last executing test programs: 18m29.674055644s ago: executing program 1 (id=242): bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x8200, 0x1, 0x9, 0x7, 0x5, 0xffffffffffffffff, 0x80000001, "7829000000000000000200", 0x0, 0xffffffffffffffff, 0x7, 0xffff4e8b, 0x2, 0x1}, 0x7) mmap$auto(0x400000000000, 0x6, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x41, 0x0) r1 = clone3$auto(&(0x7f0000000040)={0x43, 0x4, 0xa5e7, 0x10000, 0x1, 0x8000000000000000, 0x10, 0x5, 0xf, 0x1ff, 0x5185}, 0x1) prctl$auto(0x3e, 0x1, r1, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f0000000000)) mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x80000001) unshare$auto(0x8) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0xfffffffffffffffe, 0x240007, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000084) ioctl$auto_SNDCTL_DSP_PROFILE(r2, 0x40045017, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r3, 0x4b72, r4) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) rseq$auto(&(0x7f0000000280)={0xe, 0x401, 0x0, 0x806, 0x7, 0x2, "a005e2079990dbea867d20f42a909da4bd862dd72f80af99f59d86b567b54339f9b0684def766e0ed26bb934a5d4f977ea74add42aecf45ef5799ce682dcaae1bdd579f1e0a2644be3281def8a948ab91137d0d6577a9e7efd2639688d2ae832b4947ab26e0d4e8b00572342e2a8ac0fb63464ea1ee16b46cbfec625d3d196532879"}, 0x8003, 0x0, 0x8000006) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) 18m27.489028029s ago: executing program 1 (id=246): r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) write$auto(r0, &(0x7f00000000c0)='\xc4\x1dR\x00\x003\x1bO\xbb\x98)\x7fTa1\xa3\xd0\x89\x1e\\\xff', 0x8587) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x1) r1 = socket(0x11, 0x80003, 0x300) mmap$auto(0xffffffffffffffff, 0x20009, 0x2000000200008, 0x40000000000eb1, r1, 0xfffffffffffffff9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x1, 0x8, 0x800000003, 0xeb1, 0xfffffffffffffffa, 0x4000002) socket(0xa, 0x1, 0x84) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x801, 0x91) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) write$auto(r2, 0x0, 0x101) ioctl$auto_SG_GET_NUM_WAITING(r2, 0x227d, 0x0) setsockopt$auto(0x3, 0x10000000084, 0xd, 0x0, 0x8) socket(0x18, 0x3, 0x2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_enter$auto(0xffffffffffffffff, 0x7, 0x2, 0x10, 0x0, 0xf2a7214) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) fcntl$auto(0x0, 0x408, 0x100000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) 18m26.191143683s ago: executing program 1 (id=250): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xb02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r1, 0x400, 0x1) read$auto_proc_mem_operations_base(r1, &(0x7f0000000080)=""/74, 0x4a) bind$auto(0x3, 0x0, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000100)="5de13aee92106b64cb8ff82f0fb9ed0e3060dba6b9394a8ea3ade94c38e1a4dbcd55172992baeadacee4af990ec7efc6c2703d8306da615ac7b35b90c0e1aa9ea421de412d83f3602fb3c5b56b7daef63fdf9ac3", 0x7, 0x0, 0x8000000000000000, 0x0, 0x1f, 0x200}, 0x9}, 0x5, 0x5) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fadvise64$auto_POSIX_FADV_NORMAL(0xffffffffffffffff, 0x7, 0xd, 0x0) r2 = fcntl$auto(0x3, 0x4, 0xa553) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) read$auto(0x3, 0x0, 0x8080) shutdown$auto(0x200000003, 0x2) dup2$auto(r2, 0xffffffffffffffff) socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2b, 0x2, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) madvise$auto(0x0, 0x1000, 0x4) setsockopt$auto(0x3, 0x0, 0x17, 0x0, 0x28) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ioam6(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RSS_GET(0xffffffffffffffff, 0x0, 0x40) close_range$auto(0x2, 0xffffffffffffffff, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty58\x00', 0x800, 0x0) 18m24.650051555s ago: executing program 1 (id=253): r0 = socket(0x1e, 0x1, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bdi/43:192/max_ratio\x00', 0x2001, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, r0, 0x99) socket(0xa, 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) rt_sigprocmask$auto(0xffffffff, 0x0, 0x0, 0x8) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40080, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) socket(0xa, 0x5, 0x0) mmap$auto(0x4000000004, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) rt_sigprocmask$auto(0x6, &(0x7f00000000c0)={0x89}, &(0x7f0000000100)={0x400}, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) mmap$auto(0x0, 0x7fff, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = socket(0xa, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/rxrpc/calls\x00', 0x40280, 0x0) socket(0xa, 0x3, 0x100) socketpair$auto(0xb, 0xd, 0x800e8, 0x0) 18m21.752788247s ago: executing program 1 (id=259): bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x8200, 0x1, 0x9, 0x7, 0x5, 0xffffffffffffffff, 0x80000001, "7829000000000000000200", 0x0, 0xffffffffffffffff, 0x7, 0xffff4e8b, 0x2, 0x1}, 0x7) mmap$auto(0x400000000000, 0x6, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x41, 0x0) r1 = clone3$auto(&(0x7f0000000040)={0x43, 0x4, 0xa5e7, 0x10000, 0x1, 0x8000000000000000, 0x10, 0x5, 0xf, 0x1ff, 0x5185}, 0x1) prctl$auto(0x3e, 0x1, r1, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f0000000000)) mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x80000001) unshare$auto(0x8) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0xfffffffffffffffe, 0x240007, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000084) ioctl$auto_SNDCTL_DSP_PROFILE(r2, 0x40045017, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r3, 0x4b72, r4) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) rseq$auto(&(0x7f0000000280)={0xe, 0x401, 0x0, 0x806, 0x7, 0x2, "a005e2079990dbea867d20f42a909da4bd862dd72f80af99f59d86b567b54339f9b0684def766e0ed26bb934a5d4f977ea74add42aecf45ef5799ce682dcaae1bdd579f1e0a2644be3281def8a948ab91137d0d6577a9e7efd2639688d2ae832b4947ab26e0d4e8b00572342e2a8ac0fb63464ea1ee16b46cbfec625d3d196532879"}, 0x8003, 0x0, 0x8000006) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) 18m19.249011442s ago: executing program 1 (id=263): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:03.0/resource1\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto(r1, 0x81004525, r0) mmap$auto(0x0, 0x3, 0x1000000000001, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) sysfs$auto(0x2, 0x42, 0x0) capset$auto(0x0, 0x0) sysfs$auto(0x80000000, 0x4, 0x40) write$auto(0x3, 0x0, 0xfdf3) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/security/tomoyo/exception_policy\x00', 0x40802, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:01.3/msi_bus\x00', 0x800, 0x0) r4 = socket(0xa, 0x801, 0x84) getsockopt$auto(r4, 0x84, 0x82, 0x0, 0x0) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_BACKOFF_EXPONENT(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r5, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x6}, @NL802154_ATTR_SUPPORTED_CHANNEL={0x8, 0x16, 0x2}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0xfffffff8}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x2}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x880) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000100)=""/16, 0x10) read$auto(r2, 0x0, 0xb4d3) r6 = clone$auto(0x9, 0x3, &(0x7f0000000040)=0x6, &(0x7f0000000080), 0xffffffffffffffff) ioctl$auto_XFS_IOC_FREESP(0xffffffffffffffff, 0x4030580b, &(0x7f0000000180)={0x8006, 0x1, 0x7f, 0x46, 0x10001, 0x0}) kcmp$auto_KCMP_EPOLL_TFD(r6, r7, 0x7, r2, 0x2) ustat$auto(0xff, &(0x7f0000000100)={0x7ffc, 0x8b, "46fd5d9b9726", "52d303a2bb3d"}) 18m4.167977749s ago: executing program 32 (id=263): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:03.0/resource1\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto(r1, 0x81004525, r0) mmap$auto(0x0, 0x3, 0x1000000000001, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) sysfs$auto(0x2, 0x42, 0x0) capset$auto(0x0, 0x0) sysfs$auto(0x80000000, 0x4, 0x40) write$auto(0x3, 0x0, 0xfdf3) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/security/tomoyo/exception_policy\x00', 0x40802, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:01.3/msi_bus\x00', 0x800, 0x0) r4 = socket(0xa, 0x801, 0x84) getsockopt$auto(r4, 0x84, 0x82, 0x0, 0x0) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_BACKOFF_EXPONENT(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r5, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x6}, @NL802154_ATTR_SUPPORTED_CHANNEL={0x8, 0x16, 0x2}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0xfffffff8}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x2}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x880) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000100)=""/16, 0x10) read$auto(r2, 0x0, 0xb4d3) r6 = clone$auto(0x9, 0x3, &(0x7f0000000040)=0x6, &(0x7f0000000080), 0xffffffffffffffff) ioctl$auto_XFS_IOC_FREESP(0xffffffffffffffff, 0x4030580b, &(0x7f0000000180)={0x8006, 0x1, 0x7f, 0x46, 0x10001, 0x0}) kcmp$auto_KCMP_EPOLL_TFD(r6, r7, 0x7, r2, 0x2) ustat$auto(0xff, &(0x7f0000000100)={0x7ffc, 0x8b, "46fd5d9b9726", "52d303a2bb3d"}) 7m52.515041756s ago: executing program 0 (id=1999): mkdir$auto(&(0x7f0000004440)='./file0\x00', 0x1) r0 = socket(0x2, 0x1, 0x106) setsockopt$auto(r0, 0x6, 0x7ffb, 0x0, 0x2) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r2 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r2, 0x29, 0x43, &(0x7f0000000040)='\xa1\x00', 0x4) openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x242, 0x0) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r3, 0x400454a4, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x9f, 0x6, 0xf8, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop12\x00', 0x9d62ea8c85af692a, 0x0) mmap$auto(0x0, 0x4120008, 0x46, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0xa40, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) pread64$auto(r1, &(0x7f0000000240)='/3Cocw\x00\x03\x00\x00\x00\x17\x00\x00\x00ipt3\x00\xc3\xa9[/\xd4>p\xaeL@N&-\x1d\xb7\x86\xdc\xa8_3.\xa1\\\xee\xc7\xb4*8\xd6\xc04KDh\xc9\xce\xbe\x16\xca\xaaO\'\xfb\v\b\vM\x00e\xd6\xb9z\xdc\x12\x8f\x9d\x88\xad\xaav1\v\x06\xe79\xb9C\f\x875j\x00\x14\xa7\x7f\x1d\xf0\xf5\xc4\xe4nLc%\x80\xa95\xc3\xc2\xf0}\x05A\xa7\\\x9fC1\x9ci\x13\xbeq\xc8\'\xb8\x8amW\xf9\xe5\xf1\x1a\xe1\x8eTS\x97\xfbx\xb9#\xd9\x03\xcbz\x11\xb2\x04\\\xc0w\xeaS\xad8I$\xa0\x8c\xc4[\x04\xa4\x9a\x8b\xf5og\xee', 0x34b, 0xffff) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2a, 0x2, 0x1) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x9, 0x0, 0x7, 0x0, 0x1, 0x4}, 0x4}, 0x10000, 0x300, 0x0) 7m50.415329934s ago: executing program 0 (id=2002): mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/pagemap\x00', 0x80800, 0x0) read$auto(r1, 0x0, 0x39b8) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/user\x00') ioctl$auto(0x3, 0xc0383e04, r2) 7m50.397587185s ago: executing program 4 (id=2003): mremap$auto(0x200000000000, 0x4, 0x4, 0x3, 0x100000000) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) r0 = syz_clone(0x5004000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x503083, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, 0x0, 0x0) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r4) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYRES16=0x0, @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001280)={0x0}, 0x1, 0x0, 0x0, 0x91}, 0x10) ioctl$auto_MON_IOCX_MFETCH(r3, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r3, 0xc0109207, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dmmidi2\x00', 0x0, 0x0) readv$auto(0x3, 0x0, 0x6) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x393100, 0x0) readv$auto(0xffffffffffffffff, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) mlockall$auto(0x7) mprotect$auto(0x0, 0x806121, 0x6) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) ptrace$auto(0x10, r0, 0x2, 0x1007ff) timer_settime$auto(0x0, 0x100, &(0x7f0000000200)={{0x3, 0x10007}, {0x9}}, 0x0) socket(0x9137acc36257066f, 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 7m50.107166182s ago: executing program 0 (id=2004): ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000000c0)={0x2, 0x0, 0x8000004, 0x81, &(0x7f0000000000), 0x100400, 0xeb8e, 0x0, @number_of_packets=0xfffffff7, 0x9, 0x800476, 0x0}) read$auto_severities_coverage_fops_severity(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x400006, 0x1000dd, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) umount2$auto(&(0x7f0000000000)='.\x00', 0x8) madvise$auto(0x0, 0x200204, 0x14) 7m48.853981039s ago: executing program 0 (id=2009): unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="131b0296", @ANYRES16=r1, @ANYBLOB="cf5728bd7000fedbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x8020) read$auto(r0, 0x0, 0x3) r2 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x2, 0x0) write$auto_ecryptfs_miscdev_fops_miscdev(r2, &(0x7f00000001c0)="239cb836edc0", 0x6) mprotect$auto(0x400000000008001, 0xfffffffffffffffa, 0xc) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) setsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x88, 0x52, &(0x7f0000000140)='\'(!%&$^#.\x00', 0x7) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x121000, 0x0) mmap$auto(0x0, 0x8, 0x2, 0x17, 0x5, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000003900)='\t', 0x1) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/memory_hotplug/parameters/online_policy\x00', 0x2, 0x0) read$auto(r4, 0x0, 0x800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x8, 0x6, 0x9beb, 0x9b7f, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv$auto(0x0, 0x0, 0x4, 0x0, 0x3, 0x7fff) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) r8 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$auto_IOCTL_VMCI_SET_NOTIFY(r8, 0x7cb, 0x0) r9 = syz_clone(0x200000, &(0x7f0000000080), 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000003c0)) wait4$auto(r9, 0x0, 0xeae66e9c, 0x0) msgctl$auto_IPC_STAT(0x1ff, 0x2, &(0x7f0000000340)={{0x6, 0xee01, 0xffffffffffffffff, 0xf, 0x1fd, 0x3, 0x2}, 0x0, 0x0, 0x4, 0x5, 0x800000007, 0x5, 0x91d, 0x3, 0x1001, 0x39a, @inferred=r7, @raw=0x2}) 7m48.746988293s ago: executing program 4 (id=2010): r0 = prctl$auto_PR_SET_MM_ARG_END(0xffff, 0x9, 0xffffffffffffffff, 0x78, 0xd) getsockopt$auto(r0, 0x9, 0x4, &(0x7f0000000040)='\'+#-!}\x15&,(\x00', 0x0) getrlimit$auto(0x2, &(0x7f00000002c0)={0x4, 0x3}) openat$auto_stats_fops_2(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffd, 0x0, &(0x7f0000006340)={&(0x7f0000000480)=ANY=[@ANYBLOB="920329bd7000fb630025000000004a13727ce1d9f09a9884"], 0x14}, 0x1, 0x0, 0x0, 0x4044040}, 0x4000) shmctl$auto_IPC_SET(0x8, 0x1, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000100)={0x3fd, 0x0, [{0x0, 0xffff5a9a, 0x7fffffff, 0x0, 0xf, 0x8, 0x6000}]}) write$auto_console_fops_tty_io(r1, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) 7m47.511838916s ago: executing program 4 (id=2012): bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_3={0x9, 0x83a2, 0x91d, 0x1, 0x7, 0xffffffff, 0x9, 0x2, 0x0, "dc3f45f2ecb206e91bf73d1be5fc8218", 0x0, 0x3a5, 0xffffffffffffffff, 0xbdf, 0x3, 0xc37a, 0x9, 0x101, 0x101, 0xfffffffb, @attach_prog_fd, 0x1, 0xffffffffffffffb6, 0x3, 0x4, 0x10000}, 0x7) mmap$auto(0x400000000000, 0x6, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x41, 0x0) r1 = clone3$auto(&(0x7f0000000040)={0x43, 0x4, 0xa5e7, 0x10000, 0x1, 0x8000000000000000, 0x10, 0x5, 0xf, 0x1ff, 0x5185}, 0x1) prctl$auto(0x3e, 0x1, r1, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f0000000000)) mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x80000001) unshare$auto(0x8) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0xfffffffffffffffe, 0x240007, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000084) ioctl$auto_SNDCTL_DSP_PROFILE(r2, 0x40045017, &(0x7f0000000180)="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") close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r3, 0x4b72, 0xffffffffffffffff) madvise$auto(0xfffffffffffffffc, 0x2003f2, 0x200) madvise$auto(0x0, 0x200007, 0x19) rseq$auto(&(0x7f0000000280)={0xe, 0x401, 0x0, 0x806, 0x7, 0x2, "a005e2079990dbea867d20f42a909da4bd862dd72f80af99f59d86b567b54339f9b0684def766e0ed26bb934a5d4f977ea74add42aecf45ef5799ce682dcaae1bdd579f1e0a2644be3281def8a948ab91137d0d6577a9e7efd2639688d2ae832b4947ab26e0d4e8b00572342e2a8ac0fb63464ea1ee16b46cbfec625d3d196532879"}, 0x8003, 0x0, 0x8000006) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x9, 0x7) clock_gettime$auto(0x1, 0x0) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) 7m43.907102717s ago: executing program 0 (id=2018): readv$auto(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001880), 0x1}, 0x9) 7m43.106578276s ago: executing program 0 (id=2021): pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdds\x1cJ\x99\x00:2\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b4a", 0xfdef) 7m42.896819992s ago: executing program 4 (id=2023): socket(0x2, 0x3, 0xa) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101080, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = open(&(0x7f0000000100)='.\x00', 0x595082, 0x0) close_range$auto(0x2, 0x8, 0x0) fsetxattr$auto(r2, &(0x7f0000000180)=':\xbf+<\x8a}\x00\xeb\xfa\xe6\x8d\x02\\VD\x04\x00\x00\x00*\x80\xa4\xf4vql\xa9\x05o\xf7\x9e\xfd\xf7\x00\x00\x00\x00H_/Z>n\xf5F\xbf\xd3\xefi\x91\x88\x1daIu7\xef!\xd0\x04\xdes\xfe`\xf5e;4\xbek\xf9\xec%\xbc\xd4\xfc`\xb9\n\xb5\xa5V\x98\x14]\x8a\x03\xd9', 0x0, 0x7bd, 0x1) mprotect$auto(0x0, 0x8000000000000001, 0x8) listmount$auto(&(0x7f0000000080)={0x1f, @raw, 0x80000026, 0xfffffffffffffff6, 0x8}, 0x0, 0xf4240, 0x1) 7m42.198089156s ago: executing program 3 (id=2024): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r0, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x24, r1, 0x23, 0x70bd27, 0x25dfdbfc, {}, [@MACSEC_ATTR_SA_CONFIG={0x4}, @MACSEC_ATTR_RXSC_CONFIG={0x4}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 7m41.689146612s ago: executing program 3 (id=2025): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_MODULE_FW_FLASH_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}, 0x1, 0x1000000, 0xf0ff, 0x40}, 0x8094) 7m41.670589557s ago: executing program 4 (id=2026): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) select$auto(0x9, 0x0, 0x0, &(0x7f0000000040)={[0xc, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x9, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0x1]}, 0x0) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x8a603, 0x0) ioctl$auto(r0, 0x5646, r0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x4, 0x8000) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/swradio0\x00', 0x1600, 0x0) readv$auto(r1, &(0x7f0000000040)={&(0x7f0000000100)}, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) 7m41.070374486s ago: executing program 4 (id=2028): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0x20499d, 0x9) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) socket(0x29, 0x2, 0x0) r0 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa1\x00', 0x101041, 0x0) write$auto(r0, 0x0, 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) r1 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, 0x0, 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r1, &(0x7f00000002c0)=""/190, 0xfffffe39) write$auto(0x3, 0x0, 0x8) read$auto(0x3, 0x0, 0x7fffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xb02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) r2 = socket(0xa, 0x801, 0x84) ioctl$auto_BLKTRACESETUP32(0xffffffffffffffff, 0xc0401273, &(0x7f00000005c0)={"22aba3cc44582a3bd14a06bceed494af1890772d8165fcf612d33427185d1153", 0x464c, 0xf, 0x9, 0x470, 0xfffffffffffeffff, 0xffffffffffffffff}) prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_OFF(0x12a, 0x0, r3, 0x6, 0x9) r4 = getsockopt$auto(r2, 0x8, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r4) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r4, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000080)={0x444, r5, 0x208, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0x7c7}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0x80000001}, @NL802154_ATTR_WPAN_PHY_CAPS={0x40c, 0x18, 0x0, 0x1, [@nested={0x9a, 0x64, 0x0, 0x1, [@generic="7c70007ca9871795e0f4f5e8cb369b3cdfb3888e00356fb489bdf87d89d2c3f0dfd10040d25ede36d2a4f314fdd25b2f3c3912a48e49a9a42775016cf124710e3934b4f448738c284d82f341f548b8bd44d392e7b7f4ad3b0f1e998664ed4600fa48420d5b77d0694b57d6c92261c244b78efa3b7a66b87a911b145c54210544f53d1c193a54b94b9a94b7c62b97c41e0c50c8e2fc81"]}, @nested={0xfc, 0x81, 0x0, 0x1, [@nested={0x4, 0xe5}, @nested={0x4, 0x72}, @nested={0x4, 0x7a}, @typed={0xc, 0x156, 0x0, 0x0, @u64=0xcf0}, @generic="dec5fbcd408f8effec5ef3565ca65eec330af95558d03f5f4a24a8fa85ffdcc0f71fe8615de9b881f325e7ac52f29bdf163874da1b419190a1bb15c122bd93bbf9685d057398b7c81bb70e0e49877053f267aa96aad2c76693e42ad6c88dfca19eba7d3f0383cc5c10c8d3c95de4fd30e44e5547e0881113e7f5716340deca382b1e27d70619be4a12a7624609c6394485e69712cfe2a3fe434f2b25d70d383cf0e4a5fa8bab851e991b40a548aca661a612696359567ec146252ebbc5d670e65bae06b4cf1a47d5658e229411c1150b95131860127ed26b", @nested={0x4, 0x7c}, @typed={0x4, 0x9a}]}, @typed={0x2f, 0x41, 0x0, 0x0, @binary="ab7213a65696c288f7e640b61c2094d74942c763d488da3c246991052dd7a50b949bfe46f2948bab4f2e44"}, @nested={0x4, 0xf3}, @generic="becc6fb37badfad5586a273f9b2599c4aecf7e21374cf5f60332d39659f021978c290021680fa09ea257402a456921d0565b42963172def7c6a8c357f3c2473f1f8ea3de5df8128f907d88f820d3c021f754c313e6cc46d913dcd1fb938432c10eb95a03afb4a43f16ae0a5ca9b12b51eeb60129c8e497c32764e9496f22a7ce9837db72938a33b58e99bae41358642750f6bf7213edd9bc1c82d0d020e0af92f9015f600cc7157836526b3828a350ec05843443126e65f1ce7f5618567b21f784aba8d4aeff4e178d806f1607c80d0c57423731b2a65fa58478053b", @generic="81310364bbe8322b2432cc5b3cad052ced6daa40a8855fcc073ff6f805956328c7ef1c777bb874915731ea5efb8720764f91247ee6f03049c264cac76fc374035ec07b100eb0373954ea598f79f546232b91e182d161c85ac5479cdc3f07066141b8b7", @generic="b26504df73fbb6f2d2d880b4faaae470ed99cda5529f468bdccc287ffdc85bcbaee8fee82126596be677996ba5632dca1547886aec7697594a50e6cf2dba85f624f55f97f1c2ce46a007f623e017", @generic="712927f2d999af4c84824e28fdd8305eff801f628c970a646596290cd042040b0b64a45c297871649434920010dfc83108803273c703beb8223461e805fe536f45744649454587ed24bc130c115178880beec7198ac751511f779a9115e38e530d06bf02a9a7b6d0e94f5f6c0521123bb3e5a6ddbb58123093b2697fd539adb6c7bd0efc579351cd4c21c2a4cbd47db3b840a9a481e38f584b4da188dfe4968b735dbd7b5fbc51", @typed={0x4, 0x2c, 0x0, 0x0, @binary}, @typed={0x4, 0x8d}]}, @NL802154_ATTR_IFNAME={0x14, 0x4, 'geneve1\x00'}]}, 0x444}, 0x1, 0x0, 0x0, 0x804}, 0x20000080) 7m41.070270967s ago: executing program 3 (id=2029): r0 = prctl$auto_PR_SET_MM_ARG_END(0xffff, 0x9, 0xffffffffffffffff, 0x78, 0xd) getsockopt$auto(r0, 0x9, 0x4, &(0x7f0000000040)='\'+#-!