data [ 373.668921][ T9459] Bluetooth: hci2: unknown advertising packet type: 0xe9 [ 373.668961][ T9459] Bluetooth: hci2: Dropping invalid advertising data [ 373.683301][ T9459] Bluetooth: hci2: Malformed LE Event: 0x02 [ 373.981677][ T9459] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 373.981709][ T9459] Bluetooth: hci3: unexpected subevent 0x0e length: 725 > 15 [ 373.996781][ T9459] Bluetooth: hci3: Unable to find connection for dst 00:a2:f2:94:be:ca sid 0xa1 [ 374.999150][T10359] futex_wake_op: syz.2.892 tries to shift op by -1; fix this program [ 375.328993][T10341] kexec: Could not allocate control_code_buffer [ 376.062656][T10330] Process accounting paused [ 376.792244][T10377] netlink: 2468 bytes leftover after parsing attributes in process `syz.0.896'. [ 377.843348][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.850362][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.934731][T10395] netlink: 342 bytes leftover after parsing attributes in process `syz.3.901'. [ 380.360342][T10437] FAULT_INJECTION: forcing a failure. [ 380.360342][T10437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.446381][T10437] CPU: 0 UID: 0 PID: 10437 Comm: syz.3.911 Tainted: G L syzkaller #0 PREEMPT(full) [ 380.446421][T10437] Tainted: [L]=SOFTLOCKUP [ 380.446429][T10437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 380.446444][T10437] Call Trace: [ 380.446452][T10437] [ 380.446460][T10437] dump_stack_lvl+0x100/0x190 [ 380.446492][T10437] should_fail_ex.cold+0x5/0xa [ 380.446519][T10437] strncpy_from_user+0x3b/0x2d0 [ 380.446563][T10437] do_getname+0x78/0x390 [ 380.446594][T10437] do_sys_openat2+0xc7/0x1e0 [ 380.446623][T10437] ? __pfx_do_sys_openat2+0x10/0x10 [ 380.446655][T10437] ? lsm_blob_alloc+0x68/0x90 [ 380.446696][T10437] __x64_sys_openat+0x12d/0x210 [ 380.446726][T10437] ? __pfx___x64_sys_openat+0x10/0x10 [ 380.446771][T10437] do_syscall_64+0x115/0x840 [ 380.446793][T10437] ? clear_bhb_loop+0x40/0x90 [ 380.446822][T10437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.446847][T10437] RIP: 0033:0x7fdcde79de59 [ 380.446867][T10437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.446890][T10437] RSP: 002b:00007fdcdf63c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 380.446913][T10437] RAX: ffffffffffffffda RBX: 00007fdcdea25fa0 RCX: 00007fdcde79de59 [ 380.446929][T10437] RDX: 0000000000102800 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 380.446944][T10437] RBP: 00007fdcde833e6f R08: 0000000000000000 R09: 0000000000000000 [ 380.446958][T10437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.446972][T10437] R13: 00007fdcdea26038 R14: 00007fdcdea25fa0 R15: 00007ffd632ae6e8 [ 380.447002][T10437] [ 381.990561][T10477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.921'. [ 382.729556][T10493] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 383.343787][T10508] random: crng reseeded on system resumption [ 383.417370][ T30] audit: type=1800 audit(4294967330.400:9): pid=10508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.927" name="members" dev="configfs" ino=36187 res=0 errno=0 [ 383.633405][T10512] netlink: 28 bytes leftover after parsing attributes in process `syz.2.928'. [ 383.718938][T10508] Process accounting paused [ 383.932393][ T30] audit: type=1800 audit(4294967330.923:10): pid=10514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.929" name="features" dev="configfs" ino=36247 res=0 errno=0 [ 384.246412][T10519] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 385.588236][T10542] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 389.085735][T10599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.948'. [ 393.496502][T10651] Process accounting paused [ 393.591453][T10686] netlink: 342 bytes leftover after parsing attributes in process `syz.2.968'. [ 393.845103][ T9459] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 394.192871][T10693] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20000 [ 394.253068][T10693] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 394.299949][T10693] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 394.348419][T10693] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 394.382563][T10693] page dumped because: unmovable page [ 394.417797][T10693] page_owner tracks the page as allocated [ 394.464750][T10693] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 1623803306, free_ts 0 [ 394.537569][T10693] register_early_stack+0x74/0xaf [ 394.588393][T10693] init_page_owner+0x4c/0xa10 [ 394.618273][T10693] page_ext_init+0x71d/0x780 [ 394.643861][T10693] mm_core_init+0x229/0x270 [ 394.680851][T10693] page_owner free stack trace missing [ 395.244666][T10721] random: crng reseeded on system resumption [ 399.503929][ T30] audit: type=1800 audit(4294967346.582:11): pid=10789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.996" name="version" dev="configfs" ino=37817 res=0 errno=0 [ 400.387335][ T9459] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 400.387368][ T9459] Bluetooth: hci2: unexpected subevent 0x0e length: 725 > 15 [ 400.403308][ T9459] Bluetooth: hci2: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 405.981580][T10902] Process accounting resumed [ 407.465701][ T30] audit: type=1804 audit(4294967354.587:12): pid=10936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1030" name="file0" dev="tmpfs" ino=1561 res=1 errno=0 [ 408.028877][T10939] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5639] was attempted by ""[10939] [ 409.928527][T10972] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1039'. [ 409.974312][ T30] audit: type=1326 