last executing test programs: 13.551292442s ago: executing program 0 (id=1571): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = socket(0x2c, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), r1) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x9, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, r3, 0x13, 0x70bd2c, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000010}, 0xc, &(0x7f0000000280)={&(0x7f00000030c0)=ANY=[@ANYBLOB='L%\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f766c616e00000000000008000100", @ANYRES32=0x0, @ANYBLOB="840001801400020076657468315f766c616e00000041cd0000000800", @ANYRES32=0x0, @ANYBLOB="08000400c45c00000800030002000000080004000100000014000200767863616e3100000000000000000000080003000500000008000100", @ANYRES32=r5, @ANYBLOB="1400020063616966300000000000000000000000140002007465616d3000"/40], 0x254c}, 0x1, 0x0, 0x0, 0x4000005}, 0x4) madvise$auto(0x0, 0x2003f2, 0x15) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r6, 0x0, 0x24048004) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) read$auto_proc_pid_maps_operations_internal(0xffffffffffffffff, &(0x7f00000020c0)=""/4093, 0xffd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 8.686925994s ago: executing program 0 (id=1589): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) ioctl$auto(0x3, 0x8905, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) pwrite64$auto(0xc8, &(0x7f00000001c0)='\vX\xb5o\x91p\xff\x1eRN8\x99\x00\b\x00\x14\xaf\f\x94\x1a\xd3\xd3\x1d\xf8\xbebR\xddL\'\x03\xf1`\x9f5\xc0|<\x89\x85c\nn-$\xf9\xa4\xf8\x15\xdd\xac\x00\x00\x00\x00\x00\x00\"\x01\x0e\xa4\xdf\xdav\x1c\xff\xeeq\xf0\xcd\xfcH\xa2@X\xb9_\x9d*\xd1\x14^\xbe\xa2\x00\x00\x00\x01\x00\x00\x00nb\xa1\a\x15\xaf\xaa\x12\x04K_\x85\xd8\x17]\xfc\xc3d\xd6\x84\x16\xf4\xc3\xa6|{\xdd\xc74\xa0\x19WA\x90\x1b\xe5\x16\xc6\xf2\xcfX\nI\xce\xfb\xf2\x82\x89C', 0xfdf0, 0x4ffffffffffc) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) userfaultfd$auto(0x1) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) 6.26939595s ago: executing program 0 (id=1601): socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyp5\x00', 0x2c86c1, 0x0) ioctl$auto(r0, 0x4b66, 0x1) mremap$auto(0x110c230000, 0x0, 0x2000101, 0x3, 0xf000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r1 = bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty0\x00', 0x0, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000000)="4c91f2c388274610e12c861bb2bfd9800e9b3941", 0x14) mmap$auto(0x0, 0x6, 0xffffffffffffffff, 0x40eb1, r2, 0x8) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/tracing/trace\x00', 0x2, 0x0) init_module$auto(0x0, 0xffff9, 0x0) syz_genetlink_get_family_id$auto_batadv(0x0, r1) syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x80802, 0x0) socket(0x11, 0x3, 0x4) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1882c2, 0x78e22799f4a46f1c) flock$auto(r3, 0x6) r4 = open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) flock$auto(r4, 0x1) r5 = open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) flock$auto(r5, 0x2) r6 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) sendmmsg$auto(r6, 0x0, 0x7, 0x4008) flock$auto(r5, 0x2) 6.025196488s ago: executing program 1 (id=1602): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x0) (async) close_range$auto(0xffffffffffffffff, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) (async) io_uring_setup$auto(0x6, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="02005f1b", @ANYRES16=r1, @ANYBLOB="010b27bd7000fcdbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000084) (async) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="02005f1b", @ANYRES16=r1, @ANYBLOB="010b27bd7000fcdbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000084) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/pcie_aspm/parameters/policy\x00', 0x80000, 0x0) r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) ioctl$auto_RTC_UIE_ON(r2, 0x7003, 0x4) (async) ioctl$auto_RTC_UIE_ON(r2, 0x7003, 0x4) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, 0x0, 0x80301, 0x0) (async) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, 0x0, 0x80301, 0x0) setsockopt$auto(0x3, 0x29, 0x46, 0x0, 0x808) prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x8000000000002, 0x0, 0x10000000, 0x3) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r3, &(0x7f0000000040)='//\xf2?', 0x80000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) shmdt$auto(0x0) socket(0x7, 0x3, 0x2) read$auto(0xffffffffffffffff, 0x0, 0x20) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x2) socket(0xa, 0x5, 0x0) (async) r4 = socket(0xa, 0x5, 0x0) chdir$auto(&(0x7f0000000340)='./file1\x00') r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x40001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), 0xffffffffffffffff) waitid$auto_P_PID(0x1, 0x0, 0x0, 0xf, &(0x7f0000000440)={{0x7, 0x24}, {0x929a, 0x1ff}, 0x9, 0x3, 0x4032, 0xfffffffffffffff4, 0x4df, 0x0, 0x8, 0x8fb000, 0x0, 0x100, 0x4, 0x3, 0xd, 0x1}) sendmsg$auto_NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000380)={0x0, 0xcc0}, 0x1, 0x0, 0x0, 0x10}, 0x8010) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) 5.651937458s ago: executing program 3 (id=1604): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x6600, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x1, 0x84) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x0, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socket(0x10, 0x2, 0x0) r0 = socket(0x2a, 0x2, 0x0) io_uring_setup$auto(0x6, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x4, 0x7fff, 0x1a000, 0x80000948c, 0x2, 0x8, 0x400000006, 0x100000000000, 0xc, 0x9, 0x3, 0x6, 0x400005, 0x5]}, 0x0) getsockopt$auto_SO_TXTIME(r0, 0x9, 0x3d, &(0x7f00000000c0)='/dev/sequencer\x00', &(0x7f0000000180)=0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_MPATH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1cf5", @ANYBLOB="01002dbd7000fcdbdf251600000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x800) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r4, &(0x7f0000000c80)="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", 0x300) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0xb60) r5 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0) pwrite64$auto(r5, 0x0, 0x400000, 0xc) r6 = socket(0x10, 0x2, 0x0) r7 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r6, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="2981010027bd7000fcdbdf250a190000"], 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x40) socket(0xa, 0x5, 0x84) 4.638299949s ago: executing program 2 (id=1606): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x38, r1, 0x1b, 0x70bd25, 0x25dfdbfb, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x6}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004040}, 0xc000) r2 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000500), r3) sendmsg$auto_NL80211_CMD_ADD_NAN_FUNCTION(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$auto_NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r4, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_HW_TIMESTAMP_ENABLED={0x4}, @NL80211_ATTR_SPLIT_WIPHY_DUMP={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2001c810}, 0xea65e97f0d879aa3) (async) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x2, r5, 0x3, 0x4f) (async) write$auto_proc_mem_operations_base(r2, &(0x7f0000001680)="a7", 0xfffffc96) (async) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_MON_PEER_GET(r6, 0x0, 0x4c848) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) r7 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) (async) r8 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) (async) recvmmsg$auto(r8, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) (async) write$auto_proc_clear_refs_operations_internal(r7, 0x0, 0xffffff4b) (async) r9 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r9, &(0x7f0000001680)="a7", 0xfffffc96) 4.569975606s ago: executing program 0 (id=1607): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x323340, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) timer_create$auto(0x9, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) process_mrelease$auto(0xffffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0xffffffffffffffff, 0x0, 0x54) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x40000, 0x0) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)=0x5) ioctl$auto_EVIOCGMASK(r2, 0x80104592, &(0x7f0000000140)={0x4, 0x800005, 0x400007}) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r3 = set_tid_address$auto(0x0) r4 = syz_open_procfs$namespace(r3, &(0x7f0000000080)) getdents$auto(r4, 0x0, 0x10040) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'dvmrp0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_FEC_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_FEC_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) 4.242944957s ago: executing program 2 (id=1608): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = socketcall$auto(0x8000, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r1) r3 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0xeb) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) fallocate$auto(r3, 0x1, 0x820, 0x7fff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) ioctl$auto_TIOCCONS(r0, 0x541d, &(0x7f0000001040)="b3b84f4ec07dc46549753d497c6f89f72a782e4cd20bcb33621ec561a37dfea5859e12743538c2296c929238ca49ad3445b91bbd3349205827809680cd63db1d4b2b702ef5a5d15c1cb3c2") prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) memfd_secret$auto(0x3) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x494b02, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mmap$auto(0x0, 0x400008, 0xdf, 0x9b75, 0x2, 0x8004) r5 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r5, &(0x7f0000000040)=""/4096, 0xfffffe82) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x80000eb1, 0xffffffffffffffff, 0x7) unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) close_range$auto(0x2, 0x8, 0x0) 4.18052941s ago: executing program 3 (id=1609): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x741, 0x8000) socket(0xa, 0x5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x3, 0x0, 0x8) r0 = socket(0xa, 0x3, 0x3a) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0xafefa9ff3f168676, 0x0) ioctl$auto_SNDCTL_SEQ_THRESHOLD(r1, 0x4004510d, &(0x7f0000000240)="8c4f676266df3bae") syz_clone(0x8100000, &(0x7f0000000000)="02df5d8e04142b49bcc8ceba2b2d39c4fa5f800b9ac67021c7107afb6957cadfeb5a34c6073999e4d7d9ddedba418614e70d5bda767e73d8c99c28cca69f398cff3582f658944b2405b9f54d33cf8babf2d9aedb", 0x54, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)="8dd8b3f6846349494fd9a0f669838b327e5f680332879e01d3405e8af09f2a24f510c14e60d451a5ab64e5f072fc8e1a8d7ba0a82ec14992326c02ba1a2c85dbac6bc13a2ae226ceb700f40ff44b8cfa66451dc55cacb087e98596a78a8a2f097bb3d1601f85f57fabc4bdf141") mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) connect$auto(0x4, 0x0, 0x10) read$auto(0x3, 0x0, 0x1f40) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) close_range$auto(0x2, 0x8, 0x0) r2 = gettid() kcmp$auto(0x1, r2, 0x1, 0x4, 0x24000) ioctl$auto(r0, 0x890c, 0x1) 4.159935437s ago: executing program 1 (id=1610): r0 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x800400007, 0x65d, 0xffff, 0xffffffffffffffff, 0x20000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ram6\x00', 0xc6fc1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) r1 = epoll_create$auto(0x5) fremovexattr$auto(r1, &(0x7f0000000000)='&\x00') read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f0000000280)=""/54, 0x36) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) select$auto(0xffffffff, &(0x7f0000000040)={[0x54, 0x10, 0x800000c8be, 0x8, 0x273a, 0x0, 0xb, 0x5, 0x5, 0x330, 0x7, 0x200cf, 0x45, 0xc, 0x5, 0xb98]}, 0x0, 0x0, 0x0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fcdbdf25020000002c00018028003c8008001b"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {0xa, 0x0, 0xa00}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x200, 0x0) socket(0xa, 0x2, 0x88) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000003fc0)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20a02, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xbff) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) setsockopt$auto(r0, 0x1, 0x9, 0x0, 0xeb66) 3.857847354s ago: executing program 1 (id=1611): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r0 = socket(0x2b, 0x800, 0x0) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r1 = socket(0x2, 0x1, 0x106) (async, rerun: 64) r2 = epoll_create$auto(0x3e) (rerun: 64) epoll_ctl$auto(r2, 0x1, r1, 0x0) (async) ioctl$auto_dma_heap_fops_dma_heap(r2, 0x1ff, &(0x7f0000000000)="a45f82d2cc2c9495c0b6c824c42ede6816a40581cb18427a406aaaaff5e0ab") (async) r3 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer1\x00', 0x180, 0x0) ioctl$auto_OSS_ALSAEMULVER(r3, 0x40086602, &(0x7f0000000100)) (async, rerun: 64) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS0\x00', 0x1, 0x0) (rerun: 64) ioctl$auto(r4, 0x540a, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendto$auto(0x3, 0x0, 0xfffffffffffffdef, 0x101, 0x0, 0x1c) (async) socket(0xa, 0x1, 0x84) recvfrom$auto(r3, 0x0, 0x8000000003, 0xfffff4a5, 0x0, 0xfffffffffffffffd) (async) ioctl$auto(0x3, 0x541b, 0x38) (async) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) (async) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r5 = set_tid_address$auto(0x0) r6 = syz_open_procfs$namespace(r5, &(0x7f0000000080)) getdents$auto(r6, 0x0, 0x18) (async, rerun: 64) r7 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) (rerun: 64) write$auto_fuse_dev_operations_fuse_i(r7, &(0x7f0000000440)="1100000000000000000000000000010000", 0x11) (async) mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={0x200008, 0x100019, 0x0, @raw=0x8000000000000001}, 0x283) getdents$auto(r6, 0x0, 0xa2b0) (async, rerun: 32) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/snd_hda_intel/parameters/bdl_pos_adj\x00', 0x80102, 0x0) (rerun: 32) sendfile$auto(r8, r8, 0x0, 0x3) (async) msync$auto(0x0, 0x2000000005, 0x6) 3.122597523s ago: executing program 3 (id=1612): r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) pipe$auto(0x0) write$auto(0x3, 0x0, 0x200ffd8) r1 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto_l2cap_debugfs_fops_(r1, &(0x7f0000000240)=""/177, 0xb1) close_range$auto(0x2, 0x8, 0x0) getsockopt$auto_SO_SNDBUF(r0, 0xfff, 0x7, 0x0, 0x0) 3.002849886s ago: executing program 1 (id=1613): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = socket(0x2c, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), r1) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x9, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, r3, 0x13, 0x70bd2c, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000010}, 0xc, &(0x7f0000000280)={&(0x7f00000030c0)=ANY=[@ANYBLOB='L%\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f766c616e00000000000008000100", @ANYRES32=0x0, @ANYBLOB="840001801400020076657468315f766c616e00000041cd0000000800", @ANYRES32=0x0, @ANYBLOB="08000400c45c00000800030002000000080004000100000014000200767863616e3100000000000000000000080003000500000008000100", @ANYRES32=r5, @ANYBLOB="1400020063616966300000000000000000000000140002007465616d3000"/40], 0x254c}, 0x1, 0x0, 0x0, 0x4000005}, 0x4) madvise$auto(0x0, 0x2003f2, 0x15) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r6, 0x0, 0x24048004) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r7 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) read$auto_proc_pid_maps_operations_internal(r7, &(0x7f00000020c0)=""/4093, 0xffd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 2.5105163s ago: executing program 2 (id=1614): bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0xe, 0x4, 0x4, 0x10001, 0x8, 0xc, 0xffffffffffffffff, 0x9, 0x7ff}, 0xee) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0xa, 0x5, 0x84) io_uring_setup$auto(0x401, 0x0) r1 = getsockopt$auto(r0, 0x87, 0x2, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x6, 0x5, 0x10000ebd, r0, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0xc7de, 0x800, 0x0, 0x400000000000001, 0x2) mmap$auto(0xfffffffffffffffc, 0x80002020009, 0x4, 0x410, r1, 0x20c) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/ip_vs\x00', 0x521000, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/pcrypt/pencrypt/parallel_cpumask\x00', 0x80302, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) remap_file_pages$auto(0x3, 0x1000, 0x0, 0x204, 0x1) 1.904250552s ago: executing program 3 (id=1615): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/system/cpu/vulnerabilities/reg_file_data_sampling\x00', 0x8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000080)=""/150, 0x96) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/Fixed MDIO bus.0/mdio_bus/fixed-0/statistics/errors_18\x00', 0x82, 0x0) write$auto(r1, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x4) 1.571339786s ago: executing program 0 (id=1616): socket(0x8, 0x3, 0xe6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000180)=""/190, 0xbe) mlockall$auto(0x7) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mprotect$auto(0x0, 0x806121, 0x6) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r1 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002dbd0900fedbdf257e"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) sendmsg$auto_NL80211_CMD_STOP_P2P_DEVICE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f00000027c0)=ANY=[@ANYBLOB="30120000", @ANYRES16=r3, @ANYBLOB="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"], 0x1230}, 0x1, 0x0, 0x0, 0x4010}, 0x4000800) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x2, 0x1d2c, 0x3, 0x4, 0x15f4da0e, 0x6, 0x9, 0x100000000000000c, 0x8, 0x4, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) poll$auto(&(0x7f0000000240)={r1, 0x3, 0x9}, 0x3, 0x8) socket(0x2c, 0x1, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), 0xffffffffffffffff) 1.570645801s ago: executing program 3 (id=1617): mmap$auto(0x5, 0x1, 0xde, 0x20000eb5, 0xffffffffffffffff, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x2, 0x3, 0x100) open(&(0x7f0000000540)='./cgroup\x00', 0x80, 0x310) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) r3 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x222202, 0x0) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$auto_VHOST_SET_FEATURES(r4, 0x8008af83, &(0x7f0000000140)=0x8000000000007) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x4) mmap$auto(0x4, 0x2020009, 0x3, 0xeb1, r3, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000003fc0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETFAMILY2(r5, &(0x7f00000040c0)={0x0, 0x0, &(0x7f0000004080)={&(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x4000050) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/admmidi2\x00', 0x101000, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS32(r6, 0xc0245720, 0x0) read$auto(0x3, 0x0, 0xfdef) pwrite64$auto(0xffffffffffffffff, 0x0, 0xa, 0x1) r7 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/pcmC0D0c\x00', 0x2002, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_FREE2(r7, 0x4112, 0x0) pread64$auto(r3, 0x0, 0x0, 0x9) select$auto(0x1f, &(0x7f0000000080)={[0x3ff, 0x7fffffffffffffff, 0x8, 0x400, 0x2, 0x875e, 0xfffffffffffffbff, 0xb, 0x8, 0x1, 0x8, 0x3, 0x7fffffffffffffff, 0x3, 0xbb4, 0x8000000000000001]}, &(0x7f0000000100)={[0x9, 0x9, 0x4, 0x534, 0x3d4, 0x8000, 0x3, 0x2, 0x2, 0xfffffffffffffffa, 0xf46d, 0x8, 