}\x15&,(\x00', &(0x7f0000000080)=0xfffffff8) getrlimit$auto(0x2, &(0x7f00000002c0)={0x4, 0x3}) openat$auto_stats_fops_2(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffd, 0x0, &(0x7f0000006340)={&(0x7f0000000480)=ANY=[@ANYBLOB="920329bd7000fb630025000000004a13727ce1d9f09a9884"], 0x14}, 0x1, 0x0, 0x0, 0x4044040}, 0x4000) shmctl$auto_IPC_SET(0x8, 0x1, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000100)={0x3fd, 0x0, [{0x0, 0xffff5a9a, 0x7fffffff, 0x0, 0xf, 0x8, 0x6000}]}) write$auto_console_fops_tty_io(r1, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) mmap$auto(0x2, 0x2020009, 0x1, 0xeb1, 0xfffffffffffffffa, 0x1) memfd_create$auto(0x0, 0xe) socket(0x3, 0x801, 0x106) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto(0x3, 0x81484d11, 0x38) pipe2$auto(0x0, 0x4800) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) msgctl$auto_IPC_RMID(0xc, 0x0, 0x0) keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, 0x0, 0x7ffffffffffffffd, 0x99a5, 0x4000000000000) 7m39.90816972s ago: executing program 3 (id=2030): r0 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r1 = timerfd_create$auto_CLOCK_REALTIME(0x0, 0x35c) r2 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000100), r0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IOAM6_ATTR_SC_NONE={0x4}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x6}]}, 0x20}, 0x1, 0x0, 0xff9e, 0x4000}, 0xc0d0) shmctl$auto_IPC_SET(0x80, 0x1, &(0x7f00000002c0)={{0x4, 0xee00, 0xee00, 0x8, 0xfffffffb, 0x9, 0x1}, 0x7fff, 0x6, 0x9, 0x1, @raw=0x7, @inferred=0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)="ee8b0939bd31656f6821cfe01d11ed2ce18def57a7f783f5c925d37b79478d4893ca56182a79139b36bb56b038f3333b4e189f3c66c946a254890f5e1f118344508d56438a6916cfd4f317ee2408eea275f44fec2d831768f65224e4bad9f7c726a2ad4578eea07968fb790e291064bdcf4c412c2c51", &(0x7f0000000200)="59b770f643ded4e2e2b38021fe0c2252ee43969810de8f3552703c459acb9d9926e0df9d3746f5d2ec01ef9618c62a6104e6e43690f2b4ad2d83dfdb6e8e3bf91497aeb379b63dbe407f449e6328f24da43a4230e4ebc5b4c2d34eee3ee652cdcc690e127765f1b6c47acabcb437f075c55452b2f2b79692850f0771d517fe91f858df51240546cfb5848149b9a6cb3b803fd61933a7ef9552e50d9bcd85f3f6c8f40d1fb1dbd56cf6368d"}) ioctl$auto_VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000340)=r0) sendmsg$auto_OVS_VPORT_CMD_NEW(r1, &(0x7f00000028c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002880)={&(0x7f0000004f40)=ANY=[@ANYBLOB="e0240000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="080071000000000008001c00", @ANYRES32=r0, @ANYBLOB="66008e8008003000ffffffff9d0a2f166d9c4bff61a3bc8cbda2905de5e2d84bd16d879d1405a0e52de56e2cf640024b324064f8ef5014ef7e9329a2ed9c14fb8e8fd930199136fe567583f249cd13467ea0f1ce354d3c1b393d3e8951b5e5bb8a69b4d289a8a5d7a9e9dbfde02c960b83f684af2c8036f50e5444114ebc907f0135b48e430d3632bf694c63720fb9911a97e661db709a97e368bc4bf2a347c880f53d08a9f085f0452844db361b3210d764a9397ad88d811311140004005800", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="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"], 0x24e0}, 0x1, 0x0, 0x0, 0x8040}, 0x40000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) unshare$auto(0x40000080) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) readv$auto(r3, &(0x7f0000000380)={&(0x7f0000000400)="7e1f4e356e82302a5f74ff6757bd418dcc42af182217098014da1ca02dbcc296918dc67d80e5b2cee13b91cece97e6ea91e50710efdd484592360b1fe282de1dcced91106d3450d58749367c58fa52f263b02ce8c281835142b73b2cf855e53d884273ab0a47c2131d81f3e3507fedf5be7eaff6cad22b0594c96decdbd9ac88e4233a4d352d4e08509a92b239bef6fe9423902f2b5ba4da54f471e728821ad2c84ba77b72d68ee0e3caf4246394801517d636eb8084bb"}, 0xfffffffffffffff7) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x81, 0x8000000000001, 0xa}, 0xb, 0x0) landlock_restrict_self$auto(r7, 0x8) 7m37.256480759s ago: executing program 3 (id=2031): read$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffffff, 0x0, 0x0) 7m36.865793411s ago: executing program 3 (id=2032): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0x20499d, 0x9) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) socket(0x29, 0x2, 0x0) r0 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa1\x00', 0x101041, 0x0) write$auto(r0, 0x0, 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) r1 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, 0x0, 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r1, &(0x7f00000002c0)=""/190, 0xfffffe39) write$auto(0x3, 0x0, 0x8) read$auto(0x3, 0x0, 0x7fffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xb02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) r2 = socket(0xa, 0x801, 0x84) ioctl$auto_BLKTRACESETUP32(0xffffffffffffffff, 0xc0401273, &(0x7f00000005c0)={"22aba3cc44582a3bd14a06bceed494af1890772d8165fcf612d33427185d1153", 0x464c, 0xf, 0x9, 0x470, 0xfffffffffffeffff, 0xffffffffffffffff}) prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_OFF(0x12a, 0x0, r3, 0x6, 0x9) r4 = getsockopt$auto(r2, 0x8, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r4) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r4, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000080)={0x444, r5, 0x208, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0x7c7}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0x80000001}, @NL802154_ATTR_WPAN_PHY_CAPS={0x40c, 0x18, 0x0, 0x1, [@nested={0x9a, 0x64, 0x0, 0x1, [@generic="7c70007ca9871795e0f4f5e8cb369b3cdfb3888e00356fb489bdf87d89d2c3f0dfd10040d25ede36d2a4f314fdd25b2f3c3912a48e49a9a42775016cf124710e3934b4f448738c284d82f341f548b8bd44d392e7b7f4ad3b0f1e998664ed4600fa48420d5b77d0694b57d6c92261c244b78efa3b7a66b87a911b145c54210544f53d1c193a54b94b9a94b7c62b97c41e0c50c8e2fc81"]}, @nested={0xf9, 0x81, 0x0, 0x1, [@nested={0x4, 0xe5}, @nested={0x4, 0x72}, @typed={0xc, 0x156, 0x0, 0x0, @u64=0xcf0}, @generic="dec5fbcd408f8effec5ef3565ca65eec330af95558d03f5f4a24a8fa85ffdcc0f71fe8615de9b881f325e7ac52f29bdf163874da1b419190a1bb15c122bd93bbf9685d057398b7c81bb70e0e49877053f267aa96aad2c76693e42ad6c88dfca19eba7d3f0383cc5c10c8d3c95de4fd30e44e5547e0881113e7f5716340deca382b1e27d70619be4a12a7624609c6394485e69712cfe2a3fe434f2b25d70d383cf0e4a5fa8bab851e991b40a548aca661a612696359567ec146252ebbc5d670e65bae06b4cf1a47d5658e229411c1150b95131860127ed26bdb", @nested={0x4, 0x7c}, @typed={0x4, 0x9a}]}, @typed={0x2f, 0x41, 0x0, 0x0, @binary="ab7213a65696c288f7e640b61c2094d74942c763d488da3c246991052dd7a50b949bfe46f2948bab4f2e44"}, @nested={0x4, 0xf3}, @generic="becc6fb37badfad5586a273f9b2599c4aecf7e21374cf5f60332d39659f021978c290021680fa09ea257402a456921d0565b42963172def7c6a8c357f3c2473f1f8ea3de5df8128f907d88f820d3c021f754c313e6cc46d913dcd1fb938432c10eb95a03afb4a43f16ae0a5ca9b12b51eeb60129c8e497c32764e9496f22a7ce9837db72938a33b58e99bae41358642750f6bf7213edd9bc1c82d0d020e0af92f9015f600cc7157836526b3828a350ec05843443126e65f1ce7f5618567b21f784aba8d4aeff4e178d806f1607c80d0c57423731b2a65fa58478053b", @generic="81310364bbe8322b2432cc5b3cad052ced6daa40a8855fcc073ff6f805956328c7ef1c777bb874915731ea5efb8720764f91247ee6f03049c264cac76fc374035ec07b100eb0373954ea598f79f546232b91e182d161c85ac5479cdc3f07066141b8b7", @generic="b26504df73fbb6f2d2d880b4faaae470ed99cda5529f468bdccc287ffdc85bcbaee8fee82126596be677996ba5632dca1547886aec7697594a50e6cf2dba85f624f55f97f1c2ce46a007f623e017", @generic="712927f2d999af4c84824e28fdd8305eff801f628c970a646596290cd042040b0b64a45c297871649434920010dfc83108803273c703beb8223461e805fe536f45744649454587ed24bc130c115178880beec7198ac751511f779a9115e38e530d06bf02a9a7b6d0e94f5f6c0521123bb3e5a6ddbb58123093b2697fd539adb6c7bd0efc579351cd4c21c2a4cbd47db3b840a9a481e38f584b4da188dfe4968b735dbd7b5fbc51", @typed={0x4, 0x2c, 0x0, 0x0, @binary}, @typed={0x4, 0x8d}]}, @NL802154_ATTR_IFNAME={0x14, 0x4, 'geneve1\x00'}]}, 0x444}, 0x1, 0x0, 0x0, 0x804}, 0x20000080) 7m34.950926253s ago: executing program 2 (id=2034): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r0, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x28, r1, 0x23, 0x70bd27, 0x25dfdbfc, {}, [@MACSEC_ATTR_SA_CONFIG={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x1}]}, @MACSEC_ATTR_RXSC_CONFIG={0x4}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 7m34.140228437s ago: executing program 2 (id=2035): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) mmap$auto(0x0, 0x20009, 0x10004000000000df, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x401, 0xeb1, r0, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)) syz_clone(0xba238800, 0x0, 0x34, 0x0, 0x0, 0x0) read$auto(0xffffffffffffffff, 0x0, 0xea) read$auto(0xffffffffffffffff, 0x0, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x20000003) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x804, 0x0) sendmmsg$auto(r1, 0x0, 0x1ff, 0x1ffffff8) semget$auto(0x0, 0x13c, 0x1ff) semtimedop$auto(0x0, &(0x7f00000000c0)={0xa, 0x81, 0x70}, 0x1f4, 0x0) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x8000, 0x36ec}, 0x1, 0x0) semctl$auto(0x0, 0x9, 0x0, 0x2) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x1f40) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000100), 0xffffffffffffffff) 7m30.85451824s ago: executing program 2 (id=2036): mmap$auto(0x0, 0x400008, 0x100000000036, 0x1009b72, 0x2, 0x8000) r0 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$auto_mISDN_fops_timerdev(r0, &(0x7f0000001a00)=""/4097, 0x1001) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r1, @ANYBLOB="000126bd7000e50d00000400000008000a00010000000c001a80086465762f6d4953444e74696d6572003000160067cc372940a9adeb53664e55acdaf14436f4e74557660e359c550495832878a6a53a11acd5c86afdf525d4ea81001600ef3d47d75ee9cd5c12254abc6fac294d1309d1c5310e215407de1e83e80c578931a78bdc39166d031280f6a3651fff75c3e3fd8edf19801b2ae31b65af38c11834d8122cc0a1128edf662137642e5750139bf22f97985b43f08cb8ec04f7619c121ef1f239155eec9d5a6902fc5a90b240c1b439f1b36e36ecd33a0efb0000000c0008000180000000000000"], 0xfc}, 0x1, 0x0, 0x0, 0xc4}, 0x800) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x300, 0x10b) mmap$auto(0x9, 0x8000000000000001, 0xa5, 0x13, r2, 0x7fffffff) ioctl$auto_IMADDTIMER(r0, 0x80044940, 0x0) 7m29.549234375s ago: executing program 2 (id=2037): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000002280), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/workqueue/scsi_tmf_0/power/autosuspend_delay_ms\x00', 0x8000, 0x0) openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/bluetooth/hci3/force_wakeup\x00', 0x317a82, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/ib_srp/parameters/reconnect_delay\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000000c0)='-7', 0x2) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r3 = socket(0x10, 0x4, 0xffffffc0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r3, 0x0, 0xc000) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) write$auto(0xffffffffffffffff, &(0x7f00000001c0)='c', 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f00000002c0)="91e5a3186f33c497", 0x8) socket(0x10, 0x2, 0xffffffff) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/bond_slave_1/disable_policy\x00', 0x202, 0x0) mq_open$auto(&(0x7f00000000c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u50xffffffffffffffff}) prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_OFF(0x12a, 0x0, r3, 0x6, 0x9) r4 = getsockopt$auto(r2, 0x8, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r4) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r4, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000080)={0x444, r5, 0x208, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0x7c7}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0x80000001}, @NL802154_ATTR_WPAN_PHY_CAPS={0x40c, 0x18, 0x0, 0x1, [@nested={0x9a, 0x64, 0x0, 0x1, [@generic="7c70007ca9871795e0f4f5e8cb369b3cdfb3888e00356fb489bdf87d89d2c3f0dfd10040d25ede36d2a4f314fdd25b2f3c3912a48e49a9a42775016cf124710e3934b4f448738c284d82f341f548b8bd44d392e7b7f4ad3b0f1e998664ed4600fa48420d5b77d0694b57d6c92261c244b78efa3b7a66b87a911b145c54210544f53d1c193a54b94b9a94b7c62b97c41e0c50c8e2fc81"]}, @nested={0xfc, 0x81, 0x0, 0x1, [@nested={0x4, 0xe5}, @nested={0x4, 0x72}, @nested={0x4, 0x7a}, @typed={0xc, 0x156, 0x0, 0x0, @u64=0xcf0}, @generic="dec5fbcd408f8effec5ef3565ca65eec330af95558d03f5f4a24a8fa85ffdcc0f71fe8615de9b881f325e7ac52f29bdf163874da1b419190a1bb15c122bd93bbf9685d057398b7c81bb70e0e49877053f267aa96aad2c76693e42ad6c88dfca19eba7d3f0383cc5c10c8d3c95de4fd30e44e5547e0881113e7f5716340deca382b1e27d70619be4a12a7624609c6394485e69712cfe2a3fe434f2b25d70d383cf0e4a5fa8bab851e991b40a548aca661a612696359567ec146252ebbc5d670e65bae06b4cf1a47d5658e229411c1150b95131860127ed26b", @nested={0x4, 0x7c}, @typed={0x4, 0x9a}]}, @typed={0x2f, 0x41, 0x0, 0x0, @binary="ab7213a65696c288f7e640b61c2094d74942c763d488da3c246991052dd7a50b949bfe46f2948bab4f2e44"}, @nested={0x4, 0xf3}, @generic="becc6fb37badfad5586a273f9b2599c4aecf7e21374cf5f60332d39659f021978c290021680fa09ea257402a456921d0565b42963172def7c6a8c357f3c2473f1f8ea3de5df8128f907d88f820d3c021f754c313e6cc46d913dcd1fb938432c10eb95a03afb4a43f16ae0a5ca9b12b51eeb60129c8e497c32764e9496f22a7ce9837db72938a33b58e99bae41358642750f6bf7213edd9bc1c82d0d020e0af92f9015f600cc7157836526b3828a350ec05843443126e65f1ce7f5618567b21f784aba8d4aeff4e178d806f1607c80d0c57423731b2a65fa58478053b", @generic="81310364bbe8322b2432cc5b3cad052ced6daa40a8855fcc073ff6f805956328c7ef1c777bb874915731ea5efb8720764f91247ee6f03049c264cac76fc374035ec07b100eb0373954ea598f79f546232b91e182d161c85ac5479cdc3f07066141b8b7", @generic="b26504df73fbb6f2d2d880b4faaae470ed99cda5529f468bdccc287ffdc85bcbaee8fee82126596be677996ba5632dca1547886aec7697594a50e6cf2dba85f624f55f97f1c2ce46a007f623e017", @generic="712927f2d999af4c84824e28fdd8305eff801f628c970a646596290cd042040b0b64a45c297871649434920010dfc83108803273c703beb8223461e805fe536f45744649454587ed24bc130c115178880beec7198ac751511f779a9115e38e530d06bf02a9a7b6d0e94f5f6c0521123bb3e5a6ddbb58123093b2697fd539adb6c7bd0efc579351cd4c21c2a4cbd47db3b840a9a481e38f584b4da188dfe4968b735dbd7b5fbc51", @typed={0x4, 0x2c, 0x0, 0x0, @binary}, @typed={0x4, 0x8d}]}, @NL802154_ATTR_IFNAME={0x14, 0x4, 'geneve1\x00'}]}, 0x444}, 0x1, 0x0, 0x0, 0x804}, 0x20000080) 7m24.374413429s ago: executing program 2 (id=2041): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xb02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r1, 0x400, 0x1) read$auto_proc_mem_operations_base(r1, &(0x7f0000000080)=""/74, 0x4a) bind$auto(0x3, 0x0, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000100)="5de13aee92106b64cb8ff82f0fb9ed0e3060dba6b9394a8ea3ade94c38e1a4dbcd55172992baeadacee4af990ec7efc6c2703d8306da615ac7b35b90c0e1aa9ea421de412d83f3602fb3c5b56b7daef63fdf9ac3", 0x7, 0x0, 0x8000000000000000, 0x0, 0x1f, 0x200}, 0x9}, 0x5, 0x5) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fadvise64$auto_POSIX_FADV_NORMAL(0xffffffffffffffff, 0x7, 0xd, 0x0) r2 = fcntl$auto(0x3, 0x4, 0xa553) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) read$auto(0x3, 0x0, 0x8080) shutdown$auto(0x200000003, 0x2) dup2$auto(r2, 0xffffffffffffffff) socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2b, 0x2, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) madvise$auto(0x0, 0x1000, 0x4) setsockopt$auto(0x3, 0x0, 0x17, 0x0, 0x28) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) syz_genetlink_get_family_id$auto_ioam6(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RSS_GET(0xffffffffffffffff, 0x0, 0x40) close_range$auto(0x2, 0xffffffffffffffff, 0x1f) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty58\x00', 0x800, 0x0) 7m21.342945455s ago: executing program 35 (id=2032): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0x20499d, 0x9) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) socket(0x29, 0x2, 0x0) r0 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa1\x00', 0x101041, 0x0) write$auto(r0, 0x0, 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) r1 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, 0x0, 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r1, &(0x7f00000002c0)=""/190, 0xfffffe39) write$auto(0x3, 0x0, 0x8) read$auto(0x3, 0x0, 0x7fffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xb02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) r2 = socket(0xa, 0x801, 0x84) ioctl$auto_BLKTRACESETUP32(0xffffffffffffffff, 0xc0401273, &(0x7f00000005c0)={"22aba3cc44582a3bd14a06bceed494af1890772d8165fcf612d33427185d1153", 0x464c, 0xf, 0x9, 0x470, 0xfffffffffffeffff, 0xffffffffffffffff}) prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_OFF(0x12a, 0x0, r3, 0x6, 0x9) r4 = getsockopt$auto(r2, 0x8, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r4) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r4, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000080)={0x444, r5, 0x208, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0x7c7}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0x80000001}, @NL802154_ATTR_WPAN_PHY_CAPS={0x40c, 0x18, 0x0, 0x1, [@nested={0x9a, 0x64, 0x0, 0x1, [@generic="7c70007ca9871795e0f4f5e8cb369b3cdfb3888e00356fb489bdf87d89d2c3f0dfd10040d25ede36d2a4f314fdd25b2f3c3912a48e49a9a42775016cf124710e3934b4f448738c284d82f341f548b8bd44d392e7b7f4ad3b0f1e998664ed4600fa48420d5b77d0694b57d6c92261c244b78efa3b7a66b87a911b145c54210544f53d1c193a54b94b9a94b7c62b97c41e0c50c8e2fc81"]}, @nested={0xf9, 0x81, 0x0, 0x1, [@nested={0x4, 0xe5}, @nested={0x4, 0x72}, @typed={0xc, 0x156, 0x0, 0x0, @u64=0xcf0}, @generic="dec5fbcd408f8effec5ef3565ca65eec330af95558d03f5f4a24a8fa85ffdcc0f71fe8615de9b881f325e7ac52f29bdf163874da1b419190a1bb15c122bd93bbf9685d057398b7c81bb70e0e49877053f267aa96aad2c76693e42ad6c88dfca19eba7d3f0383cc5c10c8d3c95de4fd30e44e5547e0881113e7f5716340deca382b1e27d70619be4a12a7624609c6394485e69712cfe2a3fe434f2b25d70d383cf0e4a5fa8bab851e991b40a548aca661a612696359567ec146252ebbc5d670e65bae06b4cf1a47d5658e229411c1150b95131860127ed26bdb", @nested={0x4, 0x7c}, @typed={0x4, 0x9a}]}, @typed={0x2f, 0x41, 0x0, 0x0, @binary="ab7213a65696c288f7e640b61c2094d74942c763d488da3c246991052dd7a50b949bfe46f2948bab4f2e44"}, @nested={0x4, 0xf3}, @generic="becc6fb37badfad5586a273f9b2599c4aecf7e21374cf5f60332d39659f021978c290021680fa09ea257402a456921d0565b42963172def7c6a8c357f3c2473f1f8ea3de5df8128f907d88f820d3c021f754c313e6cc46d913dcd1fb938432c10eb95a03afb4a43f16ae0a5ca9b12b51eeb60129c8e497c32764e9496f22a7ce9837db72938a33b58e99bae41358642750f6bf7213edd9bc1c82d0d020e0af92f9015f600cc7157836526b3828a350ec05843443126e65f1ce7f5618567b21f784aba8d4aeff4e178d806f1607c80d0c57423731b2a65fa58478053b", @generic="81310364bbe8322b2432cc5b3cad052ced6daa40a8855fcc073ff6f805956328c7ef1c777bb874915731ea5efb8720764f91247ee6f03049c264cac76fc374035ec07b100eb0373954ea598f79f546232b91e182d161c85ac5479cdc3f07066141b8b7", @generic="b26504df73fbb6f2d2d880b4faaae470ed99cda5529f468bdccc287ffdc85bcbaee8fee82126596be677996ba5632dca1547886aec7697594a50e6cf2dba85f624f55f97f1c2ce46a007f623e017", @generic="712927f2d999af4c84824e28fdd8305eff801f628c970a646596290cd042040b0b64a45c297871649434920010dfc83108803273c703beb8223461e805fe536f45744649454587ed24bc130c115178880beec7198ac751511f779a9115e38e530d06bf02a9a7b6d0e94f5f6c0521123bb3e5a6ddbb58123093b2697fd539adb6c7bd0efc579351cd4c21c2a4cbd47db3b840a9a481e38f584b4da188dfe4968b735dbd7b5fbc51", @typed={0x4, 0x2c, 0x0, 0x0, @binary}, @typed={0x4, 0x8d}]}, @NL802154_ATTR_IFNAME={0x14, 0x4, 'geneve1\x00'}]}, 0x444}, 0x1, 0x0, 0x0, 0x804}, 0x20000080) 7m9.113062886s ago: executing program 36 (id=2041): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xb02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r1, 0x400, 0x1) read$auto_proc_mem_operations_base(r1, &(0x7f0000000080)=""/74, 0x4a) bind$auto(0x3, 0x0, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000100)="5de13aee92106b64cb8ff82f0fb9ed0e3060dba6b9394a8ea3ade94c38e1a4dbcd55172992baeadacee4af990ec7efc6c2703d8306da615ac7b35b90c0e1aa9ea421de412d83f3602fb3c5b56b7daef63fdf9ac3", 0x7, 0x0, 0x8000000000000000, 0x0, 0x1f, 0x200}, 0x9}, 0x5, 0x5) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fadvise64$auto_POSIX_FADV_NORMAL(0xffffffffffffffff, 0x7, 0xd, 0x0) r2 = fcntl$auto(0x3, 0x4, 0xa553) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) read$auto(0x3, 0x0, 0x8080) shutdown$auto(0x200000003, 0x2) dup2$auto(r2, 0xffffffffffffffff) socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2b, 0x2, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) madvise$auto(0x0, 0x1000, 0x4) setsockopt$auto(0x3, 0x0, 0x17, 0x0, 0x28) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) syz_genetlink_get_family_id$auto_ioam6(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RSS_GET(0xffffffffffffffff, 0x0, 0x40) close_range$auto(0x2, 0xffffffffffffffff, 0x1f) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty58\x00', 0x800, 0x0) 6.476378254s ago: executing program 7 (id=3366): write$auto(0x3, 0x0, 0xffd8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000060000001b000003180001801400020064756d6d79300000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000800) 6.226085987s ago: executing program 7 (id=3368): r0 = prctl$auto_PR_SET_MM_ARG_END(0xffff, 0x9, 0xffffffffffffffff, 0x78, 0xd) r1 = getsockopt$auto(r0, 0x9, 0x6, &(0x7f0000000040)='\'+#-!