audit(4294967357.111:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10965 comm="syz.0.1038" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f27cf59de59 code=0x0 [ 410.070037][T10973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1038'. [ 410.239762][T10977] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1040'. [ 412.776592][ T30] audit: type=1804 audit(4294967359.937:14): pid=11034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1053" name="file0" dev="tmpfs" ino=1598 res=1 errno=0 [ 413.799718][T11045] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1054'. [ 413.926085][T11045] Process accounting resumed [ 414.088089][T11047] FAULT_INJECTION: forcing a failure. [ 414.088089][T11047] name failslab, interval 1, probability 0, space 0, times 0 [ 414.158670][T11047] CPU: 0 UID: 0 PID: 11047 Comm: syz.1.1055 Tainted: G L syzkaller #0 PREEMPT(full) [ 414.158708][T11047] Tainted: [L]=SOFTLOCKUP [ 414.158717][T11047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 414.158730][T11047] Call Trace: [ 414.158738][T11047] [ 414.158746][T11047] dump_stack_lvl+0x100/0x190 [ 414.158777][T11047] should_fail_ex.cold+0x5/0xa [ 414.158802][T11047] should_failslab+0xc2/0x120 [ 414.158832][T11047] __kvmalloc_node_noprof+0x116/0x970 [ 414.158858][T11047] ? __lock_acquire+0x49f/0x1a40 [ 414.158893][T11047] ? traverse.part.0.constprop.0+0x397/0x650 [ 414.158934][T11047] traverse.part.0.constprop.0+0x397/0x650 [ 414.158977][T11047] seq_read_iter+0x93f/0x1270 [ 414.159012][T11047] ? aa_file_perm+0x7f3/0x14d0 [ 414.159082][T11047] seq_read+0x344/0x4d0 [ 414.159115][T11047] ? __pfx_seq_read+0x10/0x10 [ 414.159166][T11047] ? __pfx_seq_read+0x10/0x10 [ 414.159199][T11047] proc_reg_read+0x240/0x330 [ 414.159234][T11047] ? __pfx_proc_reg_read+0x10/0x10 [ 414.159271][T11047] vfs_read+0x1e4/0xb40 [ 414.159308][T11047] ? __pfx_vfs_read+0x10/0x10 [ 414.159340][T11047] ? find_held_lock+0x2b/0x80 [ 414.159366][T11047] ? __fget_files+0x215/0x3d0 [ 414.159400][T11047] ? __fget_files+0x215/0x3d0 [ 414.159438][T11047] ? __fget_files+0x21f/0x3d0 [ 414.159480][T11047] __x64_sys_pread64+0x1eb/0x250 [ 414.159518][T11047] ? __pfx___x64_sys_pread64+0x10/0x10 [ 414.159563][T11047] do_syscall_64+0x115/0x840 [ 414.159583][T11047] ? clear_bhb_loop+0x40/0x90 [ 414.159611][T11047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.159635][T11047] RIP: 0033:0x7fb8e379de59 [ 414.159653][T11047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.159680][T11047] RSP: 002b:00007fb8e4681028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 414.159702][T11047] RAX: ffffffffffffffda RBX: 00007fb8e3a25fa0 RCX: 00007fb8e379de59 [ 414.159718][T11047] RDX: 00000004000003f1 RSI: 0000200000000000 RDI: 0000000000000003 [ 414.159732][T11047] RBP: 00007fb8e4681090 R08: 0000000000000000 R09: 0000000000000000 [ 414.159746][T11047] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 414.159760][T11047] R13: 00007fb8e3a26038 R14: 00007fb8e3a25fa0 R15: 00007ffd878270f8 [ 414.159790][T11047] [ 416.760866][T11078] binder: 11069:11078 ioctl c0306201 0 returned -14 [ 417.183565][T11079] Process accounting resumed [ 417.543970][T11094] cifs: Unknown parameter 'no+ 1`rsFn)aHāh`9kA}1\D@.ZCg^' [ 419.374309][T11132] FAULT_INJECTION: forcing a failure. [ 419.374309][T11132] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 419.443758][T11132] CPU: 0 UID: 0 PID: 11132 Comm: syz.3.1075 Tainted: G L syzkaller #0 PREEMPT(full) [ 419.443801][T11132] Tainted: [L]=SOFTLOCKUP [ 419.443809][T11132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 419.443824][T11132] Call Trace: [ 419.443831][T11132] [ 419.443840][T11132] dump_stack_lvl+0x100/0x190 [ 419.443872][T11132] should_fail_ex.cold+0x5/0xa [ 419.443894][T11132] ? prepare_alloc_pages+0x16d/0x5f0 [ 419.443930][T11132] should_fail_alloc_page+0xeb/0x140 [ 419.443964][T11132] prepare_alloc_pages+0x1f0/0x5f0 [ 419.443997][T11132] ? rcu_is_watching+0x12/0xc0 [ 419.444026][T11132] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 419.444059][T11132] ? find_held_lock+0x2b/0x80 [ 419.444086][T11132] ? finish_task_switch.isra.0+0x2c0/0x10c0 [ 419.444114][T11132] ? mark_held_locks+0x40/0x70 [ 419.444148][T11132] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 419.444172][T11132] ? lockdep_hardirqs_on+0x78/0x100 [ 419.444211][T11132] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 419.444239][T11132] ? rcu_is_watching+0x12/0xc0 [ 419.444265][T11132] ? trace_sched_exit_tp+0x120/0x160 [ 419.444293][T11132] ? __schedule+0x126e/0x6730 [ 419.444344][T11132] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 419.444379][T11132] ? policy_nodemask+0xed/0x4f0 [ 419.444414][T11132] alloc_pages_mpol+0x1fb/0x540 [ 419.444447][T11132] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 419.444487][T11132] alloc_pages_noprof+0x1a/0x160 [ 419.444524][T11132] pte_alloc_one+0x1c/0x3d0 [ 419.444560][T11132] __pte_alloc+0x6d/0x3e0 [ 419.444597][T11132] ? __pfx___pte_alloc+0x10/0x10 [ 419.444626][T11132] ? _raw_spin_unlock+0x28/0x50 [ 419.444659][T11132] ? __pmd_alloc+0x3fb/0x950 [ 419.444694][T11132] move_page_tables+0x2ec4/0x4610 [ 419.444720][T11132] ? __pfx_copy_vma+0x10/0x10 [ 419.444753][T11132] ? __pfx_move_page_tables+0x10/0x10 [ 419.444798][T11132] copy_vma_and_data+0x25c/0x7c0 [ 419.444825][T11132] ? __pfx_copy_vma_and_data+0x10/0x10 [ 419.444861][T11132] ? __vma_start_write+0x17f/0x280 [ 419.444897][T11132] ? __pfx___vma_start_write+0x10/0x10 [ 419.444941][T11132] move_vma+0x574/0x1920 [ 419.444969][T11132] ? __pfx_move_vma+0x10/0x10 [ 419.444995][T11132] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 419.445028][T11132] ? cap_mmap_addr+0x4b/0x120 [ 419.445065][T11132] ? bpf_lsm_mmap_addr+0x9/0x30 [ 419.445102][T11132] ? security_mmap_addr+0x71/0x1e0 [ 419.445131][T11132] ? __get_unmapped_area+0x255/0x3e0 [ 419.445166][T11132] ? vrm_set_new_addr+0x204/0x290 [ 419.445192][T11132] mremap_to+0x234/0x4c0 [ 419.445213][T11132] ? mas_walk+0x6ef/0x9b0 [ 419.445234][T11132] ? __pfx_mremap_to+0x10/0x10 [ 419.445264][T11132] __do_sys_mremap+0x88c/0x1850 [ 419.445297][T11132] ? __pfx___do_sys_mremap+0x10/0x10 [ 419.445320][T11132] ? ksys_write+0x190/0x250 [ 419.445363][T11132] ? __pfx_do_futex+0x10/0x10 [ 419.445394][T11132] ? __x64_sys_futex+0x34f/0x4d0 [ 419.445435][T11132] do_syscall_64+0x115/0x840 [ 419.445456][T11132] ? clear_bhb_loop+0x40/0x90 [ 419.445486][T11132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.445511][T11132] RIP: 0033:0x7fdcde79de59 [ 419.445530][T11132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.445554][T11132] RSP: 002b:00007fdcdf61b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 419.445582][T11132] RAX: ffffffffffffffda RBX: 00007fdcdea26090 RCX: 00007fdcde79de59 [ 419.445598][T11132] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 419.445612][T11132] RBP: 00007fdcde833e6f R08: 0000000100000000 R09: 0000000000000000 [ 419.445627][T11132] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 419.445642][T11132] R13: 00007fdcdea26128 R14: 00007fdcdea26090 R15: 00007ffd632ae6e8 [ 419.445672][T11132] [ 420.846497][T11096] kexec: Could not allocate control_code_buffer [ 423.193301][ T30] audit: type=1806 audit(4294967370.366:15): xattr="" res=-22 [ 424.608537][T11193] FAULT_INJECTION: forcing a failure. [ 424.608537][T11193] name failslab, interval 1, probability 0, space 0, times 0 [ 424.740794][T11193] CPU: 0 UID: 0 PID: 11193 Comm: syz.1.1086 Tainted: G L syzkaller #0 PREEMPT(full) [ 424.740833][T11193] Tainted: [L]=SOFTLOCKUP [ 424.740842][T11193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 424.740856][T11193] Call Trace: [ 424.740864][T11193] [ 424.740874][T11193] dump_stack_lvl+0x100/0x190 [ 424.740905][T11193] should_fail_ex.cold+0x5/0xa [ 424.740932][T11193] should_failslab+0xc2/0x120 [ 424.740964][T11193] __kmalloc_flags_noprof+0x115/0x890 [ 424.741006][T11193] ? alloc_slab_obj_exts+0xb2/0x250 [ 424.741050][T11193] alloc_slab_obj_exts+0xb2/0x250 [ 424.741109][T11193] __memcg_slab_post_alloc_hook+0x3d4/0x1160 [ 424.741154][T11193] ? kasan_save_track+0x14/0x30 [ 424.741184][T11193] kmem_cache_alloc_noprof+0x587/0x6a0 [ 424.741212][T11193] ? do_epoll_ctl_file+0xccd/0x3640 [ 424.741243][T11193] do_epoll_ctl_file+0xccd/0x3640 [ 424.741270][T11193] ? rcu_is_watching+0x12/0xc0 [ 424.741305][T11193] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 424.741337][T11193] ? __fget_files+0x215/0x3d0 [ 424.741377][T11193] ? __fget_files+0x21f/0x3d0 [ 424.741419][T11193] ? do_epoll_ctl+0xfd/0x1a0 [ 424.741442][T11193] do_epoll_ctl+0xfd/0x1a0 [ 424.741468][T11193] ? __pfx_do_epoll_ctl+0x10/0x10 [ 424.741493][T11193] ? rep_movs_alternative+0x30/0xa0 [ 424.741530][T11193] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 424.741557][T11193] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 424.741594][T11193] do_syscall_64+0x115/0x840 [ 424.741615][T11193] ? clear_bhb_loop+0x40/0x90 [ 424.741645][T11193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.741670][T11193] RIP: 0033:0x7fb8e379de59 [ 424.741689][T11193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.741713][T11193] RSP: 002b:00007fb8e4681028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 424.741736][T11193] RAX: ffffffffffffffda RBX: 00007fb8e3a25fa0 RCX: 00007fb8e379de59 [ 424.741752][T11193] RDX: 0000000000000008 RSI: 0000000000000001 RDI: 0000000000000009 [ 424.741766][T11193] RBP: 00007fb8e3833e6f R08: 0000000000000000 R09: 0000000000000000 [ 424.741780][T11193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 424.741797][T11193] R13: 00007fb8e3a26038 R14: 00007fb8e3a25fa0 R15: 00007ffd878270f8 [ 424.741827][T11193] [ 425.642009][T11212] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5631] was attempted by ""[11212] [ 429.758749][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 429.769697][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 429.893539][T11257] capability: warning: `syz.0.1098' uses 32-bit capabilities (legacy support in use) [ 432.707578][T11308] CIFS: VFS: Invalid SecurityFlags: [ 434.438077][T11348] netlink: 'syz.3.1117': attribute type 11 has an invalid length. [ 436.217518][T11367] Process accounting paused [ 437.108069][T11385] bonding: unable to delete non-existent ) [ 438.518629][T11414] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1137'. [ 438.568605][T11414] netlink: 302 bytes leftover after parsing attributes in process `syz.3.1137'. [ 438.614965][T11416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1137'. [ 438.922072][T11418] nfs4: Unknown parameter '' [ 438.937964][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.946157][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.752392][ T9459] Bluetooth: hci3: unexpected event 0x02 length: 1021 > 260 [ 439.771647][T11435] netlink: 146 bytes leftover after parsing attributes in process `syz.3.1143'. [ 440.040525][T11440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1143'. [ 441.786638][ T30] audit: type=1800 audit(4294967389.103:16): pid=11475 uid=2 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1150" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 442.041569][ T30] audit: type=1800 audit(4294967389.364:17): pid=11484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1152" name="version" dev="configfs" ino=42050 