0x9, 0x7, 0x2b68, 0x2]}, &(0x7f0000000180)={[0x8, 0x4, 0x8000, 0x7ff, 0x2, 0xd79, 0x40, 0x4, 0x7, 0x457, 0xcec3, 0x1, 0x8000, 0x7fffffff, 0x6, 0x5]}, &(0x7f0000000000)={0x5d3c22b9, 0xffffffff}) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$auto_BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="55326bf6c9e24ef1ac"], 0x1c}}, 0x4008000) setuid$auto(0x800000000008) socket(0x2, 0x1, 0x84) 1.325886807s ago: executing program 1 (id=1618): socket(0x8, 0x3, 0xe6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000180)=""/190, 0xbe) mlockall$auto(0x7) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mprotect$auto(0x0, 0x806121, 0x6) (fail_nth: 1) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r1 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002dbd0900fedbdf257e"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) sendmsg$auto_NL80211_CMD_STOP_P2P_DEVICE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f00000027c0)=ANY=[@ANYBLOB="30120000", @ANYRES16=r3, @ANYBLOB="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"], 0x1230}, 0x1, 0x0, 0x0, 0x4010}, 0x4000800) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x2, 0x1d2c, 0x3, 0x4, 0x15f4da0e, 0x6, 0x9, 0x100000000000000c, 0x8, 0x4, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) poll$auto(&(0x7f0000000240)={r1, 0x3, 0x9}, 0x3, 0x8) socket(0x2c, 0x1, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), 0xffffffffffffffff) 1.307807696s ago: executing program 2 (id=1619): mmap$auto(0x0, 0x20000000000000, 0xe2, 0xeb1, 0x405, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x1, 0xa, 0x2}) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x9, &(0x7f0000000000)={0xc, 0xf1, 0xb0, @raw=0x43}}) 1.075967674s ago: executing program 2 (id=1620): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x7, 0xef1, 0xffffffffffffffff, 0x336) socket(0xa, 0x3, 0x3b) syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = epoll_create$auto(0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r1, 0x0) epoll_wait$auto(r0, 0x0, 0xe007, 0x1) madvise$auto(0x110c230000, 0x1, 0x9) mmap$auto(0x0, 0xfff, 0x3, 0xeb1, 0xfffffffffffffffa, 0x0) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0x8, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x294000, 0x0) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000040)='/dev/binderfs/binder1\x00', 0x80100, 0x0) ioctl$auto_BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, 0x0) mmap$auto(0x3, 0x12, 0x4000000000de, 0x15, 0x6, 0x8000) bpf$auto_BPF_PROG_BIND_MAP(0x23, &(0x7f0000000b40)=@bpf_attr_4={0xffffffff, 0xffffffffffffffff, 0x101}, 0x96) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0x1d, 0x1, 0x7fff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x2001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00\xd6I\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xa8\xd3D\xd6O\xffmU\x03\xbcK\x86\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x8e\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfa\x00\x00\x00\x00\x00\x00', 0x100000a3d9) ioprio_set$auto(0x81b, 0xff, 0xffffffff) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r3, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) 417.304632ms ago: executing program 0 (id=1621): io_uring_register$auto_IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x3) (async) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xad6) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) (async) read$auto_vhci_fops_hci_vhci(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) (async) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0) (async) r2 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/cmdline\x00', 0x40, 0x0) writev$auto(r2, &(0x7f0000000040)={0x0, 0xb}, 0x8) (async, rerun: 32) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async, rerun: 32) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) landlock_create_ruleset$auto(0x0, 0x18, 0x0) (async) bpf$auto(0x0, 0x0, 0x6f4) (async, rerun: 64) socket(0xa, 0x2, 0x3a) (async, rerun: 64) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) io_uring_setup$auto(0x3, 0x0) (async) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) (async) read$auto(r3, 0x0, 0x20) (async, rerun: 64) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x48041, 0x0) (async, rerun: 64) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/ati_remote2/parameters/channel_mask\x00', 0x1e1a42, 0x0) write$auto(r5, &(0x7f0000000180)='7\x00\x00\xec\x007\xfe(\xbd\xb0\x86\xe0K\xcf\xcf\x8d\xf2S6\x9e\x81\xcdc\xd7\x19-7\xc2\x89\x9d\x8cR`\xab6F\xd6O\x8b[\"\x80\xd0\xd2!\xc5\xdf\x8c&\xbd\x12\xb0\xa9v\vK\xfe+\xfb4\x02l\t5:a\xbf\xaf\xe3VX\x8d/l\f\xef\x1c\xc9\x13\xf6\x86\xb9N\xeeq\'\xb8\xb0\xa4\xd8\x94\xb8\xbc\b1\xc5\xb7\xca\x8e\x94\x0e\xc9\x99C\x97\xc2]\x80,\xaa\xf5\x17\xacnQ>\aH\xf6\xd6`/f\xcf\x8d\xaa\x00\xd5\x91\x9f\x96\xc6\xa4\'N\xebE\x8b', 0x400000000003) write$auto(r4, 0x0, 0x6) kill$auto(0x0, 0x5ef5) unshare$auto(0x40000080) (async, rerun: 32) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20001, 0x0) (async, rerun: 32) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) sendfile$auto(r0, r6, 0x0, 0x1) 337.489789ms ago: executing program 2 (id=1622): unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20443, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000180)="eb2937be9f8ee434f6a729e1d8825ba95c852f44a6fa194930f2beba5d97c51ea3675f3ecf17db38b73251f06802b7f1a5b7badb9f23d02a2c504cddf1eed10ecb8b0f45167cf1c0ec7be3f2c9b4ee128c539492ce57") ioctl$auto_BLKRRPART(r0, 0x40044620, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x1, 0x0, 0x0, 0x0, 0x42) lstat$auto(0x0, &(0x7f0000000180)={0x0, 0x9, 0x6, 0x63, 0x0, 0xee01, 0x0, 0x8, 0x1ff, 0x40000002, 0x40000402, 0x9, 0x9, 0x2, 0x9, 0x6, 0x200000100103}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) socket(0x10, 0x2, 0x6) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) sysfs$auto(0x2, 0x48, 0x0) 263.087697ms ago: executing program 1 (id=1623): unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000180)="eb2937be9f8ee434f6a729e1d8825ba95c852f44a6fa194930f2beba5d97c51ea3675f3ecf17db38b73251f06802b7f1a5b7badb9f23d02a2c504cddf1eed10ecb8b0f45167cf1c0ec7be3f2c9b4ee128c539492ce57") ioctl$auto_BLKRRPART(r0, 0x40044620, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x1, 0x0, 0x0, 0x0, 0x42) lstat$auto(0x0, &(0x7f0000000180)={0x0, 0x9, 0x6, 0x63, 0x0, 0xee01, 0x0, 0x8, 0x1ff, 0x40000002, 0x40000402, 0x9, 0x9, 0x2, 0x9, 0x6, 0x200000100103}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) socket(0x10, 0x2, 0x6) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) sysfs$auto(0x2, 0x48, 0x0) 0s ago: executing program 3 (id=1624): unshare$auto(0x40000080) r0 = socket(0x2, 0x80002, 0x73) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket(0x2, 0x3, 0x100) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/smart_scan\x00', 0x102, 0x0) sendfile$auto(r0, 0x3, 0x0, 0x7ffff000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x48001, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0xa, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyq2\x00', 0x40001, 0x0) r2 = socket(0x2, 0x1, 0x106) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000000c0)={0x0, "459303ea522cb4fc68ae35c47d58fe5396177584b10ce7cb766436a52f102630", @inferred=r1}) r4 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}, 0x6e) sendmmsg$auto(r4, &(0x7f0000000080)={{&(0x7f0000000040), 0x12, 0x0, 0x6, 0x0, 0x1, 0xc}, 0x2}, 0x9, 0x20000000) setsockopt$auto(r2, 0x1, 0x12, &(0x7f0000000400)='\'\ak\xb6\xc8\vFx\xed\xd6\xf8\x00\x10\xa4#\x92`\xdb\xafL\x0f\xfbUV\xa6KH]Cv\xbf\xf2a\v', 0x7) write$auto(0x3, 0x0, 0xfffffdef) kernel console output (not intermixed with test programs): 35.097999][ T9667] R13: 00007f9c321e6218 R14: 00007f9c321e6180 R15: 00007fffc1d1e2f8 [ 335.098029][ T9667] [ 335.672521][ T9682] FAULT_INJECTION: forcing a failure. [ 335.672521][ T9682] name fail_futex, interval 1, probability 0, space 0, times 0 [ 335.685719][ T9682] CPU: 0 UID: 0 PID: 9682 Comm: syz.0.869 Tainted: G U L syzkaller #0 PREEMPT(full) [ 335.685758][ T9682] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 335.685767][ T9682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 335.685781][ T9682] Call Trace: [ 335.685789][ T9682] [ 335.685798][ T9682] dump_stack_lvl+0x16c/0x1f0 [ 335.685840][ T9682] should_fail_ex+0x512/0x640 [ 335.685872][ T9682] get_futex_key+0x1085/0x15f0 [ 335.685901][ T9682] ? __pfx_get_futex_key+0x10/0x10 [ 335.685936][ T9682] futex_wake+0xea/0x530 [ 335.685970][ T9682] ? __pfx_futex_wake+0x10/0x10 [ 335.686014][ T9682] do_futex+0x1e3/0x350 [ 335.686041][ T9682] ? __pfx_do_futex+0x10/0x10 [ 335.686066][ T9682] ? __might_fault+0xe3/0x190 [ 335.686100][ T9682] mm_release+0x24e/0x300 [ 335.686133][ T9682] do_exit+0x69e/0x2bd0 [ 335.686161][ T9682] ? __pfx_do_exit+0x10/0x10 [ 335.686182][ T9682] ? do_raw_spin_lock+0x12c/0x2b0 [ 335.686208][ T9682] ? find_held_lock+0x2b/0x80 [ 335.686242][ T9682] do_group_exit+0xd3/0x2a0 [ 335.686267][ T9682] get_signal+0x2671/0x26d0 [ 335.686308][ T9682] ? __pfx_get_signal+0x10/0x10 [ 335.686342][ T9682] ? do_futex+0x122/0x350 [ 335.686370][ T9682] arch_do_signal_or_restart+0x8f/0x7a0 [ 335.686405][ T9682] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 335.686447][ T9682] ? __pfx___x64_sys_futex+0x10/0x10 [ 335.686486][ T9682] exit_to_user_mode_loop+0x8c/0x540 [ 335.686519][ T9682] do_syscall_64+0x4ee/0xf80 [ 335.686542][ T9682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.686566][ T9682] RIP: 0033:0x7f526198f7c9 [ 335.686584][ T9682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.686607][ T9682] RSP: 002b:00007f526274b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 335.686629][ T9682] RAX: fffffffffffffe00 RBX: 00007f5261be6098 RCX: 00007f526198f7c9 [ 335.686644][ T9682] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5261be6098 [ 335.686659][ T9682] RBP: 00007f5261be6090 R08: 0000000000000000 R09: 0000000000000000 [ 335.686673][ T9682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.686687][ T9682] R13: 00007f5261be6128 R14: 00007ffda40ed6c0 R15: 00007ffda40ed7a8 [ 335.686717][ T9682] [ 335.947526][ T9684] netlink: 146 bytes leftover after parsing attributes in process `syz.1.871'. [ 336.000289][ T9684] bond0: Unable to set down delay as MII monitoring is disabled [ 337.720896][ T5848] Bluetooth: hci0: unexpected event 0x33 length: 124 > 10 [ 338.214108][ T9742] FAULT_INJECTION: forcing a failure. [ 338.214108][ T9742] name failslab, interval 1, probability 0, space 0, times 0 [ 338.304138][ T9742] CPU: 0 UID: 0 PID: 9742 Comm: syz.3.881 Tainted: G U L syzkaller #0 PREEMPT(full) [ 338.304180][ T9742] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 338.304189][ T9742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 338.304203][ T9742] Call Trace: [ 338.304210][ T9742] [ 338.304220][ T9742] dump_stack_lvl+0x16c/0x1f0 [ 338.304264][ T9742] should_fail_ex+0x512/0x640 [ 338.304292][ T9742] ? __kmalloc_cache_noprof+0x5f/0x800 [ 338.304331][ T9742] should_failslab+0xc2/0x120 [ 338.304369][ T9742] __kmalloc_cache_noprof+0x80/0x800 [ 338.304395][ T9742] ? __sys_socket+0xac/0x260 [ 338.304419][ T9742] ? fput+0x70/0xf0 [ 338.304440][ T9742] ? do_eventfd+0x67/0x390 [ 338.304473][ T9742] ? do_eventfd+0x67/0x390 [ 338.304502][ T9742] do_eventfd+0x67/0x390 [ 338.304529][ T9742] ? rcu_is_watching+0x12/0xc0 [ 338.304565][ T9742] __x64_sys_eventfd+0x32/0x50 [ 338.304596][ T9742] do_syscall_64+0xcd/0xf80 [ 338.304619][ T9742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.304645][ T9742] RIP: 0033:0x7fe72118f7c9 [ 338.304664][ T9742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.304688][ T9742] RSP: 002b:00007fe7220fd038 EFLAGS: 00000246 ORIG_RAX: 000000000000011c [ 338.304710][ T9742] RAX: ffffffffffffffda RBX: 00007fe7213e5fa0 RCX: 00007fe72118f7c9 [ 338.304727][ T9742] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000080 [ 338.304741][ T9742] RBP: 00007fe721213f91 R08: 0000000000000000 R09: 0000000000000000 [ 338.304755][ T9742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.304770][ T9742] R13: 00007fe7213e6038 R14: 00007fe7213e5fa0 R15: 00007ffd9535a9f8 [ 338.304800][ T9742] [ 340.001690][ T9757] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 340.176525][ T9763] netlink: 28 bytes leftover after parsing attributes in process `syz.0.887'. [ 340.737635][ T9780] Invalid ELF header magic: != ELF [ 342.177251][ T9793] FAULT_INJECTION: forcing a failure. [ 342.177251][ T9793] name failslab, interval 1, probability 0, space 0, times 0 [ 342.363983][ T9793] CPU: 0 UID: 0 PID: 9793 Comm: syz.2.891 Tainted: G U L syzkaller #0 PREEMPT(full) [ 342.364026][ T9793] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 342.364036][ T9793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 342.364058][ T9793] Call Trace: [ 342.364065][ T9793] [ 342.364075][ T9793] dump_stack_lvl+0x16c/0x1f0 [ 342.364118][ T9793] should_fail_ex+0x512/0x640 [ 342.364146][ T9793] ? kmem_cache_alloc_noprof+0x62/0x770 [ 342.364179][ T9793] should_failslab+0xc2/0x120 [ 342.364217][ T9793] kmem_cache_alloc_noprof+0x83/0x770 [ 342.364246][ T9793] ? __proc_create+0x2c8/0x8d0 [ 342.364285][ T9793] ? __proc_create+0x2c8/0x8d0 [ 342.364316][ T9793] __proc_create+0x2c8/0x8d0 [ 342.364350][ T9793] ? __pfx___proc_create+0x10/0x10 [ 342.364386][ T9793] ? _raw_write_unlock+0x28/0x50 [ 342.364422][ T9793] ? proc_register+0x559/0x8b0 [ 342.364459][ T9793] proc_create_reg+0x7d/0x180 [ 342.364496][ T9793] proc_create_data+0x86/0x110 [ 342.364530][ T9793] ? __pfx_proc_create_data+0x10/0x10 [ 342.364567][ T9793] ? cache_register_net+0x137/0x5e0 [ 342.364599][ T9793] cache_register_net+0x25a/0x5e0 [ 342.364626][ T9793] gss_svc_init_net+0x151/0x660 [ 342.364661][ T9793] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 342.364686][ T9793] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 342.364723][ T9793] ops_init+0x1e2/0x5f0 [ 342.364761][ T9793] setup_net+0x11d/0x3a0 [ 342.364797][ T9793] ? __pfx_setup_net+0x10/0x10 [ 342.364831][ T9793] ? lockdep_init_map_type+0x5c/0x270 [ 342.364856][ T9793] ? mutex_init_lockep+0x110/0x150 [ 342.364885][ T9793] copy_net_ns+0x351/0x7c0 [ 342.364926][ T9793] create_new_namespaces+0x3ea/0xab0 [ 342.364967][ T9793] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 342.365003][ T9793] ksys_unshare+0x45b/0xa40 [ 342.365043][ T9793] ? __pfx_ksys_unshare+0x10/0x10 [ 342.365089][ T9793] ? xfd_validate_state+0x61/0x180 [ 342.365120][ T9793] __x64_sys_unshare+0x31/0x40 [ 342.365141][ T9793] do_syscall_64+0xcd/0xf80 [ 342.365164][ T9793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.365189][ T9793] RIP: 0033:0x7f239f78f7c9 [ 342.365209][ T9793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.365234][ T9793] RSP: 002b:00007f23a0666038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 342.365256][ T9793] RAX: ffffffffffffffda RBX: 00007f239f9e5fa0 RCX: 00007f239f78f7c9 [ 342.365272][ T9793] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 342.365286][ T9793] RBP: 00007f239f813f91 R08: 0000000000000000 R09: 0000000000000000 [ 342.365301][ T9793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 342.365315][ T9793] R13: 00007f239f9e6038 R14: 00007f239f9e5fa0 R15: 00007ffd41db8158 [ 342.365346][ T9793] [ 347.261693][ T9866] binder: 9858:9866 ioctl 3 3 returned -22 [ 347.744638][ T9874] netlink: 28 bytes leftover after parsing attributes in process `syz.3.909'. [ 350.093290][ T9909] netlink: 206 bytes leftover after parsing attributes in process `syz.1.919'. [ 352.719269][ T9957] usbip-vudc usbip-vudc.0: gadget not bound [ 353.388153][ T9971] netlink: 28 bytes leftover after parsing attributes in process `syz.2.935'. [ 353.676575][ T9976] NFSD: Failed to start, no listeners configured. [ 353.947962][ T9975] netlink: 186 bytes leftover after parsing attributes in process `syz.1.936'. [ 354.421576][ T9990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.938'. [ 354.511122][ T30] audit: type=1806 audit(1768260437.526:12): xattr="." res=0 [ 355.446700][T10007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.939'. [ 355.500414][T10015] netlink: 13 bytes leftover after parsing attributes in process `syz.0.939'. [ 357.032799][T10040] usb usb3: usbfs: interface 0 claimed by hub while 'syz.0.946' sets config #3 [ 357.136391][T10050] bridge0: port 3(dummy0) entered blocking state [ 357.195943][T10050] bridge0: port 3(dummy0) entered disabled state [ 357.231176][T10050] dummy0: entered allmulticast mode [ 357.247249][T10050] dummy0: entered promiscuous mode [ 357.269847][T10050] bridge0: port 3(dummy0) entered blocking state [ 357.276438][T10050] bridge0: port 3(dummy0) entered forwarding state [ 358.238323][T10077] block nbd7: not configured, cannot reconfigure [ 358.769814][T10101] usbip-vudc usbip-vudc.0: gadget not bound [ 358.798946][T10099] netlink: 28 bytes leftover after parsing attributes in process `syz.0.955'. [ 359.016725][T10104] NFSD: Failed to start, no listeners configured. [ 360.531018][T10132] FAULT_INJECTION: forcing a failure. [ 360.531018][T10132] name failslab, interval 1, probability 0, space 0, times 0 [ 360.697665][T10121] netlink: 186 bytes leftover after parsing attributes in process `syz.0.958'. [ 360.718750][T10132] CPU: 0 UID: 0 PID: 10132 Comm: syz.3.961 Tainted: G U L syzkaller #0 PREEMPT(full) [ 360.718791][T10132] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 360.718800][T10132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 360.718814][T10132] Call Trace: [ 360.718821][T10132] [ 360.718830][T10132] dump_stack_lvl+0x16c/0x1f0 [ 360.718872][T10132] should_fail_ex+0x512/0x640 [ 360.718899][T10132] ? kmem_cache_alloc_noprof+0x62/0x770 [ 360.718931][T10132] should_failslab+0xc2/0x120 [ 360.718967][T10132] kmem_cache_alloc_noprof+0x83/0x770 [ 360.718996][T10132] ? security_file_alloc+0x34/0x2b0 [ 360.719041][T10132] ? security_file_alloc+0x34/0x2b0 [ 360.719070][T10132] security_file_alloc+0x34/0x2b0 [ 360.719101][T10132] init_file+0x93/0x4c0 [ 360.719125][T10132] alloc_empty_file+0x73/0x1e0 [ 360.719150][T10132] path_openat+0xde/0x3140 [ 360.719185][T10132] ? do_syscall_64+0xcd/0xf80 [ 360.719204][T10132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.719236][T10132] ? __pfx_path_openat+0x10/0x10 [ 360.719281][T10132] do_filp_open+0x20b/0x470 [ 360.719316][T10132] ? __pfx_do_filp_open+0x10/0x10 [ 360.719371][T10132] ? alloc_fd+0x471/0x7d0 [ 360.719412][T10132] do_sys_openat2+0x121/0x290 [ 360.719438][T10132] ? __pfx_do_sys_openat2+0x10/0x10 [ 360.719474][T10132] __x64_sys_openat+0x174/0x210 [ 360.719501][T10132] ? __pfx___x64_sys_openat+0x10/0x10 [ 360.719539][T10132] do_syscall_64+0xcd/0xf80 [ 360.719561][T10132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.719584][T10132] RIP: 0033:0x7fe72118f7c9 [ 360.719602][T10132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.719625][T10132] RSP: 002b:00007fe7220dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 360.719648][T10132] RAX: ffffffffffffffda RBX: 00007fe7213e6090 RCX: 00007fe72118f7c9 [ 360.719665][T10132] RDX: 0000000000000582 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 360.719680][T10132] RBP: 00007fe721213f91 R08: 0000000000000000 R09: 0000000000000000 [ 360.719695][T10132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.719708][T10132] R13: 00007fe7213e6128 R14: 00007fe7213e6090 R15: 00007ffd9535a9f8 [ 360.719738][T10132] [ 360.995593][T10123] netlink: 186 bytes leftover after parsing attributes in process `syz.1.959'. [ 361.740052][ T30] audit: type=1800 audit(1768260444.756:13): pid=10150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.964" name="dbroot" dev="configfs" ino=36799 res=0 errno=0 [ 361.808299][T10130] FAULT_INJECTION: forcing a failure. [ 361.808299][T10130] name failslab, interval 1, probability 0, space 0, times 0 [ 361.829612][T10150] db_root: cannot open: [ 361.941529][T10156] FAULT_INJECTION: forcing a failure. [ 361.941529][T10156] name failslab, interval 1, probability 0, space 0, times 0 [ 362.023935][T10156] CPU: 0 UID: 0 PID: 10156 Comm: syz.0.964 Tainted: G U L syzkaller #0 PREEMPT(full) [ 362.023977][T10156] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 362.023986][T10156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 362.024000][T10156] Call Trace: [ 362.024008][T10156] [ 362.024016][T10156] dump_stack_lvl+0x16c/0x1f0 [ 362.024063][T10156] should_fail_ex+0x512/0x640 [ 362.024090][T10156] ? fs_reclaim_acquire+0xae/0x150 [ 362.024132][T10156] should_failslab+0xc2/0x120 [ 362.024171][T10156] __kmalloc_noprof+0xeb/0x910 [ 362.024199][T10156] ? tomoyo_encode2+0x100/0x3e0 [ 362.024238][T10156] ? tomoyo_encode2+0x100/0x3e0 [ 362.024270][T10156] tomoyo_encode2+0x100/0x3e0 [ 362.024308][T10156] tomoyo_encode+0x29/0x50 [ 362.024340][T10156] tomoyo_realpath_from_path+0x18f/0x6e0 [ 362.024384][T10156] tomoyo_mkdev_perm+0x22b/0x570 [ 362.024410][T10156] ? tomoyo_mkdev_perm+0x217/0x570 [ 362.024440][T10156] ? __pfx_tomoyo_mkdev_perm+0x10/0x10 [ 362.024471][T10156] ? do_raw_spin_lock+0x12c/0x2b0 [ 362.024505][T10156] ? do_raw_spin_unlock+0x172/0x230 [ 362.024548][T10156] ? __pfx_current_check_access_path+0x10/0x10 [ 362.024583][T10156] ? simple_lookup+0x105/0x1d0 [ 362.024624][T10156] tomoyo_path_mknod+0x12a/0x190 [ 362.024671][T10156] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 362.024712][T10156] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 362.024754][T10156] security_path_mknod+0x161/0x310 [ 362.024785][T10156] do_mknodat+0x24e/0x6f0 [ 362.024821][T10156] ? __pfx_do_mknodat+0x10/0x10 [ 362.024856][T10156] ? getname_flags.part.0+0x1c5/0x550 [ 362.024889][T10156] __x64_sys_mknod+0x87/0xb0 [ 362.024927][T10156] do_syscall_64+0xcd/0xf80 [ 362.024951][T10156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.024976][T10156] RIP: 0033:0x7f526198f7c9 [ 362.024994][T10156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.025018][T10156] RSP: 002b:00007f526274b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 362.025041][T10156] RAX: ffffffffffffffda RBX: 00007f5261be6090 RCX: 00007f526198f7c9 [ 362.025057][T10156] RDX: 0000000000000103 RSI: 00000000000020e9 RDI: 00002000000003c0 [ 362.025072][T10156] RBP: 00007f5261a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 362.025086][T10156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.025101][T10156] R13: 00007f5261be6128 R14: 00007f5261be6090 R15: 00007ffda40ed7a8 [ 362.025132][T10156] [ 362.025154][T10156] ERROR: Out of memory at tomoyo_realpath_from_path. [ 362.290994][T10130] CPU: 0 UID: 0 PID: 10130 Comm: syz.3.961 Tainted: G U L syzkaller #0 PREEMPT(full) [ 362.291033][T10130] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 362.291043][T10130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 362.291062][T10130] Call Trace: [ 362.291069][T10130] [ 362.291078][T10130] dump_stack_lvl+0x16c/0x1f0 [ 362.291122][T10130] should_fail_ex+0x512/0x640 [ 362.291148][T10130] ? __kmalloc_cache_noprof+0x5f/0x800 [ 362.291178][T10130] should_failslab+0xc2/0x120 [ 362.291213][T10130] __kmalloc_cache_noprof+0x80/0x800 [ 362.291240][T10130] ? fuse_dev_alloc+0x8e/0x280 [ 362.291280][T10130] ? fuse_dev_alloc+0x8e/0x280 [ 362.291314][T10130] fuse_dev_alloc+0x8e/0x280 [ 362.291351][T10130] fuse_dev_alloc_install+0x13/0x40 [ 362.291388][T10130] cuse_channel_open+0x100/0x7f0 [ 362.291422][T10130] ? __pfx_cuse_channel_open+0x10/0x10 [ 362.291457][T10130] misc_open+0x26d/0x450 [ 362.291484][T10130] ? __pfx_misc_open+0x10/0x10 [ 362.291510][T10130] chrdev_open+0x234/0x6a0 [ 362.291545][T10130] ? __pfx_apparmor_file_open+0x10/0x10 [ 362.291570][T10130] ? __pfx_chrdev_open+0x10/0x10 [ 362.291607][T10130] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 362.291658][T10130] do_dentry_open+0x748/0x1590 [ 362.291694][T10130] ? __pfx_chrdev_open+0x10/0x10 [ 362.291738][T10130] vfs_open+0x82/0x3f0 [ 362.291768][T10130] path_openat+0x2078/0x3140 [ 362.291814][T10130] ? __pfx_path_openat+0x10/0x10 [ 362.291861][T10130] do_filp_open+0x20b/0x470 [ 362.291898][T10130] ? __pfx_do_filp_open+0x10/0x10 [ 362.291956][T10130] ? alloc_fd+0x471/0x7d0 [ 362.291999][T10130] do_sys_openat2+0x121/0x290 [ 362.292026][T10130] ? __pfx_do_sys_openat2+0x10/0x10 [ 362.292055][T10130] ? find_held_lock+0x2b/0x80 [ 362.292093][T10130] __x64_sys_openat+0x174/0x210 [ 362.292121][T10130] ? __pfx___x64_sys_openat+0x10/0x10 [ 362.292161][T10130] do_syscall_64+0xcd/0xf80 [ 362.292184][T10130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.292208][T10130] RIP: 0033:0x7fe72118f7c9 [ 362.292227][T10130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.292249][T10130] RSP: 002b:00007fe7220fd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 362.292272][T10130] RAX: ffffffffffffffda RBX: 00007fe7213e5fa0 RCX: 00007fe72118f7c9 [ 362.292287][T10130] RDX: 0000000000000000 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 362.292302][T10130] RBP: 00007fe721213f91 R08: 0000000000000000 R09: 0000000000000000 [ 362.292317][T10130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.292331][T10130] R13: 00007fe7213e6038 R14: 00007fe7213e5fa0 R15: 00007ffd9535a9f8 [ 362.292362][T10130] [ 366.704510][T10203] FAULT_INJECTION: forcing a failure. [ 366.704510][T10203] name failslab, interval 1, probability 0, space 0, times 0 [ 366.793416][T10200] netlink: 186 bytes leftover after parsing attributes in process `syz.0.972'. [ 366.811865][T10203] CPU: 0 UID: 0 PID: 10203 Comm: syz.1.973 Tainted: G U L syzkaller #0 PREEMPT(full) [ 366.811911][T10203] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 366.811920][T10203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 366.811934][T10203] Call Trace: [ 366.811944][T10203] [ 366.811953][T10203] dump_stack_lvl+0x16c/0x1f0 [ 366.811997][T10203] should_fail_ex+0x512/0x640 [ 366.812025][T10203] ? __kmalloc_noprof+0xca/0x910 [ 366.812054][T10203] should_failslab+0xc2/0x120 [ 366.812093][T10203] __kmalloc_noprof+0xeb/0x910 [ 366.812119][T10203] ? __pfx___might_resched+0x10/0x10 [ 366.812153][T10203] ? load_msg+0x118/0x4a0 [ 366.812196][T10203] ? load_msg+0x118/0x4a0 [ 366.812279][T10203] load_msg+0x118/0x4a0 [ 366.812318][T10203] do_msgrcv+0x202/0x16c0 [ 366.812365][T10203] ? do_futex+0x122/0x350 [ 366.812393][T10203] ? __pfx_do_msg_fill+0x10/0x10 [ 366.812437][T10203] ? __pfx_do_msgrcv+0x10/0x10 [ 366.812474][T10203] ? __x64_sys_futex+0x1e0/0x4c0 [ 366.812511][T10203] ? xfd_validate_state+0x61/0x180 [ 366.812533][T10203] ? __pfx___do_sys_rseq+0x10/0x10 [ 366.812567][T10203] ? do_syscall_64+0xcd/0xf80 [ 366.812587][T10203] do_syscall_64+0xcd/0xf80 [ 366.812609][T10203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.812635][T10203] RIP: 0033:0x7f9c31f8f7c9 [ 366.812660][T10203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.812683][T10203] RSP: 002b:00007f9c32dcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000046 [ 366.812707][T10203] RAX: ffffffffffffffda RBX: 00007f9c321e5fa0 RCX: 00007f9c31f8f7c9 [ 366.812723][T10203] RDX: 0000002400000000 RSI: 0000000000000000 RDI: 00000000000000ff [ 366.812738][T10203] RBP: 00007f9c32013f91 R08: 000000006bc2cc7d R09: 0000000000000000 [ 366.812754][T10203] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 366.812768][T10203] R13: 00007f9c321e6038 R14: 00007f9c321e5fa0 R15: 00007fffc1d1e2f8 [ 366.812799][T10203] [ 367.553912][T10216] zswap: compressor not available [ 368.306967][ T30] audit: type=1800 audit(1768260451.326:14): pid=10246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.982" name="dbroot" dev="configfs" ino=37296 res=0 errno=0 [ 370.405360][T10277] netlink: 342 bytes leftover after parsing attributes in process `syz.1.988'. [ 370.665168][T10267] netlink: 186 bytes leftover after parsing attributes in process `syz.0.986'. [ 371.987871][T10300] netlink: 186 bytes leftover after parsing attributes in process `syz.0.1000'. [ 374.226444][T10343] random: crng reseeded on system resumption [ 377.249409][ T30] audit: type=1800 audit(1768260460.266:15): pid=10381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1010" name="dbroot" dev="configfs" ino=38174 res=0 errno=0 [ 377.937141][T10398] random: crng reseeded on system resumption [ 380.761703][T10435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1023'. [ 384.982353][T10478] FAULT_INJECTION: forcing a failure. [ 384.982353][T10478] name failslab, interval 1, probability 0, space 0, times 0 [ 385.056727][T10477] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 385.085958][T10478] CPU: 0 UID: 0 PID: 10478 Comm: syz.0.1033 Tainted: G U L syzkaller #0 PREEMPT(full) [ 385.086050][T10478] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 385.086059][T10478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 385.086074][T10478] Call Trace: [ 385.086082][T10478] [ 385.086091][T10478] dump_stack_lvl+0x16c/0x1f0 [ 385.086134][T10478] should_fail_ex+0x512/0x640 [ 385.086163][T10478] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 385.086196][T10478] should_failslab+0xc2/0x120 [ 385.086234][T10478] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 385.086268][T10478] ? dquot_alloc_inode+0x51b/0xb90 [ 385.086297][T10478] ? __dquot_initialize+0x299/0xd50 [ 385.086323][T10478] ? __d_alloc+0x35/0xa80 [ 385.086349][T10478] ? __d_alloc+0x35/0xa80 [ 385.086368][T10478] __d_alloc+0x35/0xa80 [ 385.086392][T10478] d_alloc_pseudo+0x1c/0xc0 [ 385.086422][T10478] alloc_file_pseudo+0xcf/0x230 [ 385.086450][T10478] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 385.086485][T10478] __shmem_file_setup+0x1a8/0x350 [ 385.086528][T10478] shmem_zero_setup+0x93/0x1b0 [ 385.086560][T10478] __mmap_region+0x2271/0x2a00 [ 385.086591][T10478] ? __lock_acquire+0x436/0x2890 [ 385.086613][T10478] ? __pfx___mmap_region+0x10/0x10 [ 385.086650][T10478] ? lock_acquire+0x179/0x330 [ 385.086683][T10478] ? finish_task_switch.isra.0+0x207/0xbd0 [ 385.086776][T10478] ? rcu_is_watching+0x12/0xc0 [ 385.086818][T10478] mmap_region+0x1ab/0x3f0 [ 385.086847][T10478] ? __get_unmapped_area+0x267/0x3f0 [ 385.086887][T10478] do_mmap+0xa3e/0x1210 [ 385.086934][T10478] ? __pfx_do_mmap+0x10/0x10 [ 385.086977][T10478] ? __pfx_down_write_killable+0x10/0x10 [ 385.087011][T10478] vm_mmap_pgoff+0x29e/0x470 [ 385.087050][T10478] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 385.087093][T10478] ? __x64_sys_futex+0x1e0/0x4c0 [ 385.087119][T10478] ? __x64_sys_futex+0x1e9/0x4c0 [ 385.087151][T10478] ksys_mmap_pgoff+0x7d/0x5c0 [ 385.087185][T10478] ? xfd_validate_state+0x61/0x180 [ 385.087206][T10478] ? __pfx_ksys_write+0x10/0x10 [ 385.087244][T10478] __x64_sys_mmap+0x125/0x190 [ 385.087272][T10478] do_syscall_64+0xcd/0xf80 [ 385.087295][T10478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.087321][T10478] RIP: 0033:0x7f526198f7c9 [ 385.087340][T10478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.087364][T10478] RSP: 002b:00007f526276c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 385.087387][T10478] RAX: ffffffffffffffda RBX: 00007f5261be5fa0 RCX: 00007f526198f7c9 [ 385.087403][T10478] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 385.087418][T10478] RBP: 00007f5261a13f91 R08: fffffffffffffffa R09: 0000000000008000 [ 385.087433][T10478] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 385.087447][T10478] R13: 00007f5261be6038 R14: 00007f5261be5fa0 R15: 00007ffda40ed7a8 [ 385.087478][T10478] [ 386.588439][T10492] netlink: 266 bytes leftover after parsing attributes in process `syz.0.1037'. [ 386.622752][T10492] IPv6: NLM_F_CREATE should be specified when creating new route [ 386.914715][T10482] netlink: 186 bytes leftover after parsing attributes in process `syz.3.1034'. [ 387.134479][T10484] netlink: 186 bytes leftover after parsing attributes in process `syz.1.1035'. [ 388.808295][T10526] ubi0: attaching mtd0 [ 388.830570][T10526] ubi0: scanning is finished [ 388.855366][T10526] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 389.127102][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.133586][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.208352][T10526] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 389.811192][T10541] netlink: 186 bytes leftover after parsing attributes in process `syz.0.1047'. [ 390.754122][T10565] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input22 [ 393.468927][T10604] mtrr: base(0x1000) is not aligned on a size(0x0000) boundary [ 393.863133][T10608] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1058'. [ 400.334636][T10708] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1080'. [ 400.808604][T10723] mkiss: ax0: crc mode is auto. [ 400.826876][T10725] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1084'. [ 400.874456][T10717] netlink: 186 bytes leftover after parsing attributes in process `syz.3.1082'. [ 401.574503][T10734] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 403.064344][T10751] netlink: 186 bytes leftover after parsing attributes in process `syz.0.1092'. [ 403.155449][T10752] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1093'. [ 405.542590][T10803] netlink: 186 bytes leftover after parsing attributes in process `syz.3.1103'. [ 410.647395][T10894] Unable to find swap-space signature [ 412.012595][T10907] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1122'. [ 414.202167][ T30] audit: type=1800 audit(1768260497.216:16): pid=10940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1128" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 418.751620][T11001] zram: Added device: zram1 [ 420.683454][T11009] netlink: 186 bytes leftover after parsing attributes in process `syz.0.1142'. [ 420.892399][T11018] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1143'. [ 422.615543][T11054] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1149'. [ 424.027009][T11075] zram: Added device: zram2 [ 425.707250][T11106] FAULT_INJECTION: forcing a failure. [ 425.707250][T11106] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 425.794573][T11106] CPU: 0 UID: 0 PID: 11106 Comm: syz.2.1160 Tainted: G U L syzkaller #0 PREEMPT(full) [ 425.794614][T11106] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 425.794623][T11106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 425.794642][T11106] Call Trace: [ 425.794650][T11106] [ 425.794659][T11106] dump_stack_lvl+0x16c/0x1f0 [ 425.794702][T11106] should_fail_ex+0x512/0x640 [ 425.794735][T11106] should_fail_alloc_page+0xe7/0x130 [ 425.794776][T11106] prepare_alloc_pages+0x401/0x670 [ 425.794817][T11106] ? rcu_is_watching+0x12/0xc0 [ 425.794854][T11106] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 425.794884][T11106] ? should_fail_alloc_page+0xee/0x130 [ 425.794925][T11106] ? rcu_is_watching+0x12/0xc0 [ 425.794958][T11106] ? trace_mm_page_alloc+0x11b/0x180 [ 425.794996][T11106] ? __alloc_frozen_pages_noprof+0x292/0x2430 [ 425.795031][T11106] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 425.795062][T11106] ? find_held_lock+0x2b/0x80 [ 425.795094][T11106] ? is_bpf_text_address+0x8a/0x1a0 [ 425.795126][T11106] ? bpf_ksym_find+0x124/0x1c0 [ 425.795162][T11106] ? kernel_text_address+0x8d/0x100 [ 425.795190][T11106] ? __kernel_text_address+0xd/0x40 [ 425.795216][T11106] ? unwind_get_return_address+0x59/0xa0 [ 425.795259][T11106] alloc_pages_bulk_noprof+0x77a/0x1410 [ 425.795289][T11106] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 425.795328][T11106] ? policy_nodemask+0xea/0x4e0 [ 425.795369][T11106] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 425.795401][T11106] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 425.795451][T11106] __kasan_populate_vmalloc+0xfb/0x220 [ 425.795490][T11106] alloc_vmap_area+0x98d/0x2a50 [ 425.795539][T11106] ? __pfx_alloc_vmap_area+0x10/0x10 [ 425.795583][T11106] __get_vm_area_node+0x1ca/0x330 [ 425.795627][T11106] __vmalloc_node_range_noprof+0x247/0x16b0 [ 425.795652][T11106] ? vidtv_s302m_encoder_init+0x1dd/0x890 [ 425.795679][T11106] ? dvb_dmxdev_filter_start+0x1b6/0xe10 [ 425.795706][T11106] ? dvb_demux_do_ioctl+0x9de/0x12f0 [ 425.795731][T11106] ? dvb_usercopy+0x167/0x340 [ 425.795752][T11106] ? dvb_demux_ioctl+0x29/0x40 [ 425.795775][T11106] ? do_syscall_64+0xcd/0xf80 [ 425.795795][T11106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.795825][T11106] ? vidtv_s302m_encoder_init+0x1dd/0x890 [ 425.795860][T11106] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 425.795899][T11106] ? vidtv_s302m_encoder_init+0x1dd/0x890 [ 425.795926][T11106] __vmalloc_node_noprof+0xad/0xf0 [ 425.795949][T11106] ? vidtv_s302m_encoder_init+0x1dd/0x890 [ 425.795980][T11106] vidtv_s302m_encoder_init+0x1dd/0x890 [ 425.796009][T11106] ? __pfx_vidtv_s302m_encoder_init+0x10/0x10 [ 425.796037][T11106] ? rcu_is_watching+0x12/0xc0 [ 425.796074][T11106] ? vidtv_psi_registration_desc_init+0x31/0x220 [ 425.796122][T11106] vidtv_channel_s302m_init+0x44b/0x970 [ 425.796163][T11106] ? __pfx_vidtv_channel_s302m_init+0x10/0x10 [ 425.796189][T11106] ? trace_kmalloc+0x2b/0xb0 [ 425.796224][T11106] ? __kmalloc_node_track_caller_noprof+0x370/0x930 [ 425.796267][T11106] ? __asan_memcpy+0x3c/0x60 [ 425.796299][T11106] vidtv_channels_init+0x4c/0xb0 [ 425.796326][T11106] vidtv_mux_init+0x9c8/0xbe0 [ 425.796358][T11106] vidtv_start_feed+0x33e/0x4d0 [ 425.796393][T11106] ? __pfx_vidtv_start_feed+0x10/0x10 [ 425.796458][T11106] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 425.796500][T11106] ? mark_held_locks+0x49/0x80 [ 425.796527][T11106] ? __pfx_vidtv_start_feed+0x10/0x10 [ 425.796561][T11106] dmx_ts_feed_start_filtering+0xf6/0x220 [ 425.796596][T11106] dvb_dmxdev_start_feed+0x273/0x3f0 [ 425.796626][T11106] dvb_dmxdev_filter_start+0x1b6/0xe10 [ 425.796656][T11106] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 425.796686][T11106] dvb_demux_do_ioctl+0x9de/0x12f0 [ 425.796723][T11106] dvb_usercopy+0x167/0x340 [ 425.796744][T11106] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 425.796774][T11106] ? __pfx_dvb_usercopy+0x10/0x10 [ 425.796808][T11106] ? __fget_files+0x20e/0x3c0 [ 425.796848][T11106] dvb_demux_ioctl+0x29/0x40 [ 425.796871][T11106] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 425.796895][T11106] __x64_sys_ioctl+0x18e/0x210 [ 425.796931][T11106] do_syscall_64+0xcd/0xf80 [ 425.796955][T11106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.796980][T11106] RIP: 0033:0x7f239f78f7c9 [ 425.797000][T11106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.797025][T11106] RSP: 002b:00007f23a0666038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 425.797047][T11106] RAX: ffffffffffffffda RBX: 00007f239f9e5fa0 RCX: 00007f239f78f7c9 [ 425.797064][T11106] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000003 [ 425.797078][T11106] RBP: 00007f239f813f91 R08: 0000000000000000 R09: 0000000000000000 [ 425.797093][T11106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.797107][T11106] R13: 00007f239f9e6038 R14: 00007f239f9e5fa0 R15: 00007ffd41db8158 [ 425.797144][T11106] [ 426.307333][T11106] syz.2.1160: vmalloc error: size 65024, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 426.322668][T11106] CPU: 0 UID: 0 PID: 11106 Comm: syz.2.1160 Tainted: G U L syzkaller #0 PREEMPT(full) [ 426.322707][T11106] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 426.322716][T11106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 426.322730][T11106] Call Trace: [ 426.322738][T11106] [ 426.322747][T11106] dump_stack_lvl+0x16c/0x1f0 [ 426.322790][T11106] warn_alloc+0x248/0x3a0 [ 426.322822][T11106] ? __pfx_warn_alloc+0x10/0x10 [ 426.322851][T11106] ? kfree+0x2f8/0x6e0 [ 426.322876][T11106] ? __get_vm_area_node+0x2cd/0x330 [ 426.322920][T11106] ? __get_vm_area_node+0x2cd/0x330 [ 426.322956][T11106] ? __get_vm_area_node+0x1dc/0x330 [ 426.322993][T11106] ? __get_vm_area_node+0x208/0x330 [ 426.323038][T11106] __vmalloc_node_range_noprof+0xbe0/0x16b0 [ 426.323061][T11106] ? dvb_dmxdev_filter_start+0x1b6/0xe10 [ 426.323090][T11106] ? dvb_usercopy+0x167/0x340 [ 426.323118][T11106] ? dvb_demux_ioctl+0x29/0x40 [ 426.323141][T11106] ? do_syscall_64+0xcd/0xf80 [ 426.323161][T11106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.323192][T11106] ? vidtv_s302m_encoder_init+0x1dd/0x890 [ 426.323227][T11106] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 426.323266][T11106] ? vidtv_s302m_encoder_init+0x1dd/0x890 [ 426.323293][T11106] __vmalloc_node_noprof+0xad/0xf0 [ 426.323316][T11106] ? vidtv_s302m_encoder_init+0x1dd/0x890 [ 426.323347][T11106] vidtv_s302m_encoder_init+0x1dd/0x890 [ 426.323376][T11106] ? __pfx_vidtv_s302m_encoder_init+0x10/0x10 [ 426.323410][T11106] ? rcu_is_watching+0x12/0xc0 [ 426.323454][T11106] ? vidtv_psi_registration_desc_init+0x31/0x220 [ 426.323502][T11106] vidtv_channel_s302m_init+0x44b/0x970 [ 426.323537][T11106] ? __pfx_vidtv_channel_s302m_init+0x10/0x10 [ 426.323568][T11106] ? trace_kmalloc+0x2b/0xb0 [ 426.323603][T11106] ? __kmalloc_node_track_caller_noprof+0x370/0x930 [ 426.323646][T11106] ? __asan_memcpy+0x3c/0x60 [ 426.323681][T11106] vidtv_channels_init+0x4c/0xb0 [ 426.323714][T11106] vidtv_mux_init+0x9c8/0xbe0 [ 426.323745][T11106] vidtv_start_feed+0x33e/0x4d0 [ 426.323780][T11106] ? __pfx_vidtv_start_feed+0x10/0x10 [ 426.323817][T11106] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 426.323858][T11106] ? mark_held_locks+0x49/0x80 [ 426.323885][T11106] ? __pfx_vidtv_start_feed+0x10/0x10 [ 426.323920][T11106] dmx_ts_feed_start_filtering+0xf6/0x220 [ 426.323955][T11106] dvb_dmxdev_start_feed+0x273/0x3f0 [ 426.323984][T11106] dvb_dmxdev_filter_start+0x1b6/0xe10 [ 426.324015][T11106] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 426.324045][T11106] dvb_demux_do_ioctl+0x9de/0x12f0 [ 426.324081][T11106] dvb_usercopy+0x167/0x340 [ 426.324103][T11106] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 426.324144][T11106] ? __pfx_dvb_usercopy+0x10/0x10 [ 426.324179][T11106] ? __fget_files+0x20e/0x3c0 [ 426.324220][T11106] dvb_demux_ioctl+0x29/0x40 [ 426.324243][T11106] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 426.324272][T11106] __x64_sys_ioctl+0x18e/0x210 [ 426.324304][T11106] do_syscall_64+0xcd/0xf80 [ 426.324328][T11106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.324353][T11106] RIP: 0033:0x7f239f78f7c9 [ 426.324373][T11106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.324400][T11106] RSP: 002b:00007f23a0666038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 426.324428][T11106] RAX: ffffffffffffffda RBX: 00007f239f9e5fa0 RCX: 00007f239f78f7c9 [ 426.324445][T11106] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000003 [ 426.324459][T11106] RBP: 00007f239f813f91 R08: 0000000000000000 R09: 0000000000000000 [ 426.324474][T11106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 426.324488][T11106] R13: 00007f239f9e6038 R14: 00007f239f9e5fa0 R15: 00007ffd41db8158 [ 426.324520][T11106] [ 426.324597][T11106] Mem-Info: [ 426.739487][T11106] active_anon:37635 inactive_anon:32 isolated_anon:0 [ 426.739487][T11106] active_file:16298 inactive_file:42605 isolated_file:0 [ 426.739487][T11106] unevictable:768 dirty:911 writeback:0 [ 426.739487][T11106] slab_reclaimable:11810 slab_unreclaimable:92844 [ 426.739487][T11106] mapped:29439 shmem:28196 pagetables:1382 [ 426.739487][T11106] sec_pagetables:0 bounce:0 [ 426.739487][T11106] kernel_misc_reclaimable:0 [ 426.739487][T11106] free:1285906 free_pcp:9634 free_cma:0 [ 426.836581][T11106] Node 0 active_anon:146692kB inactive_anon:128kB active_file:65192kB inactive_file:170284kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117808kB dirty:3640kB writeback:0kB shmem:107400kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12832kB pagetables:5132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 427.157592][T11106] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:400kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 427.309945][T11106] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 427.383108][T11106] lowmem_reserve[]: 0 2481 2483 2483 2483 [ 427.393277][T11106] Node 0 DMA32 free:1259168kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB free_highatomic:0KB active_anon:122768kB inactive_anon:128kB active_file:65192kB inactive_file:170312kB unevictable:1536kB writepending:3800kB zspages:120kB present:3129332kB managed:2541016kB mlocked:0kB bounce:0kB free_pcp:39888kB local_pcp:39888kB free_cma:0kB [ 427.521495][T11106] lowmem_reserve[]: 0 0 1 1 1 [ 427.537920][T11106] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 427.628769][T11106] lowmem_reserve[]: 0 0 0 0 0 [ 427.638890][T11106] Node 1 Normal free:3899268kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:8880kB local_pcp:8880kB free_cma:0kB [ 427.751808][T11106] lowmem_reserve[]: 0 0 0 0 0 [ 427.761644][T11106] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 427.791482][T11106] Node 0 DMA32: 7198*4kB (UME) 4173*8kB (UM) 2256*16kB (UME) 1172*32kB (UME) 405*64kB (UME) 504*128kB (UME) 375*256kB (UM) 230*512kB (UME) 85*1024kB (UM) 16*2048kB (UM) 176*4096kB (UM) = 1280672kB [ 427.846951][T11114] netlink: 186 bytes leftover after parsing attributes in process `syz.3.1161'. [ 427.856268][T11106] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 427.878323][T11106] Node 1 Normal: 13*4kB (UME) 58*8kB (UME) 24*16kB (UME) 226*32kB (UME) 113*64kB (UME) 25*128kB (UME) 11*256kB (UM) 8*512kB (UM) 5*1024kB (UME) 5*2048kB (UE) 942*4096kB (UM) = 3899268kB [ 427.904407][T11106] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 427.941512][T11106] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 427.961110][T11106] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 427.989798][T11106] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 428.012718][T11106] 72635 total pagecache pages [ 428.017475][T11106] 130 pages in swap cache [ 428.022816][T11106] Free swap = 123836kB [ 428.027006][T11106] Total swap = 124996kB [ 428.031220][T11106] 2097051 pages RAM [ 428.058250][T11106] 0 pages HighMem/MovableOnly [ 428.073873][T11106] 429771 pages reserved [ 428.087698][T11106] 0 pages cma reserved [ 429.104388][T11133] random: crng reseeded on system resumption [ 430.030405][T11145] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1170'. [ 430.093923][T11145] bond0: entered promiscuous mode [ 430.109203][T11145] bond_slave_0: entered promiscuous mode [ 430.132846][T11145] bond0: entered allmulticast mode [ 430.138009][T11145] bond_slave_0: entered allmulticast mode [ 434.262852][T11207] netlink: 186 bytes leftover after parsing attributes in process `syz.1.1183'. [ 434.570114][T11221] vivid-007: ================= START STATUS ================= [ 434.625532][T11221] vivid-007: Generate PTS: true [ 434.663572][T11221] vivid-007: Generate SCR: true [ 434.685281][T11221] tpg source WxH: 320x240 (Y'CbCr) [ 434.690450][T11221] tpg field: 1 [ 434.740289][T11221] tpg crop: (0,0)/320x240 [ 434.789013][T11221] tpg compose: (0,0)/320x240 [ 434.799146][T11221] tpg colorspace: 8 [ 434.829119][T11221] tpg transfer function: 0/0 [ 434.854794][T11221] tpg Y'CbCr encoding: 0/0 [ 434.885144][T11221] tpg quantization: 0/0 [ 434.910503][T11221] tpg RGB range: 0/2 [ 434.935967][T11221] vivid-007: ================== END STATUS ================== [ 435.431236][T11242] futex_wake_op: syz.0.1192 tries to shift op by -2048; fix this program [ 435.474086][T11242] futex_wake_op: syz.0.1192 tries to shift op by -2048; fix this program [ 437.417748][T11270] netlink: 186 bytes leftover after parsing attributes in process `syz.0.1197'. [ 438.801996][T11307] ACPI: Enabling force_remove is not supported anymore. Please report to linux-acpi@vger.kernel.org if you depend on this functionality [ 439.319806][T11296] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1204'. [ 440.507194][T11328] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1212'. [ 441.972317][T11360] FAULT_INJECTION: forcing a failure. [ 441.972317][T11360] name failslab, interval 1, probability 0, space 0, times 0 [ 442.091618][T11360] CPU: 0 UID: 0 PID: 11360 Comm: syz.0.1217 Tainted: G U L syzkaller #0 PREEMPT(full) [ 442.091658][T11360] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 442.091666][T11360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 442.091680][T11360] Call Trace: [ 442.091687][T11360] [ 442.091696][T11360] dump_stack_lvl+0x16c/0x1f0 [ 442.091745][T11360] should_fail_ex+0x512/0x640 [ 442.091772][T11360] ? __kmalloc_noprof+0xca/0x910 [ 442.091799][T11360] should_failslab+0xc2/0x120 [ 442.091836][T11360] __kmalloc_noprof+0xeb/0x910 [ 442.091866][T11360] ? sk_prot_alloc+0x1a8/0x2a0 [ 442.091908][T11360] ? sk_prot_alloc+0x1a8/0x2a0 [ 442.091943][T11360] sk_prot_alloc+0x1a8/0x2a0 [ 442.091983][T11360] sk_alloc+0x36/0xe30 [ 442.092017][T11360] __netlink_create+0x5e/0x2c0 [ 442.092046][T11360] ? __wake_up+0x3f/0x60 [ 442.092082][T11360] netlink_create+0x39e/0x620 [ 442.092118][T11360] __sock_create+0x339/0x8a0 [ 442.092146][T11360] __sys_socket+0x14d/0x260 [ 442.092168][T11360] ? ptrace_check_attach+0x9c/0x3f0 [ 442.092202][T11360] ? __pfx___sys_socket+0x10/0x10 [ 442.092225][T11360] ? xfd_validate_state+0x61/0x180 [ 442.092246][T11360] ? do_raw_read_unlock+0x44/0xe0 [ 442.092279][T11360] __x64_sys_socket+0x72/0xb0 [ 442.092302][T11360] ? lockdep_hardirqs_on+0x7c/0x110 [ 442.092340][T11360] do_syscall_64+0xcd/0xf80 [ 442.092363][T11360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.092386][T11360] RIP: 0033:0x7f526198f7c9 [ 442.092404][T11360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.092426][T11360] RSP: 002b:00007f525fbd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 442.092452][T11360] RAX: ffffffffffffffda RBX: 00007f5261be6270 RCX: 00007f526198f7c9 [ 442.092468][T11360] RDX: 0000000000000006 RSI: 0000000000000003 RDI: 0000000000000010 [ 442.092483][T11360] RBP: 00007f5261a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 442.092498][T11360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.092512][T11360] R13: 00007f5261be6308 R14: 00007f5261be6270 R15: 00007ffda40ed7a8 [ 442.092542][T11360] [ 445.162036][T11397] FAULT_INJECTION: forcing a failure. [ 445.162036][T11397] name failslab, interval 1, probability 0, space 0, times 0 [ 445.265088][T11397] CPU: 0 UID: 0 PID: 11397 Comm: syz.3.1227 Tainted: G U L syzkaller #0 PREEMPT(full) [ 445.265131][T11397] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 445.265140][T11397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 445.265155][T11397] Call Trace: [ 445.265162][T11397] [ 445.265171][T11397] dump_stack_lvl+0x16c/0x1f0 [ 445.265215][T11397] should_fail_ex+0x512/0x640 [ 445.265243][T11397] ? __kmalloc_cache_noprof+0x5f/0x800 [ 445.265274][T11397] should_failslab+0xc2/0x120 [ 445.265312][T11397] __kmalloc_cache_noprof+0x80/0x800 [ 445.265341][T11397] ? rcu_is_watching+0x12/0xc0 [ 445.265374][T11397] ? __request_module+0x2ad/0x660 [ 445.265405][T11397] ? lockdep_hardirqs_on+0x7c/0x110 [ 445.265447][T11397] ? __request_module+0x2ad/0x660 [ 445.265478][T11397] __request_module+0x2ad/0x660 [ 445.265509][T11397] ? __pfx___request_module+0x10/0x10 [ 445.265553][T11397] ? rcu_is_watching+0x12/0xc0 [ 445.265589][T11397] ? lockdep_hardirqs_on+0x7c/0x110 [ 445.265633][T11397] netlink_create+0x226/0x620 [ 445.265672][T11397] __sock_create+0x339/0x8a0 [ 445.265709][T11397] __sys_socket+0x14d/0x260 [ 445.265732][T11397] ? fput+0x70/0xf0 [ 445.265755][T11397] ? __pfx___sys_socket+0x10/0x10 [ 445.265788][T11397] ? xfd_validate_state+0x61/0x180 [ 445.265809][T11397] ? __pfx_ksys_write+0x10/0x10 [ 445.265850][T11397] __x64_sys_socket+0x72/0xb0 [ 445.265873][T11397] ? lockdep_hardirqs_on+0x7c/0x110 [ 445.265911][T11397] do_syscall_64+0xcd/0xf80 [ 445.265935][T11397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.265959][T11397] RIP: 0033:0x7fe72118f7c9 [ 445.265978][T11397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.266002][T11397] RSP: 002b:00007fe7220fd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 445.266024][T11397] RAX: ffffffffffffffda RBX: 00007fe7213e5fa0 RCX: 00007fe72118f7c9 [ 445.266041][T11397] RDX: 000000000000001f RSI: 0000000000000003 RDI: 0000000000000010 [ 445.266055][T11397] RBP: 00007fe721213f91 R08: 0000000000000000 R09: 0000000000000000 [ 445.266070][T11397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 445.266085][T11397] R13: 00007fe7213e6038 R14: 00007fe7213e5fa0 R15: 00007ffd9535a9f8 [ 445.266116][T11397] [ 447.214451][T11425] netlink: set zone limit has 8 unknown bytes [ 447.605947][T11435] FAULT_INJECTION: forcing a failure. [ 447.605947][T11435] name fail_futex, interval 1, probability 0, space 0, times 0 [ 447.670678][T11435] CPU: 0 UID: 0 PID: 11435 Comm: syz.1.1236 Tainted: G U L syzkaller #0 PREEMPT(full) [ 447.670720][T11435] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 447.670729][T11435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 447.670744][T11435] Call Trace: [ 447.670751][T11435] [ 447.670760][T11435] dump_stack_lvl+0x16c/0x1f0 [ 447.670803][T11435] should_fail_ex+0x512/0x640 [ 447.670831][T11435] ? __pfx_stack_trace_save+0x10/0x10 [ 447.670873][T11435] get_futex_key+0x1d0/0x15f0 [ 447.670902][T11435] ? __pfx_get_futex_key+0x10/0x10 [ 447.670930][T11435] ? __lock_acquire+0x436/0x2890 [ 447.670958][T11435] futex_wake+0xea/0x530 [ 447.670988][T11435] ? futex_wait+0x120/0x380 [ 447.671023][T11435] ? __pfx_futex_wake+0x10/0x10 [ 447.671060][T11435] ? __fget_files+0x204/0x3c0 [ 447.671101][T11435] do_futex+0x1e3/0x350 [ 447.671128][T11435] ? __pfx_do_futex+0x10/0x10 [ 447.671156][T11435] ? fput+0x70/0xf0 [ 447.671178][T11435] ? __sys_sendmsg+0x18c/0x220 [ 447.671214][T11435] __x64_sys_futex+0x1e0/0x4c0 [ 447.671246][T11435] ? __pfx___x64_sys_futex+0x10/0x10 [ 447.671285][T11435] do_syscall_64+0xcd/0xf80 [ 447.671309][T11435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.671334][T11435] RIP: 0033:0x7f9c31f8f7c9 [ 447.671356][T11435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.671380][T11435] RSP: 002b:00007f9c32dcd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 447.671403][T11435] RAX: ffffffffffffffda RBX: 00007f9c321e5fa8 RCX: 00007f9c31f8f7c9 [ 447.671419][T11435] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9c321e5fac [ 447.671434][T11435] RBP: 00007f9c321e5fa0 R08: 00007f9c32dce000 R09: 0000000000000000 [ 447.671449][T11435] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 447.671464][T11435] R13: 00007f9c321e6038 R14: 00007fffc1d1e210 R15: 00007fffc1d1e2f8 [ 447.671495][T11435] [ 448.184076][T11436] vivid-007: ================= START STATUS ================= [ 448.227682][T11436] vivid-007: Generate PTS: true [ 448.273442][T11436] vivid-007: Generate SCR: true [ 448.314467][T11436] tpg source WxH: 320x240 (Y'CbCr) [ 448.327464][T11436] tpg field: 1 [ 448.341324][T11436] tpg crop: (0,0)/320x240 [ 448.358780][T11436] tpg compose: (0,0)/320x240 [ 448.400092][T11436] tpg colorspace: 8 [ 448.424029][T11436] tpg transfer function: 0/0 [ 448.540734][T11436] tpg Y'CbCr encoding: 0/0 [ 448.628185][T11436] tpg quantization: 0/0 [ 448.682263][T11436] tpg RGB range: 0/2 [ 448.731293][T11436] vivid-007: ================== END STATUS ================== [ 450.554389][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.560788][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 451.602998][T11489] FAULT_INJECTION: forcing a failure. [ 451.602998][T11489] name fail_futex, interval 1, probability 0, space 0, times 0 [ 451.685088][T11489] CPU: 0 UID: 0 PID: 11489 Comm: syz.0.1247 Tainted: G U L syzkaller #0 PREEMPT(full) [ 451.685130][T11489] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 451.685139][T11489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 451.685153][T11489] Call Trace: [ 451.685161][T11489] [ 451.685170][T11489] dump_stack_lvl+0x16c/0x1f0 [ 451.685214][T11489] should_fail_ex+0x512/0x640 [ 451.685242][T11489] ? __pfx_stack_trace_save+0x10/0x10 [ 451.685284][T11489] get_futex_key+0x1d0/0x15f0 [ 451.685321][T11489] ? __pfx_get_futex_key+0x10/0x10 [ 451.685350][T11489] ? __lock_acquire+0x436/0x2890 [ 451.685377][T11489] futex_wake+0xea/0x530 [ 451.685408][T11489] ? futex_wait+0x120/0x380 [ 451.685444][T11489] ? __pfx_futex_wake+0x10/0x10 [ 451.685481][T11489] ? __fget_files+0x204/0x3c0 [ 451.685522][T11489] do_futex+0x1e3/0x350 [ 451.685550][T11489] ? __pfx_do_futex+0x10/0x10 [ 451.685577][T11489] ? fput+0x70/0xf0 [ 451.685600][T11489] ? __sys_sendmsg+0x18c/0x220 [ 451.685636][T11489] __x64_sys_futex+0x1e0/0x4c0 [ 451.685668][T11489] ? __pfx___x64_sys_futex+0x10/0x10 [ 451.685708][T11489] do_syscall_64+0xcd/0xf80 [ 451.685731][T11489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.685756][T11489] RIP: 0033:0x7f526198f7c9 [ 451.685775][T11489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.685799][T11489] RSP: 002b:00007f526276c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 451.685822][T11489] RAX: ffffffffffffffda RBX: 00007f5261be5fa8 RCX: 00007f526198f7c9 [ 451.685843][T11489] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5261be5fac [ 451.685858][T11489] RBP: 00007f5261be5fa0 R08: 00007f526276d000 R09: 0000000000000000 [ 451.685874][T11489] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 451.685889][T11489] R13: 00007f5261be6038 R14: 00007ffda40ed6c0 R15: 00007ffda40ed7a8 [ 451.685920][T11489] [ 451.917834][T11495] FAULT_INJECTION: forcing a failure. [ 451.917834][T11495] name fail_futex, interval 1, probability 0, space 0, times 0 [ 451.930807][T11495] CPU: 0 UID: 0 PID: 11495 Comm: syz.2.1250 Tainted: G U L syzkaller #0 PREEMPT(full) [ 451.930847][T11495] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 451.930856][T11495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 451.930870][T11495] Call Trace: [ 451.930878][T11495] [ 451.930887][T11495] dump_stack_lvl+0x16c/0x1f0 [ 451.930929][T11495] should_fail_ex+0x512/0x640 [ 451.930962][T11495] get_futex_key+0x1d0/0x15f0 [ 451.930990][T11495] ? __lock_acquire+0x436/0x2890 [ 451.931011][T11495] ? __pfx_get_futex_key+0x10/0x10 [ 451.931046][T11495] futex_wait_setup+0x9d/0x570 [ 451.931086][T11495] __futex_wait+0x193/0x2f0 [ 451.931120][T11495] ? __pfx___futex_wait+0x10/0x10 [ 451.931157][T11495] ? __pfx_futex_wake_mark+0x10/0x10 [ 451.931193][T11495] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 451.931221][T11495] ? __hrtimer_setup+0x176/0x280 [ 451.931252][T11495] ? ktime_add_safe+0x60/0x70 [ 451.931290][T11495] futex_wait+0xe8/0x380 [ 451.931322][T11495] ? __pfx_futex_wait+0x10/0x10 [ 451.931357][T11495] ? __lock_acquire+0x436/0x2890 [ 451.931381][T11495] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 451.931420][T11495] do_futex+0x229/0x350 [ 451.931448][T11495] ? __pfx_do_futex+0x10/0x10 [ 