}\x15&,(\x00', &(0x7f0000000080)=0x2) getrlimit$auto(0x2, &(0x7f00000002c0)={0xefffffffffffffff, 0x3}) openat$auto_stats_fops_2(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffd, 0x0, &(0x7f0000006340)={&(0x7f0000000480)=ANY=[@ANYBLOB="920329bd7000fb630025000000004a13727ce1d9"], 0x14}, 0x1, 0x0, 0x0, 0x4044040}, 0x4000) shmctl$auto_IPC_SET(0x8, 0x1, 0x0) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) r4 = clone3$auto(&(0x7f0000000100)={0x7fffffff, 0x4, 0x6, 0x80000001, 0x10000, 0xe9, 0x9b62, 0x3, 0x0, 0xfffffffffffffff7, 0x8}, 0x7f) bpf$auto_BPF_MAP_DELETE_BATCH(0x1b, &(0x7f0000000180)=@task_fd_query={r4, r0, 0x6, 0xe978, 0x4, 0xffff7fff, r1, 0x6, 0x1ff}, 0xffffffff) 4.658563174s ago: executing program 8 (id=3375): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r0, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x38, r1, 0x23, 0x70bd27, 0x25dfdbfc, {}, [@MACSEC_ATTR_SA_CONFIG={0x18, 0x3, 0x0, 0x1, [@nested={0x5, 0x1, 0x0, 0x1, [@generic="03"]}, @typed={0xc, 0x8, 0x0, 0x0, @u64=0xfffffffffffffffe}]}, @MACSEC_ATTR_RXSC_CONFIG={0x4}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x4c00, 0x0, 0x4008000}, 0x0) 4.649084628s ago: executing program 6 (id=3376): r0 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/smaps\x00', 0x410101, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) (async) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8802, 0x0) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x40080, 0x0) read$auto(r2, 0x0, 0x20) writev$auto(r1, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) (async, rerun: 32) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2048000}, 0x40014) (async, rerun: 32) kexec_load$auto(0xffffffff, 0x2, &(0x7f0000000080)={@buf=0x0, 0x0, 0x8000, 0x403000}, 0x4) (async) socket(0xa, 0x1, 0x84) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x12000, 0x0) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) (async) getpeername$auto(0x3, 0x0, 0x0) read$auto_proc_pid_smaps_operations_internal(r0, &(0x7f00000002c0)=""/190, 0xfffffe39) 4.290936125s ago: executing program 6 (id=3378): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_psample(&(0x7f0000007a40), 0xffffffffffffffff) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r0, &(0x7f0000007b00)={0x0, 0x0, &(0x7f0000007ac0)={&(0x7f0000007a80)={0x14, r1, 0x311, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0xfffffffffffffff0, 0x40000}, 0x20000000) 4.226608105s ago: executing program 8 (id=3379): madvise$auto(0x0, 0xffffffffffff0005, 0x17) socketcall$auto_SYS_SOCKETPAIR(0x8, 0x0) openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f00000000c0), 0x642, 0x0) (async) truncate$auto(&(0x7f0000000000)='./file0\x00', 0x6e41) (async) write$auto(0x3, 0x0, 0xffda) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$auto(r0, 0x110, 0x5, 0x0, 0x4) (async) futex$auto(0x0, 0x9, 0x3e, 0x0, &(0x7f00000000c0)=0x4, 0x0) (async) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20443, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000080)) 4.084087892s ago: executing program 6 (id=3381): r0 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cmdline\x00', 0x40001, 0x0) preadv$auto(r0, &(0x7f0000009180)={&(0x7f0000008180), 0x80000000}, 0x26, 0x80, 0x2) 3.873841573s ago: executing program 6 (id=3382): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x1, 0xfffffffffffefffd, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async, rerun: 64) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) (async, rerun: 64) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sigaltstack$auto(0x0, 0x0) (async) madvise$auto(0x0, 0x400053, 0x9) 3.757624682s ago: executing program 8 (id=3383): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x121200, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x10, 0x2, 0x0) socket(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x8000000000400000, 0x2, 0xfffffffffffffffe]}, 0x0) 3.338251268s ago: executing program 8 (id=3386): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_MODULE_FW_FLASH_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}, 0x1, 0x1000000, 0xffff000000000000, 0x40}, 0x8094) 3.026734142s ago: executing program 6 (id=3387): openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x109802, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknod$auto(&(0x7f0000001040)=':,\x00', 0xca, 0xfffffffa) r0 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r0, &(0x7f0000000040)=""/4096, 0xfffffe82) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = mq_open$auto(&(0x7f00000000c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xe3\xfc*[8\x89h\xc5\xba\xff\xc8u50x0}) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r2) sendmsg$auto_NL80211_CMD_SET_TID_TO_LINK_MAPPING(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8049c400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_HE_OBSS_PD={0x44, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x3}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0x37, 0x4, "00ec68adc9630f04b33ce31474f47ad68dde02d29a41967effffbbd28b07b189c6a480c7dc6c55aca088c058d8135ce7d31f40"}]}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x404c840) sendmsg$auto_BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000280)={0x1c, r1, 0x3abba0b2ae0bab93, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc811}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = prctl$auto_PR_SET_MM_END_CODE(0x6, 0x2, 0xffffffffffffffff, 0x7, 0x7) r7 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000140), r5) sendmsg$auto_NFC_CMD_GET_SE(r6, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r7, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x3}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x5) sendmsg$auto_NFC_CMD_DEACTIVATE_TARGET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r7, 0x6, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x6}, @NFC_ATTR_VENDOR_DATA={0xd, 0x1f, "1915d5fe6e9f089eec"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x1d0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/btrfs/features/temp_fsid\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r8, &(0x7f0000000080)=""/58, 0x3a) r9 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) write$auto(r9, &(0x7f00000001c0)='\x00', 0xc) setpriority$auto_PRIO_PGRP(0x1, 0x0, 0x401) 2.429312955s ago: executing program 5 (id=3389): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000003a80)={0x14, r1, 0x401, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0xe000000, 0x2400c001}, 0x8000) 2.118357071s ago: executing program 7 (id=3390): write$auto(0x3, 0x0, 0xffd8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000060000001b00ff9e180001801400020064756d6d79300000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000800) 2.077574234s ago: executing program 5 (id=3391): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', 0x9) 1.8562749s ago: executing program 7 (id=3392): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x4000, 0x8000b8, 0x13fd4, 0x3, 0xfffff002) mprotect$auto(0xfffff000, 0xa588, 0x6) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x654080, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f00000002c0)={0x9, &(0x7f0000000000)={0x50, 0xf2, 0xb0, @raw=0x80000000}}) write$auto(0x3, 0x0, 0xfdef) 1.811088871s ago: executing program 5 (id=3393): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r2, 0x0, 0x40) writev$auto(r1, &(0x7f0000000240)={0x0, 0x7}, 0x3) shmctl$auto_SHM_UNLOCK(0x2, 0xc, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000040000) 1.564132878s ago: executing program 7 (id=3394): openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="00ffffff"]}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8880) 860.927705ms ago: executing program 5 (id=3395): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)={0x18, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}]}, 0x18}, 0x1, 0x80000, 0x0, 0x220000c1}, 0xc0) 729.963251ms ago: executing program 8 (id=3396): mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) socket(0x1d, 0x2, 0x6) r0 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r1, 0xfd}, 0x6a) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x6}, 0x1, 0x0, 0x3, 0xa}, 0x8}, 0x5, 0xffb) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000040)='/dev/binderfs/binder0\x00', 0x0, 0x0) r3 = epoll_create$auto(0x200004) epoll_ctl$auto(r3, 0x1, r2, 0x0) ioctl$auto_BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$auto_SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f00000000c0)="da5d04243e96354578bde66a6fa474eefd11a6b7d6ab44107f3693f34c3fb219a166fc95") 691.279358ms ago: executing program 7 (id=3397): mmap$auto(0x0, 0x2020009, 0x3, 0x13, 0xffffffffffffffff, 0x8000) fcntl$auto_F_SETSIG(0xffffffffffffffff, 0xa, 0x0) unshare$auto(0x40000080) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x3) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x3865, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x4000008000) io_uring_setup$auto(0x7, 0x0) socket(0x64220b40f1085723, 0x80000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vivid.0/video4linux/vbi1/dev\x00', 0x189c01, 0x0) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) socketpair$auto(0x3, 0xd, 0x8dc2, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0xe, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0182, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0xbffffeff, 0x2, 0x6, 0x8, 0x8, 0xffffffffffffffff, [0x80], {0x6, 0x806, 0xf, 0x6, 0x2, 0x85, 0x101, 0x17f, 0x2}, {0xff, 0x401, 0x4f, 0x32, 0x3, 0x1639, 0x4, 0x7, 0x100000004}}) r3 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x2}, @NFSD_A_SERVER_GRACETIME={0x8}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xda05}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffff7}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xfffffffe}, @NFSD_A_SERVER_SCOPE={0x9, 0x4, '.\\$!\x00'}]}, 0x48}}, 0x8800) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000180), 0x3, 0xa505}, 0x800}, 0x7, 0x4008) ioctl$auto_KVM_CREATE_VM(r0, 0xc048aeca, 0x0) 495.286267ms ago: executing program 6 (id=3398): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0xc000000) r0 = io_uring_setup$auto(0xa, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x141800, 0x0) socket(0xf, 0x80805, 0x0) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE2(r1, 0x4008af03, &(0x7f0000000380)={0x6, 0x0, [{0x4, 0xf61, 0x4}, {0x0, 0xa44, 0x5}]}) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000440), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r4, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000015c0)={0x2c, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x1}, @NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r5}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x304}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000840) write$auto_snd_seq_f_ops_seq_clientmgr(r2, &(0x7f0000000000)="632d1bfe595046ab5c40bd7563307acb6d16baef6176e669a216aae183cccafdd80500ffffffff0600000000fe00000000fffe0000000000", 0x38) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) clone$auto(0x100000020003b49, 0x80000000002, 0x0, 0x0, 0x4) mbind$auto(0xf000, 0x8000000000000002, 0x100000000, 0x0, 0x6, 0x2) cachestat$auto(r1, &(0x7f0000000040)={0x6, 0xffffffffffffffc3}, &(0x7f0000000080)={0x4, 0x2b, 0xb99d, 0x7632, 0xfffffffffffffffc}, 0x2) open(0x0, 0x64842, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0xa, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x6, 0x6, 0x5, 0x9, 0x20003, 0x6, 0x4, 0xb4, 0x9, 0x3, 0x10000, 0x80, 0x7, 0x0, 0x8000007, 0x2000, 0x200, 0x0, 0x40084, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0xb8a0, 0x0, 0x0, 0x0, 0x1000]}, 0x1fe, 0x200c) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB='\b\x00\n'], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) setsockopt$auto_SO_DONTROUTE(r0, 0x3, 0x5, &(0x7f00000000c0)='\x00', 0x1) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x6000000, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000002c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/ptyq3\x00', 0x40001, 0x0) 309.88922ms ago: executing program 5 (id=3399): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r0, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x38, r1, 0x23, 0x70bd27, 0x25dfdbfc, {}, [@MACSEC_ATTR_SA_CONFIG={0x18, 0x3, 0x0, 0x1, [@nested={0x5, 0x1, 0x0, 0x1, [@generic="03"]}, @typed={0xc, 0x8, 0x0, 0x0, @u64=0xfffffffffffffffe}]}, @MACSEC_ATTR_RXSC_CONFIG={0x4}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x6000, 0x0, 0x4008000}, 0x0) 0s ago: executing program 5 (id=3400): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) ioctl$auto_TIOCVHANGUP(r1, 0x5437, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.1/usb2/product\x00', 0x181040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000640)=""/224, 0xe0) ioctl$auto_TIOCVHANGUP(r1, 0x5437, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x65, 0x2) socket(0x1d, 0x2, 0x2) connect$auto(0x3, 0x0, 0x55) socket(0x10, 0x3, 0x6) socketpair$auto(0x1e, 0xb, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x38}, 0x6, 0x0, 0x4, 0x9}, 0x9}, 0x6, 0x1f00) mmap$auto(0x0, 0x71, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000080), 0x7ec01, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/009/001\x00', 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.5/usb6/6-0:1.0/usb6-port1/early_stop\x00', 0x80302, 0x0) unshare$auto(0x40000080) ftruncate$auto(r3, 0x6) kernel console output (not intermixed with test programs): hould_fail_ex.cold+0x5/0xa [ 1092.093232][T17973] should_failslab+0xc2/0x120 [ 1092.093259][T17973] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1092.093293][T17973] ? bpf_prog_alloc_no_stats+0x15f/0x640 [ 1092.093337][T17973] bpf_prog_alloc_no_stats+0x15f/0x640 [ 1092.093378][T17973] bpf_prog_alloc+0x3b/0x200 [ 1092.093420][T17973] bpf_prog_create_from_user+0xb4/0x2f0 [ 1092.093462][T17973] ? __pfx_seccomp_check_filter+0x10/0x10 [ 1092.093497][T17973] do_seccomp+0x7f7/0x2740 [ 1092.093536][T17973] ? __pfx_do_seccomp+0x10/0x10 [ 1092.093568][T17973] ? __x64_sys_openat+0x12d/0x210 [ 1092.093603][T17973] ? xfd_validate_state+0x129/0x190 [ 1092.093649][T17973] do_syscall_64+0x106/0xf80 [ 1092.093683][T17973] ? clear_bhb_loop+0x40/0x90 [ 1092.093713][T17973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.093739][T17973] RIP: 0033:0x7fcff279c799 [ 1092.093760][T17973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1092.093785][T17973] RSP: 002b:00007fcff09d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 1092.093809][T17973] RAX: ffffffffffffffda RBX: 00007fcff2a16090 RCX: 00007fcff279c799 [ 1092.093825][T17973] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000000000000001 [ 1092.093841][T17973] RBP: 00007fcff2832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1092.093856][T17973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1092.093872][T17973] R13: 00007fcff2a16128 R14: 00007fcff2a16090 R15: 00007fff1b5010b8 [ 1092.093904][T17973] [ 1092.548793][T17970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1092.585206][T17970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1092.906557][T17981] MTRR 0 not used [ 1093.396545][T17991] dlm: non-version read from control device 120 [ 1093.830796][T17993] MTRR 0 not used [ 1096.420830][T18040] MTRR 0 not used [ 1096.967314][T18049] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2666'. [ 1098.601271][T18077] block2mtd: Using custom MTD label '' for dev [ 1098.633838][T18077] block2mtd: error: cannot open device [ 1099.129276][T18079] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2675'. [ 1100.341027][T18092] MTRR 0 not used [ 1101.092772][T18107] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2679'. [ 1102.300825][T18121] block2mtd: Using custom MTD label '' for dev [ 1102.300863][T18121] block2mtd: error: cannot open device [ 1102.573814][T18124] FAULT_INJECTION: forcing a failure. [ 1102.573814][T18124] name failslab, interval 1, probability 0, space 0, times 0 [ 1102.573863][T18124] CPU: 0 UID: 0 PID: 18124 Comm: syz.8.2685 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1102.573903][T18124] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1102.573913][T18124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1102.573930][T18124] Call Trace: [ 1102.573938][T18124] [ 1102.573948][T18124] dump_stack_lvl+0x100/0x190 [ 1102.573992][T18124] should_fail_ex.cold+0x5/0xa [ 1102.574022][T18124] ? lsm_blob_alloc+0x68/0x90 [ 1102.574056][T18124] should_failslab+0xc2/0x120 [ 1102.574083][T18124] __kmalloc_noprof+0xe0/0x850 [ 1102.574121][T18124] ? trace_kmem_cache_alloc+0xf3/0x120 [ 1102.574153][T18124] lsm_blob_alloc+0x68/0x90 [ 1102.574188][T18124] security_sk_alloc+0x2d/0x290 [ 1102.574230][T18124] sk_prot_alloc+0x1d1/0x2a0 [ 1102.574257][T18124] sk_alloc+0x36/0xe80 [ 1102.574289][T18124] inet6_create+0x385/0x12b0 [ 1102.574327][T18124] ? inet6_create+0x7f/0x12b0 [ 1102.574366][T18124] __sock_create+0x339/0x860 [ 1102.574398][T18124] smc_create+0x163/0x290 [ 1102.574429][T18124] __sock_create+0x339/0x860 [ 1102.574459][T18124] __sys_socket+0x14d/0x260 [ 1102.574487][T18124] ? __pfx___sys_socket+0x10/0x10 [ 1102.574522][T18124] __x64_sys_socket+0x72/0xb0 [ 1102.574547][T18124] ? lockdep_hardirqs_on+0x78/0x100 [ 1102.574584][T18124] do_syscall_64+0x106/0xf80 [ 1102.574618][T18124] ? clear_bhb_loop+0x40/0x90 [ 1102.574648][T18124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.574674][T18124] RIP: 0033:0x7fa7c219c799 [ 1102.574696][T18124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1102.574743][T18124] RSP: 002b:00007fa7c2fbc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1102.574769][T18124] RAX: ffffffffffffffda RBX: 00007fa7c2415fa0 RCX: 00007fa7c219c799 [ 1102.574788][T18124] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 000000000000002b [ 1102.574804][T18124] RBP: 00007fa7c2232c99 R08: 0000000000000000 R09: 0000000000000000 [ 1102.574819][T18124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1102.574835][T18124] R13: 00007fa7c2416038 R14: 00007fa7c2415fa0 R15: 00007ffca473cb58 [ 1102.574867][T18124] [ 1103.359275][T18138] netlink: 29 bytes leftover after parsing attributes in process `syz.8.2690'. [ 1103.496566][T16264] Bluetooth: hci7: unexpected event 0x02 length: 726 > 260 [ 1103.534304][T10484] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1104.275594][T18145] FAULT_INJECTION: forcing a failure. [ 1104.275594][T18145] name failslab, interval 1, probability 0, space 0, times 0 [ 1104.429729][T18145] CPU: 0 UID: 0 PID: 18145 Comm: syz.7.2691 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1104.429772][T18145] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1104.429782][T18145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1104.429797][T18145] Call Trace: [ 1104.429806][T18145] [ 1104.429815][T18145] dump_stack_lvl+0x100/0x190 [ 1104.429859][T18145] should_fail_ex.cold+0x5/0xa [ 1104.429888][T18145] should_failslab+0xc2/0x120 [ 1104.429914][T18145] __kvmalloc_node_noprof+0xfa/0xa00 [ 1104.429953][T18145] ? traverse.part.0.constprop.0+0x397/0x650 [ 1104.430000][T18145] traverse.part.0.constprop.0+0x397/0x650 [ 1104.430046][T18145] seq_read_iter+0x93f/0x1270 [ 1104.430102][T18145] proc_reg_read_iter+0x220/0x310 [ 1104.430139][T18145] ? __pfx_proc_reg_read_iter+0x10/0x10 [ 1104.430178][T18145] vfs_read+0x825/0xb30 [ 1104.430220][T18145] ? __pfx_vfs_read+0x10/0x10 [ 1104.430255][T18145] ? find_held_lock+0x2b/0x80 [ 1104.430295][T18145] __x64_sys_pread64+0x1eb/0x250 [ 1104.430319][T18145] ? __pfx___x64_sys_pread64+0x10/0x10 [ 1104.430351][T18145] do_syscall_64+0x106/0xf80 [ 1104.430383][T18145] ? clear_bhb_loop+0x40/0x90 [ 1104.430412][T18145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1104.430436][T18145] RIP: 0033:0x7f7432b9c799 [ 1104.430456][T18145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1104.430480][T18145] RSP: 002b:00007f7433b34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1104.430503][T18145] RAX: ffffffffffffffda RBX: 00007f7432e15fa0 RCX: 00007f7432b9c799 [ 1104.430519][T18145] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 1104.430534][T18145] RBP: 00007f7433b34090 R08: 0000000000000000 R09: 0000000000000000 [ 1104.430548][T18145] R10: 000000000000fffd R11: 0000000000000246 R12: 0000000000000001 [ 1104.430563][T18145] R13: 00007f7432e16038 R14: 00007f7432e15fa0 R15: 00007ffd50cc4c18 [ 1104.430594][T18145] [ 1109.054286][T18199] FAULT_INJECTION: forcing a failure. [ 1109.054286][T18199] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1109.127359][T18199] CPU: 0 UID: 0 PID: 18199 Comm: syz.5.2705 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1109.127406][T18199] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1109.127416][T18199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1109.127442][T18199] Call Trace: [ 1109.127450][T18199] [ 1109.127460][T18199] dump_stack_lvl+0x100/0x190 [ 1109.127505][T18199] should_fail_ex.cold+0x5/0xa [ 1109.127531][T18199] ? lock_acquire+0x1cf/0x380 [ 1109.127565][T18199] get_futex_key+0x1d2/0x1620 [ 1109.127598][T18199] ? __pfx_get_futex_key+0x10/0x10 [ 1109.127626][T18199] ? __lock_acquire+0x4a5/0x2630 [ 1109.127662][T18199] ? __local_bh_enable_ip+0x9e/0x120 [ 1109.127695][T18199] futex_wake+0xea/0x530 [ 1109.127732][T18199] ? do_raw_spin_lock+0x128/0x260 [ 1109.127770][T18199] ? __pfx_futex_wake+0x10/0x10 [ 1109.127804][T18199] ? tipc_sk_bind+0x19a/0x380 [ 1109.127846][T18199] ? tipc_sk_bind+0x19a/0x380 [ 1109.127886][T18199] ? __local_bh_enable_ip+0x9e/0x120 [ 1109.127912][T18199] ? lockdep_hardirqs_on+0x78/0x100 [ 1109.127947][T18199] ? tipc_sk_bind+0x19a/0x380 [ 1109.127988][T18199] do_futex+0x32b/0x350 [ 1109.128020][T18199] ? __pfx_do_futex+0x10/0x10 [ 1109.128052][T18199] ? __sys_bind+0x1c7/0x260 [ 1109.128086][T18199] __x64_sys_futex+0x34f/0x4d0 [ 1109.128122][T18199] ? __pfx___x64_sys_futex+0x10/0x10 [ 1109.128166][T18199] do_syscall_64+0x106/0xf80 [ 1109.128199][T18199] ? clear_bhb_loop+0x40/0x90 [ 1109.128230][T18199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.128256][T18199] RIP: 0033:0x7fcff279c799 [ 1109.128277][T18199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1109.128302][T18199] RSP: 002b:00007fcff09f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1109.128327][T18199] RAX: ffffffffffffffda RBX: 00007fcff2a15fa8 RCX: 00007fcff279c799 [ 1109.128343][T18199] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcff2a15fac [ 1109.128359][T18199] RBP: 00007fcff2a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1109.128374][T18199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1109.128390][T18199] R13: 00007fcff2a16038 R14: 00007fff1b500fd0 R15: 00007fff1b5010b8 [ 1109.128421][T18199] [ 1109.542204][T18202] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2705'. [ 1109.821024][T18189] openvswitch: netlink: Multiple metadata blocks provided [ 1110.072026][T18207] futex_wake_op: syz.7.2706 tries to shift op by -2048; fix this program [ 1110.178352][T18207] futex_wake_op: syz.7.2706 tries to shift op by -2048; fix this program [ 1110.314253][T18219] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1110.901607][T18223] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input111 [ 1113.330778][T18263] binder: 18262:18263 ioctl c018620c 0 returned -1 [ 1115.985413][T18281] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1116.031410][T18281] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1116.105085][T18281] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1116.155384][T18281] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1116.671711][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.678073][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.845420][T18304] serio: Serial port pty6 [ 1117.380397][T10484] Bluetooth: hci3: command 0x0c1a tx timeout [ 1118.102978][T10484] Bluetooth: hci5: command 0x0c1a tx timeout [ 1118.190318][T10484] Bluetooth: hci7: command 0x0c1a tx timeout [ 1118.198082][T16264] Bluetooth: hci6: command 0x0c1a tx timeout [ 1119.444993][T18355] FAULT_INJECTION: forcing a failure. [ 1119.444993][T18355] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1119.535991][T18355] CPU: 0 UID: 0 PID: 18355 Comm: syz.7.2739 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1119.536037][T18355] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1119.536047][T18355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1119.536063][T18355] Call Trace: [ 1119.536072][T18355] [ 1119.536082][T18355] dump_stack_lvl+0x100/0x190 [ 1119.536133][T18355] should_fail_ex.cold+0x5/0xa [ 1119.536160][T18355] ? __kernel_text_address+0xd/0x30 [ 1119.536201][T18355] get_futex_key+0x1d2/0x1620 [ 1119.536235][T18355] ? __pfx_get_futex_key+0x10/0x10 [ 1119.536272][T18355] ? putname+0xb1/0x110 [ 1119.536300][T18355] ? stack_trace_save+0x8e/0xc0 [ 1119.536325][T18355] ? __pfx_stack_trace_save+0x10/0x10 [ 1119.536354][T18355] futex_wait_setup+0x83/0x510 [ 1119.536401][T18355] __futex_wait+0x19f/0x300 [ 1119.536442][T18355] ? __pfx___futex_wait+0x10/0x10 [ 1119.536484][T18355] ? __pfx_futex_wake_mark+0x10/0x10 [ 1119.536526][T18355] ? futex_hash+0x2c5/0x380 [ 1119.536564][T18355] futex_wait+0xed/0x380 [ 1119.536601][T18355] ? __pfx_futex_wait+0x10/0x10 [ 1119.536645][T18355] ? putname+0xb1/0x110 [ 1119.536669][T18355] ? kmem_cache_free+0x124/0x6a0 [ 1119.536710][T18355] do_futex+0x1ef/0x350 [ 1119.536742][T18355] ? __pfx_do_futex+0x10/0x10 [ 1119.536772][T18355] ? __pfx_do_sys_openat2+0x10/0x10 [ 1119.536808][T18355] ? __fget_files+0x21f/0x3d0 [ 1119.536834][T18355] __x64_sys_futex+0x34f/0x4d0 [ 1119.536868][T18355] ? __x64_sys_openat+0x12d/0x210 [ 1119.536902][T18355] ? __pfx___x64_sys_futex+0x10/0x10 [ 1119.536946][T18355] do_syscall_64+0x106/0xf80 [ 1119.536980][T18355] ? clear_bhb_loop+0x40/0x90 [ 1119.537010][T18355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.537037][T18355] RIP: 0033:0x7f7432b9c799 [ 1119.537057][T18355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1119.537082][T18355] RSP: 002b:00007f7433b340e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1119.537106][T18355] RAX: ffffffffffffffda RBX: 00007f7432e15fa8 RCX: 00007f7432b9c799 [ 1119.537123][T18355] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7432e15fa8 [ 1119.537139][T18355] RBP: 00007f7432e15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1119.537154][T18355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1119.537169][T18355] R13: 