res=0 errno=0 [ 443.005162][ T9459] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 443.005196][ T9459] Bluetooth: hci2: unexpected subevent 0x0e length: 725 > 15 [ 443.021068][ T9459] Bluetooth: hci2: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 443.487044][T11523] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1156'. [ 444.363294][T11502] Process accounting paused [ 445.696637][T11557] device-mapper: ioctl: only supply one of name or uuid, cmd(5) [ 447.129402][T11581] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.377557][T11600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1177'. [ 447.692464][T11581] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.831868][T11591] Process accounting paused [ 448.074591][T11581] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.465771][T11581] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.971902][T11581] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.492224][T11791] futex_wake_op: syz.3.1215 tries to shift op by -2048; fix this program [ 460.542118][ T3272] netdevsim netdevsim300 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.201999][ T9459] Bluetooth: hci2: unexpected subevent 0x0c length: 118 > 5 [ 462.779134][T11872] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1234'. [ 462.955540][T11871] FAULT_INJECTION: forcing a failure. [ 462.955540][T11871] name failslab, interval 1, probability 0, space 0, times 0 [ 462.995745][T11871] CPU: 0 UID: 0 PID: 11871 Comm: syz.0.1232 Tainted: G L syzkaller #0 PREEMPT(full) [ 462.995787][T11871] Tainted: [L]=SOFTLOCKUP [ 462.995795][T11871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 462.995810][T11871] Call Trace: [ 462.995820][T11871] [ 462.995839][T11871] dump_stack_lvl+0x100/0x190 [ 462.995870][T11871] should_fail_ex.cold+0x5/0xa [ 462.995905][T11871] should_failslab+0xc2/0x120 [ 462.995937][T11871] __kmalloc_noprof+0xfc/0x820 [ 462.995964][T11871] ? __pfx_dynamic_dname+0x10/0x10 [ 462.995996][T11871] ? tomoyo_encode2+0xfb/0x3c0 [ 462.996047][T11871] tomoyo_encode2+0xfb/0x3c0 [ 462.996084][T11871] tomoyo_encode+0x29/0x50 [ 462.996114][T11871] tomoyo_realpath_from_path+0x18c/0x690 [ 462.996172][T11871] tomoyo_check_open_permission+0x2af/0x3c0 [ 462.996202][T11871] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 462.996232][T11871] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 462.996271][T11871] ? irqentry_exit+0x24d/0xa00 [ 462.996332][T11871] ? tomoyo_domain+0xf/0x150 [ 462.996369][T11871] ? tomoyo_domain+0x49/0x150 [ 462.996410][T11871] tomoyo_file_open+0x6b/0x90 [ 462.996448][T11871] security_file_open+0xb5/0x1e0 [ 462.996486][T11871] do_dentry_open+0x588/0x14d0 [ 462.996532][T11871] vfs_open+0x82/0x3f0 [ 462.996564][T11871] dentry_open+0x71/0xd0 [ 462.996591][T11871] pidfs_alloc_file+0x18f/0x290 [ 462.996629][T11871] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 462.996675][T11871] pidfd_prepare+0x107/0x1b0 [ 462.996704][T11871] __x64_sys_pidfd_open+0x105/0x1a0 [ 462.996736][T11871] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 462.996777][T11871] do_syscall_64+0x115/0x840 [ 462.996814][T11871] ? clear_bhb_loop+0x40/0x90 [ 462.996844][T11871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.996869][T11871] RIP: 0033:0x7f27cf59de59 [ 462.996890][T11871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.996920][T11871] RSP: 002b:00007f27d0476028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 462.996950][T11871] RAX: ffffffffffffffda RBX: 00007f27cf826090 RCX: 00007f27cf59de59 [ 462.996967][T11871] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 462.996981][T11871] RBP: 00007f27cf633e6f R08: 0000000000000000 R09: 0000000000000000 [ 462.996996][T11871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 462.997010][T11871] R13: 00007f27cf826128 R14: 00007f27cf826090 R15: 00007ffde486d8a8 [ 462.997048][T11871] [ 463.000372][T11871] ERROR: Out of memory at tomoyo_realpath_from_path. [ 463.366113][T11878] netlink: Invalid conntrack helper [ 464.014926][T11893] wlan1: mtu less than device minimum [ 465.648989][T11931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1243'. [ 465.841814][T11938] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1244'. [ 465.922761][T11938] veth0_macvtap: left promiscuous mode [ 465.960909][T11939] futex_wake_op: syz.2.1243 tries to shift op by -2048; fix this program [ 466.837919][T11951] Process accounting resumed [ 467.095187][T11957] bonding: unable to delete non-existent ) [ 468.028534][T11974] Process accounting resumed [ 468.923798][T12001] Line length is too long: Should be less than 4094 [ 469.810492][ T30] audit: type=1800 audit(4294967302.936:18): pid=12011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1259" name="dbroot" dev="configfs" ino=45202 res=0 errno=0 [ 469.900456][T12011] db_root: cannot open: /sy] [ 470.869671][T12030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1261'. [ 470.918170][T12032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1261'. [ 474.393650][T12071] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1270'. [ 474.905929][T12071] hsr_slave_0 (unregistering): left promiscuous mode [ 477.821850][T12107] FAULT_INJECTION: forcing a failure. [ 477.821850][T12107] name fail_futex, interval 1, probability 0, space 0, times 0 [ 477.889079][T12107] CPU: 0 UID: 0 PID: 12107 Comm: syz.0.1278 Tainted: G L syzkaller #0 PREEMPT(full) [ 477.889118][T12107] Tainted: [L]=SOFTLOCKUP [ 477.889126][T12107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 477.889142][T12107] Call Trace: [ 477.889191][T12107] [ 477.889200][T12107] dump_stack_lvl+0x100/0x190 [ 477.889284][T12107] should_fail_ex.cold+0x5/0xa [ 477.889324][T12107] get_futex_key+0x1d2/0x14f0 [ 477.889383][T12107] ? __pfx_get_futex_key+0x10/0x10 [ 477.889420][T12107] ? __pfx_futex_hash+0x10/0x10 [ 477.889455][T12107] ? __destroy_inode+0x2cd/0x710 [ 477.889499][T12107] ? __pfx_sock_free_inode+0x10/0x10 [ 477.889562][T12107] ? destroy_inode+0x139/0x1c0 [ 477.889592][T12107] futex_wake+0xf4/0x5e0 [ 477.889618][T12107] ? futex_wait+0x11e/0x370 [ 477.889651][T12107] ? __pfx_futex_wake+0x10/0x10 [ 477.889693][T12107] do_futex+0x2b2/0x440 [ 477.889718][T12107] ? __pfx_do_futex+0x10/0x10 [ 477.889740][T12107] ? iput+0x3a/0x40 [ 477.889764][T12107] ? __sock_release+0x184/0x260 [ 477.889798][T12107] __x64_sys_futex+0x34f/0x4d0 [ 477.889824][T12107] ? __sys_socket+0xac/0x260 [ 477.889860][T12107] ? kernel_mbind+0x118/0x200 [ 477.889907][T12107] ? __pfx___x64_sys_futex+0x10/0x10 [ 477.889933][T12107] ? __pfx_kernel_mbind+0x10/0x10 [ 477.889979][T12107] do_syscall_64+0x115/0x840 [ 477.890025][T12107] ? clear_bhb_loop+0x40/0x90 [ 477.890061][T12107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.890086][T12107] RIP: 0033:0x7f27cf59de59 [ 477.890106][T12107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.890130][T12107] RSP: 002b:00007f27d04970e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 477.890183][T12107] RAX: ffffffffffffffda RBX: 00007f27cf825fa8 RCX: 00007f27cf59de59 [ 477.890200][T12107] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f27cf825fac [ 477.890215][T12107] RBP: 00007f27cf825fa0 R08: 0000000000000001 R09: 0000000000000000 [ 477.890231][T12107] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 477.890245][T12107] R13: 00007f27cf826038 R14: 00007ffde486d7c0 R15: 00007ffde486d8a8 [ 477.890276][T12107] [ 478.377361][T12108] FAULT_INJECTION: forcing a failure. [ 478.377361][T12108] name failslab, interval 1, probability 0, space 0, times 0 [ 478.426244][T12108] CPU: 0 UID: 0 PID: 12108 Comm: syz.3.1277 Tainted: G L syzkaller #0 PREEMPT(full) [ 478.426284][T12108] Tainted: [L]=SOFTLOCKUP [ 478.426293][T12108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 478.426308][T12108] Call Trace: [ 478.426317][T12108] [ 478.426327][T12108] dump_stack_lvl+0x100/0x190 [ 478.426359][T12108] should_fail_ex.cold+0x5/0xa [ 478.426386][T12108] should_failslab+0xc2/0x120 [ 478.426428][T12108] __kmalloc_noprof+0xfc/0x820 [ 478.426484][T12108] ? get_callchain_buffers+0x123/0x380 [ 478.426528][T12108] get_callchain_buffers+0x123/0x380 [ 478.426555][T12108] ? bpf_lsm_capable+0x9/0x10 [ 478.426583][T12108] ? security_capable+0x80/0x260 [ 478.426646][T12108] stack_map_alloc+0x316/0x610 [ 478.426674][T12108] map_create+0x874/0x3120 [ 478.426723][T12108] ? __lock_acquire+0x49f/0x1a40 [ 478.426775][T12108] ? __pfx_map_create+0x10/0x10 [ 478.426818][T12108] ? __might_fault+0xc5/0x140 [ 478.426856][T12108] __sys_bpf+0x2a6e/0x4e80 [ 478.426888][T12108] ? __pfx___sys_bpf+0x10/0x10 [ 478.426909][T12108] ? find_held_lock+0x2b/0x80 [ 478.426938][T12108] ? futex_wake+0x4ea/0x5e0 [ 478.426974][T12108] ? futex_wait+0x11e/0x370 [ 478.427004][T12108] ? __pfx_futex_wait+0x10/0x10 [ 478.427040][T12108] ? rcu_read_lock_any_held+0x6a/0xa0 [ 478.427095][T12108] ? __x64_sys_futex+0x34f/0x4d0 [ 478.427118][T12108] ? __x64_sys_futex+0x358/0x4d0 [ 478.427145][T12108] ? xfd_validate_state+0x129/0x190 [ 478.427184][T12108] ? __x64_sys_bpf+0xce/0x140 [ 478.427207][T12108] __x64_sys_bpf+0xce/0x140 [ 478.427232][T12108] ? do_syscall_64+0x90/0x840 [ 478.427256][T12108] do_syscall_64+0x115/0x840 [ 478.427277][T12108] ? clear_bhb_loop+0x40/0x90 [ 478.427306][T12108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.427332][T12108] RIP: 0033:0x7fdcde79de59 [ 478.427353][T12108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.427377][T12108] RSP: 002b:00007fdcdf5fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 478.427400][T12108] RAX: ffffffffffffffda RBX: 00007fdcdea26180 RCX: 00007fdcde79de59 [ 478.427423][T12108] RDX: 00000000000006f4 RSI: 0000200000000580 RDI: 0000000000000000 [ 478.427438][T12108] RBP: 00007fdcde833e6f R08: 0000000000000000 R09: 0000000000000000 [ 478.427453][T12108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 478.427468][T12108] R13: 00007fdcdea26218 R14: 00007fdcdea26180 R15: 00007ffd632ae6e8 [ 478.427510][T12108] [ 478.793303][T12113] queue_state_write: operation too long [ 478.800623][T12113] queue_state_write: use 'run', 'start' or 'kick' [ 479.431218][T12104] Process accounting resumed [ 481.017555][T12125] tipc: Started in network mode [ 481.047109][T12125] tipc: Node identity ee00, cluster identity 4711 [ 481.104089][T12125] tipc: Node number set to 60928 [ 482.123923][T12169] tipc: Started in network mode [ 482.152423][T12169] tipc: Node identity ee00, cluster identity 4711 [ 482.187058][T12169] tipc: Node number set to 60928 [ 483.306647][T12189] hub 3-0:1.0: USB hub found [ 483.377987][T12189] hub 3-0:1.0: 1 port detected [ 483.907697][T12189] usb usb3: authorized to connect [ 483.932207][T12199] warning: `syz.0.1298' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 485.482549][ T30] audit: type=1326 audit(4294968341.704:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12225 comm="syz.3.1306" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdcde79de59 code=0x0 [ 488.504834][T12294] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1320'. [ 494.520537][T12353] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1332'. [ 495.443156][T12360] FAULT_INJECTION: forcing a failure. [ 495.443156][T12360] name failslab, interval 1, probability 0, space 0, times 0 [ 