451.931472][T11495] ? rcu_is_watching+0x12/0xc0 [ 451.931504][T11495] ? ktime_get+0x200/0x310 [ 451.931525][T11495] ? lockdep_hardirqs_on+0x7c/0x110 [ 451.931562][T11495] ? read_tsc+0x9/0x20 [ 451.931597][T11495] __x64_sys_futex+0x1e0/0x4c0 [ 451.931628][T11495] ? __pfx___x64_sys_futex+0x10/0x10 [ 451.931656][T11495] ? xfd_validate_state+0x61/0x180 [ 451.931687][T11495] do_syscall_64+0xcd/0xf80 [ 451.931709][T11495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.931733][T11495] RIP: 0033:0x7f239f78f7c9 [ 451.931750][T11495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.931774][T11495] RSP: 002b:00007ffd41db82b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 451.931796][T11495] RAX: ffffffffffffffda RBX: 000000000006e510 RCX: 00007f239f78f7c9 [ 451.931812][T11495] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f239f9e5fac [ 451.931827][T11495] RBP: 0000000000000032 R08: 00007f23a0667000 R09: 0000000f41db85af [ 451.931842][T11495] R10: 00007ffd41db83b0 R11: 0000000000000246 R12: 00007f239f9e5fac [ 451.931856][T11495] R13: 00007ffd41db83b0 R14: 000000000006e542 R15: 00007ffd41db83d0 [ 451.931887][T11495] [ 452.295876][T11498] futex_wake_op: syz.3.1251 tries to shift op by -2048; fix this program [ 452.304830][T11498] futex_wake_op: syz.3.1251 tries to shift op by -2048; fix this program [ 452.313934][T11499] 0x000000000001-0x000000020000 : "" [ 452.427379][T11499] ftl_cs: FTL header corrupt! [ 452.857112][T11504] zswap: compressor not available [ 453.360398][T11514] netlink: 'syz.3.1253': attribute type 5 has an invalid length. [ 455.867442][T11565] FAULT_INJECTION: forcing a failure. [ 455.867442][T11565] name failslab, interval 1, probability 0, space 0, times 0 [ 455.975513][T11565] CPU: 0 UID: 0 PID: 11565 Comm: syz.1.1261 Tainted: G U L syzkaller #0 PREEMPT(full) [ 455.975553][T11565] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 455.975562][T11565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 455.975577][T11565] Call Trace: [ 455.975585][T11565] [ 455.975594][T11565] dump_stack_lvl+0x16c/0x1f0 [ 455.975637][T11565] should_fail_ex+0x512/0x640 [ 455.975665][T11565] ? __kmalloc_noprof+0xca/0x910 [ 455.975694][T11565] should_failslab+0xc2/0x120 [ 455.975731][T11565] __kmalloc_noprof+0xeb/0x910 [ 455.975758][T11565] ? copy_splice_read+0x1a8/0xc20 [ 455.975797][T11565] ? copy_splice_read+0x1a8/0xc20 [ 455.975830][T11565] copy_splice_read+0x1a8/0xc20 [ 455.975872][T11565] ? __pfx_copy_splice_read+0x10/0x10 [ 455.975909][T11565] ? __mark_inode_dirty+0x943/0x1670 [ 455.975945][T11565] ? find_held_lock+0x2b/0x80 [ 455.975980][T11565] ? __pfx_copy_splice_read+0x10/0x10 [ 455.976014][T11565] do_splice_read+0x285/0x370 [ 455.976061][T11565] splice_direct_to_actor+0x2a1/0xa30 [ 455.976099][T11565] ? __pfx_direct_splice_actor+0x10/0x10 [ 455.976143][T11565] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 455.976178][T11565] ? do_raw_spin_lock+0x12c/0x2b0 [ 455.976213][T11565] do_splice_direct+0x174/0x240 [ 455.976251][T11565] ? __pfx_do_splice_direct+0x10/0x10 [ 455.976288][T11565] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 455.976328][T11565] ? rw_verify_area+0xcf/0x6c0 [ 455.976362][T11565] do_sendfile+0xb06/0xe50 [ 455.976400][T11565] ? __pfx_do_sendfile+0x10/0x10 [ 455.976432][T11565] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 455.976476][T11565] __x64_sys_sendfile64+0x1d8/0x220 [ 455.976501][T11565] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 455.976523][T11565] ? rcu_is_watching+0x12/0xc0 [ 455.976565][T11565] do_syscall_64+0xcd/0xf80 [ 455.976588][T11565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.976613][T11565] RIP: 0033:0x7f9c31f8f7c9 [ 455.976631][T11565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 455.976655][T11565] RSP: 002b:00007f9c32dac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 455.976677][T11565] RAX: ffffffffffffffda RBX: 00007f9c321e6090 RCX: 00007f9c31f8f7c9 [ 455.976693][T11565] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 455.976707][T11565] RBP: 00007f9c32013f91 R08: 0000000000000000 R09: 0000000000000000 [ 455.976722][T11565] R10: 000000007fffe000 R11: 0000000000000246 R12: 0000000000000000 [ 455.976736][T11565] R13: 00007f9c321e6128 R14: 00007f9c321e6090 R15: 00007fffc1d1e2f8 [ 455.976767][T11565] [ 460.428291][T11645] FAULT_INJECTION: forcing a failure. [ 460.428291][T11645] name failslab, interval 1, probability 0, space 0, times 0 [ 460.480723][T11645] CPU: 0 UID: 0 PID: 11645 Comm: syz.3.1277 Tainted: G U L syzkaller #0 PREEMPT(full) [ 460.480769][T11645] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 460.480779][T11645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 460.480794][T11645] Call Trace: [ 460.480802][T11645] [ 460.480811][T11645] dump_stack_lvl+0x16c/0x1f0 [ 460.480855][T11645] should_fail_ex+0x512/0x640 [ 460.480883][T11645] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 460.480917][T11645] should_failslab+0xc2/0x120 [ 460.480956][T11645] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 460.480987][T11645] ? stack_trace_save+0x8e/0xc0 [ 460.481025][T11645] ? __d_alloc+0x35/0xa80 [ 460.481051][T11645] ? __d_alloc+0x35/0xa80 [ 460.481070][T11645] __d_alloc+0x35/0xa80 [ 460.481094][T11645] d_alloc_parallel+0x111/0x1510 [ 460.481133][T11645] ? find_held_lock+0x2b/0x80 [ 460.481166][T11645] ? __pfx_d_alloc_parallel+0x10/0x10 [ 460.481200][T11645] ? __d_lookup+0x266/0x4a0 [ 460.481236][T11645] lookup_open.isra.0+0x66c/0x1780 [ 460.481274][T11645] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 460.481311][T11645] ? find_held_lock+0x2b/0x80 [ 460.481348][T11645] ? __pfx_down_write+0x10/0x10 [ 460.481381][T11645] path_openat+0xa95/0x3140 [ 460.481428][T11645] ? __pfx_path_openat+0x10/0x10 [ 460.481476][T11645] do_filp_open+0x20b/0x470 [ 460.481513][T11645] ? __pfx_do_filp_open+0x10/0x10 [ 460.481571][T11645] ? alloc_fd+0x471/0x7d0 [ 460.481615][T11645] do_sys_openat2+0x121/0x290 [ 460.481651][T11645] ? __pfx_do_sys_openat2+0x10/0x10 [ 460.481690][T11645] __x64_sys_openat+0x174/0x210 [ 460.481719][T11645] ? __pfx___x64_sys_openat+0x10/0x10 [ 460.481759][T11645] do_syscall_64+0xcd/0xf80 [ 460.481783][T11645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.481808][T11645] RIP: 0033:0x7fe72118f7c9 [ 460.481828][T11645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.481852][T11645] RSP: 002b:00007fe7220fd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 460.481874][T11645] RAX: ffffffffffffffda RBX: 00007fe7213e5fa0 RCX: 00007fe72118f7c9 [ 460.481890][T11645] RDX: 0000000000103742 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 460.481904][T11645] RBP: 00007fe721213f91 R08: 0000000000000000 R09: 0000000000000000 [ 460.481919][T11645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.481933][T11645] R13: 00007fe7213e6038 R14: 00007fe7213e5fa0 R15: 00007ffd9535a9f8 [ 460.481964][T11645] [ 461.039790][T11654] FAULT_INJECTION: forcing a failure. [ 461.039790][T11654] name failslab, interval 1, probability 0, space 0, times 0 [ 461.113983][T11654] CPU: 0 UID: 0 PID: 11654 Comm: syz.1.1278 Tainted: G U L syzkaller #0 PREEMPT(full) [ 461.114023][T11654] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 461.114032][T11654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 461.114047][T11654] Call Trace: [ 461.114055][T11654] [ 461.114063][T11654] dump_stack_lvl+0x16c/0x1f0 [ 461.114107][T11654] should_fail_ex+0x512/0x640 [ 461.114135][T11654] ? kmem_cache_alloc_noprof+0x62/0x770 [ 461.114168][T11654] should_failslab+0xc2/0x120 [ 461.114207][T11654] kmem_cache_alloc_noprof+0x83/0x770 [ 461.114237][T11654] ? __kernfs_new_node+0xd2/0x9b0 [ 461.114271][T11654] ? __kernfs_new_node+0xd2/0x9b0 [ 461.114298][T11654] __kernfs_new_node+0xd2/0x9b0 [ 461.114331][T11654] ? __pfx___kernfs_new_node+0x10/0x10 [ 461.114367][T11654] ? find_held_lock+0x2b/0x80 [ 461.114400][T11654] ? kernfs_root+0xee/0x2a0 [ 461.114434][T11654] kernfs_new_node+0x13c/0x1e0 [ 461.114473][T11654] __kernfs_create_file+0x53/0x350 [ 461.114520][T11654] cgroup_addrm_files+0x546/0xc20 [ 461.114566][T11654] ? __xa_store+0x1dc/0x2e0 [ 461.114590][T11654] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 461.114626][T11654] ? __pfx___xa_store+0x10/0x10 [ 461.114661][T11654] ? do_raw_spin_unlock+0x172/0x230 [ 461.114702][T11654] css_populate_dir+0x169/0x570 [ 461.114736][T11654] cgroup_apply_control_enable+0x3f3/0xbb0 [ 461.114782][T11654] cgroup_mkdir+0x5e0/0x12e0 [ 461.114822][T11654] ? __pfx_cgroup_mkdir+0x10/0x10 [ 461.114859][T11654] kernfs_iop_mkdir+0x111/0x190 [ 461.114890][T11654] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 461.114917][T11654] vfs_mkdir+0x731/0xb60 [ 461.114950][T11654] do_mkdirat+0x442/0x5e0 [ 461.114990][T11654] ? __pfx_do_mkdirat+0x10/0x10 [ 461.115027][T11654] ? strncpy_from_user+0x203/0x2e0 [ 461.115055][T11654] ? getname_flags.part.0+0x1c5/0x550 [ 461.115085][T11654] __x64_sys_mkdir+0xef/0x140 [ 461.115123][T11654] do_syscall_64+0xcd/0xf80 [ 461.115147][T11654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.115172][T11654] RIP: 0033:0x7f9c31f8f7c9 [ 461.115190][T11654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.115215][T11654] RSP: 002b:00007f9c32dac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 461.115237][T11654] RAX: ffffffffffffffda RBX: 00007f9c321e6090 RCX: 00007f9c31f8f7c9 [ 461.115253][T11654] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 461.115268][T11654] RBP: 00007f9c32013f91 R08: 0000000000000000 R09: 0000000000000000 [ 461.115283][T11654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.115297][T11654] R13: 00007f9c321e6128 R14: 00007f9c321e6090 R15: 00007fffc1d1e2f8 [ 461.115328][T11654] [ 461.184440][T11654] cgroup: cgroup_addrm_files: failed to add swappiness, err=-12 [ 466.218581][T11736] netlink: 280 bytes leftover after parsing attributes in process `syz.1.1296'. [ 468.420117][T11764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1300'. [ 469.706642][T11797] netlink: 266 bytes leftover after parsing attributes in process `syz.2.1307'. [ 469.749839][T11797] IPv6: NLM_F_CREATE should be specified when creating new route [ 471.458596][T11823] FAULT_INJECTION: forcing a failure. [ 471.458596][T11823] name failslab, interval 1, probability 0, space 0, times 0 [ 471.638948][T11823] CPU: 0 UID: 0 PID: 11823 Comm: syz.2.1311 Tainted: G U L syzkaller #0 PREEMPT(full) [ 471.638989][T11823] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 471.638998][T11823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 471.639012][T11823] Call Trace: [ 471.639020][T11823] [ 471.639029][T11823] dump_stack_lvl+0x16c/0x1f0 [ 471.639073][T11823] should_fail_ex+0x512/0x640 [ 471.639100][T11823] ? __kmalloc_noprof+0xca/0x910 [ 471.639130][T11823] should_failslab+0xc2/0x120 [ 471.639168][T11823] __kmalloc_noprof+0xeb/0x910 [ 471.639194][T11823] ? argv_split+0x188/0x440 [ 471.639230][T11823] ? argv_split+0x188/0x440 [ 471.639260][T11823] argv_split+0x188/0x440 [ 471.639295][T11823] dyn_event_release+0x8d/0x4e0 [ 471.639322][T11823] ? find_held_lock+0x2b/0x80 [ 471.639353][T11823] ? __pfx_dyn_event_release+0x10/0x10 [ 471.639377][T11823] ? __might_fault+0x13b/0x190 [ 471.639413][T11823] create_dyn_event+0x144/0x1d0 [ 471.639439][T11823] trace_parse_run_command+0x1a9/0x400 [ 471.639476][T11823] ? __pfx_create_dyn_event+0x10/0x10 [ 471.639504][T11823] ? __pfx_dyn_event_write+0x10/0x10 [ 471.639528][T11823] vfs_write+0x2a0/0x11d0 [ 471.639564][T11823] ? __pfx___mutex_lock+0x10/0x10 [ 471.639590][T11823] ? __pfx_vfs_write+0x10/0x10 [ 471.639633][T11823] ? __fget_files+0x20e/0x3c0 [ 471.639676][T11823] ksys_write+0x12a/0x250 [ 471.639711][T11823] ? __pfx_ksys_write+0x10/0x10 [ 471.639754][T11823] do_syscall_64+0xcd/0xf80 [ 471.639777][T11823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.639801][T11823] RIP: 0033:0x7f239f78f7c9 [ 471.639821][T11823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.639852][T11823] RSP: 002b:00007f23a0624038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 471.639875][T11823] RAX: ffffffffffffffda RBX: 00007f239f9e6180 RCX: 00007f239f78f7c9 [ 471.639892][T11823] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000007 [ 471.639908][T11823] RBP: 00007f239f813f91 R08: 0000000000000000 R09: 0000000000000000 [ 471.639923][T11823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.639937][T11823] R13: 00007f239f9e6218 R14: 00007f239f9e6180 R15: 00007ffd41db8158 [ 471.639969][T11823] [ 474.502026][T11871] openvswitch: netlink: Key type 29 is not supported [ 477.742120][T11919] FAULT_INJECTION: forcing a failure. [ 477.742120][T11919] name failslab, interval 1, probability 0, space 0, times 0 [ 477.801168][T11919] CPU: 0 UID: 0 PID: 11919 Comm: syz.2.1334 Tainted: G U L syzkaller #0 PREEMPT(full) [ 477.801210][T11919] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 477.801219][T11919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 477.801233][T11919] Call Trace: [ 477.801241][T11919] [ 477.801250][T11919] dump_stack_lvl+0x16c/0x1f0 [ 477.801293][T11919] should_fail_ex+0x512/0x640 [ 477.801321][T11919] ? kmem_cache_alloc_noprof+0x62/0x770 [ 477.801358][T11919] should_failslab+0xc2/0x120 [ 477.801397][T11919] kmem_cache_alloc_noprof+0x83/0x770 [ 477.801426][T11919] ? alloc_empty_file+0x55/0x1e0 [ 477.801457][T11919] ? alloc_empty_file+0x55/0x1e0 [ 477.801514][T11919] alloc_empty_file+0x55/0x1e0 [ 477.801541][T11919] alloc_file_pseudo+0x13a/0x230 [ 477.801569][T11919] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 477.801599][T11919] ? do_raw_spin_unlock+0x172/0x230 [ 477.801631][T11919] __anon_inode_getfile+0xe8/0x280 [ 477.801660][T11919] anon_inode_getfile_fmode+0x37/0xa0 [ 477.801688][T11919] __do_sys_fanotify_init+0xa53/0xed0 [ 477.801726][T11919] do_syscall_64+0xcd/0xf80 [ 477.801750][T11919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.801775][T11919] RIP: 0033:0x7f239f78f7c9 [ 477.801794][T11919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.801817][T11919] RSP: 002b:00007f23a0666038 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 477.801840][T11919] RAX: ffffffffffffffda RBX: 00007f239f9e5fa0 RCX: 00007f239f78f7c9 [ 477.801856][T11919] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 477.801871][T11919] RBP: 00007f239f813f91 R08: 0000000000000000 R09: 0000000000000000 [ 477.801886][T11919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 477.801900][T11919] R13: 00007f239f9e6038 R14: 00007f239f9e5fa0 R15: 00007ffd41db8158 [ 477.801931][T11919] [ 479.242472][T11944] FAULT_INJECTION: forcing a failure. [ 479.242472][T11944] name failslab, interval 1, probability 0, space 0, times 0 [ 479.287661][T11944] CPU: 0 UID: 0 PID: 11944 Comm: syz.2.1339 Tainted: G U L syzkaller #0 PREEMPT(full) [ 479.287705][T11944] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 479.287714][T11944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 479.287727][T11944] Call Trace: [ 479.287734][T11944] [ 479.287742][T11944] dump_stack_lvl+0x16c/0x1f0 [ 479.287784][T11944] should_fail_ex+0x512/0x640 [ 479.287810][T11944] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 479.287842][T11944] should_failslab+0xc2/0x120 [ 479.287879][T11944] kmem_cache_alloc_node_noprof+0x86/0x800 [ 479.287907][T11944] ? __alloc_skb+0x156/0x410 [ 479.287932][T11944] ? __alloc_skb+0x35d/0x410 [ 479.287970][T11944] ? __alloc_skb+0x156/0x410 [ 479.287996][T11944] __alloc_skb+0x156/0x410 [ 479.288021][T11944] ? __alloc_skb+0x35d/0x410 [ 479.288048][T11944] ? __pfx___alloc_skb+0x10/0x10 [ 479.288085][T11944] alloc_skb_with_frags+0xe0/0x860 [ 479.288128][T11944] sock_alloc_send_pskb+0x7f9/0x980 [ 479.288157][T11944] ? find_held_lock+0x2b/0x80 [ 479.288189][T11944] ? is_bpf_text_address+0x8a/0x1a0 [ 479.288225][T11944] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 479.288252][T11944] ? is_bpf_text_address+0x94/0x1a0 [ 479.288283][T11944] ? kernel_text_address+0x8d/0x100 [ 479.288314][T11944] ? __lock_acquire+0x436/0x2890 [ 479.288341][T11944] __ip_append_data+0x2149/0x41a0 [ 479.288376][T11944] ? __pfx_udplite_getfrag+0x10/0x10 [ 479.288408][T11944] ? find_held_lock+0x2b/0x80 [ 479.288438][T11944] ? ip_dst_mtu_maybe_forward.constprop.0+0x328/0x750 [ 479.288473][T11944] ? ip_dst_mtu_maybe_forward.constprop.0+0x332/0x750 [ 479.288503][T11944] ? __pfx___ip_append_data+0x10/0x10 [ 479.288533][T11944] ip_make_skb+0x27f/0x300 [ 479.288559][T11944] ? __pfx_udplite_getfrag+0x10/0x10 [ 479.288594][T11944] ? __pfx_ip_make_skb+0x10/0x10 [ 479.288624][T11944] ? ipv4_dst_check+0x1a8/0x3b0 [ 479.288659][T11944] ? udp_sendmsg+0x17d7/0x2870 [ 479.288679][T11944] udp_sendmsg+0x17d7/0x2870 [ 479.288707][T11944] ? __pfx_udplite_getfrag+0x10/0x10 [ 479.288743][T11944] ? __pfx_udp_sendmsg+0x10/0x10 [ 479.288766][T11944] ? __lock_acquire+0x436/0x2890 [ 479.288800][T11944] ? __lock_acquire+0x436/0x2890 [ 479.288841][T11944] ? __pfx_udp_sendmsg+0x10/0x10 [ 479.288864][T11944] inet_sendmsg+0x105/0x140 [ 479.288896][T11944] ____sys_sendmsg+0x973/0xc30 [ 479.288919][T11944] ? copy_msghdr_from_user+0x10a/0x160 [ 479.288952][T11944] ? __pfx_____sys_sendmsg+0x10/0x10 [ 479.288980][T11944] ? __pfx__kstrtoull+0x10/0x10 [ 479.289020][T11944] ___sys_sendmsg+0x134/0x1d0 [ 479.289054][T11944] ? __pfx____sys_sendmsg+0x10/0x10 [ 479.289100][T11944] ? find_held_lock+0x2b/0x80 [ 479.289154][T11944] __sys_sendmmsg+0x200/0x420 [ 479.289191][T11944] ? __pfx___sys_sendmmsg+0x10/0x10 [ 479.289237][T11944] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 479.289274][T11944] ? fput+0x70/0xf0 [ 479.289297][T11944] ? ksys_write+0x1ac/0x250 [ 479.289329][T11944] ? __pfx_ksys_write+0x10/0x10 [ 479.289371][T11944] __x64_sys_sendmmsg+0x9c/0x100 [ 479.289403][T11944] ? lockdep_hardirqs_on+0x7c/0x110 [ 479.289441][T11944] do_syscall_64+0xcd/0xf80 [ 479.289463][T11944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.289486][T11944] RIP: 0033:0x7f239f78f7c9 [ 479.289505][T11944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.289527][T11944] RSP: 002b:00007f23a0624038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 479.289548][T11944] RAX: ffffffffffffffda RBX: 00007f239f9e6180 RCX: 00007f239f78f7c9 [ 479.289564][T11944] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 479.289577][T11944] RBP: 00007f23a0624090 R08: 0000000000000000 R09: 0000000000000000 [ 479.289591][T11944] R10: 0000000007000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.289605][T11944] R13: 00007f239f9e6218 R14: 00007f239f9e6180 R15: 00007ffd41db8158 [ 479.289634][T11944] [ 485.223171][ T5848] Bluetooth: hci0: unexpected event 0x03 length: 725 > 11 [ 486.705401][T12049] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 487.378356][T12063] binder: 12062:12063 ioctl c0401273 200000000240 returned -22 [ 489.010791][T12093] netlink: 1386 bytes leftover after parsing attributes in process `syz.1.1374'. [ 489.375758][T12098] FAULT_INJECTION: forcing a failure. [ 489.375758][T12098] name failslab, interval 1, probability 0, space 0, times 0 [ 489.484633][T12098] CPU: 0 UID: 0 PID: 12098 Comm: syz.3.1373 Tainted: G U L syzkaller #0 PREEMPT(full) [ 489.484673][T12098] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 489.484682][T12098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 489.484696][T12098] Call Trace: [ 489.484704][T12098] [ 489.484713][T12098] dump_stack_lvl+0x16c/0x1f0 [ 489.484755][T12098] should_fail_ex+0x512/0x640 [ 489.484782][T12098] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 489.484816][T12098] should_failslab+0xc2/0x120 [ 489.484853][T12098] kmem_cache_alloc_node_noprof+0x86/0x800 [ 489.484882][T12098] ? __alloc_skb+0x156/0x410 [ 489.484908][T12098] ? __alloc_skb+0x35d/0x410 [ 489.484939][T12098] ? __alloc_skb+0x156/0x410 [ 489.484964][T12098] __alloc_skb+0x156/0x410 [ 489.484989][T12098] ? __alloc_skb+0x35d/0x410 [ 489.485015][T12098] ? __pfx___alloc_skb+0x10/0x10 [ 489.485042][T12098] ? trace_netif_rx_exit+0x17d/0x1e0 [ 489.485081][T12098] ? loopback_xmit+0x30b/0x700 [ 489.485115][T12098] alloc_skb_with_frags+0xe0/0x860 [ 489.485150][T12098] ? lockdep_hardirqs_on+0x7c/0x110 [ 489.485188][T12098] ? __local_bh_enable_ip+0xa4/0x120 [ 489.485221][T12098] ? __dev_queue_xmit+0x782/0x46b0 [ 489.485251][T12098] sock_alloc_send_pskb+0x7f9/0x980 [ 489.485288][T12098] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 489.485323][T12098] ? __lock_acquire+0x436/0x2890 [ 489.485349][T12098] __ip_append_data+0x2149/0x41a0 [ 489.485379][T12098] ? __pfx_udplite_getfrag+0x10/0x10 [ 489.485409][T12098] ? find_held_lock+0x2b/0x80 [ 489.485440][T12098] ? ip_dst_mtu_maybe_forward.constprop.0+0x328/0x750 [ 489.485475][T12098] ? ip_dst_mtu_maybe_forward.constprop.0+0x332/0x750 [ 489.485506][T12098] ? __pfx___ip_append_data+0x10/0x10 [ 489.485535][T12098] ip_make_skb+0x27f/0x300 [ 489.485562][T12098] ? __pfx_udplite_getfrag+0x10/0x10 [ 489.485596][T12098] ? __pfx_ip_make_skb+0x10/0x10 [ 489.485634][T12098] ? ipv4_dst_check+0x1a8/0x3b0 [ 489.485668][T12098] ? udp_sendmsg+0x17d7/0x2870 [ 489.485688][T12098] udp_sendmsg+0x17d7/0x2870 [ 489.485716][T12098] ? __pfx_udplite_getfrag+0x10/0x10 [ 489.485752][T12098] ? __pfx_udp_sendmsg+0x10/0x10 [ 489.485774][T12098] ? __lock_acquire+0x436/0x2890 [ 489.485807][T12098] ? __lock_acquire+0x436/0x2890 [ 489.485848][T12098] ? __pfx_udp_sendmsg+0x10/0x10 [ 489.485871][T12098] inet_sendmsg+0x105/0x140 [ 489.485901][T12098] ____sys_sendmsg+0x973/0xc30 [ 489.485925][T12098] ? copy_msghdr_from_user+0x10a/0x160 [ 489.485957][T12098] ? __pfx_____sys_sendmsg+0x10/0x10 [ 489.485984][T12098] ? __pfx__kstrtoull+0x10/0x10 [ 489.486023][T12098] ___sys_sendmsg+0x134/0x1d0 [ 489.486057][T12098] ? __pfx____sys_sendmsg+0x10/0x10 [ 489.486114][T12098] ? __pfx___might_resched+0x10/0x10 [ 489.486153][T12098] __sys_sendmmsg+0x200/0x420 [ 489.486189][T12098] ? __pfx___sys_sendmmsg+0x10/0x10 [ 489.486230][T12098] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 489.486265][T12098] ? fput+0x70/0xf0 [ 489.486287][T12098] ? ksys_write+0x1ac/0x250 [ 489.486321][T12098] ? __pfx_ksys_write+0x10/0x10 [ 489.486359][T12098] __x64_sys_sendmmsg+0x9c/0x100 [ 489.486391][T12098] ? lockdep_hardirqs_on+0x7c/0x110 [ 489.486428][T12098] do_syscall_64+0xcd/0xf80 [ 489.486451][T12098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.486474][T12098] RIP: 0033:0x7fe72118f7c9 [ 489.486493][T12098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.486516][T12098] RSP: 002b:00007fe7220bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 489.486538][T12098] RAX: ffffffffffffffda RBX: 00007fe7213e6180 RCX: 00007fe72118f7c9 [ 489.486554][T12098] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 489.486568][T12098] RBP: 00007fe7220bb090 R08: 0000000000000000 R09: 0000000000000000 [ 489.486597][T12098] R10: 0000000007000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.486611][T12098] R13: 00007fe7213e6218 R14: 00007fe7213e6180 R15: 00007ffd9535a9f8 [ 489.486646][T12098] [ 490.109401][T11942] [U] ^\ [ 496.162619][T12180] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1393'. [ 500.682165][T12248] binder: 12247:12248 ioctl c0306201 0 returned -14 [ 501.457197][T12258] FAULT_INJECTION: forcing a failure. [ 501.457197][T12258] name failslab, interval 1, probability 0, space 0, times 0 [ 501.674094][T12258] CPU: 0 UID: 0 PID: 12258 Comm: syz.1.1409 Tainted: G U L syzkaller #0 PREEMPT(full) [ 501.674135][T12258] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 501.674144][T12258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 501.674157][T12258] Call Trace: [ 501.674164][T12258] [ 501.674173][T12258] dump_stack_lvl+0x16c/0x1f0 [ 501.674215][T12258] should_fail_ex+0x512/0x640 [ 501.674243][T12258] ? fs_reclaim_acquire+0xae/0x150 [ 501.674282][T12258] should_failslab+0xc2/0x120 [ 501.674319][T12258] __kmalloc_noprof+0xeb/0x910 [ 501.674345][T12258] ? tomoyo_encode2+0x100/0x3e0 [ 501.674383][T12258] ? tomoyo_encode2+0x100/0x3e0 [ 501.674413][T12258] tomoyo_encode2+0x100/0x3e0 [ 501.674449][T12258] tomoyo_encode+0x29/0x50 [ 501.674479][T12258] tomoyo_realpath_from_path+0x18f/0x6e0 [ 501.674521][T12258] tomoyo_check_open_permission+0x2ab/0x3c0 [ 501.674551][T12258] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 501.674608][T12258] ? do_raw_spin_lock+0x12c/0x2b0 [ 501.674644][T12258] tomoyo_file_open+0x6b/0x90 [ 501.674682][T12258] security_file_open+0x84/0x1e0 [ 501.674714][T12258] do_dentry_open+0x597/0x1590 [ 501.674752][T12258] ? security_inode_permission+0xbf/0x260 [ 501.674792][T12258] vfs_open+0x82/0x3f0 [ 501.674820][T12258] path_openat+0x2078/0x3140 [ 501.674865][T12258] ? __pfx_path_openat+0x10/0x10 [ 501.674911][T12258] do_filp_open+0x20b/0x470 [ 501.674948][T12258] ? __pfx_do_filp_open+0x10/0x10 [ 501.675003][T12258] ? alloc_fd+0x471/0x7d0 [ 501.675046][T12258] do_sys_openat2+0x121/0x290 [ 501.675072][T12258] ? __pfx_do_sys_openat2+0x10/0x10 [ 501.675100][T12258] ? count_memcg_events+0x122/0x290 [ 501.675141][T12258] __x64_sys_openat+0x174/0x210 [ 501.675168][T12258] ? __pfx___x64_sys_openat+0x10/0x10 [ 501.675207][T12258] do_syscall_64+0xcd/0xf80 [ 501.675230][T12258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.675253][T12258] RIP: 0033:0x7f9c31f8f7c9 [ 501.675272][T12258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.675294][T12258] RSP: 002b:00007f9c32d6a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 501.675316][T12258] RAX: ffffffffffffffda RBX: 00007f9c321e6270 RCX: 00007f9c31f8f7c9 [ 501.675331][T12258] RDX: 0000000000002800 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 501.675346][T12258] RBP: 00007f9c32013f91 R08: 0000000000000000 R09: 0000000000000000 [ 501.675361][T12258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 501.675374][T12258] R13: 00007f9c321e6308 R14: 00007f9c321e6270 R15: 00007fffc1d1e2f8 [ 501.675405][T12258] [ 501.675468][T12258] ERROR: Out of memory at tomoyo_realpath_from_path. [ 502.634180][T12280] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1420'. [ 504.150359][T12294] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0xffff888078000000 pfn:0x78000 [ 504.255464][T12294] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 504.383158][T12294] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 504.452938][T12294] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 504.547057][T12294] raw: ffff888078000000 0000000000000000 00000016ffffffff 0000000000000000 [ 504.630391][T12294] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 504.706293][T12294] head: ffff888078000000 0000000000000000 00000016ffffffff 0000000000000000 [ 504.776809][T12294] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 504.865780][T12294] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 504.965026][T12294] page dumped because: unmovable page [ 504.974471][T12294] page_owner tracks the page as allocated [ 505.014356][T12294] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5834, tgid 5834 (syz-executor), ts 394218738293, free_ts 394194582932 [ 505.094650][T12294] post_alloc_hook+0x1af/0x220 [ 505.110248][T12294] get_page_from_freelist+0xd0b/0x31a0 [ 505.137547][T12294] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 505.164809][T12294] alloc_pages_mpol+0x1fb/0x550 [ 505.182441][T12294] alloc_pages_noprof+0x131/0x390 [ 505.223270][T12294] skb_page_frag_refill+0x186/0x5c0 [ 505.245777][T12294] try_fill_recv+0x7e4/0x2930 [ 505.265972][T12294] virtnet_poll+0x18d5/0x3e00 [ 505.290460][T12294] __napi_poll.constprop.0+0xb3/0x540 [ 505.318667][T12294] net_rx_action+0x9f9/0xfa0 [ 505.323334][T12294] handle_softirqs+0x219/0x950 [ 505.361855][T12294] __irq_exit_rcu+0x109/0x170 [ 505.381790][T12294] irq_exit_rcu+0x9/0x30 [ 505.397831][T12294] common_interrupt+0xbf/0xe0 [ 505.415579][T12294] asm_common_interrupt+0x26/0x40 [ 505.437293][T12294] page last free pid 5816 tgid 5816 stack trace: [ 505.457734][T12294] __free_frozen_pages+0x7df/0x1170 [ 505.476650][T12294] __folio_put+0x329/0x450 [ 505.493192][T12294] skb_release_data+0x81a/0x9e0 [ 505.511465][T12294] __kfree_skb+0x4f/0x70 [ 505.529263][T12294] tcp_ack+0x1d41/0x6150 [ 505.544651][T12294] tcp_rcv_established+0x10b6/0x36e0 [ 505.564082][T12294] tcp_v4_do_rcv+0xc65/0x10a0 [ 505.580360][T12294] __release_sock+0x361/0x450 [ 505.598460][T12294] release_sock+0x5a/0x220 [ 505.613395][T12294] tcp_sendmsg+0x38/0x50 [ 505.633401][T12294] inet_sendmsg+0xb9/0x140 [ 505.648145][T12294] sock_write_iter+0x509/0x610 [ 505.665945][T12294] vfs_write+0x7d3/0x11d0 [ 505.680637][T12294] ksys_write+0x1f8/0x250 [ 505.698249][T12294] do_syscall_64+0xcd/0xf80 [ 505.712550][T12294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.782929][T12296] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0xffff888078000000 pfn:0x78000 [ 505.846182][T12296] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 505.906150][T12296] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 505.913753][T12296] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 505.986207][T12296] raw: ffff888078000000 0000000000000000 00000016ffffffff 0000000000000000 [ 506.019495][T12296] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 506.069948][T12321] FAULT_INJECTION: forcing a failure. [ 506.069948][T12321] name failslab, interval 1, probability 0, space 0, times 0 [ 506.096661][T12296] head: ffff888078000000 0000000000000000 00000016ffffffff 0000000000000000 [ 506.120048][T12296] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 506.161064][T12296] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 506.196537][T12321] CPU: 0 UID: 0 PID: 12321 Comm: syz.0.1418 Tainted: G U L syzkaller #0 PREEMPT(full) [ 506.196578][T12321] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 506.196587][T12321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 506.196600][T12321] Call Trace: [ 506.196608][T12321] [ 506.196618][T12321] dump_stack_lvl+0x16c/0x1f0 [ 506.196660][T12321] should_fail_ex+0x512/0x640 [ 506.196686][T12321] ? kmem_cache_alloc_noprof+0x62/0x770 [ 506.196717][T12321] should_failslab+0xc2/0x120 [ 506.196752][T12321] kmem_cache_alloc_noprof+0x83/0x770 [ 506.196781][T12321] ? __proc_create+0x2c8/0x8d0 [ 506.196816][T12321] ? __proc_create+0x2c8/0x8d0 [ 506.196845][T12321] __proc_create+0x2c8/0x8d0 [ 506.196877][T12321] ? __pfx___proc_create+0x10/0x10 [ 506.196918][T12321] _proc_mkdir+0xb9/0x210 [ 506.196950][T12321] ? __pfx__proc_mkdir+0x10/0x10 [ 506.196982][T12321] ? kmem_cache_alloc_noprof+0x2af/0x770 [ 506.197011][T12321] ? proc_net_ns_init+0x42/0x420 [ 506.197049][T12321] proc_net_ns_init+0x273/0x420 [ 506.197083][T12321] ? __pfx_proc_net_ns_init+0x10/0x10 [ 506.197115][T12321] ops_init+0x1e2/0x5f0 [ 506.197152][T12321] setup_net+0x11d/0x3a0 [ 506.197186][T12321] ? __pfx_setup_net+0x10/0x10 [ 506.197217][T12321] ? lockdep_init_map_type+0x5c/0x270 [ 506.197243][T12321] ? mutex_init_lockep+0x110/0x150 [ 506.197275][T12321] copy_net_ns+0x351/0x7c0 [ 506.197315][T12321] create_new_namespaces+0x3ea/0xab0 [ 506.197354][T12321] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 506.197389][T12321] ksys_unshare+0x45b/0xa40 [ 506.197428][T12321] ? __pfx_ksys_unshare+0x10/0x10 [ 506.197466][T12321] ? xfd_validate_state+0x61/0x180 [ 506.197496][T12321] __x64_sys_unshare+0x31/0x40 [ 506.197521][T12321] do_syscall_64+0xcd/0xf80 [ 506.197544][T12321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.197568][T12321] RIP: 0033:0x7f526198f7c9 [ 506.197586][T12321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 506.197608][T12321] RSP: 002b:00007f525fbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 506.197629][T12321] RAX: ffffffffffffffda RBX: 00007f5261be6180 RCX: 00007f526198f7c9 [ 506.197645][T12321] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 506.197658][T12321] RBP: 00007f5261a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 506.197672][T12321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 506.197686][T12321] R13: 00007f5261be6218 R14: 00007f5261be6180 R15: 00007ffda40ed7a8 [ 506.197716][T12321] [ 506.458466][T12296] page dumped because: unmovable page [ 506.463908][T12296] page_owner tracks the page as allocated [ 506.470355][T12296] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5834, tgid 5834 (syz-executor), ts 394218738293, free_ts 394194582932 [ 506.490205][T12296] post_alloc_hook+0x1af/0x220 [ 506.495000][T12296] get_page_from_freelist+0xd0b/0x31a0 [ 506.500618][T12296] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 506.506598][T12296] alloc_pages_mpol+0x1fb/0x550 [ 506.511566][T12296] alloc_pages_noprof+0x131/0x390 [ 506.516673][T12296] skb_page_frag_refill+0x186/0x5c0 [ 506.521960][T12296] try_fill_recv+0x7e4/0x2930 [ 506.526731][T12296] virtnet_poll+0x18d5/0x3e00 [ 506.531461][T12296] __napi_poll.constprop.0+0xb3/0x540 [ 506.536999][T12296] net_rx_action+0x9f9/0xfa0 [ 506.541636][T12296] handle_softirqs+0x219/0x950 [ 506.547147][T12296] __irq_exit_rcu+0x109/0x170 [ 506.552130][T12296] irq_exit_rcu+0x9/0x30 [ 506.556527][T12296] common_interrupt+0xbf/0xe0 [ 506.561330][T12296] asm_common_interrupt+0x26/0x40 [ 506.566442][T12296] page last free pid 5816 tgid 5816 stack trace: [ 506.572873][T12296] __free_frozen_pages+0x7df/0x1170 [ 506.578301][T12296] __folio_put+0x329/0x450 [ 506.582765][T12296] skb_release_data+0x81a/0x9e0 [ 506.587793][T12296] __kfree_skb+0x4f/0x70 [ 506.592066][T12296] tcp_ack+0x1d41/0x6150 [ 506.596330][T12296] tcp_rcv_established+0x10b6/0x36e0 [ 506.601778][T12296] tcp_v4_do_rcv+0xc65/0x10a0 [ 506.606542][T12296] __release_sock+0x361/0x450 [ 506.611246][T12296] release_sock+0x5a/0x220 [ 506.615772][T12296] tcp_sendmsg+0x38/0x50 [ 506.620083][T12296] inet_sendmsg+0xb9/0x140 [ 506.624521][T12296] sock_write_iter+0x509/0x610 [ 506.629425][T12296] vfs_write+0x7d3/0x11d0 [ 506.633812][T12296] ksys_write+0x1f8/0x250 [ 506.638633][T12296] do_syscall_64+0xcd/0xf80 [ 506.643243][T12296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.521911][T12347] ACPI: button: Initial lid state set to 'ignore' [ 509.393890][T12357] FAULT_INJECTION: forcing a failure. [ 509.393890][T12357] name failslab, interval 1, probability 0, space 0, times 0 [ 509.516908][T12357] CPU: 0 UID: 0 PID: 12357 Comm: syz.0.1427 Tainted: G U L syzkaller #0 PREEMPT(full) [ 509.516948][T12357] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 509.516966][T12357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 509.516980][T12357] Call Trace: [ 509.516987][T12357] [ 509.516997][T12357] dump_stack_lvl+0x16c/0x1f0 [ 509.517039][T12357] should_fail_ex+0x512/0x640 [ 509.517067][T12357] ? fs_reclaim_acquire+0xae/0x150 [ 509.517109][T12357] should_failslab+0xc2/0x120 [ 509.517147][T12357] __kmalloc_noprof+0xeb/0x910 [ 509.517175][T12357] ? security_inode_init_security+0x113/0x370 [ 509.517227][T12357] ? security_inode_init_security+0x113/0x370 [ 509.517264][T12357] security_inode_init_security+0x113/0x370 [ 509.517304][T12357] ? __pfx_shmem_initxattrs+0x10/0x10 [ 509.517340][T12357] ? __pfx_security_inode_init_security+0x10/0x10 [ 509.517379][T12357] ? shmem_get_inode+0x73b/0xfb0 [ 509.517422][T12357] shmem_symlink+0x138/0x960 [ 509.517453][T12357] ? __pfx_shmem_symlink+0x10/0x10 [ 509.517481][T12357] ? bpf_lsm_inode_permission+0x9/0x10 [ 509.517506][T12357] ? security_inode_permission+0xbf/0x260 [ 509.517536][T12357] ? inode_permission+0x37b/0x640 [ 509.517567][T12357] vfs_symlink+0x4b5/0x800 [ 509.517599][T12357] do_symlinkat+0x353/0x4b0 [ 509.517623][T12357] ? __pfx_do_symlinkat+0x10/0x10 [ 509.517649][T12357] ? getname_flags.part.0+0x1c5/0x550 [ 509.517682][T12357] __x64_sys_symlink+0x75/0x90 [ 509.517705][T12357] do_syscall_64+0xcd/0xf80 [ 509.517728][T12357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.517753][T12357] RIP: 0033:0x7f526198f7c9 [ 509.517772][T12357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 509.517796][T12357] RSP: 002b:00007f526276c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 509.517822][T12357] RAX: ffffffffffffffda RBX: 00007f5261be5fa0 RCX: 00007f526198f7c9 [ 509.517838][T12357] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 509.517852][T12357] RBP: 00007f5261a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 509.517866][T12357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.517880][T12357] R13: 00007f5261be6038 R14: 00007f5261be5fa0 R15: 00007ffda40ed7a8 [ 509.517911][T12357] [ 512.007312][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 512.019408][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.200109][T12385] FAULT_INJECTION: forcing a failure. [ 512.200109][T12385] name fail_futex, interval 1, probability 0, space 0, times 0 [ 512.313629][T12385] CPU: 0 UID: 0 PID: 12385 Comm: syz.0.1434 Tainted: G U L syzkaller #0 PREEMPT(full) [ 512.313672][T12385] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 512.313680][T12385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 512.313695][T12385] Call Trace: [ 512.313702][T12385] [ 512.313712][T12385] dump_stack_lvl+0x16c/0x1f0 [ 512.313756][T12385] should_fail_ex+0x512/0x640 [ 512.313789][T12385] get_futex_key+0x1d0/0x15f0 [ 512.313819][T12385] ? __pfx_get_futex_key+0x10/0x10 [ 512.313855][T12385] futex_wake+0xea/0x530 [ 512.313889][T12385] ? kasan_quarantine_put+0x10a/0x240 [ 512.313924][T12385] ? __pfx_futex_wake+0x10/0x10 [ 512.313961][T12385] ? putname+0xf5/0x1a0 [ 512.313990][T12385] do_futex+0x1e3/0x350 [ 512.314027][T12385] ? __pfx_do_futex+0x10/0x10 [ 512.314062][T12385] __x64_sys_futex+0x1e0/0x4c0 [ 512.314093][T12385] ? __x64_sys_openat+0x174/0x210 [ 512.314122][T12385] ? __pfx___x64_sys_futex+0x10/0x10 [ 512.314161][T12385] do_syscall_64+0xcd/0xf80 [ 512.314185][T12385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.314211][T12385] RIP: 0033:0x7f526198f7c9 [ 512.314230][T12385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.314254][T12385] RSP: 002b:00007f526276c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 512.314276][T12385] RAX: ffffffffffffffda RBX: 00007f5261be5fa8 RCX: 00007f526198f7c9 [ 512.314292][T12385] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5261be5fac [ 512.314307][T12385] RBP: 00007f5261be5fa0 R08: 00007f526276d000 R09: 0000000000000000 [ 512.314321][T12385] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 512.314335][T12385] R13: 00007f5261be6038 R14: 00007ffda40ed6c0 R15: 00007ffda40ed7a8 [ 512.314365][T12385] [ 513.861045][T12401] ptrace attach of "./syz-executor exec"[5837] was attempted by ""[12401] [ 514.622366][T12410] FAULT_INJECTION: forcing a failure. [ 514.622366][T12410] name fail_futex, interval 1, probability 0, space 0, times 0 [ 514.696202][T12410] CPU: 0 UID: 0 PID: 12410 Comm: syz.1.1433 Tainted: G U L syzkaller #0 PREEMPT(full) [ 514.696242][T12410] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 514.696251][T12410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 514.696265][T12410] Call Trace: [ 514.696272][T12410] [ 514.696281][T12410] dump_stack_lvl+0x16c/0x1f0 [ 514.696322][T12410] should_fail_ex+0x512/0x640 [ 514.696353][T12410] get_futex_key+0x1d0/0x15f0 [ 514.696381][T12410] ? __pfx_get_futex_key+0x10/0x10 [ 