00007f7432e16038 R14: 00007ffd50cc4b30 R15: 00007ffd50cc4c18 [ 1119.537200][T18355] [ 1120.028161][T18360] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input112 [ 1120.188743][T18365] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2741'. [ 1120.728928][T18366] can0: slcan on ttyS2. [ 1121.002787][T18362] can0 (unregistered): slcan off ttyS2. [ 1121.490431][T18382] block2mtd: Using custom MTD label '' for dev [ 1121.530710][T18382] block2mtd: error: cannot open device [ 1121.547579][T18371] openvswitch: netlink: Multiple metadata blocks provided [ 1121.899259][T18392] FAULT_INJECTION: forcing a failure. [ 1121.899259][T18392] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1121.992768][T18392] CPU: 0 UID: 0 PID: 18392 Comm: syz.6.2745 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1121.992814][T18392] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1121.992825][T18392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1121.992841][T18392] Call Trace: [ 1121.992850][T18392] [ 1121.992860][T18392] dump_stack_lvl+0x100/0x190 [ 1121.992904][T18392] should_fail_ex.cold+0x5/0xa [ 1121.992931][T18392] ? prepare_alloc_pages+0x16d/0x5f0 [ 1121.992962][T18392] should_fail_alloc_page+0xeb/0x140 [ 1121.993028][T18392] prepare_alloc_pages+0x1f0/0x5f0 [ 1121.993062][T18392] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1121.993106][T18392] ? rcu_is_watching+0x12/0xc0 [ 1121.993144][T18392] ? trace_mm_page_alloc+0x17a/0x1d0 [ 1121.993173][T18392] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 1121.993215][T18392] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1121.993254][T18392] ? stack_trace_save+0x8e/0xc0 [ 1121.993282][T18392] ? stack_depot_save_flags+0x27/0x9d0 [ 1121.993312][T18392] ? is_bpf_text_address+0x8a/0x1a0 [ 1121.993350][T18392] ? is_bpf_text_address+0x8a/0x1a0 [ 1121.993390][T18392] ? kasan_save_stack+0x3f/0x50 [ 1121.993428][T18392] ? kasan_save_track+0x14/0x30 [ 1121.993466][T18392] ? kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 1121.993504][T18392] ? alloc_vmap_area+0x640/0x2bd0 [ 1121.993528][T18392] ? __get_vm_area_node+0x1ca/0x330 [ 1121.993554][T18392] ? __vmalloc_node_range_noprof+0x213/0x1530 [ 1121.993584][T18392] ? __kvmalloc_node_noprof+0x3de/0xa00 [ 1121.993622][T18392] ? __do_sys_listmount+0x289/0xee0 [ 1121.993659][T18392] ? do_syscall_64+0x106/0xf80 [ 1121.993693][T18392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.993728][T18392] alloc_pages_bulk_noprof+0x782/0x1490 [ 1121.993778][T18392] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1121.993827][T18392] ? alloc_pages_noprof+0x233/0x390 [ 1121.993856][T18392] __kasan_populate_vmalloc+0xf0/0x210 [ 1121.993901][T18392] alloc_vmap_area+0x95d/0x2bd0 [ 1121.993938][T18392] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1121.993977][T18392] __get_vm_area_node+0x1ca/0x330 [ 1121.994012][T18392] __vmalloc_node_range_noprof+0x213/0x1530 [ 1121.994045][T18392] ? __do_sys_listmount+0x289/0xee0 [ 1121.994091][T18392] ? __do_sys_listmount+0x289/0xee0 [ 1121.994138][T18392] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1121.994177][T18392] ? rcu_is_watching+0x12/0xc0 [ 1121.994221][T18392] __kvmalloc_node_noprof+0x3de/0xa00 [ 1121.994269][T18392] ? __do_sys_listmount+0x289/0xee0 [ 1121.994306][T18392] ? __do_sys_listmount+0x289/0xee0 [ 1121.994348][T18392] ? _copy_from_user+0x59/0xd0 [ 1121.994377][T18392] ? copy_mnt_id_req+0x1b1/0x350 [ 1121.994412][T18392] __do_sys_listmount+0x289/0xee0 [ 1121.994450][T18392] ? __pfx_do_futex+0x10/0x10 [ 1121.994485][T18392] ? __fget_files+0x21f/0x3d0 [ 1121.994509][T18392] ? __pfx___do_sys_listmount+0x10/0x10 [ 1121.994566][T18392] do_syscall_64+0x106/0xf80 [ 1121.994599][T18392] ? clear_bhb_loop+0x40/0x90 [ 1121.994629][T18392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.994655][T18392] RIP: 0033:0x7eff8979c799 [ 1121.994677][T18392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1121.994703][T18392] RSP: 002b:00007eff8718f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 1121.994728][T18392] RAX: ffffffffffffffda RBX: 00007eff89a16360 RCX: 00007eff8979c799 [ 1121.994747][T18392] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000080 [ 1121.994763][T18392] RBP: 00007eff89832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1121.994780][T18392] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1121.994796][T18392] R13: 00007eff89a163f8 R14: 00007eff89a16360 R15: 00007fff9a3cc128 [ 1121.994829][T18392] [ 1121.995847][T18392] syz.6.2745: vmalloc error: size 8000000, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null) [ 1122.552735][T18390] MTRR 0 not used [ 1123.352589][T18384] zswap: compressor not available [ 1123.373114][T18386] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 1123.434255][T18392] ,cpuset=/,mems_allowed=0-1 [ 1123.718261][T18392] CPU: 0 UID: 0 PID: 18392 Comm: syz.6.2745 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1123.718306][T18392] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1123.718315][T18392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1123.718331][T18392] Call Trace: [ 1123.718340][T18392] [ 1123.718349][T18392] dump_stack_lvl+0x100/0x190 [ 1123.718393][T18392] warn_alloc.cold+0x95/0x1c1 [ 1123.718436][T18392] ? __pfx_warn_alloc+0x10/0x10 [ 1123.718469][T18392] ? lockdep_hardirqs_on+0x78/0x100 [ 1123.718508][T18392] ? __get_vm_area_node+0x2c5/0x330 [ 1123.718542][T18392] ? __get_vm_area_node+0x208/0x330 [ 1123.718574][T18392] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 1123.718613][T18392] ? __do_sys_listmount+0x289/0xee0 [ 1123.718659][T18392] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1123.718696][T18392] ? rcu_is_watching+0x12/0xc0 [ 1123.718740][T18392] __kvmalloc_node_noprof+0x3de/0xa00 [ 1123.718781][T18392] ? __do_sys_listmount+0x289/0xee0 [ 1123.718816][T18392] ? __do_sys_listmount+0x289/0xee0 [ 1123.718858][T18392] ? _copy_from_user+0x59/0xd0 [ 1123.718887][T18392] ? copy_mnt_id_req+0x1b1/0x350 [ 1123.718921][T18392] __do_sys_listmount+0x289/0xee0 [ 1123.718957][T18392] ? __pfx_do_futex+0x10/0x10 [ 1123.718992][T18392] ? __fget_files+0x21f/0x3d0 [ 1123.719015][T18392] ? __pfx___do_sys_listmount+0x10/0x10 [ 1123.719071][T18392] do_syscall_64+0x106/0xf80 [ 1123.719103][T18392] ? clear_bhb_loop+0x40/0x90 [ 1123.719133][T18392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1123.719158][T18392] RIP: 0033:0x7eff8979c799 [ 1123.719178][T18392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1123.719203][T18392] RSP: 002b:00007eff8718f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 1123.719227][T18392] RAX: ffffffffffffffda RBX: 00007eff89a16360 RCX: 00007eff8979c799 [ 1123.719243][T18392] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000080 [ 1123.719259][T18392] RBP: 00007eff89832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1123.719273][T18392] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1123.719287][T18392] R13: 00007eff89a163f8 R14: 00007eff89a16360 R15: 00007fff9a3cc128 [ 1123.719317][T18392] [ 1123.719326][T18392] Mem-Info: [ 1124.307579][T18416] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1124.397728][T18418] overlayfs: "check_copy_up" module option is obsolete [ 1124.606730][T18392] active_anon:13546 inactive_anon:13 isolated_anon:0 [ 1124.606730][T18392] active_file:19252 inactive_file:40986 isolated_file:0 [ 1124.606730][T18392] unevictable:768 dirty:758 writeback:0 [ 1124.606730][T18392] slab_reclaimable:14298 slab_unreclaimable:108558 [ 1124.606730][T18392] mapped:30923 shmem:3118 pagetables:1554 [ 1124.606730][T18392] sec_pagetables:0 bounce:0 [ 1124.606730][T18392] kernel_misc_reclaimable:0 [ 1124.606730][T18392] free:1293004 free_pcp:10047 free_cma:0 [ 1124.835959][T18392] Node 0 active_anon:47640kB inactive_anon:4kB active_file:77008kB inactive_file:163812kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115524kB dirty:3064kB writeback:0kB shmem:6032kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13568kB pagetables:6172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1125.058083][T18392] Node 1 active_anon:4912kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:6448kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1125.101692][T18425] FAULT_INJECTION: forcing a failure. [ 1125.101692][T18425] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1125.177138][T18425] CPU: 0 UID: 0 PID: 18425 Comm: syz.5.2753 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1125.177185][T18425] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1125.177195][T18425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1125.177211][T18425] Call Trace: [ 1125.177220][T18425] [ 1125.177230][T18425] dump_stack_lvl+0x100/0x190 [ 1125.177275][T18425] should_fail_ex.cold+0x5/0xa [ 1125.177306][T18425] get_futex_key+0x1d2/0x1620 [ 1125.177340][T18425] ? __pfx_get_futex_key+0x10/0x10 [ 1125.177368][T18425] ? futex_hash+0x2c5/0x380 [ 1125.177406][T18425] futex_wake+0xea/0x530 [ 1125.177444][T18425] ? __lock_acquire+0x4a5/0x2630 [ 1125.177476][T18425] ? __pfx_futex_wake+0x10/0x10 [ 1125.177526][T18425] do_futex+0x32b/0x350 [ 1125.177559][T18425] ? __pfx_do_futex+0x10/0x10 [ 1125.177593][T18425] ? __fget_files+0x21f/0x3d0 [ 1125.177620][T18425] __x64_sys_futex+0x34f/0x4d0 [ 1125.177655][T18425] ? __pfx___x64_sys_futex+0x10/0x10 [ 1125.177699][T18425] do_syscall_64+0x106/0xf80 [ 1125.177733][T18425] ? clear_bhb_loop+0x40/0x90 [ 1125.177763][T18425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.177789][T18425] RIP: 0033:0x7fcff279c799 [ 1125.177809][T18425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1125.177842][T18425] RSP: 002b:00007fcff09f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1125.177868][T18425] RAX: ffffffffffffffda RBX: 00007fcff2a15fa8 RCX: 00007fcff279c799 [ 1125.177885][T18425] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcff2a15fac [ 1125.177901][T18425] RBP: 00007fcff2a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1125.177917][T18425] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1125.177934][T18425] R13: 00007fcff2a16038 R14: 00007fff1b500fd0 R15: 00007fff1b5010b8 [ 1125.177965][T18425] [ 1125.467691][T18392] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1125.498840][T18392] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 1125.505110][T18392] Node 0 DMA32 free:1227808kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB free_highatomic:0KB active_anon:47528kB inactive_anon:4kB active_file:77008kB inactive_file:163812kB unevictable:1536kB writepending:3116kB zspages:0kB present:3129332kB managed:2537400kB mlocked:0kB bounce:0kB free_pcp:38496kB local_pcp:38496kB free_cma:0kB [ 1125.539821][T18392] lowmem_reserve[]: 0 0 1 1 1 [ 1125.545519][T18392] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1060kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1125.575945][T18392] lowmem_reserve[]: 0 0 0 0 0 [ 1125.580703][T18392] Node 1 Normal free:3933012kB boost:0kB min:55580kB low:69472kB high:83364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4912kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1125.698015][T18392] lowmem_reserve[]: 0 0 0 0 0 [ 1125.706522][T18392] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1125.733005][T18392] Node 0 DMA32: 5557*4kB (UM) 4441*8kB (UME) 3584*16kB (UM) 1003*32kB (UME) 513*64kB (UME) 484*128kB (UME) 413*256kB (UME) 231*512kB (UME) 134*1024kB (UME) 11*2048kB (UME) 147*4096kB (M) = 1227836kB [ 1125.784610][T18392] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1125.784751][T18392] Node 1 Normal: 19*4kB (UM) 13*8kB (UM) 12*16kB (UM) 7*32kB (UM) 8*64kB (UM) 8*128kB (UM) 5*256kB (UM) 5*512kB (UM) 3*1024kB (M) 4*2048kB (UM) 956*4096kB (UM) = 3933012kB [ 1125.784959][T18392] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1125.784979][T18392] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1125.784999][T18392] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1125.785019][T18392] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1125.785038][T18392] 62841 total pagecache pages [ 1125.785048][T18392] 1 pages in swap cache [ 1125.785057][T18392] Free swap = 124992kB [ 1125.785067][T18392] Total swap = 124996kB [ 1125.785076][T18392] 2097051 pages RAM [ 1125.785085][T18392] 0 pages HighMem/MovableOnly [ 1125.785094][T18392] 430821 pages reserved [ 1125.785103][T18392] 0 pages cma reserved [ 1126.876521][T18449] FAULT_INJECTION: forcing a failure. [ 1126.876521][T18449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1126.921175][T18449] CPU: 0 UID: 0 PID: 18449 Comm: syz.5.2758 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1126.921220][T18449] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1126.921229][T18449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1126.921243][T18449] Call Trace: [ 1126.921252][T18449] [ 1126.921262][T18449] dump_stack_lvl+0x100/0x190 [ 1126.921305][T18449] should_fail_ex.cold+0x5/0xa [ 1126.921334][T18449] _copy_from_iter+0x1f4/0x1690 [ 1126.921370][T18449] ? __pfx__copy_from_iter+0x10/0x10 [ 1126.921404][T18449] ? __pfx___might_resched+0x10/0x10 [ 1126.921447][T18449] file_tty_write.isra.0+0x45b/0x890 [ 1126.921492][T18449] redirected_tty_write+0xd4/0x120 [ 1126.921527][T18449] vfs_write+0x6ac/0x1070 [ 1126.921568][T18449] ? __pfx_redirected_tty_write+0x10/0x10 [ 1126.921621][T18449] ? __pfx_vfs_write+0x10/0x10 [ 1126.921656][T18449] ? find_held_lock+0x2b/0x80 [ 1126.921698][T18449] ksys_write+0x12a/0x250 [ 1126.921725][T18449] ? __pfx_ksys_write+0x10/0x10 [ 1126.921755][T18449] do_syscall_64+0x106/0xf80 [ 1126.921789][T18449] ? clear_bhb_loop+0x40/0x90 [ 1126.921818][T18449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.921843][T18449] RIP: 0033:0x7fcff279c799 [ 1126.921863][T18449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1126.921888][T18449] RSP: 002b:00007fcff09f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1126.921911][T18449] RAX: ffffffffffffffda RBX: 00007fcff2a15fa0 RCX: 00007fcff279c799 [ 1126.921928][T18449] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000004 [ 1126.921943][T18449] RBP: 00007fcff09f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1126.921957][T18449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1126.921972][T18449] R13: 00007fcff2a16038 R14: 00007fcff2a15fa0 R15: 00007fff1b5010b8 [ 1126.922003][T18449] [ 1127.329807][ T29] audit: type=1800 audit(4294970883.381:30): pid=18454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2759" name="dbroot" dev="configfs" ino=157498 res=0 errno=0 [ 1127.596365][T18459] block2mtd: Using custom MTD label '' for dev [ 1127.602725][T18459] block2mtd: error: cannot open device [ 1128.440557][T18476] FAULT_INJECTION: forcing a failure. [ 1128.440557][T18476] name failslab, interval 1, probability 0, space 0, times 0 [ 1128.440604][T18476] CPU: 0 UID: 0 PID: 18476 Comm: syz.8.2763 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1128.440642][T18476] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1128.440652][T18476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1128.440667][T18476] Call Trace: [ 1128.440676][T18476] [ 1128.440686][T18476] dump_stack_lvl+0x100/0x190 [ 1128.440739][T18476] should_fail_ex.cold+0x5/0xa [ 1128.440770][T18476] should_failslab+0xc2/0x120 [ 1128.440796][T18476] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1128.440829][T18476] ? fsnotify_alloc_group+0x92/0x330 [ 1128.440864][T18476] fsnotify_alloc_group+0x92/0x330 [ 1128.440892][T18476] __do_sys_fanotify_init+0x342/0xe50 [ 1128.440936][T18476] do_syscall_64+0x106/0xf80 [ 1128.440970][T18476] ? clear_bhb_loop+0x40/0x90 [ 1128.441001][T18476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.441026][T18476] RIP: 0033:0x7fa7c219c799 [ 1128.441047][T18476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1128.441072][T18476] RSP: 002b:00007fa7c2fbc028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 1128.441095][T18476] RAX: ffffffffffffffda RBX: 00007fa7c2415fa0 RCX: 00007fa7c219c799 [ 1128.441112][T18476] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 1128.441128][T18476] RBP: 00007fa7c2232c99 R08: 0000000000000000 R09: 0000000000000000 [ 1128.441143][T18476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1128.441158][T18476] R13: 00007fa7c2416038 R14: 00007fa7c2415fa0 R15: 00007ffca473cb58 [ 1128.441190][T18476] [ 1128.878225][T18481] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input113 [ 1130.172878][T18495] vivid-007: ================= START STATUS ================= [ 1130.200325][T18495] vivid-007: Generate PTS: true [ 1130.216646][T18495] vivid-007: Generate SCR: true [ 1130.236166][T18495] tpg source WxH: 320x240 (Y'CbCr) [ 1130.273961][T18495] tpg field: 1 [ 1130.285414][T18495] tpg crop: (0,0)/320x240 [ 1130.301344][T18495] tpg compose: (0,0)/320x240 [ 1130.319490][T18495] tpg colorspace: 8 [ 1130.334698][T18501] block2mtd: Using custom MTD label '' for dev [ 1130.349235][T18495] tpg transfer function: 0/0 [ 1130.364930][T18501] block2mtd: error: cannot open device [ 1130.372089][T18495] tpg Y'CbCr encoding: 0/0 [ 1130.389650][T18495] tpg quantization: 0/0 [ 1130.431790][T18495] tpg RGB range: 0/2 [ 1130.487137][T18495] vivid-007: ================== END STATUS ================== [ 1130.498867][T18492] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1130.523218][T18492] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1130.567253][T18492] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1130.617170][T18492] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1130.674984][T18497] MTRR 0 not used [ 1131.561664][T18524] FAULT_INJECTION: forcing a failure. [ 1131.561664][T18524] name failslab, interval 1, probability 0, space 0, times 0 [ 1131.666454][T18524] CPU: 0 UID: 0 PID: 18524 Comm: syz.5.2771 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1131.666497][T18524] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1131.666507][T18524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1131.666521][T18524] Call Trace: [ 1131.666530][T18524] [ 1131.666539][T18524] dump_stack_lvl+0x100/0x190 [ 1131.666583][T18524] should_fail_ex.cold+0x5/0xa [ 1131.666619][T18524] should_failslab+0xc2/0x120 [ 1131.666645][T18524] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1131.666677][T18524] ? madvise_collapse+0x1b5/0xbe0 [ 1131.666716][T18524] madvise_collapse+0x1b5/0xbe0 [ 1131.666754][T18524] ? __pfx_madvise_collapse+0x10/0x10 [ 1131.666784][T18524] ? __print_lock_name+0x61/0x80 [ 1131.666808][T18524] ? is_bpf_text_address+0x8a/0x1a0 [ 1131.666851][T18524] madvise_vma_behavior+0x1987/0x3050 [ 1131.666885][T18524] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 1131.666912][T18524] ? mas_prev_setup.constprop.0+0xb6/0x9c0 [ 1131.666951][T18524] ? mas_prev+0x9b/0xf0 [ 1131.666984][T18524] ? __pfx_mas_prev+0x10/0x10 [ 1131.667026][T18524] ? find_vma_prev+0xd8/0x150 [ 1131.667050][T18524] ? _kstrtoull+0x13c/0x1f0 [ 1131.667082][T18524] ? __pfx_find_vma_prev+0x10/0x10 [ 1131.667124][T18524] madvise_walk_vmas+0x2fe/0xa90 [ 1131.667157][T18524] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 1131.667192][T18524] madvise_do_behavior+0x1ea/0x510 [ 1131.667223][T18524] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1131.667252][T18524] ? down_read+0x13b/0x460 [ 1131.667302][T18524] do_madvise+0x195/0x240 [ 1131.667330][T18524] ? __pfx_do_madvise+0x10/0x10 [ 1131.667356][T18524] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1131.667409][T18524] ? ksys_write+0x1ac/0x250 [ 1131.667432][T18524] ? __pfx_ksys_write+0x10/0x10 [ 1131.667458][T18524] __x64_sys_madvise+0xa9/0x110 [ 1131.667486][T18524] ? lockdep_hardirqs_on+0x78/0x100 [ 1131.667541][T18524] do_syscall_64+0x106/0xf80 [ 1131.667573][T18524] ? clear_bhb_loop+0x40/0x90 [ 1131.667608][T18524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.667633][T18524] RIP: 0033:0x7fcff279c799 [ 1131.667653][T18524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1131.667678][T18524] RSP: 002b:00007fcff0972028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1131.667702][T18524] RAX: ffffffffffffffda RBX: 00007fcff2a16360 RCX: 00007fcff279c799 [ 1131.667718][T18524] RDX: 0000000000000019 RSI: 0000000000200007 RDI: 0000000000000000 [ 1131.667733][T18524] RBP: 00007fcff0972090 R08: 0000000000000000 R09: 0000000000000000 [ 1131.667748][T18524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1131.667763][T18524] R13: 00007fcff2a163f8 R14: 00007fcff2a16360 R15: 00007fff1b5010b8 [ 1131.667794][T18524] [ 1132.250723][T10484] Bluetooth: hci3: command 0x0c1a tx timeout [ 1132.600801][T16264] Bluetooth: hci6: command 0x0c1a tx timeout [ 1132.615695][T16264] Bluetooth: hci5: command 0x0c1a tx timeout [ 1132.688089][T16264] Bluetooth: hci7: command 0x0c1a tx timeout [ 1134.296228][T18544] MTRR 0 not used [ 1136.338849][T18575] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1136.380495][T18575] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1136.404829][T18575] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1136.444121][T18575] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1136.585036][T18586] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input114 [ 1137.234622][T18596] block2mtd: Using custom MTD label '' for dev [ 1137.272269][T18596] block2mtd: error: cannot open device [ 1137.790717][T16264] Bluetooth: hci3: command 0x0c1a tx timeout [ 1138.432458][T16264] Bluetooth: hci6: command 0x0c1a tx timeout [ 1138.440063][T10484] Bluetooth: hci5: command 0x0c1a tx timeout [ 1138.517323][T16264] Bluetooth: hci7: command 0x0c1a tx timeout [ 1139.484108][T18633] block2mtd: Using custom MTD label '' for dev [ 1139.515925][T18633] block2mtd: error: cannot open device [ 1140.312543][T18640] FAULT_INJECTION: forcing a failure. [ 1140.312543][T18640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1140.377728][T18640] CPU: 0 UID: 0 PID: 18640 Comm: syz.7.2804 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1140.377773][T18640] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1140.377782][T18640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1140.377798][T18640] Call Trace: [ 1140.377806][T18640] [ 1140.377816][T18640] dump_stack_lvl+0x100/0x190 [ 1140.377859][T18640] should_fail_ex.cold+0x5/0xa [ 1140.377888][T18640] _copy_from_iter+0x1f4/0x1690 [ 1140.377925][T18640] ? __pfx__copy_from_iter+0x10/0x10 [ 1140.377958][T18640] ? __pfx___might_resched+0x10/0x10 [ 1140.378000][T18640] file_tty_write.isra.0+0x45b/0x890 [ 1140.378044][T18640] redirected_tty_write+0xd4/0x120 [ 1140.378079][T18640] vfs_write+0x6ac/0x1070 [ 1140.378119][T18640] ? __pfx_redirected_tty_write+0x10/0x10 [ 1140.378156][T18640] ? __pfx_vfs_write+0x10/0x10 [ 1140.378199][T18640] ? find_held_lock+0x2b/0x80 [ 1140.378240][T18640] ksys_write+0x12a/0x250 [ 1140.378261][T18640] ? __pfx_ksys_write+0x10/0x10 [ 1140.378292][T18640] do_syscall_64+0x106/0xf80 [ 1140.378325][T18640] ? clear_bhb_loop+0x40/0x90 [ 1140.378355][T18640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.378379][T18640] RIP: 0033:0x7f7432b9c799 [ 1140.378399][T18640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1140.378422][T18640] RSP: 002b:00007f7433b34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1140.378445][T18640] RAX: ffffffffffffffda RBX: 00007f7432e15fa0 RCX: 00007f7432b9c799 [ 