495.505227][T12360] CPU: 0 UID: 0 PID: 12360 Comm: syz.0.1335 Tainted: G L syzkaller #0 PREEMPT(full) [ 495.505264][T12360] Tainted: [L]=SOFTLOCKUP [ 495.505273][T12360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 495.505287][T12360] Call Trace: [ 495.505295][T12360] [ 495.505305][T12360] dump_stack_lvl+0x100/0x190 [ 495.505335][T12360] should_fail_ex.cold+0x5/0xa [ 495.505361][T12360] should_failslab+0xc2/0x120 [ 495.505392][T12360] __kmalloc_noprof+0xfc/0x820 [ 495.505417][T12360] ? rcu_is_watching+0x12/0xc0 [ 495.505444][T12360] ? tomoyo_realpath_from_path+0xb6/0x690 [ 495.505515][T12360] tomoyo_realpath_from_path+0xb6/0x690 [ 495.505554][T12360] tomoyo_path_number_perm+0x23c/0x580 [ 495.505580][T12360] ? tomoyo_path_number_perm+0x22e/0x580 [ 495.505608][T12360] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 495.505663][T12360] ? find_held_lock+0x2b/0x80 [ 495.505692][T12360] ? __fget_files+0x215/0x3d0 [ 495.505725][T12360] ? hook_file_ioctl_common+0x140/0x440 [ 495.505752][T12360] ? __fget_files+0x215/0x3d0 [ 495.505791][T12360] ? __fget_files+0x21f/0x3d0 [ 495.505830][T12360] security_file_ioctl+0xd3/0x230 [ 495.505857][T12360] __x64_sys_ioctl+0xb7/0x210 [ 495.505890][T12360] do_syscall_64+0x115/0x840 [ 495.505912][T12360] ? clear_bhb_loop+0x40/0x90 [ 495.505941][T12360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.505965][T12360] RIP: 0033:0x7f27cf59de59 [ 495.505984][T12360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.506007][T12360] RSP: 002b:00007f27d0497028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 495.506034][T12360] RAX: ffffffffffffffda RBX: 00007f27cf825fa0 RCX: 00007f27cf59de59 [ 495.506050][T12360] RDX: 0000000000000000 RSI: 000000000000540b RDI: 000000000000000f [ 495.506063][T12360] RBP: 00007f27d0497090 R08: 0000000000000000 R09: 0000000000000000 [ 495.506077][T12360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.506091][T12360] R13: 00007f27cf826038 R14: 00007f27cf825fa0 R15: 00007ffde486d8a8 [ 495.506121][T12360] [ 495.506140][T12360] ERROR: Out of memory at tomoyo_realpath_from_path. [ 496.797324][T12369] Process accounting paused [ 497.042011][T12367] pim6reg: entered allmulticast mode [ 498.027395][T12392] Process accounting paused [ 498.185941][T12382] Process accounting resumed [ 498.641020][T12410] random: crng reseeded on system resumption [ 500.038382][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.048150][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.493139][ T30] audit: type=1800 audit(4294968358.794:20): pid=12459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1365" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 504.285590][T12488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1371'. [ 504.330265][T12490] netlink: 'syz.3.1372': attribute type 12 has an invalid length. [ 506.601824][T12537] random: crng reseeded on system resumption [ 507.701838][ T30] audit: type=1800 audit(4294968364.018:21): pid=12558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1389" name="mtdblock0" dev="tmpfs" ino=2058 res=0 errno=0 [ 509.551954][T12580] Process accounting paused [ 510.526040][T12610] netlink: 202 bytes leftover after parsing attributes in process `syz.0.1404'. [ 510.661320][T12615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1406'. [ 512.341601][T12647] FAULT_INJECTION: forcing a failure. [ 512.341601][T12647] name failslab, interval 1, probability 0, space 0, times 0 [ 512.475453][T12647] CPU: 0 UID: 0 PID: 12647 Comm: syz.3.1414 Tainted: G L syzkaller #0 PREEMPT(full) [ 512.475493][T12647] Tainted: [L]=SOFTLOCKUP [ 512.475501][T12647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 512.475516][T12647] Call Trace: [ 512.475523][T12647] [ 512.475533][T12647] dump_stack_lvl+0x100/0x190 [ 512.475569][T12647] should_fail_ex.cold+0x5/0xa [ 512.475596][T12647] ? __pfx_cgroup_show_path+0x10/0x10 [ 512.475657][T12647] should_failslab+0xc2/0x120 [ 512.475688][T12647] ? __pfx_cgroup_show_path+0x10/0x10 [ 512.475723][T12647] __kmalloc_cache_noprof+0x91/0x6c0 [ 512.475764][T12647] ? cgroup_show_path+0xb2/0x730 [ 512.475802][T12647] ? __pfx_cgroup_show_path+0x10/0x10 [ 512.475837][T12647] cgroup_show_path+0xb2/0x730 [ 512.475883][T12647] ? __pfx_cgroup_show_path+0x10/0x10 [ 512.475917][T12647] kernfs_sop_show_path+0xe9/0x160 [ 512.475958][T12647] ? __pfx_kernfs_sop_show_path+0x10/0x10 [ 512.475989][T12647] show_path+0x9e/0x100 [ 512.476031][T12647] show_mountinfo+0x1d8/0x820 [ 512.476069][T12647] ? __pfx_show_mountinfo+0x10/0x10 [ 512.476115][T12647] seq_read_iter+0xbce/0x1270 [ 512.476159][T12647] ? __pfx_seq_read_iter+0x10/0x10 [ 512.476196][T12647] vfs_read+0x82e/0xb40 [ 512.476236][T12647] ? __pfx_vfs_read+0x10/0x10 [ 512.476290][T12647] ksys_read+0x12a/0x250 [ 512.476325][T12647] ? __pfx_ksys_read+0x10/0x10 [ 512.476370][T12647] do_syscall_64+0x115/0x840 [ 512.476395][T12647] ? clear_bhb_loop+0x40/0x90 [ 512.476425][T12647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.476450][T12647] RIP: 0033:0x7fdcde79de59 [ 512.476470][T12647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.476494][T12647] RSP: 002b:00007fdcdf61b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 512.476517][T12647] RAX: ffffffffffffffda RBX: 00007fdcdea26090 RCX: 00007fdcde79de59 [ 512.476533][T12647] RDX: 0000000000001036 RSI: 0000200000000040 RDI: 0000000000000006 [ 512.476548][T12647] RBP: 00007fdcde833e6f R08: 0000000000000000 R09: 0000000000000000 [ 512.476563][T12647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 512.476577][T12647] R13: 00007fdcdea26128 R14: 00007fdcdea26090 R15: 00007ffd632ae6e8 [ 512.476608][T12647] [ 