514.696415][T12410] futex_wake+0xea/0x530 [ 514.696448][T12410] ? __pfx_futex_wake+0x10/0x10 [ 514.696486][T12410] ? kmem_cache_free+0x171/0x770 [ 514.696520][T12410] do_futex+0x1e3/0x350 [ 514.696546][T12410] ? __pfx_do_futex+0x10/0x10 [ 514.696571][T12410] ? __pfx___might_resched+0x10/0x10 [ 514.696604][T12410] ? blkcg_maybe_throttle_current+0x650/0xf30 [ 514.696633][T12410] ? _raw_spin_unlock_irq+0x23/0x50 [ 514.696669][T12410] __x64_sys_futex+0x1e0/0x4c0 [ 514.696697][T12410] ? __do_sys_close_range+0x278/0x730 [ 514.696734][T12410] ? __pfx___x64_sys_futex+0x10/0x10 [ 514.696762][T12410] ? syscall_user_dispatch+0x78/0x140 [ 514.696799][T12410] do_syscall_64+0xcd/0xf80 [ 514.696821][T12410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.696844][T12410] RIP: 0033:0x7f9c31f8f7c9 [ 514.696862][T12410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.696885][T12410] RSP: 002b:00007f9c32dcd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 514.696915][T12410] RAX: ffffffffffffffda RBX: 00007f9c321e5fa8 RCX: 00007f9c31f8f7c9 [ 514.696931][T12410] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9c321e5fac [ 514.696946][T12410] RBP: 00007f9c321e5fa0 R08: 00007f9c32dce000 R09: 0000000000000000 [ 514.696962][T12410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 514.696977][T12410] R13: 00007f9c321e6038 R14: 00007fffc1d1e210 R15: 00007fffc1d1e2f8 [ 514.697007][T12410] [ 518.019052][T12476] random: crng reseeded on system resumption [ 518.128265][T12476] hub 1-0:1.0: USB hub found [ 518.165005][T12476] hub 1-0:1.0: 1 port detected [ 518.263537][T12483] netlink: 186 bytes leftover after parsing attributes in process `syz.3.1450'. [ 519.309183][T12506] __vm_enough_memory: pid: 12506, comm: syz.0.1457, bytes: 4398046511104 not enough memory for the allocation [ 520.368662][T12528] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1461'. [ 521.239190][T12541] usb usb3: usbfs: interface 0 claimed by hub while 'syz.1.1465' sets config #-1 [ 524.061852][T12590] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 524.164907][T12590] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 524.172240][T12590] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 524.201825][T12590] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 525.009008][T12621] binder: 12620:12621 ioctl 5380 2000000000c0 returned -22 [ 525.122584][T12623] netlink: Unknown conntrack attr (type=257, max=9) [ 525.531885][ T5848] Bluetooth: hci2: command 0x0c1a tx timeout [ 526.166433][ T5848] Bluetooth: hci0: command 0x0c1a tx timeout [ 526.247179][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout [ 526.253472][ T5848] Bluetooth: hci1: command 0x0c1a tx timeout [ 529.718402][T12682] FAULT_INJECTION: forcing a failure. [ 529.718402][T12682] name failslab, interval 1, probability 0, space 0, times 0 [ 529.778172][T12682] CPU: 0 UID: 0 PID: 12682 Comm: syz.0.1492 Tainted: G U L syzkaller #0 PREEMPT(full) [ 529.778218][T12682] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 529.778227][T12682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 529.778242][T12682] Call Trace: [ 529.778249][T12682] [ 529.778259][T12682] dump_stack_lvl+0x16c/0x1f0 [ 529.778302][T12682] should_fail_ex+0x512/0x640 [ 529.778330][T12682] ? kmem_cache_alloc_noprof+0x62/0x770 [ 529.778363][T12682] should_failslab+0xc2/0x120 [ 529.778402][T12682] kmem_cache_alloc_noprof+0x83/0x770 [ 529.778432][T12682] ? __kernfs_new_node+0xd2/0x9b0 [ 529.778466][T12682] ? __kernfs_new_node+0xd2/0x9b0 [ 529.778493][T12682] __kernfs_new_node+0xd2/0x9b0 [ 529.778525][T12682] ? __pfx___kernfs_new_node+0x10/0x10 [ 529.778562][T12682] ? find_held_lock+0x2b/0x80 [ 529.778595][T12682] ? kernfs_root+0xee/0x2a0 [ 529.778629][T12682] kernfs_new_node+0x13c/0x1e0 [ 529.778668][T12682] __kernfs_create_file+0x53/0x350 [ 529.778711][T12682] sysfs_add_file_mode_ns+0x207/0x3c0 [ 529.778745][T12682] internal_create_group+0x597/0xf70 [ 529.778783][T12682] ? __pfx_internal_create_group+0x10/0x10 [ 529.778818][T12682] ? kernfs_create_link+0x1bd/0x240 [ 529.778869][T12682] internal_create_groups+0x9d/0x150 [ 529.778902][T12682] device_add+0x6f7/0x1980 [ 529.778941][T12682] ? __pfx_device_add+0x10/0x10 [ 529.778977][T12682] ? lockdep_init_map_type+0x5c/0x270 [ 529.779001][T12682] ? __init_waitqueue_head+0xca/0x150 [ 529.779037][T12682] netdev_register_kobject+0x1a9/0x3d0 [ 529.779065][T12682] register_netdevice+0x13ac/0x21d0 [ 529.779108][T12682] ? __pfx_register_netdevice+0x10/0x10 [ 529.779152][T12682] ? __pfx_loopback_net_init+0x10/0x10 [ 529.779182][T12682] register_netdev+0x34/0x50 [ 529.779218][T12682] loopback_net_init+0x7a/0x170 [ 529.779248][T12682] ? __pfx_loopback_net_init+0x10/0x10 [ 529.779275][T12682] ops_init+0x1e2/0x5f0 [ 529.779313][T12682] setup_net+0x11d/0x3a0 [ 529.779347][T12682] ? __pfx_setup_net+0x10/0x10 [ 529.779380][T12682] ? lockdep_init_map_type+0x5c/0x270 [ 529.779405][T12682] ? mutex_init_lockep+0x110/0x150 [ 529.779434][T12682] copy_net_ns+0x351/0x7c0 [ 529.779475][T12682] create_new_namespaces+0x3ea/0xab0 [ 529.779515][T12682] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 529.779551][T12682] ksys_unshare+0x45b/0xa40 [ 529.779590][T12682] ? __pfx_ksys_unshare+0x10/0x10 [ 529.779630][T12682] ? xfd_validate_state+0x61/0x180 [ 529.779661][T12682] __x64_sys_unshare+0x31/0x40 [ 529.779682][T12682] do_syscall_64+0xcd/0xf80 [ 529.779706][T12682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.779731][T12682] RIP: 0033:0x7f526198f7c9 [ 529.779750][T12682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.779774][T12682] RSP: 002b:00007f526276c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 529.779796][T12682] RAX: ffffffffffffffda RBX: 00007f5261be5fa0 RCX: 00007f526198f7c9 [ 529.779812][T12682] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 529.779827][T12682] RBP: 00007f5261a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 529.779841][T12682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.779860][T12682] R13: 00007f5261be6038 R14: 00007f5261be5fa0 R15: 00007ffda40ed7a8 [ 529.779892][T12682] [ 531.961541][T12714] FAULT_INJECTION: forcing a failure. [ 531.961541][T12714] name failslab, interval 1, probability 0, space 0, times 0 [ 532.027916][T12714] CPU: 0 UID: 60929 PID: 12714 Comm: syz.2.1499 Tainted: G U L syzkaller #0 PREEMPT(full) [ 532.027965][T12714] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 532.027974][T12714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 532.027988][T12714] Call Trace: [ 532.027996][T12714] [ 532.028005][T12714] dump_stack_lvl+0x16c/0x1f0 [ 532.028048][T12714] should_fail_ex+0x512/0x640 [ 532.028076][T12714] ? __kmalloc_cache_noprof+0x5f/0x800 [ 532.028106][T12714] should_failslab+0xc2/0x120 [ 532.028145][T12714] __kmalloc_cache_noprof+0x80/0x800 [ 532.028174][T12714] ? netdev_create_hash+0x3c/0xc0 [ 532.028218][T12714] ? netdev_create_hash+0x3c/0xc0 [ 532.028255][T12714] ? __pfx_netdev_init+0x10/0x10 [ 532.028291][T12714] netdev_create_hash+0x3c/0xc0 [ 532.028330][T12714] ? __pfx_netdev_init+0x10/0x10 [ 532.028367][T12714] netdev_init+0xa5/0x230 [ 532.028405][T12714] ops_init+0x1e2/0x5f0 [ 532.028442][T12714] setup_net+0x11d/0x3a0 [ 532.028478][T12714] ? __pfx_setup_net+0x10/0x10 [ 532.028511][T12714] ? lockdep_init_map_type+0x5c/0x270 [ 532.028536][T12714] ? mutex_init_lockep+0x110/0x150 [ 532.028564][T12714] copy_net_ns+0x351/0x7c0 [ 532.028605][T12714] create_new_namespaces+0x3ea/0xab0 [ 532.028653][T12714] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 532.028690][T12714] ksys_unshare+0x45b/0xa40 [ 532.028729][T12714] ? __pfx_ksys_unshare+0x10/0x10 [ 532.028775][T12714] ? xfd_validate_state+0x61/0x180 [ 532.028805][T12714] __x64_sys_unshare+0x31/0x40 [ 532.028827][T12714] do_syscall_64+0xcd/0xf80 [ 532.028851][T12714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.028876][T12714] RIP: 0033:0x7f239f78f7c9 [ 532.028896][T12714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.028920][T12714] RSP: 002b:00007f23a0666038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 532.028942][T12714] RAX: ffffffffffffffda RBX: 00007f239f9e5fa0 RCX: 00007f239f78f7c9 [ 532.028958][T12714] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 532.028973][T12714] RBP: 00007f239f813f91 R08: 0000000000000000 R09: 0000000000000000 [ 532.028988][T12714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.029003][T12714] R13: 00007f239f9e6038 R14: 00007f239f9e5fa0 R15: 00007ffd41db8158 [ 532.029034][T12714] [ 536.641552][T12785] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 536.691785][T12785] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 536.732080][T12785] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 536.771127][T12785] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 538.092429][ T5848] Bluetooth: hci2: command 0x0c1a tx timeout [ 538.733242][ T5848] Bluetooth: hci0: command 0x0c1a tx timeout [ 538.813535][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout [ 538.821637][ T5848] Bluetooth: hci1: command 0x0c1a tx timeout [ 539.140384][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 539.194708][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 539.202148][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 539.215139][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 539.222628][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 539.235161][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 539.242616][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 539.252971][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 539.260403][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 539.270083][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 539.279309][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 539.288570][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 539.296806][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 539.311041][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 539.318579][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 539.327600][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 539.335817][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 539.344768][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 539.352195][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 539.361843][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 539.372954][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 539.381866][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 539.391875][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 539.402047][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 539.410027][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 539.420302][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 539.428026][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 539.437988][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 539.445740][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 539.458229][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 539.465718][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 539.474668][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 539.482067][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 539.493232][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 539.500629][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 539.510175][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 539.522948][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 539.533968][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 539.541392][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 539.551172][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 539.558685][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 539.568174][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 539.577500][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 539.586487][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 539.593980][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 539.603106][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 539.610511][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 539.620582][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 539.628805][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 539.643112][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 539.650653][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 539.659702][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 539.667517][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 539.677555][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 539.685329][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 539.696002][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 539.703494][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 539.713196][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 539.720610][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 539.733172][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 539.741370][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 539.753589][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 539.760999][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 539.769932][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 539.777456][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 539.786359][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 539.794296][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 539.813278][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 539.820698][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 539.835727][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 539.844145][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 539.853596][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 539.860995][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 539.869985][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 539.877600][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 539.886530][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 539.896312][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 539.905805][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 539.913368][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 539.924355][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 539.931785][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 539.941762][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 539.955569][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 539.973668][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 539.983153][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 539.992797][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 540.000310][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 540.018158][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 540.026977][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 540.043470][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 540.053410][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 540.062346][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 540.069854][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 540.079279][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 540.086798][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 540.101694][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 540.109240][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 540.119087][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 540.127060][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 540.135934][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 540.143468][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 540.153481][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 540.160886][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 540.170501][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 540.181624][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 540.190628][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 540.198146][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 540.210108][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 540.217611][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 540.226573][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 540.234021][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 540.250918][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 540.259081][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 540.268480][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 540.275962][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 540.284874][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 540.292271][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 540.303698][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 540.312462][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 540.321431][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 540.328924][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 540.337795][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 540.345276][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 540.355396][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 540.362819][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 540.375559][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 540.382966][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 540.391980][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 540.403451][ T5848] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 540.524875][T12850] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 541.317863][T12875] hub 1-0:1.0: USB hub found [ 541.341566][T12875] hub 1-0:1.0: 1 port detected [ 543.906021][T12933] netlink: 186 bytes leftover after parsing attributes in process `syz.1.1545'. [ 543.987558][T12927] can: request_module (can-proto-5) failed. [ 548.629191][T12980] sd 0:0:1:0: PR command failed: 1026 [ 548.645024][T12980] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 548.675390][T12980] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 550.870112][T13024] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(2292937984.2241723560.2555755), cmd(7) [ 551.316990][T13037] netlink: zone id is out of range [ 551.350297][T13037] netlink: zone id is out of range [ 551.419112][T13038] FAULT_INJECTION: forcing a failure. [ 551.419112][T13038] name failslab, interval 1, probability 0, space 0, times 0 [ 551.574786][T13037] netlink: set zone limit has 8 unknown bytes [ 551.635252][T13038] CPU: 0 UID: 0 PID: 13038 Comm: syz.2.1573 Tainted: G U L syzkaller #0 PREEMPT(full) [ 551.635294][T13038] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 551.635303][T13038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 551.635319][T13038] Call Trace: [ 551.635326][T13038] [ 551.635335][T13038] dump_stack_lvl+0x16c/0x1f0 [ 551.635379][T13038] should_fail_ex+0x512/0x640 [ 551.635407][T13038] ? __kmalloc_cache_noprof+0x5f/0x800 [ 551.635438][T13038] should_failslab+0xc2/0x120 [ 551.635477][T13038] __kmalloc_cache_noprof+0x80/0x800 [ 551.635504][T13038] ? lockdep_init_map_type+0x5c/0x270 [ 551.635529][T13038] ? rfkill_fop_open+0x1b6/0x750 [ 551.635567][T13038] ? __pfx_rfkill_fop_open+0x10/0x10 [ 551.635598][T13038] ? rfkill_fop_open+0x1b6/0x750 [ 551.635629][T13038] ? __pfx_rfkill_fop_open+0x10/0x10 [ 551.635661][T13038] rfkill_fop_open+0x1b6/0x750 [ 551.635698][T13038] ? __pfx_rfkill_fop_open+0x10/0x10 [ 