1140.378461][T18640] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000004 [ 1140.378476][T18640] RBP: 00007f7433b34090 R08: 0000000000000000 R09: 0000000000000000 [ 1140.378491][T18640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1140.378505][T18640] R13: 00007f7432e16038 R14: 00007f7432e15fa0 R15: 00007ffd50cc4c18 [ 1140.378537][T18640] [ 1140.934959][T18647] sd 0:0:1:0: PR command failed: 1026 [ 1140.940472][T18647] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1140.982471][T18647] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1141.275594][T18656] netlink: 'syz.7.2809': attribute type 8 has an invalid length. [ 1144.021006][T18692] FAULT_INJECTION: forcing a failure. [ 1144.021006][T18692] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1144.085163][T18692] CPU: 0 UID: 0 PID: 18692 Comm: syz.5.2817 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1144.085209][T18692] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1144.085219][T18692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1144.085235][T18692] Call Trace: [ 1144.085244][T18692] [ 1144.085254][T18692] dump_stack_lvl+0x100/0x190 [ 1144.085300][T18692] should_fail_ex.cold+0x5/0xa [ 1144.085330][T18692] get_futex_key+0x1d2/0x1620 [ 1144.085364][T18692] ? __pfx_get_futex_key+0x10/0x10 [ 1144.085405][T18692] futex_wake+0xea/0x530 [ 1144.085446][T18692] ? __pfx_futex_wake+0x10/0x10 [ 1144.085485][T18692] ? __call_rcu_common.constprop.0+0x3f0/0x9b0 [ 1144.085531][T18692] do_futex+0x32b/0x350 [ 1144.085563][T18692] ? __pfx_do_futex+0x10/0x10 [ 1144.085596][T18692] ? __pfx___might_resched+0x10/0x10 [ 1144.085633][T18692] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 1144.085674][T18692] __x64_sys_futex+0x34f/0x4d0 [ 1144.085708][T18692] ? __pfx_task_work_run+0x10/0x10 [ 1144.085744][T18692] ? __pfx___x64_sys_futex+0x10/0x10 [ 1144.085778][T18692] ? exit_to_user_mode_loop+0xdd/0x4a0 [ 1144.085818][T18692] do_syscall_64+0x106/0xf80 [ 1144.085853][T18692] ? clear_bhb_loop+0x40/0x90 [ 1144.085885][T18692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.085912][T18692] RIP: 0033:0x7fcff279c799 [ 1144.085934][T18692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1144.085960][T18692] RSP: 002b:00007fcff09f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1144.085984][T18692] RAX: ffffffffffffffda RBX: 00007fcff2a15fa8 RCX: 00007fcff279c799 [ 1144.086002][T18692] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcff2a15fac [ 1144.086017][T18692] RBP: 00007fcff2a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1144.086043][T18692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1144.086059][T18692] R13: 00007fcff2a16038 R14: 00007fff1b500fd0 R15: 00007fff1b5010b8 [ 1144.086093][T18692] [ 1145.974888][T18703] GUP no longer grows the stack in syz.6.2820 (18703): 14000-18000 (4000) [ 1146.092683][T18703] CPU: 0 UID: 0 PID: 18703 Comm: syz.6.2820 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1146.092726][T18703] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1146.092736][T18703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1146.092750][T18703] Call Trace: [ 1146.092758][T18703] [ 1146.092768][T18703] dump_stack_lvl+0x100/0x190 [ 1146.092810][T18703] gup_vma_lookup.cold+0x83/0x96 [ 1146.092847][T18703] __get_user_pages+0x241/0x34d0 [ 1146.092883][T18703] ? find_held_lock+0x2b/0x80 [ 1146.092906][T18703] ? mtree_load+0x311/0xa40 [ 1146.092939][T18703] ? __pfx___get_user_pages+0x10/0x10 [ 1146.092974][T18703] get_user_pages_remote+0x3d2/0xb10 [ 1146.093006][T18703] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1146.093037][T18703] ? noop_dirty_folio+0x98/0x160 [ 1146.093069][T18703] __access_remote_vm+0x3ba/0xa70 [ 1146.093114][T18703] ? __pfx___access_remote_vm+0x10/0x10 [ 1146.093160][T18703] mem_rw+0x20a/0x640 [ 1146.093191][T18703] vfs_write+0x2aa/0x1070 [ 1146.093238][T18703] ? __pfx_mem_write+0x10/0x10 [ 1146.093264][T18703] ? __pfx_vfs_write+0x10/0x10 [ 1146.093301][T18703] ? __fget_files+0x215/0x3d0 [ 1146.093330][T18703] ? __fget_files+0x21f/0x3d0 [ 1146.093360][T18703] ksys_write+0x12a/0x250 [ 1146.093381][T18703] ? __pfx_ksys_write+0x10/0x10 [ 1146.093411][T18703] do_syscall_64+0x106/0xf80 [ 1146.093443][T18703] ? clear_bhb_loop+0x40/0x90 [ 1146.093473][T18703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.093497][T18703] RIP: 0033:0x7eff8979c799 [ 1146.093516][T18703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1146.093541][T18703] RSP: 002b:00007eff879f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1146.093564][T18703] RAX: ffffffffffffffda RBX: 00007eff89a16090 RCX: 00007eff8979c799 [ 1146.093581][T18703] RDX: 000000000000ffd8 RSI: 0000000000000000 RDI: 0000000000000003 [ 1146.093596][T18703] RBP: 00007eff89832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1146.093611][T18703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1146.093625][T18703] R13: 00007eff89a16128 R14: 00007eff89a16090 R15: 00007fff9a3cc128 [ 1146.093657][T18703] [ 1149.350258][T18754] hub 1-0:1.0: USB hub found [ 1149.419143][T18754] hub 1-0:1.0: 1 port detected [ 1149.660147][T18735] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1149.697019][T18735] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1149.723003][T18735] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1149.751220][T18735] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1151.083061][T16264] Bluetooth: hci3: command 0x0c1a tx timeout [ 1151.718201][T16264] Bluetooth: hci5: command 0x0c1a tx timeout [ 1151.782942][T18788] NFSD: Failed to start, no listeners configured. [ 1151.802000][T16264] Bluetooth: hci7: command 0x0c1a tx timeout [ 1151.808397][T10484] Bluetooth: hci6: command 0x0c1a tx timeout [ 1152.138747][T18795] FAULT_INJECTION: forcing a failure. [ 1152.138747][T18795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1152.194529][T18795] CPU: 0 UID: 0 PID: 18795 Comm: syz.5.2836 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1152.194574][T18795] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1152.194583][T18795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1152.194599][T18795] Call Trace: [ 1152.194607][T18795] [ 1152.194617][T18795] dump_stack_lvl+0x100/0x190 [ 1152.194660][T18795] should_fail_ex.cold+0x5/0xa [ 1152.194690][T18795] _copy_from_iter+0x1f4/0x1690 [ 1152.194725][T18795] ? __pfx__copy_from_iter+0x10/0x10 [ 1152.194758][T18795] ? __pfx___might_resched+0x10/0x10 [ 1152.194800][T18795] file_tty_write.isra.0+0x45b/0x890 [ 1152.194848][T18795] redirected_tty_write+0xd4/0x120 [ 1152.194883][T18795] vfs_write+0x6ac/0x1070 [ 1152.194923][T18795] ? __pfx_redirected_tty_write+0x10/0x10 [ 1152.194967][T18795] ? __pfx_vfs_write+0x10/0x10 [ 1152.195002][T18795] ? find_held_lock+0x2b/0x80 [ 1152.195043][T18795] ksys_write+0x12a/0x250 [ 1152.195065][T18795] ? __pfx_ksys_write+0x10/0x10 [ 1152.195095][T18795] do_syscall_64+0x106/0xf80 [ 1152.195129][T18795] ? clear_bhb_loop+0x40/0x90 [ 1152.195158][T18795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.195183][T18795] RIP: 0033:0x7fcff279c799 [ 1152.195203][T18795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1152.195228][T18795] RSP: 002b:00007fcff09f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1152.195252][T18795] RAX: ffffffffffffffda RBX: 00007fcff2a15fa0 RCX: 00007fcff279c799 [ 1152.195268][T18795] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000004 [ 1152.195283][T18795] RBP: 00007fcff09f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1152.195298][T18795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1152.195313][T18795] R13: 00007fcff2a16038 R14: 00007fcff2a15fa0 R15: 00007fff1b5010b8 [ 1152.195344][T18795] [ 1153.387682][T18804] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input115 [ 1155.735124][T18829] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input116 [ 1156.330852][T18818] MTRR 0 not used [ 1158.163679][T18844] zswap: compressor not available [ 1159.256666][T18866] MTRR 0 not used [ 1159.561886][T16264] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1161.855173][T18876] MTRR 0 not used [ 1165.166632][T16264] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1165.221056][T18919] MTRR 0 not used [ 1166.725942][T18934] MTRR 0 not used [ 1169.895864][T16264] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1174.002390][T19016] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input117 [ 1175.770620][T19036] MTRR 0 not used [ 1178.142518][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.148887][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.507160][T19065] Invalid ELF header magic: != ELF [ 1178.599570][T19073] FAULT_INJECTION: forcing a failure. [ 1178.599570][T19073] name failslab, interval 1, probability 0, space 0, times 0 [ 1178.848634][T19073] CPU: 0 UID: 0 PID: 19073 Comm: syz.8.2893 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1178.848690][T19073] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1178.848700][T19073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1178.848716][T19073] Call Trace: [ 1178.848725][T19073] [ 1178.848736][T19073] dump_stack_lvl+0x100/0x190 [ 1178.848782][T19073] should_fail_ex.cold+0x5/0xa [ 1178.848813][T19073] should_failslab+0xc2/0x120 [ 1178.848839][T19073] __kvmalloc_node_noprof+0xfa/0xa00 [ 1178.848879][T19073] ? file_tty_write.isra.0+0x64e/0x890 [ 1178.848924][T19073] file_tty_write.isra.0+0x64e/0x890 [ 1178.848960][T19073] ? security_file_permission+0x76/0x210 [ 1178.848991][T19073] ? rw_verify_area+0xce/0x6d0 [ 1178.849030][T19073] vfs_write+0x6ac/0x1070 [ 1178.849070][T19073] ? __pfx_tty_write+0x10/0x10 [ 1178.849107][T19073] ? __pfx_vfs_write+0x10/0x10 [ 1178.849146][T19073] ? find_held_lock+0x2b/0x80 [ 1178.849189][T19073] ksys_write+0x12a/0x250 [ 1178.849212][T19073] ? __pfx_ksys_write+0x10/0x10 [ 1178.849243][T19073] do_syscall_64+0x106/0xf80 [ 1178.849278][T19073] ? clear_bhb_loop+0x40/0x90 [ 1178.849309][T19073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.849336][T19073] RIP: 0033:0x7fa7c219c799 [ 1178.849357][T19073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1178.849382][T19073] RSP: 002b:00007fa7c2f7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1178.849407][T19073] RAX: ffffffffffffffda RBX: 00007fa7c2416180 RCX: 00007fa7c219c799 [ 1178.849424][T19073] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 1178.849439][T19073] RBP: 00007fa7c2232c99 R08: 0000000000000000 R09: 0000000000000000 [ 1178.849455][T19073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1178.849470][T19073] R13: 00007fa7c2416218 R14: 00007fa7c2416180 R15: 00007ffca473cb58 [ 1178.849502][T19073] [ 1181.869254][T19096] zram: Added device: zram1 [ 1182.119464][T19106] netlink: 'syz.6.2902': attribute type 33 has an invalid length. [ 1183.524630][T19125] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1187.034601][T19166] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1187.442866][T19167] random: crng reseeded on system resumption [ 1187.580611][T16264] Bluetooth: hci7: Received unexpected HCI Event 0x00 [ 1187.606390][T19169] netlink: 'syz.8.2917': attribute type 11 has an invalid length. [ 1188.580842][T16264] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 1188.949478][T19197] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2925'. [ 1189.024017][T19203] netlink: 13 bytes leftover after parsing attributes in process `syz.6.2925'. [ 1189.290340][T19198] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1189.392282][T19198] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1189.447500][T19198] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1189.602744][T19198] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1189.653046][T19198] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1190.266987][T19213] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1190.430840][ T29] audit: type=1800 audit(4294971969.470:31): pid=19215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2929" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 1191.340151][T16264] Bluetooth: hci3: command 0x0c1a tx timeout [ 1191.421184][T16264] Bluetooth: hci5: command 0x0c1a tx timeout [ 1191.660746][T16264] Bluetooth: hci7: command 0x0c1a tx timeout [ 1191.667856][T10484] Bluetooth: hci6: command 0x0c1a tx timeout [ 1191.757265][T19234] serio: Serial port pty6 [ 1193.033650][T19247] zram: Added device: zram2 [ 1193.499713][T16264] Bluetooth: hci5: command 0x0c1a tx timeout [ 1193.597085][T19261] sd 0:0:1:0: PR command failed: 1026 [ 1193.624898][T19261] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1193.662696][T19261] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1194.677052][T19282] binder: 19281:19282 ioctl c0306201 200000000000 returned -14 [ 1199.111738][T19315] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1199.175561][T19315] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1199.255509][T19315] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1199.332371][T19315] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1200.545865][T16264] Bluetooth: hci3: command 0x0c1a tx timeout [ 1200.864314][T19333] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2966'. [ 1201.182745][T16264] Bluetooth: hci5: command 0x0c1a tx timeout [ 1201.262986][T16264] Bluetooth: hci6: command 0x0c1a tx timeout [ 1201.343930][T16264] Bluetooth: hci7: command 0x0c1a tx timeout [ 1201.875455][T19345] bridge0: port 3(batadv0) entered blocking state [ 1201.903356][T19345] bridge0: port 3(batadv0) entered disabled state [ 1201.990870][T19345] batadv0: entered allmulticast mode [ 1202.068923][T19345] batadv0: entered promiscuous mode [ 1202.163777][T19345] bridge0: port 3(batadv0) entered blocking state [ 1202.170363][T19345] bridge0: port 3(batadv0) entered forwarding state [ 1202.427345][T19007] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1202.437113][T19007] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1203.223935][T19367] netlink: 'syz.6.2976': attribute type 8 has an invalid length. [ 1203.834936][T19362] MTRR 0 not used [ 1205.343487][T19390] MTRR 0 not used [ 1207.025463][T16264] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1208.748726][T19435] MTRR 0 not used [ 1209.716689][T19454] input: jJǸ-9%vJ86 as /devices/virtual/input/input120 [ 1212.149198][T16264] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1212.844399][T19487] netlink: 'syz.8.3009': attribute type 8 has an invalid length. [ 1213.280164][T19493] bridge0: port 2(batadv0) entered blocking state [ 1213.313836][T19493] bridge0: port 2(batadv0) entered disabled state [ 1213.349072][T19493] batadv0: entered allmulticast mode [ 1213.375329][T19496] vivid-007: ================= START STATUS ================= [ 1213.411080][T19496] vivid-007: Generate PTS: true [ 1213.416014][T19496] vivid-007: Generate SCR: true [ 1213.421983][T19493] batadv0: entered promiscuous mode [ 1213.427755][T19493] bridge0: port 2(batadv0) entered blocking state [ 1213.434496][T19493] bridge0: port 2(batadv0) entered forwarding state [ 1213.469958][T19496] tpg source WxH: 320x240 (Y'CbCr) [ 1213.475136][T19496] tpg field: 1 [ 1213.500633][T19496] tpg crop: (0,0)/320x240 [ 1213.505034][T19496] tpg compose: (0,0)/320x240 [ 1213.550725][T19496] tpg colorspace: 8 [ 1213.554595][T19496] tpg transfer function: 0/0 [ 1213.590052][T19496] tpg Y'CbCr encoding: 0/0 [ 1213.594540][T19496] tpg quantization: 0/0 [ 1213.622408][T19496] tpg RGB range: 0/2 [ 1213.642723][T19496] vivid-007: ================== END STATUS ================== [ 1213.788877][T13238] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1213.798632][T13238] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1213.948315][T19506] FAULT_INJECTION: forcing a failure. [ 1213.948315][T19506] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1214.019665][T19506] CPU: 0 UID: 0 PID: 19506 Comm: syz.5.3016 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1214.019711][T19506] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1214.019721][T19506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1214.019737][T19506] Call Trace: [ 1214.019746][T19506] [ 1214.019756][T19506] dump_stack_lvl+0x100/0x190 [ 1214.019801][T19506] should_fail_ex.cold+0x5/0xa [ 1214.019831][T19506] get_futex_key+0x1d2/0x1620 [ 1214.019866][T19506] ? __pfx_get_futex_key+0x10/0x10 [ 1214.019894][T19506] ? __pfx_try_to_wake_up+0x10/0x10 [ 1214.019923][T19506] ? __lock_acquire+0x4a5/0x2630 [ 1214.019959][T19506] futex_wait_setup+0x83/0x510 [ 1214.020006][T19506] __futex_wait+0x19f/0x300 [ 1214.020046][T19506] ? __pfx___futex_wait+0x10/0x10 [ 1214.020082][T19506] ? anon_pipe_write+0xdaa/0x1d40 [ 1214.020111][T19506] ? __pfx_futex_wake_mark+0x10/0x10 [ 1214.020152][T19506] ? futex_hash+0x2c5/0x380 [ 1214.020189][T19506] futex_wait+0xed/0x380 [ 1214.020227][T19506] ? __pfx_futex_wait+0x10/0x10 [ 1214.020274][T19506] ? vfs_write+0x15d/0x1070 [ 1214.020314][T19506] ? __pfx_anon_pipe_write+0x10/0x10 [ 1214.020341][T19506] do_futex+0x1ef/0x350 [ 1214.020386][T19506] ? __pfx_do_futex+0x10/0x10 [ 1214.020427][T19506] __x64_sys_futex+0x34f/0x4d0 [ 1214.020465][T19506] ? fput+0x79/0x100 [ 1214.020492][T19506] ? __pfx___x64_sys_futex+0x10/0x10 [ 1214.020531][T19506] ? ksys_write+0x1ac/0x250 [ 1214.020554][T19506] ? __pfx_ksys_write+0x10/0x10 [ 1214.020586][T19506] do_syscall_64+0x106/0xf80 [ 1214.020622][T19506] ? clear_bhb_loop+0x40/0x90 [ 1214.020653][T19506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1214.020681][T19506] RIP: 0033:0x7fcff279c799 [ 1214.020702][T19506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1214.020727][T19506] RSP: 002b:00007fcff09f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1214.020751][T19506] RAX: ffffffffffffffda RBX: 00007fcff2a15fa8 RCX: 00007fcff279c799 [ 1214.020768][T19506] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcff2a15fa8 [ 1214.020784][T19506] RBP: 00007fcff2a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1214.020800][T19506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1214.020816][T19506] R13: 00007fcff2a16038 R14: 00007fff1b500fd0 R15: 00007fff1b5010b8 [ 1214.020848][T19506] [ 1214.296528][T19509] FAULT_INJECTION: forcing a failure. [ 1214.296528][T19509] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1214.310237][T19509] CPU: 0 UID: 0 PID: 19509 Comm: syz.6.3015 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1214.310287][T19509] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1214.310296][T19509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1214.310310][T19509] Call Trace: [ 1214.310318][T19509] [ 1214.310327][T19509] dump_stack_lvl+0x100/0x190 [ 1214.310369][T19509] should_fail_ex.cold+0x5/0xa [ 1214.310397][T19509] get_futex_key+0x295/0x1620 [ 1214.310430][T19509] ? __pfx_get_futex_key+0x10/0x10 [ 1214.310456][T19509] ? lock_acquire+0x1cf/0x380 [ 1214.310496][T19509] futex_wake+0xea/0x530 [ 1214.310533][T19509] ? __pfx_futex_wake+0x10/0x10 [ 1214.310569][T19509] ? exit_mm_release+0x19/0x30 [ 1214.310606][T19509] do_futex+0x32b/0x350 [ 1214.310636][T19509] ? __pfx_do_futex+0x10/0x10 [ 1214.310664][T19509] ? __might_fault+0xc5/0x140 [ 1214.310706][T19509] mm_release+0x24a/0x2f0 [ 1214.310730][T19509] do_exit+0x704/0x2b60 [ 1214.310765][T19509] ? __pfx_do_exit+0x10/0x10 [ 1214.310795][T19509] ? do_raw_spin_lock+0x128/0x260 [ 1214.310829][T19509] ? find_held_lock+0x2b/0x80 [ 1214.310850][T19509] ? get_signal+0x7e0/0x21e0 [ 1214.310876][T19509] do_group_exit+0xd5/0x2a0 [ 1214.310909][T19509] get_signal+0x1ec7/0x21e0 [ 1214.310938][T19509] ? msgctl_down+0x253/0x480 [ 1214.310975][T19509] ? __pfx_get_signal+0x10/0x10 [ 1214.311001][T19509] ? do_futex+0x192/0x350 [ 1214.311034][T19509] arch_do_signal_or_restart+0x91/0x770 [ 1214.311066][T19509] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1214.311103][T19509] ? __pfx___x64_sys_futex+0x10/0x10 [ 1214.311140][T19509] exit_to_user_mode_loop+0x86/0x4a0 [ 1214.311174][T19509] do_syscall_64+0x668/0xf80 [ 1214.311207][T19509] ? clear_bhb_loop+0x40/0x90 [ 1214.311236][T19509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1214.311266][T19509] RIP: 0033:0x7eff8979c799 [ 1214.311286][T19509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1214.311311][T19509] RSP: 002b:00007eff8a56e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1214.311335][T19509] RAX: fffffffffffffe00 RBX: 00007eff89a15fa8 RCX: 00007eff8979c799 [ 1214.311351][T19509] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007eff89a15fa8 [ 1214.311366][T19509] RBP: 00007eff89a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1214.311380][T19509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1214.311395][T19509] R13: 00007eff89a16038 R14: 00007fff9a3cc040 R15: 00007fff9a3cc128 [ 1214.311425][T19509] [ 1215.395466][T19518] can: request_module (can-proto-5) failed. [ 1217.872702][T19545] FAULT_INJECTION: forcing a failure. [ 1217.872702][T19545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1217.974196][T19545] CPU: 0 UID: 0 PID: 19545 Comm: syz.7.3024 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1217.974241][T19545] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1217.974250][T19545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1217.974265][T19545] Call Trace: [ 1217.974274][T19545] [ 1217.974284][T19545] dump_stack_lvl+0x100/0x190 [ 1217.974327][T19545] should_fail_ex.cold+0x5/0xa [ 1217.974356][T19545] _copy_from_user+0x2e/0xd0 [ 1217.974385][T19545] core_sys_select+0x472/0xbb0 [ 1217.974430][T19545] ? __pfx_core_sys_select+0x10/0x10 [ 1217.974467][T19545] ? get_pid_task+0xfc/0x250 [ 1217.974503][T19545] ? get_pid_task+0x106/0x250 [ 1217.974551][T19545] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1217.974588][T19545] ? __fget_files+0x215/0x3d0 [ 1217.974612][T19545] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1217.974652][T19545] kern_select+0x20c/0x270 [ 1217.974692][T19545] ? __pfx_kern_select+0x10/0x10 [ 1217.974734][T19545] ? __pfx_ksys_write+0x10/0x10 [ 1217.974762][T19545] __x64_sys_select+0xbd/0x160 [ 1217.974799][T19545] ? do_syscall_64+0x95/0xf80 [ 1217.974831][T19545] ? lockdep_hardirqs_on+0x78/0x100 [ 1217.974864][T19545] do_syscall_64+0x106/0xf80 [ 1217.974896][T19545] ? clear_bhb_loop+0x40/0x90 [ 1217.974925][T19545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1217.974951][T19545] RIP: 0033:0x7f7432b9c799 [ 1217.974971][T19545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1217.974995][T19545] RSP: 002b:00007f7433b34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1217.975020][T19545] RAX: ffffffffffffffda RBX: 00007f7432e15fa0 RCX: 00007f7432b9c799 [ 1217.975036][T19545] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 1217.975051][T19545] RBP: 00007f7433b34090 R08: 0000000000000000 R09: 0000000000000000 [ 1217.975066][T19545] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 1217.975081][T19545] R13: 00007f7432e16038 R14: 00007f7432e15fa0 R15: 00007ffd50cc4c18 [ 1217.975111][T19545] [ 1218.741612][T19551] usb usb13: check_ctrlrecip: process 19551 (syz.7.3027) requesting ep 01 but needs 81 [ 1218.837082][T19551] usb usb13: usbfs: process 19551 (syz.7.3027) did not claim interface 0 before use [ 1221.525326][T19559] FAULT_INJECTION: forcing a failure. [ 1221.525326][T19559] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1221.583106][T19559] CPU: 0 UID: 0 PID: 19559 Comm: syz.7.3028 