514.517025][T12679] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 516.340464][T12699] FAULT_INJECTION: forcing a failure. [ 516.340464][T12699] name failslab, interval 1, probability 0, space 0, times 0 [ 516.386952][T12699] CPU: 0 UID: 0 PID: 12699 Comm: syz.0.1425 Tainted: G L syzkaller #0 PREEMPT(full) [ 516.386991][T12699] Tainted: [L]=SOFTLOCKUP [ 516.387000][T12699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 516.387015][T12699] Call Trace: [ 516.387024][T12699] [ 516.387033][T12699] dump_stack_lvl+0x100/0x190 [ 516.387069][T12699] should_fail_ex.cold+0x5/0xa [ 516.387096][T12699] should_failslab+0xc2/0x120 [ 516.387128][T12699] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 516.387159][T12699] ? __d_alloc+0x35/0xa50 [ 516.387187][T12699] __d_alloc+0x35/0xa50 [ 516.387213][T12699] d_alloc_pseudo+0x1c/0xc0 [ 516.387245][T12699] alloc_file_pseudo+0x118/0x290 [ 516.387275][T12699] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 516.387312][T12699] __shmem_file_setup+0x205/0x460 [ 516.387349][T12699] ? __pfx___shmem_file_setup+0x10/0x10 [ 516.387386][T12699] ? vm_area_alloc+0x1f/0x160 [ 516.387426][T12699] shmem_zero_setup+0x96/0x1b0 [ 516.387453][T12699] __mmap_region+0x24ef/0x2db0 [ 516.387498][T12699] ? __pfx___mmap_region+0x10/0x10 [ 516.387542][T12699] ? __lock_acquire+0x49f/0x1a40 [ 516.387598][T12699] ? __lock_acquire+0x49f/0x1a40 [ 516.387646][T12699] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 516.387688][T12699] ? rcu_is_watching+0x12/0xc0 [ 516.387714][T12699] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 516.387738][T12699] ? lockdep_hardirqs_on+0x78/0x100 [ 516.387821][T12699] mmap_region+0x35d/0x620 [ 516.387846][T12699] ? rcu_is_watching+0x12/0xc0 [ 516.387872][T12699] ? __pfx_mmap_region+0x10/0x10 [ 516.387901][T12699] ? cap_mmap_addr+0x4b/0x120 [ 516.387939][T12699] ? bpf_lsm_mmap_addr+0x9/0x30 [ 516.387975][T12699] ? security_mmap_addr+0x71/0x1e0 [ 516.388010][T12699] ? __get_unmapped_area+0x255/0x3e0 [ 516.388045][T12699] do_mmap+0xc63/0x12f0 [ 516.388086][T12699] ? __pfx_do_mmap+0x10/0x10 [ 516.388117][T12699] ? __pfx_down_write_killable+0x10/0x10 [ 516.388169][T12699] ? __pfx_futex_wait+0x10/0x10 [ 516.388203][T12699] vm_mmap_pgoff+0x29e/0x470 [ 516.388239][T12699] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 516.388275][T12699] ? __pfx_do_futex+0x10/0x10 [ 516.388298][T12699] ? __pfx___might_resched+0x10/0x10 [ 516.388339][T12699] ksys_mmap_pgoff+0xe4/0x610 [ 516.388370][T12699] ? __x64_sys_futex+0x358/0x4d0 [ 516.388394][T12699] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 516.388425][T12699] ? xfd_validate_state+0x129/0x190 [ 516.388458][T12699] __x64_sys_mmap+0x125/0x190 [ 516.388488][T12699] do_syscall_64+0x115/0x840 [ 516.388509][T12699] ? clear_bhb_loop+0x40/0x90 [ 516.388539][T12699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.388565][T12699] RIP: 0033:0x7f27cf59de59 [ 516.388585][T12699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.388609][T12699] RSP: 002b:00007f27d0497028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 516.388632][T12699] RAX: ffffffffffffffda RBX: 00007f27cf825fa0 RCX: 00007f27cf59de59 [ 516.388648][T12699] RDX: 00000000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 516.388663][T12699] RBP: 00007f27cf633e6f R08: 00040000000000a5 R09: 0000000000008000 [ 516.388678][T12699] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 516.388693][T12699] R13: 00007f27cf826038 R14: 00007f27cf825fa0 R15: 00007ffde486d8a8 [ 516.388723][T12699] [ 520.255357][T12777] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1442'. [ 520.851430][T12794] openvswitch: netlink: IP tunnel dst address not specified [ 522.963400][T12830] ================================================================== [ 522.963429][T12830] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 522.963492][T12830] Write of size 8 at addr ffffc90004c51be0 by task syz.0.1456/12830 [ 522.963512][T12830] [ 522.963527][T12830] CPU: 0 UID: 0 PID: 12830 Comm: syz.0.1456 Tainted: G L syzkaller #0 PREEMPT(full) [ 522.963561][T12830] Tainted: [L]=SOFTLOCKUP [ 522.963570][T12830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 522.963585][T12830] Call Trace: [ 522.963593][T12830] [ 522.963602][T12830] dump_stack_lvl+0x100/0x190 [ 522.963628][T12830] print_report+0x13d/0x4b0 [ 522.963663][T12830] ? _raw_spin_lock_irqsave+0x52/0x60 [ 522.963700][T12830] ? sys_imageblit+0x19fb/0x1d60 [ 522.963727][T12830] kasan_report+0xdf/0x1c0 [ 522.963760][T12830] ? sys_imageblit+0x19fb/0x1d60 [ 522.963791][T12830] sys_imageblit+0x19fb/0x1d60 [ 522.963823][T12830] ? queue_work_on+0x13b/0x1e0 [ 522.963866][T12830] ? __pfx_sys_imageblit+0x10/0x10 [ 522.963897][T12830] ? drm_fb_helper_damage_area+0xb4/0xe0 [ 522.963950][T12830] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 522.963994][T12830] soft_cursor+0x524/0xa10 [ 522.964018][T12830] ? fb_get_color_depth+0x120/0x250 [ 522.964055][T12830] bit_cursor+0xca1/0x1490 [ 522.964097][T12830] ? __pfx_bit_cursor+0x10/0x10 [ 522.964140][T12830] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 522.964179][T12830] ? get_color+0x1da/0x450 [ 522.964211][T12830] ? __pfx_bit_cursor+0x10/0x10 [ 522.964248][T12830] fbcon_cursor+0x43c/0x5e0 [ 522.964282][T12830] ? add_softcursor+0x1c0/0x290 [ 522.964316][T12830] ? hide_cursor+0xa3/0x230 [ 522.964339][T12830] set_cursor+0x1db/0x250 [ 522.964362][T12830] vcs_write+0xbd5/0xd70 [ 522.964390][T12830] ? __bpf_trace_sched_exit_tp+0xb0/0xc0 [ 522.964431][T12830] ? __pfx_vcs_write+0x10/0x10 [ 522.964451][T12830] ? apparmor_file_permission+0x13f/0x1c0 [ 