551.635733][T13038] misc_open+0x26d/0x450 [ 551.635761][T13038] ? __pfx_misc_open+0x10/0x10 [ 551.635790][T13038] chrdev_open+0x234/0x6a0 [ 551.635827][T13038] ? __pfx_apparmor_file_open+0x10/0x10 [ 551.635854][T13038] ? __pfx_chrdev_open+0x10/0x10 [ 551.635894][T13038] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 551.635941][T13038] do_dentry_open+0x748/0x1590 [ 551.635976][T13038] ? __pfx_chrdev_open+0x10/0x10 [ 551.636023][T13038] vfs_open+0x82/0x3f0 [ 551.636052][T13038] path_openat+0x2078/0x3140 [ 551.636099][T13038] ? __pfx_path_openat+0x10/0x10 [ 551.636148][T13038] do_filp_open+0x20b/0x470 [ 551.636186][T13038] ? __pfx_do_filp_open+0x10/0x10 [ 551.636252][T13038] ? alloc_fd+0x471/0x7d0 [ 551.636296][T13038] do_sys_openat2+0x121/0x290 [ 551.636323][T13038] ? __pfx_do_sys_openat2+0x10/0x10 [ 551.636369][T13038] __x64_sys_openat+0x174/0x210 [ 551.636397][T13038] ? __pfx___x64_sys_openat+0x10/0x10 [ 551.636438][T13038] do_syscall_64+0xcd/0xf80 [ 551.636461][T13038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.636486][T13038] RIP: 0033:0x7f239f78f7c9 [ 551.636506][T13038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 551.636529][T13038] RSP: 002b:00007f23a0645038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 551.636552][T13038] RAX: ffffffffffffffda RBX: 00007f239f9e6090 RCX: 00007f239f78f7c9 [ 551.636591][T13038] RDX: 0000000000002000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 551.636608][T13038] RBP: 00007f239f813f91 R08: 0000000000000000 R09: 0000000000000000 [ 551.636623][T13038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 551.636637][T13038] R13: 00007f239f9e6128 R14: 00007f239f9e6090 R15: 00007ffd41db8158 [ 551.636669][T13038] [ 555.093812][T13099] FAULT_INJECTION: forcing a failure. [ 555.093812][T13099] name failslab, interval 1, probability 0, space 0, times 0 [ 555.139387][T13099] CPU: 0 UID: 0 PID: 13099 Comm: syz.1.1588 Tainted: G U L syzkaller #0 PREEMPT(full) [ 555.139427][T13099] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 555.139436][T13099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 555.139450][T13099] Call Trace: [ 555.139458][T13099] [ 555.139467][T13099] dump_stack_lvl+0x16c/0x1f0 [ 555.139512][T13099] should_fail_ex+0x512/0x640 [ 555.139540][T13099] ? __kmalloc_noprof+0xca/0x910 [ 555.139569][T13099] should_failslab+0xc2/0x120 [ 555.139608][T13099] __kmalloc_noprof+0xeb/0x910 [ 555.139635][T13099] ? process_preds+0x48b/0x1c50 [ 555.139672][T13099] ? process_preds+0x48b/0x1c50 [ 555.139702][T13099] process_preds+0x48b/0x1c50 [ 555.139740][T13099] ? create_filter_start.constprop.0+0x56/0x300 [ 555.139778][T13099] create_filter+0x140/0x210 [ 555.139812][T13099] ? __pfx_create_filter+0x10/0x10 [ 555.139844][T13099] ? __pfx___mutex_lock+0x10/0x10 [ 555.139869][T13099] ? find_held_lock+0x2b/0x80 [ 555.139904][T13099] apply_event_filter+0x220/0x500 [ 555.139939][T13099] ? __pfx_apply_event_filter+0x10/0x10 [ 555.139981][T13099] event_filter_write+0x16d/0x290 [ 555.140006][T13099] ? __pfx_event_filter_write+0x10/0x10 [ 555.140035][T13099] vfs_write+0x2a0/0x11d0 [ 555.140072][T13099] ? __pfx___mutex_lock+0x10/0x10 [ 555.140098][T13099] ? __pfx_vfs_write+0x10/0x10 [ 555.140141][T13099] ? __fget_files+0x20e/0x3c0 [ 555.140184][T13099] ksys_write+0x12a/0x250 [ 555.140219][T13099] ? __pfx_ksys_write+0x10/0x10 [ 555.140263][T13099] do_syscall_64+0xcd/0xf80 [ 555.140286][T13099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.140311][T13099] RIP: 0033:0x7f9c31f8f7c9 [ 555.140330][T13099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 555.140359][T13099] RSP: 002b:00007f9c32dcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 555.140381][T13099] RAX: ffffffffffffffda RBX: 00007f9c321e5fa0 RCX: 00007f9c31f8f7c9 [ 555.140397][T13099] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 555.140411][T13099] RBP: 00007f9c32013f91 R08: 0000000000000000 R09: 0000000000000000 [ 555.140425][T13099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 555.140439][T13099] R13: 00007f9c321e6038 R14: 00007f9c321e5fa0 R15: 00007fffc1d1e2f8 [ 555.140470][T13099] [ 557.558636][T13148] ima: policy update failed [ 557.585040][ T30] audit: type=1802 audit(1768392737.573:17): pid=13148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1598" res=0 errno=0 [ 558.867412][T13165] Invalid ELF header magic: != ELF [ 563.282933][T13241] FAULT_INJECTION: forcing a failure. [ 563.282933][T13241] name failslab, interval 1, probability 0, space 0, times 0 [ 563.348153][T13241] CPU: 0 UID: 0 PID: 13241 Comm: syz.1.1618 Tainted: G U L syzkaller #0 PREEMPT(full) [ 563.348194][T13241] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 563.348202][T13241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 563.348216][T13241] Call Trace: [ 563.348224][T13241] [ 563.348232][T13241] dump_stack_lvl+0x16c/0x1f0 [ 563.348275][T13241] should_fail_ex+0x512/0x640 [ 563.348302][T13241] ? kmem_cache_alloc_noprof+0x62/0x770 [ 563.348334][T13241] should_failslab+0xc2/0x120 [ 563.348372][T13241] kmem_cache_alloc_noprof+0x83/0x770 [ 563.348408][T13241] ? vm_area_dup+0x27/0x8d0 [ 563.348437][T13241] ? vm_area_dup+0x27/0x8d0 [ 563.348458][T13241] vm_area_dup+0x27/0x8d0 [ 563.348484][T13241] __split_vma+0x18e/0x1050 [ 563.348515][T13241] ? __pfx___split_vma+0x10/0x10 [ 563.348540][T13241] ? look_up_lock_class+0x6b/0x130 [ 563.348592][T13241] vma_modify+0x1069/0x2310 [ 563.348626][T13241] ? __pfx_vma_modify+0x10/0x10 [ 563.348652][T13241] ? ima_file_mprotect+0x1ba/0x690 [ 563.348689][T13241] ? aa_file_perm+0x29e/0x1560 [ 563.348727][T13241] vma_modify_flags+0x235/0x3a0 [ 563.348755][T13241] ? __pfx_vma_modify_flags+0x10/0x10 [ 563.348796][T13241] ? may_expand_vm+0xe8/0x430 [ 563.348836][T13241] mprotect_fixup+0x3a1/0xb80 [ 563.348866][T13241] ? __pfx_mprotect_fixup+0x10/0x10 [ 563.348890][T13241] ? common_file_perm+0x1b1/0x500 [ 563.348928][T13241] do_mprotect_pkey+0x9bc/0xd40 [ 563.348962][T13241] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 563.348988][T13241] ? __mutex_unlock_slowpath+0x161/0x790 [ 563.349020][T13241] ? __fget_files+0x20e/0x3c0 [ 563.349064][T13241] ? __pfx_ksys_write+0x10/0x10 [ 563.349109][T13241] __x64_sys_mprotect+0x78/0xc0 [ 563.349133][T13241] ? lockdep_hardirqs_on+0x7c/0x110 [ 563.349170][T13241] do_syscall_64+0xcd/0xf80 [ 563.349192][T13241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.349216][T13241] RIP: 0033:0x7f9c31f8f7c9 [ 563.349233][T13241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 563.349257][T13241] RSP: 002b:00007f9c32dcd038 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 563.349279][T13241] RAX: ffffffffffffffda RBX: 00007f9c321e5fa0 RCX: 00007f9c31f8f7c9 [ 563.349295][T13241] RDX: 0000000000000006 RSI: 0000000000806121 RDI: 0000000000000000 [ 563.349309][T13241] RBP: 00007f9c32dcd090 R08: 0000000000000000 R09: 0000000000000000 [ 563.349324][T13241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 563.349337][T13241] R13: 00007f9c321e6038 R14: 00007f9c321e5fa0 R15: 00007fffc1d1e2f8 [ 563.349368][T13241] [ 563.658430][T13247] binder: 13246:13247 ioctl c018620c 0 returned -1 [ 564.386414][T13257] ================================================================== [ 564.386438][T13257] BUG: KASAN: slab-use-after-free in fbcon_prepare_logo+0xa03/0xc70 [ 564.386472][T13257] Read of size 256 at addr ffff888028fd23f8 by task syz.0.1621/13257 [ 564.386492][T13257] [ 564.386506][T13257] CPU: 0 UID: 0 PID: 13257 Comm: syz.0.1621 Tainted: G U L syzkaller #0 PREEMPT(full) [ 564.386541][T13257] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 564.386550][T13257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 564.386564][T13257] Call Trace: [ 564.386572][T13257] [ 564.386581][T13257] dump_stack_lvl+0x116/0x1f0 [ 564.386619][T13257] print_report+0xcd/0x630 [ 564.386653][T13257] ? __virt_addr_valid+0x81/0x610 [ 564.386693][T13257] ? __phys_addr+0xe8/0x180 [ 564.386730][T13257] ? fbcon_prepare_logo+0xa03/0xc70 [ 564.386756][T13257] kasan_report+0xe0/0x110 [ 564.386792][T13257] ? fbcon_prepare_logo+0xa03/0xc70 [ 564.386822][T13257] kasan_check_range+0x100/0x1b0 [ 564.386847][T13257] __asan_memcpy+0x23/0x60 [ 564.386876][T13257] fbcon_prepare_logo+0xa03/0xc70 [ 564.386909][T13257] fbcon_init+0xda0/0x1930 [ 564.386935][T13257] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 564.386966][T13257] visual_init+0x320/0x620 [ 564.386996][T13257] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 564.387034][T13257] store_bind+0x61d/0x760 [ 564.387069][T13257] ? sysfs_file_kobj+0xe4/0x290 [ 564.387093][T13257] ? __pfx_store_bind+0x10/0x10 [ 564.387124][T13257] dev_attr_store+0x58/0x80 [ 564.387156][T13257] ? __pfx_dev_attr_store+0x10/0x10 [ 564.387189][T13257] sysfs_kf_write+0xf2/0x150 [ 564.387212][T13257] kernfs_fop_write_iter+0x3af/0x570 [ 564.387248][T13257] ? __pfx_sysfs_kf_write+0x10/0x10 [ 564.387273][T13257] iter_file_splice_write+0xa24/0x12b0 [ 564.387319][T13257] ? __pfx_iter_file_splice_write+0x10/0x10 [ 564.387364][T13257] ? __pfx_copy_splice_read+0x10/0x10 [ 564.387407][T13257] ? __pfx_iter_file_splice_write+0x10/0x10 [ 564.387444][T13257] direct_splice_actor+0x192/0x6c0 [ 564.387481][T13257] splice_direct_to_actor+0x345/0xa30 [ 564.387517][T13257] ? __pfx_direct_splice_actor+0x10/0x10 [ 564.387555][T13257] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 564.387595][T13257] do_splice_direct+0x174/0x240 [ 564.387629][T13257] ? __pfx_do_splice_direct+0x10/0x10 [ 564.387664][T13257] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 564.387701][T13257] ? rw_verify_area+0xcf/0x6c0 [ 564.387732][T13257] do_sendfile+0xb06/0xe50 [ 564.387766][T13257] ? __pfx_do_sendfile+0x10/0x10 [ 564.387799][T13257] ? __x64_sys_futex+0x1e0/0x4c0 [ 564.387826][T13257] ? __x64_sys_futex+0x1e9/0x4c0 [ 564.387854][T13257] __x64_sys_sendfile64+0x1d8/0x220 [ 564.387877][T13257] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 564.387905][T13257] do_syscall_64+0xcd/0xf80 [ 564.387926][T13257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.387950][T13257] RIP: 0033:0x7f526198f7c9 [ 564.387967][T13257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.387990][T13257] RSP: 002b:00007f525fbb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 564.388012][T13257] RAX: ffffffffffffffda RBX: 00007f5261be6360 RCX: 00007f526198f7c9 [ 564.388028][T13257] RDX: 0000000000000000 RSI: 000000000000001b RDI: 0000000000000003 [ 564.388042][T13257] RBP: 00007f5261a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 564.388056][T13257] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 564.388070][T13257] R13: 00007f5261be63f8 R14: 00007f5261be6360 R15: 00007ffda40ed7a8 [ 564.388093][T13257] [ 564.388101][T13257] [ 564.388106][T13257] Allocated by task 6773: [ 564.388116][T13257] kasan_save_stack+0x33/0x60 [ 564.388145][T13257] kasan_save_track+0x14/0x30 [ 564.388174][T13257] __kasan_kmalloc+0xaa/0xb0 [ 564.388201][T13257] __kmalloc_node_track_caller_noprof+0x353/0x930 [ 564.388233][T13257] kmalloc_reserve+0xef/0x2c0 [ 564.388268][T13257] __alloc_skb+0x186/0x410 [ 564.388291][T13257] nsim_dev_trap_report_work+0x2b1/0xcf0 [ 564.388314][T13257] process_one_work+0x9ba/0x1b20 [ 564.388337][T13257] worker_thread+0x6c8/0xf10 [ 564.388365][T13257] kthread+0x3c5/0x780 [ 564.388385][T13257] ret_from_fork+0x983/0xb10 [ 564.388406][T13257] ret_from_fork_asm+0x1a/0x30 [ 564.388439][T13257] [ 564.388444][T13257] Freed by task 6773: [ 564.388454][T13257] kasan_save_stack+0x33/0x60 [ 564.388484][T13257] kasan_save_track+0x14/0x30 [ 564.388514][T13257] kasan_save_free_info+0x3b/0x60 [ 564.388537][T13257] __kasan_slab_free+0x5f/0x80 [ 564.388568][T13257] kfree+0x2f8/0x6e0 [ 564.388590][T13257] skb_free_head+0x114/0x210 [ 564.388614][T13257] skb_release_data+0x795/0x9e0 [ 564.388643][T13257] consume_skb+0xbf/0x100 [ 564.388675][T13257] nsim_dev_trap_report_work+0x8bd/0xcf0 [ 564.388698][T13257] process_one_work+0x9ba/0x1b20 [ 564.388722][T13257] worker_thread+0x6c8/0xf10 [ 564.388744][T13257] kthread+0x3c5/0x780 [ 564.388764][T13257] ret_from_fork+0x983/0xb10 [ 564.388784][T13257] ret_from_fork_asm+0x1a/0x30 [ 564.388817][T13257] [ 564.388822][T13257] The buggy address belongs to the object at ffff888028fd2000 [ 564.388822][T13257] which belongs to the cache kmalloc-4k of size 4096 [ 564.388841][T13257] The buggy address is located 1016 bytes inside of [ 564.388841][T13257] freed 4096-byte region [ffff888028fd2000, ffff888028fd3000) [ 564.388864][T13257] [ 564.388870][T13257] The buggy address belongs to the physical page: [ 564.388880][T13257] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28fd0 [ 564.388901][T13257] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 564.388920][T13257] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 564.388941][T13257] page_type: f5(slab) [ 564.388961][T13257] raw: 00fff00000000040 ffff88813ff27140 0000000000000000 dead000000000001 [ 564.388982][T13257] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 564.389004][T13257] head: 00fff00000000040 ffff88813ff27140 0000000000000000 dead000000000001 [ 564.389025][T13257] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 564.389047][T13257] head: 00fff00000000003 ffffea0000a3f401 00000000ffffffff 00000000ffffffff [ 564.389068][T13257] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 564.389081][T13257] page dumped because: kasan: bad access detected [ 564.389092][T13257] page_owner tracks the page as allocated [ 564.389100][T13257] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6812, tgid 6812 (syz.1.196), ts 156368011424, free_ts 156338697573 [ 564.389142][T13257] post_alloc_hook+0x1af/0x220 [ 564.389165][T13257] get_page_from_freelist+0xd0b/0x31a0 [ 564.389191][T13257] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 564.389219][T13257] alloc_pages_mpol+0x1fb/0x550 [ 564.389252][T13257] new_slab+0x2c3/0x430 [ 564.389273][T13257] ___slab_alloc+0xe18/0x1c90 [ 564.389294][T13257] __slab_alloc.constprop.0+0x63/0x110 [ 564.389318][T13257] __kvmalloc_node_noprof+0x592/0xa40 [ 564.389354][T13257] elf_core_dump+0x2000/0x3c10 [ 564.389373][T13257] vfs_coredump+0x2b85/0x55e0 [ 564.389406][T13257] get_signal+0x22e1/0x26d0 [ 564.389435][T13257] arch_do_signal_or_restart+0x8f/0x7a0 [ 564.389467][T13257] irqentry_exit+0x38a/0x8c0 [ 564.389486][T13257] asm_exc_page_fault+0x26/0x30 [ 564.389507][T13257] page last free pid 5837 tgid 5837 stack trace: [ 564.389519][T13257] __free_frozen_pages+0x7df/0x1170 [ 564.389540][T13257] __put_partials+0x130/0x170 [ 564.389563][T13257] qlist_free_all+0x4c/0xf0 [ 564.389590][T13257] kasan_quarantine_reduce+0x195/0x1e0 [ 564.389621][T13257] __kasan_slab_alloc+0x69/0x90 [ 564.389652][T13257] __kmalloc_node_noprof+0x30d/0x930 [ 564.389683][T13257] __vmalloc_node_range_noprof+0x405/0x16b0 [ 564.389704][T13257] __vmalloc_node_noprof+0xad/0xf0 [ 564.389724][T13257] do_ip6t_get_ctl+0x63f/0xa50 [ 564.389749][T13257] nf_getsockopt+0x7c/0xe0 [ 564.389769][T13257] ipv6_getsockopt+0x1f7/0x280 [ 564.389792][T13257] tcp_getsockopt+0xa1/0x100 [ 564.389823][T13257] do_sock_getsockopt+0x324/0x410 [ 564.389858][T13257] __sys_getsockopt+0x123/0x1b0 [ 564.389886][T13257] __x64_sys_getsockopt+0xbd/0x160 [ 564.389914][T13257] do_syscall_64+0xcd/0xf80 [ 564.389932][T13257] [ 564.389938][T13257] Memory state around the buggy address: [ 564.389949][T13257] ffff888028fd2280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 564.389965][T13257] ffff888028fd2300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 564.389981][T13257] >ffff888028fd2380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 564.389994][T13257] ^ [ 564.390008][T13257] ffff888028fd2400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 564.390024][T13257] ffff888028fd2480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 564.390036][T13257] ================================================================== [ 564.455969][T13257] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 564.455995][T13257] CPU: 0 UID: 0 PID: 13257 Comm: syz.0.1621 Tainted: G U L syzkaller #0 PREEMPT(full) [ 564.456034][T13257] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 564.456043][T13257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 564.456058][T13257] Call Trace: [ 564.456065][T13257] [ 564.456074][T13257] dump_stack_lvl+0x3d/0x1f0 [ 564.456115][T13257] vpanic+0x640/0x6f0 [ 564.456140][T13257] panic+0xca/0xd0 [ 564.456162][T13257] ? __pfx_panic+0x10/0x10 [ 564.456185][T13257] ? fbcon_prepare_logo+0xa03/0xc70 [ 564.456212][T13257] ? preempt_schedule_common+0x44/0xc0 [ 564.456250][T13257] ? preempt_schedule_thunk+0x16/0x30 [ 564.456274][T13257] ? check_panic_on_warn+0x1f/0xb0 [ 564.456299][T13257] check_panic_on_warn+0xab/0xb0 [ 564.456325][T13257] end_report+0x107/0x160 [ 564.456367][T13257] kasan_report+0xee/0x110 [ 564.456402][T13257] ? fbcon_prepare_logo+0xa03/0xc70 [ 564.456433][T13257] kasan_check_range+0x100/0x1b0 [ 564.456458][T13257] __asan_memcpy+0x23/0x60 [ 564.456486][T13257] fbcon_prepare_logo+0xa03/0xc70 [ 564.456518][T13257] fbcon_init+0xda0/0x1930 [ 564.456545][T13257] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 564.456576][T13257] visual_init+0x320/0x620 [ 564.456604][T13257] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 564.456642][T13257] store_bind+0x61d/0x760 [ 564.456675][T13257] ? sysfs_file_kobj+0xe4/0x290 [ 564.456699][T13257] ? __pfx_store_bind+0x10/0x10 [ 564.456730][T13257] dev_attr_store+0x58/0x80 [ 564.456762][T13257] ? __pfx_dev_attr_store+0x10/0x10 [ 564.456795][T13257] sysfs_kf_write+0xf2/0x150 [ 564.456819][T13257] kernfs_fop_write_iter+0x3af/0x570 [ 564.456855][T13257] ? __pfx_sysfs_kf_write+0x10/0x10 [ 564.456880][T13257] iter_file_splice_write+0xa24/0x12b0 [ 564.456926][T13257] ? __pfx_iter_file_splice_write+0x10/0x10 [ 564.456966][T13257] ? __pfx_copy_splice_read+0x10/0x10 [ 564.457015][T13257] ? __pfx_iter_file_splice_write+0x10/0x10 [ 564.457054][T13257] direct_splice_actor+0x192/0x6c0 [ 564.457091][T13257] splice_direct_to_actor+0x345/0xa30 [ 564.457127][T13257] ? __pfx_direct_splice_actor+0x10/0x10 [ 564.457166][T13257] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 564.457206][T13257] do_splice_direct+0x174/0x240 [ 564.457240][T13257] ? __pfx_do_splice_direct+0x10/0x10 [ 564.457276][T13257] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 564.457313][T13257] ? rw_verify_area+0xcf/0x6c0 [ 564.457349][T13257] do_sendfile+0xb06/0xe50 [ 564.457384][T13257] ? __pfx_do_sendfile+0x10/0x10 [ 564.457418][T13257] ? __x64_sys_futex+0x1e0/0x4c0 [ 564.457445][T13257] ? __x64_sys_futex+0x1e9/0x4c0 [ 564.457473][T13257] __x64_sys_sendfile64+0x1d8/0x220 [ 564.457497][T13257] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 564.457525][T13257] do_syscall_64+0xcd/0xf80 [ 564.457546][T13257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.457570][T13257] RIP: 0033:0x7f526198f7c9 [ 564.457588][T13257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.457611][T13257] RSP: 002b:00007f525fbb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 564.457634][T13257] RAX: ffffffffffffffda RBX: 00007f5261be6360 RCX: 00007f526198f7c9 [ 564.457650][T13257] RDX: 0000000000000000 RSI: 000000000000001b RDI: 0000000000000003 [ 564.457665][T13257] RBP: 00007f5261a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 564.457679][T13257] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 564.457694][T13257] R13: 00007f5261be63f8 R14: 00007f5261be6360 R15: 00007ffda40ed7a8 [ 564.457718][T13257] [ 564.457786][T13257] Kernel Offset: disabled