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1221.583149][T19559] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1221.583158][T19559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1221.583173][T19559] Call Trace: [ 1221.583181][T19559] [ 1221.583191][T19559] dump_stack_lvl+0x100/0x190 [ 1221.583233][T19559] should_fail_ex.cold+0x5/0xa [ 1221.583262][T19559] get_futex_key+0x295/0x1620 [ 1221.583294][T19559] ? __pfx_get_futex_key+0x10/0x10 [ 1221.583320][T19559] ? lock_acquire+0x1cf/0x380 [ 1221.583360][T19559] futex_wake+0xea/0x530 [ 1221.583398][T19559] ? __pfx_futex_wake+0x10/0x10 [ 1221.583433][T19559] ? exit_mm_release+0x19/0x30 [ 1221.583470][T19559] do_futex+0x32b/0x350 [ 1221.583501][T19559] ? __pfx_do_futex+0x10/0x10 [ 1221.583529][T19559] ? __might_fault+0xc5/0x140 [ 1221.583571][T19559] mm_release+0x24a/0x2f0 [ 1221.583595][T19559] do_exit+0x704/0x2b60 [ 1221.583630][T19559] ? __pfx_do_exit+0x10/0x10 [ 1221.583660][T19559] ? do_raw_spin_lock+0x128/0x260 [ 1221.583694][T19559] ? find_held_lock+0x2b/0x80 [ 1221.583715][T19559] ? get_signal+0x7e0/0x21e0 [ 1221.583743][T19559] do_group_exit+0xd5/0x2a0 [ 1221.583776][T19559] get_signal+0x1ec7/0x21e0 [ 1221.583805][T19559] ? msgctl_down+0x253/0x480 [ 1221.583843][T19559] ? __pfx_get_signal+0x10/0x10 [ 1221.583869][T19559] ? do_futex+0x192/0x350 [ 1221.583902][T19559] arch_do_signal_or_restart+0x91/0x770 [ 1221.583942][T19559] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1221.583980][T19559] ? __pfx___x64_sys_futex+0x10/0x10 [ 1221.584018][T19559] exit_to_user_mode_loop+0x86/0x4a0 [ 1221.584052][T19559] do_syscall_64+0x668/0xf80 [ 1221.584085][T19559] ? clear_bhb_loop+0x40/0x90 [ 1221.584115][T19559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.584139][T19559] RIP: 0033:0x7f7432b9c799 [ 1221.584159][T19559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1221.584182][T19559] RSP: 002b:00007f7433b340e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1221.584205][T19559] RAX: fffffffffffffe00 RBX: 00007f7432e15fa8 RCX: 00007f7432b9c799 [ 1221.584222][T19559] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7432e15fa8 [ 1221.584237][T19559] RBP: 00007f7432e15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1221.584251][T19559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1221.584266][T19559] R13: 00007f7432e16038 R14: 00007ffd50cc4b30 R15: 00007ffd50cc4c18 [ 1221.584296][T19559] [ 1222.093908][T19573] netlink: 266 bytes leftover after parsing attributes in process `syz.7.3034'. [ 1222.103150][T19573] IPv6: NLM_F_CREATE should be specified when creating new route [ 1222.200011][T19578] netlink: 'syz.5.3035': attribute type 8 has an invalid length. [ 1223.079866][T19594] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3040'. [ 1223.152872][T19597] netlink: 13 bytes leftover after parsing attributes in process `syz.6.3040'. [ 1223.938400][T19620] FAULT_INJECTION: forcing a failure. [ 1223.938400][T19620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1224.033838][T19620] CPU: 0 UID: 0 PID: 19620 Comm: syz.6.3048 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1224.033891][T19620] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1224.033901][T19620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1224.033916][T19620] Call Trace: [ 1224.033925][T19620] [ 1224.033935][T19620] dump_stack_lvl+0x100/0x190 [ 1224.033979][T19620] should_fail_ex.cold+0x5/0xa [ 1224.034008][T19620] _copy_to_user+0x32/0xd0 [ 1224.034039][T19620] simple_read_from_buffer+0xcb/0x170 [ 1224.034079][T19620] proc_fail_nth_read+0x1af/0x230 [ 1224.034110][T19620] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1224.034140][T19620] ? rw_verify_area+0xce/0x6d0 [ 1224.034175][T19620] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1224.034203][T19620] vfs_read+0x1e4/0xb30 [ 1224.034245][T19620] ? __pfx_vfs_read+0x10/0x10 [ 1224.034281][T19620] ? __fget_files+0x215/0x3d0 [ 1224.034310][T19620] ? __fget_files+0x21f/0x3d0 [ 1224.034339][T19620] ksys_read+0x12a/0x250 [ 1224.034375][T19620] ? __pfx_ksys_read+0x10/0x10 [ 1224.034420][T19620] do_syscall_64+0x106/0xf80 [ 1224.034453][T19620] ? clear_bhb_loop+0x40/0x90 [ 1224.034482][T19620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.034506][T19620] RIP: 0033:0x7eff8975cfce [ 1224.034526][T19620] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1224.034550][T19620] RSP: 002b:00007eff8a56dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1224.034573][T19620] RAX: ffffffffffffffda RBX: 00007eff8a56e6c0 RCX: 00007eff8975cfce [ 1224.034589][T19620] RDX: 000000000000000f RSI: 00007eff8a56e0a0 RDI: 0000000000000004 [ 1224.034604][T19620] RBP: 00007eff8a56e090 R08: 0000000000000000 R09: 0000000000000000 [ 1224.034619][T19620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1224.034633][T19620] R13: 00007eff89a16038 R14: 00007eff89a15fa0 R15: 00007fff9a3cc128 [ 1224.034664][T19620] [ 1224.347667][T19631] netlink: 326 bytes leftover after parsing attributes in process `syz.7.3051'. [ 1224.357384][T19631] bridge0: port 3(batadv0) entered disabled state [ 1224.364186][T19631] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.371508][T19631] bridge0: port 1(bridge_slave_0) entered disabled state [ 1225.765720][T16264] block nbd3: Receive control failed (result -32) [ 1229.325526][T19703] FAULT_INJECTION: forcing a failure. [ 1229.325526][T19703] name failslab, interval 1, probability 0, space 0, times 0 [ 1229.380051][T19703] CPU: 0 UID: 0 PID: 19703 Comm: syz.6.3067 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1229.380097][T19703] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1229.380107][T19703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1229.380123][T19703] Call Trace: [ 1229.380131][T19703] [ 1229.380141][T19703] dump_stack_lvl+0x100/0x190 [ 1229.380185][T19703] should_fail_ex.cold+0x5/0xa [ 1229.380215][T19703] ? lsm_blob_alloc+0x68/0x90 [ 1229.380248][T19703] should_failslab+0xc2/0x120 [ 1229.380275][T19703] __kmalloc_noprof+0xe0/0x850 [ 1229.380312][T19703] ? trace_kmem_cache_alloc+0xf3/0x120 [ 1229.380343][T19703] lsm_blob_alloc+0x68/0x90 [ 1229.380377][T19703] security_sk_alloc+0x2d/0x290 [ 1229.380419][T19703] sk_prot_alloc+0x1d1/0x2a0 [ 1229.380447][T19703] sk_alloc+0x36/0xe80 [ 1229.380479][T19703] inet6_create+0x385/0x12b0 [ 1229.380517][T19703] ? inet6_create+0x7f/0x12b0 [ 1229.380554][T19703] __sock_create+0x339/0x860 [ 1229.380585][T19703] smc_create+0x163/0x290 [ 1229.380617][T19703] __sock_create+0x339/0x860 [ 1229.380648][T19703] __sys_socket+0x14d/0x260 [ 1229.380675][T19703] ? __pfx___sys_socket+0x10/0x10 [ 1229.380721][T19703] __x64_sys_socket+0x72/0xb0 [ 1229.380748][T19703] ? lockdep_hardirqs_on+0x78/0x100 [ 1229.380784][T19703] do_syscall_64+0x106/0xf80 [ 1229.380818][T19703] ? clear_bhb_loop+0x40/0x90 [ 1229.380849][T19703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1229.380875][T19703] RIP: 0033:0x7eff8979c799 [ 1229.380895][T19703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1229.380921][T19703] RSP: 002b:00007eff8a56e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1229.380945][T19703] RAX: ffffffffffffffda RBX: 00007eff89a15fa0 RCX: 00007eff8979c799 [ 1229.380962][T19703] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 000000000000002b [ 1229.380977][T19703] RBP: 00007eff89832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1229.380993][T19703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1229.381008][T19703] R13: 00007eff89a16038 R14: 00007eff89a15fa0 R15: 00007fff9a3cc128 [ 1229.381040][T19703] [ 1230.128707][T19709] netlink: 'syz.5.3069': attribute type 8 has an invalid length. [ 1230.635151][T19705] binder: 19704:19705 ioctl c0306201 200000000000 returned -14 [ 1231.041792][T19726] FAULT_INJECTION: forcing a failure. [ 1231.041792][T19726] name failslab, interval 1, probability 0, space 0, times 0 [ 1231.125847][T19726] CPU: 0 UID: 0 PID: 19726 Comm: syz.5.3074 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1231.125891][T19726] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1231.125900][T19726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1231.125916][T19726] Call Trace: [ 1231.125924][T19726] [ 1231.125934][T19726] dump_stack_lvl+0x100/0x190 [ 1231.125977][T19726] should_fail_ex.cold+0x5/0xa [ 1231.126005][T19726] should_failslab+0xc2/0x120 [ 1231.126031][T19726] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1231.126067][T19726] ? taskstats_exit+0x650/0xbd0 [ 1231.126111][T19726] taskstats_exit+0x650/0xbd0 [ 1231.126147][T19726] ? __pfx_acct_update_integrals+0x10/0x10 [ 1231.126190][T19726] ? __pfx_taskstats_exit+0x10/0x10 [ 1231.126229][T19726] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1231.126253][T19726] ? exit_signals+0x395/0xaf0 [ 1231.126281][T19726] do_exit+0x659/0x2b60 [ 1231.126318][T19726] ? __pfx_do_exit+0x10/0x10 [ 1231.126349][T19726] ? do_raw_spin_lock+0x128/0x260 [ 1231.126384][T19726] ? find_held_lock+0x2b/0x80 [ 1231.126406][T19726] ? get_signal+0x7e0/0x21e0 [ 1231.126433][T19726] do_group_exit+0xd5/0x2a0 [ 1231.126466][T19726] get_signal+0x1ec7/0x21e0 [ 1231.126502][T19726] ? __pfx_get_signal+0x10/0x10 [ 1231.126528][T19726] ? do_futex+0x192/0x350 [ 1231.126570][T19726] arch_do_signal_or_restart+0x91/0x770 [ 1231.126601][T19726] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 1231.126634][T19726] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1231.126672][T19726] ? __pfx___x64_sys_futex+0x10/0x10 [ 1231.126709][T19726] exit_to_user_mode_loop+0x86/0x4a0 [ 1231.126744][T19726] do_syscall_64+0x668/0xf80 [ 1231.126777][T19726] ? clear_bhb_loop+0x40/0x90 [ 1231.126806][T19726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1231.126831][T19726] RIP: 0033:0x7fcff279c799 [ 1231.126851][T19726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1231.126875][T19726] RSP: 002b:00007fcff09f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1231.126898][T19726] RAX: fffffffffffffe00 RBX: 00007fcff2a15fa8 RCX: 00007fcff279c799 [ 1231.126914][T19726] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcff2a15fa8 [ 1231.126929][T19726] RBP: 00007fcff2a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1231.126944][T19726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1231.126958][T19726] R13: 00007fcff2a16038 R14: 00007fff1b500fd0 R15: 00007fff1b5010b8 [ 1231.126988][T19726] [ 1232.083866][T16264] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1234.004175][T19755] FAULT_INJECTION: forcing a failure. [ 1234.004175][T19755] name failslab, interval 1, probability 0, space 0, times 0 [ 1234.085873][T19755] CPU: 0 UID: 0 PID: 19755 Comm: syz.6.3080 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1234.085922][T19755] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1234.085932][T19755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1234.085947][T19755] Call Trace: [ 1234.085956][T19755] [ 1234.085969][T19755] dump_stack_lvl+0x100/0x190 [ 1234.086012][T19755] should_fail_ex.cold+0x5/0xa [ 1234.086044][T19755] should_failslab+0xc2/0x120 [ 1234.086070][T19755] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1234.086109][T19755] ? shmem_alloc_inode+0x25/0x50 [ 1234.086142][T19755] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1234.086177][T19755] shmem_alloc_inode+0x25/0x50 [ 1234.086204][T19755] alloc_inode+0x68/0x250 [ 1234.086238][T19755] new_inode+0x22/0x1c0 [ 1234.086269][T19755] ? trace_kmem_cache_alloc+0xf3/0x120 [ 1234.086298][T19755] shmem_get_inode+0x212/0x1040 [ 1234.086335][T19755] ? __pfx_shmem_get_inode+0x10/0x10 [ 1234.086367][T19755] ? rcu_is_watching+0x12/0xc0 [ 1234.086403][T19755] ? percpu_counter_add_batch+0xb9/0x230 [ 1234.086441][T19755] __shmem_file_setup+0x3ac/0x490 [ 1234.086482][T19755] ? __pfx___shmem_file_setup+0x10/0x10 [ 1234.086520][T19755] ? vm_area_alloc+0x1f/0x160 [ 1234.086558][T19755] shmem_zero_setup+0x96/0x1b0 [ 1234.086599][T19755] __mmap_region+0x2198/0x29e0 [ 1234.086641][T19755] ? __pfx___mmap_region+0x10/0x10 [ 1234.086684][T19755] ? set_next_entity+0x11e/0x9c0 [ 1234.086725][T19755] ? __lock_acquire+0x4a5/0x2630 [ 1234.086757][T19755] ? find_held_lock+0x2b/0x80 [ 1234.086792][T19755] ? find_held_lock+0x2b/0x80 [ 1234.086814][T19755] ? finish_task_switch.isra.0+0x200/0xb80 [ 1234.086841][T19755] ? finish_task_switch.isra.0+0x200/0xb80 [ 1234.086879][T19755] ? trace_sched_exit_tp+0x13a/0x180 [ 1234.086909][T19755] ? __schedule+0x1000/0x6120 [ 1234.086978][T19755] ? rcu_is_watching+0x12/0xc0 [ 1234.087015][T19755] ? cap_capable+0x107/0x460 [ 1234.087058][T19755] mmap_region+0x180/0x3e0 [ 1234.087101][T19755] do_mmap+0xc63/0x12f0 [ 1234.087134][T19755] ? __pfx_do_mmap+0x10/0x10 [ 1234.087161][T19755] ? __pfx_down_write_killable+0x10/0x10 [ 1234.087206][T19755] vm_mmap_pgoff+0x29e/0x470 [ 1234.087239][T19755] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1234.087269][T19755] ? do_futex+0x192/0x350 [ 1234.087302][T19755] ? __pfx_do_futex+0x10/0x10 [ 1234.087339][T19755] ksys_mmap_pgoff+0xe1/0x650 [ 1234.087368][T19755] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1234.087395][T19755] ? xfd_validate_state+0x129/0x190 [ 1234.087436][T19755] __x64_sys_mmap+0x125/0x190 [ 1234.087482][T19755] do_syscall_64+0x106/0xf80 [ 1234.087516][T19755] ? clear_bhb_loop+0x40/0x90 [ 1234.087547][T19755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.087573][T19755] RIP: 0033:0x7eff8979c799 [ 1234.087594][T19755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1234.087619][T19755] RSP: 002b:00007eff875b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1234.087644][T19755] RAX: ffffffffffffffda RBX: 00007eff89a16270 RCX: 00007eff8979c799 [ 1234.087662][T19755] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 1234.087678][T19755] RBP: 00007eff89832c99 R08: fffffffffffffffa R09: 0000000000008000 [ 1234.087694][T19755] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1234.087710][T19755] R13: 00007eff89a16308 R14: 00007eff89a16270 R15: 00007fff9a3cc128 [ 1234.087743][T19755] [ 1235.919711][T16264] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1235.962933][T19777] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1236.047651][T19777] vhci_hcd vhci_hcd.1: invalid port number 47 [ 1236.096749][T19777] vhci_hcd vhci_hcd.1: default hub control req: 2f64 v7665 i002f l25710 [ 1236.117405][T19781] netlink: 342 bytes leftover after parsing attributes in process `syz.6.3089'. [ 1237.311856][T19791] netlink: 'syz.5.3092': attribute type 8 has an invalid length. [ 1237.811243][T19800] FAULT_INJECTION: forcing a failure. [ 1237.811243][T19800] name failslab, interval 1, probability 0, space 0, times 0 [ 1237.904702][T19800] CPU: 0 UID: 0 PID: 19800 Comm: syz.6.3094 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1237.904748][T19800] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1237.904759][T19800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1237.904775][T19800] Call Trace: [ 1237.904784][T19800] [ 1237.904794][T19800] dump_stack_lvl+0x100/0x190 [ 1237.904839][T19800] should_fail_ex.cold+0x5/0xa [ 1237.904869][T19800] should_failslab+0xc2/0x120 [ 1237.904896][T19800] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1237.904930][T19800] ? ima_calc_file_hash_tfm+0x236/0x350 [ 1237.904972][T19800] ? sha256_init+0xd/0xc0 [ 1237.905003][T19800] ima_calc_file_hash_tfm+0x236/0x350 [ 1237.905046][T19800] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10 [ 1237.905120][T19800] ? stack_trace_save+0x8e/0xc0 [ 1237.905143][T19800] ? look_up_lock_class+0x55/0x120 [ 1237.905180][T19800] ? ima_alloc_tfm+0x21a/0x2e0 [ 1237.905217][T19800] ? generic_fillattr+0x6c9/0x940 [ 1237.905248][T19800] ima_calc_file_hash+0x18c/0x480 [ 1237.905275][T19800] ima_collect_measurement+0x887/0xa40 [ 1237.905307][T19800] ? ima_file_mmap+0x1c4/0x1f0 [ 1237.905354][T19800] ? __pfx_ima_collect_measurement+0x10/0x10 [ 1237.905381][T19800] ? lock_acquire+0x1cf/0x380 [ 1237.905429][T19800] ? process_measurement+0x5ab/0x2350 [ 1237.905468][T19800] ? is_bad_inode+0xd/0x40 [ 1237.905505][T19800] ? xattr_resolve_name+0x27d/0x3f0 [ 1237.905549][T19800] ? vfs_getxattr_alloc+0xec/0x350 [ 1237.905579][T19800] ? ima_get_hash_algo+0x22d/0x400 [ 1237.905615][T19800] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 1237.905657][T19800] ? process_measurement+0xdfe/0x2350 [ 1237.905694][T19800] process_measurement+0xdfe/0x2350 [ 1237.905744][T19800] ? stack_trace_save+0x8e/0xc0 [ 1237.905769][T19800] ? __pfx_process_measurement+0x10/0x10 [ 1237.905809][T19800] ? __lock_acquire+0x4a5/0x2630 [ 1237.905839][T19800] ? __kasan_slab_alloc+0x89/0x90 [ 1237.905861][T19800] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1237.905900][T19800] ? init_file+0x95/0x480 [ 1237.905927][T19800] ? alloc_empty_file+0x73/0x1c0 [ 1237.905956][T19800] ? alloc_file_pseudo+0x13a/0x230 [ 1237.905986][T19800] ? ksys_mmap_pgoff+0x232/0x650 [ 1237.906010][T19800] ? __x64_sys_mmap+0x125/0x190 [ 1237.906046][T19800] ? do_syscall_64+0x106/0xf80 [ 1237.906106][T19800] ? __pfx_aa_file_perm+0x10/0x10 [ 1237.906149][T19800] ima_file_mmap+0x1c4/0x1f0 [ 1237.906190][T19800] ? __pfx_ima_file_mmap+0x10/0x10 [ 1237.906236][T19800] security_mmap_file+0x278/0x9b0 [ 1237.906268][T19800] vm_mmap_pgoff+0xec/0x470 [ 1237.906307][T19800] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1237.906333][T19800] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1237.906368][T19800] ? hugetlbfs_get_inode+0x36e/0x750 [ 1237.906404][T19800] ksys_mmap_pgoff+0x273/0x650 [ 1237.906432][T19800] ? __x64_sys_futex+0x358/0x4d0 [ 1237.906466][T19800] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1237.906492][T19800] ? xfd_validate_state+0x129/0x190 [ 1237.906534][T19800] __x64_sys_mmap+0x125/0x190 [ 1237.906574][T19800] do_syscall_64+0x106/0xf80 [ 1237.906607][T19800] ? clear_bhb_loop+0x40/0x90 [ 1237.906637][T19800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1237.906663][T19800] RIP: 0033:0x7eff8979c799 [ 1237.906684][T19800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1237.906709][T19800] RSP: 002b:00007eff8a56e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1237.906734][T19800] RAX: ffffffffffffffda RBX: 00007eff89a15fa0 RCX: 00007eff8979c799 [ 1237.906752][T19800] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 1237.906767][T19800] RBP: 00007eff89832c99 R08: 0000000000000401 R09: 0000300000004000 [ 1237.906784][T19800] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1237.906800][T19800] R13: 00007eff89a16038 R14: 00007eff89a15fa0 R15: 00007fff9a3cc128 [ 1237.906833][T19800] [ 1238.804014][ T29] audit: type=1800 audit(4294972017.695:32): pid=19800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3094" name="anon_hugepage" dev="hugetlbfs" ino=164706 res=0 errno=0 [ 1239.610151][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.618657][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1245.085879][T19900] futex_wake_op: syz.5.3122 tries to shift op by -2048; fix this program [ 1245.086021][T19900] futex_wake_op: syz.5.3122 tries to shift op by -2048; fix this program [ 1245.556440][T19915] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3126'. [ 1245.660345][T19915] team0: Port device team_slave_0 removed [ 1245.928285][T19925] netlink: 'syz.7.3129': attribute type 8 has an invalid length. [ 1247.072649][T19946] vhci_hcd vhci_hcd.2: invalid port number 194 [ 1247.105597][T19946] vhci_hcd vhci_hcd.2: invalid port number 194 [ 1247.254869][T19950] Scaler: ================= START STATUS ================= [ 1247.337789][T19950] Scaler: ================== END STATUS ================== [ 1247.740938][T19964] FAULT_INJECTION: forcing a failure. [ 1247.740938][T19964] name failslab, interval 1, probability 0, space 0, times 0 [ 1247.775651][T19964] CPU: 0 UID: 0 PID: 19964 Comm: syz.7.3140 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1247.775721][T19964] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1247.775732][T19964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1247.775749][T19964] Call Trace: [ 1247.775758][T19964] [ 1247.775768][T19964] dump_stack_lvl+0x100/0x190 [ 1247.775813][T19964] should_fail_ex.cold+0x5/0xa [ 1247.775843][T19964] should_failslab+0xc2/0x120 [ 1247.775869][T19964] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1247.775909][T19964] ? __d_alloc+0x34/0xa80 [ 1247.775936][T19964] ? __sys_socket+0x14d/0x260 [ 1247.775963][T19964] ? do_syscall_64+0x106/0xf80 [ 1247.776005][T19964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.776037][T19964] __d_alloc+0x34/0xa80 [ 1247.776069][T19964] d_alloc_pseudo+0x1c/0xc0 [ 1247.776104][T19964] alloc_file_pseudo+0xcf/0x230 [ 1247.776138][T19964] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1247.776170][T19964] ? alloc_fd+0x476/0x790 [ 1247.776201][T19964] sock_alloc_file+0x50/0x210 [ 1247.776240][T19964] __sys_socket+0x1c0/0x260 [ 1247.776269][T19964] ? __pfx___sys_socket+0x10/0x10 [ 1247.776304][T19964] __x64_sys_socket+0x72/0xb0 [ 1247.776329][T19964] ? lockdep_hardirqs_on+0x78/0x100 [ 1247.776363][T19964] do_syscall_64+0x106/0xf80 [ 1247.776396][T19964] ? clear_bhb_loop+0x40/0x90 [ 1247.776427][T19964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.776453][T19964] RIP: 0033:0x7f7432b9c799 [ 1247.776474][T19964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1247.776499][T19964] RSP: 002b:00007f7433b34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1247.776524][T19964] RAX: ffffffffffffffda RBX: 00007f7432e15fa0 RCX: 00007f7432b9c799 [ 1247.776541][T19964] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 000000000000002b [ 1247.776555][T19964] RBP: 00007f7432c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1247.776571][T19964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1247.776586][T19964] R13: 00007f7432e16038 R14: 00007f7432e15fa0 R15: 00007ffd50cc4c18 [ 1247.776616][T19964] [ 1250.988404][T16264] block nbd4: Receive control failed (result -32) [ 1251.813866][T20021] netlink: 'syz.7.3158': attribute type 8 has an invalid length. [ 1253.569382][T20047] zswap: compressor n%ec0.][ȲG̑%>ۼPZC 5\&ݽ6Jz|MGHNW&GP"7n"&H۹xmLxx1&ARKtIeOĶSR not available [ 1254.925599][T20060] futex_wake_op: syz.6.3169 tries to shift op by -2048; fix this program [ 1254.979719][T20060] futex_wake_op: syz.6.3169 tries to shift op by -2048; fix this program [ 1255.571403][T20076] random: crng reseeded on system resumption [ 1257.072657][T20103] FAULT_INJECTION: forcing a failure. [ 1257.072657][T20103] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1257.208091][T20103] CPU: 0 UID: 0 PID: 20103 Comm: syz.5.3181 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1257.208133][T20103] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1257.208142][T20103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1257.208157][T20103] Call Trace: [ 1257.208165][T20103] [ 1257.208175][T20103] dump_stack_lvl+0x100/0x190 [ 1257.208217][T20103] should_fail_ex.cold+0x5/0xa [ 1257.208241][T20103] ? prepare_alloc_pages+0x16d/0x5f0 [ 1257.208272][T20103] should_fail_alloc_page+0xeb/0x140 [ 1257.208299][T20103] prepare_alloc_pages+0x1f0/0x5f0 [ 1257.208326][T20103] ? rcu_is_watching+0x12/0xc0 [ 1257.208366][T20103] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1257.208403][T20103] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 1257.208440][T20103] ? __pfx_css_rstat_updated+0x10/0x10 [ 1257.208477][T20103] ? find_held_lock+0x2b/0x80 [ 1257.208499][T20103] ? rcu_read_unlock+0x17/0x60 [ 1257.208534][T20103] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1257.208569][T20103] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1257.208604][T20103] ? page_counter_charge+0x1d2/0x240 [ 1257.208636][T20103] ? rcu_is_watching+0x12/0xc0 [ 1257.208671][T20103] ? trace_mm_page_alloc+0x17a/0x1d0 [ 1257.208708][T20103] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1257.208749][T20103] ? policy_nodemask+0xed/0x4f0 [ 1257.208776][T20103] alloc_pages_mpol+0x1fb/0x550 [ 1257.208802][T20103] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1257.208827][T20103] ? do_raw_spin_lock+0x128/0x260 [ 1257.208861][T20103] ? find_held_lock+0x2b/0x80 [ 1257.208882][T20103] ? __pud_alloc+0x529/0x6e0 [ 1257.208912][T20103] alloc_pages_noprof+0x131/0x390 [ 1257.208939][T20103] __pmd_alloc+0x3b/0x950 [ 1257.208964][T20103] ? __pud_alloc+0x52e/0x6e0 [ 1257.208993][T20103] walk_to_pmd+0x3a3/0x4c0 [ 1257.209023][T20103] get_locked_pte+0x25/0xc0 [ 1257.209052][T20103] map_ldt_struct+0x3c1/0xa70 [ 1257.209082][T20103] ? __pfx_map_ldt_struct+0x10/0x10 [ 1257.209106][T20103] ? alloc_pages_noprof+0x233/0x390 [ 1257.209136][T20103] write_ldt+0x6d3/0xd40 [ 1257.209164][T20103] ? __pfx_write_ldt+0x10/0x10 [ 1257.209189][T20103] ? xfd_validate_state+0x129/0x190 [ 1257.209231][T20103] __x64_sys_modify_ldt+0xb1/0x170 [ 1257.209257][T20103] do_syscall_64+0x106/0xf80 [ 1257.209289][T20103] ? clear_bhb_loop+0x40/0x90 [ 1257.209318][T20103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.209343][T20103] RIP: 0033:0x7fcff279c799 [ 1257.209363][T20103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1257.209385][T20103] RSP: 002b:00007fcff09f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 1257.209408][T20103] RAX: ffffffffffffffda RBX: 00007fcff2a15fa0 RCX: 00007fcff279c799 [ 1257.209424][T20103] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000001 [ 1257.209439][T20103] RBP: 00007fcff2832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1257.209453][T20103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1257.209467][T20103] R13: 00007fcff2a16038 R14: 00007fcff2a15fa0 R15: 00007fff1b5010b8 [ 1257.209498][T20103] [ 1258.388641][T20124] serio: Serial port pty6 [ 1259.169539][T16264] block nbd5: Receive control failed (result -32) [ 1259.736451][T20138] netlink: 25 bytes leftover after parsing attributes in process `syz.6.3191'. [ 1260.688023][T20150] FAULT_INJECTION: forcing a failure. [ 1260.688023][T20150] name failslab, interval 1, probability 0, space 0, times 0 [ 1260.782143][T20150] CPU: 0 UID: 0 PID: 20150 Comm: syz.5.3195 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1260.782189][T20150] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1260.782199][T20150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1260.782214][T20150] Call Trace: [ 1260.782223][T20150] [ 1260.782233][T20150] dump_stack_lvl+0x100/0x190 [ 1260.782278][T20150] should_fail_ex.cold+0x5/0xa [ 1260.782308][T20150] should_failslab+0xc2/0x120 [ 1260.782334][T20150] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1260.782381][T20150] ? ptlock_alloc+0x1f/0x70 [ 1260.782421][T20150] ptlock_alloc+0x1f/0x70 [ 1260.782454][T20150] pte_alloc_one+0x82/0x3d0 [ 1260.782483][T20150] do_huge_pmd_anonymous_page+0x2bc/0x1c40 [ 1260.782523][T20150] ? __pmd_alloc+0x3fb/0x950 [ 1260.782554][T20150] __handle_mm_fault+0x1e9e/0x2b60 [ 1260.782597][T20150] ? __lock_acquire+0x4a5/0x2630 [ 1260.782630][T20150] ? __pfx___handle_mm_fault+0x10/0x10 [ 1260.782662][T20150] ? __pfx_mt_find+0x10/0x10 [ 1260.782703][T20150] ? __lock_acquire+0x4a5/0x2630 [ 1260.782742][T20150] ? pmdp_set_access_flags+0x12d/0x1a0 [ 1260.782779][T20150] handle_mm_fault+0x36d/0xa20 [ 1260.782818][T20150] __get_user_pages+0xf9c/0x34d0 [ 1260.782858][T20150] ? __pfx___get_user_pages+0x10/0x10 [ 1260.782902][T20150] populate_vma_page_range+0x267/0x3f0 [ 1260.782934][T20150] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1260.782964][T20150] ? __pfx_find_vma_intersection+0x10/0x10 [ 1260.782992][T20150] ? do_mmap+0x93f/0x12f0 [ 1260.783022][T20150] __mm_populate+0x107/0x3a0 [ 1260.783053][T20150] ? __pfx___mm_populate+0x10/0x10 [ 1260.783085][T20150] ? up_write+0x290/0x4f0 [ 1260.783137][T20150] vm_mmap_pgoff+0x37f/0x470 [ 1260.783176][T20150] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1260.783205][T20150] ? do_futex+0x192/0x350 [ 1260.783238][T20150] ? __pfx_do_futex+0x10/0x10 [ 1260.783275][T20150] ksys_mmap_pgoff+0xe1/0x650 [ 1260.783301][T20150] ? __x64_sys_futex+0x34f/0x4d0 [ 1260.783332][T20150] ? __x64_sys_futex+0x358/0x4d0 [ 1260.783371][T20150] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1260.783399][T20150] ? xfd_validate_state+0x129/0x190 [ 1260.783442][T20150] __x64_sys_mmap+0x125/0x190 [ 1260.783484][T20150] do_syscall_64+0x106/0xf80 [ 1260.783517][T20150] ? clear_bhb_loop+0x40/0x90 [ 1260.783547][T20150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1260.783573][T20150] RIP: 0033:0x7fcff279c799 [ 1260.783595][T20150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1260.783621][T20150] RSP: 002b:00007fcff09f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1260.783645][T20150] RAX: ffffffffffffffda RBX: 00007fcff2a15fa0 RCX: 00007fcff279c799 [ 1260.783662][T20150] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 1260.783678][T20150] RBP: 00007fcff2832c99 R08: 0000000000000002 R09: 0000000000008000 [ 1260.783694][T20150] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1260.783710][T20150] R13: 00007fcff2a16038 R14: 00007fcff2a15fa0 R15: 00007fff1b5010b8 [ 1260.783743][T20150] [ 1264.009881][T20184] binder: 20183:20184 ioctl c0306201 200000000000 returned -14 [ 1265.143693][T20205] netlink: 146 bytes leftover after parsing attributes in process `syz.7.3214'. [ 1265.754233][T20222] FAULT_INJECTION: forcing a failure. [ 1265.754233][T20222] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1265.903843][T20222] CPU: 0 UID: 0 PID: 20222 Comm: syz.8.3219 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1265.903887][T20222] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1265.903897][T20222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1265.903913][T20222] Call Trace: [ 1265.903921][T20222] [ 1265.903931][T20222] dump_stack_lvl+0x100/0x190 [ 1265.903974][T20222] should_fail_ex.cold+0x5/0xa [ 1265.904003][T20222] get_futex_key+0x1d2/0x1620 [ 1265.904036][T20222] ? __pfx_get_futex_key+0x10/0x10 [ 1265.904067][T20222] ? lock_acquire+0x1cf/0x380 [ 1265.904108][T20222] futex_wake+0xea/0x530 [ 1265.904146][T20222] ? __pfx_futex_wake+0x10/0x10 [ 1265.904188][T20222] ? exit_mm_release+0x19/0x30 [ 1265.904224][T20222] do_futex+0x32b/0x350 [ 1265.904255][T20222] ? __pfx_do_futex+0x10/0x10 [ 1265.904284][T20222] ? __might_fault+0xc5/0x140 [ 1265.904325][T20222] mm_release+0x24a/0x2f0 [ 1265.904350][T20222] do_exit+0x704/0x2b60 [ 1265.904385][T20222] ? __pfx_do_exit+0x10/0x10 [ 1265.904415][T20222] ? do_raw_spin_lock+0x128/0x260 [ 1265.904448][T20222] ? find_held_lock+0x2b/0x80 [ 1265.904469][T20222] ? get_signal+0x7e0/0x21e0 [ 1265.904497][T20222] do_group_exit+0xd5/0x2a0 [ 1265.904530][T20222] get_signal+0x1ec7/0x21e0 [ 1265.904565][T20222] ? __pfx_get_signal+0x10/0x10 [ 1265.904591][T20222] ? do_futex+0x192/0x350 [ 1265.904624][T20222] arch_do_signal_or_restart+0x91/0x770 [ 1265.904655][T20222] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 1265.904688][T20222] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1265.904725][T20222] ? __pfx___x64_sys_futex+0x10/0x10 [ 1265.904763][T20222] exit_to_user_mode_loop+0x86/0x4a0 [ 1265.904798][T20222] do_syscall_64+0x668/0xf80 [ 1265.904830][T20222] ? clear_bhb_loop+0x40/0x90 [ 1265.904859][T20222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1265.904883][T20222] RIP: 0033:0x7fa7c219c799 [ 1265.904904][T20222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1265.904928][T20222] RSP: 002b:00007fa7c2f9b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1265.904952][T20222] RAX: fffffffffffffe00 RBX: 00007fa7c2416098 RCX: 00007fa7c219c799 [ 1265.904968][T20222] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa7c2416098 [ 1265.904983][T20222] RBP: 00007fa7c2416090 R08: 0000000000000000 R09: 0000000000000000 [ 1265.904998][T20222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1265.905012][T20222] R13: 00007fa7c2416128 R14: 00007ffca473ca70 R15: 00007ffca473cb58 [ 1265.905042][T20222] [ 1266.906776][T20241] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3224'. [ 1269.327991][T20273] netlink: 'syz.5.3235': attribute type 8 has an invalid length. [ 1269.566595][T20276] binder: 20275:20276 ioctl c0306201 200000000000 returned -14 [ 1269.604644][T20278] binder: 20277:20278 ioctl c0306201 200000000000 returned -14 [ 1269.853254][T20280] FAULT_INJECTION: forcing a failure. [ 1269.853254][T20280] name failslab, interval 1, probability 0, space 0, times 0 [ 1269.919590][T20280] CPU: 0 UID: 0 PID: 20280 Comm: syz.6.3240 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1269.919635][T20280] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1269.919644][T20280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1269.919659][T20280] Call Trace: [ 1269.919667][T20280] [ 1269.919677][T20280] dump_stack_lvl+0x100/0x190 [ 1269.919720][T20280] should_fail_ex.cold+0x5/0xa [ 1269.919748][T20280] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1269.919781][T20280] should_failslab+0xc2/0x120 [ 1269.919806][T20280] __kmalloc_noprof+0xe0/0x850 [ 1269.919849][T20280] tomoyo_realpath_from_path+0xb6/0x690 [ 1269.919887][T20280] tomoyo_path_number_perm+0x23c/0x580 [ 1269.919912][T20280] ? tomoyo_path_number_perm+0x22e/0x580 [ 1269.919940][T20280] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1269.919995][T20280] ? find_held_lock+0x2b/0x80 [ 1269.920016][T20280] ? __fget_files+0x215/0x3d0 [ 1269.920037][T20280] ? hook_file_ioctl_common+0x146/0x410 [ 1269.920070][T20280] ? __fget_files+0x21f/0x3d0 [ 1269.920105][T20280] security_file_ioctl+0xd3/0x230 [ 1269.920133][T20280] __x64_sys_ioctl+0xb7/0x210 [ 1269.920171][T20280] do_syscall_64+0x106/0xf80 [ 1269.920208][T20280] ? clear_bhb_loop+0x40/0x90 [ 1269.920238][T20280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.920263][T20280] RIP: 0033:0x7eff8979c799 [ 1269.920282][T20280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1269.920307][T20280] RSP: 002b:00007eff8a56e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1269.920330][T20280] RAX: ffffffffffffffda RBX: 00007eff89a15fa0 RCX: 00007eff8979c799 [ 1269.920347][T20280] RDX: 0000200000000000 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1269.920362][T20280] RBP: 00007eff8a56e090 R08: 0000000000000000 R09: 0000000000000000 [ 1269.920377][T20280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1269.920392][T20280] R13: 00007eff89a16038 R14: 00007eff89a15fa0 R15: 00007fff9a3cc128 [ 1269.920422][T20280] [ 1269.921442][T20280] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1270.187312][T20282] FAULT_INJECTION: forcing a failure. [ 1270.187312][T20282] name failslab, interval 1, probability 0, space 0, times 0 [ 1270.258312][T20282] CPU: 0 UID: 0 PID: 20282 Comm: syz.5.3241 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1270.258359][T20282] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1270.258370][T20282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1270.258385][T20282] Call Trace: [ 1270.258394][T20282] [ 1270.258405][T20282] dump_stack_lvl+0x100/0x190 [ 1270.258450][T20282] should_fail_ex.cold+0x5/0xa [ 1270.258481][T20282] ? tomoyo_encode2+0xfb/0x3c0 [ 1270.258513][T20282] should_failslab+0xc2/0x120 [ 1270.258540][T20282] __kmalloc_noprof+0xe0/0x850 [ 1270.258577][T20282] ? d_absolute_path+0x136/0x1b0 [ 1270.258617][T20282] tomoyo_encode2+0xfb/0x3c0 [ 1270.258652][T20282] tomoyo_encode+0x29/0x50 [ 1270.258682][T20282] tomoyo_realpath_from_path+0x18c/0x690 [ 1270.258722][T20282] tomoyo_check_open_permission+0x2af/0x3c0 [ 1270.258751][T20282] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1270.258806][T20282] ? lock_acquire+0x1cf/0x380 [ 1270.258837][T20282] ? find_held_lock+0x2b/0x80 [ 1270.258867][T20282] tomoyo_file_open+0x6b/0x90 [ 1270.258905][T20282] security_file_open+0xb5/0x1e0 [ 1270.258936][T20282] do_dentry_open+0x5aa/0x1660 [ 1270.258970][T20282] vfs_open+0x82/0x3f0 [ 1270.259004][T20282] path_openat+0x208c/0x31a0 [ 1270.259047][T20282] ? __pfx_path_openat+0x10/0x10 [ 1270.259085][T20282] do_file_open+0x20e/0x430 [ 1270.259113][T20282] ? __pfx_do_file_open+0x10/0x10 [ 1270.259162][T20282] ? alloc_fd+0x476/0x790 [ 1270.259190][T20282] ? do_getname+0x191/0x390 [ 1270.259224][T20282] do_sys_openat2+0x10d/0x1e0 [ 1270.259257][T20282] ? __pfx_do_sys_openat2+0x10/0x10 [ 1270.259292][T20282] ? __fget_files+0x21f/0x3d0 [ 1270.259325][T20282] __x64_sys_openat+0x12d/0x210 [ 1270.259360][T20282] ? __pfx___x64_sys_openat+0x10/0x10 [ 1270.259405][T20282] do_syscall_64+0x106/0xf80 [ 1270.259439][T20282] ? clear_bhb_loop+0x40/0x90 [ 1270.259470][T20282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1270.259498][T20282] RIP: 0033:0x7fcff279c799 [ 1270.259519][T20282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1270.259546][T20282] RSP: 002b:00007fcff09f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1270.259570][T20282] RAX: ffffffffffffffda RBX: 00007fcff2a15fa0 RCX: 00007fcff279c799 [ 1270.259587][T20282] RDX: 00000000000caa02 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1270.259603][T20282] RBP: 00007fcff2832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1270.259619][T20282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1270.259635][T20282] R13: 00007fcff2a16038 R14: 00007fcff2a15fa0 R15: 00007fff1b5010b8 [ 1270.259669][T20282] [ 1270.261851][T20282] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1270.985274][T20280] binder: 20279:20280 ioctl c0306201 200000000000 returned -14 [ 1271.485772][T20295] futex_wake_op: syz.8.3245 tries to shift op by -2048; fix this program [ 1271.606385][T20298] 0x000000000001-0x000000020000 : "" [ 1271.687086][T20298] ftl_cs: FTL header corrupt! [ 1272.051041][T20306] serio: Serial port pty6 [ 1273.238364][T20316] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3255'. [ 1273.560880][T20323] can: request_module (can-proto-0) failed. [ 1274.953086][ T29] audit: type=1800 audit(4294972053.947:33): pid=20354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3265" name="dbroot" dev="configfs" ino=168287 res=0 errno=0 [ 1275.019811][ T29] audit: type=1804 audit(4294972053.987:34): pid=20355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3265" name="/newroot/sys/kernel/config/target/dbroot" dev="configfs" ino=168287 res=1 errno=0 [ 1275.177805][ T29] audit: type=1800 audit(4294972053.987:35): pid=20355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3265" name="dbroot" dev="configfs" ino=168287 res=0 errno=0 [ 1277.828356][T20388] netlink: 'syz.5.3272': attribute type 8 has an invalid length. [ 1278.427152][T20397] vhci_hcd: not connected 4 [ 1278.732039][T20402] FAULT_INJECTION: forcing a failure. [ 1278.732039][T20402] name failslab, interval 1, probability 0, space 0, times 0 [ 1278.943400][T20402] CPU: 0 UID: 0 PID: 20402 Comm: syz.7.3276 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1278.943445][T20402] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1278.943454][T20402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1278.943469][T20402] Call Trace: [ 1278.943477][T20402] [ 1278.943488][T20402] dump_stack_lvl+0x100/0x190 [ 1278.943532][T20402] should_fail_ex.cold+0x5/0xa [ 1278.943560][T20402] ? tomoyo_encode2+0xfb/0x3c0 [ 1278.943591][T20402] should_failslab+0xc2/0x120 [ 1278.943616][T20402] __kmalloc_noprof+0xe0/0x850 [ 1278.943651][T20402] ? d_absolute_path+0x136/0x1b0 [ 1278.943689][T20402] tomoyo_encode2+0xfb/0x3c0 [ 1278.943723][T20402] tomoyo_encode+0x29/0x50 [ 1278.943751][T20402] tomoyo_realpath_from_path+0x18c/0x690 [ 1278.943789][T20402] tomoyo_path_number_perm+0x23c/0x580 [ 1278.943815][T20402] ? tomoyo_path_number_perm+0x22e/0x580 [ 1278.943842][T20402] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1278.943897][T20402] ? find_held_lock+0x2b/0x80 [ 1278.943918][T20402] ? __fget_files+0x215/0x3d0 [ 1278.943939][T20402] ? hook_file_ioctl_common+0x146/0x410 [ 1278.943977][T20402] ? __fget_files+0x21f/0x3d0 [ 1278.944004][T20402] security_file_ioctl+0xd3/0x230 [ 1278.944032][T20402] __x64_sys_ioctl+0xb7/0x210 [ 1278.944070][T20402] do_syscall_64+0x106/0xf80 [ 1278.944103][T20402] ? clear_bhb_loop+0x40/0x90 [ 1278.944132][T20402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1278.944156][T20402] RIP: 0033:0x7f7432b9c799 [ 1278.944176][T20402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1278.944199][T20402] RSP: 002b:00007f7433b34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1278.944222][T20402] RAX: ffffffffffffffda RBX: 00007f7432e15fa0 RCX: 00007f7432b9c799 [ 1278.944238][T20402] RDX: 0000200000000000 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1278.944253][T20402] RBP: 00007f7433b34090 R08: 0000000000000000 R09: 0000000000000000 [ 1278.944267][T20402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1278.944282][T20402] R13: 00007f7432e16038 R14: 00007f7432e15fa0 R15: 00007ffd50cc4c18 [ 1278.944312][T20402] [ 1279.783937][T20407] ecryptfs_miscdev_response: (sizeof(*msg) + msg->data_len) = [1067213646]; data_size = [146]. Invalid packet. [ 1279.824781][T20407] ecryptfs_miscdev_write: Failed to deliver miscdev response to requesting operation; rc = [-22] [ 1279.933054][T20409] sd 0:0:1:0: PR command failed: 1026 [ 1279.938556][T20409] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1280.121896][T20402] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1280.172452][T20409] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1280.181757][T20402] binder: 20399:20402 ioctl c0306201 200000000000 returned -14 [ 1283.299033][T20450] random: crng reseeded on system resumption [ 1283.543470][T16264] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1284.584246][T20474] serio: Serial port pty6 [ 1285.185605][T20483] netlink: 'syz.5.3300': attribute type 8 has an invalid length. [ 1287.667684][T20526] openvswitch: netlink: Message has 4 unknown bytes. [ 1287.705789][T20526] binder: 20525:20526 unknown command 32896 [ 1287.735286][T20526] binder: 20525:20526 ioctl c0306201 200000000000 returned -22 [ 1287.842049][T20528] binder: 20527:20528 ioctl c0306201 200000000000 returned -14 [ 1288.059297][ T29] audit: type=1800 audit(4294972067.041:36): pid=20533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3312" name="members" dev="configfs" ino=169302 res=0 errno=0 [ 1288.513556][T20540] FAULT_INJECTION: forcing a failure. [ 1288.513556][T20540] name failslab, interval 1, probability 0, space 0, times 0 [ 1288.574905][T20540] CPU: 0 UID: 0 PID: 20540 Comm: syz.6.3314 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1288.574949][T20540] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1288.574959][T20540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1288.574973][T20540] Call Trace: [ 1288.574982][T20540] [ 1288.574992][T20540] dump_stack_lvl+0x100/0x190 [ 1288.575034][T20540] should_fail_ex.cold+0x5/0xa [ 1288.575062][T20540] should_failslab+0xc2/0x120 [ 1288.575088][T20540] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1288.575120][T20540] ? binder_get_thread+0x201/0x850 [ 1288.575178][T20540] binder_get_thread+0x201/0x850 [ 1288.575217][T20540] binder_ioctl+0x26f/0x7610 [ 1288.575263][T20540] ? tomoyo_path_number_perm+0x28f/0x580 [ 1288.575290][T20540] ? tomoyo_path_number_perm+0x28f/0x580 [ 1288.575320][T20540] ? tomoyo_path_number_perm+0x188/0x580 [ 1288.575347][T20540] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1288.575377][T20540] ? __pfx_binder_ioctl+0x10/0x10 [ 1288.575420][T20540] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1288.575461][T20540] ? do_vfs_ioctl+0x226/0x13e0 [ 1288.575497][T20540] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1288.575538][T20540] ? find_held_lock+0x2b/0x80 [ 1288.575559][T20540] ? __fget_files+0x215/0x3d0 [ 1288.575580][T20540] ? hook_file_ioctl_common+0x146/0x410 [ 1288.575613][T20540] ? __fget_files+0x21f/0x3d0 [ 1288.575638][T20540] ? __pfx_binder_ioctl+0x10/0x10 [ 1288.575677][T20540] __x64_sys_ioctl+0x18e/0x210 [ 1288.575712][T20540] do_syscall_64+0x106/0xf80 [ 1288.575745][T20540] ? clear_bhb_loop+0x40/0x90 [ 1288.575774][T20540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1288.575798][T20540] RIP: 0033:0x7eff8979c799 [ 1288.575818][T20540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1288.575843][T20540] RSP: 002b:00007eff8a56e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1288.575866][T20540] RAX: ffffffffffffffda RBX: 00007eff89a15fa0 RCX: 00007eff8979c799 [ 1288.575882][T20540] RDX: 0000200000000000 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1288.575897][T20540] RBP: 00007eff8a56e090 R08: 0000000000000000 R09: 0000000000000000 [ 1288.575912][T20540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1288.575926][T20540] R13: 00007eff89a16038 R14: 00007eff89a15fa0 R15: 00007fff9a3cc128 [ 1288.575957][T20540] [ 1289.981031][T20540] binder: 20539:20540 ioctl c0306201 200000000000 returned -12 [ 1290.918953][ T29] audit: type=1800 audit(4294972069.899:37): pid=20575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3324" name="lu_gp_id" dev="configfs" ino=169513 res=0 errno=0 [ 1291.098282][T20577] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3326'. [ 1291.625492][T20586] FAULT_INJECTION: forcing a failure. [ 1291.625492][T20586] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1291.681258][T20586] CPU: 0 UID: 0 PID: 20586 Comm: syz.5.3330 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1291.681304][T20586] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1291.681314][T20586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1291.681329][T20586] Call Trace: [ 1291.681338][T20586] [ 1291.681347][T20586] dump_stack_lvl+0x100/0x190 [ 1291.681392][T20586] should_fail_ex.cold+0x5/0xa [ 1291.681424][T20586] get_futex_key+0x1d2/0x1620 [ 1291.681457][T20586] ? __pfx_get_futex_key+0x10/0x10 [ 1291.681486][T20586] ? futex_hash+0x2c5/0x380 [ 1291.681514][T20586] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1291.681559][T20586] ? lookup_user_key+0x3f3/0x1300 [ 1291.681590][T20586] futex_wake+0xea/0x530 [ 1291.681627][T20586] ? __pfx_futex_wait+0x10/0x10 [ 1291.681665][T20586] ? __pfx_futex_wake+0x10/0x10 [ 1291.681702][T20586] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1291.681732][T20586] ? __pfx_msgctl_down+0x10/0x10 [ 1291.681772][T20586] do_futex+0x32b/0x350 [ 1291.681804][T20586] ? __pfx_do_futex+0x10/0x10 [ 1291.681837][T20586] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 1291.681869][T20586] ? __fget_files+0x21f/0x3d0 [ 1291.681895][T20586] __x64_sys_futex+0x34f/0x4d0 [ 1291.681932][T20586] ? __pfx___x64_sys_futex+0x10/0x10 [ 1291.681975][T20586] do_syscall_64+0x106/0xf80 [ 1291.682009][T20586] ? clear_bhb_loop+0x40/0x90 [ 1291.682040][T20586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.682065][T20586] RIP: 0033:0x7fcff279c799 [ 1291.682086][T20586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1291.682110][T20586] RSP: 002b:00007fcff09f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1291.682135][T20586] RAX: ffffffffffffffda RBX: 