522.964479][T12830] ? bpf_lsm_file_permission+0x9/0x10 [ 522.964517][T12830] ? security_file_permission+0x76/0x210 [ 522.964547][T12830] ? rw_verify_area+0xce/0x6d0 [ 522.964581][T12830] vfs_write+0x2aa/0x1050 [ 522.964616][T12830] ? __pfx_vcs_write+0x10/0x10 [ 522.964639][T12830] ? __pfx_vfs_write+0x10/0x10 [ 522.964673][T12830] ? find_held_lock+0x2b/0x80 [ 522.964700][T12830] ? __fget_files+0x215/0x3d0 [ 522.964735][T12830] ? __fget_files+0x215/0x3d0 [ 522.964773][T12830] ? __fget_files+0x21f/0x3d0 [ 522.964812][T12830] ksys_write+0x12a/0x250 [ 522.964850][T12830] ? __pfx_ksys_write+0x10/0x10 [ 522.964891][T12830] do_syscall_64+0x115/0x840 [ 522.964912][T12830] ? clear_bhb_loop+0x40/0x90 [ 522.964940][T12830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.964965][T12830] RIP: 0033:0x7f27cf59de59 [ 522.964984][T12830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.965008][T12830] RSP: 002b:00007f27d0497028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 522.965040][T12830] RAX: ffffffffffffffda RBX: 00007f27cf825fa0 RCX: 00007f27cf59de59 [ 522.965057][T12830] RDX: 0000000020000003 RSI: 0000200000000000 RDI: 0000000000000003 [ 522.965072][T12830] RBP: 00007f27cf633e6f R08: 0000000000000000 R09: 0000000000000000 [ 522.965088][T12830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 522.965102][T12830] R13: 00007f27cf826038 R14: 00007f27cf825fa0 R15: 00007ffde486d8a8 [ 522.965126][T12830] [ 522.965134][T12830] [ 522.965141][T12830] The buggy address belongs to a vmalloc virtual mapping [ 522.965158][T12830] Memory state around the buggy address: [ 522.965170][T12830] ffffc90004c51a80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 522.965188][T12830] ffffc90004c51b00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 522.965205][T12830] >ffffc90004c51b80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 522.965220][T12830] ^ [ 522.965234][T12830] ffffc90004c51c00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 522.965251][T12830] ffffc90004c51c80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 522.965265][T12830] ================================================================== [ 522.981587][T12830] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 522.981611][T12830] CPU: 0 UID: 0 PID: 12830 Comm: syz.0.1456 Tainted: G L syzkaller #0 PREEMPT(full) [ 522.981646][T12830] Tainted: [L]=SOFTLOCKUP [ 522.981656][T12830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 522.981671][T12830] Call Trace: [ 522.981679][T12830] [ 522.981689][T12830] dump_stack_lvl+0x100/0x190 [ 522.981719][T12830] vpanic+0x552/0x970 [ 522.981742][T12830] ? __pfx_vpanic+0x10/0x10 [ 522.981766][T12830] ? irqentry_exit+0x24d/0xa00 [ 522.981806][T12830] ? lockdep_hardirqs_on+0x78/0x100 [ 522.981848][T12830] ? sys_imageblit+0x19fb/0x1d60 [ 522.981875][T12830] panic+0xd1/0xe0 [ 522.981896][T12830] ? __pfx_panic+0x10/0x10 [ 522.981925][T12830] check_panic_on_warn.cold+0x19/0x34 [ 522.981951][T12830] end_report.part.0+0x3a/0x90 [ 522.981986][T12830] kasan_report.cold+0xe/0x18 [ 522.982022][T12830] ? sys_imageblit+0x19fb/0x1d60 [ 522.982054][T12830] sys_imageblit+0x19fb/0x1d60 [ 522.982085][T12830] ? queue_work_on+0x13b/0x1e0 [ 522.982138][T12830] ? __pfx_sys_imageblit+0x10/0x10 [ 522.982169][T12830] ? drm_fb_helper_damage_area+0xb4/0xe0 [ 522.982201][T12830] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 522.982240][T12830] soft_cursor+0x524/0xa10 [ 522.982265][T12830] ? fb_get_color_depth+0x120/0x250 [ 522.982302][T12830] bit_cursor+0xca1/0x1490 [ 522.982345][T12830] ? __pfx_bit_cursor+0x10/0x10 [ 522.982393][T12830] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 522.982428][T12830] ? get_color+0x1da/0x450 [ 522.982461][T12830] ? __pfx_bit_cursor+0x10/0x10 [ 522.982499][T12830] fbcon_cursor+0x43c/0x5e0 [ 522.982533][T12830] ? add_softcursor+0x1c0/0x290 [ 522.982556][T12830] ? hide_cursor+0xa3/0x230 [ 522.982580][T12830] set_cursor+0x1db/0x250 [ 522.982603][T12830] vcs_write+0xbd5/0xd70 [ 522.982626][T12830] ? __bpf_trace_sched_exit_tp+0xb0/0xc0 [ 522.982666][T12830] ? __pfx_vcs_write+0x10/0x10 [ 522.982686][T12830] ? apparmor_file_permission+0x13f/0x1c0 [ 522.982714][T12830] ? bpf_lsm_file_permission+0x9/0x10 [ 522.982751][T12830] ? security_file_permission+0x76/0x210 [ 522.982782][T12830] ? rw_verify_area+0xce/0x6d0 [ 522.982815][T12830] vfs_write+0x2aa/0x1050 [ 522.982850][T12830] ? __pfx_vcs_write+0x10/0x10 [ 522.982873][T12830] ? __pfx_vfs_write+0x10/0x10 [ 522.982908][T12830] ? find_held_lock+0x2b/0x80 [ 522.982935][T12830] ? __fget_files+0x215/0x3d0 [ 522.982970][T12830] ? __fget_files+0x215/0x3d0 [ 522.983008][T12830] ? __fget_files+0x21f/0x3d0 [ 522.983053][T12830] ksys_write+0x12a/0x250 [ 522.983088][T12830] ? __pfx_ksys_write+0x10/0x10 [ 522.983129][T12830] do_syscall_64+0x115/0x840 [ 522.983151][T12830] ? clear_bhb_loop+0x40/0x90 [ 522.983179][T12830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.983204][T12830] RIP: 0033:0x7f27cf59de59 [ 522.983223][T12830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.983248][T12830] RSP: 002b:00007f27d0497028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 522.983272][T12830] RAX: ffffffffffffffda RBX: 00007f27cf825fa0 RCX: 00007f27cf59de59 [ 522.983289][T12830] RDX: 0000000020000003 RSI: 0000200000000000 RDI: 0000000000000003 [ 522.983305][T12830] RBP: 00007f27cf633e6f R08: 0000000000000000 R09: 0000000000000000 [ 522.983321][T12830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 522.983336][T12830] R13: 00007f27cf826038 R14: 00007f27cf825fa0 R15: 00007ffde486d8a8 [ 522.983360][T12830] [ 522.983433][T12830] Kernel Offset: disabled