00007fcff2a15fa8 RCX: 00007fcff279c799 [ 1291.682152][T20586] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcff2a15fac [ 1291.682167][T20586] RBP: 00007fcff2a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1291.682183][T20586] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1291.682198][T20586] R13: 00007fcff2a16038 R14: 00007fff1b500fd0 R15: 00007fff1b5010b8 [ 1291.682236][T20586] [ 1291.907534][T20593] FAULT_INJECTION: forcing a failure. [ 1291.907534][T20593] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1291.921953][T20593] CPU: 0 UID: 0 PID: 20593 Comm: syz.7.3331 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1291.921995][T20593] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1291.922004][T20593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1291.922020][T20593] Call Trace: [ 1291.922028][T20593] [ 1291.922036][T20593] dump_stack_lvl+0x100/0x190 [ 1291.922080][T20593] should_fail_ex.cold+0x5/0xa [ 1291.922108][T20593] get_futex_key+0x1d2/0x1620 [ 1291.922141][T20593] ? __pfx_get_futex_key+0x10/0x10 [ 1291.922170][T20593] ? find_held_lock+0x2b/0x80 [ 1291.922192][T20593] ? is_bpf_text_address+0x8a/0x1a0 [ 1291.922235][T20593] ? is_bpf_text_address+0x8a/0x1a0 [ 1291.922276][T20593] futex_wait_setup+0x83/0x510 [ 1291.922320][T20593] __futex_wait+0x19f/0x300 [ 1291.922357][T20593] ? __pfx___futex_wait+0x10/0x10 [ 1291.922397][T20593] ? __pfx_futex_wake_mark+0x10/0x10 [ 1291.922436][T20593] ? futex_hash+0x2c5/0x380 [ 1291.922472][T20593] futex_wait+0xed/0x380 [ 1291.922507][T20593] ? __pfx_futex_wait+0x10/0x10 [ 1291.922557][T20593] do_futex+0x1ef/0x350 [ 1291.922587][T20593] ? __pfx_do_futex+0x10/0x10 [ 1291.922625][T20593] __x64_sys_futex+0x34f/0x4d0 [ 1291.922659][T20593] ? __pfx___x64_sys_futex+0x10/0x10 [ 1291.922700][T20593] do_syscall_64+0x106/0xf80 [ 1291.922733][T20593] ? clear_bhb_loop+0x40/0x90 [ 1291.922762][T20593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.922786][T20593] RIP: 0033:0x7f7432b9c799 [ 1291.922807][T20593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1291.922831][T20593] RSP: 002b:00007f7433b130e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1291.922854][T20593] RAX: ffffffffffffffda RBX: 00007f7432e16098 RCX: 00007f7432b9c799 [ 1291.922870][T20593] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7432e16098 [ 1291.922885][T20593] RBP: 00007f7432e16090 R08: 0000000000000000 R09: 0000000000000000 [ 1291.922900][T20593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1291.922915][T20593] R13: 00007f7432e16128 R14: 00007ffd50cc4b30 R15: 00007ffd50cc4c18 [ 1291.922945][T20593] [ 1294.252266][T20624] NFSD: Failed to start, no listeners configured. [ 1294.377874][T20634] nvme_fabrics: unknown parameter or missing value '@' in ctrl creation request [ 1298.505187][T20712] netlink: 342 bytes leftover after parsing attributes in process `syz.5.3364'. [ 1299.113767][T20730] FAULT_INJECTION: forcing a failure. [ 1299.113767][T20730] name failslab, interval 1, probability 0, space 0, times 0 [ 1299.113842][T20730] CPU: 0 UID: 0 PID: 20730 Comm: syz.6.3369 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1299.113883][T20730] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1299.113893][T20730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1299.113909][T20730] Call Trace: [ 1299.113917][T20730] [ 1299.113927][T20730] dump_stack_lvl+0x100/0x190 [ 1299.113972][T20730] should_fail_ex.cold+0x5/0xa [ 1299.114003][T20730] should_failslab+0xc2/0x120 [ 1299.114029][T20730] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1299.114065][T20730] ? ima_d_path+0xc9/0x260 [ 1299.114090][T20730] ? xattr_resolve_name+0x27d/0x3f0 [ 1299.114136][T20730] ima_d_path+0xc9/0x260 [ 1299.114161][T20730] ? __pfx_ima_d_path+0x10/0x10 [ 1299.114191][T20730] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 1299.114236][T20730] process_measurement+0x1b25/0x2350 [ 1299.114308][T20730] ? stack_trace_save+0x8e/0xc0 [ 1299.114333][T20730] ? __pfx_process_measurement+0x10/0x10 [ 1299.114373][T20730] ? __lock_acquire+0x4a5/0x2630 [ 1299.114405][T20730] ? __kasan_slab_alloc+0x89/0x90 [ 1299.114428][T20730] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1299.114466][T20730] ? init_file+0x95/0x480 [ 1299.114492][T20730] ? alloc_empty_file+0x73/0x1c0 [ 1299.114521][T20730] ? alloc_file_pseudo+0x13a/0x230 [ 1299.114550][T20730] ? ksys_mmap_pgoff+0x232/0x650 [ 1299.114574][T20730] ? __x64_sys_mmap+0x125/0x190 [ 1299.114610][T20730] ? do_syscall_64+0x106/0xf80 [ 1299.114672][T20730] ? __pfx_aa_file_perm+0x10/0x10 [ 1299.114730][T20730] ima_file_mmap+0x1c4/0x1f0 [ 1299.114771][T20730] ? __pfx_ima_file_mmap+0x10/0x10 [ 1299.114817][T20730] security_mmap_file+0x278/0x9b0 [ 1299.114856][T20730] vm_mmap_pgoff+0xec/0x470 [ 1299.114889][T20730] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1299.114916][T20730] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1299.114951][T20730] ? hugetlbfs_get_inode+0x36e/0x750 [ 1299.114988][T20730] ksys_mmap_pgoff+0x273/0x650 [ 1299.115015][T20730] ? __x64_sys_futex+0x358/0x4d0 [ 1299.115049][T20730] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1299.115075][T20730] ? xfd_validate_state+0x129/0x190 [ 1299.115120][T20730] __x64_sys_mmap+0x125/0x190 [ 1299.115161][T20730] do_syscall_64+0x106/0xf80 [ 1299.115193][T20730] ? clear_bhb_loop+0x40/0x90 [ 1299.115224][T20730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1299.115249][T20730] RIP: 0033:0x7eff8979c799 [ 1299.115271][T20730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1299.115297][T20730] RSP: 002b:00007eff8a56e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1299.115321][T20730] RAX: ffffffffffffffda RBX: 00007eff89a15fa0 RCX: 00007eff8979c799 [ 1299.115338][T20730] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 1299.115355][T20730] RBP: 00007eff89832c99 R08: 0000000000000401 R09: 0000300000020000 [ 1299.115372][T20730] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1299.115388][T20730] R13: 00007eff89a16038 R14: 00007eff89a15fa0 R15: 00007fff9a3cc128 [ 1299.115421][T20730] [ 1299.391329][T16264] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1300.564727][T20751] FAULT_INJECTION: forcing a failure. [ 1300.564727][T20751] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1300.564770][T20751] CPU: 0 UID: 0 PID: 20751 Comm: syz.6.3376 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1300.564818][T20751] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1300.564827][T20751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1300.564847][T20751] Call Trace: [ 1300.564856][T20751] [ 1300.564865][T20751] dump_stack_lvl+0x100/0x190 [ 1300.564906][T20751] should_fail_ex.cold+0x5/0xa [ 1300.564930][T20751] ? prepare_alloc_pages+0x16d/0x5f0 [ 1300.564960][T20751] should_fail_alloc_page+0xeb/0x140 [ 1300.564987][T20751] prepare_alloc_pages+0x1f0/0x5f0 [ 1300.565018][T20751] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1300.565056][T20751] ? policy_nodemask+0xed/0x4f0 [ 1300.565090][T20751] ? __lock_acquire+0x4a5/0x2630 [ 1300.565121][T20751] ? kimage_free_page_list+0x185/0x240 [ 1300.565146][T20751] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1300.565185][T20751] ? kimage_alloc_control_pages+0x3f7/0xa20 [ 1300.565213][T20751] ? lock_acquire+0x1cf/0x380 [ 1300.565245][T20751] ? find_next_res+0x440/0x510 [ 1300.565272][T20751] ? find_next_res+0x440/0x510 [ 1300.565304][T20751] ? do_raw_read_unlock+0x3f/0x70 [ 1300.565339][T20751] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1300.565382][T20751] ? policy_nodemask+0xed/0x4f0 [ 1300.565409][T20751] alloc_pages_mpol+0x1fb/0x550 [ 1300.565435][T20751] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1300.565462][T20751] ? __pti_set_user_pgtbl+0xf1/0x190 [ 1300.565504][T20751] alloc_pages_noprof+0x131/0x390 [ 1300.565531][T20751] get_zeroed_page_noprof+0x18/0xb0 [ 1300.565557][T20751] machine_kexec_prepare+0x107b/0x14d0 [ 1300.565599][T20751] ? __pfx_machine_kexec_prepare+0x10/0x10 [ 1300.565634][T20751] ? __pfx_alloc_pgt_page+0x10/0x10 [ 1300.565668][T20751] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 1300.565701][T20751] do_kexec_load+0x32c/0x810 [ 1300.565730][T20751] ? __pfx_do_kexec_load+0x10/0x10 [ 1300.565758][T20751] ? _copy_from_user+0x59/0xd0 [ 1300.565789][T20751] __x64_sys_kexec_load+0x1bf/0x230 [ 1300.565824][T20751] do_syscall_64+0x106/0xf80 [ 1300.565858][T20751] ? clear_bhb_loop+0x40/0x90 [ 1300.565887][T20751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1300.565912][T20751] RIP: 0033:0x7eff8979c799 [ 1300.565931][T20751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1300.565955][T20751] RSP: 002b:00007eff879f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 1300.565977][T20751] RAX: ffffffffffffffda RBX: 00007eff89a16090 RCX: 00007eff8979c799 [ 1300.565993][T20751] RDX: 0000200000000080 RSI: 0000000000000002 RDI: 00000000ffffffff [ 1300.566009][T20751] RBP: 00007eff89832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1300.566024][T20751] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 1300.566039][T20751] R13: 00007eff89a16128 R14: 00007eff89a16090 R15: 00007fff9a3cc128 [ 1300.566069][T20751] [ 1300.667562][T20755] netlink: 'syz.8.3375': attribute type 8 has an invalid length. [ 1301.091491][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1301.091553][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.098652][T20761] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3380'. [ 1301.865177][T20780] futex_wake_op: syz.5.3385 tries to shift op by -2048; fix this program [ 1301.865347][T20780] futex_wake_op: syz.5.3385 tries to shift op by -2048; fix this program [ 1301.867137][T20780] 0x000000000001-0x000000020000 : "" [ 1301.942078][T20780] ftl_cs: FTL header corrupt! [ 1303.427515][T20804] FAULT_INJECTION: forcing a failure. [ 1303.427515][T20804] name failslab, interval 1, probability 0, space 0, times 0 [ 1303.504086][T20804] CPU: 0 UID: 0 PID: 20804 Comm: syz.5.3393 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1303.504133][T20804] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1303.504143][T20804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1303.504160][T20804] Call Trace: [ 1303.504169][T20804] [ 1303.504179][T20804] dump_stack_lvl+0x100/0x190 [ 1303.504225][T20804] should_fail_ex.cold+0x5/0xa [ 1303.504256][T20804] should_failslab+0xc2/0x120 [ 1303.504282][T20804] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1303.504317][T20804] ? ima_calc_file_hash_tfm+0x236/0x350 [ 1303.504359][T20804] ? sha256_init+0xd/0xc0 [ 1303.504389][T20804] ima_calc_file_hash_tfm+0x236/0x350 [ 1303.504433][T20804] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10 [ 1303.504507][T20804] ? stack_trace_save+0x8e/0xc0 [ 1303.504530][T20804] ? look_up_lock_class+0x55/0x120 [ 1303.504566][T20804] ? ima_alloc_tfm+0x21a/0x2e0 [ 1303.504604][T20804] ? generic_fillattr+0x6c9/0x940 [ 1303.504637][T20804] ima_calc_file_hash+0x18c/0x480 [ 1303.504664][T20804] ima_collect_measurement+0x887/0xa40 [ 1303.504689][T20804] ? ima_file_mmap+0x1c4/0x1f0 [ 1303.504733][T20804] ? __pfx_ima_collect_measurement+0x10/0x10 [ 1303.504767][T20804] ? lock_acquire+0x1cf/0x380 [ 1303.504816][T20804] ? process_measurement+0x5ab/0x2350 [ 1303.504856][T20804] ? is_bad_inode+0xd/0x40 [ 1303.504893][T20804] ? xattr_resolve_name+0x27d/0x3f0 [ 1303.504938][T20804] ? vfs_getxattr_alloc+0xec/0x350 [ 1303.504968][T20804] ? ima_get_hash_algo+0x22d/0x400 [ 1303.505004][T20804] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 1303.505046][T20804] ? process_measurement+0xdfe/0x2350 [ 1303.505082][T20804] process_measurement+0xdfe/0x2350 [ 1303.505128][T20804] ? stack_trace_save+0x8e/0xc0 [ 1303.505152][T20804] ? __pfx_process_measurement+0x10/0x10 [ 1303.505191][T20804] ? __lock_acquire+0x4a5/0x2630 [ 1303.505222][T20804] ? __kasan_slab_alloc+0x89/0x90 [ 1303.505244][T20804] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1303.505281][T20804] ? init_file+0x95/0x480 [ 1303.505306][T20804] ? alloc_empty_file+0x73/0x1c0 [ 1303.505335][T20804] ? alloc_file_pseudo+0x13a/0x230 [ 1303.505365][T20804] ? ksys_mmap_pgoff+0x232/0x650 [ 1303.505389][T20804] ? __x64_sys_mmap+0x125/0x190 [ 1303.505424][T20804] ? do_syscall_64+0x106/0xf80 [ 1303.505485][T20804] ? __pfx_aa_file_perm+0x10/0x10 [ 1303.505526][T20804] ima_file_mmap+0x1c4/0x1f0 [ 1303.505565][T20804] ? __pfx_ima_file_mmap+0x10/0x10 [ 1303.505611][T20804] security_mmap_file+0x278/0x9b0 [ 1303.505643][T20804] vm_mmap_pgoff+0xec/0x470 [ 1303.505674][T20804] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1303.505700][T20804] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1303.505733][T20804] ? hugetlbfs_get_inode+0x36e/0x750 [ 1303.505775][T20804] ksys_mmap_pgoff+0x273/0x650 [ 1303.505803][T20804] ? __x64_sys_futex+0x358/0x4d0 [ 1303.505838][T20804] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1303.505865][T20804] ? xfd_validate_state+0x129/0x190 [ 1303.505907][T20804] __x64_sys_mmap+0x125/0x190 [ 1303.505946][T20804] do_syscall_64+0x106/0xf80 [ 1303.505979][T20804] ? clear_bhb_loop+0x40/0x90 [ 1303.506011][T20804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1303.506036][T20804] RIP: 0033:0x7fcff279c799 [ 1303.506058][T20804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1303.506082][T20804] RSP: 002b:00007fcff09f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1303.506106][T20804] RAX: ffffffffffffffda RBX: 00007fcff2a15fa0 RCX: 00007fcff279c799 [ 1303.506124][T20804] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 1303.506140][T20804] RBP: 00007fcff2832c99 R08: 0000000000000401 R09: 0000300000040000 [ 1303.506156][T20804] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1303.506172][T20804] R13: 00007fcff2a16038 R14: 00007fcff2a15fa0 R15: 00007fff1b5010b8 [ 1303.506206][T20804] [ 1303.512584][ T29] audit: type=1800 audit(4294972082.493:38): pid=20804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3393" name="anon_hugepage" dev="hugetlbfs" ino=170844 res=0 errno=0 [ 1304.892392][T20823] netlink: 'syz.5.3399': attribute type 8 has an invalid length. [ 1305.087548][T20673] ------------[ cut here ]------------ [ 1305.093224][T20673] ODEBUG: free active (active state 0) object: ffff88805bafd460 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0 [ 1305.106860][T20673] WARNING: lib/debugobjects.c:629 at debug_print_object+0x18e/0x2a0, CPU#0: syz.8.3352/20673 [ 1305.117570][T20673] Modules linked in: [ 1305.121637][T20673] CPU: 0 UID: 0 PID: 20673 Comm: syz.8.3352 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1305.134526][T20673] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1305.141867][T20673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1305.152398][T20673] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 1305.159883][T20673] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 82 3f e8 0b 41 56 48 8b 14 dd 60 15 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 2c de dd 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 1305.180390][T20673] RSP: 0018:ffffc90005e27748 EFLAGS: 00010246 [ 1305.187668][T20673] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 1305.196258][T20673] RDX: ffffffff8c1b14a0 RSI: ffffffff8c1b10c0 RDI: ffffffff90e44e30 [ 1305.204378][T20673] RBP: 0000000000000001 R08: ffff88805bafd460 R09: ffffffff8bb2b8a0 [ 1305.212384][T20673] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1b10c0 [ 1305.220494][T20673] R13: ffffffff8bb2b8e0 R14: ffffffff8a962a30 R15: ffffc90005e27848 [ 1305.229725][T20673] FS: 0000000000000000(0000) GS:ffff88812434c000(0000) knlGS:0000000000000000 [ 1305.239837][T20673] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1305.246524][T20673] CR2: 00007fcff35456b8 CR3: 0000000048f1c000 CR4: 00000000003526f0 [ 1305.254607][T20673] Call Trace: [ 1305.258137][T20673] [ 1305.261083][T20673] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 1305.266777][T20673] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1305.272619][T20673] debug_check_no_obj_freed+0x4da/0x630 [ 1305.278291][T20673] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1305.284993][T20673] ? __page_table_check_zero+0x333/0x410 [ 1305.290666][T20673] ? __page_table_check_zero+0x338/0x410 [ 1305.296664][T20673] __free_frozen_pages+0x392/0x10d0 [ 1305.301970][T20673] hci_release_dev+0x4ef/0x630 [ 1305.306852][T20673] ? __pfx_hci_release_dev+0x10/0x10 [ 1305.312164][T20673] ? device_release+0x69/0x240 [ 1305.317127][T20673] ? rcu_is_watching+0x12/0xc0 [ 1305.321925][T20673] ? device_release+0x69/0x240 [ 1305.326807][T20673] ? kfree+0x2ec/0x6b0 [ 1305.332092][T20673] bt_host_release+0x6a/0xb0 [ 1305.337537][T20673] ? __pfx_bt_host_release+0x10/0x10 [ 1305.342868][T20673] device_release+0xa4/0x240 [ 1305.347595][T20673] kobject_put+0x1f7/0x640 [ 1305.352083][T20673] put_device+0x1f/0x30 [ 1305.356328][T20673] vhci_release+0x185/0x230 [ 1305.361088][T20673] ? __pfx_vhci_release+0x10/0x10 [ 1305.366359][T20673] __fput+0x3ff/0xb40 [ 1305.370378][T20673] task_work_run+0x150/0x240 [ 1305.375083][T20673] ? __pfx_task_work_run+0x10/0x10 [ 1305.380229][T20673] ? free_uts_ns+0x16e/0x330 [ 1305.385434][T20673] do_exit+0x8b8/0x2b60 [ 1305.389660][T20673] ? __pfx_do_exit+0x10/0x10 [ 1305.394942][T20673] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1305.401110][T20673] do_group_exit+0xd5/0x2a0 [ 1305.405757][T20673] get_signal+0x1ec7/0x21e0 [ 1305.410296][T20673] ? __pfx_get_signal+0x10/0x10 [ 1305.415251][T20673] ? bad_area_access_error+0xab/0x1d0 [ 1305.420733][T20673] ? fixup_vdso_exception+0x2d1/0x370 [ 1305.426231][T20673] arch_do_signal_or_restart+0x91/0x770 [ 1305.433113][T20673] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1305.440110][T20673] ? do_user_addr_fault+0x8d6/0x12f0 [ 1305.445557][T20673] irqentry_exit+0x1f8/0x670 [ 1305.450219][T20673] asm_exc_page_fault+0x26/0x30 [ 1305.455163][T20673] RIP: 0033:0x1000 [ 1305.458905][T20673] Code: Unable to access opcode bytes at 0xfd6. [ 1305.465434][T20673] RSP: 002b:0000000000000028 EFLAGS: 00010246 [ 1305.471610][T20673] RAX: 0000000000000000 RBX: 00007fa7c2415fa0 RCX: 00007fa7c219c799 [ 1305.479936][T20673] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000004000000 [ 1305.488591][T20673] RBP: 00007fa7c2232c99 R08: 0000000000000000 R09: 0000000000000000 [ 1305.496966][T20673] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1305.505051][T20673] R13: 00007fa7c2416038 R14: 00007fa7c2415fa0 R15: 00007ffca473cb58 [ 1305.513065][T20673] [ 1305.516224][T20673] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1305.523615][T20673] CPU: 0 UID: 0 PID: 20673 Comm: syz.8.3352 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1305.534574][T20673] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1305.539778][T20673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1305.549844][T20673] Call Trace: [ 1305.553136][T20673] [ 1305.556111][T20673] dump_stack_lvl+0x100/0x190 [ 1305.560840][T20673] vpanic+0x552/0x970 [ 1305.564854][T20673] ? __pfx_vpanic+0x10/0x10 [ 1305.569402][T20673] panic+0xd1/0xe0 [ 1305.573171][T20673] ? __pfx_panic+0x10/0x10 [ 1305.577616][T20673] ? check_panic_on_warn+0x1f/0x90 [ 1305.582756][T20673] check_panic_on_warn.cold+0x19/0x34 [ 1305.588147][T20673] ? debug_print_object+0x18e/0x2a0 [ 1305.593399][T20673] __warn.cold+0x191/0x348 [ 1305.597896][T20673] __report_bug+0x296/0x3d0 [ 1305.602454][T20673] ? debug_print_object+0x18e/0x2a0 [ 1305.607733][T20673] ? __pfx___report_bug+0x10/0x10 [ 1305.612813][T20673] ? __lock_acquire+0x4a5/0x2630 [ 1305.617815][T20673] report_bug_entry+0xe1/0x290 [ 1305.622614][T20673] ? debug_print_object+0x19b/0x2a0 [ 1305.627842][T20673] handle_bug+0x1cd/0x2a0 [ 1305.632308][T20673] exc_invalid_op+0x17/0x50 [ 1305.636881][T20673] asm_exc_invalid_op+0x1a/0x20 [ 1305.641771][T20673] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 1305.647698][T20673] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 82 3f e8 0b 41 56 48 8b 14 dd 60 15 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 2c de dd 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 1305.667343][T20673] RSP: 0018:ffffc90005e27748 EFLAGS: 00010246 [ 1305.673515][T20673] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 1305.681498][T20673] RDX: ffffffff8c1b14a0 RSI: ffffffff8c1b10c0 RDI: ffffffff90e44e30 [ 1305.689488][T20673] RBP: 0000000000000001 R08: ffff88805bafd460 R09: ffffffff8bb2b8a0 [ 1305.697489][T20673] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1b10c0 [ 1305.705472][T20673] R13: ffffffff8bb2b8e0 R14: ffffffff8a962a30 R15: ffffc90005e27848 [ 1305.713465][T20673] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 1305.718968][T20673] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 1305.724470][T20673] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1305.730329][T20673] debug_check_no_obj_freed+0x4da/0x630 [ 1305.735926][T20673] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1305.742027][T20673] ? __page_table_check_zero+0x333/0x410 [ 1305.747702][T20673] ? __page_table_check_zero+0x338/0x410 [ 1305.753393][T20673] __free_frozen_pages+0x392/0x10d0 [ 1305.758638][T20673] hci_release_dev+0x4ef/0x630 [ 1305.763447][T20673] ? __pfx_hci_release_dev+0x10/0x10 [ 1305.768754][T20673] ? device_release+0x69/0x240 [ 1305.773549][T20673] ? rcu_is_watching+0x12/0xc0 [ 1305.778347][T20673] ? device_release+0x69/0x240 [ 1305.783150][T20673] ? kfree+0x2ec/0x6b0 [ 1305.787262][T20673] bt_host_release+0x6a/0xb0 [ 1305.791880][T20673] ? __pfx_bt_host_release+0x10/0x10 [ 1305.797194][T20673] device_release+0xa4/0x240 [ 1305.801814][T20673] kobject_put+0x1f7/0x640 [ 1305.806293][T20673] put_device+0x1f/0x30 [ 1305.810473][T20673] vhci_release+0x185/0x230 [ 1305.814998][T20673] ? __pfx_vhci_release+0x10/0x10 [ 1305.820044][T20673] __fput+0x3ff/0xb40 [ 1305.824087][T20673] task_work_run+0x150/0x240 [ 1305.828729][T20673] ? __pfx_task_work_run+0x10/0x10 [ 1305.833876][T20673] ? free_uts_ns+0x16e/0x330 [ 1305.838541][T20673] do_exit+0x8b8/0x2b60 [ 1305.842763][T20673] ? __pfx_do_exit+0x10/0x10 [ 1305.847393][T20673] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1305.853439][T20673] do_group_exit+0xd5/0x2a0 [ 1305.857998][T20673] get_signal+0x1ec7/0x21e0 [ 1305.862532][T20673] ? __pfx_get_signal+0x10/0x10 [ 1305.867406][T20673] ? bad_area_access_error+0xab/0x1d0 [ 1305.872822][T20673] ? fixup_vdso_exception+0x2d1/0x370 [ 1305.878254][T20673] arch_do_signal_or_restart+0x91/0x770 [ 1305.883940][T20673] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1305.890143][T20673] ? do_user_addr_fault+0x8d6/0x12f0 [ 1305.895478][T20673] irqentry_exit+0x1f8/0x670 [ 1305.900186][T20673] asm_exc_page_fault+0x26/0x30 [ 1305.905145][T20673] RIP: 0033:0x1000 [ 1305.908877][T20673] Code: Unable to access opcode bytes at 0xfd6. [ 1305.915127][T20673] RSP: 002b:0000000000000028 EFLAGS: 00010246 [ 1305.921209][T20673] RAX: 0000000000000000 RBX: 00007fa7c2415fa0 RCX: 00007fa7c219c799 [ 1305.929202][T20673] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000004000000 [ 1305.937190][T20673] RBP: 00007fa7c2232c99 R08: 0000000000000000 R09: 0000000000000000 [ 1305.945172][T20673] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1305.953241][T20673] R13: 00007fa7c2416038 R14: 00007fa7c2415fa0 R15: 00007ffca473cb58 [ 1305.961360][T20673] [ 1305.964478][T20673] Kernel Offset: disabled [ 1305.968842][T20673] Rebooting in 86400 seconds..